last executing test programs: 6.696346323s ago: executing program 1 (id=4021): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x8004, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000080)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash}, {@appraise}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '@-{:$'}}]}, 0x3, 0x443, &(0x7f0000000a40)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0xa8, 0x1e8, 0xfeffffff, 0x290, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'dummy0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x89, 0x1, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id=0x67, @gre_key=0x4}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) 6.647687473s ago: executing program 0 (id=4023): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x348}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000ffff0c63b7030000000000008500000083000000bf09000000000000550901000000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='ext4_writepages\x00', r1, 0x0, 0x7}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r6, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 5.524839011s ago: executing program 1 (id=4026): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000440)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x60, 0xe, 0x1, {0x22, 0xe55}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0}, 0x0) 4.637042275s ago: executing program 0 (id=4030): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x348}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000ffff0c63b7030000000000008500000083000000bf09000000000000550901000000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='ext4_writepages\x00', r1, 0x0, 0x7}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r7, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 3.975221446s ago: executing program 3 (id=4031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) setregid(0xffffffffffffffff, 0x0) 3.859523228s ago: executing program 3 (id=4033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000}, 0x50) 3.859231298s ago: executing program 3 (id=4034): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 3.449121744s ago: executing program 0 (id=4035): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)="c2c1000000000000073dfb", 0xb}, {&(0x7f0000000100)="974111", 0x3}, {0x0}], 0x3) 3.137256839s ago: executing program 0 (id=4036): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) 3.12396032s ago: executing program 1 (id=4037): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x348}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000ffff0c63b7030000000000008500000083000000bf09000000000000550901000000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='ext4_writepages\x00', r1, 0x0, 0x7}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r5, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 3.006958961s ago: executing program 3 (id=4038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 2.897683493s ago: executing program 2 (id=4040): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.858418234s ago: executing program 1 (id=4041): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00'}, 0x18) socket$packet(0x11, 0x3, 0x300) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d0a"], 0x14}}, 0x0) 2.826878484s ago: executing program 3 (id=4042): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x693, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$UHID_INPUT(r5, &(0x7f00000007c0)={0x8, {"e7dd6f4a73ac58390281e8876497da96190bcef5280c58c7869ce43fe99695c90494ad8b60e432adeda81a841d1b1b23d8078152542d5f6d3703b4552a39c335111c887d4f5e542dff8d0df47dbdfb601c66e53cce39119089ee2c8fed236723490b244bccf20c125bcb3bc6e48e1d8d299719b7fad5364ab647e63c48b5caf1d5e0a340f69bb13f106a9967ec1b2ab5544b65208f044685d49cde8e2729db85af0fedc58671107822946512c1ee3f2c0ff82a25379d90daedd3b12874b8bb0a0a605a3532508da8d602a29cf2a19960cfe00f23caa50c2755a4bb42597b1dee1e6915f1c59781de5fca83d9407c02782c150054fa6a7bed61d4ff6555c0cb4d09d5940197977b1a4c2556b612257bd52402caf9e46490d200b4f6533acd19adbb3130d3b7ff331f1620121c2b965296b9d7e0f347b303587ce16ba8df63764201985a41d617860ffa8470c3f130b1a0f2531553faae58143979b3dc19fc4742bb1f33d088b29bd0ddb57dad3933e1d42fc6fabd8e6ee2301067f601bbd2eed0423971b21e0db318b108ece7252ab198a8e659793578a28a081a4eeedd0a7ffdb2dedf68bedd5a738ee530f1dc1410051cd6ea61caab0d86576c61ecd9cf2b5a8eb83b0d32ad80315bf17604a248ed5b4fb4f201e28efd244a46847c58f67125ac2cd8a2c8222a9d8ad98bf8e0b46033e67d0bb27f59e90ff0726536938d9e7dbeccee86cbd8706100515f17ac4c2623eff6fbfef27bd7b5c81e5e1679d1e38dbdeaa0dea23af7f7f9dde27992f7acf488c8f015f45c41c4b95058cd91f674b7467e27c5a6536fa58a10985780f6c3fcf8895b5844617a3f9754a0dd3b0437997d629e890053e75b9522011873f493604e8a155bdde079216cc2f56643cefde669dc525aa1c01ccfd82beb131dd6f6c7d7c38bc6df7d7beb1c655d1720e85fc2b43064a9d88aa5a218160fccacd96a9b64981aada2d06ee461bb751d14433759114122b653d7be68529232457bf65c55f1a86f35e369f73678412dbeb96d39c23cf3f4e89d93ce0e8fe4ae719782abc671114c67a70fa8ff3a6968b222bb3a1042d44391238fd20ca456852625d2b9ae75e9f225245bb35d35b17ad3d0675731834a2c2e4f7f24aeb76abb50b81231b26ecd0e6a83ae624c9bb51f3bf5afe6ca5e9dbab6ac753ba18f3c2a9849946fa1cc46d221302240d07a8975ed174c43cdd28c8bf2efc07cc665ed0bb303b7da5c9b485b82ed9026e80f8b753ce58ca14e927e5ecd5a10ff90417ede21fc9564b7be49d0990ea41998b144d4cb779319f75f320461de668d75708d294e48d2895115ca845e58309edf1ccbf228c9f31b26ba9769a35f3da04b99df68ae51f61866200bfeb0253607cfcf4894ee1869c79e8e635a8e439782a93f652952e86a05e2a9966c2a61401ed728ded38b7b16805ea4507a0a44018236e46a5b45c632c157e62c360d3d3016297805425ff6512d4867b0f625d3a58d0e4eabb51d1bbdc2a6e5754b0ebd4da46ff53be713462938ddde4670d68dae4bec2626aefff055e2cc48694f390f95852b13f472bd26e8112d6ebbcd9dfaa0834022d9a1213a3d6f33c4ce8b7d6ec77544e5c4038484e64498463b26fdbde58820c5f105073392802917839452299cd5b8e0994b7017714dab35e50e76ec7d4aa4a8499b55c13b901280bb8a49c358a624ca116a65537f6b06b3b35485b2408b33011de3651c5c5469b0d0f34684d95e0c0d8e45ac7d4edd824272669f714106e0fabb5cb1c40e319f6219293a0cbf839e0e9d7c4a3b472dba130d4044b406e236ed38aa7f64e6b2e4f7bffd1cdab2e5e4f25a887088fd8cd39808e289e5fc9968bcab4bbd5553a61ff0d6e6da8ecadb054f7b696f8a5580fe99da5ee8a28b5b3353a3ac7f96f2f0a9ee2aae17e535ad86568fd9d1bb2a6524a18bfa73c9e2a22981981b9890df97861660e1f2f9adfdb8f29cad7289916ff27ef0fcdbfc93752dafa014bb97b598b36654a6aaab1f3223d6e42cfab7195cdec7d23940c8643d64f50b32950486121af208073f982d4dc52e1e37b3a10509639f0cae7a093f1f0b12d5c46d1c2edb074e0f364215d8289bbf765ac9f2beabe7e80e9d4e578369a08becb04241e2059bcb120c74448ad9b725cf86d345de0690d1667b07a19a34f32b38ecc41dc4994385976c987552e6fe02e0607373800c6d7c60625d597bfe7fc35a08d966a164adde96b807c0edcb69b0509963271df135824b652a7210741b6b79ce51da903729940604bf28c0638411262f2895165095fa6835f318686c92f0b1d49f047c814b51d79938a4df0c1a2fc4f711e9be28fe370d86b49786bb4c63a8bac8304b385468c9feba28a1036b6896b35be5d09277fad62b3358f70c584a84e41d4f99e6a548170b49d54d90505868c8597e16b381d5bfa601df1b6e6f9ed04071f11039cd312b891c417f8404cf1659485461c62243750cf4279df9ee8cc47e8d5b73e8c36b7c60c6ea2d3c4a3ad65dc7b38f8e3b81da89f8f18f2f8201c024480ed6f0874b5cb03e6047bfff04969d3f4488cb4df7d91d1fd80186e71ce6467dd0c8eabc3d6fa7e636b8870b0e090686284423a71f44362949c7cdc6240c015e7159bc544fac8671e9f5af82b8e8c40a99074a4a37d44ab9c60bf751bcbca6940e48fa4755f7840fa5fd4c5eec79215d9d90501a5334617f353d48c8c57a824d6490dd18d51ee7147f738c0bc7cd17441eb04ad12fc7b2a14684d5560f15154a4ed67a80a2a8ed1069067d62e82356a047b4be8730438ad52c777712e974005938169dcae2b6b19faedcd4600c4b42c9026003b7bd2e0686b0b7ac33a4e4d1f1fdec142c76e91fb81359c1cfd3b9bf35a7b852af95a5bd292b289132556d6c614ec6a98044881921263e545da03874c54d173a8f93f9d6ba7e7f52d1d4c903b96d1f8f1a5c2e1b32f7019c455e76b0393c7cafd3cbdbbdfe6aa05812f7be4b48692edfefb92bb97bb4237ff396abe0473c78e98dbbcab3270c1ee9dbbaa4ade1cf324acfe2a46dc00bac09f9311d3019141bb577a8b755de8ba37c10b9f55388fe013e2eb10b3c216c01a7f9185fdeaa6b56c55f643a485a24f38ef784961ff1d556dadfd73387db61a908e77d3e3eab609e6c74e9d79b0579d6996e14bcc35a1dc900105eca7b2eb43892a6d7e185ea176114d4d7686a482569283709c61472153bb56b81bce82f27b32315ca5840b7c18f640f02a21d78af1fb20b54b7d60ecf8d5d9ac7a1ee9377bc79ea9a1ec6eb7802487e3fea89f83c94aef22de1a965d687e46cba1c161839028422e72e11571a3441d290692242d0f1ef290adc030bac243f1a502ca2a82ca7eb92e95485ffd7f76a60ca4324aa0ae3a580b3baf3ee1d2dff35e96b09146ecb1dee7158e4f1699a8042a9ffc345c1919425e0789a00e1ffd8f3e64f9e8c9613af8a1ac07c7ccc21a85d73e83585e83ac7cb061abe4f0327aa140beaac314fd47646e048a0b8f920a011b422ed4de658fac5a324d24df35be6c16c6ee64103c63486e7361960eb6de35344bf49b06cfd005821592eea7af47aeaf2bf7ceabbb274f005200b3223600ce433345d2eb3fc0a322be0a28e8d3b1006b7efb3877f2d829a2eaa581ec38e148edd51761b0beece635e9b78ff0215cc2a35f18a38d510f5ba3e70aaacc5d93ea29ac0a2c7cfe6362907b91f0e442f61b8bcaf21359c92c0c2e2c912abc4ffd4d5bf0d55cdd1bdd9410056b6d4c68077aee8e3644ae95f4146b92880410657bc922fc0258793c19cf1b775115211f9b5dc70c432bb465dd7f29b90b1d67d91d2a3cea44e092cee26a7496509e5abac1162892c63e9a8672d5e77e661fac8edb565debf11b85039af31ea8e296feb44f083b521e2f8faef522ce2d33de768a9d28f78c14c72e580d6ee7b3bbe1762299c955f80e1b6b213f618b7ff049a403f54de253a19a1dd4aaaf9862412e088fd3fe418ba0fbed8bbe38771698c032df9b0f9dd53f52c5d189b9757f20475e8c39e735859802b539d95a544e485906017e9a4929f3ab0a1fe48fe8152e2c0e77b44c05f83f0ca7af3fb01814771e19ea93e635ada28d1554f9d147ab9d8e13822999b76aea0cc8a4aa87460c6422ed60effb79872dca1df98516e27638d56c8ebc377af46d85f8a17e38420c8cd2c8652cc4545920703ac3586e2ce9f9c5efbbdab23cf704d7ab018810ffcce65e1dd150ddba5aed76ecd4ee8e1186ad57f27c7229fd1e8d380846d272089cf7f930a6b8699827867a38a8e1532a57dd41fe7409cb9de174de385940bf0aff8b78b390b870f7d9506c9f17adffc32754f07c1eb5460c9d16c697553908a4127dc0b00290ff4070508f617d38187ac43b6805e14bb1c68c495f8f2929e83cd7052f0e2cc17e333a20aed2853f5b6ff73ce0085da01dc630f89f66216ee4e1f8c850520f45f77f4bcb2a3c7842526e224d5ff1daeaff6530e61a7fed8eaccbfd2d89c6f4db077edecc9abbb58ad060fd8c54444a23834a923aab2b2d45290ded110532f068d5e38510da845c040ea3e3fd7115ce70a89f567c8a4956cf869abe14a605dcf926b30243d1e388a598266b2a22b6255c3f6bf09f9c1cd0e94a10999abdbd7e45a525ff76f6741205fde959b21908dc048f75db534ae016280b1c3575452b0b9e46a5d2d207ad2ab3c5456b8dd62384b6d103ce07eaf311ed856e2947017f47751331fdb8abda225847b196b97c850f0adc515e9fe03e669ff635be92b1f2a31a334deb5367a78c9801abf8c88b5197e6176631458bc001e6cadb5030d0f40d9b926167db167400c0f7572316c0e035fd97732047b8a5fab0c96906e2803f9cda88d49483abec09a6f41bec347c05f0ec109d06d171d4950fef2eb9568265b2d47cbd4e4d34cb0fbd3d3e3c191f7ce74c7ede2281b889b41c2c232af2075bb9a4b65631d381df33381722384c38382f76b0919d1f1c869e0feb948a9e1793a610c5c689babd8591f7dbb0497ef73c79a5b09993857fa7f25a57fa762c7a7e359058e8965b8e0e487444f505fb54f0f5cddb3dbaaa7d19254bb3822bc99bb77452613be144f4cfd1900f1c1b71398de1716221bf35b0e2aca450e4a98ffa133d7892f3e7d8d8891fc9ca4e030091260c6ea824b2b98bc0f83ba2f127618c2c0a08ede0b6add4a36e01a9f23040bcffa943982f883e626bbd197519c4f3d6c381253e07c3afb935ee032b8da47ef8617b4e91151df412d505f1e3cb211b42a8c77f1f4acda5a3f703e06fe65b996ee015d09aada5eda35639f49f26069c7b2ec2decbba994cbe20dc167a4e708ae3e246b919f73c4c436f5dd004044fb2033d1336e58f5e37dac2017e70d920eed261c7296b67f134e5dadacaf5c8d14ea1e7a55f9935aa6e09cbbbf10e4bf7e74238feee3faf551094e4ddcf1f0319bbf131fa2c70dd818c9df5becd621ebc5e8fb103b3be51db8d51c5a91ba0a8a6d93ea7d396a761a8b5a9d2f8aa9dba96b298c617bcee7e5722b8eeb12ad5ffb3482b9cc443148af6ca66a674bd711e8f0d9500d2db1cbbf8a1a0f680e37fd34941b00464cc8595e8240894c3f4cb0bd33178e5de5d769ca7b3ee1fd5d438da2056619b8bbe8c7c68859b9f6d17addc83bc6cda9edee550804975b5eddecbb0272c9d6c7ba8320278bc51b417214bb24cc78ca11c5a51ec0251f2a8e1958f8130f0ba70bcdf8dbe7ae8385d1651fbf048cbc8041923c3fc60d00c6fc1f09d2a3fa344953633e6a", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 2.789248435s ago: executing program 2 (id=4043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) setregid(0xffffffffffffffff, 0x0) 2.697493496s ago: executing program 2 (id=4044): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820529009dbb0000000109022400011b00001009040000022a3e740009058bff7f0000100109050b362f"], 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000009c0)={0x0, 0xae5, 0x8, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000dc0)={r4, 0xbd}) fchownat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0) 2.143524595s ago: executing program 0 (id=4045): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x348}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000ffff0c63b7030000000000008500000083000000bf09000000000000550901000000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='ext4_writepages\x00', r1, 0x0, 0x7}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r7, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 2.059413337s ago: executing program 4 (id=4046): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702500000000fe1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.058985576s ago: executing program 4 (id=4047): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)="c2c1000000000000073dfb", 0xb}, {&(0x7f0000000100)="974111", 0x3}, {0x0}], 0x3) 1.987230928s ago: executing program 4 (id=4048): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 976.800644ms ago: executing program 4 (id=4049): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x64000881) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) 655.992159ms ago: executing program 0 (id=4050): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x200000, &(0x7f00000003c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x3, 0xb}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd(0xff7ffff7) r7 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000280)={r6, 0x2, 0x2, r7}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r7, 0x1, 0x2, r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={r6, 0x5, 0x3, r6}) r8 = open(0x0, 0x0, 0x0) r9 = open(0x0, 0x0, 0x0) flock(r9, 0x6) close(r8) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:zero_device_t:s0\x00', 0x23) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 609.31207ms ago: executing program 4 (id=4051): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x348}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000ffff0c63b7030000000000008500000083000000bf09000000000000550901000000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='ext4_writepages\x00', r1, 0x0, 0x7}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r5, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 579.443741ms ago: executing program 1 (id=4052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 576.41313ms ago: executing program 3 (id=4053): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000008400000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) 215.054496ms ago: executing program 4 (id=4054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) io_setup(0x200, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 106.019368ms ago: executing program 2 (id=4055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 75.482908ms ago: executing program 1 (id=4056): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0xb) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') request_key(&(0x7f0000000380)='keyring\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\bD0\x00'/18, 0x0) lseek(r6, 0x10001, 0x0) 263.269µs ago: executing program 2 (id=4057): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 2 (id=4058): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) kernel console output (not intermixed with test programs): exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8adb8d169 code=0x7ffc0000 [ 508.213938][ T28] audit: type=1326 audit(1743719615.429:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.0.