last executing test programs: 9.448586354s ago: executing program 2 (id=544): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x6, 0x5, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x80, 0x0, 0x8}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x4, 0x1}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_SRC={0x8, 0x2, @empty}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) 9.424322564s ago: executing program 3 (id=545): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x8a) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, &(0x7f0000001040)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 9.313311136s ago: executing program 2 (id=546): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x2, {0x1, 0x0, 0x0, 0x4, 0x8000, 0x3ff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x22, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r4], 0x48) setreuid(0xee01, 0xee01) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x120, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x2d6, &(0x7f00000004c0)="$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") socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000003c0)='thermal_power_devfreq_get_power\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14"], 0x18, 0x200040d0}, 0x0) 8.798940534s ago: executing program 1 (id=549): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.699120546s ago: executing program 4 (id=550): r0 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x5, 0x558b, &(0x7f00000079c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xabe, 0x800000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x65}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) epoll_create(0x2) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000100009041a0000400000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c0001fe0f000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRESHEX], 0xb4}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, 0xd6, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x5e, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 8.484808239s ago: executing program 3 (id=551): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000040)={0x8000000000000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120141014813a83253afbcfe66e0f4bbab442024040075ee69010203c50902240001000010000904b80702364cf4053a00000200020d000604000000000000001078b920ea23976ad17329cc2d2a31d26ca481310268d27e36cb718f01ecb95fe48519c4cdd2eef65ad2f2478dbfabb4b7780a4a0930198e17"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000a40)={0x18, &(0x7f00000007c0)={0x0, 0x14, 0x4, "aee39745"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="4000130000005eeaf0d4efcb4c42eadc5c0b28d2f82e3a15b00d14d521fd9dde33787af5593c15bfcdbd9aecd83747198ee32dafa5ecfad7d441b4b470cce5f75233a497350d0b9061e50756e9115e2b8101c543f53c57f4e06f3ef37a04352677bf8d0d406e518cc162316e19df4e255e722bf0"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x8001, 0x6, 0x9, 0x5a0, 0xfff9, 0x0, 0x2, 0x6, 0x400, 0x7f, 0x0, 0x7}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x1}, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_getevents(r2, 0x1, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000300)={r4, r5+60000000}) openat$tun(0xffffffffffffff9c, 0x0, 0x1114c1, 0x0) r6 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x451dc0, 0x40) fcntl$setpipe(r0, 0x407, 0x7000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="3eaa000000000000791038000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.210177513s ago: executing program 2 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r3, &(0x7f0000002c40)={0x2020}, 0x2020) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.067624726s ago: executing program 1 (id=554): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x2a, 0xac, 0xb, 0x71}, {0x8, 0x0, 0x7, 0x4}]}, 0x10) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x2c802, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4) 6.067117586s ago: executing program 2 (id=555): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) (async) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.066661436s ago: executing program 2 (id=556): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r0}, 0xe) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 3.980061368s ago: executing program 1 (id=560): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) 3.921633219s ago: executing program 1 (id=561): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x8a) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, &(0x7f0000001040)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 3.848706561s ago: executing program 4 (id=562): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009a00000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000fff2000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 3.815762771s ago: executing program 2 (id=563): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x11c0, 0x5506, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc4, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08000, &(0x7f00000001c0)={[{@acl}, {@user_xattr}]}, 0xfc, 0x480, &(0x7f0000000840)="$eJzs3MlvG1UYAPDP4zhNuoalQBcgbKJiadp0oQcuIJA4gIQEh8ItpGkV6lLUBIlWFSkIlSOqxB1xROIv4AQXBJyQuMIdVapQLi2LxKAZz7TO5sSJU7f17yc5em/m2fO+efPGb96ME0DPGs7+VCI2R8RvWTrJs9elRaGs3LXZ8+N/zZ4fr0SavvFnJV93dfb8eFm2fN/mIrMniUg+rcSuRbY7dfbcybF6feJMkR+ZPvX+yNTZc89Onho7MXFi4r3RI0cOHtj/3OHRQx2Jc0tW150fnd6945W3Lr02fvTSOz9901fWdV4cnTIcw3P2ZbMnOr2xLtvSlK70dbEitKUaEVlz1fL+vy2qcaPxtsXLn3S1csC6StM03br06gspcAerRLdrAHRH+UV/dXYwBtbpOvhWduWFxgVQFve14tVY0xdJUaY27/q2kwaKeZOjF/7+MvL9v6Gn9j8AcPN9l41/nmmMf8pXY81Q3NdUbms+H5wtjbgrIu6OiHsi4t6I2B6Rl70/Ih5oc/vD8/ILx5/J5VUFtkLZ+O/54t7W3PFfMfr7Lx2qFrktMRhDUascn6xP7Cv2yZ6obTg+WR9stY3vX/r186XWDRdjv/KVbb8cCxb1uNy3Ye57jo1Nj60p6CZXPs7nAGcWxn/jzlWW2hERO1fx+dm4efKpr3cvtX75+FvowH2m9KuIJxvtfyFaxD///mTZ4IdHD40MRH1i30h5VCz08y8XX19q+2uKvwOy9t+46PF/Pf6hSvP92qn2t3Hx98+WvKZp4/h/u1ySHf/9lTfzdH+x7MOx6ekz+yP6K68uXD5649PKfFn+yubtEY8t3v+zc1x2jGXx74qI7CB+MCIeioiHi7o/EhGPRv4Ri5m5FhE/vvj4u6uJP1lux3ZA1v7H5rR/LNP+7SeqJ3/4djXxN2TtfzBP7SmWrOT8t9IKrmXfAQAAwO0iyZ+BryR7r6eTZO/eiE353O7GpH56avrp46c/+OdY41n5oagl5UxXYz64MR+6v5gbLvOj8/IHinnjL6qDeX5jce8b6J5Nzf0/n3Bs9P/MH9UuVw5Yf36vBb1rFf2/5QMPwO3D9z/0rjb6v1MF3GFW2qnTda4HcPMt1v9nulAP4OYzqIfepf9D79L/oXfp/9CT1vK7follEjNt796BaFWm/xaJK09EkifSmS5W49/iMbSVFV6/+pT/LWP5wrWi390KLdg60b1zEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQCf9HwAA///ztNvN") preadv(0xffffffffffffffff, &(0x7f0000002100)=[{0x0}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2, 0x4, 0x81) 3.049867023s ago: executing program 3 (id=564): socket$inet(0x2, 0x6, 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="0fe946aaba72744d2cd2dafa664c5b1742ec275fcdf83b10a3dc232669e55fd9cbfa3ccfd8878d687eb5019c96c65eb36ae1790f8a18d2dbc7b7d948d93ffad7c54bdd7d229dd56484a29c55759cec1b0ad3aae071c3334a1990aa885943e96c70d98406163e35d3557fa97f4367e02945f7372bc028834ece9452e4466747a90394dd117cdf9d38cc565b686aa9696aac63c1548bfcdad36c441725eaca7152a50f73c4039e13225188381854b21aa4ae1aaa", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x1010010, &(0x7f0000000100)=ANY=[], 0x1, 0x1501, &(0x7f0000001580)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) write$binfmt_format(r4, &(0x7f0000000000)='1\x00', 0x2400) 2.309031394s ago: executing program 0 (id=565): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x29a}]}) (async, rerun: 32) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)=ANY=[]) (rerun: 32) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.308381514s ago: executing program 1 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r3, &(0x7f0000002c40)={0x2020}, 0x2020) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.308031174s ago: executing program 3 (id=567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x0) read$FUSE(r2, &(0x7f0000000b80)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000100)='mountinfo\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.143119007s ago: executing program 4 (id=568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x109380, 0x1) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000002c0)) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x4f, 0x5, 0x8, 0x4fec, 0x4, 0x8, 0x1, 0x4, 0x2, 0x3, 0x95, 0x400, 0xfff7, 0x8, 0x6, 0xc3, [0x1, 0x9]}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r4, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]}) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.007051578s ago: executing program 0 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000240)={@random="c16d473d990c", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8864, 0x30, 0x0, [], "a9e30205c05481cd37808b64a6b35486f934a965830cfc16bbed02013b48c8ac3f454dec5278a5ddaff09e9ac607652d"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2, {0x10000000}}}}}}}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xffffffffffffffff, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.96386747s ago: executing program 0 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r6, 0x9c3fa077fa966179, 0x70bd26, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4040805}, 0x4000054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="504200003fed415e1ad0c661d3d7a9d780b9775c35879b35001191a20f55f113f1c065e218cb427afe11907631da63e69875c745883465c4040c039743d0fde0c74e99ab1f150264cdd10e63d6e3e2c8ac53a35a8eddf3"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @sched_cls=0x2f, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) 1.90283178s ago: executing program 4 (id=571): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) futex(0x0, 0x2, 0x3d, 0x0, 0x0, 0x8000002) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x109380, 0x1) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000002c0)) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x4f, 0x5, 0x8, 0x4fec, 0x4, 0x8, 0x1, 0x4, 0x2, 0x3, 0x95, 0x400, 0xfff7, 0x8, 0x6, 0xc3, [0x1, 0x9]}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r3, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]}) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.405436418s ago: executing program 3 (id=572): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socket(0x1d, 0x5, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) 1.404607378s ago: executing program 4 (id=573): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) 1.27772084s ago: executing program 4 (id=574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r2, 0xa, 0x13) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x0) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x80000) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, 0x0, 0x0}, 0x20) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = epoll_create1(0x80000) io_setup(0x2, &(0x7f0000002400)=0x0) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000700)=@ethtool_rxfh={0x4b, 0x7, 0x8, 0x1, 0x0, ':K^', 0xd}}) io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000140)={0x2016}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000040801"], 0x14}, 0x1, 0x0, 0x0, 0x4c800}, 0x4008044) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) 1.26540248s ago: executing program 1 (id=575): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x300, 0x8000, 0x8, 0x4be}, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000001}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="010000000008000000001200000007"], 0x1c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0xffff8000, 0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000029c0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1100}]}}}], 0x18}}], 0x1, 0x4000880) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008413, &(0x7f0000000140)={[{@noload}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noblock_validity}]}, 0x0, 0x525, &(0x7f0000000c00)="$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") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x1}, 0x6) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000180)={0xf97cff8c, 0x8}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800000000406d040cc5000000000001090224007d68000000000000000103000000092100000001220700090581031000000000"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "1fbb37a8"}, @global=@item_012={0x1, 0x1, 0x9, 'O'}]}}, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6, 0xd6, 0x5, 0xa}, {0x4c, 0x6, 0x9, 0x3ff}, {0x6, 0x5, 0x2b, 0x6}]}) write$selinux_load(r4, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 1.053295674s ago: executing program 0 (id=576): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4) 1.036350274s ago: executing program 0 (id=577): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x8a) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, &(0x7f0000001040)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 296.698655ms ago: executing program 3 (id=578): socket$inet(0x2, 0x6, 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="0fe946aaba72744d2cd2dafa664c5b1742ec275fcdf83b10a3dc232669e55fd9cbfa3ccfd8878d687eb5019c96c65eb36ae1790f8a18d2dbc7b7d948d93ffad7c54bdd7d229dd56484a29c55759cec1b0ad3aae071c3334a1990aa885943e96c70d98406163e35d3557fa97f4367e02945f7372bc028834ece9452e4466747a90394dd117cdf9d38cc565b686aa9696aac63c1548bfcdad36c441725eaca7152a50f73c4039e13225188381854b21aa4ae1aaa", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x1010010, &(0x7f0000000100)=ANY=[], 0x1, 0x1501, &(0x7f0000001580)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) write$binfmt_format(r4, &(0x7f0000000000)='1\x00', 0x2400) 0s ago: executing program 0 (id=579): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xb67dc99c0debc86, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x3800, 0x80007, 0x11, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x200000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x74, 0x0, 0x0, 0xffffffff}]}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r6}, 0x10) r7 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) kernel console output (not intermixed with test programs): ' with NULL argv: empty string added [ 109.529564][ T1530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=1530 comm=syz.2.295 [ 109.562161][ T1531] loop1: detected capacity change from 0 to 256 [ 109.755327][ T1531] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 109.784156][ T1531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=1531 comm=syz.1.298 [ 110.100296][ T553] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 110.351192][ T553] usb 5-1: Using ep0 maxpacket: 16 [ 110.359872][ T553] usb 5-1: config 0 has an invalid interface number: 160 but max is 0 [ 110.394299][ T553] usb 5-1: config 0 has no interface number 0 [ 110.407021][ T553] usb 5-1: config 0 interface 160 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 110.425730][ T553] usb 5-1: config 0 interface 160 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 110.438934][ T553] usb 5-1: New USB device found, idVendor=07aa, idProduct=0017, bcdDevice=6c.f5 [ 110.448441][ T553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.456578][ T553] usb 5-1: Product: syz [ 110.484598][ T553] usb 5-1: Manufacturer: syz [ 110.489234][ T553] usb 5-1: SerialNumber: syz [ 110.714829][ T1545] overlayfs: missing 'lowerdir' [ 110.802202][ T1546] serio: Serial port ttyS3 [ 111.533785][ T553] usb 5-1: config 0 descriptor?? [ 111.540612][ T1533] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.563412][ T1533] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.630445][ T1556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=1556 comm=syz.3.307 [ 111.990671][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 111.990711][ T28] audit: type=1400 audit(2000000005.040:707): avc: denied { write } for pid=1563 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 112.774987][ T1533] xt_CT: No such helper "snmp_trap" [ 112.799647][ T28] audit: type=1400 audit(2000000005.230:708): avc: denied { ioctl } for pid=1560 comm="syz.0.309" path="socket:[21037]" dev="sockfs" ino=21037 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.828145][ T28] audit: type=1400 audit(2000000005.230:709): avc: denied { mount } for pid=1560 