last executing test programs: 6.557123837s ago: executing program 4 (id=107): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x14b040, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 5.735916204s ago: executing program 4 (id=108): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@stripe={'stripe', 0x3d, 0x9}}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) r1 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r1, r1, 0x0, 0x1000000201005) 5.431165762s ago: executing program 4 (id=111): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x1800, 0x4000, 0x61, 0x11, 0xc8}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 5.269799912s ago: executing program 4 (id=114): r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x5008000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) 5.230741834s ago: executing program 4 (id=115): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82443, 0x24) syz_usb_connect$cdc_ecm(0x2, 0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024c00010100000309040000ff02020000052406000005240000000d240f0100001c0000000000000424130504241300090581022000000000090582022000000000090503"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82443, 0x24) (async) syz_usb_connect$cdc_ecm(0x2, 0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024c00010100000309040000ff02020000052406000005240000000d240f0100001c0000000000000424130504241300090581022000000000090582022000000000090503"], 0x0) (async) 5.191618266s ago: executing program 4 (id=116): unshare(0x4020400) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000b00)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="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"], &(0x7f00000004c0)='syzkaller\x00', 0x400, 0xa0, &(0x7f0000000580)=""/160, 0x1f00, 0x4, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x6, 0x2, 0x1ff}, 0x10, 0x28ca7, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000680)=[{0x2, 0x2, 0x3, 0x5}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = epoll_create1(0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x80000008}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x6) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb86607aa82ef66bafc0c66b8000066eff30f12074e0fc71b660f38809b096a000066baf80cb8b43baa8def66bafc0ced0f01f8660f384034520f73d700c402d54015be000000c744240007000000c744240204000000c7442406000000000f011c24", 0x66}], 0x1, 0x22, &(0x7f0000000400)=[@efer={0x2, 0x1000}, @efer={0x2, 0x8801}], 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000093, 0x0, 0x10000}]}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r10, &(0x7f0000000800)=ANY=[@ANYBLOB="737a141065e1bc367982ecc7274529fad99017a7eb39482e380a123c2e5090d1929c312e9a4ae373cf0942a7498ee6de4925b12718895cbcf0032fb58033dcc1036f2394b3db50aafaaef81fa14aa811cfa7c60f03f98200659bc77cf89090259086a536f211ea7639233dcaae205b4dde2a808130bc93e00f9584c9e91439"], &(0x7f0000000280)=""/198, 0xc6) 5.174349097s ago: executing program 32 (id=116): unshare(0x4020400) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000b00)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="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"], &(0x7f00000004c0)='syzkaller\x00', 0x400, 0xa0, &(0x7f0000000580)=""/160, 0x1f00, 0x4, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x6, 0x2, 0x1ff}, 0x10, 0x28ca7, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000680)=[{0x2, 0x2, 0x3, 0x5}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = epoll_create1(0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x80000008}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x6) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb86607aa82ef66bafc0c66b8000066eff30f12074e0fc71b660f38809b096a000066baf80cb8b43baa8def66bafc0ced0f01f8660f384034520f73d700c402d54015be000000c744240007000000c744240204000000c7442406000000000f011c24", 0x66}], 0x1, 0x22, &(0x7f0000000400)=[@efer={0x2, 0x1000}, @efer={0x2, 0x8801}], 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000093, 0x0, 0x10000}]}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r10, &(0x7f0000000800)=ANY=[@ANYBLOB="737a141065e1bc367982ecc7274529fad99017a7eb39482e380a123c2e5090d1929c312e9a4ae373cf0942a7498ee6de4925b12718895cbcf0032fb58033dcc1036f2394b3db50aafaaef81fa14aa811cfa7c60f03f98200659bc77cf89090259086a536f211ea7639233dcaae205b4dde2a808130bc93e00f9584c9e91439"], &(0x7f0000000280)=""/198, 0xc6) 1.665498603s ago: executing program 3 (id=222): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x2000844, &(0x7f0000000380)={[{@fat=@tz_utc}, {@fat=@errors_remount}, {@dots}, {@dots}, {@fat=@nfs_nostale_ro}, {@nodots}, {@nodots}, {@fat=@discard}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x1fe}}, {@dots}, {@dots}, {@dots}, {@dots}, {@fat=@nfs_nostale_ro}, {@dots}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 1.509477761s ago: executing program 3 (id=234): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000040123f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.495617722s ago: executing program 0 (id=235): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a0431a, &(0x7f0000000000)={[{@jqfmt_vfsv1}]}, 0x82, 0x49a, &(0x7f0000001500)="$eJzs3M1vlMUfAPDv8/SF34/XqqiARKvE2PjS0oLKwYtGEw8YTfSAeqptIYRCDa2JJQSqMXgxMRw8q0cT/wJvXox6MjHxpHdDQpQLaIxZ8+w+j2y3+9ClbncL+/kkS2d2Zjvz7ezsMzuzSwA9azj7J4nYGhE/R8SOWnZ5heHaj2tXzk79ceXsVBKVyqu/JdV6V6+cnSqqFo/bkmdG0oj0gyRvZLn5xTMnJmdnZ07n+bGFk2+PzS+eeeL4ycljM8dmTk0cOnTwwPjTT0082ZY4s7iu7jk3t3f3i69ffGnqyMW3vvsy6+/WvLw+jjUZXHnXcBb475WqxrKH4///qbmNZltdOunvYke4KX0RkQ3XQDb/K5XK+bqyHfHC+9XEptKHb+lAF4F1kl2bmk3v/Lq4VCmV3LAUuBUk0e0eAN1RXO+z97/FrYPLj667/GztDVAW97X8VivpjzSvM9Dw/radhiPiyNKfn2a3aMc+BADAKj6a+uRwPN5s/ZfGPXX1tudnKEMRcUdE3BkRd0XEzoi4O6Ja996I2NVKo3UHBI1HQyvXP+mltUe3umz990x+trV8/Ves/mKoL89tq8Y/kBw9PjuzP/+bjMTApiw/foM2vn7+x4/LyurXf9kta79YC+b9uNTfsEE3PbkwWV2UtsHl9yL29MdflUqlIf4kilFKImL3DY8BmtpeJI4/+sXeskqrx7/i113XhnOmyucRj9TGfyka4i8kK88nB7ddP58c+1/MzuwfK54VK33/w4VXytpvPf71kY3/5uXP/7zks8U8MfRm/XntfJScXG4tbePCLx+WvqdZ6/N/MHmt+npUHLu+O7mwcHo8YjA5XM0vu3/i+mOLfFE/i39kX1ZSxF88Mq2+xkU+/vdFxN78vOz+iHgg7/uDEfFQROwrjT7i2+fKyzbC+E/XjX8Sjc//XedqP4vxX7zpRN+Jb74qa7+18T9YTY3k91Rf/1bRagfX/pcDAACAW0da3blJ0tF/02k6Olr7YO/O2JzOzs0vPHZ07p1T07UdnqEYSIudrh11+6HjyVL+G2v5iXyvuCg/kO8b/51/7mB0am52usuxQ6/bUjL/M7/2dbt3wLprdo420eQLbcDtp3H+p8uz51/uZGeAjvJ9behdq8z/tFP9ADrP9R96V7P5f74h7ywAbk+u/9C7zH/oXeY/9K6G+d8XP3WrJ0AHreHr/G1MxFJEl1rfFBFdjf1WT0S6IbrRUqL1/w9ivRNvbIxutJDo9isTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAe/wTAAD//0xL7t0=") io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) 1.408270227s ago: executing program 3 (id=237): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 1.400087498s ago: executing program 1 (id=240): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000000c0)=""/210, 0xd2}], 0x2) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 1.246308016s ago: executing program 1 (id=242): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000240)="0f", 0x1}], 0x1) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x1, 0x4000000) 1.244998357s ago: executing program 1 (id=243): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x40000008}) close_range(r0, 0xffffffffffffffff, 0x0) 1.178594691s ago: executing program 1 (id=244): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x4, 0x7fffffff, 0xffffff92, 0x2, 0x5, "3c70284cddce56c09a5a0332224cd937d50c1a"}) 1.178274441s ago: executing program 1 (id=246): setgroups(0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1.124148364s ago: executing program 1 (id=248): setfsgid(0xee00) r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) exit(0xffff) syz_open_procfs(r0, &(0x7f0000000040)='fdinfo/3\x00') 1.123909284s ago: executing program 0 (id=249): socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x68, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x20008000) 1.119008345s ago: executing program 0 (id=251): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.040199749s ago: executing program 3 (id=253): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000240)={0xa2, 0x15, 0x0, 0x6}, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x200001, 0x0}) 1.039842069s ago: executing program 0 (id=254): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4c840, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x7f7) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1.006944181s ago: executing program 5 (id=257): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000ac0)='./file1\x00', 0x1089e, &(0x7f0000000000), 0xbe, 0x264, &(0x7f0000000700)="$eJzs3TtoJHUcB/Df7MM1JkjURhAfICIaCLEQBBttFAISgoigQkTEShIhJthlrWwstFZJZRPE7nJXHteEaw6uzd2lyDVXXLjiwhV3xR6zs3tsNhvy2Mccmc8HNjP/nf9rYL7/TIqZBFBYkxHxUUSUI2IqIqoRkXRWeCP7TLaK62NbCxGNxuf3kma9rJxptxuPiHpEfBBRaR9b3fx698H2p2//vlJ969/Nr8ZGdX6d9nZ3Ptv/Z+63C7PvrZZa3020tp3nMUhJj+8qScSLwxjsKZFU8p4BJzH/y/830ty/FBFvNvNfjVIrsn8sP3OlGu/+fVTbP+9ef2WUcwUGr9Gopr8D6w2gcErNe+CkNB0R2X6pND2d3cPfLCfx49Lyz1M/LK0sfp/3SgUMQFLP/u7d+eRS7eJ4V/7vlLP8n8j7Q54pMBRp/r+Y37iV7u+X854NMBKvZps0/1Pfrr0T8g+FI/9QXPIPxSX/cA6cMbvyD8Ul/1Bc8g/nWLW9U+95WP6huOQfiqsr/7k8jwvkozP/AECxNGp5P4EM5CXv9QcAAAAAAAAAAAAAAAAAADhsfWxrof0Z1ZhX/4rY+zgiKgfHrzWPlpv/jzji2ebP5+4nabUnkqxZX755vc8O+vTfgJ++nqudrv7ztwc7/mlde204/f56sHjku+3WFiPqaeWZSuXw9Z+0rr9jHdn/C8c0rH53sgEGJekqf/jlaMfv9mgj3/FntyMup+vPTK/1rxQvN7e915+Jzlcsn9FPD/vsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJF5HAAA//+4Vmsn") r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 947.909024ms ago: executing program 3 (id=258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x82, @mcast1, 0x2}, 0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x80080) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x70bd2c, 0x25dfdbf9, {0xa, 0x0, 0x20, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10007}}, 0x1c}}, 0x20040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000500)={'mangle\x00', 0x0, [0x5, 0x8, 0x20000004, 0x3, 0x4]}, &(0x7f0000000040)=0x54) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x109}, 0x1c) r5 = fcntl$dupfd(r0, 0x0, r0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c051}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000100)) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0xc050}, 0x8001) 874.919209ms ago: executing program 5 (id=259): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) syz_pidfd_open(r0, 0x0) 710.126808ms ago: executing program 5 (id=260): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) lseek(r0, 0x100000000, 0x0) 622.188724ms ago: executing program 2 (id=261): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) write$tcp_mem(r0, &(0x7f0000000400)={0x90, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) 621.901184ms ago: executing program 5 (id=262): socket$inet6_udp(0xa, 0x2, 0x0) socket(0x2, 0x2, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$packet(0x11, 0xa, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, 0x0, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void, {0x8100, 0x2, 0x1}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x8, 0x58, 0x64, 0x0, 0x86, 0x2f, 0x0, @broadcast, @multicast2}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7f, 0x0, 0x1, 0x1, 0x7, 0xc}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x2, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x2, {0x3, 0x3, 0x3, 0x5, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 620.164754ms ago: executing program 5 (id=263): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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"/4195, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r2, r2, 0x0, 0x800000009) 572.011796ms ago: executing program 2 (id=264): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1861bca345f4910000fce986d55b0000e8ff0000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100fcff00000000bf91000000000000b7020000010000008500000000000000b70000000000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) 