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8adb8d169 code=0x7ffc0000 [ 508.250533][ T28] audit: type=1326 audit(1743719615.429:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.0.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fc8adb8d169 code=0x7ffc0000 [ 508.274937][ T28] audit: type=1326 audit(1743719615.429:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.0.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8adb8d169 code=0x7ffc0000 [ 508.298618][ T28] audit: type=1400 audit(1743719615.549:667): avc: denied { map } for pid=9331 comm="syz.2.2840" path="socket:[51238]" dev="sockfs" ino=51238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 508.417863][ T1067] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 508.617914][ T1067] usb 2-1: Using ep0 maxpacket: 16 [ 508.629095][ T1067] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.645575][ T1067] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.656551][ T1067] usb 2-1: config 0 interface 0 has no altsetting 0 [ 508.658280][ T9335] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 508.663416][ T1067] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 508.680266][ T1067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.688812][ T9335] kvm: pic: non byte read [ 508.693529][ T9335] kvm: pic: level sensitive irq not supported [ 508.693594][ T9335] kvm: pic: non byte read [ 508.701934][ T1067] usb 2-1: config 0 descriptor?? [ 508.731879][ T9350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.947985][ T302] usb 2-1: USB disconnect, device number 31 [ 510.401035][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2855'. [ 510.410358][ T9375] device veth0 left promiscuous mode [ 510.415803][ T9375] bridge0: port 3(veth0) entered disabled state [ 510.422652][ T9375] device bridge_slave_1 left promiscuous mode [ 510.428765][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.436290][ T9375] device bridge_slave_0 left promiscuous mode [ 510.442396][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.764611][ T9387] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 510.765443][ T9394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.781893][ T9387] kvm: pic: non byte read [ 510.793021][ T9387] kvm: pic: level sensitive irq not supported [ 510.793086][ T9387] kvm: pic: non byte read [ 511.907859][ T1385] Bluetooth: hci0: command 0x1003 tx timeout [ 511.913940][ T5206] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 512.021392][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'. [ 512.655526][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 512.665853][ T9420] device bridge_slave_1 left promiscuous mode [ 512.674706][ T9420] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.684349][ T9420] device bridge_slave_0 left promiscuous mode [ 512.692984][ T9420] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.822422][ T9421] bridge0: port 3(veth0) entered blocking state [ 512.828727][ T9421] bridge0: port 3(veth0) entered disabled state [ 512.837763][ T9421] device veth0 entered promiscuous mode [ 512.843687][ T9421] bridge0: port 3(veth0) entered blocking state [ 512.849806][ T9421] bridge0: port 3(veth0) entered forwarding state [ 513.301562][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2872'. [ 513.940543][ T9457] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 513.977264][ T9457] kvm: pic: non byte read [ 513.988584][ T9457] kvm: pic: level sensitive irq not supported [ 513.988659][ T9457] kvm: pic: non byte read [ 514.055253][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2880'. [ 514.692883][ T10] tipc: Disabling bearer [ 514.698216][ T10] tipc: Left network mode [ 514.827691][ T9448] netlink: 'syz.0.2877': attribute type 16 has an invalid length. [ 514.835604][ T9448] netlink: 'syz.0.2877': attribute type 17 has an invalid length. [ 514.893647][ T9448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 514.901740][ T9448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 515.114462][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 515.122842][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 515.131807][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 515.140420][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 515.151252][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 515.168264][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 515.178681][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 515.192167][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 515.201537][ T9494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.221676][ T9468] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.229748][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.237277][ T9468] device bridge_slave_0 entered promiscuous mode [ 515.244947][ T9468] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.264138][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.274065][ T9468] device bridge_slave_1 entered promiscuous mode [ 515.654049][ T9468] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.661160][ T9468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.668434][ T9468] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.675303][ T9468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.684886][ T2269] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.692838][ T2269] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.777432][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 515.801363][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 515.825563][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 515.834634][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 515.847220][ T2269] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.854250][ T2269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.867346][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 515.876503][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 515.886287][ T2269] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.893414][ T2269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.911967][ T10] device veth1_macvtap left promiscuous mode [ 515.918505][ T10] device veth0_vlan left promiscuous mode [ 516.407828][ T302] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 516.423678][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 516.438125][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 516.480063][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 516.500153][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 516.596858][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 516.605142][ T302] usb 3-1: Using ep0 maxpacket: 16 [ 516.611640][ T302] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.627556][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 516.640794][ T9468] device veth0_vlan entered promiscuous mode [ 516.773812][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 516.803781][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.900935][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.908345][ T302] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.924686][ T302] usb 3-1: config 0 interface 0 has no altsetting 0 [ 516.931446][ T302] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 516.935213][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.940502][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.956696][ T302] usb 3-1: config 0 descriptor?? [ 516.970218][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 516.982866][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 516.992969][ T9468] device veth1_macvtap entered promiscuous mode [ 517.013871][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 517.024717][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 517.037347][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 517.058333][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 517.074109][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 517.115481][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2884'. [ 517.144977][ T9537] device bridge_slave_1 left promiscuous mode [ 517.165221][ T9537] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.246230][ T9537] device bridge_slave_0 left promiscuous mode [ 517.252721][ T9537] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.319752][ T9540] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 517.401955][ T302] usbhid 3-1:0.0: can't add hid device: -71 [ 517.413510][ T302] usbhid: probe of 3-1:0.0 failed with error -71 [ 517.435563][ T302] usb 3-1: USB disconnect, device number 26 [ 518.230623][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 518.230654][ T28] audit: type=1400 audit(1743719625.499:670): avc: denied { open } for pid=9559 comm="syz.0.2916" path="/26/file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 518.437040][ T9560] block device autoloading is deprecated and will be removed. [ 518.546732][ T28] audit: type=1400 audit(1743719625.819:671): avc: denied { read write } for pid=9178 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 518.703821][ T28] audit: type=1400 audit(1743719625.849:672): avc: denied { open } for pid=9178 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 518.742078][ T28] audit: type=1400 audit(1743719625.849:673): avc: denied { ioctl } for pid=9178 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1012 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 519.368462][ T9586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2925'. [ 519.653750][ T28] audit: type=1400 audit(1743719626.929:674): avc: denied { setopt } for pid=9594 comm="syz.2.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 520.347841][ T302] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 521.097744][ T302] usb 5-1: Using ep0 maxpacket: 16 [ 521.104036][ T302] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.122468][ T302] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.138798][ T302] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.146044][ T302] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 521.161014][ T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.170565][ T302] usb 5-1: config 0 descriptor?? [ 521.299590][ T9629] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 521.323787][ T9629] kvm: pic: non byte read [ 521.335767][ T9629] kvm: pic: level sensitive irq not supported [ 521.336278][ T9629] kvm: pic: non byte read [ 521.583912][ T302] usbhid 5-1:0.0: can't add hid device: -71 [ 521.592802][ T302] usbhid: probe of 5-1:0.0 failed with error -71 [ 521.606144][ T302] usb 5-1: USB disconnect, device number 21 [ 522.590539][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2946'. [ 522.830670][ T9649] device bridge_slave_1 left promiscuous mode [ 523.378034][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.385900][ T9649] device bridge_slave_0 left promiscuous mode [ 523.413240][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.610138][ T9658] 9pnet_fd: Insufficient options for proto=fd [ 523.832467][ T9671] loop0: detected capacity change from 0 to 512 [ 523.847014][ T9671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 523.949948][ T9671] EXT4-fs (loop0): orphan cleanup on readonly fs [ 523.958417][ T9671] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 523.968146][ T9671] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 523.977873][ T9671] EXT4-fs error (device loop0): ext4_acquire_dquot:6782: comm syz.0.2951: Failed to acquire dquot type 1 [ 523.991468][ T9671] EXT4-fs (loop0): 1 truncate cleaned up [ 523.997349][ T9671] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 524.990289][ T9178] EXT4-fs (loop0): unmounting filesystem. [ 525.137747][ T28] audit: type=1400 audit(1743719632.409:675): avc: denied { unlink } for pid=9688 comm="syz.1.2959" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 525.523495][ T9715] loop0: detected capacity change from 0 to 128 [ 525.598268][ T9715] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 525.608759][ T9715] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.638928][ T28] audit: type=1400 audit(1743719632.909:676): avc: denied { write } for pid=9702 comm="syz.0.2967" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 525.660912][ T28] audit: type=1400 audit(1743719632.909:677): avc: denied { add_name } for pid=9702 comm="syz.0.2967" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 525.707030][ T28] audit: type=1400 audit(1743719632.909:678): avc: denied { create } for pid=9702 comm="syz.0.2967" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 525.751494][ T28] audit: type=1400 audit(1743719632.919:679): avc: denied { write open } for pid=9702 comm="syz.0.2967" path="/37/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 525.798999][ T28] audit: type=1400 audit(1743719632.919:680): avc: denied { link } for pid=9702 comm="syz.0.2967" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 525.843597][ T28] audit: type=1400 audit(1743719632.919:681): avc: denied { create } for pid=9702 comm="syz.0.2967" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 526.283519][ T9727] syz.2.2973[9727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.283601][ T9727] syz.2.2973[9727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.295430][ T9178] EXT4-fs (loop0): unmounting filesystem. [ 526.422426][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2974'. [ 526.468792][ T9735] device veth0 left promiscuous mode [ 526.475417][ T9735] bridge0: port 3(veth0) entered disabled state [ 526.499476][ T9738] overlayfs: missing 'lowerdir' [ 526.648979][ T9735] device bridge_slave_1 left promiscuous mode [ 526.655266][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.670881][ T9735] device bridge_slave_0 left promiscuous mode [ 526.686466][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.831706][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.838841][ T9741] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.846130][ T9741] device bridge_slave_0 entered promiscuous mode [ 526.853539][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.860755][ T9741] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.868340][ T9741] device bridge_slave_1 entered promiscuous mode [ 526.932517][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.939428][ T9741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.946958][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.953845][ T9741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.980978][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 526.989222][ T2269] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.996601][ T2269] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.013621][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 527.022236][ T2269] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.029114][ T2269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.039190][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 527.047444][ T2269] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.054458][ T2269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.071407][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 527.079519][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 