last executing test programs: 5m59.610267429s ago: executing program 1 (id=2): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz0\x00', 0x1c}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) read(r0, &(0x7f0000000280)=""/30, 0x1e) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000780)={0xc, {"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", 0x1000}}, 0x1006) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000800b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xd8, &(0x7f0000001cc0)={@local, @empty, @void, {@mpls_uc={0x8847, {[{0x7}, {0x800}, {0xa, 0x0, 0x1}], @ipv4=@generic={{0x1b, 0x4, 0x0, 0x2, 0xbe, 0x67, 0x0, 0x7f, 0xc, 0x0, @loopback, @multicast1, {[@lsrr={0x83, 0x1b, 0x76, [@loopback, @empty, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}]}, @lsrr={0x83, 0xb, 0xbb, [@dev={0xac, 0x14, 0x14, 0x15}, @remote]}, @lsrr={0x83, 0xb, 0xf5, [@rand_addr=0x64010101, @loopback]}, @timestamp_addr={0x44, 0x14, 0xde, 0x1, 0x7, [{@private=0xa010100, 0x2}, {@empty, 0xffffffe2}]}, @timestamp_prespec={0x44, 0x4, 0x8, 0x3, 0x2}, @rr={0x7, 0xb, 0x1c, [@local, @rand_addr=0x64010100]}, @timestamp={0x44, 0x4, 0xfe, 0x0, 0x3}]}}, "62c0d921c884e5782e6c289ba3d11804f3e7a221a07310b6a5c90e5cdca4434c0768c6d554eb89a03aa0ec6c41f6db67e0c783df522211a914c862d8d0a065fe108d343e56063208646cd717bf59848ce525"}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000180)=""/175, 0xaf}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000780)=""/249, 0xf9}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000880)=""/173, 0xad}], 0xa}, 0x40000043) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 5m53.200169956s ago: executing program 1 (id=9): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYRES8=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d197390e5fb0917d07bbf999c82ffbe030cea02dcf2777613d24a2302bf8f70e08b95be6c5714384f3587afe64c3eefc9b212e926f3d4b10204da68f71fbe0a3f2feb97960ca3397b574448b1e14d96dee1393b5b0e82a0491e60c6551f8dcc059aab0016e81194f404264d41ed7ed6483224689342da609ff3c5b3a34cfc75c56348af7a37fb73921e9fd65ad566d893e0b55bca03db610c0e51627fcf72b0694a90ce8ad86c5e05d2558274adc0ac625fadd98c5ff29697d76118cd348a0219609f3f046f666b53c5055a83911b3983dfbc39ec8b3e2a10e9abd02332370702", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./bus\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, 0x0) 5m51.703369759s ago: executing program 1 (id=14): setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b47, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0x15, 0x2, 0x2002) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r7) socket$xdp(0x2c, 0x3, 0x0) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) 5m50.96244257s ago: executing program 1 (id=15): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYBLOB='\x00\x00\x00', @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) lchown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x40044) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x2, 0x3a, 0x80001000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 5m50.844657122s ago: executing program 32 (id=15): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYBLOB='\x00\x00\x00', @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) lchown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x40044) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x2, 0x3a, 0x80001000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 3m32.745201493s ago: executing program 2 (id=744): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa19e}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0) 3m32.681721024s ago: executing program 2 (id=745): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) io_pgetevents(0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0) 3m32.626926194s ago: executing program 2 (id=748): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 3m32.126884463s ago: executing program 2 (id=750): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) 3m31.61186628s ago: executing program 2 (id=755): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x536, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 3m31.5938227s ago: executing program 2 (id=757): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m16.106565094s ago: executing program 33 (id=757): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m9.043486441s ago: executing program 6 (id=900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='-\x00', 0x0) 3m8.988163901s ago: executing program 6 (id=901): r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 3m8.925261172s ago: executing program 6 (id=902): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000040)=0x20000b5, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 3m8.846359593s ago: executing program 6 (id=904): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 3m8.154053274s ago: executing program 6 (id=906): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000140)) 3m7.651303522s ago: executing program 6 (id=908): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000003c0)={0x11042a28a754e1d, 0x3, 0xffffffffffffff12, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x4000000, {0x2, 0x4e24}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x201, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x10000000000003}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='net_dev_xmit_timeout\x00', r1}, 0x60) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x4, 0x241, &(0x7f0000000540)="$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") io_setup(0x5, &(0x7f0000000240)) r2 = inotify_init() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000380)={0x5, 0x0, 0xffffffff, 0x9000, 0xfe, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x11) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2=0xac14140a}}) inotify_add_watch(r2, &(0x7f0000000300)='.\x00', 0xa50003d1) readv(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) clock_adjtime(0x0, &(0x7f0000000400)={0x8001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 3m7.602661232s ago: executing program 34 (id=908): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020200f8ffffffb703000008000000b704000000000000850000000100000095cbe7fbc8188d09034a81ae25b8c8160d713bb884b1d2bb4d68bcf32686585cb1820c9eb38c6157373b6658b37c496aab2b1de7a89c6159a83614a507580af28914a74c6119d40683ccb0e0ce2f2b7a7407ad3adc9f8b528ab992d6e000d6ec580da38b6351bb33f8f5dee42c562d5a4e61c7fddb265409a0609effb9ba383a382bfee3ab4c02a479bd2e97f6b71350e01e97d4166d6c3df08e117bd6b3a502f2b23d1e25f82d444a62784a1811689be52a97db976bc7d10a9e4657b56127ac5140fb8cf8c02990b283e7b1dae7d1580c5ed1b05a1bc9afe75a501281c67e149a49d8f6091a583ed5f66150e1e89b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000003c0)={0x11042a28a754e1d, 0x3, 0xffffffffffffff12, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x4000000, {0x2, 0x4e24}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x201, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x10000000000003}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='net_dev_xmit_timeout\x00', r1}, 0x60) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x4, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") io_setup(0x5, &(0x7f0000000240)) r2 = inotify_init() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000380)={0x5, 0x0, 0xffffffff, 0x9000, 0xfe, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x11) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2=0xac14140a}}) inotify_add_watch(r2, &(0x7f0000000300)='.\x00', 0xa50003d1) readv(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) clock_adjtime(0x0, &(0x7f0000000400)={0x8001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 1m34.21366172s ago: executing program 0 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r2}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 1m34.19495024s ago: executing program 0 (id=1269): getpid() mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000005, 0x13, 0xffffffffffffffff, 0x669fb000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x2) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x10}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 1m33.062616958s ago: executing program 0 (id=1278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1m32.806102641s ago: executing program 0 (id=1279): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0xe, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x8005, 0x0, 0x3, 0x15, 0x18, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x1]}) 1m32.299786618s ago: executing program 0 (id=1281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 1m31.745777607s ago: executing program 0 (id=1289): sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20084800}, 0x10) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) close(r0) 1m31.685569138s ago: executing program 35 (id=1289): sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20084800}, 0x10) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) close(r0) 6.845205898s ago: executing program 3 (id=1734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 6.824610478s ago: executing program 3 (id=1735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 6.70410856s ago: executing program 3 (id=1740): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 6.628349111s ago: executing program 3 (id=1741): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8000}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0xffffffffffffff09, {0x10, 0x10, 0x4, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x6, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 5.627086146s ago: executing program 8 (id=1753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) 5.578650247s ago: executing program 8 (id=1754): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4.540065402s ago: executing program 7 (id=1763): syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x2100) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x101) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$RTC_SET_TIME(r1, 0x5452, &(0x7f0000000000)={0x14, 0x1000036, 0x0, 0x1ffffc, 0x3, 0x0, 0x204, 0xffffffff, 0xffffffffffffffff}) 4.539777942s ago: executing program 4 (id=1764): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 4.296196766s ago: executing program 7 (id=1765): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="8457", 0x2}, {&(0x7f0000000280)="910a764b", 0x4}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000140)="1b22", 0x2, 0x800, 0x0, 0x0) 4.267365916s ago: executing program 4 (id=1766): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) 3.998827491s ago: executing program 7 (id=1767): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be0402", 0x15, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 3.890154332s ago: executing program 7 (id=1768): getpid() mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000005, 0x13, 0xffffffffffffffff, 0x669fb000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x2) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x10}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 3.691113695s ago: executing program 4 (id=1769): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020200f8ffffffb703000008000000b704000000000000850000000100000095cbe7fbc8188d09034a81ae25b8c8160d713bb884b1d2bb4d68bcf32686585cb1820c9eb38c6157373b6658b37c496aab2b1de7a89c6159a83614a507580af28914a74c6119d40683ccb0e0ce2f2b7a7407ad3adc9f8b528ab992d6e000d6ec580da38b6351bb33f8f5dee42c562d5a4e61c7fddb265409a0609effb9ba383a382bfee3ab4c02a479bd2e97f6b71350e01e97d4166d6c3df08e117bd6b3a502f2b23d1e25f82d444a62784a1811689be52a97db976bc7d10a9e4657b56127ac5140fb8cf8c02990b283e7b1dae7d1580c5ed1b05a1bc9afe75a501281c67e149a49d8f6091a583ed5f66150e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000003c0)={0x11042a28a754e1d, 0x3, 0xffffffffffffff12, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x4000000, {0x2, 0x4e24}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x201, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x10000000000003}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='net_dev_xmit_timeout\x00', r1}, 0x60) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x4, 0x241, &(0x7f0000000540)="$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") io_setup(0x5, &(0x7f0000000240)) r2 = inotify_init() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000380)={0x5, 0x0, 0xffffffff, 0x9000, 0xfe, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x11) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2=0xac14140a}}) inotify_add_watch(r2, &(0x7f0000000300)='.\x00', 0xa50003d1) readv(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) clock_adjtime(0x0, &(0x7f0000000400)={0x8001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 2.742378089s ago: executing program 7 (id=1771): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020200f8ffffffb703000008000000b704000000000000850000000100000095cbe7fbc8188d09034a81ae25b8c8160d713bb884b1d2bb4d68bcf32686585cb1820c9eb38c6157373b6658b37c496aab2b1de7a89c6159a83614a507580af28914a74c6119d40683ccb0e0ce2f2b7a7407ad3adc9f8b528ab992d6e000d6ec580da38b6351bb33f8f5dee42c562d5a4e61c7fddb265409a0609effb9ba383a382bfee3ab4c02a479bd2e97f6b71350e01e97d4166d6c3df08e117bd6b3a502f2b23d1e25f82d444a62784a1811689be52a97db976bc7d10a9e4657b56127ac5140fb8cf8c02990b283"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000003c0)={0x11042a28a754e1d, 0x3, 0xffffffffffffff12, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x4000000, {0x2, 0x4e24}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x201, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x10000000000003}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='net_dev_xmit_timeout\x00', r1}, 0x60) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x4, 0x241, &(0x7f0000000540)="$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") io_setup(0x5, &(0x7f0000000240)) r2 = inotify_init() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000380)={0x5, 0x0, 0xffffffff, 0x9000, 0xfe, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x11) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2=0xac14140a}}) inotify_add_watch(r2, &(0x7f0000000300)='.\x00', 0xa50003d1) readv(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) clock_adjtime(0x0, &(0x7f0000000400)={0x8001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 2.362808514s ago: executing program 8 (id=1772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000100)={'system_u:object_r:auditctl_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x7}, 0x51) 2.328776955s ago: executing program 8 (id=1773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) fremovexattr(r1, 0x0) 2.152628658s ago: executing program 8 (id=1775): getpid() mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000005, 0x13, 0xffffffffffffffff, 0x669fb000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x2) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x10}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 2.151897718s ago: executing program 5 (id=1776): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) 2.139603258s ago: executing program 5 (id=1777): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c480000", @ANYRES16=0x0, @ANYBLOB="010000000008000000001200000007"], 0x1c}}, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 2.110419058s ago: executing program 5 (id=1778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) 1.926856331s ago: executing program 5 (id=1779): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 1.849888983s ago: executing program 3 (id=1780): getpid() mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000005, 0x13, 0xffffffffffffffff, 0x669fb000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x2) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x10}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 1.759097884s ago: executing program 4 (id=1781): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = io_uring_setup(0x4f66, &(0x7f00000000c0)={0x0, 0xcb50, 0x2}) close_range(r2, 0xffffffffffffffff, 0x0) 1.143855763s ago: executing program 8 (id=1782): getpid() mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000005, 0x13, 0xffffffffffffffff, 0x669fb000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x2) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x10}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 722.377639ms ago: executing program 3 (id=1783): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x10005}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2bf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r4 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000040), 