571.660596ms ago: executing program 2 (id=265): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000fed867b6b4ae6d36ffffb1fea0a7d7966d6f9bb009fee6d75b7c61c03b5fe2fdab605237d9edaaf24973116bb6a2b6bf1cb654ed43873ead7f7642f3bf8abdeee91410ee086398042772ef5f60a14264036960d45c7ebc4bd901916b886a0690f0859d8b7071cd74e9e63cbd678c47fddecd5ec20ae5d03595261a8e56485c4809d6679823fcd0dae3f9e2f83a8abb942911f42264fce507c260be5701fdf9f91f023717dfbb6e65919e3b2d2f0440b0770e6ceba033f855072e82f2bbf507"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) 556.578847ms ago: executing program 0 (id=266): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001200010025bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001e000002040008001d"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 539.565678ms ago: executing program 2 (id=267): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) 456.160053ms ago: executing program 5 (id=268): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1116, &(0x7f0000000080)=ANY=[], 0x0) 401.761377ms ago: executing program 2 (id=269): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) 377.249108ms ago: executing program 2 (id=270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x90, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 242.408536ms ago: executing program 0 (id=271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xe, 0xd}, {0x2, 0x6}, {0xffe0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 0s ago: executing program 3 (id=272): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 0s ago: executing program 5 (id=274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts. [ 22.642703][ T24] audit: type=1400 audit(1770074037.520:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.643707][ T267] cgroup: Unknown subsys name 'net' [ 22.670789][ T24] audit: type=1400 audit(1770074037.520:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.704830][ T24] audit: type=1400 audit(1770074037.550:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.705143][ T267] cgroup: Unknown subsys name 'devices' [ 22.821478][ T267] cgroup: Unknown subsys name 'hugetlb' [ 22.828843][ T267] cgroup: Unknown subsys name 'rlimit' [ 22.994848][ T24] audit: type=1400 audit(1770074037.870:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.022159][ T24] audit: type=1400 audit(1770074037.870:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.027336][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.051798][ T24] audit: type=1400 audit(1770074037.870:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.090776][ T24] audit: type=1400 audit(1770074037.940:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.120368][ T24] audit: type=1400 audit(1770074037.940:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.151448][ T24] audit: type=1400 audit(1770074038.000:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.151667][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.179138][ T24] audit: type=1400 audit(1770074038.000:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.857980][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.866256][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.875603][ T275] device bridge_slave_0 entered promiscuous mode [ 23.885152][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.896321][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.908158][ T275] device bridge_slave_1 entered promiscuous mode [ 23.956211][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.964802][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.973621][ T276] device bridge_slave_0 entered promiscuous mode [ 23.994312][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.003560][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.012660][ T276] device bridge_slave_1 entered promiscuous mode [ 24.019976][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.028754][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.039436][ T277] device bridge_slave_0 entered promiscuous mode [ 24.063551][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.072185][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.081028][ T277] device bridge_slave_1 entered promiscuous mode [ 24.101396][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.110282][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.120098][ T279] device bridge_slave_0 entered promiscuous mode [ 24.140855][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.149637][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.158148][ T279] device bridge_slave_1 entered promiscuous mode [ 24.174666][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.183185][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.191405][ T278] device bridge_slave_0 entered promiscuous mode [ 24.224573][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.232327][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.240544][ T278] device bridge_slave_1 entered promiscuous mode [ 24.373628][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.382094][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.389795][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.397498][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.407067][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.414830][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.422575][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.430191][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.452117][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.459847][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.469230][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.476960][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.498140][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.505891][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.513903][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.521915][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.531920][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.539806][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.547168][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.554363][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.574156][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.583726][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.592145][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.601589][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.609708][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.617808][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.625993][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.633541][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.642201][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.650450][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.658611][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.666862][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.683020][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.691451][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.699371][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.717510][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.744840][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.755259][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.764898][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.774102][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.781544][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.790077][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.798272][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.805809][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.813879][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.823266][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.830903][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.839028][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.848230][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.855684][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.880833][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.891025][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.899989][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.908288][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.918141][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.926383][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.934381][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.943477][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.951728][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.961127][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.968618][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.976395][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.985028][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.992936][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.002789][ T275] device veth0_vlan entered promiscuous mode [ 25.012411][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.021412][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.038371][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.048048][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.057334][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.066277][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.075303][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.083258][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.091695][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.101429][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.122588][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.131688][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.141004][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.151273][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.160940][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.168544][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.176656][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.186916][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.196992][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.204414][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.214946][ T276] device veth0_vlan entered promiscuous mode [ 25.223620][ T275] device veth1_macvtap entered promiscuous mode [ 25.232034][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.240290][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.248315][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.258006][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.265958][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.278791][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.287904][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.296577][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.305524][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.324159][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.333089][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.341744][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.350622][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.359559][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.375205][ T276] device veth1_macvtap entered promiscuous mode [ 25.387990][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.397280][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.406182][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.414545][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.422582][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.432424][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.443671][ T279] device veth0_vlan