527.099376][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 527.111630][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 527.119806][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 527.127621][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 527.137545][ T9741] device veth0_vlan entered promiscuous mode [ 527.153074][ T9741] device veth1_macvtap entered promiscuous mode [ 527.170359][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 527.179177][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.188201][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 527.549814][ T43] device veth1_macvtap left promiscuous mode [ 527.556116][ T43] device veth0_vlan left promiscuous mode [ 527.691560][ T9771] loop0: detected capacity change from 0 to 256 [ 527.699315][ T28] audit: type=1400 audit(1743719634.979:682): avc: denied { mount } for pid=9770 comm="syz.0.2987" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 527.708041][ T302] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 528.008445][ T302] usb 3-1: Using ep0 maxpacket: 32 [ 528.396148][ T9778] syz.1.2990[9778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.397429][ T9778] syz.1.2990[9778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.848686][ T302] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.892801][ T302] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 528.902214][ T302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.910205][ T302] usb 3-1: Product: syz [ 528.914191][ T302] usb 3-1: Manufacturer: syz [ 528.918976][ T302] usb 3-1: SerialNumber: syz [ 528.924605][ T302] usb 3-1: config 0 descriptor?? [ 528.981932][ T955] Bluetooth: hci0: Frame reassembly failed (-84) [ 528.989711][ T302] ums-sddr09 3-1:0.0: USB Mass Storage device detected [ 529.297454][ T326] usb 3-1: USB disconnect, device number 27 [ 529.930373][ T9813] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 529.940858][ T9813] kvm: pic: non byte read [ 529.945308][ T9813] kvm: pic: level sensitive irq not supported [ 529.945387][ T9813] kvm: pic: non byte read [ 531.017915][ T5206] Bluetooth: hci0: command 0x1003 tx timeout [ 531.023828][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 532.244071][ T9860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.097882][ T5206] Bluetooth: hci0: command 0x1003 tx timeout [ 533.104549][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 533.287968][ T9870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3019'. [ 533.593224][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 533.593242][ T28] audit: type=1400 audit(1743719640.869:684): avc: denied { remount } for pid=9872 comm="syz.2.3021" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 533.628346][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3025'. [ 533.852575][ T9897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.650370][ T28] audit: type=1400 audit(1743719642.929:685): avc: denied { append } for pid=9917 comm="syz.4.3038" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 535.791000][ T9922] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 535.952743][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 536.255057][ T9938] syz.2.3045[9938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 536.255208][ T9938] syz.2.3045[9938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.794125][ T9961] netlink: 64022 bytes leftover after parsing attributes in process `syz.4.3052'. [ 538.085201][ T9963] syz.2.3051[9963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.085296][ T9963] syz.2.3051[9963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.737563][ T9974] syz.1.3056[9974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.027016][ T9974] syz.1.3056[9974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.147043][ T9993] syz.3.3062[9993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.158591][ T9993] syz.3.3062[9993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.982858][T10016] process 'syz.4.3070' launched './file0' with NULL argv: empty string added [ 542.003866][ T28] audit: type=1400 audit(1743719649.279:686): avc: denied { execute_no_trans } for pid=10015 comm="syz.4.3070" path="/38/file0" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 542.072016][T10024] syz.1.3073[10024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.072101][T10024] syz.1.3073[10024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.084951][T10034] overlayfs: failed to resolve './file2': -2 [ 544.334957][T10047] syz.1.3075[10047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.335541][T10047] syz.1.3075[10047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 546.980467][T10091] loop0: detected capacity change from 0 to 256 [ 551.020017][T10127] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 551.358579][T10127] kvm: pic: non byte read [ 551.368161][T10127] kvm: pic: level sensitive irq not supported [ 551.368241][T10127] kvm: pic: non byte read [ 551.501586][T10142] 9pnet_fd: Insufficient options for proto=fd [ 552.806783][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3109'. [ 557.043935][T10183] 9pnet_fd: Insufficient options for proto=fd [ 559.076791][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 559.087869][ T2227] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 559.427975][ T2227] usb 3-1: device descriptor read/64, error -71 [ 559.863558][T10231] overlayfs: failed to resolve './file1': -2 [ 559.927715][ T2227] usb 3-1: device descriptor read/64, error -71 [ 560.091504][T10235] syz.1.3136[10235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.091588][T10235] syz.1.3136[10235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.287749][ T2227] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 560.517762][ T2227] usb 3-1: device descriptor read/64, error -71 [ 560.845592][T10242] syz.0.3138[10242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.845731][T10242] syz.0.3138[10242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.907808][ T2227] usb 3-1: device descriptor read/64, error -71 [ 561.083797][ T2227] usb usb3-port1: attempt power cycle [ 561.095913][T10254] overlayfs: failed to resolve './file0': -2 [ 561.717685][ T9980] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 561.898888][ T9980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.917687][ T9980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.938125][ T9980] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 561.947284][ T9980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 561.977706][ T9980] usb 5-1: SerialNumber: syz [ 562.189910][ T9980] usb 5-1: 0:2 : does not exist [ 562.194751][ T28] audit: type=1400 audit(1743719669.469:687): avc: denied { mounton } for pid=10270 comm="syz.2.3148" path="/34/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 562.222793][ T9980] usb 5-1: USB disconnect, device number 22 [ 564.535307][T10305] 9pnet_fd: Insufficient options for proto=fd [ 564.601289][T10306] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 564.791784][T10307] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.810393][T10307] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.828503][T10307] device bridge_slave_0 entered promiscuous mode [ 564.835441][T10307] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.842504][T10307] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.850025][T10307] device bridge_slave_1 entered promiscuous mode [ 565.416988][T10307] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.424053][T10307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.431257][T10307] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.438133][T10307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.448633][T10339] 9pnet_fd: Insufficient options for proto=fd [ 565.480509][ T10] device veth1_macvtap left promiscuous mode [ 565.486476][ T10] device veth0_vlan left promiscuous mode [ 565.789615][T10359] syz.0.3178[10359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 565.789725][T10359] syz.0.3178[10359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 565.823126][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 565.846983][ T955] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.855828][ T955] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.877499][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 565.888552][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 565.897396][ T955] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.904312][ T955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.920000][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 565.933544][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 565.934867][T10364] fuse: Unknown parameter 'group_id00000000000000000000' [ 565.942254][ T955] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.955222][ T955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.956152][T10364] block device autoloading is deprecated and will be removed. [ 565.978170][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 565.986645][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 565.994865][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 566.003569][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 566.054309][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 566.063260][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 566.079172][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 566.088086][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 567.920680][T10307] device veth0_vlan entered promiscuous mode [ 567.934720][ T28] audit: type=1400 audit(1743719675.209:688): avc: denied { ioctl } for pid=10373 comm="syz.4.3184" path="socket:[55146]" dev="sockfs" ino=55146 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 567.964138][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 567.974023][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 568.080531][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 568.167357][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 568.178017][T10307] device veth1_macvtap entered promiscuous mode [ 568.207215][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 568.221633][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 568.263127][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 568.274801][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 568.283377][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 568.295818][T10395] syz.2.3189[10395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 568.295917][T10395] syz.2.3189[10395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 568.323930][T10401] fuse: Bad value for 'user_id' [ 568.351054][T10401] block device autoloading is deprecated and will be removed. [ 569.363152][T10416] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.370854][T10416] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.378717][T10416] device bridge_slave_0 entered promiscuous mode [ 569.386397][ T10] tipc: Disabling bearer [ 569.392115][ T10] tipc: Left network mode [ 569.396830][T10416] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.404380][T10416] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.412087][T10416] device bridge_slave_1 entered promiscuous mode [ 569.489349][T10416] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.496273][T10416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.503561][T10416] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.510439][T10416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.544441][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 569.552998][ T2269] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.561099][ T2269] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.582830][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 569.591308][ T2269] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.598209][ T2269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.606129][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 569.615057][ T2269] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.622026][ T2269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.630452][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 569.661006][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 569.696311][T10416] device veth0_vlan entered promiscuous mode [ 569.725688][T10416] device veth1_macvtap entered promiscuous mode [ 569.743349][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 569.753763][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 569.762681][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 569.770910][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 569.778577][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 569.786788][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 569.911454][ T2269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 570.341435][T10441] device wg2 entered promiscuous mode [ 570.470625][T10447] fuse: Bad value for 'user_id' [ 572.881732][T10497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.939670][T10499] bridge0: port 3(veth0) entered blocking state [ 572.945920][T10499] bridge0: port 3(veth0) entered disabled state [ 572.955398][T10499] device veth0 entered promiscuous mode [ 572.961455][T10499] bridge0: port 3(veth0) entered blocking state [ 572.967524][T10499] bridge0: port 3(veth0) entered forwarding state [ 574.980776][T10529] fuse: Bad value for 'fd' [ 574.993031][T10529] block device autoloading is deprecated and will be removed. [ 575.069103][T10533] bridge0: port 3(veth0) entered blocking state [ 575.075254][T10533] bridge0: port 3(veth0) entered disabled state [ 575.100879][T10533] device veth0 entered promiscuous mode [ 575.108065][T10533] bridge0: port 3(veth0) entered blocking state [ 575.114223][T10533] bridge0: port 3(veth0) entered forwarding state [ 575.308824][T10534] loop2: detected capacity change from 0 to 512 [ 575.697902][T10534] EXT4-fs (loop2): 1 orphan inode deleted [ 575.703583][T10534] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 575.714420][T10534] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.817701][ T28] audit: type=1400 audit(1743719683.019:689): avc: denied { read } for pid=10522 comm="syz.2.3227" path=2F35302F66696C65312F2E02 dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 575.988315][T10542] binder: BINDER_SET_CONTEXT_MGR already set [ 575.994149][T10542] binder: 10541:10542 ioctl 4018620d 200000000040 returned -16 [ 576.027797][ T28] audit: type=1400 audit(1743719683.029:690): avc: denied { append } for pid=10522 comm="syz.2.3227" path="/50/file1/memory.events.local" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 576.271694][ T9741] EXT4-fs (loop2): unmounting filesystem. [ 576.382128][T10553] capability: warning: `syz.1.3237' uses deprecated v2 capabilities in a way that may be insecure [ 576.852151][T10564] loop2: detected capacity change from 0 to 512 [ 576.915746][T10564] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 577.221275][T10564] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.266101][T10573] xt_hashlimit: size too large, truncated to 1048576 [ 577.294554][T10575] fuse: Bad value for 'fd' [ 577.310956][ T9741] EXT4-fs (loop2): unmounting filesystem. [ 577.318794][ T28] audit: type=1400 audit(1743719684.599:691): avc: denied { connect } for pid=10572 comm="syz.1.