last executing test programs: 1m31.044272195s ago: executing program 1 (id=2): openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000107d1e2e2c00040000000109022400010000e010090400033f0300070009210b000b0122050009058103ff03000620"], 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)={0x0, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000080)=""/109, 0x6d) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x4e23, 0x0, 0x0, 0xe, 0xa, 0x0, 0x0, 0x0, r7, 0xee01}, {0xfffffffffffffeff, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d2, 0x32}, 0x2, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.pending_reads\x00', 0x400, 0x1ae) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002205000000"], 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2b637075202b637380d444781f454665745f796c73202d64657600636573202b72646d6120"], 0x25) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) 1m31.002340247s ago: executing program 2 (id=3): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$unix(0x1, 0x1, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x3) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x8}}, 0x18) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') io_submit(0x0, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 1m30.691197628s ago: executing program 2 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x60) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x104}], 0x1, 0x0, 0x0, 0x0) pread64(r2, &(0x7f0000000480), 0x1, 0x2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8002, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036b40f202104a000e1c8f200000109024500010000000009040000020202ff00052406000105240000000d240f010000000000f2ff000006241a000000042402d60a9d91037dad85e367571c78766f61af2ab179afa365f6a5b9e9751764609d2f86525ab3035b1d1f386f7cff95709f47b9bb0505c10e27f876c51ca3e1"], 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r5, r5, 0x0, 0xe3aa6ea) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000280)={0x5, 0x3, 0x1, 0x956d, 0x1, 0x0, [{0x10, 0x0, 0x6, '\x00', 0x500}]}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000100)=0x8, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r6 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) close(r7) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) close(0x3) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m27.824744132s ago: executing program 1 (id=14): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000200)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e000000000000cdee", 0x20, 0x480d4, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x8, 0x6, @multicast}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000080)={0x1, 0x1, 0xb3}) fcntl$lock(r5, 0x26, &(0x7f0000000400)={0x0, 0x2, 0x7, 0x6}) fcntl$lock(r5, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x7}) r6 = dup3(r4, r0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24060000", @ANYRES8=r7, @ANYBLOB, @ANYRES16=r7], 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) geteuid() mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1100, 0x1}) geteuid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/105, 0x69, 0x0, 0x11}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) recvfrom$inet6(r6, &(0x7f0000000500)=""/189, 0xbd, 0x142, &(0x7f0000000240)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 1m27.644694438s ago: executing program 1 (id=16): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@data_err_ignore}, {@nobh}]}, 0x1, 0x4bf, &(0x7f0000000540)="$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") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0x808) splice(r3, 0x0, r2, 0x0, 0x1000, 0x800000000000000) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) write$tun(r1, &(0x7f00000033c0)=ANY=[], 0x107c) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) 1m27.644565628s ago: executing program 32 (id=16): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@data_err_ignore}, {@nobh}]}, 0x1, 0x4bf, &(0x7f0000000540)="$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") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0x808) splice(r3, 0x0, r2, 0x0, 0x1000, 0x800000000000000) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) write$tun(r1, &(0x7f00000033c0)=ANY=[], 0x107c) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) 1m27.39554195s ago: executing program 2 (id=19): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0x100000002, 0x1000000000000000, 0x4}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/fscaps', 0x0, 0x166) utimensat(r4, 0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0xffc3, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000000)={0x4, 0x6, 0x3}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m26.839898005s ago: executing program 2 (id=24): syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x1000412, &(0x7f0000000440)={[{@grpjquota}, {@data_err_abort}, {@test_dummy_encryption}, {@nodioread_nolock}, {@bh}, {@jqfmt_vfsv1}, {@data_err_ignore}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@user_xattr}, {@nouid32}, {@dioread_nolock}], [{@subj_user={'subj_user', 0x3d, 