0x4) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) syz_socket_connect_nvme_tcp() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006100000000000000180000000000000000000000000000009500000000000000b50a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 663.73482ms ago: executing program 5 (id=1784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 662.92014ms ago: executing program 5 (id=1785): getpid() mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000005, 0x13, 0xffffffffffffffff, 0x669fb000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x2) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x10}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 616.654351ms ago: executing program 4 (id=1786): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) unlink(&(0x7f0000000380)='./file1\x00') 231.761296ms ago: executing program 7 (id=1787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f87b05ffb703000008000000b7040040f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x48) 0s ago: executing program 4 (id=1788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r1, 0x0, r1, 0x0, 0x863, 0x0) kernel console output (not intermixed with test programs): DEV_CHANGE): can0: link becomes ready [ 272.852930][ T7838] can0 (unregistered): slcan off ptm1. [ 272.864472][ T7915] loop4: detected capacity change from 0 to 128 [ 272.895918][ T7913] can0: slcan on ptm0. [ 272.907884][ T7903] loop5: detected capacity change from 0 to 2048 [ 272.911035][ T7913] futex_wake_op: syz.3.1181 tries to shift op by -1; fix this program [ 272.919230][ T7915] EXT4-fs (loop4): Test dummy encryption mode enabled [ 272.936020][ T7915] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 273.058414][ T7926] loop7: detected capacity change from 0 to 2048 [ 273.075010][ T7928] loop0: detected capacity change from 0 to 2048 [ 273.155626][ T7932] can1: slcan on ptm1. [ 273.178476][ T7932] futex_wake_op: syz.4.1182 tries to shift op by -1; fix this program [ 273.696823][ T7906] can0 (unregistered): slcan off ptm0. [ 273.747769][ T8010] loop0: detected capacity change from 0 to 128 [ 273.755534][ T8010] EXT4-fs (loop0): Test dummy encryption mode enabled [ 273.764027][ T7915] can1 (unregistered): slcan off ptm1. [ 273.775671][ T8010] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 273.789080][ T8015] loop5: detected capacity change from 0 to 128 [ 273.812080][ T8015] EXT4-fs (loop5): Test dummy encryption mode enabled [ 273.845188][ T8015] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 273.896660][ T8029] can0: slcan on ptm0. [ 273.905498][ T8024] futex_wake_op: syz.3.1188 tries to shift op by -1; fix this program [ 273.916169][ T8026] can1: slcan on ptm1. [ 273.927603][ T8026] futex_wake_op: syz.0.1186 tries to shift op by -1; fix this program [ 273.959571][ T8037] loop4: detected capacity change from 0 to 2048 [ 273.996816][ T8039] can2: slcan on ptm2. [ 274.009560][ T8039] futex_wake_op: syz.5.1187 tries to shift op by -1; fix this program [ 274.050445][ T8048] loop7: detected capacity change from 0 to 2048 [ 274.615706][ T8010] can1 (unregistered): slcan off ptm1. [ 274.664332][ T8015] can2 (unregistered): slcan off ptm2. [ 274.694820][ T8014] can0 (unregistered): slcan off ptm0. [ 274.838666][ T8147] loop5: detected capacity change from 0 to 512 [ 274.853270][ T8147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.110506][ T8147] EXT4-fs (loop5): orphan cleanup on readonly fs [ 275.119945][ T8147] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1193: bg 0: block 248: padding at end of block bitmap is not set [ 275.135299][ T8147] Quota error (device loop5): write_blk: dquota write failed [ 275.142837][ T8147] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 275.152835][ T8147] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.1193: Failed to acquire dquot type 1 [ 275.211418][ T8153] loop0: detected capacity change from 0 to 2048 [ 275.637840][ T8147] EXT4-fs (loop5): 1 truncate cleaned up [ 275.661519][ T8147] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.1193: deleted inode referenced: 12 [ 275.966450][ T8171] can0: slcan on ptm0. [ 275.995358][ T8171] futex_wake_op: syz.3.1198 tries to shift op by -1; fix this program [ 276.006882][ T8174] loop7: detected capacity change from 0 to 128 [ 276.030062][ T8173] loop4: detected capacity change from 0 to 2048 [ 276.107883][ T8174] EXT4-fs (loop7): Test dummy encryption mode enabled [ 276.171787][ T8174] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.203856][ T8185] loop0: detected capacity change from 0 to 128 [ 276.224323][ T8180] loop5: detected capacity change from 0 to 2048 [ 276.275013][ T8185] EXT4-fs (loop0): Test dummy encryption mode enabled [ 276.300501][ T8190] can1: slcan on ptm1. [ 276.319187][ T8190] futex_wake_op: syz.7.1197 tries to shift op by -1; fix this program [ 276.329903][ T8185] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.484815][ T8200] can2: slcan on ptm2. [ 276.500165][ T8200] futex_wake_op: syz.0.1199 tries to shift op by -1; fix this program [ 276.663541][ T8164] can0 (unregistered): slcan off ptm0. [ 276.851017][ T8239] can0: slcan on ptm0. [ 276.856145][ T8174] can1 (unregistered): slcan off ptm1. [ 276.876232][ T8239] futex_wake_op: syz.3.1202 tries to shift op by -1; fix this program [ 277.024409][ T8251] loop7: detected capacity change from 0 to 2048 [ 277.073703][ T8265] loop5: detected capacity change from 0 to 128 [ 277.085306][ T8185] can2 (unregistered): slcan off ptm2. [ 277.108099][ T8269] loop4: detected capacity change from 0 to 128 [ 277.120934][ T8265] EXT4-fs (loop5): Test dummy encryption mode enabled [ 277.130794][ T8269] EXT4-fs (loop4): Test dummy encryption mode enabled [ 277.168990][ T8269] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.191204][ T8265] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.246584][ T8284] can1: slcan on ptm1. [ 277.260642][ T8287] loop0: detected capacity change from 0 to 2048 [ 277.262013][ T8284] futex_wake_op: syz.4.1205 tries to shift op by -1; fix this program [ 277.288296][ T8288] can2: slcan on ptm2. [ 277.297971][ T8288] futex_wake_op: syz.5.1204 tries to shift op by -1; fix this program [ 277.361648][ T1058] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 277.684693][ T8234] can0 (unregistered): slcan off ptm0. [ 277.961384][ T8371] loop7: detected capacity change from 0 to 2048 [ 278.064185][ T8269] can1 (unregistered): slcan off ptm1. [ 278.069950][ T8265] can2 (unregistered): slcan off ptm2. [ 278.366594][ T8413] loop5: detected capacity change from 0 to 256 [ 278.445135][ T8417] loop0: detected capacity change from 0 to 512 [ 278.458909][ T8417] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.469125][ T8413] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 278.568687][ T8418] loop4: detected capacity change from 0 to 128 [ 278.620129][ T8417] EXT4-fs (loop0): orphan cleanup on readonly fs [ 278.629627][ T8417] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1210: bg 0: block 248: padding at end of block bitmap is not set [ 278.685207][ T8417] Quota error (device loop0): write_blk: dquota write failed [ 278.692747][ T8417] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 278.702734][ T8417] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.1210: Failed to acquire dquot type 1 [ 278.716384][ T8417] EXT4-fs (loop0): 1 truncate cleaned up [ 278.736671][ T8417] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.1210: deleted inode referenced: 12 [ 278.808343][ T8418] EXT4-fs (loop4): Test dummy encryption mode enabled [ 279.029671][ T8418] ext4 filesystem being mounted at /244/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.358000][ T8433] can0: slcan on ptm0. [ 279.432323][ T8432] futex_wake_op: syz.4.1212 tries to shift op by -1; fix this program [ 279.478447][ T8446] loop7: detected capacity change from 0 to 128 [ 279.487718][ T8448] loop0: detected capacity change from 0 to 128 [ 279.527784][ T8450] loop5: detected capacity change from 0 to 2048 [ 279.583671][ T8418] can0 (unregistered): slcan off ptm0. [ 279.599568][ T8448] EXT4-fs (loop0): Test dummy encryption mode enabled [ 279.606533][ T8446] EXT4-fs (loop7): Test dummy encryption mode enabled [ 279.674379][ T8446] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.687093][ T8448] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.798493][ T8465] can0: slcan on ptm0. [ 279.821659][ T8469] loop4: detected capacity change from 0 to 128 [ 279.829394][ T8467] can1: slcan on ptm1. [ 279.838901][ T8465] futex_wake_op: syz.0.1217 tries to shift op by -1; fix this program [ 279.858170][ T8467] futex_wake_op: syz.7.1214 tries to shift op by -1; fix this program [ 279.867197][ T8469] EXT4-fs (loop4): Test dummy encryption mode enabled [ 279.899066][ T8469] ext4 filesystem being mounted at /245/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.980382][ T1058] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 280.063034][ T8480] can2: slcan on ptm2. [ 280.105681][ T8480] futex_wake_op: syz.4.1218 tries to shift op by -1; fix this program [ 280.311219][ T8490] loop5: detected capacity change from 0 to 2048 [ 280.373864][ T8446] can1 (unregistered): slcan off ptm1. [ 280.404894][ T8448] can0 (unregistered): slcan off ptm0. [ 280.512056][ T28] audit: type=1400 audit(2000001021.524:734): avc: denied { read write } for pid=283 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.650944][ T8519] loop7: detected capacity change from 0 to 2048 [ 280.848256][ T8522] loop0: detected capacity change from 0 to 128 [ 281.334387][ T8522] EXT4-fs (loop0): Test dummy encryption mode enabled [ 281.425709][ T8522] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 281.443395][ T28] audit: type=1400 audit(2000001021.524:735): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.527152][ T8531] loop5: detected capacity change from 0 to 2048 [ 281.597253][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): can2: link becomes ready [ 281.635424][ T8536] can0: slcan on ptm0. [ 281.646023][ T8536] futex_wake_op: syz.0.1222 tries to shift op by -1; fix this program [ 281.656342][ T28] audit: type=1400 audit(2000001021.524:736): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.713669][ T28] audit: type=1400 audit(2000001021.604:737): avc: denied { bpf } for pid=8506 comm="syz.7.1220" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.749495][ T28] audit: type=1400 audit(2000001021.604:738): avc: denied { map_create } for pid=8506 comm="syz.7.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 281.780858][ T8546] can1: slcan on ptm1. [ 281.788680][ T8546] futex_wake_op: syz.3.1225 tries to shift op by -1; fix this program [ 281.812536][ T28] audit: type=1400 audit(2000001021.614:739): avc: denied { prog_load } for pid=8506 comm="syz.7.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 281.851121][ T28] audit: type=1400 audit(2000001021.614:740): avc: denied { perfmon } for pid=8506 comm="syz.7.1220" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.891593][ T28] audit: type=1400 audit(2000001021.674:741): avc: denied { mounton } for pid=8506 comm="syz.7.1220" path="/69/file1" dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 281.914275][ T28] audit: type=1400 audit(2000001021.894:742): avc: denied { mount } for pid=8506 comm="syz.7.1220" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 281.935991][ T28] audit: type=1400 audit(2000001021.914:743): avc: denied { mac_admin } for pid=8506 comm="syz.7.1220" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 282.032138][ T8566] loop7: detected capacity change from 0 to 2048 [ 282.053418][ T8469] can2 (unregistered): slcan off ptm2. [ 282.117496][ T8522] can0 (unregistered): slcan off ptm0. [ 282.836100][ T1099] IPv6: ADDRCONF(NETDEV_CHANGE): can1: link becomes ready [ 282.886761][ T8594] loop0: detected capacity change from 0 to 512 [ 282.899869][ T8594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 283.043906][ T8541] can1 (unregistered): slcan off ptm1. [ 283.053572][ T8594] EXT4-fs (loop0): orphan cleanup on readonly fs [ 283.062325][ T8594] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1227: bg 0: block 248: padding at end of block bitmap is not set [ 283.077480][ T8594] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.1227: Failed to acquire dquot type 1 [ 283.090331][ T8594] EXT4-fs (loop0): 1 truncate cleaned up [ 283.113279][ T8594] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.1227: deleted inode referenced: 12 [ 283.297172][ T8599] loop4: detected capacity change from 0 to 128 [ 283.322575][ T8599] EXT4-fs (loop4): Test dummy encryption mode enabled [ 283.346055][ T8599] ext4 filesystem being mounted at /247/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 283.441436][ T8613] can0: slcan on ptm0. [ 283.466069][ T8613] futex_wake_op: syz.4.1230 tries to shift op by -1; fix this program [ 283.476259][ T8615] can1: slcan on ptm1. [ 283.493480][ T8615] futex_wake_op: syz.3.1231 tries to shift op by -1; fix this program [ 283.705826][ T8645] loop7: detected capacity change from 0 to 128 [ 283.728471][ T8645] EXT4-fs (loop7): Test dummy encryption mode enabled [ 283.736984][ T8645] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 283.829421][ T8657] loop5: detected capacity change from 0 to 2048 [ 283.844846][ T8658] loop0: detected capacity change from 0 to 2048 [ 283.886430][ T8659] can2: slcan on ptm2. [ 283.923869][ T8659] futex_wake_op: syz.7.1228 tries to shift op by -1; fix this program [ 284.109395][ T1099] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 284.323754][ T8599] can0 (unregistered): slcan off ptm0. [ 284.331959][ T8606] can1 (unregistered): slcan off ptm1. [ 284.834414][ T8645] can2 (unregistered): slcan off ptm2. [ 285.272183][ T8750] loop5: detected capacity change from 0 to 2048 [ 285.290193][ T8749] loop0: detected capacity change from 0 to 128 [ 285.330355][ T8749] EXT4-fs (loop0): Test dummy encryption mode enabled [ 285.348890][ T8741] loop4: detected capacity change from 0 to 2048 [ 285.373727][ T8749] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 285.490868][ T8741] EXT4-fs mount: 96 callbacks suppressed [ 285.490886][ T8741] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 285.515973][ T8768] can0: slcan on ptm0. [ 285.547103][ T8768] futex_wake_op: syz.0.1237 tries to shift op by -1; fix this program [ 285.584401][ T8774] loop7: detected capacity change from 0 to 2048 [ 286.022568][ T385] EXT4-fs (loop5): unmounting filesystem. [ 286.074072][ T8774] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 286.184701][ T8784] loop5: detected capacity change from 0 to 128 [ 286.221848][ T8784] EXT4-fs (loop5): Test dummy encryption mode enabled [ 286.243854][ T8749] can0 (unregistered): slcan off ptm0. [ 286.254551][ T8784] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 286.272588][ T283] EXT4-fs (loop0): unmounting filesystem. [ 286.280645][ T8784] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.292095][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 286.492959][ T8807] loop0: detected capacity change from 0 to 512 [ 286.503009][ T8807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.647547][ T8807] EXT4-fs (loop0): orphan cleanup on readonly fs [ 286.656228][ T8807] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1243: bg 0: block 248: padding at end of block bitmap is not set [ 286.671590][ T8807] __quota_error: 40 callbacks suppressed [ 286.671614][ T8807] Quota error (device loop0): write_blk: dquota write failed [ 286.684825][ T8807] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 286.694922][ T8807] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.1243: Failed to acquire dquot type 1 [ 286.707825][ T8807] EXT4-fs (loop0): 1 truncate cleaned up [ 286.714157][ T8807] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 286.738706][ T8807] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.1243: deleted inode referenced: 12 [ 286.860330][ T8810] can0: slcan on ptm0. [ 286.943715][ T8816] can1: slcan on ptm1. [ 286.967305][ T8818] loop7: detected capacity change from 0 to 128 [ 286.999896][ T8814] futex_wake_op: syz.5.1242 tries to shift op by -1; fix this program [ 287.085122][ T8818] EXT4-fs (loop7): Test dummy encryption mode enabled [ 287.126622][ T8812] futex_wake_op: syz.3.1245 tries to shift op by -1; fix this program [ 287.274963][ T8818] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 287.290538][ T8818] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 287.364399][ T8784] can0 (unregistered): slcan off ptm0. [ 287.403334][ T385] EXT4-fs (loop5): unmounting filesystem. [ 287.411008][ T8825] can0: slcan on ptm2. [ 287.419490][ T283] EXT4-fs (loop0): unmounting filesystem. [ 287.458981][ T8825] futex_wake_op: syz.7.1246 tries to shift op by -1; fix