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 577.421638][T10582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.444929][ T28] audit: type=1400 audit(1743719684.619:692): avc: denied { connect } for pid=10572 comm="syz.1.3243" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 577.475821][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3248'. [ 578.007799][ T476] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 578.197709][ T476] usb 2-1: Using ep0 maxpacket: 16 [ 578.203953][ T476] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 578.213374][ T476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.222212][ T476] usb 2-1: config 0 descriptor?? [ 578.629188][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'. [ 578.636057][ T476] koneplus 0003:1E7D:2E22.0004: item fetching failed at offset 1/5 [ 578.655390][ T476] koneplus 0003:1E7D:2E22.0004: parse failed [ 578.661781][ T476] koneplus: probe of 0003:1E7D:2E22.0004 failed with error -22 [ 578.805767][T10631] syz.0.3265[10631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.805883][T10631] syz.0.3265[10631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.910737][ T476] usb 2-1: USB disconnect, device number 32 [ 579.076016][T10634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.051621][T10650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.083266][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3272'. [ 580.215574][T10664] syz.2.3276[10664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 580.215676][T10664] syz.2.3276[10664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.647686][ T326] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 582.666485][ T476] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 582.847677][ T476] usb 3-1: Using ep0 maxpacket: 16 [ 582.853858][ T326] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 582.863312][ T476] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.877097][ T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.891924][T10702] overlayfs: failed to resolve './file1': -2 [ 582.893682][ T476] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 582.912269][ T476] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.926007][ T326] usb 2-1: config 0 descriptor?? [ 582.934999][ T476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.951597][ T476] usb 3-1: Product: syz [ 582.955717][ T476] usb 3-1: Manufacturer: syz [ 582.960804][ T476] usb 3-1: SerialNumber: syz [ 583.179065][T10684] netlink: 'syz.2.3281': attribute type 27 has an invalid length. [ 583.235390][T10684] bridge0: port 3(veth0) entered disabled state [ 583.241582][T10684] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.249189][T10684] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.273729][T10708] syz.3.3290[10708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 583.273836][T10708] syz.3.3290[10708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 583.345587][T10705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 583.366538][ T326] hid-generic 0003:04F3:0755.0005: item fetching failed at offset 3/5 [ 583.376148][ T326] hid-generic: probe of 0003:04F3:0755.0005 failed with error -22 [ 583.402221][T10705] device veth0_vlan left promiscuous mode [ 583.408298][T10705] device veth0_vlan entered promiscuous mode [ 583.415666][T10705] device veth1_macvtap left promiscuous mode [ 583.422934][T10705] device veth1_macvtap entered promiscuous mode [ 583.433404][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 583.447902][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 583.458602][ T43] bridge0: port 3(veth0) entered blocking state [ 583.464713][ T43] bridge0: port 3(veth0) entered forwarding state [ 583.472435][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 583.487968][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.494965][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.502550][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 583.511870][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 583.520340][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.521655][T10716] 9pnet_fd: Insufficient options for proto=fd [ 583.527229][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.541463][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 583.549929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 583.595857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 583.618852][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 583.627293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 583.654385][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 583.669381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 583.683899][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 583.854531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 583.971292][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 584.002360][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 584.010733][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 584.018984][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 584.027086][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 584.035418][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 584.043802][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 584.052194][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 584.060894][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 584.069057][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 584.148626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 584.157380][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 584.165343][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 584.167047][ T6] usb 2-1: USB disconnect, device number 33 [ 584.173680][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 584.187834][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 584.196012][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 584.207988][T10714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.208470][ T476] usb 3-1: 0:2 : does not exist [ 584.232653][ T476] usb 3-1: unit 6 not found! [ 584.251437][ T476] usb 3-1: USB disconnect, device number 31 [ 584.259626][T10732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.718363][ T9117] udevd[9117]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 585.920159][T10753] syz.1.3303[10753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 585.920262][T10753] syz.1.3303[10753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 586.080260][T10769] loop0: detected capacity change from 0 to 512 [ 586.091823][T10770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.138080][T10769] EXT4-fs: dax option not supported [ 587.609792][ T9117] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 587.656010][T10789] syz.2.3316[10789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 587.656132][T10789] syz.2.3316[10789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 587.711198][T10798] 9pnet_fd: Insufficient options for proto=fd [ 588.483951][T10822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.169312][T10836] syz.1.3333[10836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 589.169418][T10836] syz.1.3333[10836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 589.725189][T10860] loop0: detected capacity change from 0 to 2048 [ 589.744253][T10860] EXT4-fs: Ignoring removed mblk_io_submit option [ 589.750565][T10860] EXT4-fs: dax option not supported [ 590.020246][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3339'. [ 590.263865][T10860] loop0: detected capacity change from 0 to 256 [ 590.270371][T10860] exfat: Deprecated parameter 'namecase' [ 590.317755][T10860] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 590.548094][T10875] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 590.930487][T10886] syz.0.3348[10886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 590.930594][T10886] syz.0.3348[10886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 590.987191][T10890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 591.337752][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3355'. [ 592.152112][T10914] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 592.152112][ T28] audit: type=1400 audit(1743719699.429:693): avc: denied { remount } for pid=10913 comm="syz.1.3359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 592.252854][T10915] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3356'. [ 592.488879][T10918] syz.0.3361[10918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 592.488970][T10918] syz.0.3361[10918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 592.528325][ T28] audit: type=1326 audit(1743719699.809:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.2.3363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f960fd8d169 code=0x0 [ 592.531107][T10926] futex_wake_op: syz.1.3362 tries to shift op by -1; fix this program [ 592.652599][T10938] fuse: Invalid rootmode [ 592.712590][T10941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.762986][T10961] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3375'. [ 594.935806][T10966] syz.1.3377[10966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.935906][T10966] syz.1.3377[10966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.155128][T10985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.597924][T10956] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 595.741338][ T529] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 595.752267][ T1609] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 595.777802][T10956] usb 2-1: device descriptor read/64, error -71 [ 595.937704][ T1609] usb 3-1: Using ep0 maxpacket: 16 [ 595.943983][ T529] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 595.954886][ T1609] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.965038][ T529] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.974765][ T1609] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 595.987531][ T529] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 595.996784][ T1609] usb 3-1: config 0 interface 0 has no altsetting 0 [ 596.003460][ T529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.011557][ T1609] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 596.021499][ T1609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.030108][ T529] hub 5-1:4.0: USB hub found [ 596.035173][ T1609] usb 3-1: config 0 descriptor?? [ 596.041086][ T1609] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 596.068606][T10956] usb 2-1: device descriptor read/64, error -71 [ 596.116105][ T28] audit: type=1400 audit(1743719703.389:695): avc: denied { map } for pid=10992 comm="syz.3.3386" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 596.234006][ T529] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 596.387736][T10956] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 596.477358][ T529] usb 5-1: USB disconnect, device number 23 [ 596.557738][T10956] usb 2-1: device descriptor read/64, error -71 [ 596.858434][T10956] usb 2-1: device descriptor read/64, error -71 [ 596.977511][T11002] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3388'. [ 597.055269][T10956] usb usb2-port1: attempt power cycle [ 597.791285][ T529] usb 3-1: USB disconnect, device number 32 [ 599.071323][T10956] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 599.644385][T10956] usb 2-1: device descriptor read/8, error -71 [ 599.674923][T11030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.873986][T10956] usb 2-1: device descriptor read/8, error -71 [ 600.983931][T11049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3402'. [ 602.030640][T11071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 602.167692][ T529] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 602.358832][ T529] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.377437][ T529] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 602.414328][ T529] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 602.440095][ T529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 602.460990][ T529] usb 3-1: SerialNumber: syz [ 602.901443][ T529] usb 3-1: cannot find UAC_HEADER [ 602.961350][ T529] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 603.051935][ T529] usb 3-1: USB disconnect, device number 33 [ 603.089705][ T9117] udevd[9117]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 603.643175][T11083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.731484][T11087] loop0: detected capacity change from 0 to 512 [ 603.758034][T11087] EXT4-fs: dax option not supported [ 606.667844][T11127] loop2: detected capacity change from 0 to 4096 [ 606.719853][T11127] EXT4-fs (loop2): Test dummy encryption mode enabled [ 606.902088][ T28] audit: type=1400 audit(1743719714.179:696): avc: denied { setopt } for pid=11130 comm="syz.3.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 606.940570][T11127] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 607.208024][ T28] audit: type=1404 audit(1743719714.299:697): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 607.237679][ T28] audit: type=1404 audit(1743719714.319:698): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 607.281484][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3429'. [ 607.301810][ T28] audit: type=1400 audit(1743719714.449:699): avc: denied { bpf } for pid=11130 comm="syz.3.3427" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 607.391273][ T28] audit: type=1400 audit(1743719714.559:700): avc: denied { prog_load } for pid=11138 comm="syz.3.3429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 607.476153][ T28] audit: type=1400 audit(1743719714.559:701): avc: denied { perfmon } for pid=11138 comm="syz.3.3429" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 607.560581][ T28] audit: type=1400 audit(1743719714.559:702): avc: denied { prog_run } for pid=11138 comm="syz.3.3429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 607.562315][ T9741] EXT4-fs (loop2): unmounting filesystem. [ 607.580246][ T28] audit: type=1400 audit(1743719714.629:703): avc: denied { map_create } for pid=11132 comm="syz.0.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 607.604904][ T28] audit: type=1400 audit(1743719714.629:704): avc: denied { map_read map_write } for pid=11132 comm="syz.0.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 607.624932][ T28] audit: type=1400 audit(1743719714.669:705): avc: denied { create } for pid=11116 comm="syz.1.