'max_dir_size_kb'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@dont_hash}]}, 0x1, 0x571, &(0x7f0000000a80)="$eJzs3d9rW1UcAPDvTZv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0WRlNl9GkY60Dtwf34osMQcSB+K7vPsnwH/CvGOhgyCj64Evlpjdt1iZp1mZLt3w+cJNzcm5yzjf3npNzcxNuAANrNL3JRbwcEd8kEYcjIsnKhiMrHF1db/nh9al0SWJl5dO/k/p6ab7xWo3nHcwyL0XE719FnMxtrre6uDRbLJdL81l+rDZ3Zay6uHTq0lxxpjRTujwxOXnm7cmJ9959p2exvnH+3+8/ufvhma+PL3/3y/0jt5M4G4eysuY4duBGc2Y0RrP3JB9nN6w4vnrXizp3haTfDWBbhrJ+no90DDgcQ1mvby3/FFsGPGlfRsQKMKAS/R8GVGMe0Di279Fx8DPjwQerB0Cb4x9e/W4k9tWPeg4sJ48cGaXHuyM9qD+t49e/7txOl+jd9xAAW7pxMyJODw9vHv+SbPzbvtNdrLOxjubxb+8O6wc6u5vOf95sNf/Jrc1/osX852Dad3vwdXCn/p+14/7Oa2kvnf+933L+u3bSamQoy71Qn/Plk4uXyqV0bHsxIk5Efm+aH+9Qx5nleyvtyprnf+mS1t+YC2btuD+8YSCcLtaKO4m52YObEa+0nP8ma9s/abH90/fjfJd1HCvdea1d2dbxP1krP0W83nL7r5/RSjqfnxyr7w9jjb1is39uHfujXf39jj/d/gc6xz+SNJ+vrT5+HT/u+6/UruyR+KP7/X9P8lk9vad+e3OtbE/ycdPjEdeKtdr8xPpzG/n6/fhq/CeOdx7/1vf/39ZeZ39EfN5l/LeO/vzqvm7i79P2n36s7f/4iXsfffFDu/q7G//eqqdOZI90M/5t0a58bHtvBgAAAAAAgN0rFxGHIskV1tK5XKGw+vuOo3EgV65UaycvVhYuT0f9v7Ijkc81znQfbvo9xHj2e9hGfmJDfjIijkTEt0P76/nCVKU83e/gAQAAAAAAAAAAAAAAAAAAYJc42Ob//6k/h/rdOuCJ63TJb+D5tmX/3+mV4IBdy+c/DC79HwZX1/3fFZnhuePzHwaX/g+DS/+HwaX/w+DS/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly4ryw+vT6X56auLC7OVq6emS9XZwtzCVGGqMn+lMFOpzJRLhanK3FavV65UroxPxMK1sVqpWhurLi5dmKssXK5duDRXnCldKOWfSlQAAAAAAAAAAAAAAAAAAADwbKkuLs0Wy+XSvITEthLDu6MZEj1O9HtkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB1/wcAAP//VQ82IQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe75}], 0x1, 0x5405, 0x0, 0x0) 1m26.525952435s ago: executing program 2 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) syz_emit_ethernet(0x76, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1, [@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, @dstopts={0x4}]}}}}}}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) pipe(&(0x7f0000000440)) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77d77dcc76442b3c96cf0a66646e6f3d09c500e03377446b5a9a9bf59109e54c70c820f39b6ce8c8bd899772cade42e2738e39d05d8081647c1e518c133151a50fb42818f37f3f2db0b4d4f0ff00edb2014128ad0ae40ff6524fdc0047ca34ad89d3b88155a3ca06f8e4100dd2cff91bd88adbf5cf072c7a51", @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x0, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0) fstatfs(r6, 0x0) 1m26.525772225s ago: executing program 33 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) syz_emit_ethernet(0x76, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1, [@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, @dstopts={0x4}]}}}}}}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) pipe(&(0x7f0000000440)) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77d77dcc76442b3c96cf0a66646e6f3d09c500e03377446b5a9a9bf59109e54c70c820f39b6ce8c8bd899772cade42e2738e39d05d8081647c1e518c133151a50fb42818f37f3f2db0b4d4f0ff00edb2014128ad0ae40ff6524fdc0047ca34ad89d3b88155a3ca06f8e4100dd2cff91bd88adbf5cf072c7a51", @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x0, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0) fstatfs(r6, 0x0) 1m13.232596314s ago: executing program 4 (id=126): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) (async, rerun: 32) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000280)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x4f89619a144366c9}) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000002740)={{r1}, "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"}) (async) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f00000001c0)={0x2c, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @generic={0x2, 0x83, "0f117116ef6982b95999b492a0a6bd9ecde155186eab767b81a54104e304ebc76f36a43014843bb11419933426dc4bd6d5a889af1e05af5599737fcb24a185665b11974adefa30540bd4567669526a86688fe158f12124158ec3160f3d0b8b4b62dcd5f913e7c70924ba48a80a04bc55d28435aa0957606d999d4fb80d10ca4f3f3f5d"}]}, 0x90) (async) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)={0x2, 'hsr0\x00', {}, 0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000280)={@my=0x1}) (async) r5 = gettid() timer_create(0x7, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000044000)) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@i_version}, {@journal_dev={'journal_dev', 0x3d, 0x7fff}}, {@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x8, 0x5fc, &(0x7f00000004c0)="$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") (async) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=r5) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async, rerun: 64) r6 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) (async) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000001740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8860f5, 0x0, 0x3, 0x0, &(0x7f0000000140)) (async, rerun: 64) connect$vsock_stream(r7, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) (rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f00000000c0)=0x3, 0x8) 1m12.968624994s ago: executing program 4 (id=129): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x1, 0x0, 0x4, 0x3}}, 