entered promiscuous mode [ 25.451599][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.460201][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.477849][ T278] device veth0_vlan entered promiscuous mode [ 25.478145][ T275] request_module fs-gadgetfs succeeded, but still no fs? [ 25.494799][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.503765][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.512863][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.521272][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.530880][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.540422][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.549637][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.558507][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.567700][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.580974][ T278] device veth1_macvtap entered promiscuous mode [ 25.589090][ T275] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.604533][ T277] device veth0_vlan entered promiscuous mode [ 25.614936][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.625609][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.636247][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.646473][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.656397][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.665880][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.680879][ T301] capability: warning: `syz.4.5' uses 32-bit capabilities (legacy support in use) [ 25.692570][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.709361][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.724593][ T277] device veth1_macvtap entered promiscuous mode [ 25.749472][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.758764][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.773276][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.783201][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.795840][ T279] device veth1_macvtap entered promiscuous mode [ 25.811839][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.821798][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.832526][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.842483][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.907385][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.923525][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.934210][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.943969][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.007415][ T322] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.059649][ T5] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 26.145178][ T331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=331 comm=syz.3.11 [ 26.190164][ T342] cgroup: syz.3.14 (342) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 26.199938][ T318] F2FS-fs (loop0): Found nat_bits in checkpoint [ 26.207624][ T342] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 27.198012][ T318] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.230331][ T351] ====================================================== [ 27.230331][ T351] WARNING: the mand mount option is being deprecated and [ 27.230331][ T351] will be removed in v5.15! [ 27.230331][ T351] ====================================================== [ 27.340256][ T354] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.356587][ T360] attempt to access beyond end of device [ 27.356587][ T360] loop0: rw=10241, want=45104, limit=40427 [ 27.357224][ T354] EXT4-fs (loop3): orphan cleanup on readonly fs [ 27.371465][ T5] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 27.378474][ T354] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #4: comm syz.3.15: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 27.392021][ T318] attempt to access beyond end of device [ 27.392021][ T318] loop0: rw=2049, want=45104, limit=40427 [ 27.412636][ T354] EXT4-fs error (device loop3): ext4_quota_enable:6449: comm syz.3.15: Bad quota inode: 4, type: 1 [ 27.425452][ T5] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.437145][ T354] EXT4-fs warning (device loop3): ext4_enable_quotas:6490: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 27.463824][ T354] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 27.471408][ T354] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noblock_validity,journal_dev=0x0000000000000003,journal_dev=0x000000000000000b,barrier=0x0000000000000081,minixdf,inode_readahead_blks=0x0000000000000040,,errors=continue [ 27.497899][ T358] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue [ 27.517975][ T360] attempt to access beyond end of device [ 27.517975][ T360] loop0: rw=2049, want=45112, limit=40427 [ 27.533451][ T318] attempt to access beyond end of device [ 27.533451][ T318] loop0: rw=2049, want=45112, limit=40427 [ 27.546059][ T358] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.546923][ T351] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue [ 27.587224][ T5] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.599397][ T351] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.601180][ T5] usb 3-1: config 0 interface 0 has no altsetting 0 [ 27.619176][ T5] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 27.628612][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.628950][ T277] attempt to access beyond end of device [ 27.628950][ T277] loop0: rw=2049, want=45128, limit=40427 [ 27.640909][ T5] usb 3-1: config 0 descriptor?? [ 27.859715][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.129407][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 28.426653][ T24] kauditd_printk_skb: 91 callbacks suppressed [ 28.426673][ T24] audit: type=1400 audit(1770074043.300:165): avc: denied { create } for pid=373 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 28.670648][ T24] audit: type=1400 audit(1770074043.550:166): avc: denied { map_create } for pid=373 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.084079][ T383] capability: warning: `syz.4.21' uses deprecated v2 capabilities in a way that may be insecure [ 29.171949][ T24] audit: type=1400 audit(1770074044.050:167): avc: denied { create } for pid=379 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.336910][ T24] audit: type=1400 audit(1770074044.080:168): avc: denied { ioctl } for pid=379 comm="syz.4.21" path="socket:[15862]" dev="sockfs" ino=15862 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.563453][ T24] audit: type=1400 audit(1770074044.090:169): avc: denied { create } for pid=379 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 29.639484][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 29.646094][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 29.658757][ T5] usb 3-1: USB disconnect, device number 2 [ 29.680356][ T24] audit: type=1400 audit(1770074044.560:170): avc: denied { remount } for pid=385 comm="syz.4.22" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.702975][ T25] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 29.716263][ T25] usb 4-1: config 1 has no interface number 1 [ 29.716921][ T24] audit: type=1400 audit(1770074044.580:171): avc: denied { create } for pid=394 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.723121][ T25] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 29.746826][ T24] audit: type=1400 audit(1770074044.600:172): avc: denied { setopt } for pid=394 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.757832][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 29.778812][ T24] audit: type=1400 audit(1770074044.600:173): avc: denied { ioctl } for pid=394 comm="syz.0.25" path="socket:[15893]" dev="sockfs" ino=15893 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.794232][ T25] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 29.821327][ T24] audit: type=1400 audit(1770074044.600:174): avc: denied { write } for pid=394 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.870371][ T389] exfat: Deprecated parameter 'utf8' [ 29.880691][ T398] xt_hashlimit: size too large, truncated to 1048576 [ 29.880816][ T389] exfat: Deprecated parameter 'namecase' [ 29.895146][ T389] exfat: Deprecated parameter 'namecase' [ 29.901864][ T389] exfat: Deprecated parameter 'utf8' [ 29.920421][ T368] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 29.933495][ T368] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 29.934717][ T386] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 29.951805][ T386] syzkaller0: linktype set to 825 [ 29.965930][ T368] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.973757][ T389] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 30.009524][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.074745][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.111257][ T404] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 30.137238][ T368] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 30.139224][ T25] usb 4-1: Product: syz [ 30.144624][ T368] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 30.164182][ T404] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2820: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.208000][ T25] usb 4-1: Manufacturer: syz [ 30.225088][ T404] EXT4-fs (loop4): 1 truncate cleaned up [ 30.233595][ T25] usb 4-1: SerialNumber: syz [ 30.237743][ T404] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache, [ 30.264206][ T368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'. [ 30.269643][ T25] usb 4-1: can't set config #1, error -71 [ 30.273748][ T368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'. [ 30.302576][ T368] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19'. [ 30.307579][ T25] usb 4-1: USB disconnect, device number 2 [ 31.007196][ T431] xt_hashlimit: size too large, truncated to 1048576 [ 31.135817][ T430] EXT4-fs error (device loop2): ext4_quota_enable:6442: comm syz.2.33: Bad quota inum: 2, type: 0 [ 31.169572][ T430] EXT4-fs warning (device loop2): ext4_enable_quotas:6490: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 31.190440][ T430] EXT4-fs (loop2): mount failed [ 31.205172][ T437] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 2: comm syz.1.31: lblock 2 mapped to illegal pblock 2 (length 1) [ 31.273043][ T437] EXT4-fs (loop1): Remounting filesystem read-only [ 31.287787][ T437] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 48: comm syz.1.31: lblock 0 mapped to illegal pblock 48 (length 1) [ 31.303985][ T437] EXT4-fs error (device loop1): ext4_acquire_dquot:6225: comm syz.1.31: Failed to acquire dquot type 0 [ 31.316491][ T437] EXT4-fs (loop1): 1 orphan inode deleted [ 31.328392][ T437] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000008,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro, [ 31.354532][ T437] EXT4-fs error (device loop1): __ext4_get_inode_loc:4444: comm syz.1.31: Invalid inode table block 1 in block_group 0 [ 31.368424][ T437] EXT4-fs (loop1): Remounting filesystem read-only [ 31.375825][ T437] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5947: Corrupt filesystem [ 31.444780][ T443] EXT4-fs (loop0): error: could not find journal device path: error -2 [ 31.459031][ T437] EXT4-fs error (device loop1): ext4_quota_off:6544: inode #3: comm syz.1.31: mark_inode_dirty error [ 31.481846][ T5] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.831566][ T451] EXT4-fs (loop2): Unrecognized mount option "smackfsroot=%+-" or missing value [ 32.288350][ T443] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,norecovery,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000002000,,errors=continue [ 32.583915][ T443] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.637713][ T460] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.719590][ T460] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,sysvgroups,data_err=ignore,barrier=0x000000000000007b,data_err=ignore,grpquota,dioread_nolock,nobarrier,resuid=0x0000000000000000,quota,,errors=continue [ 32.786921][ T464] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.35: bg 0: block 345: padding at end of block bitmap is not set [ 32.807334][ T464] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 800 with error 117 [ 32.825728][ T464] EXT4-fs (loop0): This should not happen!! Data will be lost [ 32.825728][ T464] [ 32.849404][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 32.856518][ T296] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 816 with max blocks 2 with error 28 [ 32.877765][ T296] EXT4-fs (loop0): This should not happen!! Data will be lost [ 32.877765][ T296] [ 32.899512][ T296] EXT4-fs (loop0): Total free blocks count 0 [ 32.907931][ T296] EXT4-fs (loop0): Free/Dirty block details [ 32.914441][ T296] EXT4-fs (loop0): free_blocks=0 [ 32.920513][ T296] EXT4-fs (loop0): dirty_blocks=16 [ 32.926554][ T296] EXT4-fs (loop0): Block reservation details [ 32.933881][ T296] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 32.969452][ T5] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 32.977858][ T5] usb 4-1: config 0 has no interface number 0 [ 33.049410][ T380] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.069395][ T20] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 33.119540][ T280] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.139483][ T5] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 33.151783][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.154905][ T453] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 33.160999][ T5] usb 4-1: Product: syz [ 33.174395][ T5] usb 4-1: Manufacturer: syz [ 33.179613][ T5] usb 4-1: SerialNumber: syz [ 33.185233][ T5] usb 4-1: config 0 descriptor?? [ 33.279841][ T453] loop4: p1 < > p4 < > [ 33.284490][ T453] loop4: partition table partially beyond EOD, truncated [ 33.289474][ T380] usb 2-1: Using ep0 maxpacket: 8 [ 33.293949][ T453] loop4: p4 start 42112 is beyond EOD, truncated [ 33.320507][ T95] loop4: p1 < > p4 < > [ 33.324728][ T95] loop4: partition table partially beyond EOD, truncated [ 33.339973][ T95] loop4: p4 start 42112 is beyond EOD, truncated [ 33.379438][ T280] usb 1-1: Using ep0 maxpacket: 16 [ 33.429426][ T380] usb 2-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.439466][ T20] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.444056][ T380] usb 2-1: config 0 interface 0 has no altsetting 0 [ 33.467071][ T380] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 33.477983][ T20] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.477993][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.500548][ T380] usb 2-1: config 0 descriptor?? [ 33.507830][ T20] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.522214][ T280] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.540657][ T431] exFAT-fs (loop3): invalid boot record signature [ 33.558486][ T431] exFAT-fs (loop3): failed to read boot sector [ 33.565973][ T280] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.578380][ T431] exFAT-fs (loop3): failed to recognize exfat type [ 33.585913][ T20] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.609391][ T280] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 33.629519][ T20] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 33.643400][ T280] usb 1-1: config 0 interface 0 has no altsetting 0 [ 33.651175][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.661353][ T280] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 33.683779][ T20] usb 3-1: config 0 descriptor?? [ 33.689741][ T280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.702227][ T280] usb 1-1: config 0 descriptor?? [ 33.714103][ T431] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 33.732497][ T24] kauditd_printk_skb: 49 callbacks suppressed [ 33.732510][ T24] audit: type=1400 audit(1770074048.610:222): avc: denied { read } for pid=428 comm="syz.3.34" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.780015][ T24] audit: type=1400 audit(1770074048.650:223): avc: denied { open } for pid=428 comm="syz.3.34" path="/7/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.807594][ T24] audit: type=1400 audit(1770074048.650:224): avc: denied { ioctl } for pid=428 comm="syz.3.34" path="/7/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.819425][ T5] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 33.845572][ T5] uvcvideo: No valid video chain found. [ 33.845999][ T300] udevd[300]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 33.855561][ T5] usb 4-1: USB disconnect, device number 3 [ 33.922323][ T475] EXT4-fs (loop4): Ignoring removed orlov option [ 33.929264][ T475] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 33.938921][ T475] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.970808][ T475] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,nodiscard,dioread_nolock,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 34.412875][ T24] audit: type=1400 audit(1770074049.270:225): avc: denied { create } for pid=459 comm="syz.1.38" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 35.195651][ T20] nintendo 0003:057E:2009.0001: unbalanced delimiter at end of report description [ 35.262297][ T24] audit: type=1400 audit(1770074050.140:226): avc: denied { write } for pid=442 comm="syz.0.35" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 35.348737][ T280] hid (null): invalid report_size 24934 [ 35.355349][ T24] audit: type=1400 audit(1770074050.180:227): avc: denied { map } for pid=474 comm="syz.4.40" path="/13/file0/hugetlb.2MB.usage_in_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.757945][ T24] audit: type=1400 audit(1770074050.630:228): avc: denied { read } for pid=474 comm="syz.4.40" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.792550][ T20] nintendo 0003:057E:2009.0001: HID parse failed [ 35.817947][ T20] nintendo 0003:057E:2009.0001: probe - fail = -22 [ 35.833825][ T20] nintendo: probe of 0003:057E:2009.0001 failed with error -22 [ 35.987647][ T309] usb 3-1: USB disconnect, device number 3 [ 36.037598][ T24] audit: type=1400 audit(1770074050.910:229): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.089376][ T380] usbhid 2-1:0.0: can't add hid device: -71 [ 36.098933][ T24] audit: type=1400 audit(1770074050.970:230): avc: denied { create } for pid=492 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.129472][ T380] usbhid: probe of 2-1:0.0 failed with error -71 [ 36.149438][ T380] usb 2-1: USB disconnect, device number 2 [ 36.169895][ T24] audit: type=1400 audit(1770074051.000:231): avc: denied { bind } for pid=492 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.304569][ T455] usb 1-1: USB disconnect, device number 2 [ 36.469386][ T20] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.478762][ T491] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.502064][ T491] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.572874][ T508] attempt to access beyond end of device [ 36.572874][ T508] loop2: rw=10241, want=45104, limit=40427 [ 36.585595][ T508] attempt to access beyond end of device [ 36.585595][ T508] loop2: rw=2049, want=45112, limit=40427 [ 36.598890][ T280] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 36.607540][ T508] attempt to access beyond end of device [ 36.607540][ T508] loop2: rw=2049, want=45104, limit=40427 [ 36.620277][ T491] attempt to access beyond end of device [ 36.620277][ T491] loop2: rw=2049, want=45104, limit=40427 [ 36.648205][ T278] attempt to access beyond end of device [ 36.648205][ T278] loop2: rw=2049, want=45128, limit=40427 [ 36.719350][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 36.768179][ T511] device veth0 entered promiscuous mode [ 36.774812][ T511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 36.822288][ T513] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.839431][ T20] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 36.849888][ T20] usb 4-1: config 0 has no interface number 0 [ 36.856344][ T20] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 36.867594][ T20] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 36.879239][ T513] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue [ 36.923466][ T522] netlink: 180 bytes leftover after parsing attributes in process `syz.0.51'. [ 36.933685][ T522] netlink: 180 bytes leftover after parsing attributes in process `syz.0.51'. [ 36.944266][ T522] netlink: 180 bytes leftover after parsing attributes in process `syz.0.51'. [ 37.009560][ T280] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 37.018041][ T280] usb 5-1: config 0 has no interface number 0 [ 37.028247][ T522] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.033259][ T527] cgroup: fork rejected by pids controller in /syz1 [ 37.043001][ T280] usb 5-1: config 0 interface 11 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 37.061911][ T280] usb 5-1: config 0 interface 11 has no altsetting 0 [ 37.062415][ T522] EXT4-fs (loop0): 1 truncate cleaned up [ 37.075966][ T522] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 37.079528][ T20] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 37.098002][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.099075][ T522] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.51: Siphash requires key [ 37.107029][ T20] usb 4-1: Product: syz [ 37.118475][ T522] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.51: Siphash requires key [ 37.123246][ T20] usb 4-1: Manufacturer: syz [ 37.135306][ T522] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.51: Siphash requires key [ 37.139424][ T20] usb 4-1: SerialNumber: syz [ 37.164321][ T522] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.51: Siphash requires key [ 37.182842][ T20] usb 4-1: config 0 descriptor?? [ 37.194054][ T522] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.51: Siphash requires key [ 37.207997][ T522] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.51: Siphash requires key [ 37.221723][ T495] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 37.229251][ T495] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 37.237351][ T522] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.51: Siphash requires key [ 37.255901][ T522] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.51: Siphash requires key [ 37.269732][ T280] usb 5-1: New USB device found, idVendor=128d, idProduct=0001, bcdDevice=3c.d6 [ 37.280632][ T280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.290611][ T280] usb 5-1: Product: syz [ 37.295789][ T280] usb 5-1: Manufacturer: syz [ 37.301105][ T280] usb 5-1: SerialNumber: syz [ 37.311067][ T280] usb 5-1: config 0 descriptor?? [ 37.329407][ T499] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 37.375171][ T280] ftdi_sio 5-1:0.11: FTDI USB Serial Device converter detected [ 37.383978][ T280] usb 5-1: Detected FT-X [ 37.803393][ T669] EXT4-fs (loop0): Unrecognized mount option "permit_directio" or missing value [ 38.146931][ T495] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 38.520029][ T675] Zero length message leads to an empty skb [ 38.643146][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 38.656579][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.695224][ T691] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 38.699940][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 38.723616][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.751689][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.761086][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.769808][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.778849][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.794922][ T680] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.823705][ T680] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.829550][ T20] asix: probe of 4-1:0.251 failed with error -71 [ 38.845022][ T20] usb 4-1: USB disconnect, device number 4 [ 38.905786][ T697] attempt to access beyond end of device [ 38.905786][ T697] loop2: rw=10241, want=45104, limit=40427 [ 38.909539][ T676] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.919498][ T697] attempt to access beyond end of device [ 38.919498][ T697] loop2: rw=2049, want=45112, limit=40427 [ 38.940281][ T697] attempt to access beyond end of device [ 38.940281][ T697] loop2: rw=2049, want=45104, limit=40427 [ 38.953599][ T680] attempt to access beyond end of device [ 38.953599][ T680] loop2: rw=2049, want=45104, limit=40427 [ 38.989821][ T278] attempt to access beyond end of device [ 38.989821][ T278] loop2: rw=2049, want=45128, limit=40427 [ 39.019356][ T380] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 39.121709][ T699] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 39.131475][ T699] EXT4-fs (loop2): 1 truncate cleaned up [ 39.138063][ T699] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noload,data_err=abort,noload,data_err=ignore,auto_da_alloc,,errors=continue [ 39.192479][ T676] usb 2-1: Using ep0 maxpacket: 16 [ 39.319418][ T676] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 39.328763][ T676] usb 2-1: config 0 has no interface number 0 [ 39.335394][ T676] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 39.345948][ T280] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 39.352998][ T676] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 39.380202][ T380] usb 1-1: not running at top speed; connect to a high speed hub [ 39.389485][ T280] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 39.437944][ T706] FAT-fs (loop4): Directory bread(block 64) failed [ 39.445123][ T706] FAT-fs (loop4): Directory bread(block 65) failed [ 39.449367][ T280] ftdi_sio 5-1:0.11: GPIO initialisation failed: -71 [ 39.451872][ T706] FAT-fs (loop4): Directory bread(block 66) failed [ 39.466697][ T380] usb 1-1: config 1 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 39.482472][ T706] FAT-fs (loop4): Directory bread(block 67) failed [ 39.489136][ T280] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 39.490177][ T380] usb 1-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.512776][ T706] FAT-fs (loop4): Directory bread(block 68) failed [ 39.519990][ T706] FAT-fs (loop4): Directory bread(block 69) failed [ 39.526928][ T706] FAT-fs (loop4): Directory bread(block 70) failed [ 39.532702][ T280] usb 5-1: USB disconnect, device number 2 [ 39.536130][ T380] usb 1-1: config 1 interface 0 has no altsetting 0 [ 39.540460][ T706] FAT-fs (loop4): Directory bread(block 71) failed [ 39.559846][ T676] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 39.609448][ T706] FAT-fs (loop4): Directory bread(block 72) failed [ 39.612552][ T676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.618518][ T706] FAT-fs (loop4): Directory bread(block 73) failed [ 39.629810][ T280] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 39.647965][ T676] usb 2-1: Product: syz [ 39.652841][ T676] usb 2-1: Manufacturer: syz [ 39.664835][ T280] ftdi_sio 5-1:0.11: device disconnected [ 39.672911][ T676] usb 2-1: SerialNumber: syz [ 39.697072][ T676] usb 2-1: config 0 descriptor?? [ 39.709431][ T380] usb 1-1: New USB device found, idVendor=056a, idProduct=00db, bcdDevice= 0.40 [ 39.721096][ T380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.729281][ T380] usb 1-1: Product: ࡔ [ 39.729556][ T688] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 39.734370][ T380] usb 1-1: Manufacturer: й [ 39.742312][ T688] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 39.746873][ T380] usb 1-1: SerialNumber: syz [ 39.779540][ T691] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 39.797545][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 39.797557][ T24] audit: type=1400 audit(1770074054.670:248): avc: denied { write } for pid=715 comm="syz.4.67" path="socket:[15169]" dev="sockfs" ino=15169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.816383][ T716] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 39.839122][ T716] EXT4-fs (loop4): orphan cleanup on readonly fs [ 39.847473][ T716] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #3: block 3: comm syz.4.67: lblock 3 mapped to illegal pblock 3 (length 1) [ 39.863667][ T716] Quota error (device loop4): write_blk: dquota write failed [ 39.872228][ T716] Quota error (device loop4): find_free_dqentry: Can't write quota data block 3 [ 39.881835][ T716] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 39.892585][ T716] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.67: Failed to acquire dquot type 0 [ 39.904824][ T716] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 3: comm syz.4.67: lblock 3 mapped to illegal pblock 3 (length 1) [ 39.920640][ T716] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 39.932118][ T716] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.67: Failed to acquire dquot type 0 [ 39.945092][ T716] EXT4-fs error (device loop4): ext4_free_blocks:5701: comm syz.4.67: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.960235][ T716] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 3: comm syz.4.67: lblock 3 mapped to illegal pblock 3 (length 1) [ 39.978028][ T716] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 39.989469][ T20] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 39.997840][ T716] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.67: Failed to acquire dquot type 0 [ 40.009870][ T716] EXT4-fs (loop4): 1 orphan inode deleted [ 40.016029][ T716] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 40.076630][ T688] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 40.127775][ T721] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.150850][ T721] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue [ 40.151892][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 40.188142][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.198294][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 40.207645][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.216827][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.220106][ T691] xt_TCPMSS: Only works on TCP SYN packets [ 40.225956][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.233823][ T24] audit: type=1400 audit(1770074055.110:249): avc: denied { connect } for pid=690 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.240599][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.260601][ T24] audit: type=1400 audit(1770074055.140:250): avc: denied { read } for pid=690 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.268561][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.323253][ T24] audit: type=1400 audit(1770074055.200:251): avc: denied { setopt } for pid=690 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.369456][ T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.380003][ T676] asix: probe of 2-1:0.251 failed with error -71 [ 40.397939][ T676] usb 2-1: USB disconnect, device number 3 [ 40.405239][ T20] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 40.418432][ T20] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 40.428550][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.450709][ T20] usb 4-1: config 0 descriptor?? [ 40.531648][ T730] F2FS-fs (loop4): invalid crc value [ 40.540472][ T730] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.569130][ T730] F2FS-fs (loop4): Start checkpoint disabled! [ 40.576632][ T730] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 40.595804][ T24] audit: type=1400 audit(1770074055.470:252): avc: denied { write } for pid=729 comm="syz.4.70" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.694295][ T745] udc-core: couldn't find an available UDC or it's busy [ 40.704003][ T745] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.809615][ T488] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 40.989395][ T53] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 41.199439][ T488] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 41.208284][ T488] usb 3-1: config 0 has no interface number 0 [ 41.215421][ T488] usb 3-1: config 0 interface 11 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 41.227669][ T488] usb 3-1: config 0 interface 11 has no altsetting 0 [ 41.234682][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 41.360841][ T53] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 41.370840][ T53] usb 5-1: config 0 has no interface number 0 [ 41.378013][ T53] usb 5-1: config 0 interface 184 has no altsetting 0 [ 41.409579][ T488] usb 3-1: New USB device found, idVendor=128d, idProduct=0001, bcdDevice=3c.d6 [ 41.420637][ T488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.430657][ T488] usb 3-1: Product: syz [ 41.435272][ T488] usb 3-1: Manufacturer: syz [ 41.441493][ T488] usb 3-1: SerialNumber: syz [ 41.538247][ T488] usb 3-1: config 0 descriptor?? [ 41.544640][ T53] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 41.560674][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.570503][ T53] usb 5-1: Product: syz [ 41.574940][ T53] usb 5-1: Manufacturer: syz [ 41.580270][ T742] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 41.589495][ T53] usb 5-1: SerialNumber: syz [ 41.618318][ T488] ftdi_sio 3-1:0.11: FTDI USB Serial Device converter detected [ 41.628934][ T53] usb 5-1: config 0 descriptor?? [ 41.637016][ T488] usb 3-1: Detected FT-X [ 41.682829][ T53] smsc75xx v1.0.0 [ 41.942055][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 41.955470][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 41.966251][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 41.978386][ T53] smsc75xx: probe of 5-1:0.184 failed with error -32 [ 41.981232][ T753] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.011055][ T753] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.020425][ T757] handle_bad_sector: 1 callbacks suppressed [ 42.020439][ T757] attempt to access beyond end of device [ 42.020439][ T757] loop1: rw=2049, want=45104, limit=40427 [ 42.040265][ T753] FAULT_INJECTION: forcing a failure. [ 42.040265][ T753] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.054511][ T753] CPU: 1 PID: 753 Comm: syz.1.76 Not tainted syzkaller #0 [ 42.062222][ T753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.075048][ T753] Call Trace: [ 42.078977][ T753] __dump_stack+0x21/0x24 [ 42.079511][ T380] usbhid 1-1:1.0: can't add hid device: -71 [ 42.083930][ T753] dump_stack_lvl+0x1a7/0x208 [ 42.083954][ T753] ? thaw_kernel_threads+0x220/0x220 [ 42.090739][ T380] usbhid: probe of 1-1:1.0 failed with error -71 [ 42.095566][ T753] ? vsnprintf+0x189c/0x1990 [ 42.095594][ T753] ? show_regs_print_info+0x18/0x18 [ 42.106378][ T380] usb 1-1: USB disconnect, device number 3 [ 42.109008][ T753] dump_stack+0x15/0x1c [ 42.109034][ T753] should_fail+0x3c1/0x510 [ 42.136607][ T753] should_fail_usercopy+0x1a/0x20 [ 42.142668][ T753] _copy_to_user+0x20/0x90 [ 42.147625][ T753] simple_read_from_buffer+0xe9/0x160 [ 42.153185][ T753] proc_fail_nth_read+0x1a6/0x220 [ 42.158225][ T753] ? proc_fault_inject_write+0x310/0x310 [ 42.164053][ T753] ? rw_verify_area+0x1c0/0x360 [ 42.168915][ T753] ? proc_fault_inject_write+0x310/0x310 [ 42.174897][ T753] vfs_read+0x209/0xa60 [ 42.179826][ T753] ? kernel_read+0x70/0x70 [ 42.184581][ T753] ? __kasan_check_write+0x14/0x20 [ 42.190363][ T753] ? mutex_lock+0x92/0xf0 [ 42.194894][ T753] ? mutex_trylock+0xa0/0xa0 [ 42.199678][ T753] ? __fget_files+0x2c4/0x320 [ 42.205135][ T753] ? __fdget_pos+0x2d2/0x380 [ 42.209743][ T753] ? ksys_read+0x71/0x250 [ 42.214100][ T753] ksys_read+0x149/0x250 [ 42.218716][ T753] ? vfs_write+0xdc0/0xdc0 [ 42.223622][ T753] ? debug_smp_processor_id+0x17/0x20 [ 42.229852][ T753] __x64_sys_read+0x7b/0x90 [ 42.235034][ T753] do_syscall_64+0x31/0x40 [ 42.239815][ T753] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.246007][ T753] RIP: 0033:0x7fd3f9f8178e [ 42.250928][ T753] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 42.271940][ T753] RSP: 002b:00007fd3f8a1cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.280842][ T753] RAX: ffffffffffffffda RBX: 00007fd3f8a1d6c0 RCX: 00007fd3f9f8178e [ 42.289470][ T753] RDX: 000000000000000f RSI: 00007fd3f8a1d0a0 RDI: 0000000000000005 [ 42.298050][ T753] RBP: 00007fd3f8a1d090 R08: 0000000000000000 R09: 0000000000000000 [ 42.306621][ T753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.315200][ T753] R13: 00007fd3fa23c038 R14: 00007fd3fa23bfa0 R15: 00007ffde3342418 [ 42.451293][ T763] EXT4-fs (loop1): Ignoring removed oldalloc option [ 42.480956][ T763] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 42.490385][ T763] System zones: 0-7 [ 42.495094][ T763] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nodioread_nolock,barrier=0x0000000000000007,oldalloc,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro, [ 42.520684][ T763] EXT4-fs error (device loop1): ext4_find_extent:928: inode #2: comm syz.1.78: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 42.538124][ T763] EXT4-fs (loop1): Remounting filesystem read-only [ 42.547699][ T763] EXT4-fs error (device loop1): ext4_ext_precache:607: inode #2: comm syz.1.78: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 42.569602][ T763] process 'syz.1.78' launched '/dev/fd/-1' with NULL argv: empty string added [ 42.619508][ T380] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 42.825419][ T676] usb 4-1: USB disconnect, device number 5 [ 42.859404][ T380] usb 1-1: Using ep0 maxpacket: 16 [ 42.860268][ T770] exfat: Deprecated parameter 'utf8' [ 42.870681][ T770] exfat: Deprecated parameter 'utf8' [ 42.894206][ T770] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 42.979476][ T380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.991935][ T380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.002897][ T380] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 43.003806][ T773] syz.3.80 uses obsolete (PF_INET,SOCK_PACKET) [ 43.013056][ T380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.031087][ T380] usb 1-1: config 0 descriptor?? [ 43.083074][ T779] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.110652][ T779] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue [ 43.157731][ T676] usb 5-1: USB disconnect, device number 3 [ 43.198923][ T791] netlink: 88 bytes leftover after parsing attributes in process `syz.4.85'. [ 43.222778][ T796] erofs: (device loop4): mounted with root inode @ nid 36. [ 43.232616][ T796] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 43.523403][ T807] overlayfs: workdir and upperdir must be separate subtrees [ 43.782411][ T809] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.018675][ T809] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,sysvgroups,data_err=ignore,barrier=0x000000000000007b,data_err=ignore,grpquota,dioread_nolock,nobarrier,resuid=0x0000000000000000,quota,,errors=continue [ 44.530638][ T809] netlink: 6 bytes leftover after parsing attributes in process `syz.2.92'. [ 44.658331][ T488] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 44.667561][ T380] apple 0003:05AC:0247.0003: unknown main item tag 0x7 [ 44.675787][ T380] apple 0003:05AC:0247.0003: report_id 0 is invalid [ 44.682888][ T380] apple 0003:05AC:0247.0003: item 0 2 1 8 parsing failed [ 44.690635][ T488] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 44.698612][ T380] apple 0003:05AC:0247.0003: parse failed [ 44.704651][ T380] apple: probe of 0003:05AC:0247.0003 failed with error -22 [ 44.712352][ T488] ftdi_sio 3-1:0.11: GPIO initialisation failed: -71 [ 44.721232][ T380] usb 1-1: USB disconnect, device number 4 [ 44.729117][ T488] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 44.739379][ T53] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 44.749875][ T488] usb 3-1: USB disconnect, device number 4 [ 44.759125][ T488] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 44.769572][ T815] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue [ 44.788532][ T488] ftdi_sio 3-1:0.11: device disconnected [ 44.796254][ T815] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.871916][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 44.871927][ T24] audit: type=1400 audit(1770074059.750:265): avc: denied { create } for pid=819 comm="syz.4.94" dev="anon_inodefs" ino=15330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.900487][ T24] audit: type=1400 audit(1770074059.770:266): avc: denied { ioctl } for pid=819 comm="syz.4.94" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15330 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.962841][ T805] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.996289][ T805] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 45.000072][ T824] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue [ 45.023035][ T824] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.074967][ T24] audit: type=1400 audit(1770074059.950:267): avc: denied { create } for pid=804 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.096146][ T24] audit: type=1400 audit(1770074059.970:268): avc: denied { write } for pid=804 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.115961][ T24] audit: type=1400 audit(1770074059.970:269): avc: denied { write } for pid=804 comm="syz.1.91" name="psched" dev="proc" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 45.140236][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.151489][ T488] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 45.159385][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.249489][ T53] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 45.259630][ T53] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 45.267827][ T53] usb 4-1: Manufacturer: syz [ 45.273115][ T53] usb 4-1: config 0 descriptor?? [ 45.349468][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 45.390552][ T839] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue [ 45.399409][ T488] usb 3-1: Using ep0 maxpacket: 8 [ 45.409484][ T839] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.539741][ T488] usb 3-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.553387][ T488] usb 3-1: config 0 interface 0 has no altsetting 0 [ 45.556268][ T24] audit: type=1400 audit(1770074060.430:270): avc: denied { ioctl } for pid=845 comm="syz.0.99" path="socket:[15348]" dev="sockfs" ino=15348 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.560505][ T488] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 45.595554][ T488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.605568][ T488] usb 3-1: config 0 descriptor?? [ 45.619442][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 45.782459][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.795661][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.808110][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 45.820046][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.931856][ T25] usb 2-1: config 0 descriptor?? [ 45.980061][ T25] hub 2-1:0.0: USB hub found [ 46.082848][ T862] EXT4-fs (loop4): Ignoring removed oldalloc option [ 46.092940][ T862] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue [ 46.172851][ T488] logitech-hidpp-device 0003:046D:C086.0005: hidraw0: USB HID v0.09 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 46.200731][ T53] input: syz Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0004/input/input5 [ 46.216219][ T24] audit: type=1400 audit(1770074061.090:271): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=640 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.216851][ T53] input: syz Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0004/input/input6 [ 46.240679][ T25] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 46.313606][ T24] audit: type=1400 audit(1770074061.090:272): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=640 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.341661][ T24] audit: type=1400 audit(1770074061.160:273): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=640 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.454152][ T53] uclogic 0003:256C:006D.0004: input,hidraw1: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 46.476394][ T53] usb 4-1: USB disconnect, device number 6 [ 46.548209][ T24] audit: type=1400 audit(1770074061.420:274): avc: denied { bind } for pid=871 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 46.574388][ T870] fido_id[870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 46.681508][ T25] hid-generic 0003:046D:C31C.0006: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 46.802785][ T874] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 46.814481][ T874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 46.846897][ T874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 46.862587][ T874] hub 6-0:1.0: USB hub found [ 46.868822][ T874] hub 6-0:1.0: 1 port detected [ 47.933241][ T880] EXT4-fs (loop4): Ignoring removed bh option [ 47.940354][ T880] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.970639][ T880] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,stripe=0x0000000000000009,dioread_nolock,,errors=continue [ 48.009481][ T455] usb 2-1: USB disconnect, device number 4 [ 48.070756][ T880] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3358: comm syz.4.108: Allocating blocks 385-513 which overlap fs metadata [ 48.090655][ T880] EXT4-fs (loop4): pa ffff8881107ca690: logic 16, phys. 129, len 24 [ 48.099352][ T880] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4375: group 0, free 0, pa_free 8 [ 48.139374][ T20] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 48.163369][ T488] usb 3-1: USB disconnect, device number 5 [ 48.303100][ T899] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.315636][ T899] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 48.326888][ T899] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 48.399364][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 48.449698][ T455] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 48.487188][ T903] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.494864][ T903] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.503310][ T903] device bridge_slave_0 entered promiscuous mode [ 48.514187][ T903] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.521594][ T903] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.529533][ T20] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 48.529844][ T903] device bridge_slave_1 entered promiscuous mode [ 48.543483][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.569495][ T20] usb 4-1: config 0 descriptor?? [ 48.610225][ T20] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 48.614074][ T903] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.625998][ T903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.633951][ T903] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.641566][ T903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.673721][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.685198][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.698512][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.709683][ T455] usb 1-1: Using ep0 maxpacket: 32 [ 48.732746][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.750319][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.757859][ T432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.767783][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.777105][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.784634][ T432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.797333][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.807933][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.829623][ T20] usb 4-1: Detected FT8U232AM [ 48.830208][ T903] device veth0_vlan entered promiscuous mode [ 48.835008][ T455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.848140][ T903] device veth1_macvtap entered promiscuous mode [ 48.862900][ T20] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 48.871952][ T916] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue [ 48.885735][ T455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.892421][ T916] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.901634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.925561][ T455] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 48.935970][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.944800][ T455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.954275][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.967222][ T455] usb 1-1: config 0 descriptor?? [ 48.973178][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.982266][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.990471][ T9] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 4) [ 48.990549][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.004917][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 49.013165][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.034473][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.034473][ T9] [ 49.045170][ T9] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 49.069766][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 49.084033][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.084033][ T9] [ 49.165140][ T884] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,lazytime,,errors=continue [ 49.181505][ T884] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.183078][ T924] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 49.203473][ T924] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.229686][ T280] usb 4-1: USB disconnect, device number 7 [ 49.236497][ T924] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.124: corrupted xattr block 128 [ 49.237410][ T933] device syzkaller0 entered promiscuous mode [ 49.249675][ T280] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 49.256914][ T924] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 49.267282][ T280] ftdi_sio 4-1:0.0: device disconnected [ 49.286129][ T933] syzkaller0: refused to change device tx_queue_len [ 49.492308][ T296] device bridge_slave_1 left promiscuous mode [ 49.500217][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.574560][ T296] device bridge_slave_0 left promiscuous mode [ 49.581248][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.582849][ T455] savu 0003:1E7D:2D5A.0007: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 49.602087][ T296] device veth1_macvtap left promiscuous mode [ 49.608511][ T296] device veth0_vlan left promiscuous mode [ 49.754246][ T952] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 49.795109][ T952] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.889154][ T24] kauditd_printk_skb: 79 callbacks suppressed [ 49.889163][ T24] audit: type=1400 audit(1770074064.760:354): avc: denied { write } for pid=975 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.921116][ T893] udc-core: couldn't find an available UDC or it's busy [ 49.929217][ T893] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.954984][ T24] audit: type=1400 audit(1770074064.830:355): avc: denied { mounton } for pid=979 comm="syz.3.144" path="/proc/70/task" dev="proc" ino=17767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 49.992629][ T488] usb 1-1: USB disconnect, device number 5 [ 50.066753][ T991] netlink: 212 bytes leftover after parsing attributes in process `syz.2.147'. [ 50.198887][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.206815][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.334045][ T1005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 50.362526][ T1007] bridge1: port 1(veth3) entered blocking state [ 50.379962][ T1007] bridge1: port 1(veth3) entered disabled state [ 50.401291][ T1007] device veth3 entered promiscuous mode [ 50.410558][ T1008] bridge1: port 2(vlan2) entered blocking state [ 50.443377][ T1008] bridge1: port 2(vlan2) entered disabled state [ 50.472280][ T1008] device vlan2 entered promiscuous mode [ 50.488474][ T1008] device veth1 entered promiscuous mode [ 50.502698][ T1010] netlink: 16 bytes leftover after parsing attributes in process `syz.5.156'. [ 50.698314][ T24] audit: type=1400 audit(1770074065.570:356): avc: denied { write } for pid=1035 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.812904][ T24] audit: type=1400 audit(1770074065.690:357): avc: denied { append } for pid=1048 comm="syz.2.173" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.840700][ T1051] usb usb1: usbfs: process 1051 (syz.2.173) did not claim interface 0 before use [ 50.920239][ T24] audit: type=1400 audit(1770074065.790:358): avc: denied { name_bind } for pid=1062 comm="syz.0.181" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 50.957058][ T1067] device syzkaller0 entered promiscuous mode [ 50.967196][ T1069] device erspan0 entered promiscuous mode [ 50.975872][ T1069] netlink: 16 bytes leftover after parsing attributes in process `syz.5.184'. [ 51.026494][ T1073] EXT4-fs (loop0): Ignoring removed bh option [ 51.109432][ T1073] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 51.117155][ T1073] EXT4-fs (loop0): Unrecognized mount option "=" or missing value [ 51.195668][ T24] audit: type=1400 audit(1770074066.070:359): avc: denied { read } for pid=1084 comm="syz.2.192" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 51.221267][ T24] audit: type=1400 audit(1770074066.100:360): avc: denied { open } for pid=1084 comm="syz.2.192" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 51.280567][ T1091] tipc: Started in network mode [ 51.285998][ T1091] tipc: Own node identity 7f000001, cluster identity 4711 [ 51.293733][ T1091] tipc: New replicast peer: 172.20.20.170 [ 51.300206][ T1091] tipc: Enabled bearer , priority 10 [ 51.365782][ T1096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.196'. [ 51.398827][ T1083] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,inode_readahead_blks=0x0000000008000000,nombcache,nodelalloc,init_itable,errors=remount-ro, [ 51.427350][ T1102] EXT4-fs (loop3): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 51.467674][ T1083] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.190: bg 0: block 392: padding at end of block bitmap is not set [ 51.483876][ T1083] EXT4-fs (loop1): Remounting filesystem read-only [ 51.519515][ T24] audit: type=1400 audit(1770074066.390:361): avc: denied { execute_no_trans } for pid=1082 comm="syz.1.190" path="/27/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.547913][ T1118] EXT4-fs (loop3): Ignoring removed nobh option [ 51.585148][ T1118] EXT4-fs (loop3): Ignoring removed bh option [ 51.591796][ T1118] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.618939][ T1118] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 51.658839][ T1126] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 51.668635][ T1126] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 51.729244][ T24] audit: type=1400 audit(1770074066.600:362): avc: denied { create } for pid=1137 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.840644][ T1139] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 51.887672][ T24] audit: type=1400 audit(1770074066.740:363): avc: denied { setopt } for pid=1149 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.942835][ T1157] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 51.990939][ T1157] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 52.260882][ T1198] EXT4-fs warning (device loop3): dx_probe:806: inode #2: comm syz.3.237: Unrecognised inode hash code 255 [ 52.276778][ T1189] EXT4-fs (loop0): 1 truncate cleaned up [ 52.282634][ T1198] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.237: Corrupt directory, running e2fsck is recommended [ 52.290960][ T1189] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue [ 52.297977][ T1198] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 52.309668][ T380] tipc: 32-bit node address hash set to 100007f [ 52.320278][ T1198] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2224: inode #15: comm syz.3.237: corrupted in-inode xattr [ 52.345600][ T1198] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.237: couldn't read orphan inode 15 (err -117) [ 52.364621][ T1198] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,dioread_lock,stripe=0x00000000000001f5,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue [ 52.431198][ T1198] EXT4-fs warning (device loop3): dx_probe:806: inode #2: comm syz.3.237: Unrecognised inode hash code 255 [ 52.475308][ T1198] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.237: Corrupt directory, running e2fsck is recommended [ 52.583170][ T1236] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue [ 52.596446][ T1236] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.614482][ T1246] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 52.628863][ T1246] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.645533][ T1246] EXT4-fs error (device loop5): htree_dirblock_to_tree:1092: inode #2: block 4: comm syz.5.257: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 52.719585][ T1236] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.254: corrupted xattr block 33 [ 52.733369][ T1236] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 52.743821][ T1236] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.254: corrupted xattr block 33 [ 52.756810][ T1236] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 52.767670][ T1236] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.254: corrupted xattr block 33 [ 52.770824][ T1253] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.254: corrupted xattr block 33 [ 52.781376][ T1236] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 52.797741][ T1253] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 52.804466][ T1236] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.254: corrupted xattr block 33 [ 52.814389][ T1253] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.254: corrupted xattr block 33 [ 52.828366][ T1254] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.254: corrupted xattr block 33 [ 52.840544][ T1253] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 52.863636][ T1254] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 52.876686][ T1254] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.254: corrupted xattr block 33 [ 52.894771][ T1254] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 52.896498][ T1236] fscrypt (loop0, inode 15): Error -117 getting encryption context [ 52.947324][ T1262] kernel profiling enabled (shift: 63) [ 52.959346][ T1262] profiling shift: 63 too large [ 53.039760][ T1268] attempt to access beyond end of device [ 53.039760][ T1268] loop5: rw=2049, want=234, limit=128 [ 53.052833][ T1268] attempt to access beyond end of device [ 53.052833][ T1268] loop5: rw=0, want=129, limit=128 [ 53.064044][ T1268] attempt to access beyond end of device [ 53.064044][ T1268] loop5: rw=0, want=233, limit=128 [ 53.179630][ T1276] ------------[ cut here ]------------ [ 53.185915][ T1276] Too BIG xdp->frame_sz = 16384 [ 53.191442][ T1276] WARNING: CPU: 1 PID: 1276 at net/core/filter.c:3928 bpf_xdp_adjust_tail+0x1aa/0x1c0 [ 53.201703][ T1276] Modules linked in: [ 53.205820][ T1276] CPU: 1 PID: 1276 Comm: syz.5.268 Not tainted syzkaller #0 [ 53.213625][ T1276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.224801][ T1276] RIP: 0010:bpf_xdp_adjust_tail+0x1aa/0x1c0 [ 53.231203][ T1276] Code: 48 89 d3 e8 b8 55 f8 fd 48 89 da e9 cb fe ff ff e8 2b d8 bd fd c6 05 1d b6 19 03 01 48 c7 c7 20 b0 6f 85 89 de e8 26 dc d2 00 <0f> 0b 48 c7 c0 ea ff ff ff e9 68 ff ff ff 0f 1f 84 00 00 00 00 00 [ 53.253659][ T1276] RSP: 0018:ffffc90000eaf798 EFLAGS: 00010246 [ 53.260608][ T1276] RAX: 778bd5956df99b00 RBX: 0000000000004000 RCX: 0000000000080000 [ 53.269426][ T1276] RDX: ffffc9000ae32000 RSI: 0000000000001b77 RDI: 0000000000001b78 [ 53.278631][ T1276] RBP: ffffc90000eaf7d8 R08: ffffc90000eaf127 R09: fffff520001d5e58 [ 53.288214][ T1276] R10: dffffc0000000000 R11: fffff520001d5e25 R12: ffffc90000eaf928 [ 53.296714][ T1276] R13: ffff888115e85236 R14: ffffc90000eaf920 R15: 1ffff920001d5f25 [ 53.305038][ T1276] FS: 00007fc00433f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 53.315677][ T1276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.323292][ T1276] CR2: 0000200000001000 CR3: 000000011fc60000 CR4: 00000000003506a0 [ 53.332143][ T1276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.341334][ T1276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.350477][ T1276] Call Trace: [ 53.354546][ T1276] ? 