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 607.645716][ T6] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 607.680502][T11148] loop2: detected capacity change from 0 to 512 [ 607.703219][T11148] EXT4-fs: dax option not supported [ 607.848737][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.229595][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.255667][ T6] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 608.264657][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 608.281210][ T6] usb 5-1: SerialNumber: syz [ 608.831335][ T6] usb 5-1: cannot find UAC_HEADER [ 608.840842][ T6] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 608.851548][ T6] usb 5-1: USB disconnect, device number 24 [ 608.869417][T11180] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 609.059310][ T9117] udevd[9117]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 609.217941][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3454'. [ 609.789159][T11213] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 610.402030][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3465'. [ 610.849403][T11242] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 610.868668][ T2227] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 611.075473][ T2227] usb 3-1: Using ep0 maxpacket: 16 [ 611.082939][ T2227] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.094051][ T2227] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 611.111761][ T2227] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 611.121768][ T2227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.133830][ T2227] usb 3-1: Product: syz [ 611.140825][ T2227] usb 3-1: Manufacturer: syz [ 611.146201][ T2227] usb 3-1: SerialNumber: syz [ 611.585779][ T2227] usb 3-1: 0:2 : does not exist [ 612.154810][ T2227] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 612.367329][ T2227] usb 3-1: USB disconnect, device number 34 [ 612.642932][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 612.643046][ T28] audit: type=1400 audit(1743719719.919:757): avc: denied { write } for pid=11265 comm="syz.1.3476" name="001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 612.728476][ T9117] udevd[9117]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 613.592441][T11288] overlayfs: missing 'lowerdir' [ 613.768276][T11298] overlayfs: failed to resolve './file1': -2 [ 613.829827][ T28] audit: type=1400 audit(1743719721.099:758): avc: denied { create } for pid=11300 comm="syz.3.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 613.877827][T10969] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 614.427185][ T28] audit: type=1400 audit(1743719721.669:759): avc: denied { read write } for pid=11278 comm="syz.4.3482" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 614.768194][ T28] audit: type=1400 audit(1743719721.679:760): avc: denied { open } for pid=11278 comm="syz.4.3482" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 615.247158][ T28] audit: type=1400 audit(1743719722.519:761): avc: denied { create } for pid=11318 comm="syz.3.3494" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 615.307665][ T28] audit: type=1400 audit(1743719722.519:762): avc: denied { ioctl } for pid=11318 comm="syz.3.3494" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=60314 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 615.369895][ T28] audit: type=1400 audit(1743719722.529:763): avc: denied { read } for pid=11318 comm="syz.3.3494" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=60314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 615.402107][T10969] usb 2-1: Using ep0 maxpacket: 16 [ 615.411038][T11325] overlayfs: missing 'lowerdir' [ 615.417347][T10969] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 615.434668][T11327] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 617.275670][T10969] usb 2-1: config 0 interface 0 has no altsetting 0 [ 617.282304][T10969] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 617.291242][T10969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.299728][T10969] usb 2-1: config 0 descriptor?? [ 617.306473][T10969] usb 2-1: can't set config #0, error -71 [ 617.312962][T10969] usb 2-1: USB disconnect, device number 38 [ 617.598067][ T28] audit: type=1400 audit(1743719724.869:764): avc: denied { create } for pid=11354 comm="syz.1.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 617.787519][T11364] overlayfs: missing 'lowerdir' [ 617.839563][ T28] audit: type=1400 audit(1743719724.869:765): avc: denied { bind } for pid=11354 comm="syz.1.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 617.989918][ T28] audit: type=1400 audit(1743719724.869:766): avc: denied { setopt } for pid=11354 comm="syz.1.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 618.243680][ T28] audit: type=1400 audit(1743719725.519:767): avc: denied { create } for pid=11370 comm="syz.3.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 618.322907][ T28] audit: type=1400 audit(1743719725.549:768): avc: denied { create } for pid=11370 comm="syz.3.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 618.428203][T11372] overlayfs: failed to resolve './file1': -2 [ 618.480660][T11374] loop2: detected capacity change from 0 to 2048 [ 618.525259][T11374] EXT4-fs: Ignoring removed mblk_io_submit option [ 618.564377][T11374] EXT4-fs: dax option not supported [ 618.632371][T11374] loop2: detected capacity change from 0 to 256 [ 618.647954][T11374] exfat: Deprecated parameter 'namecase' [ 618.661303][T11374] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 618.837710][ T2227] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 618.942574][ T28] audit: type=1400 audit(1743719726.219:769): avc: denied { create } for pid=11373 comm="syz.2.3512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 619.143498][ T2227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.153830][ T2227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.164214][ T2227] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 619.168301][ T28] audit: type=1400 audit(1743719726.449:770): avc: denied { create } for pid=11399 comm="syz.0.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 619.173593][ T2227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 619.195732][ T28] audit: type=1400 audit(1743719726.469:771): avc: denied { setopt } for pid=11399 comm="syz.0.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 619.215723][ T2227] usb 4-1: SerialNumber: syz [ 619.374761][ T28] audit: type=1400 audit(1743719726.469:772): avc: denied { write } for pid=11399 comm="syz.0.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 619.538388][ T2227] usb 4-1: 0:2 : does not exist [ 619.646816][ T2227] usb 4-1: USB disconnect, device number 22 [ 620.198245][ T9117] udevd[9117]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 620.262911][T11411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.040290][ T28] audit: type=1400 audit(1743719728.309:773): avc: denied { name_bind } for pid=11410 comm="syz.2.3524" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 621.326260][ T28] audit: type=1400 audit(1743719728.309:774): avc: denied { node_bind } for pid=11410 comm="syz.2.3524" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 621.709430][T11449] loop0: detected capacity change from 0 to 512 [ 621.921564][T11449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 621.931814][T11449] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.962392][T11449] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3536: bg 0: block 328: padding at end of block bitmap is not set [ 622.646353][ T9178] EXT4-fs (loop0): unmounting filesystem. [ 623.324280][T11468] 9pnet_fd: Insufficient options for proto=fd [ 623.765945][T11475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.767763][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 623.767782][ T28] audit: type=1400 audit(1743719731.039:782): avc: denied { unlink } for pid=11473 comm="syz.0.3539" name="#2d" dev="tmpfs" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 624.448773][ T28] audit: type=1400 audit(1743719731.729:783): avc: denied { create } for pid=11491 comm="syz.4.3550" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 624.470695][T11492] fuse: Unknown parameter '0x0000000000000003' [ 624.472862][T11494] loop2: detected capacity change from 0 to 512 [ 624.483976][ T28] audit: type=1400 audit(1743719731.749:784): avc: denied { mounton } for pid=11491 comm="syz.4.3550" path="/127/file0" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 624.490291][T11494] EXT4-fs: dax option not supported [ 624.507318][ T28] audit: type=1400 audit(1743719731.749:785): avc: denied { write } for pid=11491 comm="syz.4.3550" name="file0" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 624.534654][ T28] audit: type=1400 audit(1743719731.749:786): avc: denied { open } for pid=11491 comm="syz.4.3550" path="/127/file0" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 624.558149][ T28] audit: type=1400 audit(1743719731.759:787): avc: denied { unlink } for pid=9468 comm="syz-executor" name="file0" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 624.584984][T11499] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 624.594290][T11499] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 624.611601][ T9117] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 624.737064][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3554'. [ 625.890816][T11525] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 626.578371][T11528] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 626.592765][T11530] fuse: Unknown parameter '0x0000000000000003' [ 630.950273][T11530] block device autoloading is deprecated and will be removed. [ 631.147947][T11542] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 631.156755][T11542] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 631.270222][T11549] loop2: detected capacity change from 0 to 512 [ 631.367335][T11549] EXT4-fs: dax option not supported [ 633.254725][T11574] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 633.309038][T11578] fuse: Unknown parameter '0x0000000000000003' [ 633.942662][T11587] loop0: detected capacity change from 0 to 4096 [ 633.950353][ T28] audit: type=1400 audit(1743719740.699:788): avc: denied { name_bind } for pid=11569 comm="syz.3.3575" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 633.974946][T11587] EXT4-fs (loop0): Test dummy encryption mode enabled [ 635.844072][T11587] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 636.276665][T11605] loop4: detected capacity change from 0 to 512 [ 636.650008][ T9178] EXT4-fs (loop0): unmounting filesystem. [ 636.699760][T11605] EXT4-fs: dax option not supported [ 636.830121][T11618] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 637.336836][ T28] audit: type=1400 audit(1743719744.609:789): avc: denied { read } for pid=11630 comm="syz.2.3597" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 637.338098][T11632] loop4: detected capacity change from 0 to 256 [ 637.369362][T11633] binder: 11630:11633 ioctl c0306201 0 returned -14 [ 637.383028][T11632] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 637.389441][ T28] audit: type=1400 audit(1743719744.609:790): avc: denied { open } for pid=11630 comm="syz.2.3597" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 637.420122][ T28] audit: type=1400 audit(1743719744.639:791): avc: denied { ioctl } for pid=11630 comm="syz.2.3597" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 637.446324][ T28] audit: type=1400 audit(1743719744.649:792): avc: denied { set_context_mgr } for pid=11630 comm="syz.2.3597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 637.467831][T11635] fuse: Unknown parameter 'fd0x0000000000000003' [ 637.474689][ T28] audit: type=1400 audit(1743719744.649:793): avc: denied { write } for pid=11630 comm="syz.2.3597" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 637.497566][ T28] audit: type=1400 audit(1743719744.649:794): avc: denied { map } for pid=11630 comm="syz.2.3597" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 637.715051][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3596'. [ 637.723883][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3596'. [ 637.760275][ T28] audit: type=1400 audit(1743719744.929:795): avc: denied { write } for pid=11631 comm="syz.4.3596" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 637.931817][ T28] audit: type=1400 audit(1743719744.929:796): avc: denied { add_name } for pid=11631 comm="syz.4.3596" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 637.979965][ T28] audit: type=1400 audit(1743719744.929:797): avc: denied { associate } for pid=11631 comm="syz.4.3596" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 638.064148][T11661] binder: 11660:11661 ioctl c0306201 0 returned -14 [ 638.094278][T11664] fuse: Unknown parameter 'fd0x0000000000000003' [ 639.040640][ T28] audit: type=1400 audit(1743719746.319:798): avc: denied { read } for pid=11683 comm="syz.4.3616" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 639.065098][ T28] audit: type=1400 audit(1743719746.319:799): avc: denied { open } for pid=11683 comm="syz.4.3616" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 639.127771][T10969] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 639.143695][T11690] binder: 11689:11690 ioctl c0306201 0 returned -14 [ 639.547665][T10969] usb 4-1: Using ep0 maxpacket: 16 [ 639.554109][T10969] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.563978][T10969] usb 4-1: config 0 interface 0 has no altsetting 0 [ 639.570747][T10969] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 639.579764][T10969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.588630][T10969] usb 4-1: config 0 descriptor?? [ 639.594379][T10969] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 641.927535][T11259] usb 4-1: USB disconnect, device number 23 [ 642.531591][T11772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.910731][T11775] loop2: detected capacity change from 0 to 4096 [ 642.953870][T11775] EXT4-fs (loop2): Test dummy encryption mode enabled [ 643.102996][T11775] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 643.197173][T11782] overlayfs: missing 'workdir' [ 643.837001][ T28] audit: type=1400 audit(1743719751.109:800): avc: denied { append } for pid=11786 comm="syz.3.3651" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 645.599049][ T9741] EXT4-fs (loop2): unmounting filesystem. [ 645.654820][T11800] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 645.724317][T11809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.871222][T11813] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 645.979907][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3660'. [ 646.012915][ T28] audit: type=1400 audit(1743719753.289:801): avc: denied { setopt } for pid=11820 comm="syz.2.3663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 646.092092][ T28] audit: type=1404 audit(1743719753.319:802): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 646.135935][ T28] audit: type=1404 audit(1743719753.319:803): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 646.167324][T11827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.179177][ T28] audit: type=1400 audit(1743719753.329:804): avc: denied { read write } for pid=9741 comm="syz-executor" name="loop2" dev="devtmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 646.267664][ T28] audit: type=1400 audit(1743719753.329:805): avc: denied { open } for pid=9741 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 646.300269][ T28] audit: type=1400 audit(1743719753.329:806): avc: denied { ioctl } for pid=9741 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=1038 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 646.326416][ T28] audit: type=1400 audit(1743719753.359:807): avc: denied { bpf } for pid=11808 comm="syz.1.3658" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 646.347839][ T28] audit: type=1400 audit(1743719753.359:808): avc: denied { map_create } for pid=11808 comm="syz.1.3658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 647.211835][ T28] audit: type=1400 audit(1743719753.359:809): avc: denied { map_read map_write } for pid=11808 comm="syz.1.3658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 647.245359][ T28] audit: type=1400 audit(1743719753.359:810): avc: denied { prog_load } for pid=11808 comm="syz.1.3658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 647.277719][ T557] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 647.357014][T11837] loop0: detected capacity change from 0 to 4096 [ 647.397486][T11837] EXT4-fs (loop0): Test dummy encryption mode enabled [ 647.489374][ T557] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.540515][T11837] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 647.600160][ T557] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 647.669511][T11841] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 647.695664][ T557] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 647.757367][ T557] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 647.822104][ T557] usb 4-1: SerialNumber: syz [ 648.179948][ T557] usb 4-1: 0:2 : does not exist [ 648.199522][ T557] usb 4-1: USB disconnect, device number 24 [ 648.373057][T11850] loop2: detected capacity change from 0 to 512 [ 648.396870][T11850] EXT4-fs: dax option not supported [ 648.439630][ T9178] EXT4-fs (loop0): unmounting filesystem. [ 649.618918][T11879] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 649.856263][T11881] loop2: detected capacity change from 0 to 512 [ 650.032731][T11881] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 650.042660][T11881] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.065246][T11881] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3680: bg 0: block 328: padding at end of block bitmap is not set [ 650.208600][T11886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.699912][T11897] loop0: detected capacity change from 0 to 128 [ 650.734238][T11897] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 650.755737][T11897] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.778200][ T9741] EXT4-fs (loop2): unmounting filesystem. [ 651.794018][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 651.794037][ T28] audit: type=1400 audit(1743719759.069:899): avc: denied { unmount } for pid=10416 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 651.897729][ T28] audit: type=1400 audit(1743719759.119:900): avc: denied { create } for pid=11913 comm="syz.1.