0x2e) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='cmdline\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x300, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x1000000, 0x2, 0x0, 0x0) 1m12.142663117s ago: executing program 4 (id=136): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.040624597s ago: executing program 4 (id=137): r0 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006cdd178921b51cdaf8c8e2cb34e0b07a50452fbb7e0b0b092f9464"], 0x1, 0x36b, &(0x7f0000000a00)="$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") r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x842, 0xe2) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x78) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="04000000040000000400000005", @ANYRESOCT, @ANYBLOB="cc076dbae2bc59ebdc3b4a11b324d23cc3d5c04fa13272a401d33312befb8f004f794d1df6edb20d24e0bac53a1a", @ANYRES16=r1], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f00000005c0)="1de026e8fc02d9ddd7184b65369f5684083bdc2bca2a42cf97908758ce7ee1b16d17bfee5f79189635e7157987df8e55f516fb6e40ddb9370100000088d1e71584f4dfcd", &(0x7f0000000640)=""/150}, 0x20) r6 = socket$inet(0x2, 0x800, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x82c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=r4, @ANYRES32=r7], 0x1, 0x293, &(0x7f0000002300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x3, &(0x7f00000003c0)=0x8000003) mmap(&(0x7f000035b000/0xf000)=nil, 0xf000, 0xb635773f06ebbeee, 0x40010, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r8, @ANYRES16, @ANYRESHEX=r6], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r12, 0x0, 0x0) connect$unix(r11, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffe59) fcntl$setstatus(r13, 0x4, 0x42a00) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), 0x0) 1m11.174742512s ago: executing program 4 (id=145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000180), 0x4000194, 0x142, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket(0x10, 0x80003, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27, 0x3, 0x4a1dd8c1, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}}, 0x50) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}], {}, [{0x8, 0x5}], {0x10, 0x4}, {0x20, 0x1}}, 0x34, 0x3) unshare(0x22020600) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pwritev2(r4, 0x0, 0x0, 0x6, 0x0, 0x9) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0xffff, @local}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x3841, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000001200)=""/253) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 1m11.014255502s ago: executing program 4 (id=146): r0 = socket(0x10, 0x3, 0x0) (async) timer_create(0x2, &(0x7f0000000140)={0x0, 0x12, 0x2}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="eb8919792dea", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000cc0)="41eef1398aa3", 0x6}], 0x1, &(0x7f0000001500)=[{0x10, 0x1, 0x1}], 0x10}}], 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1m10.996916688s ago: executing program 34 (id=146): r0 = socket(0x10, 0x3, 0x0) (async) timer_create(0x2, &(0x7f0000000140)={0x0, 0x12, 0x2}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="eb8919792dea", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000cc0)="41eef1398aa3", 0x6}], 0x1, &(0x7f0000001500)=[{0x10, 0x1, 0x1}], 0x10}}], 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) 5.508434737s ago: executing program 5 (id=1128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xc0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$binfmt_misc(r1, &(0x7f0000000040)="208475", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5.501545177s ago: executing program 5 (id=1130): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x40003) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x2000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(0x0, 0x800, 0x5) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 5.436761603s ago: executing program 5 (id=1132): ioctl$TCSETS(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={0x0, 0x0, 0xdffffffd, 0x40, 0x0, "bb4000000000000200"}) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) lseek(r0, 0x8, 0x4) 5.436654643s ago: executing program 5 (id=1134): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xfffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) 5.435042093s ago: executing program 5 (id=1136): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @loopback, 0x5}, 0x19) listen(r0, 0x7fff) 5.402736746s ago: executing program 5 (id=1138): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) 984.329717ms ago: executing program 0 (id=1481): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x7ff, 0x4) 975.062118ms ago: executing program 0 (id=1482): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x300, 0xfffe, 0x0, 0xfffffff9, 0x0}) 924.561262ms ago: executing program 0 (id=1483): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_type(r4, 0x0, 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) timer_create(0x5, 0x0, &(0x7f0000000040)) write$cgroup_pid(r6, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2030}], 0x1, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) 