this program [ 287.474002][ T8809] can1 (unregistered): slcan off ptm1. [ 287.651392][ T8839] loop0: detected capacity change from 0 to 2048 [ 288.038429][ T8840] loop5: detected capacity change from 0 to 2048 [ 288.194268][ T8846] can1: slcan on ptm0. [ 288.243846][ T8840] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 288.284196][ T8839] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 288.646403][ T283] EXT4-fs (loop0): unmounting filesystem. [ 288.671643][ T8841] futex_wake_op: syz.3.1249 tries to shift op by -1; fix this program [ 288.713871][ T284] EXT4-fs (loop4): unmounting filesystem. [ 288.795795][ T385] EXT4-fs (loop5): unmounting filesystem. [ 288.932064][ T8861] loop0: detected capacity change from 0 to 2048 [ 289.040355][ T8861] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 289.375771][ T8869] loop5: detected capacity change from 0 to 2048 [ 289.479376][ T8869] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 289.547233][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 289.700370][ T283] EXT4-fs (loop0): unmounting filesystem. [ 289.797161][ T8818] can0 (unregistered): slcan off ptm2. [ 289.811390][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 289.875868][ T8896] loop4: detected capacity change from 0 to 128 [ 289.885441][ T8836] can1 (unregistered): slcan off ptm0. [ 289.898962][ T8897] loop0: detected capacity change from 0 to 2048 [ 289.914009][ T8896] EXT4-fs (loop4): Test dummy encryption mode enabled [ 289.922225][ T8896] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 290.212884][ T8896] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.224421][ T385] EXT4-fs (loop5): unmounting filesystem. [ 290.249541][ T8897] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 290.271366][ T28] audit: type=1400 audit(2000001031.284:782): avc: denied { create } for pid=8904 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.292413][ T8905] netlink: 8 bytes leftover after parsing attributes in process `'. [ 290.323825][ T28] audit: type=1400 audit(2000001031.304:783): avc: denied { setopt } for pid=8904 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.351044][ T28] audit: type=1400 audit(2000001031.304:784): avc: denied { write } for pid=8904 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.370549][ T28] audit: type=1400 audit(2000001031.304:785): avc: denied { nlmsg_read } for pid=8904 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.615273][ T283] EXT4-fs (loop0): unmounting filesystem. [ 290.866418][ T8911] futex_wake_op: syz.4.1255 tries to shift op by -1; fix this program [ 290.909526][ T8919] loop5: detected capacity change from 0 to 128 [ 290.946567][ T8912] can0: slcan on ptm0. [ 290.992273][ T8919] EXT4-fs (loop5): Test dummy encryption mode enabled [ 291.072168][ T8919] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 291.107803][ T8919] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 291.293667][ T8896] can0 (unregistered): slcan off ptm0. [ 291.401850][ T8931] can0: slcan on ptm0. [ 291.409395][ T8931] futex_wake_op: syz.5.1257 tries to shift op by -1; fix this program [ 291.426918][ T284] EXT4-fs (loop4): unmounting filesystem. [ 291.440818][ T8934] loop7: detected capacity change from 0 to 2048 [ 291.470169][ T28] audit: type=1400 audit(2000001032.484:786): avc: denied { ioctl } for pid=8942 comm="syz.4.1263" path="socket:[43154]" dev="sockfs" ino=43154 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 291.502767][ T8934] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 291.520223][ T28] audit: type=1400 audit(2000001032.514:787): avc: denied { read write } for pid=8938 comm="syz.0.1260" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 291.545627][ T28] audit: type=1400 audit(2000001032.514:788): avc: denied { open } for pid=8938 comm="syz.0.1260" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 291.562725][ T8953] loop4: detected capacity change from 0 to 256 [ 291.570034][ T28] audit: type=1400 audit(2000001032.514:789): avc: denied { ioctl } for pid=8938 comm="syz.0.1260" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 291.644496][ T1963] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 291.660344][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1266'. [ 291.690962][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1266'. [ 291.773444][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 291.773459][ T28] audit: type=1400 audit(2000001032.794:798): avc: denied { read write } for pid=8974 comm="syz.3.1273" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 291.803511][ T8919] can0 (unregistered): slcan off ptm0. [ 291.905217][ T8980] loop0: detected capacity change from 0 to 2048 [ 291.950051][ T385] EXT4-fs (loop5): unmounting filesystem. [ 291.968139][ T8980] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 292.351274][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 292.614336][ T28] audit: type=1400 audit(2000001032.794:799): avc: denied { open } for pid=8974 comm="syz.3.1273" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 292.658498][ T28] audit: type=1400 audit(2000001032.794:800): avc: denied { ioctl } for pid=8974 comm="syz.3.1273" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 292.773096][ T283] EXT4-fs (loop0): unmounting filesystem. [ 292.947865][ T28] audit: type=1400 audit(2000001033.964:801): avc: denied { create } for pid=9000 comm="syz.0.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.977921][ T9003] loop0: detected capacity change from 0 to 512 [ 292.986012][ T9003] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 293.016167][ T9005] loop7: detected capacity change from 0 to 128 [ 293.027858][ T9003] EXT4-fs (loop0): 1 truncate cleaned up [ 293.041549][ T9003] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 293.067638][ T9007] loop5: detected capacity change from 0 to 512 [ 293.123528][ T28] audit: type=1400 audit(2000001034.134:802): avc: denied { create } for pid=9002 comm="syz.0.1279" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 293.145609][ T9005] EXT4-fs (loop7): Test dummy encryption mode enabled [ 293.155663][ T9007] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.230800][ T9007] EXT4-fs (loop5): orphan cleanup on readonly fs [ 293.249732][ T9007] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1274: bg 0: block 248: padding at end of block bitmap is not set [ 293.282952][ T9007] Quota error (device loop5): write_blk: dquota write failed [ 293.290576][ T9007] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 293.300848][ T9007] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.1274: Failed to acquire dquot type 1 [ 293.318234][ T9007] EXT4-fs (loop5): 1 truncate cleaned up [ 293.324895][ T9007] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 293.346915][ T9007] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.1274: deleted inode referenced: 12 [ 293.370247][ T28] audit: type=1400 audit(2000001034.144:803): avc: denied { read write open } for pid=9002 comm="syz.0.1279" path="/236/mnt/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 293.403456][ T28] audit: type=1400 audit(2000001034.144:804): avc: denied { mounton } for pid=9002 comm="syz.0.1279" path="/236/mnt/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 293.452692][ T283] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 293.491955][ T283] EXT4-fs (loop0): Remounting filesystem read-only [ 293.502940][ T9005] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 293.623061][ T9005] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.863289][ T3601] EXT4-fs (loop0): unmounting filesystem. [ 293.869237][ T28] audit: type=1400 audit(2000001034.594:805): avc: denied { ioctl } for pid=9011 comm="syz.4.1280" path="socket:[42524]" dev="sockfs" ino=42524 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 293.963920][ T385] EXT4-fs (loop5): unmounting filesystem. [ 294.065910][ T9026] can0: slcan on ptm0. [ 294.097449][ T9026] futex_wake_op: syz.7.1275 tries to shift op by -1; fix this program [ 294.143179][ T9033] loop5: detected capacity change from 0 to 2048 [ 294.175354][ T9033] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 294.334323][ T9005] can0 (unregistered): slcan off ptm0. [ 294.347087][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.355508][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.363087][ T9054] device bridge_slave_0 entered promiscuous mode [ 294.370025][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 294.392106][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.414392][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.421978][ T9054] device bridge_slave_1 entered promiscuous mode [ 294.547856][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.554937][ T9054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.562269][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.569351][ T9054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.601061][ T1058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.609981][ T1058] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.617459][ T1058] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.627284][ T1069] device bridge_slave_1 left promiscuous mode [ 294.633712][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.638727][ T9068] loop7: detected capacity change from 0 to 40427 [ 294.647370][ T1069] device bridge_slave_0 left promiscuous mode [ 294.658685][ T9068] F2FS-fs (loop7): fault_injection options not supported [ 294.665926][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.673590][ T9068] F2FS-fs (loop7): invalid crc value [ 294.680410][ T9068] F2FS-fs (loop7): Found nat_bits in checkpoint [ 294.693221][ T1069] device veth1_macvtap left promiscuous mode [ 294.708039][ T1069] device veth0_vlan left promiscuous mode [ 294.725074][ T9068] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 294.763216][ T9068] bio_check_eod: 2 callbacks suppressed [ 294.763234][ T9068] syz.7.1293: attempt to access beyond end of device [ 294.763234][ T9068] loop7: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 294.792195][ T5225] syz-executor: attempt to access beyond end of device [ 294.792195][ T5225] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 294.886060][ T385] EXT4-fs (loop5): unmounting filesystem. [ 295.132554][ T1058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.158166][ T9087] 9pnet: p9_errstr2errno: server reported unknown error @pA;KZ44/@qkp [ 295.158166][ T9087] C<+ [ 295.208598][ T1058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.285371][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.292461][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.509693][ T1058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.638103][ T1058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.742376][ T1058] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.749451][ T1058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.773381][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.083749][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.109109][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.131692][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.149566][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.184841][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.220225][ T9054] device veth0_vlan entered promiscuous mode [ 296.231691][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.240052][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.260199][ T9054] device veth1_macvtap entered promiscuous mode [ 296.484318][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.656516][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.159849][ T9115] loop7: detected capacity change from 0 to 128 [ 297.163749][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.174433][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.182709][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.194003][ T9115] EXT4-fs (loop7): Test dummy encryption mode enabled [ 297.198442][ T9119] loop4: detected capacity change from 0 to 128 [ 297.212930][ T9119] EXT4-fs (loop4): Test dummy encryption mode enabled [ 297.221898][ T9115] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 297.230944][ T9115] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.247858][ T9119] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 297.256678][ T9119] ext4 filesystem being mounted at /267/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.289668][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.298151][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.312843][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.321511][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.338289][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 297.338304][ T28] audit: type=1400 audit(2000001038.354:818): avc: denied { mounton } for pid=9054 comm="syz-executor" path="/root/syzkaller.MGpwIj/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 297.384663][ T28] audit: type=1400 audit(2000001038.354:819): avc: denied { mount } for pid=9054 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 297.406736][ T28] audit: type=1400 audit(2000001038.354:820): avc: denied { mounton } for pid=9054 comm="syz-executor" path="/root/syzkaller.MGpwIj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 297.442821][ T9128] loop5: detected capacity change from 0 to 2048 [ 297.470714][ T28] audit: type=1400 audit(2000001038.354:821): avc: denied { mounton } for pid=9054 comm="syz-executor" path="/root/syzkaller.MGpwIj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 297.499036][ T28] audit: type=1400 audit(2000001038.384:822): avc: denied { mounton } for pid=9054 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 297.541347][ T9119] can0: slcan on ptm1. [ 297.563513][ T28] audit: type=1400 audit(2000001038.384:823): avc: denied { mount } for pid=9054 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 297.587461][ T9115] can1: slcan on ptm0. [ 297.609356][ T9130] futex_wake_op: syz.4.1305 tries to shift op by -1; fix this program [ 297.621671][ T9128] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 297.651776][ T9131] futex_wake_op: syz.7.1304 tries to shift op by -1; fix this program [ 297.683178][ T28] audit: type=1400 audit(2000001038.384:824): avc: denied { mounton } for pid=9054 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 297.700677][ T9140] SELinux: failed to load policy [ 297.707291][ T28] audit: type=1400 audit(2000001038.394:825): avc: denied { mount } for pid=9054 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 297.734323][ T28] audit: type=1400 audit(2000001038.694:826): avc: denied { load_policy } for pid=9139 comm="syz.8.1308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 297.773513][ T28] audit: type=1400 audit(2000001038.784:827): avc: denied { ioctl } for pid=9146 comm="syz.8.1309" path="socket:[43494]" dev="sockfs" ino=43494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 297.963403][ T9113] can1 (unregistered): slcan off ptm0. [ 297.978868][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 298.005468][ T9114] can0 (unregistered): slcan off ptm1. [ 298.046082][ T284] EXT4-fs (loop4): unmounting filesystem. [ 298.128904][ T385] EXT4-fs (loop5): unmounting filesystem. [ 299.659411][ T9199] loop4: detected capacity change from 0 to 2048 [ 299.699721][ T9199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 300.477020][ T284] EXT4-fs (loop4): unmounting filesystem. [ 300.553350][ T305] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 300.609646][ T9236] loop7: detected capacity change from 0 to 2048 [ 300.618043][ T9240] loop8: detected capacity change from 0 to 128 [ 300.625697][ T9242] loop5: detected capacity change from 0 to 128 [ 300.626574][ T9240] EXT4-fs (loop8): Test dummy encryption mode enabled [ 300.639210][ T9242] EXT4-fs (loop5): Test dummy encryption mode enabled [ 300.641706][ T9240] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 300.655643][ T9242] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 300.671776][ T9242] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 300.684393][ T9240] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 300.704568][ T9252] loop4: detected capacity change from 0 to 256 [ 300.711753][ T9236] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 300.712862][ T9252] exfat: Deprecated parameter 'utf8' [ 300.731309][ T9252] exfat: Deprecated parameter 'utf8' [ 300.743794][ T9252] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 300.758269][ T9256] can0: slcan on ptm0. [ 300.764957][ T305] usb 4-1: Using ep0 maxpacket: 16 [ 300.778289][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.783635][ T9260] can1: slcan