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 652.007654][ T28] audit: type=1400 audit(1743719759.129:901): avc: denied { create } for pid=11913 comm="syz.1.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 652.135614][ T28] audit: type=1400 audit(1743719759.409:902): avc: denied { read write } for pid=11913 comm="syz.1.3687" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 652.200711][ T28] audit: type=1400 audit(1743719759.439:903): avc: denied { open } for pid=11913 comm="syz.1.3687" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 652.265106][ T28] audit: type=1400 audit(1743719759.439:904): avc: denied { ioctl } for pid=11913 comm="syz.1.3687" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 652.312793][ T28] audit: type=1400 audit(1743719759.449:905): avc: denied { setopt } for pid=11919 comm="syz.4.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 652.353111][ T28] audit: type=1404 audit(1743719759.459:906): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 652.402941][ T28] audit: type=1400 audit(1743719759.459:907): avc: denied { prog_run } for pid=11917 comm="syz.2.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 652.419269][T11926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.425338][ T28] audit: type=1404 audit(1743719759.459:908): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 652.452310][ T326] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 652.547733][T11932] overlayfs: failed to resolve './file1': -2 [ 652.733857][ T326] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.790852][ T326] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 652.858890][ T326] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 652.923854][ T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 652.982235][ T326] usb 2-1: SerialNumber: syz [ 653.210558][ T326] usb 2-1: 0:2 : does not exist [ 653.227106][ T326] usb 2-1: USB disconnect, device number 39 [ 653.415287][T11940] loop2: detected capacity change from 0 to 512 [ 653.479456][T11940] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 653.601403][T11940] EXT4-fs (loop2): orphan cleanup on readonly fs [ 653.609866][T11940] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.3694: Failed to acquire dquot type 1 [ 653.624659][T11940] EXT4-fs (loop2): 1 truncate cleaned up [ 653.631539][T11940] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 654.278137][T11949] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 654.320959][ T9178] EXT4-fs (loop0): unmounting filesystem. [ 654.370895][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3700'. [ 654.508828][T11959] loop0: detected capacity change from 0 to 1024 [ 654.541873][T11959] EXT4-fs (loop0): Test dummy encryption mode enabled [ 654.563555][T11959] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 654.574402][ T9741] EXT4-fs (loop2): unmounting filesystem. [ 655.609372][ T9178] EXT4-fs (loop0): unmounting filesystem. [ 656.909513][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 656.909530][ T28] audit: type=1400 audit(1743719764.189:957): avc: denied { write } for pid=12002 comm="syz.3.3716" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 657.000319][ T28] audit: type=1400 audit(1743719764.279:958): avc: denied { read } for pid=12002 comm="syz.3.3716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 657.071779][T12003] kvm [12002]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8f1 [ 657.085882][T12003] kvm [12002]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x841 [ 657.096145][T12003] kvm [12002]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8e5 [ 657.993285][ T28] audit: type=1400 audit(1743719764.819:959): avc: denied { mounton } for pid=12013 comm="syz.2.3718" path="/140/file0" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 658.049188][ T28] audit: type=1400 audit(1743719764.839:960): avc: denied { mount } for pid=12013 comm="syz.2.3718" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 658.074972][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3720'. [ 658.130529][T12003] kvm [12002]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xd6 [ 658.160610][ T28] audit: type=1400 audit(1743719765.349:961): avc: denied { unmount } for pid=9741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 658.307730][ T28] audit: type=1400 audit(1743719765.429:962): avc: denied { create } for pid=12027 comm="syz.0.3722" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 658.675611][ T28] audit: type=1400 audit(1743719765.429:963): avc: denied { mounton } for pid=12027 comm="syz.0.3722" path="/186/file0" dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 658.717747][ T28] audit: type=1400 audit(1743719765.429:964): avc: denied { create } for pid=12029 comm="syz.4.3723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 658.807685][ T28] audit: type=1400 audit(1743719765.429:965): avc: denied { write } for pid=12029 comm="syz.4.3723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 658.847641][ T28] audit: type=1400 audit(1743719765.439:966): avc: denied { read } for pid=12029 comm="syz.4.3723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 659.843939][T12060] loop0: detected capacity change from 0 to 512 [ 659.954117][T12060] EXT4-fs: dax option not supported [ 660.919396][T12077] loop2: detected capacity change from 0 to 512 [ 660.949781][T12077] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 660.959320][T12077] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.975749][T12077] IPv4: Oversized IP packet from 127.202.26.0 [ 660.991286][ T9741] EXT4-fs (loop2): unmounting filesystem. [ 661.128464][T12094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.996911][T12116] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 663.437042][T12120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.456844][T12122] loop2: detected capacity change from 0 to 512 [ 663.491216][T12122] EXT4-fs: dax option not supported [ 663.739350][T12136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.987018][T12157] loop0: detected capacity change from 0 to 256 [ 665.003321][T12144] syz.3.3756[12144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.003408][T12144] syz.3.3756[12144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.024400][T12157] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb899c415, utbl_chksum : 0xe619d30d) [ 665.337483][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 665.337501][ T28] audit: type=1400 audit(1743719772.609:979): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.460256][ T28] audit: type=1400 audit(1743719772.609:980): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.489396][ T28] audit: type=1400 audit(1743719772.609:981): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 665.541722][ T28] audit: type=1400 audit(1743719772.609:982): avc: denied { add_name } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.631491][T12172] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 665.676474][ T28] audit: type=1400 audit(1743719772.609:983): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 665.879507][ T28] audit: type=1400 audit(1743719772.609:984): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 665.912618][ T28] audit: type=1400 audit(1743719772.649:985): avc: denied { remount } for pid=12138 comm="syz.3.3756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 665.943355][ T28] audit: type=1400 audit(1743719772.669:986): avc: denied { read } for pid=12161 comm="syz.2.3762" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 665.992086][ T28] audit: type=1400 audit(1743719772.669:987): avc: denied { open } for pid=12161 comm="syz.2.3762" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 666.043311][ T28] audit: type=1400 audit(1743719772.669:988): avc: denied { ioctl } for pid=12161 comm="syz.2.3762" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 667.011439][T12192] loop2: detected capacity change from 0 to 4096 [ 667.019964][T12192] EXT4-fs (loop2): Test dummy encryption mode enabled [ 667.171592][T12192] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 668.128155][ T9741] EXT4-fs (loop2): unmounting filesystem. [ 668.132763][T12212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 669.302006][T12222] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 670.791420][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 670.791437][ T28] audit: type=1400 audit(1743719778.069:1043): avc: denied { unlink } for pid=12259 comm="syz.4.3792" name="#3b" dev="tmpfs" ino=985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 670.795010][T12261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.797362][ T28] audit: type=1400 audit(1743719778.069:1044): avc: denied { mount } for pid=12259 comm="syz.4.3792" name="/" dev="overlay" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 671.384997][T12266] loop0: detected capacity change from 0 to 256 [ 671.412431][ T28] audit: type=1400 audit(1743719778.689:1045): avc: denied { mount } for pid=12265 comm="syz.0.3793" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 671.474192][T12268] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 671.646604][ T28] audit: type=1400 audit(1743719778.919:1046): avc: denied { write } for pid=12265 comm="syz.0.3793" name="001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 672.327741][T12281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 673.233835][ T28] audit: type=1326 audit(1743719780.509:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12293 comm="syz.4.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dff8d169 code=0x7ffc0000 [ 673.259990][ T28] audit: type=1326 audit(1743719780.509:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12293 comm="syz.4.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4dff8d169 code=0x7ffc0000 [ 673.284132][ T28] audit: type=1326 audit(1743719780.509:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12293 comm="syz.4.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dff8d169 code=0x7ffc0000 [ 673.326444][ T28] audit: type=1326 audit(1743719780.509:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12293 comm="syz.4.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa4dff8d169 code=0x7ffc0000 [ 673.356733][T12297] syz.0.3802 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 673.384338][ T28] audit: type=1326 audit(1743719780.509:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12293 comm="syz.4.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dff8d169 code=0x7ffc0000 [ 673.409935][ T28] audit: type=1326 audit(1743719780.509:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12293 comm="syz.4.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dff8d169 code=0x7ffc0000 [ 673.662853][T12310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.891236][T12335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 676.006429][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 676.006484][ T28] audit: type=1400 audit(1743719782.399:1056): avc: denied { bind } for pid=12336 comm="syz.0.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 676.157024][ T28] audit: type=1400 audit(1743719783.419:1057): avc: denied { create } for pid=12326 comm="syz.1.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 676.952524][T12353] loop0: detected capacity change from 0 to 512 [ 676.963912][T12353] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 676.979405][T12353] EXT4-fs (loop0): orphan cleanup on readonly fs [ 676.986741][ T28] audit: type=1400 audit(1743719784.119:1058): avc: denied { write } for pid=12347 comm="syz.0.3819" name="event2" dev="devtmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 677.013626][T12353] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 677.023181][T12353] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 677.032451][T12353] EXT4-fs error (device loop0): ext4_acquire_dquot:6782: comm syz.0.3819: Failed to acquire dquot type 1 [ 677.049749][T12353] EXT4-fs (loop0): 1 truncate cleaned up [ 677.055931][T12353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 677.294487][ T28] audit: type=1400 audit(1743719784.119:1059): avc: denied { open } for pid=12347 comm="syz.0.3819" path="/dev/input/event2" dev="devtmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 677.527678][ T28] audit: type=1400 audit(1743719784.219:1060): avc: denied { create } for pid=12347 comm="syz.0.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 678.420300][ T28] audit: type=1400 audit(1743719784.669:1061): avc: denied { read } for pid=12364 comm="syz.3.3823" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 678.420667][ T9178] EXT4-fs (loop0): unmounting filesystem. [ 678.475169][T12375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 678.477823][ T28] audit: type=1400 audit(1743719784.669:1062): avc: denied { open } for pid=12364 comm="syz.3.3823" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 678.704248][ T28] audit: type=1400 audit(1743719785.979:1063): avc: denied { write } for pid=12376 comm="syz.0.