924.385372ms ago: executing program 7 (id=1484): mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x60400) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000001900)='./file0\x00') 901.171934ms ago: executing program 7 (id=1485): unshare(0x62040200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 823.610441ms ago: executing program 7 (id=1486): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) unshare(0x22020600) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) 777.656245ms ago: executing program 7 (id=1487): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") mount$9p_xen(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000400), 0x4010, &(0x7f0000000c40)) 777.288925ms ago: executing program 7 (id=1488): socket$packet(0x11, 0x3, 0x300) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2046) 710.639601ms ago: executing program 7 (id=1489): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r0, 0x0, r4, 0x0, 0x8000, 0x0) 268.749958ms ago: executing program 3 (id=1492): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") mkdir(&(0x7f0000000480)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {}, [], {}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x0) 268.594308ms ago: executing program 3 (id=1493): socket$inet6_udp(0xa, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004f700000400000001"], 0x48) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x2c020400) pselect6(0x81, &(0x7f0000000000)={0xa, 0x7ff, 0x100, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x6b40, 0x3, 0x0, 0x8, 0x1, 0x4000006, 0x8, 0x8080}, 0x0, 0x0) 268.551148ms ago: executing program 3 (id=1494): syz_emit_ethernet(0x2a, &(0x7f0000000e80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080600010800060400010180c20000c1c0c91f00"], 0x0) 266.816018ms ago: executing program 3 (id=1495): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="95a4ac9cd7d48a7c8c831e5d4cb04eedc3e591e3459cb15005589725d8e74d846b76c43285dcd847862cc602542d612b13898a77f93480455fb69f13ad7a6b6de3a32dbf8ad0a9d67d2059e9c28ba6", 0x4f}, {&(0x7f00000001c0)="2908da972c867cdc73ada843c8f3972dff49586ed4a954028768bc46999c7c7d41d1d41a2680695ff3e2ec6dfdc759a52974059c4f9804060c9e372e5def603a630d49627d6a7157f8d31877880120b33ef169283615fb9b9b295824dc3af7bd2883deb49b8084cba40160ba999f9451c2de904568cbaeae", 0x78}, {&(0x7f0000000280)="01f39a848f302a1157148550c82f5c951d1fa59b84b7b2d5573757bb016136eab16d8cf38f57901af92fda1c243ecac8b0bf0970d1543c9bec310bf2187624f52a58a42015bfc7bbf730265d2b", 0x4d}, {&(0x7f0000001440)="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", 0xeed}], 0x4) 257.629449ms ago: executing program 3 (id=1496): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x21000e, &(0x7f0000000140), 0x1, 0x553, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) chmod(&(0x7f0000000040)='./file0\x00', 0x19a) 243.13599ms ago: executing program 3 (id=1498): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r0, &(0x7f0000001c00), 0x40000000000017a, 0x40840) 74.169164ms ago: executing program 0 (id=1512): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x54}, 0x1, 0xba01, 0x0, 0x4000}, 0x4000000) 48.447156ms ago: executing program 6 (id=1517): prctl$PR_SET_SECUREBITS(0x1c, 0x18) prctl$PR_GET_KEEPCAPS(0x7) 47.995576ms ago: executing program 0 (id=1518): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendto(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 708.08µs ago: executing program 0 (id=1519): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000680)={0x7, 0x7fffffffffffffff, 0x80, 0x2, 0xfffffffffffffffb, 0xca, 0x3}, 0x0, &(0x7f0000000700)={0xf, 0x8, 0x40, 0x5, 0xffffffffffffffff, 0xac, 0xed6f, 0xe21}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 598.04µs ago: executing program 6 (id=1520): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00001e", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 394.02µs ago: executing program 6 (id=1521): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000844, &(0x7f0000000440)={[{@fat=@usefree}, {@fat=@errors_remount}, {@fat=@check_strict}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x43}}, {@nodots}, {@fat=@dos1xfloppy}, {@nodots}, {@dots}, {@dots}, {@fat=@nfs}, {@dots}, {@nodots}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 254.47µs ago: executing program 6 (id=1522): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) 181.25µs ago: executing program 6 (id=1523): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000140), 0x181084a, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'local'}}}]}) 0s ago: executing program 6 (id=1524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x1, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) kernel console output (not intermixed with test programs): rface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.088155][ T297] usb 7-1: config 0 descriptor?? [ 67.091628][ T1428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.296'. [ 67.093265][ T418] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.111711][ T25] usb 6-1: Cannot set MAC address [ 67.116755][ T25] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 67.124920][ T418] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 67.134468][ T297] ums-usbat 7-1:0.215: USB Mass Storage device detected [ 67.141985][ T25] usb 6-1: USB disconnect, device number 8 [ 67.148323][ T418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.158032][ T418] usb 1-1: config 0 descriptor?? [ 67.170409][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.177614][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.185100][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.192415][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.199600][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.206814][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.214047][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.221265][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.228453][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.235657][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.242852][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.250049][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.257229][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.264421][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.271615][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.278783][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.285981][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.293189][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.300391][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.307578][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.314804][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.322004][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.329184][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.336410][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.343622][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.350831][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.358012][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.365208][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.372417][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.379604][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.386943][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.394345][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.401557][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.408740][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.415945][ T421] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 67.423156][ T421] greenasia 0003:0E8F:0012.0006: item fetching failed at offset 40/41 [ 67.431427][ T421] greenasia 0003:0E8F:0012.0006: parse failed [ 67.437498][ T421] greenasia: probe of 0003:0E8F:0012.0006 failed with error -22 [ 67.446449][ T421] usb 4-1: USB disconnect, device number 14 [ 67.599843][ T54] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 67.733604][ T1456] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 67.742733][ T1456] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.893274][ T1460] device batadv_slave_1 entered promiscuous mode [ 68.157147][ T1442] EXT4-fs (loop0): Ignoring removed oldalloc option [ 68.163888][ T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.175773][ T1442] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue [ 68.184503][ T54] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 68.200650][ T1466] tmpfs: Unexpected value for 'inode32' [ 68.219860][ T418] uclogic 0003:28BD:0094.0007: pen parameters not found [ 68.226818][ T418] uclogic 0003:28BD:0094.0007: interface is invalid, ignoring [ 68.262162][ T1469] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 68.271240][ T1469] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.379856][ T54] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.388893][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.397031][ T54] usb 8-1: Product: syz [ 68.401265][ T54] usb 8-1: Manufacturer: syz [ 68.410730][ T54] usb 8-1: SerialNumber: syz [ 68.415846][ T422] usb 7-1: USB disconnect, device number 9 [ 68.547784][ T1455] device batadv_slave_1 left promiscuous mode [ 68.690191][ T1444] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 68.761117][ T418] usb 1-1: USB disconnect, device number 9 [ 68.930152][ T1491] fuse: Unknown parameter '„¢' [ 68.969846][ T297] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 69.169836][ T54] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 69.175840][ T54] cdc_ncm 8-1:1.0: bind() failure [ 69.184031][ T54] cdc_ncm 8-1:1.1: bind() failure [ 69.193003][ T54] usb 8-1: USB disconnect, device number 4 [ 69.440105][ T297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.457918][ T297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.470199][ T297] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.483286][ T297] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.499836][ T297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.508295][ T297] usb 6-1: config 0 descriptor?? [ 69.520466][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 69.520474][ T24] audit: type=1400 audit(2000000029.060:602): avc: denied { create } for pid=1502 