on ptm1. [ 300.794460][ T9256] futex_wake_op: syz.5.1324 tries to shift op by -1; fix this program [ 300.811117][ T9260] futex_wake_op: syz.8.1326 tries to shift op by -1; fix this program [ 300.828988][ T305] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 300.849494][ T9267] loop4: detected capacity change from 0 to 2048 [ 300.859204][ T305] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 300.868550][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.881709][ T305] usb 4-1: config 0 descriptor?? [ 300.895161][ T9267] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 300.904474][ T9267] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.922350][ T9267] fs-verity: sha256 using implementation "sha256-avx2" [ 300.931243][ T9267] fs-verity (loop4, inode 13): fs-verity keyring is empty, rejecting signed file! [ 300.948609][ T284] EXT4-fs (loop4): unmounting filesystem. [ 300.956033][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 301.190593][ T9299] loop4: detected capacity change from 0 to 2048 [ 301.312441][ T305] HID 045e:07da: Invalid code 65791 type 1 [ 301.556690][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 301.621597][ T9299] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 301.685119][ T305] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001A/input/input28 [ 301.888451][ T305] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 301.954949][ T9308] loop7: detected capacity change from 0 to 128 [ 301.964909][ T7117] IPv6: ADDRCONF(NETDEV_CHANGE): can1: link becomes ready [ 301.972123][ T9308] EXT4-fs (loop7): Test dummy encryption mode enabled [ 301.972644][ T284] EXT4-fs (loop4): unmounting filesystem. [ 301.987146][ T9308] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 301.995955][ T9308] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 302.088265][ T9317] can0: slcan on ptm2. [ 302.096836][ T9317] futex_wake_op: syz.7.1332 tries to shift op by -1; fix this program [ 302.114285][ T9242] can0 (unregistered): slcan off ptm0. [ 302.126192][ T385] EXT4-fs (loop5): unmounting filesystem. [ 302.246501][ T9327] loop4: detected capacity change from 0 to 2048 [ 302.263942][ T9240] can1 (unregistered): slcan off ptm1. [ 302.275605][ T305] usb 4-1: USB disconnect, device number 15 [ 302.442482][ T9327] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 303.312177][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 303.373511][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 303.373529][ T28] audit: type=1400 audit(2000001044.374:842): avc: denied { getopt } for pid=9339 comm="syz.3.1336" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 303.459011][ T28] audit: type=1400 audit(2000001044.374:843): avc: denied { read write } for pid=9339 comm="syz.3.1336" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 303.488657][ T284] EXT4-fs (loop4): unmounting filesystem. [ 303.494632][ T28] audit: type=1400 audit(2000001044.374:844): avc: denied { open } for pid=9339 comm="syz.3.1336" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 303.521836][ T9346] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1339'. [ 303.530949][ T28] audit: type=1400 audit(2000001044.534:845): avc: denied { create } for pid=9348 comm="syz.8.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 303.532471][ T9308] can0 (unregistered): slcan off ptm2. [ 303.598633][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 303.611827][ T28] audit: type=1400 audit(2000001044.574:846): avc: denied { connect } for pid=9348 comm="syz.8.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 303.629721][ T9364] loop5: detected capacity change from 0 to 2048 [ 303.635876][ T28] audit: type=1400 audit(2000001044.574:847): avc: denied { ioctl } for pid=9348 comm="syz.8.1335" path="socket:[43804]" dev="sockfs" ino=43804 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 303.756551][ T9371] loop8: detected capacity change from 0 to 512 [ 303.804476][ T9371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.879184][ T9371] EXT4-fs (loop8): orphan cleanup on readonly fs [ 303.888037][ T9371] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1340: bg 0: block 248: padding at end of block bitmap is not set [ 303.903222][ T9371] Quota error (device loop8): write_blk: dquota write failed [ 303.910795][ T9371] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 303.920804][ T9371] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.1340: Failed to acquire dquot type 1 [ 303.934722][ T9371] EXT4-fs (loop8): 1 truncate cleaned up [ 303.941489][ T9371] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 303.968648][ T9370] EXT4-fs error (device loop8): ext4_lookup:1862: inode #2: comm syz.8.1340: deleted inode referenced: 12 [ 304.100792][ T9364] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 304.521060][ T9364] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 304.591110][ T9364] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 304.641191][ T9364] EXT4-fs (loop5): This should not happen!! Data will be lost [ 304.641191][ T9364] [ 304.651442][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 304.673868][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 304.679581][ T9364] EXT4-fs (loop5): Total free blocks count 0 [ 304.686019][ T9364] EXT4-fs (loop5): Free/Dirty block details [ 304.692568][ T9364] EXT4-fs (loop5): free_blocks=2415919504 [ 304.698834][ T9364] EXT4-fs (loop5): dirty_blocks=64 [ 304.704017][ T9364] EXT4-fs (loop5): Block reservation details [ 304.710059][ T9364] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 304.725658][ T28] audit: type=1400 audit(2000001045.744:848): avc: denied { map } for pid=9363 comm="syz.5.1344" path="/243/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.767275][ T28] audit: type=1400 audit(2000001045.764:849): avc: denied { execute } for pid=9363 comm="syz.5.1344" path="/243/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.807786][ T1071] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 305.128187][ T9419] can0: slcan on ptm0. [ 305.156582][ T9419] futex_wake_op: syz.3.1352 tries to shift op by -1; fix this program [ 305.196543][ T9424] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 305.213675][ T9424] SELinux: failed to load policy [ 305.283692][ T9438] incfs: Options parsing error. -22 [ 305.295190][ T9438] incfs: mount failed -22 [ 305.415112][ T9447] loop5: detected capacity change from 0 to 2048 [ 306.177155][ T9466] loop4: detected capacity change from 0 to 16 [ 306.223796][ T9466] erofs: (device loop4): mounted with root inode @ nid 36. [ 306.261781][ T9466] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 306.275933][ T9466] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 306.300117][ T9471] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 306.311374][ T9476] loop7: detected capacity change from 0 to 256 [ 306.364385][ T9414] can0 (unregistered): slcan off ptm0. [ 306.659627][ T9509] loop7: detected capacity change from 0 to 2048 [ 306.826900][ T9520] loop4: detected capacity change from 0 to 128 [ 306.840671][ T9520] EXT4-fs (loop4): Test dummy encryption mode enabled [ 306.849138][ T9520] ext4 filesystem being mounted at /285/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 307.014163][ T9523] loop5: detected capacity change from 0 to 2048 [ 307.183150][ T306] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 307.187338][ T9527] can0: slcan on ptm0. [ 308.105484][ T9541] loop5: detected capacity change from 0 to 128 [ 308.119952][ T9525] futex_wake_op: syz.4.1379 tries to shift op by -1; fix this program [ 308.305724][ T9541] EXT4-fs (loop5): Test dummy encryption mode enabled [ 308.345061][ T9541] ext4 filesystem being mounted at /251/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.454211][ T9553] can1: slcan on ptm1. [ 308.464384][ T9557] syz.7.1387[9557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.464455][ T9557] syz.7.1387[9557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.513632][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 308.513648][ T28] audit: type=1400 audit(2000001049.534:861): avc: denied { ioctl } for pid=9561 comm="syz.7.1388" path="socket:[45394]" dev="sockfs" ino=45394 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 308.556215][ T9553] futex_wake_op: syz.5.1384 tries to shift op by -1; fix this program [ 308.588675][ T9569] syz.7.1390[9569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.588757][ T9569] syz.7.1390[9569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.604434][ T9520] can0 (unregistered): slcan off ptm0. [ 308.674771][ T306] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.692382][ T306] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.706998][ T306] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.733885][ T306] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.763456][ T306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.026321][ T306] usb 9-1: config 0 descriptor?? [ 309.078887][ T9584] loop4: detected capacity change from 0 to 2048 [ 309.104015][ T9541] can1 (unregistered): slcan off ptm1. [ 309.323546][ T9626] loop5: detected capacity change from 0 to 2048 [ 311.069779][ T9637] loop7: detected capacity change from 0 to 2048 [ 311.454123][ T306] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 311.462616][ T306] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 311.949094][ T9654] loop8: detected capacity change from 0 to 2048 [ 311.991860][ T9648] can0: slcan on ptm0. [ 312.045484][ T9648] futex_wake_op: syz.3.1399 tries to shift op by -1; fix this program [ 312.588702][ T306] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 312.612281][ T306] usb 9-1: USB disconnect, device number 2 [ 312.630166][ T28] audit: type=1400 audit(2000001053.644:862): avc: denied { write } for pid=9662 comm="syz.7.1402" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 312.657189][ T9670] loop5: detected capacity change from 0 to 128 [ 312.674494][ T9675] loop8: detected capacity change from 0 to 128 [ 312.679475][ T9671] fido_id[9671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 312.695644][ T9675] EXT4-fs (loop8): Test dummy encryption mode enabled [ 312.714115][ T9646] can0 (unregistered): slcan off ptm0. [ 312.714297][ T9670] EXT4-fs (loop5): Test dummy encryption mode enabled [ 312.734191][ T9675] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.776984][ T9670] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.856117][ T9693] can0: slcan on ptm0. [ 312.874913][ T9702] can1: slcan on ptm1. [ 312.885166][ T28] audit: type=1400 audit(2000001053.904:863): avc: denied { bind } for pid=9708 comm="syz.3.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 312.904551][ T9693] futex_wake_op: syz.8.1403 tries to shift op by -1; fix this program [ 312.912472][ T9702] futex_wake_op: syz.5.1398 tries to shift op by -1; fix this program [ 312.946521][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 312.980335][ T9716] SELinux: failed to load policy [ 313.038122][ T28] audit: type=1400 audit(2000001054.054:864): avc: denied { unlink } for pid=9728 comm="syz.3.1416" name="#8" dev="tmpfs" ino=1556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 313.038231][ T9732] overlayfs: invalid origin (0000007900f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 313.079773][ T28] audit: type=1400 audit(2000001054.094:865): avc: denied { append } for pid=9729 comm="syz.7.1417" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 313.116097][ T9739] loop4: detected capacity change from 0 to 512 [ 313.135339][ T9739] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 313.150830][ T9739] I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 313.168303][ T9739] EXT4-fs (loop4): couldn't read superblock of external journal [ 313.240523][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 313.354031][ T9777] loop4: detected capacity change from 0 to 128 [ 313.382272][ T9777] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.416839][ T9777] syz.4.1426 (pid 9777) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 313.452277][ T9792] loop7: detected capacity change from 0 to 128 [ 313.462998][ T9792] EXT4-fs (loop7): Test dummy encryption mode enabled [ 313.474930][ T28] audit: type=1400 audit(2000001054.494:866): avc: denied { setopt } for pid=9796 comm="syz.4.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.482772][ T9792] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 313.506124][ T9670] can1 (unregistered): slcan off ptm1. [ 313.763351][ T9675] can0 (unregistered): slcan off ptm0. [ 314.479818][ T9785] can0: slcan on ptm1. [ 314.492967][ T9819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1437'. [ 314.502978][ T9785] futex_wake_op: syz.7.1428 tries to shift op by -1; fix this program [ 314.653755][ T9784] can0 (unregistered): slcan off ptm1. [ 314.899387][ T9850] loop4: detected capacity change from 0 to 2048 [ 315.061740][ T305] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 315.123326][ T9852] loop5: detected capacity change from 0 to 128 [ 315.297278][ T9852] EXT4-fs (loop5): Test dummy encryption mode enabled [ 315.403450][ T305] usb 9-1: Using ep0 maxpacket: 16 [ 315.410598][ T305] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.466382][ T9859] loop7: detected capacity change from 0 to 128 [ 315.580006][ T28] audit: type=1400 audit(2000001056.594:867): avc: denied { remount } for pid=9860 comm="syz.3.1447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 315.620740][ T9852] EXT4-fs mount: 27 callbacks suppressed [ 315.620760][ T9852] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 315.649963][ T9859] EXT4-fs (loop7): Test dummy encryption mode enabled [ 315.662698][ T305] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.675702][ T284] EXT4-fs (loop4): unmounting filesystem. [ 315.682917][ T9859] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 315.684380][ T9852] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 315.700966][ T305] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 315.715446][ T9859] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 315.725836][ T305] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.751419][ T305] usb 9-1: config 0 descriptor?? [ 315.757664][ T28] audit: type=1400 audit(2000001056.774:868): avc: denied { name_bind } for pid=9876 comm="syz.4.1449" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 315.780360][ T28] audit: type=1400 audit(2000001056.774:869): avc: denied { node_bind } for pid=9876 comm="syz.4.1449" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 315.809138][ T9880] can0: slcan on ptm0. [ 315.820137][ T9880] futex_wake_op: syz.5.1444 tries to shift op by -1; fix this program [ 315.823588][ T9885] can1: slcan on ptm1. [ 315.845188][ T9885] futex_wake_op: syz.7.1446 tries to shift op by -1; fix this program [ 315.878870][ T28] audit: type=1400 audit(2000001056.894:870): avc: denied { name_bind } for pid=9892 comm="syz.4.1451" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 315.948212][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 315.977201][ T28] audit: type=1400 audit(2000001056.994:871): avc: denied { relabelfrom } for pid=9907 comm="syz.4.1452" name="" dev="pipefs" ino=46139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 316.003663][ T9852] can0 (unregistered): slcan off ptm0. [ 316.018923][ T9911] loop4: detected capacity change from 0 to 2048 [ 316.025561][ T9304] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 316.034315][ T385] EXT4-fs (loop5): unmounting filesystem. [ 316.074536][ T9911] loop4: p3 p4 < > [ 316.202047][ T305] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 316.209157][ T305] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 316.216211][ T305] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 316.223017][ T305] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 316.230081][ T9304] usb 4-1: Using ep0 maxpacket: 16 [ 316.236478][ T9859] can1 (unregistered): slcan off ptm1. [ 316.243790][ T305] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 316.252360][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 316.258651][ T9304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.270411][ T305] savu 0003:1E7D:2D5A.