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 678.735259][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3826'. [ 680.327642][ T476] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 680.440457][T12411] loop0: detected capacity change from 0 to 512 [ 680.452761][T12411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 680.561570][T12411] EXT4-fs (loop0): orphan cleanup on readonly fs [ 680.570560][T12411] EXT4-fs error (device loop0): ext4_acquire_dquot:6782: comm syz.0.3837: Failed to acquire dquot type 1 [ 680.585171][T12411] EXT4-fs (loop0): 1 truncate cleaned up [ 680.591420][T12411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 682.411760][ T9178] EXT4-fs (loop0): unmounting filesystem. [ 682.548192][ T476] usb 5-1: device descriptor read/all, error -71 [ 682.660803][T12431] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 682.725093][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 682.725122][ T28] audit: type=1400 audit(1743719789.999:1079): avc: denied { read write } for pid=12414 comm="syz.3.3838" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 682.824891][ T28] audit: type=1400 audit(1743719790.039:1080): avc: denied { open } for pid=12414 comm="syz.3.3838" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 683.417190][ T28] audit: type=1400 audit(1743719790.689:1081): avc: denied { create } for pid=12451 comm="syz.0.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 684.949631][ T28] audit: type=1400 audit(1743719792.229:1082): avc: denied { setopt } for pid=12479 comm="syz.0.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 684.980713][ T28] audit: type=1400 audit(1743719792.229:1083): avc: denied { map } for pid=12479 comm="syz.0.3858" path="socket:[64682]" dev="sockfs" ino=64682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 685.005058][ T28] audit: type=1400 audit(1743719792.229:1084): avc: denied { read accept } for pid=12479 comm="syz.0.3858" path="socket:[64682]" dev="sockfs" ino=64682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 685.032697][ T28] audit: type=1400 audit(1743719792.249:1085): avc: denied { mounton } for pid=12463 comm="syz.3.3852" path="/146/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 685.064556][T12485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.910415][ T28] audit: type=1400 audit(1743719793.189:1086): avc: denied { relabelfrom } for pid=12495 comm="syz.1.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 685.930978][ T28] audit: type=1400 audit(1743719793.189:1087): avc: denied { relabelto } for pid=12495 comm="syz.1.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 686.126011][T12515] incfs: Backing dir is not set, filesystem can't be mounted. [ 686.135783][T12515] incfs: mount failed -2 [ 686.149741][ T28] audit: type=1400 audit(1743719793.419:1088): avc: denied { remount } for pid=12514 comm="syz.2.3868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 687.012298][ T529] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 687.677656][ T529] usb 3-1: Using ep0 maxpacket: 16 [ 687.683985][ T529] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.694874][ T529] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 687.705967][ T529] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 687.715723][ T529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.725038][ T529] usb 3-1: Product: syz [ 687.729453][ T529] usb 3-1: Manufacturer: syz [ 687.734029][ T529] usb 3-1: SerialNumber: syz [ 687.944594][ T529] usb 3-1: 0:2 : does not exist [ 688.010511][ T529] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 688.034693][ T529] usb 3-1: USB disconnect, device number 35 [ 688.138850][T12563] overlayfs: failed to resolve './file0': -2 [ 688.248299][ T9117] udevd[9117]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 691.061654][T12629] 9pnet_fd: Insufficient options for proto=fd [ 691.612020][T12637] bridge0: port 3(veth0) entered blocking state [ 691.678023][T12637] bridge0: port 3(veth0) entered disabled state [ 691.765554][T12637] device veth0 entered promiscuous mode [ 691.864437][T12637] bridge0: port 3(veth0) entered blocking state [ 691.870567][T12637] bridge0: port 3(veth0) entered forwarding state [ 692.835995][T12658] overlayfs: failed to resolve './file1': -2 [ 692.981737][T12665] 9pnet_fd: Insufficient options for proto=fd [ 693.085986][T12668] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 694.144813][T12675] loop0: detected capacity change from 0 to 512 [ 694.245836][T12675] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 694.254716][T12675] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 694.506562][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 694.506660][ T28] audit: type=1400 audit(1743719801.769:1096): avc: denied { write } for pid=12674 comm="syz.0.3922" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 694.633075][T12675] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3922: bg 0: block 328: padding at end of block bitmap is not set [ 694.894851][ T28] audit: type=1400 audit(1743719801.779:1097): avc: denied { add_name } for pid=12674 comm="syz.0.3922" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 694.917176][ T9178] EXT4-fs (loop0): unmounting filesystem. [ 694.931372][ T28] audit: type=1400 audit(1743719801.779:1098): avc: denied { create } for pid=12674 comm="syz.0.3922" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 695.022638][T12702] 9pnet_fd: Insufficient options for proto=fd [ 695.690000][T12711] syz.3.3933[12711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 695.690483][T12711] syz.3.3933[12711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 696.721513][ T28] audit: type=1400 audit(1743719803.899:1099): avc: denied { remount } for pid=12706 comm="syz.3.3933" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 697.600399][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3935'. [ 697.719758][ T28] audit: type=1400 audit(1743719804.999:1100): avc: denied { create } for pid=12726 comm="syz.3.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 697.748131][T12728] overlayfs: failed to resolve './file1': -2 [ 698.240434][T12737] 9pnet_fd: Insufficient options for proto=fd [ 698.302661][ T28] audit: type=1404 audit(1743719805.579:1101): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 698.371491][T12744] loop0: detected capacity change from 0 to 1024 [ 698.386955][ T28] audit: type=1404 audit(1743719805.599:1102): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 698.427327][T12744] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 698.428796][ T28] audit: type=1400 audit(1743719805.599:1103): avc: denied { execmem } for pid=12741 comm="syz.2.3944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 698.643998][ T28] audit: type=1400 audit(1743719805.609:1104): avc: denied { read write } for pid=9178 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 698.747499][ T28] audit: type=1400 audit(1743719805.609:1105): avc: denied { open } for pid=9178 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 698.751564][ T9178] EXT4-fs (loop0): unmounting filesystem. [ 699.790670][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 699.790688][ T28] audit: type=1400 audit(1743719807.069:1125): avc: denied { create } for pid=12762 comm="syz.2.3951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 700.238749][ T28] audit: type=1400 audit(1743719807.499:1126): avc: denied { mount } for pid=12773 comm="syz.2.3954" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 700.326891][ T28] audit: type=1404 audit(1743719807.509:1127): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 700.358488][ T28] audit: type=1404 audit(1743719807.509:1128): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 700.391404][ T28] audit: type=1400 audit(1743719807.539:1129): avc: denied { bpf } for pid=12771 comm="syz.3.3953" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 700.434899][ T28] audit: type=1400 audit(1743719807.539:1130): avc: denied { map_create } for pid=12771 comm="syz.3.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 700.474409][ T28] audit: type=1400 audit(1743719807.539:1131): avc: denied { perfmon } for pid=12771 comm="syz.3.3953" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 700.518273][ T28] audit: type=1400 audit(1743719807.539:1132): avc: denied { map_read map_write } for pid=12771 comm="syz.3.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 700.561283][ T28] audit: type=1400 audit(1743719807.539:1133): avc: denied { prog_load } for pid=12771 comm="syz.3.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 700.580906][T11259] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 700.609180][ T28] audit: type=1400 audit(1743719807.539:1134): avc: denied { prog_run } for pid=12771 comm="syz.3.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 700.645418][T12786] loop0: detected capacity change from 0 to 256 [ 700.863252][T11259] usb 2-1: Using ep0 maxpacket: 8 [ 701.201979][T11259] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 701.210399][T11259] usb 2-1: config 179 has no interface number 0 [ 701.216669][T11259] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 701.315949][T11259] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 701.583589][T11259] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 701.615291][T11259] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 701.652079][T11259] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 701.704911][T11259] usb 2-1: config 179 interface 65 has no altsetting 0 [ 701.802013][T11259] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 701.821561][T11259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.269892][T12782] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 702.317665][T11259] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 702.988752][ T529] usb 2-1: USB disconnect, device number 40 [ 702.988870][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 703.002904][ T529] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 704.964955][T12855] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 705.846246][T12858] syz.3.3977[12858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 705.846336][T12858] syz.3.3977[12858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 705.867977][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 705.868000][ T28] audit: type=1400 audit(1743719813.139:1183): avc: denied { remount } for pid=12849 comm="syz.3.3977" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 706.158601][T12861] fuse: Bad value for 'fd' [ 706.163846][ T28] audit: type=1400 audit(1743719813.439:1184): avc: denied { create } for pid=12859 comm="syz.4.3980" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 706.224853][ T28] audit: type=1400 audit(1743719813.459:1185): avc: denied { mounton } for pid=12859 comm="syz.4.3980" path="/207/file0" dev="tmpfs" ino=1171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 706.288491][ T28] audit: type=1400 audit(1743719813.489:1186): avc: denied { mount } for pid=12862 comm="syz.1.3981" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 707.387741][ T28] audit: type=1400 audit(1743719814.649:1187): avc: denied { mounton } for pid=12882 comm="syz.2.3987" path="/192/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 707.818861][T12898] loop2: detected capacity change from 0 to 4096 [ 707.828568][T12898] EXT4-fs (loop2): Test dummy encryption mode enabled [ 707.935363][T12898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 707.983982][ T28] audit: type=1400 audit(1743719815.239:1188): avc: denied { create } for pid=12893 comm="syz.2.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 708.405583][ T28] audit: type=1400 audit(1743719815.239:1189): avc: denied { bind } for pid=12893 comm="syz.2.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 708.554555][ T28] audit: type=1400 audit(1743719815.239:1190): avc: denied { setopt } for pid=12893 comm="syz.2.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 708.607118][ T28] audit: type=1400 audit(1743719815.559:1191): avc: denied { read } for pid=12902 comm="syz.0.3992" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 708.698194][ T28] audit: type=1400 audit(1743719815.579:1192): avc: denied { open } for pid=12902 comm="syz.0.3992" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 708.892264][ T9741] EXT4-fs (loop2): unmounting filesystem. [ 708.984164][T12913] device veth1_macvtap left promiscuous mode [ 708.990683][T12913] device macsec0 entered promiscuous mode [ 709.129617][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4000'. [ 709.136915][T12915] kvm [12914]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 709.148891][T12915] kvm [12914]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 709.158596][T12915] kvm [12914]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 709.228514][ T557] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 709.259183][T12926] 9p: Unknown access argument 18446744073709551615: -34 [ 709.387640][ T557] usb 4-1: device descriptor read/64, error -71 [ 709.691938][T12936] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 709.929368][ T557] usb 4-1: device descriptor read/64, error -71 [ 710.197681][ T557] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 710.230259][T12943] syz.2.4006[12943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 710.230342][T12943] syz.2.4006[12943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 710.402145][ T557] usb 4-1: device descriptor read/64, error -71 [ 711.065177][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 711.065199][ T28] audit: type=1400 audit(1743719817.979:1198): avc: denied { execute } for pid=12944 comm="syz.1.4008" path="/172/cgroup.controllers" dev="tmpfs" ino=967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 711.113479][ T28] audit: type=1400 audit(1743719818.029:1199): avc: denied { name_bind } for pid=12944 comm="syz.1.4008" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 711.135957][ T28] audit: type=1400 audit(1743719818.039:1200): avc: denied { node_bind } for pid=12944 comm="syz.1.4008" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 711.167664][ T557] usb 4-1: device descriptor read/64, error -71 [ 711.389610][ T28] audit: type=1400 audit(1743719818.669:1201): avc: denied { create } for pid=12960 comm="syz.1.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 711.390144][ T557] usb usb4-port1: attempt power cycle [ 711.931642][ T28] audit: type=1400 audit(1743719819.209:1202): avc: denied { create } for pid=12973 comm="syz.0.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 711.947673][ T557] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 712.018717][ T557] usb 4-1: device descriptor read/8, error -71 [ 712.057143][ T28] audit: type=1400 audit(1743719819.329:1203): avc: denied { create } for pid=12979 comm="syz.3.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 712.828168][ T557] usb 4-1: device descriptor read/8, error -71 [ 714.487111][ T28] audit: type=1400 audit(1743719821.759:1204): avc: denied { read } for pid=13010 comm="syz.2.4029" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 714.547550][ T28] audit: type=1400 audit(1743719821.789:1205): avc: denied { open } for pid=13010 comm="syz.2.4029" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 714.867630][ T302] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 715.047618][ T302] usb 2-1: Using ep0 maxpacket: 16 [ 715.054553][ T302] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.068366][ T302] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.078421][ T302] usb 2-1: config 0 interface 0 has no altsetting 0 [ 715.085099][ T302] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 715.094502][ T302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.106791][ T302] usb 2-1: config 0 descriptor?? [ 715.517485][ T302] usbhid 2-1:0.0: can't add hid device: -71 [ 715.523872][ T302] usbhid: probe of 2-1:0.0 failed with error -71 [ 715.534189][ T302] usb 2-1: USB disconnect, device number 41 [ 716.062548][T13033] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 716.554775][ T28] audit: type=1400 audit(1743719823.829:1206): avc: denied { create } for pid=13044 comm="syz.4.