comm="syz.6.320" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.520864][ T1505] fuse: Bad value for 'fd' [ 69.526474][ T24] audit: type=1400 audit(2000000029.060:603): avc: denied { mounton } for pid=1502 comm="syz.6.320" path="/51/file0" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.598406][ T1508] FAULT_INJECTION: forcing a failure. [ 69.598406][ T1508] name failslab, interval 1, probability 0, space 0, times 0 [ 69.611370][ T1508] CPU: 0 PID: 1508 Comm: syz.6.321 Tainted: G W syzkaller #0 [ 69.620035][ T1508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.630076][ T1508] Call Trace: [ 69.633363][ T1508] __dump_stack+0x21/0x24 [ 69.637695][ T1508] dump_stack_lvl+0x1a7/0x208 [ 69.642374][ T1508] ? show_regs_print_info+0x18/0x18 [ 69.647571][ T1508] dump_stack+0x15/0x1c [ 69.651720][ T1508] should_fail+0x3c1/0x510 [ 69.656133][ T1508] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 69.661588][ T1508] __should_failslab+0xa4/0xe0 [ 69.666343][ T1508] should_failslab+0x9/0x20 [ 69.670840][ T1508] __kmalloc_track_caller+0x5f/0x320 [ 69.676106][ T1508] ? kmem_cache_alloc+0x162/0x2d0 [ 69.681098][ T1508] ? __alloc_skb+0x9e/0x520 [ 69.683701][ T24] audit: type=1400 audit(2000000029.090:604): avc: denied { write } for pid=1502 comm="syz.6.320" name="file0" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.685574][ T1508] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 69.685585][ T1508] __alloc_skb+0xdc/0x520 [ 69.685600][ T1508] rtmsg_ifinfo_build_skb+0x7c/0x180 [ 69.708107][ T24] audit: type=1400 audit(2000000029.090:605): avc: denied { open } for pid=1502 comm="syz.6.320" path="/51/file0" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.713130][ T1508] rtmsg_ifinfo+0x7a/0x130 [ 69.713140][ T1508] netdev_state_change+0x190/0x230 [ 69.713148][ T1508] ? netdev_features_change+0x190/0x190 [ 69.713157][ T1508] ? set_operstate+0x220/0x2c0 [ 69.713166][ T1508] do_setlink+0x48d/0x3e10 [ 69.713175][ T1508] ? stack_trace_save+0xa6/0xf0 [ 69.713184][ T1508] ? __kasan_slab_alloc+0x69/0xf0 [ 69.713193][ T1508] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 69.713201][ T1508] ? rtnl_newlink+0x14b/0x18f0 [ 69.713217][ T1508] ? rtnl_newlink+0x14b/0x18f0 [ 69.717678][ T24] audit: type=1400 audit(2000000029.120:606): avc: denied { unlink } for pid=413 comm="syz-executor" name="file0" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.722766][ T1508] ? __kasan_kmalloc+0xec/0x110 [ 69.722775][ T1508] ? __kasan_kmalloc+0xda/0x110 [ 69.722785][ T1508] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 69.722795][ T1508] ? __nla_validate_parse+0x1e0b/0x26a0 [ 69.722805][ T1508] ? __nla_validate+0x60/0x60 [ 69.722821][ T1508] rtnl_newlink+0xed0/0x18f0 [ 69.846813][ T1508] ? rtnl_newlink+0x961/0x18f0 [ 69.851551][ T1508] ? rtnl_setlink+0x480/0x480 [ 69.856206][ T1508] ? memcpy+0x56/0x70 [ 69.860166][ T1508] ? cap_capable+0x19c/0x220 [ 69.864731][ T1508] ? __kasan_check_write+0x14/0x20 [ 69.869833][ T1508] ? mutex_lock+0x92/0xf0 [ 69.874143][ T1508] ? mutex_trylock+0xa0/0xa0 [ 69.878719][ T1508] ? ns_capable+0x8c/0xf0 [ 69.883025][ T1508] ? netlink_net_capable+0x125/0x160 [ 69.888296][ T1508] ? rtnl_setlink+0x480/0x480 [ 69.892953][ T1508] rtnetlink_rcv_msg+0xa31/0xcc0 [ 69.898481][ T1508] ? rtnetlink_bind+0x80/0x80 [ 69.903130][ T1508] ? arch_stack_walk+0xee/0x140 [ 69.907955][ T1508] ? stack_trace_save+0xa6/0xf0 [ 69.912775][ T1508] ? stack_trace_snprint+0xf0/0xf0 [ 69.917859][ T1508] ? avc_has_perm+0x168/0x3d0 [ 69.922506][ T1508] ? memcpy+0x56/0x70 [ 69.926460][ T1508] ? avc_has_perm+0x27f/0x3d0 [ 69.931107][ T1508] ? __kasan_slab_alloc+0xbd/0xf0 [ 69.936101][ T1508] ? slab_post_alloc_hook+0x5d/0x2f0 [ 69.941356][ T1508] ? avc_has_perm_noaudit+0x260/0x260 [ 69.946702][ T1508] ? selinux_nlmsg_lookup+0x3de/0x4a0 [ 69.952046][ T1508] netlink_rcv_skb+0x1f5/0x440 [ 69.956783][ T1508] ? rtnetlink_bind+0x80/0x80 [ 69.961432][ T1508] ? netlink_ack+0xb70/0xb70 [ 69.965991][ T1508] ? __netlink_lookup+0x387/0x3b0 [ 69.970988][ T1508] rtnetlink_rcv+0x1c/0x20 [ 69.975373][ T1508] netlink_unicast+0x876/0xa40 [ 69.980109][ T1508] netlink_sendmsg+0x89c/0xb50 [ 69.984846][ T1508] ? netlink_getsockopt+0x530/0x530 [ 69.990014][ T1508] ? kasan_set_track+0x5b/0x70 [ 69.994753][ T1508] ? slab_free_freelist_hook+0xc5/0x190 [ 70.000271][ T1508] ? security_socket_sendmsg+0x82/0xa0 [ 70.005702][ T1508] ? netlink_getsockopt+0x530/0x530 [ 70.010871][ T1508] ____sys_sendmsg+0x5b7/0x8f0 [ 70.015609][ T1508] ? __sys_sendmsg_sock+0x40/0x40 [ 70.020608][ T1508] ? import_iovec+0x7c/0xb0 [ 70.025085][ T1508] ___sys_sendmsg+0x236/0x2e0 [ 70.029735][ T1508] ? __sys_sendmsg+0x280/0x280 [ 70.034469][ T1508] ? rw_verify_area+0x1c0/0x360 [ 70.039295][ T1508] ? __fdget+0x1a1/0x230 [ 70.043510][ T1508] __x64_sys_sendmsg+0x1f9/0x2c0 [ 70.048417][ T1508] ? fput+0x1a/0x20 [ 70.052198][ T1508] ? ___sys_sendmsg+0x2e0/0x2e0 [ 70.057020][ T1508] ? debug_smp_processor_id+0x17/0x20 [ 70.062368][ T1508] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 70.068408][ T1508] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 70.074011][ T1508] do_syscall_64+0x31/0x40 [ 70.078403][ T1508] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 70.084268][ T1508] RIP: 0033:0x7f218c9a2629 [ 70.088661][ T1508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.108241][ T1508] RSP: 002b:00007f218b3fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.116628][ T1508] RAX: ffffffffffffffda RBX: 00007f218cc1bfa0 RCX: 00007f218c9a2629 [ 70.124577][ T1508] RDX: 0000000020000880 RSI: 0000200000000140 RDI: 0000000000000003 [ 70.132520][ T1508] RBP: 00007f218b3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 70.140464][ T1508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.148411][ T1508] R13: 00007f218cc1c038 R14: 00007f218cc1bfa0 R15: 00007ffc8dfd8f18 [ 70.205032][ T24] audit: type=1326 audit(2000000029.740:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab85098629 code=0x7ffc0000 [ 70.227554][ T1521] netlink: 32 bytes leftover after parsing attributes in process `syz.0.322'. [ 70.252917][ T24] audit: type=1326 audit(2000000029.740:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab85098629 code=0x7ffc0000 [ 70.276276][ T24] audit: type=1326 audit(2000000029.770:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fab85098629 code=0x7ffc0000 [ 70.299690][ T24] audit: type=1326 audit(2000000029.770:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab85098629 code=0x7ffc0000 [ 70.329838][ T24] audit: type=1326 audit(2000000029.770:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab85098629 code=0x7ffc0000 [ 70.349150][ T1523] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 70.362057][ T1523] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.395209][ T297] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 70.456881][ T297] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 70.519844][ T422] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 70.819219][ T1539] EXT4-fs (loop5): Ignoring removed oldalloc option [ 70.829783][ T1539] EXT4-fs (loop5): 1 truncate cleaned up [ 70.835530][ T1539] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005, [ 70.839846][ T54] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 70.999875][ T422] usb 1-1: Using ep0 maxpacket: 32 [ 71.099857][ T54] usb 4-1: Using ep0 maxpacket: 8 [ 71.119896][ T422] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 71.127939][ T422] usb 1-1: config 0 has no interface number 0 [ 71.134031][ T422] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.145016][ T422] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.154785][ T422] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 71.166629][ T422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.176417][ T422] usb 1-1: config 0 descriptor?? [ 71.259914][ T54] usb 4-1: unable to get BOS descriptor or descriptor too short [ 71.344988][ T1543] loop7: p1 p3 < > [ 71.352498][ T54] usb 4-1: config 7 has an invalid interface number: 230 but max is 0 [ 71.360709][ T54] usb 4-1: config 7 has no interface number 0 [ 71.366762][ T54] usb 4-1: config 7 interface 230 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 71.377872][ T54] usb 4-1: config 7 interface 230 altsetting 4 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 71.392843][ T54] usb 4-1: config 7 interface 230 altsetting 4 has an invalid endpoint with address 0xAE, skipping [ 71.403666][ T54] usb 4-1: config 7 interface 230 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 71.408971][ T1543] netlink: 36 bytes leftover after parsing attributes in process `syz.7.334'. [ 71.414584][ T54] usb 4-1: config 7 interface 230 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 71.434776][ T54] usb 4-1: config 7 interface 230 altsetting 4 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 71.448056][ T54] usb 4-1: config 7 interface 230 has no altsetting 0 [ 71.689858][ T54] usb 4-1: string descriptor 0 read error: -22 [ 71.696079][ T54] usb 4-1: New USB device found, idVendor=0b05, idProduct=17ba, bcdDevice=99.c1 [ 71.705138][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.891563][ T1528] EXT4-fs (loop0): Ignoring removed oldalloc option [ 71.899635][ T1528] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue [ 71.919926][ T422] uclogic 0003:28BD:0094.0009: pen parameters not found [ 71.926871][ T422] uclogic 0003:28BD:0094.0009: interface is invalid, ignoring [ 72.032021][ T1565] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 72.040951][ T1565] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,nodelalloc,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 72.075580][ T1565] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #2: block 16: comm syz.7.340: lblock 0 mapped to illegal pblock 16 (length 1) [ 72.090143][ T1565] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Out of memory [ 72.099260][ T1565] EXT4-fs error (device loop7): ext4_dirty_inode:6162: inode #2: comm syz.7.340: mark_inode_dirty error [ 72.264105][ T1570] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 72.279933][ T1570] EXT4-fs (loop7): Ignoring removed nobh option [ 72.322424][ T1570] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,mblk_io_submit,quota,nobh,,errors=continue [ 72.335146][ T25] usb 1-1: USB disconnect, device number 