comm="syz.0.309" name="/" dev="ramfs" ino=21038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 112.832178][ T1580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=1580 comm=syz.3.313 [ 112.873235][ T1581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.882845][ T1577] 9pnet: Could not find request transport: fd-: [ 112.889300][ T28] audit: type=1326 audit(2000000005.620:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1550 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 112.913468][ T1581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.940915][ T28] audit: type=1326 audit(2000000005.620:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1550 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 113.425379][ T1586] loop1: detected capacity change from 0 to 256 [ 113.457086][ T1586] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 113.487716][ T1586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=1586 comm=syz.1.316 [ 113.589283][ T1533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.300'. [ 114.063176][ T1533] loop4: detected capacity change from 0 to 512 [ 114.121095][ T1533] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 114.130397][ T1533] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.165947][ T28] audit: type=1400 audit(2000000007.410:712): avc: denied { write } for pid=1532 comm="syz.4.300" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.192740][ T28] audit: type=1400 audit(2000000007.430:713): avc: denied { add_name } for pid=1532 comm="syz.4.300" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.217450][ T28] audit: type=1400 audit(2000000007.430:714): avc: denied { read write } for pid=1532 comm="syz.4.300" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.241444][ T28] audit: type=1400 audit(2000000007.430:715): avc: denied { open } for pid=1532 comm="syz.4.300" path="/55/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.264375][ T28] audit: type=1400 audit(2000000007.440:716): avc: denied { setattr } for pid=1532 comm="syz.4.300" path="/55/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.289465][ T553] asix 5-1:0.160 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 114.301262][ T553] asix: probe of 5-1:0.160 failed with error -71 [ 114.312235][ T553] usb 5-1: USB disconnect, device number 6 [ 114.620481][ T39] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 115.113655][ T1604] overlayfs: missing 'lowerdir' [ 115.130281][ T1604] serio: Serial port ttyS3 [ 115.134904][ T1609] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.142170][ T1609] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.441728][ T289] EXT4-fs (loop4): unmounting filesystem. [ 116.461387][ T1614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=1614 comm=syz.2.323 [ 116.698541][ T1627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 116.707943][ T1626] bridge0: port 3(gretap0) entered disabled state [ 116.714576][ T1626] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.721999][ T1626] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.049456][ T1628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=1628 comm=syz.0.328 [ 117.366130][ T1627] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 117.375942][ T1627] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 117.658194][ T1631] FAULT_INJECTION: forcing a failure. [ 117.658194][ T1631] name failslab, interval 1, probability 0, space 0, times 0 [ 117.748433][ T1631] CPU: 0 PID: 1631 Comm: syz.1.329 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 117.758203][ T1631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.768277][ T1631] Call Trace: [ 117.771570][ T1631] [ 117.774513][ T1631] __dump_stack+0x21/0x24 [ 117.778866][ T1631] dump_stack_lvl+0xee/0x150 [ 117.783468][ T1631] ? __cfi_dump_stack_lvl+0x8/0x8 [ 117.788511][ T1631] dump_stack+0x15/0x24 [ 117.792680][ T1631] should_fail_ex+0x3d4/0x520 [ 117.797374][ T1631] ? vm_area_alloc+0x24/0x1a0 [ 117.802063][ T1631] __should_failslab+0xac/0xf0 [ 117.806839][ T1631] should_failslab+0x9/0x20 [ 117.811357][ T1631] kmem_cache_alloc+0x3b/0x330 [ 117.816143][ T1631] vm_area_alloc+0x24/0x1a0 [ 117.820658][ T1631] mmap_region+0xf7d/0x2140 [ 117.825176][ T1631] ? __cfi_mmap_region+0x10/0x10 [ 117.830118][ T1631] ? kasan_set_track+0x60/0x70 [ 117.834891][ T1631] ? cap_mmap_addr+0x165/0x2e0 [ 117.839668][ T1631] ? __se_sys_memfd_create+0x339/0x3b0 [ 117.845142][ T1631] ? __x64_sys_memfd_create+0x5b/0x70 [ 117.850544][ T1631] ? x64_sys_call+0x235/0x9a0 [ 117.855238][ T1631] ? get_unmapped_area+0x313/0x380 [ 117.860362][ T1631] do_mmap+0x7ae/0xcf0 [ 117.864457][ T1631] ? __cfi_do_mmap+0x10/0x10 [ 117.869057][ T1631] vm_mmap_pgoff+0x1f5/0x3f0 [ 117.873666][ T1631] ? ____kasan_slab_free+0x13d/0x180 [ 117.878958][ T1631] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 117.884084][ T1631] ? __se_sys_memfd_create+0x339/0x3b0 [ 117.889554][ T1631] ? __kmem_cache_free+0xb7/0x1b0 [ 117.894585][ T1631] ksys_mmap_pgoff+0xf6/0x1d0 [ 117.899275][ T1631] __x64_sys_mmap+0xfa/0x110 [ 117.904658][ T1631] x64_sys_call+0x8fd/0x9a0 [ 117.909184][ T1631] do_syscall_64+0x4c/0xa0 [ 117.913617][ T1631] ? clear_bhb_loop+0x15/0x70 [ 117.918303][ T1631] ? clear_bhb_loop+0x15/0x70 [ 117.922985][ T1631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.928899][ T1631] RIP: 0033:0x7f8e40d8e963 [ 117.933323][ T1631] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 117.952943][ T1631] RSP: 002b:00007f8e41c03e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 117.961374][ T1631] RAX: ffffffffffffffda RBX: 00000000000001eb RCX: 00007f8e40d8e963 [ 117.969361][ T1631] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 117.977356][ T1631] RBP: 0000200000000542 R08: 00000000ffffffff R09: 0000000000000000 [ 117.985341][ T1631] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 117.993328][ T1631] R13: 00007f8e41c03ef0 R14: 00007f8e41c03eb0 R15: 0000200000002ac0 [ 118.001405][ T1631] [ 118.008378][ T1640] loop2: detected capacity change from 0 to 256 [ 118.043624][ T1640] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 118.062181][ T39] usb 3-1: device not accepting address 8, error -71 [ 118.068989][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 118.069003][ T28] audit: type=1400 audit(2000000011.310:718): avc: denied { read } for pid=1638 comm="syz.4.334" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.222307][ T28] audit: type=1400 audit(2000000011.470:719): avc: denied { create } for pid=1632 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.242716][ T28] audit: type=1400 audit(2000000011.470:720): avc: denied { shutdown } for pid=1632 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.397768][ T1650] netlink: 'syz.4.334': attribute type 4 has an invalid length. [ 118.474651][ T1650] loop4: detected capacity change from 0 to 256 [ 118.628766][ T1651] loop1: detected capacity change from 0 to 256 [ 118.786010][ T28] audit: type=1400 audit(2000000012.030:721): avc: denied { mount } for pid=1647 comm="syz.1.336" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 118.810437][ T62] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 118.818228][ T28] audit: type=1400 audit(2000000012.060:722): avc: denied { mounton } for pid=1647 comm="syz.1.336" path="/56/file0/file0" dev="loop1" ino=1048645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 118.951480][ T28] audit: type=1400 audit(2000000012.200:723): avc: denied { mount } for pid=1656 comm="syz.4.339" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 119.025492][ T1661] overlayfs: missing 'lowerdir' [ 119.032939][ T1661] serio: Serial port ttyS3 [ 119.076678][ T1662] loop4: detected capacity change from 0 to 512 [ 119.106587][ T62] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.678744][ T62] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.688698][ T62] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.695354][ T62] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 119.717032][ T28] audit: type=1400 audit(2000000012.950:724): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 119.747168][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.770992][ T62] usb 4-1: config 0 descriptor?? [ 119.804698][ T388] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.877183][ T28] audit: type=1400 audit(2000000013.120:725): avc: denied { mount } for pid=1670 comm="syz.2.341" name="/" dev="configfs" ino=14400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 119.962015][ T1671] loop2: detected capacity change from 0 to 512 [ 120.013881][ T28] audit: type=1400 audit(2000000013.150:726): avc: denied { search } for pid=1670 comm="syz.2.341" name="/" dev="configfs" ino=14400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.225514][ T28] audit: type=1400 audit(2000000013.150:727): avc: denied { read } for pid=1670 comm="syz.2.341" name="/" dev="configfs" ino=14400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.403199][ T1676] FAULT_INJECTION: forcing a failure. [ 120.403199][ T1676] name failslab, interval 1, probability 0, space 0, times 0 [ 120.416554][ T1676] CPU: 0 PID: 1676 Comm: syz.2.342 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 120.426292][ T1676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.436357][ T1676] Call Trace: [ 120.439639][ T1676] [ 120.442576][ T1676] __dump_stack+0x21/0x24 [ 120.446928][ T1676] dump_stack_lvl+0xee/0x150 [ 120.451536][ T1676] ? __cfi_dump_stack_lvl+0x8/0x8 [ 120.456576][ T1676] ? preempt_schedule_irq+0xbb/0x110 [ 120.461893][ T1676] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 120.467637][ T1676] dump_stack+0x15/0x24 [ 120.471841][ T1676] should_fail_ex+0x3d4/0x520 [ 120.476535][ T1676] __should_failslab+0xac/0xf0 [ 120.481308][ T1676] ? audit_log_d_path+0xc6/0x240 [ 120.486260][ T1676] should_failslab+0x9/0x20 [ 120.490780][ T1676] __kmem_cache_alloc_node+0x3d/0x2c0 [ 120.496169][ T1676] ? audit_log_d_path+0xc6/0x240 [ 120.501125][ T1676] kmalloc_trace+0x29/0xb0 [ 120.505556][ T1676] audit_log_d_path+0xc6/0x240 [ 120.510336][ T1676] audit_log_d_path_exe+0x42/0x70 [ 120.515378][ T1676] audit_log_task+0x205/0x2e0 [ 120.520062][ T1676] ? irqentry_exit+0x37/0x40 [ 120.524676][ T1676] ? audit_core_dumps+0x110/0x110 [ 120.529804][ T1676] ? migrate_enable+0x19c/0x280 [ 120.534663][ T1676] ? __cfi_migrate_enable+0x10/0x10 [ 120.539867][ T1676] audit_seccomp+0x7f/0x160 [ 120.544387][ T1676] __seccomp_filter+0xacd/0x19d0 [ 120.549336][ T1676] ? __secure_computing+0x290/0x290 [ 120.554545][ T1676] ? finish_task_switch+0x16b/0x7b0 [ 120.559760][ T1676] ? __switch_to_asm+0x3a/0x60 [ 120.564541][ T1676] ? __schedule+0xb8f/0x14e0 [ 120.569236][ T1676] ? ____kasan_slab_free+0x13d/0x180 [ 120.574534][ T1676] ? __this_cpu_preempt_check+0x13/0x20 [ 120.580102][ T1676] ? xfd_validate_state+0x70/0x150 [ 120.585238][ T1676] __secure_computing+0xea/0x290 [ 120.590185][ T1676] syscall_trace_enter+0xaa/0x150 [ 120.595219][ T1676] syscall_enter_from_user_mode+0x1f/0x30 [ 120.600949][ T1676] do_syscall_64+0x24/0xa0 [ 120.605376][ T1676] ? clear_bhb_loop+0x15/0x70 [ 120.610062][ T1676] ? clear_bhb_loop+0x15/0x70 [ 120.614752][ T1676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.620672][ T1676] RIP: 0033:0x7fdfa8f8e963 [ 120.625104][ T1676] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 120.644719][ T1676] RSP: 002b:00007fdfa9d78e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 120.653146][ T1676] RAX: ffffffffffffffda RBX: 0000000000000773 RCX: 00007fdfa8f8e963 [ 120.661128][ T1676] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 120.669111][ T1676] RBP: 0000200000001182 R08: 00000000ffffffff R09: 0000000000000000 [ 120.677101][ T1676] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 120.685080][ T1676] R13: 00007fdfa9d78ef0 R14: 00007fdfa9d78eb0 R15: 00002000000003c0 [ 120.693071][ T1676] [ 121.086955][ T1676] loop2: detected capacity change from 0 to 2048 [ 121.153641][ T62] usbhid 4-1:0.0: can't add hid device: -71 [ 121.160782][ T62] usbhid: probe of 4-1:0.0 failed with error -71 [ 121.178947][ T62] usb 4-1: USB disconnect, device number 3 [ 121.209244][ T1676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 121.249473][ T1676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 121.278691][ T1676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 121.403523][ T1693] fuse: Invalid rootmode [ 121.485509][ T285] EXT4-fs (loop2): unmounting filesystem. [ 121.527473][ T1706] loop2: detected capacity change from 0 to 1024 [ 121.554740][ T1706] EXT4-fs: Ignoring removed bh option [ 121.614204][ T1708] netlink: 44 bytes leftover after parsing attributes in process `syz.3.350'. [ 121.672255][ T1706] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.799176][ T1710] loop1: detected capacity change from 0 to 512 [ 121.812972][ T1706] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 121.960441][ T1706] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 121.970115][ T1706] EXT4-fs (loop2): failed to open journal device unknown-block(0,5) -6 [ 122.080319][ T1706] loop2: detected capacity change from 0 to 1024 [ 122.092565][ T1706] EXT4-fs: Ignoring removed orlov option [ 122.137418][ T1706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.156507][ T1717] loop4: detected capacity change from 0 to 16 [ 122.189885][ T1717] erofs: (device loop4): mounted with root inode @ nid 36. [ 122.233564][ T285] EXT4-fs (loop2): unmounting filesystem. [ 122.400665][ T1723] loop4: detected capacity change from 0 to 512 [ 122.440979][ T1723] EXT4-fs (loop4): 1 orphan inode deleted [ 122.446748][ T1723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.460481][ T1723] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.472841][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6825: comm kworker/u4:0: Failed to release dquot type 1 [ 122.934123][ T289] EXT4-fs (loop4): unmounting filesystem. [ 123.317129][ T1742] FAULT_INJECTION: forcing a failure. [ 123.317129][ T1742] name failslab, interval 1, probability 0, space 0, times 0 [ 123.329969][ T1742] CPU: 1 PID: 1742 Comm: syz.3.360 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 123.339700][ T1742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.349770][ T1742] Call Trace: [ 123.353072][ T1742] [ 123.356027][ T1742] __dump_stack+0x21/0x24 [ 123.360382][ T1742] dump_stack_lvl+0xee/0x150 [ 123.364988][ T1742] ? __cfi_dump_stack_lvl+0x8/0x8 [ 123.370123][ T1742] dump_stack+0x15/0x24 [ 123.374308][ T1742] should_fail_ex+0x3d4/0x520 [ 123.379003][ T1742] __should_failslab+0xac/0xf0 [ 123.383774][ T1742] ? kvmalloc_node+0x294/0x480 [ 123.388555][ T1742] should_failslab+0x9/0x20 [ 123.393076][ T1742] __kmem_cache_alloc_node+0x3d/0x2c0 [ 123.398468][ T1742] ? kasan_save_alloc_info+0x25/0x30 [ 123.403859][ T1742] ? kvmalloc_node+0x294/0x480 [ 123.408643][ T1742] __kmalloc_node+0xa1/0x1e0 [ 123.413337][ T1742] kvmalloc_node+0x294/0x480 [ 123.417947][ T1742] ? sysvec_reschedule_ipi+0x78/0x80 [ 123.423242][ T1742] ? __cfi_kvmalloc_node+0x10/0x10 [ 123.428366][ T1742] ? memset+0x35/0x40 [ 123.432370][ T1742] alloc_netdev_mqs+0xa23/0xf90 [ 123.437244][ T1742] rtnl_create_link+0x319/0xb10 [ 123.442117][ T1742] rtnl_newlink+0x13b1/0x2030 [ 123.446850][ T1742] ? memcpy+0x56/0x70 [ 123.450856][ T1742] ? __cfi_rtnl_newlink+0x10/0x10 [ 123.455898][ T1742] ? selinux_capable+0x29c/0x380 [ 123.461284][ T1742] ? __cfi_selinux_capable+0x10/0x10 [ 123.466583][ T1742] ? asm_sysvec_call_function_single+0x1b/0x20 [ 123.472754][ T1742] ? __cfi_cap_capable+0x10/0x10 [ 123.477710][ T1742] ? __cfi_mutex_lock+0x10/0x10 [ 123.482577][ T1742] ? ns_capable+0x8c/0xf0 [ 123.486923][ T1742] ? netlink_net_capable+0x125/0x160 [ 123.492226][ T1742] ? __cfi_rtnl_newlink+0x10/0x10 [ 123.497271][ T1742] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 123.502225][ T1742] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 123.507705][ T1742] ? memcpy+0x56/0x70 [ 123.511707][ T1742] ? avc_has_perm_noaudit+0x2f4/0x460 [ 123.517099][ T1742] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 123.522833][ T1742] ? __cfi_push_rt_tasks+0x10/0x10 [ 123.527956][ T1742] ? __cfi_push_rt_tasks+0x10/0x10 [ 123.533078][ T1742] ? avc_has_perm+0x158/0x240 [ 123.537858][ T1742] ? __cfi_avc_has_perm+0x10/0x10 [ 123.542898][ T1742] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 123.548290][ T1742] netlink_rcv_skb+0x1f2/0x440 [ 123.553077][ T1742] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 123.558543][ T1742] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 123.563842][ T1742] ? __netlink_lookup+0x387/0x3b0 [ 123.568895][ T1742] rtnetlink_rcv+0x1c/0x20 [ 123.573333][ T1742] netlink_unicast+0x8b1/0xa30 [ 123.578114][ T1742] netlink_sendmsg+0x8aa/0xbc0 [ 123.582896][ T1742] ? irqentry_exit+0x37/0x40 [ 123.587505][ T1742] ? __cfi_netlink_sendmsg+0x10/0x10 [ 123.592809][ T1742] ? security_socket_sendmsg+0x93/0xb0 [ 123.598292][ T1742] ? __cfi_netlink_sendmsg+0x10/0x10 [ 123.603594][ T1742] ____sys_sendmsg+0x5a9/0x990 [ 123.608394][ T1742] ? __sys_sendmsg_sock+0x40/0x40 [ 123.613448][ T1742] ? import_iovec+0x7c/0xb0 [ 123.617980][ T1742] ___sys_sendmsg+0x21c/0x290 [ 123.622680][ T1742] ? __sys_sendmsg+0x270/0x270 [ 123.627482][ T1742] ? __fdget+0x19c/0x220 [ 123.631751][ T1742] __x64_sys_sendmsg+0x1f0/0x2c0 [ 123.636709][ T1742] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 123.642187][ T1742] ? __kasan_check_write+0x14/0x20 [ 123.647333][ T1742] ? fpregs_restore_userregs+0x128/0x260 [ 123.653031][ T1742] ? switch_fpu_return+0xe/0x10 [ 123.657903][ T1742] x64_sys_call+0x171/0x9a0 [ 123.662514][ T1742] do_syscall_64+0x4c/0xa0 [ 123.666947][ T1742] ? clear_bhb_loop+0x15/0x70 [ 123.671646][ T1742] ? clear_bhb_loop+0x15/0x70 [ 123.676342][ T1742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.682266][ T1742] RIP: 0033:0x7f863b58e929 [ 123.686696][ T1742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.706311][ T1742] RSP: 002b:00007f863c3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.714743][ T1742] RAX: ffffffffffffffda RBX: 00007f863b7b6160 RCX: 00007f863b58e929 [ 123.722727][ T1742] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000009 [ 123.730797][ T1742] RBP: 00007f863c3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.738785][ T1742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.746784][ T1742] R13: 0000000000000000 R14: 00007f863b7b6160 R15: 00007ffde2042ec8 [ 123.754783][ T1742] [ 123.866454][ T1741] loop4: detected capacity change from 0 to 2048 [ 123.931696][ T1741] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 124.136762][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 124.136778][ T28] audit: type=1326 audit(2000000017.380:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1753 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 124.167592][ T1754] FAULT_INJECTION: forcing a failure. [ 124.167592][ T1754] name failslab, interval 1, probability 0, space 0, times 0 [ 124.181150][ T1754] CPU: 1 PID: 1754 Comm: syz.1.364 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 124.190891][ T1754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.200957][ T1754] Call Trace: [ 124.204249][ T1754] [ 124.207190][ T1754] __dump_stack+0x21/0x24 [ 124.210657][ T28] audit: type=1326 audit(2000000017.410:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1753 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 124.211538][ T1754] dump_stack_lvl+0xee/0x150 [ 124.239302][ T1754] ? __cfi_dump_stack_lvl+0x8/0x8 [ 124.244424][ T1754] dump_stack+0x15/0x24 [ 124.248583][ T1754] should_fail_ex+0x3d4/0x520 [ 124.253259][ T1754] ? audit_log_start+0x3a4/0x8b0 [ 124.258198][ T1754] __should_failslab+0xac/0xf0 [ 124.262958][ T1754] should_failslab+0x9/0x20 [ 124.267468][ T1754] kmem_cache_alloc+0x3b/0x330 [ 124.272230][ T1754] audit_log_start+0x3a4/0x8b0 [ 124.276999][ T1754] ? __cfi_audit_log_start+0x10/0x10 [ 124.282280][ T1754] ? audit_log_end+0x1eb/0x240 [ 124.287040][ T1754] ? kmem_cache_free+0x12d/0x300 [ 124.291972][ T1754] ? migrate_enable+0x19c/0x280 [ 124.296821][ T1754] ? __cfi_migrate_enable+0x10/0x10 [ 124.302015][ T1754] audit_seccomp+0x62/0x160 [ 124.306512][ T1754] ? migrate_disable+0xd6/0x180 [ 124.311360][ T1754] __seccomp_filter+0xacd/0x19d0 [ 124.316294][ T1754] ? __secure_computing+0x290/0x290 [ 124.321487][ T1754] ? __kasan_check_write+0x14/0x20 [ 124.326601][ T1754] ? mutex_unlock+0x89/0x220 [ 124.331189][ T1754] ? __cfi_mutex_unlock+0x10/0x10 [ 124.336206][ T1754] ? ksys_write+0x1eb/0x240 [ 124.340707][ T1754] ? __cfi_ksys_write+0x10/0x10 [ 124.345578][ T1754] __secure_computing+0xea/0x290 [ 124.350514][ T1754] syscall_trace_enter+0xaa/0x150 [ 124.355544][ T1754] syscall_enter_from_user_mode+0x1f/0x30 [ 124.361258][ T1754] do_syscall_64+0x24/0xa0 [ 124.365676][ T1754] ? clear_bhb_loop+0x15/0x70 [ 124.370350][ T1754] ? clear_bhb_loop+0x15/0x70 [ 124.375041][ T1754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.380951][ T1754] RIP: 0033:0x7f8e40d8e929 [ 124.385371][ T1754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.404978][ T1754] RSP: 002b:00007f8e41c04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.413394][ T1754] RAX: ffffffffffffffda RBX: 00007f8e40fb5fa0 RCX: 00007f8e40d8e929 [ 124.421363][ T1754] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 124.429334][ T1754] RBP: 00007f8e41c04090 R08: 0000000000000000 R09: 0000000000000000 [ 124.437307][ T1754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.445274][ T1754] R13: 0000000000000000 R14: 00007f8e40fb5fa0 R15: 00007ffe93e78818 [ 124.453339][ T1754] [ 124.456457][ T28] audit: type=1326 audit(2000000017.410:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1753 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 124.463576][ T1754] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 124.481191][ T28] audit: type=1326 audit(2000000017.410:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1753 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 124.488371][ T1754] audit: out of memory in audit_log_start [ 124.511235][ T28] audit: type=1326 audit(2000000017.410:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1753 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 124.539750][ T28] audit: type=1326 audit(2000000017.410:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1753 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 124.580318][ T28] audit: type=1326 audit(2000000017.410:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1753 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 124.626573][ T28] audit: type=1326 audit(2000000017.410:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1753 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e40d8d290 code=0x7ffc0000 [ 124.673749][ T1764] loop1: detected capacity change from 0 to 1024 [ 124.681253][ T1764] EXT4-fs: Ignoring removed bh option [ 124.703462][ T1764] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.715508][ T1764] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 124.726570][ T1764] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 124.737379][ T1764] EXT4-fs (loop1): failed to open journal device unknown-block(0,5) -6 [ 124.757182][ T1772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=1772 comm=syz.0.369 [ 124.784279][ T1752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=1752 comm=syz.2.363 [ 124.862103][ T1764] loop1: detected capacity change from 0 to 1024 [ 124.868688][ T1764] EXT4-fs: Ignoring removed orlov option [ 124.902004][ T1764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.509870][ T284] EXT4-fs (loop1): unmounting filesystem. [ 128.567545][ T1787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1787 comm=syz.4.374 [ 129.769733][ T1800] bridge: RTM_NEWNEIGH with invalid ether address [ 130.201975][ T1810] device veth0_vlan left promiscuous mode [ 130.212963][ T1810] device veth0_vlan entered promiscuous mode [ 130.539034][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 130.539051][ T28] audit: type=1326 audit(2000000023.780:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1813 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 131.190875][ T1818] loop4: detected capacity change from 0 to 256 [ 132.769957][ T1818] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 133.127748][ T28] audit: type=1326 audit(2000000023.780:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1813 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 133.151384][ T28] audit: type=1326 audit(2000000023.780:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1813 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 133.176371][ T28] audit: type=1326 audit(2000000023.780:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1813 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 133.199755][ T28] audit: type=1326 audit(2000000023.780:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1813 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 133.223434][ T28] audit: type=1326 audit(2000000023.780:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1813 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 133.246815][ T28] audit: type=1326 audit(2000000023.780:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1813 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 133.273185][ T28] audit: type=1326 audit(2000000023.780:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1813 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 133.296654][ T28] audit: type=1326 audit(2000000023.780:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1813 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 133.325234][ T28] audit: type=1326 audit(2000000023.780:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1813 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e40d8e929 code=0x7ffc0000 [ 133.600486][ T1843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=1843 comm=syz.1.386 [ 133.720979][ T1848] tmpfs: Unknown parameter 'rootco' [ 133.740225][ T375] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 133.744028][ T1848] xt_hashlimit: size too large, truncated to 1048576 [ 133.890222][ T375] usb 1-1: device descriptor read/64, error -71 [ 134.160274][ T375] usb 1-1: device descriptor read/64, error -71 [ 134.568776][ T1860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=1860 comm=syz.3.392 [ 134.711807][ T375] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 134.762214][ T1864] capability: warning: `syz.4.393' uses 32-bit capabilities (legacy support in use) [ 135.113097][ T1869] overlayfs: missing 'lowerdir' [ 136.829763][ T375] usb 1-1: device descriptor read/64, error -71 [ 136.836238][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 136.836254][ T28] audit: type=1326 audit(2000000030.020:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.0.396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f145198e929 code=0x0 [ 138.447428][ T1884] loop2: detected capacity change from 0 to 256 [ 139.044596][ T1884] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 139.073765][ T28] audit: type=1400 audit(2000000032.320:962): avc: denied { mounton } for pid=1880 comm="syz.2.399" path="/80/file0/file0" dev="loop2" ino=1048651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.125768][ T1885] loop1: detected capacity change from 0 to 1024 [ 139.137177][ T1885] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.180527][ T1885] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 139.196231][ T28] audit: type=1400 audit(2000000032.440:963): avc: denied { write } for pid=1890 comm="syz.0.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.507084][ T1893] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 139.515959][ T1893] overlayfs: missing 'lowerdir' [ 140.330505][ T28] audit: type=1400 audit(2000000033.150:964): avc: denied { remove_name } for pid=285 comm="syz-executor" name=".index" dev="loop2" ino=1048652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.378236][ T28] audit: type=1400 audit(2000000033.150:965): avc: denied { rmdir } for pid=285 comm="syz-executor" name=".index" dev="loop2" ino=1048652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.764907][ T1911] netem: change failed [ 141.774198][ T1911] loop2: detected capacity change from 0 to 256 [ 141.878370][ T28] audit: type=1400 audit(2000000033.150:966): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="loop2" ino=1048654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.002681][ T28] audit: type=1400 audit(2000000035.240:967): avc: denied { setopt } for pid=1912 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.229048][ T1917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.720793][ T28] audit: type=1400 audit(2000000035.860:968): avc: denied { sys_module } for pid=1907 comm="syz.4.407" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 143.235321][ T1925] loop2: detected capacity change from 0 to 1024 [ 143.243375][ T1925] EXT4-fs: Ignoring removed bh option [ 143.252361][ T1925] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.268462][ T1925] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 143.298817][ T1925] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 143.320735][ T1925] EXT4-fs (loop2): failed to open journal device unknown-block(0,5) -6 [ 143.754307][ T1936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=1936 comm=syz.3.413 [ 143.776201][ T1925] loop2: detected capacity change from 0 to 1024 [ 143.852015][ T1925] EXT4-fs: Ignoring removed orlov option [ 144.030444][ T1925] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 144.706488][ T285] EXT4-fs (loop2): unmounting filesystem. [ 144.716439][ T28] audit: type=1400 audit(2000000037.960:969): avc: denied { listen } for pid=1941 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 144.826424][ T1953] loop2: detected capacity change from 0 to 512 [ 144.881593][ T1953] EXT4-fs (loop2): 1 orphan inode deleted [ 144.887374][ T1953] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 144.900974][ T8] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 144.930681][ T1953] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.965429][ T1957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=1957 comm=syz.0.419 [ 145.000383][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6825: comm kworker/u4:0: Failed to release dquot type 1 [ 145.062391][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.270416][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 145.293151][ T6] usb 4-1: config 1 interface 0 altsetting 30 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.409369][ T6] usb 4-1: config 1 interface 0 has no altsetting 0 [ 145.449646][ T6] usb 4-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.40 [ 145.502500][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.551049][ T6] usb 4-1: Product: 훗ឯᥫ㠜䔸ꦪᚸ磫欻悀煩䷉떣䣁쏑㣿鉸榃츧폦釵焲⒮堇࿱Ⓟ㊌跀툐뀍彜㭿핚젣਌妮ⲭ썂ࠪ紴ﰾ믷粀넟ꭊƱ︅㴹雌貑佫뻘颋껹爬㱲첉呱ස맇剻殺췵䛚H위7뷳Ლ搧擡᛻ꂱꍸ耿蜚랿膭膴ﭶ繵嶬ɚ早䶐쬆┆ [ 146.804533][ T6] usb 4-1: Manufacturer: Х [ 146.809088][ T6] usb 4-1: SerialNumber: Э [ 146.935819][ T1967] loop1: detected capacity change from 0 to 256 [ 146.991412][ T1967] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 147.061147][ T1967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=1967 comm=syz.1.420 [ 147.199944][ T285] EXT4-fs (loop2): unmounting filesystem. [ 147.336613][ T1942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.393483][ T1942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.471881][ T6] usbhid 4-1:1.0: can't add hid device: -71 [ 147.488910][ T6] usbhid: probe of 4-1:1.0 failed with error -71 [ 147.543668][ T6] usb 4-1: USB disconnect, device number 4 [ 147.560289][ T19] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 148.149266][ T1974] loop2: detected capacity change from 0 to 256 [ 148.158857][ T1974] exfat: Deprecated parameter 'namecase' [ 148.176296][ T1974] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 148.276886][ T28] audit: type=1404 audit(2000000041.490:970): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 148.301213][ T1977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=1977 comm=syz.1.425 [ 148.386839][ T28] audit: type=1404 audit(2000000041.490:971): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 148.493304][ T28] audit: type=1400 audit(2000000041.510:972): avc: denied { bpf } for pid=1970 