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 716.578857][ T28] audit: type=1400 audit(1743719823.849:1207): avc: denied { module_request } for pid=13044 comm="syz.4.4039" kmod="net-pf-43" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 716.901052][ T28] audit: type=1400 audit(1743719824.179:1208): avc: denied { write } for pid=13044 comm="syz.4.4039" name="file0" dev="tmpfs" ino=1229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 716.932432][ T28] audit: type=1400 audit(1743719824.199:1209): avc: denied { open } for pid=13044 comm="syz.4.4039" path="/218/file0" dev="tmpfs" ino=1229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 716.956700][ T28] audit: type=1400 audit(1743719824.199:1210): avc: denied { ioctl } for pid=13044 comm="syz.4.4039" path="/218/file0" dev="tmpfs" ino=1229 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 716.988129][ T28] audit: type=1400 audit(1743719824.209:1211): avc: denied { write } for pid=13044 comm="syz.4.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 717.097692][ T476] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 717.289384][ T476] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 717.310329][ T476] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 717.327640][ T476] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 717.336692][ T476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.346606][T13059] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 717.354110][T13059] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 717.567512][T13059] overlayfs: missing 'lowerdir' [ 717.572923][T13059] overlayfs: failed to resolve './file1': -2 [ 717.597053][ T302] usb 3-1: USB disconnect, device number 36 [ 717.688461][T13076] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 718.576225][ T28] audit: type=1404 audit(1743719825.849:1212): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 718.593206][ T28] audit: type=1404 audit(1743719825.869:1213): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 718.890991][ T28] audit: type=1400 audit(1743719826.149:1214): avc: denied { read write } for pid=9178 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.957950][ T28] audit: type=1400 audit(1743719826.149:1215): avc: denied { open } for pid=9178 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 719.492231][ T9741] ------------[ cut here ]------------ [ 719.497847][ T9741] WARNING: CPU: 0 PID: 9741 at fs/inode.c:332 drop_nlink+0xc1/0x110 [ 719.505711][ T9741] Modules linked in: [ 719.509435][ T9741] CPU: 0 PID: 9741 Comm: syz-executor Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 719.519361][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 719.529828][ T9741] RIP: 0010:drop_nlink+0xc1/0x110 [ 719.534725][ T9741] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 57 d0 ef ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2f 21 a8 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 719.554604][ T9741] RSP: 0018:ffffc90001b37bf0 EFLAGS: 00010293 [ 719.560810][ T9741] RAX: ffffffff81cd7661 RBX: 0000000000000000 RCX: ffff88811c3de540 [ 719.568769][ T9741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 719.576772][ T9741] RBP: ffffc90001b37c18 R08: ffffffff81cd75e4 R09: 0000000000000003 [ 719.585115][ T9741] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 719.593795][ T9741] R13: 1ffff11023d72276 R14: ffff88811eb91368 R15: ffff88811eb913b0 [ 719.601995][ T9741] FS: 000055555b15c500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 719.611268][ T9741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 719.618210][ T9741] CR2: 00007ffc6c9e5ff8 CR3: 0000000129da6000 CR4: 00000000003526b0 [ 719.626082][ T9741] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 719.634035][ T9741] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 719.641844][ T9741] Call Trace: [ 719.644913][ T9741] [ 719.647734][ T9741] ? show_regs+0x58/0x60 [ 719.652220][ T9741] ? __warn+0x160/0x3d0 [ 719.656481][ T9741] ? drop_nlink+0xc1/0x110 [ 719.660778][ T9741] ? report_bug+0x4d5/0x7d0 [ 719.665211][ T9741] ? drop_nlink+0xc1/0x110 [ 719.669976][ T9741] ? handle_bug+0x41/0x70 [ 719.674258][ T9741] ? exc_invalid_op+0x1b/0x50 [ 719.678889][ T9741] ? asm_exc_invalid_op+0x1b/0x20 [ 719.684212][ T9741] ? drop_nlink+0x44/0x110 [ 719.688716][ T9741] ? drop_nlink+0xc1/0x110 [ 719.693173][ T9741] ? drop_nlink+0xc1/0x110 [ 719.697636][ T9741] shmem_rmdir+0x59/0x90 [ 719.701964][ T9741] vfs_rmdir+0x398/0x500 [ 719.706406][ T9741] incfs_kill_sb+0x113/0x230 [ 719.710973][ T9741] deactivate_locked_super+0xad/0x110 [ 719.716314][ T9741] deactivate_super+0xbe/0xf0 [ 719.720874][ T9741] cleanup_mnt+0x485/0x510 [ 719.725392][ T9741] ? user_path_at_empty+0x14e/0x1a0 [ 719.730953][ T9741] __cleanup_mnt+0x19/0x20 [ 719.735618][ T9741] task_work_run+0x24d/0x2e0 [ 719.740094][ T9741] ? task_work_cancel+0x2e0/0x2e0 [ 719.744979][ T9741] ? __x64_sys_umount+0x122/0x170 [ 719.749867][ T9741] exit_to_user_mode_loop+0x94/0xa0 [ 719.754947][ T9741] exit_to_user_mode_prepare+0x5a/0xa0 [ 719.760484][ T9741] syscall_exit_to_user_mode+0x26/0x130 [ 719.765958][ T9741] do_syscall_64+0x47/0xb0 [ 719.770364][ T9741] ? clear_bhb_loop+0x55/0xb0 [ 719.774811][ T9741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.780817][ T9741] RIP: 0033:0x7f960fd8e497 [ 719.785051][ T9741] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 719.804980][ T9741] RSP: 002b:00007ffc6c9e7248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 719.813355][ T9741] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f960fd8e497 [ 719.821222][ T9741] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6c9e7300 [ 719.829426][ T9741] RBP: 00007ffc6c9e7300 R08: 0000000000000000 R09: 0000000000000000 [ 719.837264][ T9741] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc6c9e8390 [ 719.845264][ T9741] R13: 00007f960fe0e08c R14: 00000000000afa71 R15: 00007ffc6c9e83d0 [ 719.853165][ T9741] [ 719.855972][ T9741] ---[ end trace 0000000000000000 ]--- [ 720.182462][T13107] loop4: detected capacity change from 0 to 512 [ 720.261398][ T9741] ================================================================== [ 720.269398][ T9741] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 720.275480][ T9741] Write of size 4 at addr 0000000000000170 by task syz-executor/9741 [ 720.283701][ T9741] [ 720.286147][ T9741] CPU: 1 PID: 9741 Comm: syz-executor Tainted: G W 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 720.297710][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 720.307998][ T9741] Call Trace: [ 720.311511][ T9741] [ 720.314380][ T9741] dump_stack_lvl+0x151/0x1b7 [ 720.319062][ T9741] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 720.324461][ T9741] ? _printk+0xd1/0x111 [ 720.328628][ T9741] print_report+0xe1/0x4e0 [ 720.333128][ T9741] ? __virt_addr_valid+0x59/0x2f0 [ 720.338002][ T9741] ? kasan_addr_to_slab+0xd/0x80 [ 720.343644][ T9741] ? ihold+0x20/0x60 [ 720.348510][ T9741] kasan_report+0x13c/0x170 [ 720.352938][ T9741] ? ihold+0x20/0x60 [ 720.356667][ T9741] kasan_check_range+0x294/0x2a0 [ 720.361452][ T9741] __kasan_check_write+0x14/0x20 [ 720.366266][ T9741] ihold+0x20/0x60 [ 720.369856][ T9741] vfs_rmdir+0x268/0x500 [ 720.374047][ T9741] incfs_kill_sb+0x113/0x230 [ 720.378773][ T9741] deactivate_locked_super+0xad/0x110 [ 720.384102][ T9741] deactivate_super+0xbe/0xf0 [ 720.388723][ T9741] cleanup_mnt+0x485/0x510 [ 720.392985][ T9741] ? user_path_at_empty+0x14e/0x1a0 [ 720.398287][ T9741] __cleanup_mnt+0x19/0x20 [ 720.402621][ T9741] task_work_run+0x24d/0x2e0 [ 720.407135][ T9741] ? task_work_cancel+0x2e0/0x2e0 [ 720.412011][ T9741] ? __x64_sys_umount+0x122/0x170 [ 720.416945][ T9741] exit_to_user_mode_loop+0x94/0xa0 [ 720.421992][ T9741] exit_to_user_mode_prepare+0x5a/0xa0 [ 720.427280][ T9741] syscall_exit_to_user_mode+0x26/0x130 [ 720.432745][ T9741] do_syscall_64+0x47/0xb0 [ 720.437693][ T9741] ? clear_bhb_loop+0x55/0xb0 [ 720.442215][ T9741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.448630][ T9741] RIP: 0033:0x7f960fd8e497 [ 720.452988][ T9741] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 720.472520][ T9741] RSP: 002b:00007ffc6c9e7248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 720.481022][ T9741] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f960fd8e497 [ 720.489270][ T9741] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6c9e7300 [ 720.497076][ T9741] RBP: 00007ffc6c9e7300 R08: 0000000000000000 R09: 0000000000000000 [ 720.504974][ T9741] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc6c9e8390 [ 720.512876][ T9741] R13: 00007f960fe0e08c R14: 00000000000afa71 R15: 00007ffc6c9e83d0 [ 720.520971][ T9741] [ 720.523837][ T9741] ================================================================== [ 720.573713][T13107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 720.654289][T13107] EXT4-fs (loop4): orphan cleanup on readonly fs [ 720.663622][T13107] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.4054: Failed to acquire dquot type 1 [ 720.678010][T13107] EXT4-fs (loop4): 1 truncate cleaned up [ 720.684333][T13107] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 721.120406][T13118] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 721.813298][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 722.312002][ T28] audit: type=1400 audit(1743719828.349:1245): avc: denied { create } for pid=13111 comm="syz.3.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 722.340591][ T9468] EXT4-fs (loop4): unmounting filesystem. [ 722.341530][ T9741] Disabling lock debugging due to kernel taint [ 722.358795][ T9741] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 722.364097][ T28] audit: type=1400 audit(1743719828.369:1246): avc: denied { write } for pid=13111 comm="syz.3.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 722.367118][ T9741] #PF: supervisor write access in kernel mode [ 722.367135][ T9741] #PF: error_code(0x0002) - not-present page [ 722.367147][ T9741] PGD 12f574067 P4D 12f574067 PUD 0 [ 722.387544][ T28] audit: type=1400 audit(1743719828.369:1247): avc: denied { read } for pid=13111 comm="syz.3.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 722.393410][ T9741] [ 722.393426][ T9741] Oops: 0002 [#1] PREEMPT SMP KASAN [ 722.393446][ T9741] CPU: 0 PID: 9741 Comm: syz-executor Tainted: G B W 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 722.399601][ T28] audit: type=1400 audit(1743719829.619:1248): avc: denied { unmount } for pid=9468 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 722.404898][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 722.404920][ T9741] RIP: 0010:ihold+0x25/0x60 [ 722.478302][ T9741] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 722.499204][ T9741] RSP: 0018:ffffc90001b37c30 EFLAGS: 00010246 [ 722.505562][ T9741] RAX: ffff88811c3de500 RBX: 0000000000000001 RCX: ffff88811c3de540 [ 722.513482][ T9741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 722.523401][ T9741] RBP: ffffc90001b37c40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 722.533273][ T9741] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1102377e106 [ 722.543723][ T9741] R13: ffff888119890bb0 R14: 0000000000000000 R15: 1ffff1102331217c [ 722.553286][ T9741] FS: 000055555b15c500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 722.563811][ T9741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.572673][ T9741] CR2: 0000000000000170 CR3: 0000000129da6000 CR4: 00000000003526b0 [ 722.581413][ T9741] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 722.589436][ T9741] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 722.597826][ T9741] Call Trace: [ 722.601070][ T9741] [ 722.604031][ T9741] ? __die_body+0x62/0xb0 [ 722.608272][ T9741] ? __die+0x7e/0x90 [ 722.612473][ T9741] ? page_fault_oops+0x7f9/0xa90 [ 722.617623][ T9741] ? vprintk_default+0x26/0x30 [ 722.622246][ T9741] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 722.627705][ T9741] ? add_taint+0x44/0xe0 [ 722.632029][ T9741] ? panic+0x667/0x667 [ 722.636137][ T9741] ? preempt_schedule_thunk+0x16/0x18 [ 722.641392][ T9741] ? exc_page_fault+0x529/0x6d0 [ 722.646064][ T9741] ? asm_exc_page_fault+0x27/0x30 [ 722.650915][ T9741] ? add_taint+0x93/0xe0 [ 722.654990][ T9741] ? ihold+0x25/0x60 [ 722.658728][ T9741] vfs_rmdir+0x268/0x500 [ 722.662909][ T9741] incfs_kill_sb+0x113/0x230 [ 722.667683][ T9741] deactivate_locked_super+0xad/0x110 [ 722.673050][ T9741] deactivate_super+0xbe/0xf0 [ 722.677782][ T9741] cleanup_mnt+0x485/0x510 [ 722.682144][ T9741] ? user_path_at_empty+0x14e/0x1a0 [ 722.687167][ T9741] __cleanup_mnt+0x19/0x20 [ 722.691629][ T9741] task_work_run+0x24d/0x2e0 [ 722.696061][ T9741] ? task_work_cancel+0x2e0/0x2e0 [ 722.701177][ T9741] ? __x64_sys_umount+0x122/0x170 [ 722.706178][ T9741] exit_to_user_mode_loop+0x94/0xa0 [ 722.711386][ T9741] exit_to_user_mode_prepare+0x5a/0xa0 [ 722.716791][ T9741] syscall_exit_to_user_mode+0x26/0x130 [ 722.722241][ T9741] do_syscall_64+0x47/0xb0 [ 722.726576][ T9741] ? clear_bhb_loop+0x55/0xb0 [ 722.731094][ T9741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 722.736948][ T9741] RIP: 0033:0x7f960fd8e497 [ 722.741277][ T9741] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 722.761000][ T9741] RSP: 002b:00007ffc6c9e7248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 722.769458][ T9741] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f960fd8e497 [ 722.777457][ T9741] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6c9e7300 [ 722.785386][ T9741] RBP: 00007ffc6c9e7300 R08: 0000000000000000 R09: 0000000000000000 [ 722.793292][ T9741] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc6c9e8390 [ 722.801303][ T9741] R13: 00007f960fe0e08c R14: 00000000000afa71 R15: 00007ffc6c9e83d0 [ 722.809256][ T9741] [ 722.812171][ T9741] Modules linked in: [ 722.815944][ T9741] CR2: 0000000000000170 [ 722.819903][ T9741] ---[ end trace 0000000000000000 ]--- [ 722.825191][ T9741] RIP: 0010:ihold+0x25/0x60 [ 722.829544][ T9741] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 722.849352][ T9741] RSP: 0018:ffffc90001b37c30 EFLAGS: 00010246 [ 722.855338][ T9741] RAX: ffff88811c3de500 RBX: 0000000000000001 RCX: ffff88811c3de540 [ 722.863169][ T9741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 722.870962][ T9741] RBP: ffffc90001b37c40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 722.878863][ T9741] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1102377e106 [ 722.886680][ T9741] R13: ffff888119890bb0 R14: 0000000000000000 R15: 1ffff1102331217c [ 722.894487][ T9741] FS: 000055555b15c500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 722.903428][ T9741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.910356][ T9741] CR2: 0000000000000170 CR3: 0000000129da6000 CR4: 00000000003526b0 [ 722.918255][ T9741] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 722.926116][ T9741] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 722.934010][ T9741] Kernel panic - not syncing: Fatal exception [ 722.940209][ T9741] Kernel Offset: disabled [ 722.944350][ T9741] Rebooting in 86400 seconds..