0xffffffffa0028090 [ 53.359744][ T1276] bpf_prog_5f065984e7f319a0+0x15/0xf70 [ 53.366207][ T1276] bpf_dispatcher_xdp_func+0x1f/0x30 [ 53.372399][ T1276] do_xdp_generic+0x7c7/0x1460 [ 53.378570][ T1276] ? generic_xdp_tx+0x470/0x470 [ 53.384884][ T1276] ? futex_wait_queue_me+0x2f2/0x520 [ 53.391551][ T1276] tun_get_user+0x22fe/0x3270 [ 53.396532][ T1276] ? tun_do_read+0x1c70/0x1c70 [ 53.401608][ T1276] ? netdev_run_todo+0xce3/0xd50 [ 53.406882][ T1276] ? avc_policy_seqno+0x1b/0x70 [ 53.411902][ T1276] ? selinux_file_permission+0x2a5/0x510 [ 53.418288][ T1276] ? fsnotify_perm+0x66/0x4b0 [ 53.423257][ T1276] tun_chr_write_iter+0x1bf/0x270 [ 53.429239][ T1276] vfs_write+0x758/0xdc0 [ 53.434210][ T1276] ? kernel_write+0x3c0/0x3c0 [ 53.439481][ T1276] ? fput_many+0x15a/0x1a0 [ 53.444014][ T1276] ? futex_exit_release+0x1d0/0x1d0 [ 53.449702][ T1276] ? __fget_files+0x2c4/0x320 [ 53.454942][ T1276] ? __fdget_pos+0x1f7/0x380 [ 53.459762][ T1276] ? ksys_write+0x71/0x250 [ 53.464661][ T1276] ksys_write+0x149/0x250 [ 53.470376][ T1276] ? __ia32_sys_read+0x90/0x90 [ 53.475923][ T1276] ? __kasan_check_read+0x11/0x20 [ 53.481792][ T1276] __x64_sys_write+0x7b/0x90 [ 53.486594][ T1276] do_syscall_64+0x31/0x40 [ 53.491342][ T1276] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.497857][ T1276] RIP: 0033:0x7fc0058a378e [ 53.502771][ T1276] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 53.524736][ T1276] RSP: 002b:00007fc00433efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.534537][ T1276] RAX: ffffffffffffffda RBX: 00007fc00433f6c0 RCX: 00007fc0058a378e [ 53.544756][ T1276] RDX: 0000000000001116 RSI: 0000200000000080 RDI: 00000000000000c8 [ 53.553588][ T1276] RBP: 00007fc005950c1f R08: 0000000000000000 R09: 0000000000000000 [ 53.561912][ T1276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.569950][ T1276] R13: 00007fc005b5e038 R14: 00007fc005b5dfa0 R15: 00007ffdc9b97f88 [ 53.578121][ T1276] ---[ end trace 1c007e37ad987d56 ]--- [ 53.583749][ T1276] Illegal XDP return value 4294967274, expect packet loss! [ 53.640040][ T1294] ================================================================== [ 53.648917][ T1294] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 53.658213][ T1294] Read of size 8 at addr ffff88811809c7c0 by task syz.5.274/1294 [ 53.668144][ T1294] [ 53.670698][ T1294] CPU: 0 PID: 1294 Comm: syz.5.274 Tainted: G W syzkaller #0 [ 53.681131][ T1294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.692378][ T1294] Call Trace: [ 53.695868][ T1294] __dump_stack+0x21/0x24 [ 53.701387][ T1294] dump_stack_lvl+0x1a7/0x208 [ 53.706656][ T1294] ? show_regs_print_info+0x18/0x18 [ 53.712723][ T1294] ? thaw_kernel_threads+0x220/0x220 [ 53.719901][ T1294] print_address_description+0x7f/0x2c0 [ 53.727865][ T1294] ? tc_setup_flow_action+0x842/0x3280 [ 53.734115][ T1294] kasan_report+0xe2/0x130 [ 53.739128][ T1294] ? flow_action_cookie_create+0x28/0x90 [ 53.744987][ T1294] ? tc_setup_flow_action+0x842/0x3280 [ 53.751320][ T1294] __asan_report_load8_noabort+0x14/0x20 [ 53.757939][ T1294] tc_setup_flow_action+0x842/0x3280 [ 53.764069][ T1294] ? __kmalloc+0x1a4/0x330 [ 53.769222][ T1294] ? flow_rule_alloc+0x32/0x2c0 [ 53.774776][ T1294] mall_replace_hw_filter+0x2cc/0x8a0 [ 53.781060][ T1294] ? pcpu_block_update_hint_alloc+0x8bf/0xc50 [ 53.787909][ T1294] ? mall_set_parms+0x410/0x410 [ 53.793522][ T1294] ? tcf_exts_destroy+0xb0/0xb0 [ 53.798749][ T1294] ? pcpu_alloc+0xf9b/0x16b0 [ 53.803840][ T1294] ? mall_set_parms+0x19d/0x410 [ 53.809086][ T1294] mall_change+0x546/0x760 [ 53.814717][ T1294] ? __kasan_check_write+0x14/0x20 [ 53.820735][ T1294] ? mall_get+0xa0/0xa0 [ 53.825913][ T1294] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 53.833748][ T1294] ? nla_strcmp+0xf4/0x140 [ 53.838755][ T1294] tc_new_tfilter+0x1452/0x1a90 [ 53.844218][ T1294] ? mall_get+0xa0/0xa0 [ 53.849483][ T1294] ? tcf_gate_entry_destructor+0x20/0x20 [ 53.856259][ T1294] ? security_capable+0x87/0xb0 [ 53.861801][ T1294] ? ns_capable+0x8c/0xf0 [ 53.866834][ T1294] ? netlink_net_capable+0x125/0x160 [ 53.872559][ T1294] ? tcf_gate_entry_destructor+0x20/0x20 [ 53.880055][ T1294] rtnetlink_rcv_msg+0x845/0xcc0 [ 53.885186][ T1294] ? rtnetlink_bind+0x80/0x80 [ 53.890793][ T1294] ? arch_stack_walk+0xee/0x140 [ 53.898291][ T1294] ? stack_trace_save+0xa6/0xf0 [ 53.903678][ T1294] ? stack_trace_snprint+0xf0/0xf0 [ 53.909094][ T1294] ? do_syscall_64+0x31/0x40 [ 53.915038][ T1294] ? avc_has_perm+0x168/0x3d0 [ 53.920570][ T1294] ? memcpy+0x56/0x70 [ 53.924818][ T1294] ? avc_has_perm+0x27f/0x3d0 [ 53.930365][ T1294] ? __kasan_slab_alloc+0xbd/0xf0 [ 53.936136][ T1294] ? slab_post_alloc_hook+0x5d/0x2f0 [ 53.942057][ T1294] ? avc_has_perm_noaudit+0x260/0x260 [ 53.947718][ T1294] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 53.953371][ T1294] netlink_rcv_skb+0x1f5/0x440 [ 53.959073][ T1294] ? rtnetlink_bind+0x80/0x80 [ 53.964276][ T1294] ? netlink_ack+0xb70/0xb70 [ 53.969454][ T1294] ? __netlink_lookup+0x387/0x3b0 [ 53.975541][ T1294] rtnetlink_rcv+0x1c/0x20 [ 53.980405][ T1294] netlink_unicast+0x876/0xa40 [ 53.985889][ T1294] netlink_sendmsg+0x89c/0xb50 [ 53.991333][ T1294] ? netlink_getsockopt+0x530/0x530 [ 53.997328][ T1294] ? security_socket_sendmsg+0x82/0xa0 [ 54.003755][ T1294] ? netlink_getsockopt+0x530/0x530 [ 54.009312][ T1294] ____sys_sendmsg+0x5b7/0x8f0 [ 54.015034][ T1294] ? __sys_sendmsg_sock+0x40/0x40 [ 54.020287][ T1294] ? import_iovec+0x7c/0xb0 [ 54.025913][ T1294] ___sys_sendmsg+0x236/0x2e0 [ 54.032093][ T1294] ? __sys_sendmsg+0x280/0x280 [ 54.037804][ T1294] ? alloc_file+0x82/0x540 [ 54.042853][ T1294] ? __fdget+0x1a1/0x230 [ 54.048580][ T1294] __x64_sys_sendmsg+0x1f9/0x2c0 [ 54.054894][ T1294] ? __kasan_check_write+0x14/0x20 [ 54.060673][ T1294] ? ___sys_sendmsg+0x2e0/0x2e0 [ 54.066105][ T1294] ? __kasan_check_read+0x11/0x20 [ 54.072069][ T1294] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 54.078549][ T1294] do_syscall_64+0x31/0x40 [ 54.083469][ T1294] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.089831][ T1294] RIP: 0033:0x7fc0058e2eb9 [ 54.094637][ T1294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.119698][ T1294] RSP: 002b:00007fc00433f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.129053][ T1294] RAX: ffffffffffffffda RBX: 00007fc005b5dfa0 RCX: 00007fc0058e2eb9 [ 54.138564][ T1294] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 54.146993][ T1294] RBP: 00007fc005950c1f R08: 0000000000000000 R09: 0000000000000000 [ 54.155320][ T1294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.164200][ T1294] R13: 00007fc005b5e038 R14: 00007fc005b5dfa0 R15: 00007ffdc9b97f88 [ 54.172571][ T1294] [ 54.174911][ T1294] Allocated by task 1294: [ 54.179648][ T1294] __kasan_kmalloc+0xda/0x110 [ 54.184633][ T1294] __kmalloc+0x1a4/0x330 [ 54.189069][ T1294] tcf_idr_create+0x5f/0x790 [ 54.194025][ T1294] tcf_idr_create_from_flags+0x61/0x70 [ 54.199910][ T1294] tcf_gact_init+0x2e6/0x560 [ 54.204513][ T1294] tcf_action_init_1+0x443/0x6e0 [ 54.211180][ T1294] tcf_action_init+0x227/0x780 [ 54.216559][ T1294] tcf_exts_validate+0x248/0x570 [ 54.221988][ T1294] mall_set_parms+0x4b/0x410 [ 54.226837][ T1294] mall_change+0x47a/0x760 [ 54.231536][ T1294] tc_new_tfilter+0x1452/0x1a90 [ 54.236772][ T1294] rtnetlink_rcv_msg+0x845/0xcc0 [ 54.243158][ T1294] netlink_rcv_skb+0x1f5/0x440 [ 54.248360][ T1294] rtnetlink_rcv+0x1c/0x20 [ 54.252857][ T1294] netlink_unicast+0x876/0xa40 [ 54.257790][ T1294] netlink_sendmsg+0x89c/0xb50 [ 54.262790][ T1294] ____sys_sendmsg+0x5b7/0x8f0 [ 54.267906][ T1294] ___sys_sendmsg+0x236/0x2e0 [ 54.273143][ T1294] __x64_sys_sendmsg+0x1f9/0x2c0 [ 54.278208][ T1294] do_syscall_64+0x31/0x40 [ 54.282820][ T1294] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.288730][ T1294] [ 54.291378][ T1294] The buggy address belongs to the object at ffff88811809c700 [ 54.291378][ T1294] which belongs to the cache kmalloc-192 of size 192 [ 54.306819][ T1294] The buggy address is located 0 bytes to the right of [ 54.306819][ T1294] 192-byte region [ffff88811809c700, ffff88811809c7c0) [ 54.321815][ T1294] The buggy address belongs to the page: [ 54.328372][ T1294] page:ffffea0004602700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11809c [ 54.338992][ T1294] flags: 0x4000000000000200(slab) [ 54.344135][ T1294] raw: 4000000000000200 ffffea000476fa00 0000000c0000000c ffff888100043380 [ 54.353027][ T1294] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 54.362584][ T1294] page dumped because: kasan: bad access detected [ 54.369629][ T1294] page_owner tracks the page as allocated [ 54.376131][ T1294] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 102, ts 7057330839, free_ts 0 [ 54.392363][ T1294] prep_new_page+0x179/0x180 [ 54.397670][ T1294] get_page_from_freelist+0x223b/0x23d0 [ 54.403622][ T1294] __alloc_pages_nodemask+0x290/0x620 [ 54.409584][ T1294] new_slab+0x84/0x3f0 [ 54.414216][ T1294] ___slab_alloc+0x2a6/0x450 [ 54.419363][ T1294] __slab_alloc+0x63/0xa0 [ 54.423987][ T1294] kmem_cache_alloc_trace+0x1b0/0x2e0 [ 54.429875][ T1294] kernfs_fop_open+0x343/0xb30 [ 54.434992][ T1294] do_dentry_open+0x793/0x1090 [ 54.440276][ T1294] vfs_open+0x73/0x80 [ 54.444271][ T1294] path_openat+0x280f/0x31c0 [ 54.449498][ T1294] do_filp_open+0x1e2/0x410 [ 54.454950][ T1294] do_sys_openat2+0x19f/0x750 [ 54.460075][ T1294] __x64_sys_openat+0x136/0x160 [ 54.465381][ T1294] do_syscall_64+0x31/0x40 [ 54.469965][ T1294] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.476076][ T1294] page_owner free stack trace missing [ 54.481704][ T1294] [ 54.484198][ T1294] Memory state around the buggy address: [ 54.490358][ T1294] ffff88811809c680: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 54.499145][ T1294] ffff88811809c700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.507922][ T1294] >ffff88811809c780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 54.516604][ T1294] ^ [ 54.523129][ T1294] ffff88811809c800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.531431][ T1294] ffff88811809c880: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 54.539611][ T1294] ================================================================== [ 54.548497][ T1294] Disabling lock debugging due to kernel taint [ 54.557599][ T1297] netlink: 'syz.3.275': attribute type 12 has an invalid length. [ 54.566265][ T1297] netlink: 'syz.3.275': attribute type 29 has an invalid length. [ 54.580110][ T1297] netlink: 148 bytes leftover after parsing attributes in process `syz.3.275'. [ 54.589937][ T1297] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 54.598541][ T1297] netlink: 'syz.3.275': attribute type 2 has an invalid length.