comm="syz.4.424" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.519572][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.530952][ T28] audit: type=1400 audit(2000000041.630:973): avc: denied { write } for pid=1973 comm="syz.2.423" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.560851][ T19] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.566374][ T28] audit: type=1400 audit(2000000041.630:974): avc: denied { add_name } for pid=1973 comm="syz.2.423" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.570094][ T19] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 148.621019][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.634169][ T19] usb 1-1: config 0 descriptor?? [ 148.639456][ T28] audit: type=1400 audit(2000000041.630:975): avc: denied { create } for pid=1973 comm="syz.2.423" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.683690][ T28] audit: type=1400 audit(2000000041.630:976): avc: denied { associate } for pid=1973 comm="syz.2.423" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 148.726576][ T28] audit: type=1400 audit(2000000041.690:977): avc: denied { read write } for pid=1973 comm="syz.2.423" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.750020][ T28] audit: type=1400 audit(2000000041.690:978): avc: denied { open } for pid=1973 comm="syz.2.423" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.773446][ T28] audit: type=1400 audit(2000000041.690:979): avc: denied { ioctl } for pid=1973 comm="syz.2.423" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.800197][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 148.941300][ T1986] binder: BINDER_SET_CONTEXT_MGR already set [ 148.947381][ T1986] binder: 1984:1986 ioctl 4018620d 2000000000c0 returned -16 [ 149.001334][ T24] usb 3-1: config 0 has an invalid interface number: 97 but max is 0 [ 149.010279][ T24] usb 3-1: config 0 has no interface number 0 [ 149.016424][ T24] usb 3-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 149.027465][ T24] usb 3-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 149.041182][ T24] usb 3-1: config 0 interface 97 has no altsetting 0 [ 149.047872][ T24] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 149.056895][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.065434][ T24] usb 3-1: config 0 descriptor?? [ 149.090112][ T628] Bluetooth: hci0: Frame reassembly failed (-84) [ 149.277327][ T24] usb 3-1: string descriptor 0 read error: -32 [ 149.346340][ T2004] loop1: detected capacity change from 0 to 512 [ 149.353304][ T2004] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.372774][ T2004] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #3: comm syz.1.432: corrupted inode contents [ 149.384696][ T2004] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #3: comm syz.1.432: mark_inode_dirty error [ 149.400303][ T2004] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #3: comm syz.1.432: corrupted inode contents [ 149.412495][ T2004] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.432: mark_inode_dirty error [ 149.424101][ T2004] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.432: Failed to acquire dquot type 0 [ 149.436318][ T2004] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.432: corrupted inode contents [ 149.448705][ T2004] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #16: comm syz.1.432: mark_inode_dirty error [ 149.460328][ T2004] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.432: corrupted inode contents [ 149.472334][ T2004] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.432: mark_inode_dirty error [ 149.483836][ T2004] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.432: corrupted inode contents [ 149.495855][ T2004] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 149.505098][ T2004] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.432: corrupted inode contents [ 149.517463][ T2004] EXT4-fs error (device loop1): ext4_truncate:4314: inode #16: comm syz.1.432: mark_inode_dirty error [ 149.528938][ T2004] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 149.538867][ T2004] EXT4-fs (loop1): 1 truncate cleaned up [ 149.544657][ T2004] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 149.583425][ T2011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=2011 comm=syz.3.433 [ 149.615735][ T2004] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.482292][ T24] usb 3-1: Cannot set autoneg [ 150.487140][ T24] MOSCHIP usb-ethernet driver: probe of 3-1:0.97 failed with error -71 [ 150.496306][ T24] usb 3-1: USB disconnect, device number 10 [ 150.613387][ T19] usb 1-1: USB disconnect, device number 10 [ 150.628336][ T2016] loop2: detected capacity change from 0 to 1024 [ 150.659110][ T2016] EXT4-fs: Ignoring removed orlov option [ 150.699652][ T2016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 150.751230][ T2016] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.434: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 150.804288][ T2022] ip_tunnel: non-ECT from 10.1.1.1 with TOS=0x9a [ 150.821052][ T2025] FAULT_INJECTION: forcing a failure. [ 150.821052][ T2025] name failslab, interval 1, probability 0, space 0, times 0 [ 150.840505][ T2016] incfs: Can't find or create .index dir in ./file0 [ 150.847169][ T2016] incfs: mount failed -117 [ 150.870314][ T2025] CPU: 1 PID: 2025 Comm: syz.2.434 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 150.873381][ T2024] SELinux: failed to load policy [ 150.880060][ T2025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.880074][ T2025] Call Trace: [ 150.880079][ T2025] [ 150.880086][ T2025] __dump_stack+0x21/0x24 [ 150.905594][ T2025] dump_stack_lvl+0xee/0x150 [ 150.910207][ T2025] ? __cfi_dump_stack_lvl+0x8/0x8 [ 150.915257][ T2025] dump_stack+0x15/0x24 [ 150.919434][ T2025] should_fail_ex+0x3d4/0x520 [ 150.924125][ T2025] ? getname_flags+0xb9/0x500 [ 150.928815][ T2025] __should_failslab+0xac/0xf0 [ 150.933593][ T2025] should_failslab+0x9/0x20 [ 150.938114][ T2025] kmem_cache_alloc+0x3b/0x330 [ 150.942884][ T2025] getname_flags+0xb9/0x500 [ 150.947386][ T2025] ? security_file_permission+0x8a/0xb0 [ 150.952924][ T2025] user_path_at_empty+0x30/0x1c0 [ 150.957860][ T2025] path_removexattr+0xb3/0x3b0 [ 150.962618][ T2025] ? listxattr+0x320/0x320 [ 150.967028][ T2025] ? __kasan_check_write+0x14/0x20 [ 150.972133][ T2025] ? mutex_unlock+0x89/0x220 [ 150.976722][ T2025] ? __cfi_mutex_unlock+0x10/0x10 [ 150.981741][ T2025] ? dev_map_hash_lookup_elem+0xac/0x180 [ 150.987372][ T2025] ? bpf_trace_run2+0x104/0x250 [ 150.992217][ T2025] ? fput+0x154/0x1a0 [ 150.996194][ T2025] ? __cfi_bpf_trace_run2+0x10/0x10 [ 151.001388][ T2025] ? ksys_write+0x1eb/0x240 [ 151.005888][ T2025] ? __cfi_ksys_write+0x10/0x10 [ 151.010737][ T2025] ? do_user_addr_fault+0x9ac/0x1050 [ 151.016019][ T2025] ? __bpf_trace_sys_enter+0x62/0x70 [ 151.021295][ T2025] __x64_sys_removexattr+0x60/0x70 [ 151.026409][ T2025] x64_sys_call+0x592/0x9a0 [ 151.030909][ T2025] do_syscall_64+0x4c/0xa0 [ 151.035329][ T2025] ? clear_bhb_loop+0x15/0x70 [ 151.040002][ T2025] ? clear_bhb_loop+0x15/0x70 [ 151.044668][ T2025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.050566][ T2025] RIP: 0033:0x7fdfa8f8e929 [ 151.054974][ T2025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.074570][ T2025] RSP: 002b:00007fdfa9d58038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 151.082979][ T2025] RAX: ffffffffffffffda RBX: 00007fdfa91b6080 RCX: 00007fdfa8f8e929 [ 151.090949][ T2025] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000280 [ 151.098916][ T2025] RBP: 00007fdfa9d58090 R08: 0000000000000000 R09: 0000000000000000 [ 151.106879][ T2025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.114843][ T2025] R13: 0000000000000001 R14: 00007fdfa91b6080 R15: 00007ffcc55fc9f8 [ 151.122809][ T2025] [ 151.130341][ T1991] Bluetooth: hci0: command 0x1003 tx timeout [ 151.136646][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.170832][ T2031] x_tables: duplicate underflow at hook 1 [ 151.212962][ T285] EXT4-fs (loop2): unmounting filesystem. [ 151.233958][ T284] EXT4-fs (loop1): unmounting filesystem. [ 151.271324][ T2039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=2039 comm=syz.4.440 [ 151.374106][ T2048] loop1: detected capacity change from 0 to 512 [ 151.398357][ T2048] EXT4-fs: Ignoring removed oldalloc option [ 151.410320][ T2048] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.445: error while reading EA inode 32 err=-116 [ 151.485711][ T2051] loop2: detected capacity change from 0 to 256 [ 151.502619][ T2051] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 151.516734][ T2048] EXT4-fs (loop1): Remounting filesystem read-only [ 151.523762][ T2048] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.445: error while reading EA inode 32 err=-116 [ 151.536661][ T2048] EXT4-fs (loop1): Remounting filesystem read-only [ 151.543629][ T2048] EXT4-fs (loop1): 1 orphan inode deleted [ 151.549500][ T2048] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.579231][ T2051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=2051 comm=syz.2.455 [ 152.322127][ T2055] loop4: detected capacity change from 0 to 256 [ 152.353060][ T2055] exfat: Deprecated parameter 'namecase' [ 152.409473][ T2055] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 152.606528][ T2064] loop2: detected capacity change from 0 to 1024 [ 152.640491][ T2064] EXT4-fs: Ignoring removed bh option [ 152.646745][ T2064] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.658911][ T2064] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 152.669967][ T2064] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 152.680380][ T2064] EXT4-fs (loop2): failed to open journal device unknown-block(0,5) -6 [ 152.727901][ T284] EXT4-fs (loop1): unmounting filesystem. [ 152.750215][ T375] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.800260][ T2064] loop2: detected capacity change from 0 to 1024 [ 152.837287][ T2064] EXT4-fs: Ignoring removed orlov option [ 152.887540][ T2064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 152.962027][ T375] usb 5-1: config 0 has an invalid interface number: 97 but max is 0 [ 152.983845][ T285] EXT4-fs (loop2): unmounting filesystem. [ 153.008287][ T375] usb 5-1: config 0 has no interface number 0 [ 153.034106][ T375] usb 5-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 153.054135][ T375] usb 5-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 153.090820][ T375] usb 5-1: config 0 interface 97 has no altsetting 0 [ 153.109737][ T375] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 153.119002][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.129853][ T2086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=2086 comm=syz.1.458 [ 153.130781][ T375] usb 5-1: config 0 descriptor?? [ 153.354438][ T375] usb 5-1: string descriptor 0 read error: -32 [ 153.740397][ T24] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 153.770820][ T375] usb 5-1: Cannot set autoneg [ 153.787259][ T2098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=2098 comm=syz.0.461 [ 153.808778][ T375] MOSCHIP usb-ethernet driver: probe of 5-1:0.97 failed with error -71 [ 154.160762][ T24] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.273734][ T2100] loop1: detected capacity change from 0 to 16 [ 154.281803][ T2100] erofs: (device loop1): mounted with root inode @ nid 36. [ 154.341945][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 154.341976][ T28] audit: type=1400 audit(2000000047.540:1072): avc: denied { unlink } for pid=2099 comm="syz.1.462" name="#5" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 154.590595][ T375] usb 5-1: USB disconnect, device number 7 [ 154.596958][ T24] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.606835][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.613468][ T24] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 154.622541][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.657650][ T2103] loop1: detected capacity change from 0 to 1024 [ 154.671915][ T24] usb 4-1: config 0 descriptor?? [ 154.682075][ T2103] EXT4-fs: Ignoring removed oldalloc option [ 154.688076][ T2103] EXT4-fs: Ignoring removed orlov option [ 154.762095][ T2106] loop4: detected capacity change from 0 to 1024 [ 154.796576][ T2106] EXT4-fs: Ignoring removed oldalloc option [ 154.830046][ T2103] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 154.849239][ T2106] EXT4-fs: Ignoring removed orlov option [ 154.872594][ T2103] EXT4-fs warning (device loop1): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 154.984721][ T28] audit: type=1400 audit(2000000048.230:1073): avc: denied { read } for pid=2111 comm="syz.0.465" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.009501][ T284] EXT4-fs (loop1): unmounting filesystem. [ 155.037679][ T2106] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.095985][ T28] audit: type=1400 audit(2000000048.230:1074): avc: denied { open } for pid=2111 comm="syz.0.465" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.119947][ T28] audit: type=1400 audit(2000000048.270:1075): avc: denied { ioctl } for pid=2111 comm="syz.0.465" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.145364][ T28] audit: type=1326 audit(2000000048.270:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2111 comm="syz.0.465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f145198e929 code=0x0 [ 155.200980][ T2106] EXT4-fs warning (device loop4): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 155.362449][ T2106] FAULT_INJECTION: forcing a failure. [ 155.362449][ T2106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.484425][ T2106] CPU: 0 PID: 2106 Comm: syz.4.464 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 155.494186][ T2106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.504251][ T2106] Call Trace: [ 155.507532][ T2106] [ 155.510472][ T2106] __dump_stack+0x21/0x24 [ 155.514822][ T2106] dump_stack_lvl+0xee/0x150 [ 155.519430][ T2106] ? __cfi_dump_stack_lvl+0x8/0x8 [ 155.524473][ T2106] dump_stack+0x15/0x24 [ 155.528646][ T2106] should_fail_ex+0x3d4/0x520 [ 155.533338][ T2106] should_fail+0xb/0x10 [ 155.537501][ T2106] should_fail_usercopy+0x1a/0x20 [ 155.542533][ T2106] _copy_from_user+0x1e/0xc0 [ 155.547130][ T2106] bpf_test_init+0x106/0x160 [ 155.551820][ T2106] bpf_prog_test_run_xdp+0x359/0xe50 [ 155.557122][ T2106] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 155.562938][ T2106] ? __kasan_check_write+0x14/0x20 [ 155.568067][ T2106] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 155.573888][ T2106] bpf_prog_test_run+0x3e3/0x630 [ 155.578834][ T2106] ? slab_free_freelist_hook+0xc2/0x190 [ 155.584396][ T2106] ? bpf_prog_query+0x270/0x270 [ 155.589254][ T2106] ? selinux_bpf+0xce/0xf0 [ 155.593687][ T2106] ? security_bpf+0x93/0xb0 [ 155.598196][ T2106] __sys_bpf+0x56d/0x780 [ 155.602464][ T2106] ? bpf_link_show_fdinfo+0x320/0x320 [ 155.607860][ T2106] ? fpregs_restore_userregs+0x128/0x260 [ 155.613514][ T2106] __x64_sys_bpf+0x7c/0x90 [ 155.617945][ T2106] x64_sys_call+0x488/0x9a0 [ 155.622468][ T2106] do_syscall_64+0x4c/0xa0 [ 155.626903][ T2106] ? clear_bhb_loop+0x15/0x70 [ 155.631592][ T2106] ? clear_bhb_loop+0x15/0x70 [ 155.636278][ T2106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.642187][ T2106] RIP: 0033:0x7f0fd718e929 [ 155.646607][ T2106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.666219][ T2106] RSP: 002b:00007f0fd8066038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.674650][ T2106] RAX: ffffffffffffffda RBX: 00007f0fd73b5fa0 RCX: 00007f0fd718e929 [ 155.682633][ T2106] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 155.690613][ T2106] RBP: 00007f0fd8066090 R08: 0000000000000000 R09: 0000000000000000 [ 155.698592][ T2106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.706567][ T2106] R13: 0000000000000000 R14: 00007f0fd73b5fa0 R15: 00007fff578cd7a8 [ 155.714552][ T2106] [ 156.138382][ T2133] FAULT_INJECTION: forcing a failure. [ 156.138382][ T2133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.194692][ T2133] CPU: 0 PID: 2133 Comm: syz.1.471 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 156.204452][ T2133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.214514][ T2133] Call Trace: [ 156.217800][ T2133] [ 