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 316.281800][ T9304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.323347][ T793] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 316.340843][ T9304] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 316.350736][ T9304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.364619][ T9304] usb 4-1: config 0 descriptor?? [ 316.424712][ T39] usb 9-1: USB disconnect, device number 3 [ 316.506935][ T9954] loop7: detected capacity change from 0 to 2048 [ 316.516839][ T305] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 316.574850][ T28] audit: type=1400 audit(2000001057.594:872): avc: denied { mounton } for pid=9865 comm="syz.3.1448" path="/proc/889/task" dev="proc" ino=46165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 316.604660][ T9304] usbhid 4-1:0.0: can't add hid device: -71 [ 316.638244][ T9304] usbhid: probe of 4-1:0.0 failed with error -71 [ 316.678299][ T9954] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 316.757296][ T9304] usb 4-1: USB disconnect, device number 16 [ 316.843384][ T305] usb 5-1: Using ep0 maxpacket: 16 [ 316.850971][ T305] usb 5-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 316.862031][ T305] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.873911][ T305] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.883996][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.892123][ T305] usb 5-1: Product: syz [ 316.896993][ T305] usb 5-1: Manufacturer: syz [ 316.901724][ T305] usb 5-1: SerialNumber: syz [ 317.062932][ T28] audit: type=1400 audit(2000001058.074:873): avc: denied { create } for pid=9957 comm="syz.8.1456" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 317.087683][ T9958] I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.097931][ T9958] FAT-fs (loop17): unable to read boot sector [ 317.104610][ T28] audit: type=1400 audit(2000001058.104:874): avc: denied { mounton } for pid=9957 comm="syz.8.1456" path="/22/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 317.257560][ T28] audit: type=1400 audit(2000001058.224:875): avc: denied { unlink } for pid=9054 comm="syz-executor" name="file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 317.284865][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 317.338221][ T9966] can0: slcan on ptm0. [ 317.351880][ T9968] loop8: detected capacity change from 0 to 2048 [ 317.353771][ T9970] loop7: detected capacity change from 0 to 128 [ 317.367346][ T9966] futex_wake_op: syz.3.1457 tries to shift op by -1; fix this program [ 317.370296][ T793] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 317.384184][ T9970] EXT4-fs (loop7): Test dummy encryption mode enabled [ 317.391569][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.399066][ T305] usb 5-1: 0:2 : does not exist [ 317.405033][ T793] usb 6-1: config 0 descriptor?? [ 317.417203][ T793] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 317.425468][ T793] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 317.425880][ T9968] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 317.443857][ T9970] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 317.460284][ T9970] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 317.525079][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 317.534139][ T9988] can1: slcan on ptm1. [ 317.551893][ T9988] futex_wake_op: syz.7.1459 tries to shift op by -1; fix this program [ 317.615550][ T793] usb 6-1: USB disconnect, device number 17 [ 317.625217][ T793] ftdi_sio 6-1:0.0: device disconnected [ 317.802343][ T305] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 317.814598][ T305] usb 5-1: USB disconnect, device number 14 [ 318.074755][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 318.154863][ T9963] can0 (unregistered): slcan off ptm0. [ 318.296880][T10026] loop8: detected capacity change from 0 to 2048 [ 318.324180][ T9970] can1 (unregistered): slcan off ptm1. [ 318.465796][T10026] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 318.608745][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 318.778588][ T28] audit: type=1400 audit(2000001059.794:876): avc: denied { create } for pid=10032 comm="syz.4.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 319.049637][T10045] loop4: detected capacity change from 0 to 128 [ 319.070470][T10045] EXT4-fs (loop4): Test dummy encryption mode enabled [ 319.088645][T10045] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 319.107895][T10045] ext4 filesystem being mounted at /306/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 319.128540][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 319.217188][T10057] can0: slcan on ptm0. [ 319.223759][T10057] futex_wake_op: syz.4.1465 tries to shift op by -1; fix this program [ 319.298927][T10074] loop7: detected capacity change from 0 to 128 [ 319.363071][T10075] loop8: detected capacity change from 0 to 2048 [ 319.438664][T10074] EXT4-fs (loop7): Test dummy encryption mode enabled [ 319.478198][T10075] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 319.549959][T10074] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 319.604246][T10074] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 319.879912][T10083] can1: slcan on ptm1. [ 319.933036][T10083] futex_wake_op: syz.7.1467 tries to shift op by -1; fix this program [ 320.153878][ T793] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 320.161508][ T813] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 320.161988][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 320.245114][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 320.443827][T10045] can0 (unregistered): slcan off ptm0. [ 320.493636][T10074] can1 (unregistered): slcan off ptm1. [ 320.549445][ T284] EXT4-fs (loop4): unmounting filesystem. [ 320.556247][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 320.573316][ T793] usb 6-1: Using ep0 maxpacket: 8 [ 320.578415][ T813] usb 4-1: Using ep0 maxpacket: 8 [ 320.586957][ T793] usb 6-1: config 135 has an invalid interface number: 230 but max is 0 [ 320.596297][ T813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.609914][ T793] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 320.620409][ T813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.630230][ T793] usb 6-1: config 135 has no interface number 0 [ 320.636663][ T813] usb 4-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00 [ 320.645984][ T793] usb 6-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.666012][ T813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.678309][ T813] usb 4-1: config 0 descriptor?? [ 320.684556][ T793] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 320.702941][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.711193][ T793] usb 6-1: Product: syz [ 320.715421][ T793] usb 6-1: Manufacturer: syz [ 320.720062][ T793] usb 6-1: SerialNumber: syz [ 320.731036][ T793] usb 6-1: Found UVC 0.00 device syz (18ec:3288) [ 320.738463][ T793] usb 6-1: No valid video chain found. [ 321.818618][T10140] loop7: detected capacity change from 0 to 2048 [ 321.833858][T10142] loop4: detected capacity change from 0 to 2048 [ 322.097360][ T39] usb 6-1: USB disconnect, device number 18 [ 322.127104][T10142] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 322.155481][T10140] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 322.485229][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 322.501677][T10149] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 322.587038][ T813] usbhid 4-1:0.0: can't add hid device: -71 [ 322.593007][ T813] usbhid: probe of 4-1:0.0 failed with error -71 [ 322.607534][ T813] usb 4-1: USB disconnect, device number 17 [ 322.616146][ T284] EXT4-fs (loop4): unmounting filesystem. [ 322.636245][T10162] loop5: detected capacity change from 0 to 128 [ 322.654573][T10166] loop7: detected capacity change from 0 to 128 [ 322.664083][T10166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 322.666975][T10162] EXT4-fs (loop5): Test dummy encryption mode enabled [ 322.670702][T10166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 322.784721][T10172] loop8: detected capacity change from 0 to 2048 [ 323.002020][T10172] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 323.074636][T10174] futex_wake_op: syz.3.1474 tries to shift op by -1; fix this program [ 323.107493][T10162] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 323.232190][T10162] ext4 filesystem being mounted at /260/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 323.271422][T10170] can0: slcan on ptm0. [ 323.545626][T10184] can1: slcan on ptm1. [ 323.558607][T10184] futex_wake_op: syz.5.1473 tries to shift op by -1; fix this program [ 323.571378][T10166] EXT4-fs (loop7): Test dummy encryption mode enabled [ 323.579505][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 323.599847][T10166] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 323.609586][T10166] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 323.744086][T10190] loop4: detected capacity change from 0 to 2048 [ 323.823480][T10161] can0 (unregistered): slcan off ptm0. [ 323.894704][T10190] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 324.375326][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 324.375340][ T28] audit: type=1400 audit(2000001065.394:878): avc: denied { map } for pid=10165 comm="syz.7.1475" path="/125/mnt/cpu.stat" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 324.420062][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 324.445123][ T28] audit: type=1400 audit(2000001065.424:879): avc: denied { ioctl } for pid=10165 comm="syz.7.1475" path="/125/mnt/file1" dev="loop7" ino=12 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 324.500993][T10205] can0: slcan on ptm0. [ 324.510480][T10205] futex_wake_op: syz.3.1480 tries to shift op by -1; fix this program [ 324.526265][ T284] EXT4-fs (loop4): unmounting filesystem. [ 324.547695][T10213] loop7: detected capacity change from 0 to 128 [ 324.556480][T10213] EXT4-fs (loop7): Test dummy encryption mode enabled [ 324.583644][T10213] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 324.592430][T10213] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.653949][T10162] can1 (unregistered): slcan off ptm1. [ 324.678477][ T385] EXT4-fs (loop5): unmounting filesystem. [ 324.707841][T10230] can1: slcan on ptm2. [ 325.353240][T10239] loop4: detected capacity change from 0 to 2048 [ 325.535928][T10242] futex_wake_op: syz.7.1481 tries to shift op by -1; fix this program [ 325.697146][T10239] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 325.946209][T10246] loop8: detected capacity change from 0 to 2048 [ 326.667720][ T284] EXT4-fs (loop4): unmounting filesystem. [ 326.745985][T10246] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 327.113065][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 327.291482][T10260] loop4: detected capacity change from 0 to 2048 [ 327.323297][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 327.373410][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 327.412600][T10260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 327.575441][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.591644][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.626357][ T24] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 327.672039][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.740914][ T24] usb 6-1: config 0 descriptor?? [ 328.049830][ T284] EXT4-fs (loop4): unmounting filesystem. [ 328.123967][T10201] can0 (unregistered): slcan off ptm0. [ 328.130277][T10213] can1 (unregistered): slcan off ptm2. [ 328.145551][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 328.795088][T10292] loop8: detected capacity change from 0 to 2048 [ 330.148912][T10300] loop4: detected capacity change from 0 to 128 [ 330.282961][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 330.292561][ T24] usbhid: probe of 6-1:0.0 failed with error -71 [ 330.302770][T10292] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 330.338018][T10300] EXT4-fs (loop4): Test dummy encryption mode enabled [ 330.366579][ T24] usb 6-1: USB disconnect, device number 19 [ 330.395948][T10300] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 330.430901][ T28] audit: type=1400 audit(2000001071.444:880): avc: denied { read } for pid=10309 comm="syz.5.1496" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 330.456029][T10312] loop7: detected capacity change from 0 to 128 [ 330.463193][T10300] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 330.517121][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 330.545663][T10312] EXT4-fs (loop7): Test dummy encryption mode enabled [ 330.587508][ T28] audit: type=1400 audit(2000001071.544:881): avc: denied { open } for pid=10309 comm="syz.5.1496" path="/265/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 330.621228][T10312] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 330.655859][T10312] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 330.742995][T10330] can0: slcan on ptm0. [ 330.764612][T10330] futex_wake_op: syz.4.1491 tries to shift op by -1; fix this program [ 330.777223][T10338] can1: slcan on ptm1. [ 331.044001][T10338] futex_wake_op: syz.7.1495 tries to shift op by -1; fix this program [ 331.403609][T10300] can0 (unregistered): slcan off ptm0. [ 331.623901][T10312] can1 (unregistered): slcan off ptm1. [ 331.638608][ T284] EXT4-fs (loop4): unmounting filesystem. [ 331.651875][T10332] loop8: detected capacity change from 0 to 2048 [ 331.781246][T10356] loop5: detected capacity change from 0 to 2048 [ 331.876441][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 331.919206][T10356] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 332.203809][T10365] futex_wake_op: syz.3.1503 tries to shift op by -1; fix this program [ 332.337488][T10332] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 332.353247][T10363] can0: slcan on ptm0. [ 332.585023][T10384] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1505'. [ 332.632777][ T385] EXT4-fs (loop5): unmounting filesystem. [ 334.423305][T10358] can0 (unregistered): slcan off ptm0. [ 335.042009][T10393] loop7: detected capacity change from 0 to 128 [ 335.067917][T10393] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 335.179440][ T1014] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 335.892109][T10426] loop7: detected capacity change from 0 to 128 [ 335.930758][T10421] loop5: detected capacity change from 0 to 128 [ 335.966231][T10426] EXT4-fs (loop7): Test dummy encryption mode enabled [ 336.096478][T10421] EXT4-fs (loop5): Test dummy encryption mode enabled [ 336.202801][T10421] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 336.212769][T10426] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 336.231091][T10421] ext4 filesystem being mounted at /271/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 336.243504][T10426] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 336.388749][T10437] loop4: detected capacity change from 0 to 2048 [ 336.531732][T10437] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 337.078696][T10448] can0: slcan on ptm1. [ 337.088058][T10450] can1: slcan on ptm0. [ 337.097939][T10445] futex_wake_op: syz.7.1516 tries to shift op by -1; fix this program [ 337.116961][T10444] futex_wake_op: syz.5.1515 tries to shift op by -1; fix this program [ 337.194660][ T9304] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 337.229270][ T284] EXT4-fs (loop4): unmounting filesystem. [ 337.330665][T10466] loop4: detected capacity change from 0 to 128 [ 337.348480][T10466] EXT4-fs (loop4): Test dummy encryption mode enabled [ 337.372983][T10466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 337.381844][T10466] ext4 filesystem being mounted at /323/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 337.392313][ T9304] usb 4-1: Using ep0 maxpacket: 16 [ 337.399011][T10426] can0 (unregistered): slcan off ptm1. [ 337.425315][ T9304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.437584][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 337.443605][T10421] can1 (unregistered): slcan off ptm0. [ 337.455503][ T9304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.473347][ T9304] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 337.474468][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 337.474515][ T385] EXT4-fs (loop5): unmounting filesystem. [ 337.498845][ T9304] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 337.508556][ T9304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.519445][ T9304] usb 4-1: config 0 descriptor?? [ 337.544126][T10478] can0: slcan on ptm1. [ 337.544216][T10482] tipc: Enabling of bearer rejected, failed to enable media [ 337.562062][T10478] futex_wake_op: syz.4.1521 tries to shift op by -1; fix this program [ 337.592727][ T28] audit: type=1400 audit(2000001078.604:882): avc: denied { read write } for pid=10489 comm="syz.7.1526" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 337.635047][ T28] audit: type=1400 audit(2000001078.604:883): avc: denied { open } for pid=10489 comm="syz.7.1526" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 337.661994][ T28] audit: type=1400 audit(2000001078.604:884): avc: denied { mounton } for pid=10489 