156.220734][ T2133] __dump_stack+0x21/0x24 [ 156.225088][ T2133] dump_stack_lvl+0xee/0x150 [ 156.229693][ T2133] ? __cfi_dump_stack_lvl+0x8/0x8 [ 156.234734][ T2133] dump_stack+0x15/0x24 [ 156.238901][ T2133] should_fail_ex+0x3d4/0x520 [ 156.243591][ T2133] should_fail+0xb/0x10 [ 156.247754][ T2133] should_fail_usercopy+0x1a/0x20 [ 156.252790][ T2133] _copy_to_user+0x1e/0x90 [ 156.257220][ T2133] simple_read_from_buffer+0xe9/0x160 [ 156.262609][ T2133] proc_fail_nth_read+0x19a/0x210 [ 156.267667][ T2133] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 156.273235][ T2133] ? security_file_permission+0x94/0xb0 [ 156.278802][ T2133] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 156.284367][ T2133] vfs_read+0x26e/0x8c0 [ 156.288541][ T2133] ? __cfi_vfs_read+0x10/0x10 [ 156.293235][ T2133] ? __kasan_check_write+0x14/0x20 [ 156.298356][ T2133] ? mutex_lock+0x8d/0x1a0 [ 156.302784][ T2133] ? __cfi_mutex_lock+0x10/0x10 [ 156.307647][ T2133] ? __fdget_pos+0x2cd/0x380 [ 156.312264][ T2133] ? ksys_read+0x71/0x240 [ 156.316617][ T2133] ksys_read+0x140/0x240 [ 156.320882][ T2133] ? __cfi_ksys_read+0x10/0x10 [ 156.325662][ T2133] ? fpregs_restore_userregs+0x128/0x260 [ 156.331311][ T2133] __x64_sys_read+0x7b/0x90 [ 156.335831][ T2133] x64_sys_call+0x2f/0x9a0 [ 156.340260][ T2133] do_syscall_64+0x4c/0xa0 [ 156.344690][ T2133] ? clear_bhb_loop+0x15/0x70 [ 156.349377][ T2133] ? clear_bhb_loop+0x15/0x70 [ 156.354067][ T2133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.359987][ T2133] RIP: 0033:0x7f8e40d8d33c [ 156.364410][ T2133] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 156.384027][ T2133] RSP: 002b:00007f8e41c04030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.392477][ T2133] RAX: ffffffffffffffda RBX: 00007f8e40fb5fa0 RCX: 00007f8e40d8d33c [ 156.400467][ T2133] RDX: 000000000000000f RSI: 00007f8e41c040a0 RDI: 0000000000000004 [ 156.408452][ T2133] RBP: 00007f8e41c04090 R08: 0000000000000000 R09: 0000000000000000 [ 156.416426][ T2133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.424398][ T2133] R13: 0000000000000000 R14: 00007f8e40fb5fa0 R15: 00007ffe93e78818 [ 156.432376][ T2133] [ 156.438218][ T289] EXT4-fs (loop4): unmounting filesystem. [ 156.467738][ T2139] FAULT_INJECTION: forcing a failure. [ 156.467738][ T2139] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.482373][ T2139] CPU: 0 PID: 2139 Comm: syz.1.474 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 156.492111][ T2139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.502192][ T2139] Call Trace: [ 156.505479][ T2139] [ 156.508418][ T2139] __dump_stack+0x21/0x24 [ 156.512771][ T2139] dump_stack_lvl+0xee/0x150 [ 156.517363][ T2139] ? __cfi_dump_stack_lvl+0x8/0x8 [ 156.522391][ T2139] dump_stack+0x15/0x24 [ 156.526548][ T2139] should_fail_ex+0x3d4/0x520 [ 156.531228][ T2139] should_fail_alloc_page+0x61/0x90 [ 156.536424][ T2139] prepare_alloc_pages+0x148/0x5f0 [ 156.541538][ T2139] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 156.546746][ T2139] ? __sys_bpf+0x30b/0x780 [ 156.551341][ T2139] ? x64_sys_call+0x488/0x9a0 [ 156.556019][ T2139] ? do_syscall_64+0x4c/0xa0 [ 156.560784][ T2139] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.566858][ T2139] __alloc_pages+0x115/0x3a0 [ 156.571448][ T2139] ? __cfi___alloc_pages+0x10/0x10 [ 156.576557][ T2139] ? __cfi__raw_spin_lock+0x10/0x10 [ 156.581758][ T2139] __get_free_pages+0xe/0x30 [ 156.586345][ T2139] kasan_populate_vmalloc_pte+0x29/0x120 [ 156.591989][ T2139] __apply_to_page_range+0x8c1/0xc00 [ 156.597278][ T2139] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 156.603530][ T2139] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 156.609769][ T2139] apply_to_page_range+0x3b/0x50 [ 156.614708][ T2139] kasan_populate_vmalloc+0x60/0x70 [ 156.619913][ T2139] alloc_vmap_area+0x173e/0x1870 [ 156.624855][ T2139] ? vm_map_ram+0x930/0x930 [ 156.629396][ T2139] ? __kasan_kmalloc+0x95/0xb0 [ 156.634177][ T2139] ? kmalloc_node_trace+0x3d/0xb0 [ 156.639215][ T2139] __get_vm_area_node+0x160/0x360 [ 156.644240][ T2139] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.650318][ T2139] __vmalloc_node_range+0x326/0x13d0 [ 156.655615][ T2139] ? dev_map_alloc+0x227/0x540 [ 156.660387][ T2139] ? __cfi___vmalloc_node_range+0x10/0x10 [ 156.666113][ T2139] ? kasan_save_alloc_info+0x25/0x30 [ 156.671402][ T2139] ? __kasan_kmalloc+0x95/0xb0 [ 156.676172][ T2139] ? bpf_map_area_alloc+0x4b/0xe0 [ 156.681196][ T2139] ? __kmalloc_node+0xb2/0x1e0 [ 156.685968][ T2139] bpf_map_area_alloc+0xd7/0xe0 [ 156.690817][ T2139] ? dev_map_alloc+0x227/0x540 [ 156.695584][ T2139] dev_map_alloc+0x227/0x540 [ 156.700184][ T2139] map_create+0x49c/0xd80 [ 156.704517][ T2139] __sys_bpf+0x30b/0x780 [ 156.708765][ T2139] ? bpf_link_show_fdinfo+0x320/0x320 [ 156.714145][ T2139] ? __cfi_ksys_write+0x10/0x10 [ 156.718995][ T2139] ? do_user_addr_fault+0x9ac/0x1050 [ 156.724279][ T2139] ? debug_smp_processor_id+0x17/0x20 [ 156.729654][ T2139] __x64_sys_bpf+0x7c/0x90 [ 156.734074][ T2139] x64_sys_call+0x488/0x9a0 [ 156.738578][ T2139] do_syscall_64+0x4c/0xa0 [ 156.743003][ T2139] ? clear_bhb_loop+0x15/0x70 [ 156.747767][ T2139] ? clear_bhb_loop+0x15/0x70 [ 156.752439][ T2139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.758339][ T2139] RIP: 0033:0x7f8e40d8e929 [ 156.762751][ T2139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.782389][ T2139] RSP: 002b:00007f8e41c04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.790801][ T2139] RAX: ffffffffffffffda RBX: 00007f8e40fb5fa0 RCX: 00007f8e40d8e929 [ 156.798772][ T2139] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 156.806766][ T2139] RBP: 00007f8e41c04090 R08: 0000000000000000 R09: 0000000000000000 [ 156.814733][ T2139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.822959][ T2139] R13: 0000000000000001 R14: 00007f8e40fb5fa0 R15: 00007ffe93e78818 [ 156.830954][ T2139] [ 156.859063][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 156.872313][ T2141] loop4: detected capacity change from 0 to 1024 [ 156.890778][ T24] usbhid: probe of 4-1:0.0 failed with error -71 [ 156.894476][ T2141] EXT4-fs: Ignoring removed orlov option [ 156.906118][ T2137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=2137 comm=syz.0.472 [ 156.913441][ T24] usb 4-1: USB disconnect, device number 5 [ 156.919687][ T2141] EXT4-fs: Ignoring removed bh option [ 160.781282][ T2153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=2153 comm=syz.3.475 [ 160.856093][ T28] audit: type=1404 audit(2000000050.460:1077): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 161.795899][ T2141] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 161.816199][ T28] audit: type=1400 audit(2000000050.520:1078): avc: denied { bpf } for pid=2146 comm="syz.2.477" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 161.843365][ T28] audit: type=1400 audit(2000000054.010:1079): avc: denied { bpf } for pid=2144 comm="syz.1.476" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 161.864122][ T28] audit: type=1400 audit(2000000054.010:1080): avc: denied { prog_load } for pid=2144 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.883514][ T28] audit: type=1400 audit(2000000054.010:1081): avc: denied { bpf } for pid=2144 comm="syz.1.476" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 161.904195][ T28] audit: type=1400 audit(2000000054.010:1082): avc: denied { prog_load } for pid=2144 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.923357][ T28] audit: type=1400 audit(2000000054.010:1083): avc: denied { bpf } for pid=2144 comm="syz.1.476" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 161.944001][ T28] audit: type=1400 audit(2000000054.020:1084): avc: denied { read write } for pid=2144 comm="syz.1.476" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 161.975852][ T28] audit: type=1400 audit(2000000054.020:1085): avc: denied { bpf } for pid=2142 comm="syz.3.475" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 161.997160][ T28] audit: type=1400 audit(2000000054.020:1086): avc: denied { prog_load } for pid=2142 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 162.205244][ T2176] FAULT_INJECTION: forcing a failure. [ 162.205244][ T2176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.238338][ T2169] syz.1.484 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 162.260878][ T2169] netlink: 120 bytes leftover after parsing attributes in process `syz.1.484'. [ 162.272016][ T2172] overlayfs: missing 'lowerdir' [ 162.277448][ T2172] serio: Serial port ttyS3 [ 162.279099][ T2176] CPU: 1 PID: 2176 Comm: syz.4.485 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 162.291582][ T2176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.301640][ T2176] Call Trace: [ 162.304914][ T2176] [ 162.307840][ T2176] __dump_stack+0x21/0x24 [ 162.312177][ T2176] dump_stack_lvl+0xee/0x150 [ 162.316764][ T2176] ? __cfi_dump_stack_lvl+0x8/0x8 [ 162.321909][ T2176] dump_stack+0x15/0x24 [ 162.326063][ T2176] should_fail_ex+0x3d4/0x520 [ 162.330734][ T2176] should_fail+0xb/0x10 [ 162.334886][ T2176] should_fail_usercopy+0x1a/0x20 [ 162.339901][ T2176] _copy_from_user+0x1e/0xc0 [ 162.344486][ T2176] csum_and_copy_from_iter+0x46a/0x11b0 [ 162.350027][ T2176] ? alloc_skb_with_frags+0x58e/0x620 [ 162.355399][ T2176] ? __kasan_check_write+0x14/0x20 [ 162.360507][ T2176] ? skb_set_owner_w+0x25c/0x380 [ 162.365451][ T2176] ? __cfi_csum_and_copy_from_iter+0x10/0x10 [ 162.371427][ T2176] ip_generic_getfrag+0x141/0x2d0 [ 162.376464][ T2176] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 162.382009][ T2176] ? skb_put+0x10e/0x1f0 [ 162.386269][ T2176] __ip6_append_data+0x2d0c/0x3a10 [ 162.391398][ T2176] ? memset+0x35/0x40 [ 162.395394][ T2176] ? xfrm_lookup_with_ifid+0xa02/0x21c0 [ 162.400949][ T2176] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 162.406507][ T2176] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 162.411971][ T2176] ? ip6_setup_cork+0x10a0/0x10a0 [ 162.416996][ T2176] ? __kasan_check_read+0x11/0x20 [ 162.422016][ T2176] ? ip6_setup_cork+0xb1d/0x10a0 [ 162.426945][ T2176] ip6_append_data+0x1e8/0x400 [ 162.431704][ T2176] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 162.437247][ T2176] udpv6_sendmsg+0xbb6/0x2650 [ 162.441925][ T2176] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 162.447471][ T2176] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 162.452678][ T2176] ? _raw_spin_unlock_bh+0x50/0x60 [ 162.457788][ T2176] ? release_sock+0x169/0x1c0 [ 162.462460][ T2176] ? inet_send_prepare+0x1e0/0x4d0 [ 162.467567][ T2176] inet6_sendmsg+0xb6/0xd0 [ 162.471979][ T2176] __sys_sendto+0x464/0x5e0 [ 162.476483][ T2176] ? slab_free_freelist_hook+0xc2/0x190 [ 162.482025][ T2176] ? __cfi___sys_sendto+0x10/0x10 [ 162.487054][ T2176] ? ksys_write+0x1eb/0x240 [ 162.491555][ T2176] ? __cfi_ksys_write+0x10/0x10 [ 162.496403][ T2176] __x64_sys_sendto+0xe5/0x100 [ 162.501164][ T2176] x64_sys_call+0x83/0x9a0 [ 162.505660][ T2176] do_syscall_64+0x4c/0xa0 [ 162.510075][ T2176] ? clear_bhb_loop+0x15/0x70 [ 162.514829][ T2176] ? clear_bhb_loop+0x15/0x70 [ 162.519500][ T2176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.525396][ T2176] RIP: 0033:0x7f0fd718e929 [ 162.529804][ T2176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.549487][ T2176] RSP: 002b:00007f0fd8066038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 162.557897][ T2176] RAX: ffffffffffffffda RBX: 00007f0fd73b5fa0 RCX: 00007f0fd718e929 [ 162.565860][ T2176] RDX: 00000000000005c4 RSI: 0000000000000000 RDI: 0000000000000007 [ 162.573824][ T2176] RBP: 00007f0fd8066090 R08: 0000200000000540 R09: 000000000000001c [ 162.581787][ T2176] R10: 000000000404c844 R11: 0000000000000246 R12: 0000000000000001 [ 162.589750][ T2176] R13: 0000000000000000 R14: 00007f0fd73b5fa0 R15: 00007fff578cd7a8 [ 162.597716][ T2176] [ 162.765294][ T2181] overlayfs: missing 'lowerdir' [ 162.828471][ T2177] xt_hashlimit: size too large, truncated to 1048576 [ 163.371716][ T2192] overlayfs: './file1' not a directory [ 163.390503][ T2192] loop4: detected capacity change from 0 to 256 [ 163.424920][ T2192] FAT-fs (loop4): Directory bread(block 64) failed [ 163.435830][ T2192] FAT-fs (loop4): Directory bread(block 65) failed [ 163.443657][ T2192] FAT-fs (loop4): Directory bread(block 66) failed [ 163.451179][ T2192] FAT-fs (loop4): Directory bread(block 67) failed [ 163.457799][ T2192] FAT-fs (loop4): Directory bread(block 68) failed [ 163.464485][ T2192] FAT-fs (loop4): Directory bread(block 69) failed [ 163.471117][ T2192] FAT-fs (loop4): Directory bread(block 70) failed [ 163.477817][ T2192] FAT-fs (loop4): Directory bread(block 71) failed [ 163.484995][ T2192] FAT-fs (loop4): Directory bread(block 72) failed [ 163.491577][ T2192] FAT-fs (loop4): Directory bread(block 73) failed [ 163.720250][ T375] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.780273][ T1904] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.901340][ T375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.912274][ T375] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.925170][ T375] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.934209][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.942904][ T375] usb 1-1: config 0 descriptor?? [ 163.970239][ T1904] usb 5-1: Using ep0 maxpacket: 16 [ 163.976571][ T1904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.986874][ T1904] usb 5-1: config 0 has no interfaces? [ 163.992404][ T1904] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 164.001513][ T1904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.010331][ T1904] usb 5-1: config 0 descriptor?? [ 164.271604][ T1904] usb 5-1: USB disconnect, device number 8 [ 164.351470][ T2196] syz.0.489[2196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.352397][ T2196] netlink: 'syz.0.489': attribute type 25 has an invalid length. [ 164.371548][ T2196] netlink: 'syz.0.489': attribute type 7 has an invalid length. [ 164.385179][ T375] usbhid 1-1:0.0: can't add hid device: -71 [ 164.391205][ T375] usbhid: probe of 1-1:0.0 failed with error -71 [ 164.402145][ T375] usb 1-1: USB disconnect, device number 11 [ 164.843834][ T2204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=2204 comm=syz.4.490 [ 165.023562][ T2208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=2208 comm=syz.0.491 [ 165.097393][ T2182] serio: Serial port ttyS3 [ 165.222314][ T2212] FAULT_INJECTION: forcing a failure. [ 165.222314][ T2212] name failslab, interval 1, probability 0, space 0, times 0 [ 165.256269][ T2211] loop2: detected capacity change from 0 to 256 [ 165.305933][ T2212] CPU: 0 PID: 2212 Comm: syz.3.493 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 165.315702][ T2212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.325781][ T2212] Call Trace: [ 165.329068][ T2212] [ 165.332005][ T2212] __dump_stack+0x21/0x24 [ 165.336352][ T2212] dump_stack_lvl+0xee/0x150 [ 165.340956][ T2212] ? __cfi_dump_stack_lvl+0x8/0x8 [ 165.346084][ T2212] ? vsnprintf+0x186d/0x1960 [ 165.350690][ T2212] dump_stack+0x15/0x24 [ 165.354859][ T2212] should_fail_ex+0x3d4/0x520 [ 165.359548][ T2212] __should_failslab+0xac/0xf0 [ 165.364320][ T2212] ? sidtab_sid2str_get+0x120/0x2c0 [ 165.369534][ T2212] should_failslab+0x9/0x20 [ 165.374073][ T2212] __kmem_cache_alloc_node+0x3d/0x2c0 [ 165.379467][ T2212] ? audit_log_format+0x120/0x120 [ 165.384525][ T2212] ? sidtab_sid2str_get+0x120/0x2c0 [ 165.389754][ T2212] __kmalloc_node_track_caller+0xa0/0x1e0 [ 165.395591][ T2212] kmemdup+0x2b/0x60 [ 165.399540][ T2212] sidtab_sid2str_get+0x120/0x2c0 [ 165.404586][ T2212] security_sid_to_context_core+0x2ac/0x480 [ 165.410601][ T2212] security_sid_to_context+0x33/0x40 [ 165.415905][ T2212] avc_audit_post_callback+0x1cc/0x820 [ 165.421405][ T2212] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 165.427417][ T2212] ? audit_log_untrustedstring+0xe6/0x100 [ 165.433154][ T2212] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 165.439156][ T2212] common_lsm_audit+0x12d7/0x16d0 [ 165.444196][ T2212] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 165.450200][ T2212] ? __cfi_common_lsm_audit+0x10/0x10 [ 165.455585][ T2212] ? rcu_read_unlock_special+0xab/0x480 [ 165.461150][ T2212] ? __rcu_read_unlock+0xa0/0xa0 [ 165.466105][ T2212] ? avc_denied+0x132/0x1b0 [ 165.470622][ T2212] slow_avc_audit+0x1ac/0x220 [ 165.475307][ T2212] ? __cfi_slow_avc_audit+0x10/0x10 [ 165.480522][ T2212] ? avc_has_perm_noaudit+0x2f4/0x460 [ 165.485916][ T2212] avc_has_perm+0x1e6/0x240 [ 165.490605][ T2212] ? __cfi_avc_has_perm+0x10/0x10 [ 165.495639][ T2212] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 165.501719][ T2212] sel_write_validatetrans+0x1b6/0x520 [ 165.507185][ T2212] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 165.512830][ T2212] ? avc_policy_seqno+0x1b/0x70 [ 165.517701][ T2212] ? __cfi_sel_write_validatetrans+0x10/0x10 [ 165.523781][ T2212] ? security_file_permission+0x8a/0xb0 [ 165.529335][ T2212] ? security_file_permission+0x94/0xb0 [ 165.534894][ T2212] ? __cfi_sel_write_validatetrans+0x10/0x10 [ 165.540892][ T2212] vfs_write+0x40c/0xca0 [ 165.545147][ T2212] ? __this_cpu_preempt_check+0x13/0x20 [ 165.550710][ T2212] ? __cfi_vfs_write+0x10/0x10 [ 165.555487][ T2212] ? __kasan_check_write+0x14/0x20 [ 165.560620][ T2212] ? mutex_lock+0x8d/0x1a0 [ 165.565049][ T2212] ? __cfi_mutex_lock+0x10/0x10 [ 165.569913][ T2212] ? __fdget_pos+0x2cd/0x380 [ 165.574524][ T2212] ? ksys_write+0x71/0x240 [ 165.578957][ T2212] ksys_write+0x140/0x240 [ 165.583299][ T2212] ? __cfi_ksys_write+0x10/0x10 [ 165.588172][ T2212] ? fpregs_restore_userregs+0x128/0x260 [ 165.593830][ T2212] __x64_sys_write+0x7b/0x90 [ 165.598441][ T2212] x64_sys_call+0x27b/0x9a0 [ 165.602961][ T2212] do_syscall_64+0x4c/0xa0 [ 165.607404][ T2212] ? clear_bhb_loop+0x15/0x70 [ 165.612093][ T2212] ? clear_bhb_loop+0x15/0x70 [ 165.616783][ T2212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.622697][ T2212] RIP: 0033:0x7f863b58e929 [ 165.627123][ T2212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.646743][ T2212] RSP: 002b:00007f863c419038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.655267][ T2212] RAX: ffffffffffffffda RBX: 00007f863b7b5fa0 RCX: 00007f863b58e929 [ 165.663348][ T2212] RDX: 0000000000000069 RSI: 0000200000000300 RDI: 0000000000000003 [ 165.671339][ T2212] RBP: 00007f863c419090 R08: 0000000000000000 R09: 0000000000000000 [ 165.679317][ T2212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.687303][ T2212] R13: 0000000000000000 R14: 00007f863b7b5fa0 R15: 00007ffde2042ec8 [ 165.695328][ T2212] [ 165.804319][ T2211] FAT-fs (loop2): Directory bread(block 64) failed [ 165.812057][ T2211] FAT-fs (loop2): Directory bread(block 65) failed [ 165.818603][ T2211] FAT-fs (loop2): Directory bread(block 66) failed [ 165.825496][ T2211] FAT-fs (loop2): Directory bread(block 67) failed [ 165.832321][ T2211] FAT-fs (loop2): Directory bread(block 68) failed [ 165.838931][ T2211] FAT-fs (loop2): Directory bread(block 69) failed [ 165.845843][ T2211] FAT-fs (loop2): Directory bread(block 70) failed [ 165.873818][ T2211] FAT-fs (loop2): Directory bread(block 71) failed [ 165.885611][ T2211] FAT-fs (loop2): Directory bread(block 72) failed [ 165.890333][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 165.890347][ T28] audit: type=1400 audit(2000000058.470:1137): avc: denied { validate_trans } for pid=2210 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tsid=2 tclass=security permissive=1 [ 165.905083][ T2211] FAT-fs (loop2): Directory bread(block 73) failed [ 165.952683][ T28] audit: type=1400 audit(2000000059.200:1138): avc: denied { create } for pid=2221 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.972777][ T2222] FAULT_INJECTION: forcing a failure. [ 165.972777][ T2222] name failslab, interval 1, probability 0, space 0, times 0 [ 165.986367][ T28] audit: type=1400 audit(2000000059.220:1139): avc: denied { setopt } for pid=2221 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.994009][ T2222] CPU: 0 PID: 2222 Comm: syz.3.498 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 166.007129][ T28] audit: type=1400 audit(2000000059.220:1140): avc: denied { map } for pid=2221 comm="syz.3.498" path="socket:[23797]" dev="sockfs" ino=23797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.015403][ T2222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.015416][ T2222] Call Trace: [ 166.015421][ T2222] [ 166.015428][ T2222] __dump_stack+0x21/0x24 [ 166.015458][ T2222] dump_stack_lvl+0xee/0x150 [ 166.063716][ T2222] ? __cfi_dump_stack_lvl+0x8/0x8 [ 166.068767][ T2222] ? __kasan_check_write+0x14/0x20 [ 166.073903][ T2222] ? _raw_spin_lock+0x8e/0xe0 [ 166.078597][ T2222] ? __cfi__raw_spin_lock+0x10/0x10 [ 166.083814][ T2222] dump_stack+0x15/0x24 [ 166.087991][ T2222] should_fail_ex+0x3d4/0x520 [ 166.092860][ T2222] ? __alloc_file+0x28/0x2a0 [ 166.096483][ T28] audit: type=1400 audit(2000000059.220:1141): avc: denied { read accept } for pid=2221 comm="syz.3.498" path="socket:[23797]" dev="sockfs" ino=23797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.097459][ T2222] __should_failslab+0xac/0xf0 [ 166.097483][ T2222] should_failslab+0x9/0x20 [ 166.130324][ T2222] kmem_cache_alloc+0x3b/0x330 [ 166.135111][ T2222] ? __cfi__raw_spin_lock+0x10/0x10 [ 166.140337][ T2222] __alloc_file+0x28/0x2a0 [ 166.144779][ T2222] alloc_empty_file+0x97/0x180 [ 166.149566][ T2222] alloc_file+0x59/0x640 [ 166.153824][ T2222] alloc_file_pseudo+0x17a/0x1f0 [ 166.158781][ T2222] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 166.164252][ T2222] ? __cfi_current_time+0x10/0x10 [ 166.169296][ T2222] ? __mutex_init+0xcd/0x1a0 [ 166.173909][ T2222] ? memcpy+0x56/0x70 [ 166.177916][ T2222] create_pipe_files+0x2eb/0x6c0 [ 166.182865][ T2222] __do_pipe_flags+0x4f/0x200 [ 166.187572][ T2222] do_pipe2+0x99/0x170 [ 166.191643][ T2222] ? pipe_fcntl+0x520/0x520 [ 166.196146][ T2222] ? __cfi_ksys_write+0x10/0x10 [ 166.200999][ T2222] ? debug_smp_processor_id+0x17/0x20 [ 166.206370][ T2222] __x64_sys_pipe2+0x5a/0x70 [ 166.210958][ T2222] x64_sys_call+0x258/0x9a0 [ 166.215455][ T2222] do_syscall_64+0x4c/0xa0 [ 166.219880][ T2222] ? clear_bhb_loop+0x15/0x70 [ 166.224613][ T2222] ? clear_bhb_loop+0x15/0x70 [ 166.229284][ T2222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.235177][ T2222] RIP: 0033:0x7f863b58e929 [ 166.239587][ T2222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.259184][ T2222] RSP: 002b:00007f863c419038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 166.267589][ T2222] RAX: ffffffffffffffda RBX: 00007f863b7b5fa0 RCX: 00007f863b58e929 [ 166.275559][ T2222] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000200000002480 [ 166.283542][ T2222] RBP: 00007f863c419090 R08: 0000000000000000 R09: 0000000000000000 [ 166.291553][ T2222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.299528][ T2222] R13: 0000000000000000 R14: 00007f863b7b5fa0 R15: 00007ffde2042ec8 [ 166.307501][ T2222] [ 166.428561][ T28] audit: type=1400 audit(2000000059.670:1142): avc: denied { append } for pid=2231 comm="syz.1.501" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.499312][ T28] audit: type=1400 audit(2000000059.670:1143): avc: denied { write } for pid=2231 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 166.776882][ T19] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 166.941459][ T28] audit: type=1400 audit(2000000060.190:1144): avc: denied { create } for pid=2245 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.952394][ T2250] loop2: detected capacity change from 0 to 256 [ 166.973795][ T19] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.988526][ T2250] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 167.159779][ T19] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.331635][ T28] audit: type=1400 audit(2000000060.250:1145): avc: denied { mount } for pid=2240 comm="syz.2.502" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 169.856727][ T19] usb 5-1: config 0 interface 0 has no altsetting 0 [ 169.863650][ T19] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 169.873160][ T2255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=2255 comm=syz.3.506 [ 169.888445][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.900914][ T19] usb 5-1: config 0 descriptor?? [ 169.908127][ T19] usb 5-1: can't set config #0, error -71 [ 169.914605][ T19] usb 5-1: USB disconnect, device number 9 [ 169.917259][ T2257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=2257 comm=syz.1.505 [ 169.930375][ T28] audit: type=1400 audit(2000000060.280:1146): avc: denied { write } for pid=2240 comm="syz.2.502" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.964200][ T2261] FAULT_INJECTION: forcing a failure. [ 169.964200][ T2261] name failslab, interval 1, probability 0, space 0, times 0 [ 169.976971][ T2261] CPU: 0 PID: 2261 Comm: syz.4.508 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 169.986711][ T2261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.996780][ T2261] Call Trace: [ 170.000074][ T2261] [ 170.003016][ T2261] __dump_stack+0x21/0x24 [ 170.007375][ T2261] dump_stack_lvl+0xee/0x150 [ 170.011976][ T2261] ? __cfi_dump_stack_lvl+0x8/0x8 [ 170.017019][ T2261] dump_stack+0x15/0x24 [ 170.021195][ T2261] should_fail_ex+0x3d4/0x520 [ 170.025899][ T2261] __should_failslab+0xac/0xf0 [ 170.030674][ T2261] ? __tcf_chain_get+0xd9/0x430 [ 170.035549][ T2261] should_failslab+0x9/0x20 [ 170.040068][ T2261] __kmem_cache_alloc_node+0x3d/0x2c0 [ 170.045452][ T2261] ? __cfi_mutex_lock+0x10/0x10 [ 170.050320][ T2261] ? __tcf_chain_get+0xd9/0x430 [ 170.055205][ T2261] kmalloc_trace+0x29/0xb0 [ 170.059660][ T2261] __tcf_chain_get+0xd9/0x430 [ 170.064374][ T2261] ? __kasan_check_write+0x14/0x20 [ 170.069523][ T2261] tc_new_tfilter+0x7c3/0x1900 [ 170.074321][ T2261] ? selinux_capable+0x29c/0x380 [ 170.079285][ T2261] ? __cfi_tc_new_tfilter+0x10/0x10 [ 170.084506][ T2261] ? security_capable+0x99/0xc0 [ 170.089385][ T2261] ? ns_capable+0x8c/0xf0 [ 170.093736][ T2261] ? netlink_net_capable+0x125/0x160 [ 170.099038][ T2261] ? __cfi_tc_new_tfilter+0x10/0x10 [ 170.104267][ T2261] rtnetlink_rcv_msg+0x973/0xcf0 [ 170.109224][ T2261] ? 0xffffffffa0003de0 [ 170.113387][ T2261] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 170.118857][ T2261] ? __kernel_text_address+0xd/0x30 [ 170.124079][ T2261] ? unwind_get_return_address+0x4d/0x90 [ 170.129732][ T2261] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 170.135900][ T2261] ? memcpy+0x56/0x70 [ 170.139906][ T2261] ? avc_has_perm_noaudit+0x2f4/0x460 [ 170.145291][ T2261] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 170.151026][ T2261] ? slab_post_alloc_hook+0x4f/0x2d0 [ 170.156328][ T2261] ? avc_has_perm+0x158/0x240 [ 170.161016][ T2261] ? ____sys_sendmsg+0x5a9/0x990 [ 170.165969][ T2261] ? ___sys_sendmsg+0x21c/0x290 [ 170.170831][ T2261] ? __cfi_avc_has_perm+0x10/0x10 [ 170.175866][ T2261] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 170.181254][ T2261] netlink_rcv_skb+0x1f2/0x440 [ 170.186034][ T2261] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 170.191504][ T2261] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 170.199755][ T2261] ? __netlink_lookup+0x387/0x3b0 [ 170.204797][ T2261] rtnetlink_rcv+0x1c/0x20 [ 170.209223][ T2261] netlink_unicast+0x8b1/0xa30 [ 170.214009][ T2261] netlink_sendmsg+0x8aa/0xbc0 [ 170.218789][ T2261] ? __cfi_netlink_sendmsg+0x10/0x10 [ 170.224085][ T2261] ? security_socket_sendmsg+0x93/0xb0 [ 170.229562][ T2261] ? __cfi_netlink_sendmsg+0x10/0x10 [ 170.234858][ T2261] ____sys_sendmsg+0x5a9/0x990 [ 170.239636][ T2261] ? __sys_sendmsg_sock+0x40/0x40 [ 170.244703][ T2261] ? import_iovec+0x7c/0xb0 [ 170.249228][ T2261] ___sys_sendmsg+0x21c/0x290 [ 170.253919][ T2261] ? __sys_sendmsg+0x270/0x270 [ 170.258693][ T2261] ? __kasan_check_write+0x14/0x20 [ 170.263829][ T2261] ? proc_fail_nth_write+0x17a/0x1f0 [ 170.269136][ T2261] ? vfs_write+0x9d6/0xca0 [ 170.273573][ T2261] ? __fdget+0x19c/0x220 [ 170.277835][ T2261] __x64_sys_sendmsg+0x1f0/0x2c0 [ 170.282780][ T2261] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 170.288251][ T2261] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 170.294333][ T2261] x64_sys_call+0x171/0x9a0 [ 170.298938][ T2261] do_syscall_64+0x4c/0xa0 [ 170.303372][ T2261] ? clear_bhb_loop+0x15/0x70 [ 170.308059][ T2261] ? clear_bhb_loop+0x15/0x70 [ 170.312834][ T2261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.318741][ T2261] RIP: 0033:0x7f0fd718e929 [ 170.323167][ T2261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.342783][ T2261] RSP: 002b:00007f0fd8066038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.351301][ T2261] RAX: ffffffffffffffda RBX: 00007f0fd73b5fa0 RCX: 00007f0fd718e929 [ 170.359283][ T2261] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000006 [ 170.367267][ T2261] RBP: 00007f0fd8066090 R08: 0000000000000000 R09: 0000000000000000 [ 170.375336][ T2261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.383318][ T2261] R13: 0000000000000000 R14: 00007f0fd73b5fa0 R15: 00007fff578cd7a8 [ 170.391308][ T2261] [ 171.688371][ T2272] loop2: detected capacity change from 0 to 1024 [ 171.695046][ T2273] loop4: detected capacity change from 0 to 1024 [ 171.715809][ T2272] EXT4-fs: Ignoring removed bh option [ 171.743817][ T2273] EXT4-fs: Ignoring removed orlov option [ 171.767959][ T2272] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.791679][ T2273] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.810342][ T2272] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 171.821774][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 171.821788][ T28] audit: type=1400 audit(2000000065.070:1153): avc: denied { mount } for pid=2271 comm="syz.4.512" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 171.876009][ T2272] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 171.895876][ T2272] EXT4-fs (loop2): failed to open journal device unknown-block(0,5) -6 [ 171.910269][ T28] audit: type=1400 audit(2000000065.110:1154): avc: denied { mounton } for pid=2271 comm="syz.4.512" path="/91/bus/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.007365][ T289] EXT4-fs (loop4): unmounting filesystem. [ 172.031051][ T28] audit: type=1400 audit(2000000065.110:1155): avc: denied { write } for pid=2271 comm="syz.4.512" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.072723][ T28] audit: type=1400 audit(2000000065.110:1156): avc: denied { add_name } for pid=2271 comm="syz.4.512" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.093661][ T28] audit: type=1400 audit(2000000065.110:1157): avc: denied { create } for pid=2271 comm="syz.4.512" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 172.135911][ T28] audit: type=1400 audit(2000000065.110:1158): avc: denied { remove_name } for pid=2271 comm="syz.4.512" name=".index" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.158723][ T28] audit: type=1400 audit(2000000065.110:1159): avc: denied { rmdir } for pid=2271 comm="syz.4.512" name=".index" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 172.570651][ T2292] loop4: detected capacity change from 0 to 512 [ 172.585390][ T2292] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.644705][ T2280] mmap: syz.1.514 (2280) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 172.747916][ T2292] EXT4-fs (loop4): 1 truncate cleaned up [ 172.748693][ T28] audit: type=1400 audit(2000000065.230:1160): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 172.753726][ T2292] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.779607][ T28] audit: type=1404 audit(2000000065.510:1161): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 172.797001][ T2272] loop2: detected capacity change from 0 to 1024 [ 172.797138][ T28] audit: type=1400 audit(2000000065.620:1162): avc: denied { bpf } for pid=2285 comm="syz.3.516" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 172.824305][ T2272] EXT4-fs: Ignoring removed orlov option [ 172.868370][ T2272] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.012465][ T289] EXT4-fs (loop4): unmounting filesystem. [ 173.027134][ T285] EXT4-fs (loop2): unmounting filesystem. [ 173.125873][ T2305] loop1: detected capacity change from 0 to 256 [ 173.148472][ T2305] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 173.176981][ T2305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=2305 comm=syz.1.520 [ 176.149812][ T2323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=2323 comm=syz.4.523 [ 176.193472][ T2325] loop2: detected capacity change from 0 to 1024 [ 176.220983][ T2325] EXT4-fs: Ignoring removed bh option [ 176.240925][ T2325] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 176.265432][ T2325] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 176.288303][ T2325] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 176.307786][ T2325] EXT4-fs (loop2): failed to open journal device unknown-block(0,5) -6 [ 176.380201][ T19] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.527746][ T2325] loop2: detected capacity change from 0 to 1024 [ 176.550552][ T2325] EXT4-fs: Ignoring removed orlov option [ 176.562283][ T2325] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 176.592099][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.603224][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.866150][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 176.866173][ T28] audit: type=1400 audit(2000000070.110:1222): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 176.902256][ T285] EXT4-fs (loop2): unmounting filesystem. [ 176.922938][ T2343] futex_wake_op: syz.0.530 tries to shift op by -1; fix this program [ 176.927574][ T19] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.940144][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.942999][ T28] audit: type=1400 audit(2000000070.170:1223): avc: denied { map_create } for pid=2335 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.971173][ T19] usb 4-1: config 0 descriptor?? [ 176.987149][ T28] audit: type=1400 audit(2000000070.170:1224): avc: denied { prog_load } for pid=2335 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 177.015180][ T2348] loop4: detected capacity change from 0 to 512 [ 177.040995][ T2348] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 177.052789][ T28] audit: type=1400 audit(2000000070.220:1225): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.107288][ T28] audit: type=1400 audit(2000000070.220:1226): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.131662][ T28] audit: type=1400 audit(2000000070.220:1227): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.184971][ T2350] FAULT_INJECTION: forcing a failure. [ 177.184971][ T2350] name failslab, interval 1, probability 0, space 0, times 0 [ 177.197694][ T2350] CPU: 1 PID: 2350 Comm: syz.2.531 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 177.207443][ T2350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.217505][ T2350] Call Trace: [ 177.220787][ T2350] [ 177.223727][ T2350] __dump_stack+0x21/0x24 [ 177.228080][ T2350] dump_stack_lvl+0xee/0x150 [ 177.232684][ T2350] ? __cfi_dump_stack_lvl+0x8/0x8 [ 177.237723][ T2350] ? __schedule+0xb8f/0x14e0 [ 177.242331][ T2350] dump_stack+0x15/0x24 [ 177.246498][ T2350] should_fail_ex+0x3d4/0x520 [ 177.251185][ T2350] __should_failslab+0xac/0xf0 [ 177.255962][ T2350] ? qdisc_alloc+0x79/0x780 [ 177.260476][ T2350] should_failslab+0x9/0x20 [ 177.265002][ T2350] __kmem_cache_alloc_node+0x3d/0x2c0 [ 177.270385][ T2350] ? qdisc_alloc+0x79/0x780 [ 177.274899][ T2350] __kmalloc_node+0xa1/0x1e0 [ 177.279504][ T2350] qdisc_alloc+0x79/0x780 [ 177.283850][ T2350] ? preempt_schedule_thunk+0x16/0x18 [ 177.289235][ T2350] qdisc_create+0x170/0x1040 [ 177.293837][ T2350] ? sysvec_reschedule_ipi+0x78/0x80 [ 177.299131][ T2350] ? qdisc_notify+0x360/0x360 [ 177.303824][ T2350] ? tc_modify_qdisc+0x254/0x1900 [ 177.308856][ T2350] ? __sanitizer_cov_trace_switch+0xd4/0xe0 [ 177.314768][ T2350] tc_modify_qdisc+0x8ea/0x1900 [ 177.318736][ T28] audit: type=1400 audit(2000000070.230:1228): avc: denied { ioctl } for pid=2321 comm="syz.3.525" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.319641][ T2350] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 177.319671][ T2350] ? __kasan_check_write+0x14/0x20 [ 177.352074][ T28] audit: type=1400 audit(2000000070.230:1229): avc: denied { perfmon } for pid=2345 comm="syz.2.531" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.354764][ T2350] ? mutex_lock+0x8d/0x1a0 [ 177.354787][ T2350] ? __cfi_mutex_lock+0x10/0x10 [ 177.375763][ T28] audit: type=1400 audit(2000000070.230:1230): avc: denied { prog_run } for pid=2335 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 177.380043][ T2350] ? ns_capable+0x8c/0xf0 [ 177.380065][ T2350] ? netlink_net_capable+0x125/0x160 [ 177.385484][ T28] audit: type=1400 audit(2000000070.260:1231): avc: denied { execmem } for pid=2345 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 177.403703][ T2350] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 177.403728][ T2350] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 177.403751][ T2350] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 177.448105][ T2350] ? __kasan_check_write+0x14/0x20 [ 177.453251][ T2350] ? __switch_to+0x51f/0xe30 [ 177.457860][ T2350] ? __cfi___switch_to+0x10/0x10 [ 177.462813][ T2350] ? _raw_spin_unlock+0x4c/0x70 [ 177.467686][ T2350] ? finish_task_switch+0x16b/0x7b0 [ 177.472899][ T2350] ? __switch_to_asm+0x3a/0x60 [ 177.477678][ T2350] ? __schedule+0xb8f/0x14e0 [ 177.482288][ T2350] ? release_firmware_map_entry+0x194/0x194 [ 177.488199][ T2350] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 177.493587][ T2350] ? __kasan_check_read+0x11/0x20 [ 177.498634][ T2350] netlink_rcv_skb+0x1f2/0x440 [ 177.503412][ T2350] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 177.508882][ T2350] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 177.514184][ T2350] ? __cfi_rtnetlink_rcv+0x10/0x10 [ 177.519303][ T2350] ? rtnetlink_rcv+0xd/0x20 [ 177.523820][ T2350] rtnetlink_rcv+0x1c/0x20 [ 177.528246][ T2350] netlink_unicast+0x8b1/0xa30 [ 177.533022][ T2350] netlink_sendmsg+0x8aa/0xbc0 [ 177.537800][ T2350] ? __cfi_netlink_sendmsg+0x10/0x10 [ 177.543098][ T2350] ? security_socket_sendmsg+0x93/0xb0 [ 177.548575][ T2350] ? __cfi_netlink_sendmsg+0x10/0x10 [ 177.553875][ T2350] ____sys_sendmsg+0x5a9/0x990 [ 177.558650][ T2350] ? __sys_sendmsg_sock+0x40/0x40 [ 177.563681][ T2350] ? import_iovec+0x7c/0xb0 [ 177.568200][ T2350] ___sys_sendmsg+0x21c/0x290 [ 177.571570][ T2351] syz.3.525[2351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.572880][ T2350] ? __sys_sendmsg+0x270/0x270 [ 177.572906][ T2350] ? release_firmware_map_entry+0x194/0x194 [ 177.594717][ T2350] ? proc_fail_nth_write+0x17a/0x1f0 [ 177.600009][ T2350] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 177.605882][ T2350] ? vfs_write+0x9d6/0xca0 [ 177.610299][ T2350] ? __fdget+0x19c/0x220 [ 177.614544][ T2350] __x64_sys_sendmsg+0x1f0/0x2c0 [ 177.619481][ T2350] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 177.624947][ T2350] ? __kasan_check_write+0x14/0x20 [ 177.630069][ T2350] ? fpregs_restore_userregs+0x128/0x260 [ 177.635707][ T2350] ? switch_fpu_return+0xe/0x10 [ 177.640565][ T2350] x64_sys_call+0x171/0x9a0 [ 177.645076][ T2350] do_syscall_64+0x4c/0xa0 [ 177.649497][ T2350] ? clear_bhb_loop+0x15/0x70 [ 177.654168][ T2350] ? clear_bhb_loop+0x15/0x70 [ 177.658850][ T2350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.664763][ T2350] RIP: 0033:0x7fdfa8f8e929 [ 177.669180][ T2350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.688787][ T2350] RSP: 002b:00007fdfa9d37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.697205][ T2350] RAX: ffffffffffffffda RBX: 00007fdfa91b6160 RCX: 00007fdfa8f8e929 [ 177.705171][ T2350] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000005 [ 177.713135][ T2350] RBP: 00007fdfa9d37090 R08: 0000000000000000 R09: 0000000000000000 [ 177.721103][ T2350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.729069][ T2350] R13: 0000000000000000 R14: 00007fdfa91b6160 R15: 00007ffcc55fc9f8 [ 177.737037][ T2350] [ 177.756403][ T2322] netlink: 'syz.3.525': attribute type 25 has an invalid length. [ 177.780249][ T2322] netlink: 'syz.3.525': attribute type 7 has an invalid length. [ 177.813941][ T19] usbhid 4-1:0.0: can't add hid device: -71 [ 177.821343][ T19] usbhid: probe of 4-1:0.0 failed with error -71 [ 177.840603][ T2357] syz.1.534[2357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.840684][ T2357] syz.1.534[2357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.870294][ T19] usb 4-1: USB disconnect, device number 6 [ 177.987575][ T2361] loop2: detected capacity change from 0 to 7 [ 178.025896][ T2361] binder: 2360:2361 ioctl c00c55ca 2000000001c0 returned -22 [ 178.052344][ T2361] netlink: 'syz.1.536': attribute type 12 has an invalid length. [ 178.566986][ T2377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=2377 comm=syz.3.539 [ 179.075415][ T2379] loop1: detected capacity change from 0 to 1024 [ 179.167229][ T2379] EXT4-fs: Ignoring removed bh option [ 179.360227][ T2379] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.390420][ T2379] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 179.423578][ T2379] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 179.453648][ T2379] EXT4-fs (loop1): failed to open journal device unknown-block(0,5) -6 [ 179.779811][ T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 179.824286][ T2383] device veth0 entered promiscuous mode [ 179.831079][ T2383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 179.842910][ T2379] loop1: detected capacity change from 0 to 1024 [ 179.864879][ T2379] EXT4-fs: Ignoring removed orlov option [ 180.375051][ T2388] loop4: detected capacity change from 0 to 256 [ 180.396040][ T2388] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 180.455407][ T24] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.944849][ T24] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.954984][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.961755][ T24] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 180.994557][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.013820][ T2379] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 181.046566][ T24] usb 1-1: config 0 descriptor?? [ 181.146508][ T284] EXT4-fs (loop1): unmounting filesystem. [ 181.169540][ T2399] loop1: detected capacity change from 0 to 256 [ 181.491685][ T2403] loop2: detected capacity change from 0 to 256 [ 181.543203][ T2399] syz.1.547[2399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.543484][ T2399] syz.1.547[2399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.774455][ T2409] loop1: detected capacity change from 0 to 128 [ 182.295173][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 182.295198][ T28] audit: type=1400 audit(2000000075.540:1276): avc: denied { mount } for pid=2408 comm="syz.1.549" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 182.461467][ T28] audit: type=1400 audit(2000000075.680:1277): avc: denied { read write } for pid=2412 comm="syz.3.551" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.486200][ T28] audit: type=1400 audit(2000000075.680:1278): avc: denied { open } for pid=2412 comm="syz.3.551" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.509862][ T28] audit: type=1400 audit(2000000075.680:1279): avc: denied { ioctl } for pid=2412 comm="syz.3.551" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.526432][ T2409] syz.1.549: attempt to access beyond end of device [ 182.526432][ T2409] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 182.556459][ T28] audit: type=1400 audit(2000000075.740:1280): avc: denied { map_read map_write } for pid=2414 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 182.616389][ T2420] syz.1.549: attempt to access beyond end of device [ 182.616389][ T2420] loop1: rw=524288, sector=145, nr_sectors = 256 limit=128 [ 182.653906][ T2420] syz.1.549: attempt to access beyond end of device [ 182.653906][ T2420] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 182.733623][ T2420] syz.1.549: attempt to access beyond end of device [ 182.733623][ T2420] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 182.970870][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 182.977130][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 182.990568][ T28] audit: type=1400 audit(2000000076.240:1281): avc: denied { create } for pid=2422 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 183.030260][ T19] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 183.039499][ T24] usb 1-1: USB disconnect, device number 12 [ 183.060235][ T28] audit: type=1400 audit(2000000076.260:1282): avc: denied { module_request } for pid=2422 comm="syz.0.553" kmod="net-pf-2-proto-9-type-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 183.173301][ T2425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=2425 comm=syz.0.553 [ 183.206626][ T19] usb 4-1: device descriptor read/64, error -71 [ 183.274570][ T28] audit: type=1400 audit(2000000076.420:1283): avc: denied { ioctl } for pid=2422 comm="syz.0.553" path="socket:[24981]" dev="sockfs" ino=24981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.510276][ T19] usb 4-1: device descriptor read/64, error -71 [ 183.600034][ T28] audit: type=1400 audit(2000000076.840:1284): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 183.623387][ T2411] loop4: detected capacity change from 0 to 40427 [ 183.790245][ T19] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 183.950208][ T19] usb 4-1: device descriptor read/64, error -71 [ 184.010567][ T28] audit: type=1400 audit(2000000077.260:1285): avc: denied { create } for pid=2426 comm="syz.2.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.066835][ T2430] loop2: detected capacity change from 0 to 1024 [ 184.220191][ T19] usb 4-1: device descriptor read/64, error -71 [ 184.340362][ T19] usb usb4-port1: attempt power cycle [ 184.368553][ T2430] EXT4-fs: Ignoring removed nobh option [ 184.374319][ T2411] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 184.389630][ T2430] EXT4-fs: Ignoring removed bh option [ 184.406634][ T2411] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 184.436637][ T2430] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.455290][ T2411] F2FS-fs (loop4): invalid crc value [ 184.480478][ T2411] F2FS-fs (loop4): Found nat_bits in checkpoint [ 184.482192][ T2430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.564676][ T2449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.405676][ T19] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.476090][ T2430] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.556: Allocating blocks 385-513 which overlap fs metadata [ 186.584794][ T2430] EXT4-fs (loop2): pa ffff88811a15f1f8: logic 16, phys. 129, len 24 [ 186.592909][ T2430] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 186.614283][ T285] EXT4-fs (loop2): unmounting filesystem. [ 187.108227][ T19] usb 4-1: device descriptor read/8, error -71 [ 187.428880][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 187.428995][ T28] audit: type=1400 audit(2000000080.670:1302): avc: denied { bpf } for pid=2459 comm="syz.3.564" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.488983][ T19] usb 4-1: device descriptor read/8, error -71 [ 187.521371][ T28] audit: type=1400 audit(2000000080.670:1303): avc: denied { prog_load } for pid=2459 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 187.542062][ T28] audit: type=1400 audit(2000000080.670:1304): avc: denied { perfmon } for pid=2459 comm="syz.3.564" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.565335][ T28] audit: type=1400 audit(2000000080.720:1305): avc: denied { read write } for pid=284 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.590310][ T28] audit: type=1400 audit(2000000080.720:1306): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.615572][ T28] audit: type=1400 audit(2000000080.720:1307): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.141339][ T28] audit: type=1400 audit(2000000081.380:1308): avc: denied { map_create } for pid=2461 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 188.162044][ T28] audit: type=1400 audit(2000000081.380:1309): avc: denied { map_read map_write } for pid=2461 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 188.232922][ T28] audit: type=1400 audit(2000000081.380:1310): avc: denied { name_bind } for pid=2465 comm="syz.0.565" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 188.287324][ T28] audit: type=1400 audit(2000000081.380:1311): avc: denied { node_bind } for pid=2465 comm="syz.0.565" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 188.430824][ T417] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 189.005164][ T417] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.020404][ T417] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.038648][ T417] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.051643][ T417] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 189.067992][ T417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.143954][ T417] usb 3-1: config 0 descriptor?? [ 189.178381][ T2503] loop1: detected capacity change from 0 to 512 [ 189.189037][ T2503] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 189.205430][ T2503] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 189.215575][ T2503] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 189.227465][ T2503] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 189.228116][ T2505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=2505 comm=syz.4.574 [ 189.235803][ T2503] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 189.256457][ T2503] EXT4-fs (loop1): orphan cleanup on readonly fs [ 189.263390][ T2503] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.575: bg 0: block 34: padding at end of block bitmap is not set [ 189.277837][ T2503] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.575: Failed to acquire dquot type 1 [ 189.289593][ T2503] EXT4-fs (loop1): 1 truncate cleaned up [ 189.295580][ T2503] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.344913][ T2503] SELinux: failed to load policy [ 189.381137][ T2508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.466562][ T2513] loop2: detected capacity change from 0 to 512 [ 189.642028][ T553] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 189.733062][ T2513] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.563: invalid indirect mapped block 10 (level 1) [ 189.751580][ T2513] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.563: invalid indirect mapped block 8 (level 1) [ 189.773809][ T2513] EXT4-fs (loop2): 1 truncate cleaned up [ 189.779823][ T2513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 190.197080][ T553] usb 2-1: config 104 has too many interfaces: 125, using maximum allowed: 32 [ 190.540705][ T553] usb 2-1: config 104 has an invalid descriptor of length 0, skipping remainder of the config [ 290.570105][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 290.577092][ C1] (detected by 1, t=10002 jiffies, g=12597, q=223 ncpus=2) [ 290.584396][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294966291-4294956288), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 290.597783][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g12597 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 290.609086][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 290.619152][ C1] rcu: RCU grace-period kthread stack dump: [ 290.625055][ C1] task:rcu_preempt state:R running task stack:28528 pid:14 ppid:2 flags:0x00004000 [ 290.635852][ C1] Call Trace: [ 290.639153][ C1] [ 290.642156][ C1] __schedule+0xb87/0x14e0 [ 290.646594][ C1] ? release_firmware_map_entry+0x194/0x194 [ 290.652545][ C1] ? __mod_timer+0x7ae/0xb30 [ 290.657148][ C1] schedule+0xbd/0x170 [ 290.661238][ C1] schedule_timeout+0x12c/0x2e0 [ 290.666109][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 290.671488][ C1] ? __cfi_process_timeout+0x10/0x10 [ 290.676785][ C1] ? prepare_to_swait_event+0x308/0x320 [ 290.682343][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 290.687206][ C1] ? rcu_gp_init+0xe1a/0xf10 [ 290.691816][ C1] ? rcu_gp_init+0xf10/0xf10 [ 290.696421][ C1] rcu_gp_kthread+0x95/0x370 [ 290.701027][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 290.706323][ C1] ? __kasan_check_read+0x11/0x20 [ 290.711362][ C1] ? __kthread_parkme+0x142/0x180 [ 290.716396][ C1] kthread+0x281/0x320 [ 290.720478][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 290.725686][ C1] ? __cfi_kthread+0x10/0x10 [ 290.730285][ C1] ret_from_fork+0x1f/0x30 [ 290.734713][ C1] [ 290.737734][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 290.744147][ C1] Sending NMI from CPU 1 to CPUs 0: [ 290.749366][ C0] NMI backtrace for cpu 0 [ 290.749375][ C0] CPU: 0 PID: 2475 Comm: syz.2.563 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 290.749391][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.749399][ C0] RIP: 0010:update_stack_state+0x6/0x480 [ 290.749419][ C0] Code: 8c 6e fe ff ff e8 ea 44 7f 00 e9 64 fe ff ff 0f 1f 44 00 00 55 48 89 e5 48 8b 07 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 89 f7 48 89 fb 49 bd [ 290.749431][ C0] RSP: 0018:ffffc900115075b0 EFLAGS: 00000046 [ 290.749446][ C0] RAX: ffffc90011507c90 RBX: ffffc90011507648 RCX: 0000000011507600 [ 290.749457][ C0] RDX: dffffc0000000000 RSI: ffffc90011507c90 RDI: ffffc90011507648 [ 290.749468][ C0] RBP: ffffc900115075b8 R08: ffffc90011507710 R09: ffffc90011507708 [ 290.749479][ C0] R10: 0000000000000008 R11: 1ffff920022a0ec9 R12: 0000000000000000 [ 290.749489][ C0] R13: 1ffff920022a0ed4 R14: ffffc900115076a0 R15: ffffc90011507b98 [ 290.749499][ C0] FS: 00007fdfa9d796c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 290.749513][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.749524][ C0] CR2: 00002000000bd038 CR3: 000000011ddda000 CR4: 00000000003506b0 [ 290.749539][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.749548][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.749558][ C0] Call Trace: [ 290.749562][ C0] [ 290.749567][ C0] unwind_next_frame+0x3d5/0x700 [ 290.749584][ C0] ? __kernel_text_address+0xd/0x30 [ 290.749602][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 290.749620][ C0] arch_stack_walk+0x124/0x150 [ 290.749641][ C0] ? get_signal+0x522/0x1520 [ 290.749660][ C0] stack_trace_save+0x98/0xe0 [ 290.749676][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 290.749693][ C0] ? memset+0x35/0x40 [ 290.749713][ C0] kasan_set_track+0x4b/0x70 [ 290.749726][ C0] ? kasan_set_track+0x4b/0x70 [ 290.749739][ C0] ? kasan_save_free_info+0x31/0x50 [ 290.749756][ C0] ? ____kasan_slab_free+0x132/0x180 [ 290.749771][ C0] ? __kasan_slab_free+0x11/0x20 [ 290.749784][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 290.749803][ C0] ? kmem_cache_free+0x12d/0x300 [ 290.749818][ C0] ? __dequeue_signal+0x4cf/0x600 [ 290.749834][ C0] ? dequeue_signal+0xec/0x4d0 [ 290.749849][ C0] ? get_signal+0x522/0x1520 [ 290.749873][ C0] ? debug_smp_processor_id+0x17/0x20 [ 290.749892][ C0] ? kmem_cache_free+0x12d/0x300 [ 290.749907][ C0] kasan_save_free_info+0x31/0x50 [ 290.749925][ C0] ____kasan_slab_free+0x132/0x180 [ 290.749940][ C0] __kasan_slab_free+0x11/0x20 [ 290.749954][ C0] slab_free_freelist_hook+0xc2/0x190 [ 290.749973][ C0] ? __dequeue_signal+0x4cf/0x600 [ 290.749989][ C0] kmem_cache_free+0x12d/0x300 [ 290.750006][ C0] __dequeue_signal+0x4cf/0x600 [ 290.750023][ C0] dequeue_signal+0xec/0x4d0 [ 290.750040][ C0] get_signal+0x522/0x1520 [ 290.750061][ C0] arch_do_signal_or_restart+0xb0/0x1030 [ 290.750078][ C0] ? __ia32_sys_rt_sigreturn+0x5e7/0x6c0 [ 290.750096][ C0] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 290.750114][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 290.750135][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 290.750150][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 290.750164][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 290.750180][ C0] do_syscall_64+0x58/0xa0 [ 290.750206][ C0] ? clear_bhb_loop+0x15/0x70 [ 290.750220][ C0] ? clear_bhb_loop+0x15/0x70 [ 290.750235][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.750255][ C0] RIP: 0033:0x7fdfa8f8e929 [ 290.750268][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.750279][ C0] RSP: 002b:00007fdfa9d790e8 EFLAGS: 00000246 [ 290.750291][ C0] RAX: fffffffffffffffc RBX: 00007fdfa91b5fa8 RCX: 00007fdfa8f8e929 [ 290.750302][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdfa91b5fa8 [ 290.750311][ C0] RBP: 00007fdfa91b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 290.750321][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfa91b5fac [ 290.750330][ C0] R13: 0000000000000000 R14: 00007ffcc55fc910 R15: 00007ffcc55fc9f8 [ 290.750343][ C0] [ 428.630194][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 238s! [ 428.638691][ C0] Showing busy workqueues and worker pools: [ 428.644621][ C0] workqueue events: flags=0x0 [ 428.649316][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 428.649360][ C0] in-flight: 312:free_work [ 428.649395][ C0] pending: kfree_rcu_monitor, rht_deferred_worker [ 428.649438][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 428.649472][ C0] pending: delayed_fput, free_ioctx, vmstat_shepherd, psi_avgs_work, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker [ 428.649579][ C0] workqueue events_long: flags=0x0 [ 428.695249][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.695297][ C0] pending: br_fdb_cleanup [ 428.695324][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 428.695362][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup [ 428.695464][ C0] workqueue events_unbound: flags=0x2 [ 428.734028][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 428.734069][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 428.734172][ C0] workqueue events_power_efficient: flags=0x80 [ 428.755125][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 428.755177][ C0] pending: neigh_managed_work, neigh_periodic_work, reg_check_chans_work, gc_worker [ 428.755247][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 428.755290][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, check_lifetime [ 428.755363][ C0] workqueue rcu_gp: flags=0x8 [ 428.795912][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.795971][ C0] pending: srcu_invoke_callbacks [ 428.796003][ C0] workqueue mm_percpu_wq: flags=0x8 [ 428.814132][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.814172][ C0] pending: vmstat_update [ 428.814200][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.814234][ C0] pending: vmstat_update [ 428.814261][ C0] workqueue writeback: flags=0x4a [ 428.843716][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 428.843750][ C0] pending: wb_workfn, wb_workfn, wb_workfn [ 428.843790][ C0] workqueue kblockd: flags=0x18 [ 428.861992][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=3/256 refcnt=4 [ 428.862029][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 428.862077][ C0] workqueue usb_hub_wq: flags=0x4 [ 428.883664][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 428.883701][ C0] in-flight: 553:hub_event hub_event, 417:hub_event hub_event [ 428.883929][ C0] workqueue dm_bufio_cache: flags=0x8 [ 428.904768][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.904806][ C0] pending: work_fn [ 428.904877][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 428.922213][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 428.922251][ C0] pending: addrconf_verify_work [ 428.922279][ C0] inactive: addrconf_verify_work [ 428.922304][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 428.922337][ C0] pending: addrconf_verify_work [ 428.922362][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 428.922540][ C0] workqueue wg-kex-wg0: flags=0x6 [ 428.967271][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 428.967307][ C0] pending: wg_packet_handshake_send_worker [ 428.967341][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 428.985966][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.986003][ C0] pending: wg_packet_encrypt_worker [ 428.986035][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.986068][ C0] pending: wg_packet_encrypt_worker [ 428.986100][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.017683][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.017716][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.017768][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.039283][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.039324][ C0] pending: wg_packet_encrypt_worker [ 429.039358][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.039390][ C0] pending: wg_packet_encrypt_worker [ 429.039422][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.070794][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.070829][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.070881][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.092378][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.092417][ C0] pending: wg_packet_encrypt_worker [ 429.092449][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.110904][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 429.110947][ C0] in-flight: 39:wg_packet_tx_worker, 375:wg_packet_encrypt_worker [ 429.111002][ C0] pending: wg_packet_encrypt_worker [ 429.111030][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.111065][ C0] pending: wg_packet_encrypt_worker [ 429.111094][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.150870][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.150907][ C0] pending: wg_packet_encrypt_worker [ 429.150947][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.150980][ C0] pending: wg_packet_encrypt_worker [ 429.151009][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.182639][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.182676][ C0] pending: wg_packet_encrypt_worker [ 429.182705][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.182739][ C0] pending: wg_packet_encrypt_worker [ 429.182769][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.214401][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.214437][ C0] in-flight: 24:wg_packet_encrypt_worker [ 429.214472][ C0] pending: wg_packet_encrypt_worker [ 429.214500][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.214534][ C0] pending: wg_packet_encrypt_worker [ 429.214565][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.251927][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.251976][ C0] pending: wg_packet_handshake_send_worker [ 429.252007][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.270641][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.270678][ C0] pending: wg_packet_encrypt_worker [ 429.270709][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.270745][ C0] pending: wg_packet_encrypt_worker [ 429.270775][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.302408][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.302447][ C0] pending: wg_packet_encrypt_worker [ 429.302477][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.302510][ C0] pending: wg_packet_encrypt_worker [ 429.302543][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.333994][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.334027][ C0] pending: wg_packet_handshake_send_worker [ 429.334058][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.352706][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.352742][ C0] pending: wg_packet_encrypt_worker [ 429.352773][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.352806][ C0] pending: wg_packet_encrypt_worker [ 429.352837][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.384189][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.384222][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.384273][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.405774][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.405812][ C0] pending: wg_packet_encrypt_worker [ 429.405844][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.405879][ C0] pending: wg_packet_encrypt_worker [ 429.405909][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.437354][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.437388][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.437440][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.458946][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.458983][ C0] pending: wg_packet_encrypt_worker [ 429.459019][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=239s workers=7 idle: 6 19 1904 62 316 [ 429.459136][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=238s workers=7 idle: 468 324 429