comm="syz.7.1526" path="/134/file0" dev="tmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 338.230552][ T9304] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001D/input/input30 [ 338.341654][T10521] loop5: detected capacity change from 0 to 2048 [ 338.379950][ T9304] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 338.448670][T10521] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 338.514250][ T9304] usb 4-1: USB disconnect, device number 18 [ 338.839344][T10527] fido_id[10527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 338.867070][T10537] loop7: detected capacity change from 0 to 128 [ 338.893856][T10537] EXT4-fs (loop7): Test dummy encryption mode enabled [ 338.909276][ T28] audit: type=1400 audit(2000001079.924:885): avc: denied { unmount } for pid=9054 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 338.946272][T10537] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 339.001610][T10537] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 339.019629][ T385] EXT4-fs (loop5): unmounting filesystem. [ 339.053438][T10466] can0 (unregistered): slcan off ptm1. [ 339.065893][ T284] EXT4-fs (loop4): unmounting filesystem. [ 339.174253][T10556] loop8: detected capacity change from 0 to 2048 [ 339.254821][T10554] loop5: detected capacity change from 0 to 128 [ 339.309388][T10559] can0: slcan on ptm0. [ 339.347746][T10556] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 339.547788][T10554] EXT4-fs (loop5): Test dummy encryption mode enabled [ 339.565661][T10555] futex_wake_op: syz.7.1533 tries to shift op by -1; fix this program [ 339.724722][T10554] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 339.839176][T10554] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 339.933480][T10558] can1: slcan on ptm1. [ 339.942749][T10558] futex_wake_op: syz.5.1536 tries to shift op by -1; fix this program [ 339.966567][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 340.053936][T10537] can0 (unregistered): slcan off ptm0. [ 340.075560][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 340.139985][T10604] loop7: detected capacity change from 0 to 256 [ 340.413045][T10610] loop8: detected capacity change from 0 to 2048 [ 340.503531][T10554] can1 (unregistered): slcan off ptm1. [ 340.973341][ T28] audit: type=1400 audit(2000001081.984:886): avc: denied { mount } for pid=10622 comm="syz.7.1548" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 341.001251][ T28] audit: type=1400 audit(2000001082.014:887): avc: denied { unmount } for pid=5225 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 342.040841][T10629] loop5: detected capacity change from 0 to 2048 [ 342.055496][T10634] loop4: detected capacity change from 0 to 2048 [ 342.436548][T10641] can0: slcan on ptm0. [ 342.457750][T10643] loop8: detected capacity change from 0 to 128 [ 342.460376][T10641] futex_wake_op: syz.3.1549 tries to shift op by -1; fix this program [ 342.842640][T10644] loop7: detected capacity change from 0 to 2048 [ 343.731612][T10661] loop8: detected capacity change from 0 to 128 [ 343.769706][T10661] EXT4-fs (loop8): Test dummy encryption mode enabled [ 343.797760][T10668] loop7: detected capacity change from 0 to 512 [ 343.806075][T10661] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 343.823923][T10630] can0 (unregistered): slcan off ptm0. [ 343.898136][T10668] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 343.944987][T10684] loop4: detected capacity change from 0 to 128 [ 343.959053][T10683] can0: slcan on ptm0. [ 343.965860][T10668] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=3 [ 344.033980][T10697] futex_wake_op: syz.8.1554 tries to shift op by -1; fix this program [ 344.044422][T10668] EXT4-fs warning (device loop7): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 344.059347][T10684] EXT4-fs (loop4): Test dummy encryption mode enabled [ 344.061107][T10668] EXT4-fs (loop7): mount failed [ 344.084998][T10684] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 344.315825][T10706] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1561'. [ 344.415793][T10714] can1: slcan on ptm1. [ 344.434486][T10714] futex_wake_op: syz.4.1558 tries to shift op by -1; fix this program [ 344.650474][T10722] loop5: detected capacity change from 0 to 2048 [ 346.309328][T10724] loop7: detected capacity change from 0 to 2048 [ 346.961230][T10724] EXT4-fs mount: 11 callbacks suppressed [ 346.961268][T10724] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 347.023141][T10722] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 347.381012][ T385] EXT4-fs (loop5): unmounting filesystem. [ 347.543210][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 348.518290][T10752] loop7: detected capacity change from 0 to 2048 [ 348.703498][T10683] can0 (unregistered): slcan off ptm0. [ 348.753527][T10684] can1 (unregistered): slcan off ptm1. [ 348.836721][T10752] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 349.124547][ T284] EXT4-fs (loop4): unmounting filesystem. [ 349.174669][T10775] loop5: detected capacity change from 0 to 128 [ 349.194200][T10775] EXT4-fs (loop5): Test dummy encryption mode enabled [ 349.236664][T10775] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 349.254217][T10775] ext4 filesystem being mounted at /285/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 349.289616][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 349.296270][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 349.347880][T10790] can0: slcan on ptm0. [ 349.376527][T10790] futex_wake_op: syz.5.1570 tries to shift op by -1; fix this program [ 349.524680][ T9304] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 349.964250][T10822] loop8: detected capacity change from 0 to 2048 [ 351.544251][T10824] loop7: detected capacity change from 0 to 2048 [ 351.929088][T10824] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 351.954596][T10822] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 352.203927][ T9304] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 352.414831][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 352.451387][ T9304] usb 5-1: config 1 has no interface number 0 [ 352.481846][T10831] can1: slcan on ptm1. [ 352.490333][ T9304] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.502777][T10831] futex_wake_op: syz.3.1582 tries to shift op by -1; fix this program [ 352.531622][ T9304] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 352.560930][ T9304] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 352.614477][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 352.629795][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 352.675835][T10848] loop4: detected capacity change from 0 to 128 [ 352.705592][ T9304] usb 5-1: string descriptor 0 read error: -71 [ 352.712005][ T9304] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.716591][T10848] EXT4-fs (loop4): Test dummy encryption mode enabled [ 352.721132][ T9304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.737552][ T9304] usb 5-1: can't set config #1, error -71 [ 352.744661][ T9304] usb 5-1: USB disconnect, device number 15 [ 352.755703][T10848] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 352.877936][T10857] loop8: detected capacity change from 0 to 2048 [ 352.889176][T10829] can1 (unregistered): slcan off ptm1. [ 352.959077][T10848] ext4 filesystem being mounted at /330/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 353.044737][T10790] can0 (unregistered): slcan off ptm0. [ 353.099024][T10857] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 353.577175][T10873] can0: slcan on ptm0. [ 353.588204][T10873] futex_wake_op: syz.4.1585 tries to shift op by -1; fix this program [ 353.638792][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 353.650332][ T385] EXT4-fs (loop5): unmounting filesystem. [ 353.657062][ T28] audit: type=1400 audit(2000001094.674:888): avc: denied { ioctl } for pid=10880 comm="syz.7.1593" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47724 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 353.880124][ T28] audit: type=1400 audit(2000001094.864:889): avc: denied { read } for pid=10904 comm="syz.7.1599" path="socket:[49529]" dev="sockfs" ino=49529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 353.973493][T10907] loop5: detected capacity change from 0 to 128 [ 354.016446][T10907] EXT4-fs (loop5): Test dummy encryption mode enabled [ 354.031014][ T28] audit: type=1400 audit(2000001095.044:890): avc: denied { bind } for pid=10911 comm="syz.7.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.039023][T10907] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 354.071451][T10907] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 354.094587][T10848] can0 (unregistered): slcan off ptm0. [ 354.106580][T10916] loop8: detected capacity change from 0 to 4096 [ 354.118016][ T284] EXT4-fs (loop4): unmounting filesystem. [ 354.137695][T10916] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 354.175916][T10926] can0: slcan on ptm2. [ 354.201914][T10916] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1601: bg 0: block 66: padding at end of block bitmap is not set [ 354.213216][T10926] futex_wake_op: syz.5.1598 tries to shift op by -1; fix this program [ 354.227784][T10916] fs-verity (loop8, inode 16): ext4_end_enable_verity() failed with err -117 [ 354.258399][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 354.334282][ T28] audit: type=1400 audit(2000001095.354:891): avc: denied { bind } for pid=10940 comm="syz.8.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 354.369726][ T28] audit: type=1400 audit(2000001095.374:892): avc: denied { setopt } for pid=10940 comm="syz.8.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 354.438048][T10952] loop8: detected capacity change from 0 to 128 [ 354.459434][T10952] EXT4-fs (loop8): Test dummy encryption mode enabled [ 354.496735][T10953] loop4: detected capacity change from 0 to 2048 [ 354.735528][T10952] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 354.762506][T10953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 354.941104][T10952] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 355.192387][T10964] can1: slcan on ptm0. [ 355.203974][T10964] futex_wake_op: syz.8.1606 tries to shift op by -1; fix this program [ 355.310813][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 355.325103][ T284] EXT4-fs (loop4): unmounting filesystem. [ 355.404406][T10907] can0 (unregistered): slcan off ptm2. [ 355.416435][ T385] EXT4-fs (loop5): unmounting filesystem. [ 355.423713][ T28] audit: type=1400 audit(2000001096.444:893): avc: denied { relabelto } for pid=10991 comm="syz.4.1611" name="335" dev="tmpfs" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 355.456250][ T28] audit: type=1400 audit(2000001096.444:894): avc: denied { associate } for pid=10991 comm="syz.4.1611" name="335" dev="tmpfs" ino=1869 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 355.484178][T10952] can1 (unregistered): slcan off ptm0. [ 355.502881][ T28] audit: type=1400 audit(2000001096.504:895): avc: denied { write } for pid=284 comm="syz-executor" name="335" dev="tmpfs" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 355.529888][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 355.531429][ T28] audit: type=1400 audit(2000001096.504:896): avc: denied { remove_name } for pid=284 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 355.572481][T11011] loop5: detected capacity change from 0 to 128 [ 355.580935][ T28] audit: type=1400 audit(2000001096.504:897): avc: denied { rmdir } for pid=284 comm="syz-executor" name="335" dev="tmpfs" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 355.607114][T11011] EXT4-fs (loop5): Test dummy encryption mode enabled [ 355.624393][T11011] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 355.637812][T11011] ext4 filesystem being mounted at /288/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 355.744871][T11026] can0: slcan on ptm0. [ 355.761362][T11026] futex_wake_op: syz.5.1613 tries to shift op by -1; fix this program [ 355.793282][ T9304] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 355.811134][T11016] loop8: detected capacity change from 0 to 40427 [ 355.883280][T11034] loop4: detected capacity change from 0 to 2048 [ 355.920639][T11016] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 355.993329][ T9304] usb 4-1: Using ep0 maxpacket: 16 [ 356.000538][ T9304] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 356.034140][T11034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 356.099036][T11016] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 356.107497][ T1250] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 356.212815][ T9304] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.356075][T11016] F2FS-fs (loop8): invalid crc value [ 356.397863][ T9304] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.501730][T11016] F2FS-fs (loop8): Found nat_bits in checkpoint [ 356.950194][ T9304] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.982127][ T9304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.991890][ T284] EXT4-fs (loop4): unmounting filesystem. [ 357.018175][ T9304] usb 4-1: Product: syz [ 357.026352][T11054] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 357.032724][T11016] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 357.032739][ T9304] usb 4-1: Manufacturer: syz [ 357.032755][ T9304] usb 4-1: SerialNumber: syz [ 357.043494][T11016] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 357.075473][T11016] syz.8.1616: attempt to access beyond end of device [ 357.075473][T11016] loop8: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 357.106347][ T9054] syz-executor: attempt to access beyond end of device [ 357.106347][ T9054] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 357.135749][ T892] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 357.145560][T11011] can0 (unregistered): slcan off ptm0. [ 357.152462][ T892] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 357.166358][ T385] EXT4-fs (loop5): unmounting filesystem. [ 357.187767][T11068] loop4: detected capacity change from 0 to 128 [ 357.207035][T11068] EXT4-fs (loop4): Test dummy encryption mode enabled [ 357.215927][T11068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 357.224604][T11068] ext4 filesystem being mounted at /340/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 357.316237][T11076] can0: slcan on ptm0. [ 357.361781][T11076] futex_wake_op: syz.4.1623 tries to shift op by -1; fix this program [ 357.428894][T11085] loop5: detected capacity change from 0 to 128 [ 357.447556][T11085] EXT4-fs (loop5): Test dummy encryption mode enabled [ 357.454829][ T9304] usb 4-1: 0:2 : does not exist [ 357.471094][T11085] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 357.483496][T11085] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 357.493363][T11075] loop7: detected capacity change from 0 to 40427 [ 357.510476][T11075] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 357.523355][T11075] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 357.542496][T11075] F2FS-fs (loop7): invalid crc value [ 357.550529][T11075] F2FS-fs (loop7): Found nat_bits in checkpoint [ 357.565918][ T1058] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 357.579962][T11102] can1: slcan on ptm1. [ 357.589151][T11075] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 357.600531][T11102] futex_wake_op: syz.5.1627 tries to shift op by -1; fix this program [ 357.610880][T11075] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 357.660452][T11075] syz.7.1626: attempt to access beyond end of device [ 357.660452][T11075] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 357.691355][T11075] syz.7.1626: attempt to access beyond end of device [ 357.691355][T11075] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 357.932724][T11129] loop8: detected capacity change from 0 to 2048 [ 357.960215][T11129] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 358.280875][ T9304] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 358.345174][ T9304] usb 4-1: USB disconnect, device number 19 [ 358.583362][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): can1: link becomes ready [ 358.613033][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 358.693578][T11146] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1635'. [ 358.702580][T11068] can0 (unregistered): slcan off ptm0. [ 358.705541][T11148] loop8: detected capacity change from 0 to 128 [ 358.722226][ T284] EXT4-fs (loop4): unmounting filesystem. [ 358.728595][T11085] can1 (unregistered): slcan off ptm1. [ 358.745523][T11148] EXT4-fs (loop8): Test dummy encryption mode enabled [ 358.764091][ T385] EXT4-fs (loop5): unmounting filesystem. [ 358.786887][T11148] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 358.813421][T11148] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 358.935337][T11177] can0: slcan on ptm0. [ 359.716439][T11190] loop7: detected capacity change from 0 to 2048 [ 359.876702][T11177] futex_wake_op: syz.8.1634 tries to shift op by -1; fix this program [ 360.114362][T11190] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 360.339788][T11197] loop5: detected capacity change from 0 to 2048 [ 361.049954][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 361.245660][T11197] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 361.579811][T11205] loop4: detected capacity change from 0 to 2048 [ 362.363214][ T385] EXT4-fs (loop5): unmounting filesystem. [ 362.549406][T11205] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 362.649632][T11215] loop7: detected capacity change from 0 to 128 [ 362.798950][T11215] EXT4-fs (loop7): Test dummy encryption mode enabled [ 362.827295][T11215] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 362.844449][T11215] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 362.901959][ T284] EXT4-fs (loop4): unmounting filesystem. [ 362.943896][T11228] can1: slcan on ptm1. [ 362.957962][T11228] futex_wake_op: syz.7.1647 tries to shift op by -1; fix this program [ 362.972831][T11239] loop5: detected capacity change from 0 to 128 [ 362.986855][T11239] EXT4-fs (loop5): Test dummy encryption mode enabled [ 363.002721][T11239] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 363.011957][T11177] can0 (unregistered): slcan off ptm0. [ 363.018203][T11239] ext4 filesystem being mounted at /294/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 363.034926][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 363.037000][T11246] SELinux: failed to load policy [ 363.135206][T11258] can0: slcan on ptm0. [ 363.885796][T11270] loop4: detected capacity change from 0 to 2048 [ 365.260230][T11272] loop8: detected capacity change from 0 to 512 [ 365.624115][T11272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 366.535537][T11270] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 366.853767][T11272] EXT4-fs: failed to create workqueue [ 366.859168][T11272] EXT4-fs (loop8): mount failed [ 367.022075][T11279] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 367.041354][T11279] SELinux: failed to load policy [ 368.129109][T11303] loop8: detected capacity change from 0 to 2048 [ 368.273003][T11303] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 368.713774][ T9304] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 368.902289][ T1007] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 368.909564][ T9304] usb 5-1: Using ep0 maxpacket: 32 [ 368.921162][ T9304] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 368.938569][ T9304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.950429][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 368.956741][ T9304] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 368.993974][ T9304] usb 5-1: New USB device found, idVendor=24b8, idProduct=0020, bcdDevice= 0.00 [ 369.006783][ T9304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.014837][T11228] can1 (unregistered): slcan off ptm1. [ 369.025817][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 369.031731][ T9304] usb 5-1: config 0 descriptor?? [ 369.065274][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 369.065289][ T28] audit: type=1400 audit(2000001110.084:903): avc: denied { read } for pid=11343 comm="syz.8.1663" name="event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 369.104148][T11258] can0 (unregistered): slcan off ptm0. [ 369.115573][T11347] input: syz0 as /devices/virtual/input/input31 [ 369.136385][ T385] EXT4-fs (loop5): unmounting filesystem. [ 369.151293][ T28] audit: type=1400 audit(2000001110.084:904): avc: denied { open } for pid=11343 comm="syz.8.1663" path="/dev/input/event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 369.206290][T11358] loop7: detected capacity change from 0 to 128 [ 369.223847][ T28] audit: type=1400 audit(2000001110.134:905): avc: denied { ioctl } for pid=11346 comm="syz.3.1666" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 369.250149][T11358] EXT4-fs (loop7): Test dummy encryption mode enabled [ 369.269146][ T9304] usbhid 5-1:0.0: can't add hid device: -71 [ 369.768159][T11370] loop8: detected capacity change from 0 to 2048 [ 371.703695][T11372] loop5: detected capacity change from 0 to 2048 [ 374.172403][T11370] EXT4-fs warning (device loop8): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop8. [ 374.194026][T11358] EXT4-fs: error -4 creating inode table initialization thread [ 374.212136][T11372] EXT4-fs warning (device loop5): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop5. [ 374.250828][ T9304] usbhid: probe of 5-1:0.0 failed with error -71 [ 374.274193][T11358] EXT4-fs (loop7): mount failed [ 374.357380][ T9304] usb 5-1: USB disconnect, device number 16 [ 375.249713][T11392] loop7: detected capacity change from 0 to 128 [ 375.331489][T11398] loop4: detected capacity change from 0 to 512 [ 375.341450][T11398] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.394044][ T28] audit: type=1400 audit(2000001116.414:906): avc: denied { compute_member } for pid=11395 comm="syz.8.1673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 375.536405][T11398] EXT4-fs (loop4): orphan cleanup on readonly fs [ 375.545030][T11398] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1671: bg 0: block 248: padding at end of block bitmap is not set [ 375.560122][T11398] Quota error (device loop4): write_blk: dquota write failed [ 375.567698][T11398] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 375.577689][T11398] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.1671: Failed to acquire dquot type 1 [ 375.590725][T11398] EXT4-fs (loop4): 1 truncate cleaned up [ 375.597135][T11398] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 375.622382][T11398] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.1671: deleted inode referenced: 12 [ 375.641064][T11392] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 375.843489][T11392] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 376.113641][ T284] EXT4-fs (loop4): unmounting filesystem. [ 376.121539][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 376.253601][T11421] loop5: detected capacity change from 0 to 2048 [ 376.347666][T11421] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 376.998719][ T385] EXT4-fs (loop5): unmounting filesystem. [ 377.053297][ T813] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 377.109476][T11443] loop5: detected capacity change from 0 to 512 [ 377.136243][T11443] EXT4-fs (loop5): filesystem is read-only [ 377.160152][T11443] EXT4-fs (loop5): filesystem is read-only [ 377.173278][T11443] EXT4-fs (loop5): orphan cleanup on readonly fs [ 377.182601][T11443] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1685: bad orphan inode 16 [ 377.203143][T11443] ext4_test_bit(bit=15, block=3) = 0 [ 377.208574][T11443] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 377.254389][ T813] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 377.273293][ T813] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.283087][ T813] usb 9-1: config 0 interface 0 has no altsetting 0 [ 377.283587][ T385] EXT4-fs (loop5): unmounting filesystem. [ 377.293267][ T813] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 377.295541][ T39] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 377.304502][ T813] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.320775][ T813] usb 9-1: config 0 descriptor?? [ 377.458376][ T28] audit: type=1400 audit(2000001118.474:907): avc: denied { create } for pid=11451 comm="syz.4.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 377.524545][ T39] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 377.548312][ T39] usb 8-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 377.558992][T11454] loop5: detected capacity change from 0 to 8192 [ 377.565465][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.589425][ T39] usb 8-1: config 0 descriptor?? [ 377.632329][T11460] kvm: emulating exchange as write [ 377.650472][T11463] overlayfs: failed to set xattr on upper [ 377.740031][ T813] hid-steam 0003:28DE:1102.001E: unknown main item tag 0x0 [ 377.753319][ T813] hid-steam 0003:28DE:1102.001E: unknown main item tag 0x0 [ 377.770986][ T813] hid-steam 0003:28DE:1102.001E: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 377.783154][ T813] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x0 [ 377.790715][ T813] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x0 [ 377.805035][ T813] hid-steam 0003:28DE:1102.001F: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 377.883335][ T813] hid-steam 0003:28DE:1102.001E: Steam Controller 'XXXXXXXXXX' connected [ 377.892498][ T813] input: Steam Controller as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28DE:1102.001E/input/input32 [ 377.994392][ T813] usb 9-1: USB disconnect, device number 4 [ 377.998841][T11479] SELinux: failed to load policy [ 378.013150][ T39] hid (null): report_id 4024850873 is invalid [ 378.021128][ T813] hid-steam 0003:28DE:1102.001E: Steam Controller 'XXXXXXXXXX' disconnected [ 378.029406][ T39] wacom 0003:056A:0307.0020: report_id 4024850873 is invalid [ 378.050247][ T39] wacom 0003:056A:0307.0020: item 0 4 1 8 parsing failed [ 378.058838][ T39] wacom 0003:056A:0307.0020: parse failed [ 378.061343][T11483] incfs: Options parsing error. -22 [ 378.065013][ T39] wacom: probe of 0003:056A:0307.0020 failed with error -22 [ 378.069997][ T306] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 378.085501][T11483] incfs: mount failed -22 [ 378.237738][ T793] usb 8-1: USB disconnect, device number 3 [ 378.274402][ T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.285559][ T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.295673][ T306] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.308809][ T306] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.321650][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.333945][ T306] usb 5-1: config 0 descriptor?? [ 378.423316][ T39] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 378.603307][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 378.615341][ T39] usb 6-1: config 0 has an invalid interface number: 180 but max is 0 [ 378.624277][ T39] usb 6-1: config 0 has no interface number 0 [ 378.644461][ T39] usb 6-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72 [ 378.653605][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.661758][ T39] usb 6-1: Product: syz [ 378.665978][ T39] usb 6-1: Manufacturer: syz [ 378.670580][ T39] usb 6-1: SerialNumber: syz [ 378.679382][ T39] usb 6-1: config 0 descriptor?? [ 378.694528][ T39] usb 6-1: bad CDC descriptors [ 378.706148][T11527] SELinux: unknown common socke [ 378.712513][T11527] SELinux: failed to load policy [ 378.741968][ T306] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xe [ 378.752956][ T306] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 378.760652][ T306] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 378.770668][T11534] loop7: detected capacity change from 0 to 1024 [ 378.777371][ T306] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 378.795662][T11536] sch_fq: defrate 0 ignored. [ 378.825523][ T1963] udevd[1963]: failed to send result of seq 12067 to main daemon: Connection refused [ 378.835901][T11534] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 378.873052][T11534] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm syz.7.1726: Allocating blocks 497-513 which overlap fs metadata [ 378.896907][ T39] usb 6-1: USB disconnect, device number 20 [ 378.934894][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 378.946701][ T28] audit: type=1400 audit(2000001119.954:908): avc: denied { bind } for pid=11549 comm="syz.3.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 378.998625][T11545] loop8: detected capacity change from 0 to 40427 [ 379.005865][T11545] F2FS-fs (loop8): fault_injection options not supported [ 379.013181][T11545] F2FS-fs (loop8): heap/no_heap options were deprecated [ 379.020436][T11545] F2FS-fs (loop8): Image doesn't support compression [ 379.027994][T11545] F2FS-fs (loop8): invalid crc value [ 379.038380][T11545] F2FS-fs (loop8): Found nat_bits in checkpoint [ 379.054657][ T793] usb 5-1: USB disconnect, device number 17 [ 379.069332][T11545] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 379.086139][ T9054] syz-executor: attempt to access beyond end of device [ 379.086139][ T9054] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 379.353351][ T305] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 379.412482][T11581] loop8: detected capacity change from 0 to 2048 [ 379.479852][T11581] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 379.633322][ T305] usb 8-1: Using ep0 maxpacket: 16 [ 379.640331][ T305] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.651746][ T305] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.670648][T11587] loop5: detected capacity change from 0 to 128 [ 379.677448][ T305] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 379.694847][T11587] EXT4-fs (loop5): Test dummy encryption mode enabled [ 379.704113][ T305] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 379.717889][T11587] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 379.727673][T11587] ext4 filesystem being mounted at /312/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 379.738440][ T305] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.750301][ T305] usb 8-1: config 0 descriptor?? [ 379.881007][T11589] can0: slcan on ptm0. [ 379.938857][T11589] futex_wake_op: syz.5.1746 tries to shift op by -1; fix this program [ 380.068559][T11598] loop4: detected capacity change from 0 to 1024 [ 380.075416][T11598] EXT4-fs: Ignoring removed bh option [ 380.084712][T11598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 380.096888][ T28] audit: type=1400 audit(2000001121.114:909): avc: denied { rename } for pid=11597 comm="syz.4.1750" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 380.097090][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 380.119282][ T813] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 380.126660][T11598] EXT4-fs error (device loop4): ext4_check_all_de:666: inode #12: block 7: comm syz.4.1750: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 380.152822][T11598] EXT4-fs (loop4): Remounting filesystem read-only [ 380.170258][ T284] EXT4-fs (loop4): unmounting filesystem. [ 380.179063][ T305] microsoft 0003:045E:07DA.0022: No inputs registered, leaving [ 380.194425][ T305] microsoft 0003:045E:07DA.0022: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 380.210706][ T305] microsoft 0003:045E:07DA.0022: no inputs found [ 380.217260][ T305] microsoft 0003:045E:07DA.0022: could not initialize ff, continuing anyway [ 380.244216][T11612] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1756'. [ 380.314539][ T813] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.325584][ T813] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 380.336385][ T813] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 380.347543][ T813] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 380.450586][T11617] loop4: detected capacity change from 0 to 2048 [ 380.478492][ T9304] usb 8-1: USB disconnect, device number 4 [ 380.523985][ T305] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 380.538042][T11617] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 380.725729][ T305] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.737173][ T305] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 380.746340][ T305] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.757784][ T305] usb 9-1: config 0 descriptor?? [ 381.042937][ T813] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.045965][T11621] loop7: detected capacity change from 0 to 512 [ 381.052103][ T813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.058802][T11621] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.066380][ T813] usb 4-1: Product: syz [ 381.073259][T11621] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 381.077026][ T813] usb 4-1: Manufacturer: syz [ 381.088599][T11621] EXT4-fs (loop7): 1 truncate cleaned up [ 381.091545][ T813] usb 4-1: SerialNumber: syz [ 381.097305][T11621] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 381.120641][T11571] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 381.147763][ T284] EXT4-fs (loop4): unmounting filesystem. [ 381.162543][T11621] EXT4-fs (loop7): shut down requested (2) [ 381.168793][T11587] can0 (unregistered): slcan off ptm0. [ 381.181528][ T385] EXT4-fs (loop5): unmounting filesystem. [ 381.261309][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 381.273955][ T305] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 381.284403][ T305] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0023/input/input33 [ 381.304868][ T28] audit: type=1400 audit(2000001122.324:910): avc: denied { write } for pid=11633 comm="syz.7.1763" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 381.331332][T11571] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 381.353750][T11636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1764'. [ 381.437961][T11637] loop5: detected capacity change from 0 to 2048 [ 381.448628][T11571] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 381.465910][ T305] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 381.505043][T11608] loop8: detected capacity change from 0 to 512 [ 381.555701][T11637] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 381.598341][T11608] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 381.729546][T11608] EXT4-fs (loop8): 1 truncate cleaned up [ 381.758659][T11608] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 382.158888][ T385] EXT4-fs (loop5): unmounting filesystem. [ 382.258444][T11658] loop7: detected capacity change from 0 to 2048 [ 382.275215][T11657] loop4: detected capacity change from 0 to 128 [ 382.334598][T11657] EXT4-fs (loop4): Test dummy encryption mode enabled [ 382.352279][T11658] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 382.403907][T11657] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 382.413630][T11657] ext4 filesystem being mounted at /369/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 382.444074][T11571] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 382.446103][ T793] usb 9-1: USB disconnect, device number 5 [ 382.451769][T11571] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 382.593009][T11666] can0: slcan on ptm0. [ 383.058930][T11669] loop5: detected capacity change from 0 to 2048 [ 383.074812][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 383.089079][T11671] futex_wake_op: syz.4.1769 tries to shift op by -1; fix this program [ 383.111320][T11669] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 383.406277][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 383.463700][ T813] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 383.470349][ T813] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 383.528590][T11680] loop7: detected capacity change from 0 to 128 [ 383.535580][T11680] EXT4-fs (loop7): Test dummy encryption mode enabled [ 383.544012][T11680] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 383.552768][T11680] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 383.577778][ T813] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 383.583873][ T385] EXT4-fs (loop5): unmounting filesystem. [ 383.589983][ T813] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 383.597711][ T813] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 383.620807][ T813] usb 4-1: USB disconnect, device number 20 [ 383.627106][ T813] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 383.644018][T11686] can1: slcan on ptm1. [ 383.661123][T11686] futex_wake_op: syz.7.1771 tries to shift op by -1; fix this program [ 383.683955][T11691] SELinux: security policydb version 18 (MLS) not backwards compatible [ 383.692713][T11691] SELinux: failed to load policy [ 383.823497][T11695] loop8: detected capacity change from 0 to 2048 [ 383.832826][T11657] can0 (unregistered): slcan off ptm0. [ 383.922313][T11695] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 384.065091][ T284] EXT4-fs (loop4): unmounting filesystem. [ 384.700244][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 385.126823][ T28] audit: type=1400 audit(2000001126.134:911): avc: denied { sqpoll } for pid=11708 comm="syz.4.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 385.169008][T11719] loop4: detected capacity change from 0 to 512 [ 385.185003][T11719] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 385.194198][T11719] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.553612][T11680] can1 (unregistered): slcan off ptm1. [ 385.567607][ T28] audit: type=1400 audit(2000001126.584:912): avc: denied { unlink } for pid=11718 comm="syz.4.1786" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 385.591701][ T5225] EXT4-fs (loop7): unmounting filesystem. [ 385.602005][ T284] EXT4-fs (loop4): unmounting filesystem. [ 487.103221][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 487.110225][ C1] (detected by 1, t=10002 jiffies, g=40525, q=151 ncpus=2) [ 487.117589][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294985925-4294975922), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 487.131031][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g40525 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 487.142222][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 487.152184][ C1] rcu: RCU grace-period kthread stack dump: [ 487.158060][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 487.168845][ C1] Call Trace: [ 487.172118][ C1] [ 487.175046][ C1] __schedule+0xb87/0x14e0 [ 487.179482][ C1] ? release_firmware_map_entry+0x194/0x194 [ 487.185381][ C1] ? __cfi_call_rcu+0x10/0x10 [ 487.190051][ C1] ? preempt_schedule+0xa7/0xb0 [ 487.194900][ C1] preempt_schedule_common+0x9b/0xf0 [ 487.200187][ C1] preempt_schedule+0xa7/0xb0 [ 487.204862][ C1] ? __cfi_preempt_schedule+0x10/0x10 [ 487.210232][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 487.215950][ C1] preempt_schedule_thunk+0x16/0x18 [ 487.221152][ C1] _raw_spin_unlock_irqrestore+0x6f/0x80 [ 487.226785][ C1] __mod_timer+0x7ae/0xb30 [ 487.231195][ C1] ? schedule_timeout+0x8c/0x2e0 [ 487.236131][ C1] schedule_timeout+0x127/0x2e0 [ 487.240980][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 487.246346][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 487.251804][ C1] ? __cfi_process_timeout+0x10/0x10 [ 487.257086][ C1] ? prepare_to_swait_event+0x308/0x320 [ 487.263173][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 487.268033][ C1] ? rcu_gp_init+0xf10/0xf10 [ 487.272630][ C1] rcu_gp_kthread+0x95/0x370 [ 487.277226][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 487.282424][ C1] ? __kasan_check_read+0x11/0x20 [ 487.287450][ C1] ? __kthread_parkme+0x142/0x180 [ 487.292468][ C1] kthread+0x281/0x320 [ 487.296532][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 487.301731][ C1] ? __cfi_kthread+0x10/0x10 [ 487.306316][ C1] ret_from_fork+0x1f/0x30 [ 487.310731][ C1] [ 487.313741][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 487.320065][ C1] CPU: 1 PID: 11717 Comm: syz.5.1785 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 487.329957][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.340012][ C1] RIP: 0010:handle_softirqs+0x144/0x600 [ 487.345560][ C1] Code: 85 e8 10 fe a6 03 65 66 89 1d 18 d0 c0 7e 48 c7 c7 20 02 49 85 e8 fc fd a6 03 65 44 89 25 dc cd bf 7e fb 49 c7 c5 c0 a0 e0 86 <44> 89 65 ac b8 ff ff ff ff 0f bc 45 ac 89 c3 ff c3 0f 84 a2 02 00 [ 487.365596][ C1] RSP: 0018:ffffc900001b0f30 EFLAGS: 00000286 [ 487.371749][ C1] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 5b7d6dfa28841f00 [ 487.379721][ C1] RDX: 1ffffffff0f2c808 RSI: ffffffff85490220 RDI: ffffffff85a9fc60 [ 487.387888][ C1] RBP: ffffc900001b0fc0 R08: ffffffff87964048 R09: ffffffff87964058 [ 487.395886][ C1] R10: ffffffff87964043 R11: 1ffffffff0f2c808 R12: 0000000000000000 [ 487.403866][ C1] R13: ffffffff86e0a0c0 R14: 0000000000000008 R15: ffff88812825a880 [ 487.411838][ C1] FS: 00007f45c90436c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 487.420767][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.427439][ C1] CR2: 00007efe2f3fff90 CR3: 000000013b911000 CR4: 00000000003506a0 [ 487.435496][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 487.443466][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 487.451442][ C1] Call Trace: [ 487.454739][ C1] [ 487.457577][ C1] ? irqtime_account_irq+0xc4/0x240 [ 487.462783][ C1] __irq_exit_rcu+0x52/0xf0 [ 487.467281][ C1] irq_exit_rcu+0x9/0x10 [ 487.471528][ C1] sysvec_irq_work+0xa6/0xc0 [ 487.476146][ C1] [ 487.479077][ C1] [ 487.481999][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 487.486929][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 487.492821][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 7a b9 56 01 5d c3 0f 1f 84 00 00 00 00 [ 487.512421][ C1] RSP: 0018:ffffc90007d67c20 EFLAGS: 00000246 [ 487.518486][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 487.526452][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 487.534414][ C1] RBP: ffffc90007d67c20 R08: dffffc0000000000 R09: fffff52000facf81 [ 487.542380][ C1] R10: 0000000000000000 R11: ffffffff81341a40 R12: 0000000000000000 [ 487.550340][ C1] R13: dffffc0000000001 R14: ffffffff8648ab50 R15: dffffc0000000000 [ 487.558311][ C1] ? __cfi_native_apic_msr_write+0x10/0x10 [ 487.564129][ C1] x2apic_send_IPI_self+0x6f/0x80 [ 487.569151][ C1] arch_irq_work_raise+0x98/0xf0 [ 487.574089][ C1] __irq_work_queue_local+0x115/0x190 [ 487.579457][ C1] irq_work_queue+0x9e/0x150 [ 487.584041][ C1] bpf_send_signal_common+0x2b2/0x420 [ 487.589414][ C1] ? __set_printk_clr_event+0x80/0x80 [ 487.594790][ C1] bpf_send_signal+0x19/0x20 [ 487.599376][ C1] bpf_prog_b89875bed3bf067a+0x3b/0x3f [ 487.604846][ C1] bpf_trace_run2+0xff/0x250 [ 487.609435][ C1] ? __cfi_bpf_trace_run2+0x10/0x10 [ 487.614633][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 487.619736][ C1] trace_sys_enter+0x3d/0x50 [ 487.624355][ C1] syscall_trace_enter+0xf3/0x150 [ 487.629375][ C1] syscall_enter_from_user_mode+0x1f/0x30 [ 487.635190][ C1] do_syscall_64+0x24/0xa0 [ 487.639703][ C1] ? clear_bhb_loop+0x30/0x80 [ 487.644386][ C1] ? clear_bhb_loop+0x30/0x80 [ 487.649064][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.654951][ C1] RIP: 0033:0x7f45c812ab19 [ 487.659359][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 487.678952][ C1] RSP: 002b:00007f45c9042a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 487.687389][ C1] RAX: ffffffffffffffda RBX: 00007f45c83b5fa0 RCX: 00007f45c812ab19 [ 487.695360][ C1] RDX: 00007f45c9042a80 RSI: 00007f45c9042bb0 RDI: 0000000000000011 [ 487.703329][ C1] RBP: 00007f45c8210b39 R08: 0000000000000000 R09: 0000000000000000 [ 487.711295][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.719257][ C1] R13: 0000000000000000 R14: 00007f45c83b5fa0 R15: 00007ffe1f5f83d8 [ 487.727229][ C1] [ 572.183776][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 186s! [ 572.192701][ C0] Showing busy workqueues and worker pools: [ 572.198601][ C0] workqueue events: flags=0x0 [ 572.203287][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 572.203327][ C0] pending: kfree_rcu_work, psi_avgs_work, destroy_super_work, rht_deferred_worker, xfrm_state_gc_task, rht_deferred_worker [ 572.203423][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 572.203457][ C0] pending: vmstat_shepherd, kfree_rcu_monitor, bpf_prog_free_deferred, update_stats_workfn, free_work, rht_deferred_worker [ 572.203562][ C0] workqueue events_long: flags=0x0 [ 572.250151][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 572.250198][ C0] pending: br_multicast_gc_work, br_multicast_gc_work [ 572.250235][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 572.250273][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work [ 572.250339][ C0] workqueue events_unbound: flags=0x2 [ 572.287391][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 572.287431][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 572.287478][ C0] workqueue events_power_efficient: flags=0x80 [ 572.308343][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 572.308390][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, neigh_managed_work [ 572.308454][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 572.308490][ C0] pending: neigh_managed_work, neigh_periodic_work, check_lifetime, gc_worker [ 572.308555][ C0] workqueue rcu_gp: flags=0x8 [ 572.346841][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 572.346885][ C0] pending: srcu_invoke_callbacks, process_srcu [ 572.346928][ C0] workqueue mm_percpu_wq: flags=0x8 [ 572.366237][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.366280][ C0] pending: vmstat_update [ 572.366309][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.366343][ C0] pending: vmstat_update [ 572.366372][ C0] workqueue writeback: flags=0x4a [ 572.395942][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=5/256 refcnt=7 [ 572.395980][ C0] pending: wb_update_bandwidth_workfn, wb_update_bandwidth_workfn, wb_workfn, wb_workfn, wb_workfn [ 572.396067][ C0] workqueue kblockd: flags=0x18 [ 572.419098][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=5/256 refcnt=6 [ 572.419138][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 572.419271][ C0] workqueue dm_bufio_cache: flags=0x8 [ 572.444863][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.444910][ C0] pending: work_fn [ 572.444942][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 572.462247][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 572.462290][ C0] pending: addrconf_verify_work [ 572.462323][ C0] inactive: addrconf_verify_work [ 572.462349][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 572.462386][ C0] pending: addrconf_verify_work [ 572.462415][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 572.462486][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.507202][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.507242][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.507301][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.528520][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.528564][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.528623][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.549827][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.549865][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.549923][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.571121][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.571159][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.571219][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.592428][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.592466][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.592529][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.613753][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.613792][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.613851][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.635054][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.635092][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.635156][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 572.656625][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.656667][ C0] pending: wg_packet_encrypt_worker [ 572.656693][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.656727][ C0] pending: wg_packet_encrypt_worker [ 572.656750][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 572.688406][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.688449][ C0] pending: wg_packet_encrypt_worker [ 572.688474][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.688508][ C0] pending: wg_packet_encrypt_worker [ 572.688536][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 572.720105][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.720149][ C0] pending: wg_packet_encrypt_worker [ 572.720174][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.720210][ C0] pending: wg_packet_encrypt_worker [ 572.720233][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 572.751804][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.751847][ C0] pending: wg_packet_encrypt_worker [ 572.751876][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.770040][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.770078][ C0] pending: wg_packet_handshake_send_worker [ 572.770112][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 572.788705][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.788747][ C0] pending: wg_packet_encrypt_worker [ 572.788771][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.788805][ C0] pending: wg_packet_encrypt_worker [ 572.788826][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.820137][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.820177][ C0] pending: wg_packet_handshake_send_worker [ 572.820214][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 572.838833][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.838878][ C0] pending: wg_packet_encrypt_worker [ 572.838903][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.838939][ C0] pending: wg_packet_encrypt_worker