10 [ 72.341439][ T1570] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.373806][ T1570] EXT4-fs error (device loop7): ext4_find_dest_de:2079: inode #2: block 3: comm syz.7.341: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 72.400833][ T1580] EXT4-fs (loop5): dax option not supported [ 72.407701][ T1570] FAULT_INJECTION: forcing a failure. [ 72.407701][ T1570] name failslab, interval 1, probability 0, space 0, times 0 [ 72.412028][ T1576] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 72.429359][ T1570] CPU: 0 PID: 1570 Comm: syz.7.341 Tainted: G W syzkaller #0 [ 72.429393][ T1576] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.438011][ T1570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.438015][ T1570] Call Trace: [ 72.438032][ T1570] __dump_stack+0x21/0x24 [ 72.438042][ T1570] dump_stack_lvl+0x1a7/0x208 [ 72.438051][ T1570] ? show_regs_print_info+0x18/0x18 [ 72.438061][ T1570] dump_stack+0x15/0x1c [ 72.438069][ T1570] should_fail+0x3c1/0x510 [ 72.438088][ T1570] ? sidtab_sid2str_get+0x137/0x2c0 [ 72.510816][ T1570] __should_failslab+0xa4/0xe0 [ 72.515550][ T1570] should_failslab+0x9/0x20 [ 72.520026][ T1570] __kmalloc_track_caller+0x5f/0x320 [ 72.525278][ T1570] kmemdup+0x26/0x60 [ 72.529145][ T1570] sidtab_sid2str_get+0x137/0x2c0 [ 72.534139][ T1570] security_sid_to_context_core+0x2ac/0x480 [ 72.539997][ T1570] security_sid_to_context_force+0x36/0x40 [ 72.545771][ T1570] selinux_inode_init_security+0x673/0x960 [ 72.551543][ T1570] ? selinux_inode_free_security+0x210/0x210 [ 72.557489][ T1570] ? __kasan_check_write+0x14/0x20 [ 72.562565][ T1570] ? mutex_unlock+0x1c/0x40 [ 72.567037][ T1570] security_inode_init_security+0x167/0x3b0 [ 72.572901][ T1570] ? posix_acl_create+0x118/0x440 [ 72.577894][ T1570] ? ext4_init_security+0x40/0x40 [ 72.582888][ T1570] ? security_dentry_create_files_as+0xc0/0xc0 [ 72.589007][ T1570] ? flush_warnings+0x476/0x490 [ 72.593827][ T1570] ? dquot_alloc_inode+0x756/0x7d0 [ 72.598905][ T1570] ? __ext4_set_acl+0x600/0x600 [ 72.603724][ T1570] ext4_init_security+0x34/0x40 [ 72.608542][ T1570] __ext4_new_inode+0x2c1e/0x3630 [ 72.613534][ T1570] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 72.619221][ T1570] ? dquot_initialize+0x20/0x20 [ 72.620137][ T418] usb 6-1: USB disconnect, device number 9 [ 72.624045][ T1570] ? may_create+0x5d8/0x7d0 [ 72.624058][ T1570] ext4_mknod+0x21c/0x490 [ 72.624073][ T1570] ? ext4_rmdir+0x9e0/0x9e0 [ 72.643090][ T1570] ? selinux_inode_mknod+0x7b/0xa0 [ 72.648172][ T1570] ? security_inode_mknod+0xca/0x110 [ 72.653425][ T1570] vfs_mknod+0x4b8/0x580 [ 72.657638][ T1570] do_mknodat+0x288/0x5a0 [ 72.661939][ T1570] __x64_sys_mknod+0x80/0x90 [ 72.666504][ T1570] do_syscall_64+0x31/0x40 [ 72.670907][ T1570] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 72.676767][ T1570] RIP: 0033:0x7fcc997cc629 [ 72.681151][ T1570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.700728][ T1570] RSP: 002b:00007fcc98227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 72.709113][ T1570] RAX: ffffffffffffffda RBX: 00007fcc99a45fa0 RCX: 00007fcc997cc629 [ 72.717064][ T1570] RDX: 000000000000070f RSI: 0000000000002000 RDI: 00002000000009c0 [ 72.725009][ T1570] RBP: 00007fcc98227090 R08: 0000000000000000 R09: 0000000000000000 [ 72.732949][ T1570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.740894][ T1570] R13: 00007fcc99a46038 R14: 00007fcc99a45fa0 R15: 00007ffc8d530348 [ 72.895529][ T1592] netlink: 'syz.5.347': attribute type 1 has an invalid length. [ 72.903622][ T1592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1592 comm=syz.5.347 [ 73.060645][ T1596] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 73.082244][ T1596] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.129831][ T422] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 73.262093][ T1605] device batadv_slave_1 entered promiscuous mode [ 73.369874][ T418] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 73.509819][ T422] usb 8-1: Using ep0 maxpacket: 16 [ 73.639890][ T422] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.650031][ T422] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.749887][ T418] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 73.763678][ T421] usb 4-1: USB disconnect, device number 15 [ 73.814827][ T1595] device batadv_slave_1 left promiscuous mode [ 73.834625][ T1616] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 73.843685][ T1616] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.854922][ T422] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.868082][ T422] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.876377][ T422] usb 8-1: Product: syz [ 73.880658][ T422] usb 8-1: Manufacturer: syz [ 73.885278][ T422] usb 8-1: SerialNumber: syz [ 74.000097][ T418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.009481][ T418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.017584][ T418] usb 1-1: Product: à«áŠ…æ©Ÿê‹› [ 74.022851][ T418] usb 1-1: Manufacturer: ä•‹â““é¢à» ì¶¬ê•—枌ïŠâ¡¯à§©â¨ã¯£î´½à­¸ì‡¿é·¸î¦‡äµ€Â儯ﴥޑǮꓚ럄á¿ì­œê‰¥à­µï†™á†§ß‚颃畜袦ͺ뇯̌뽷Ⓝ [ 74.039244][ T418] usb 1-1: SerialNumber: ⧔㌡죮á»åº­ã½„ꘋ뤓쑛ã€åšªà±¦îŸá¾à½± [ 74.053217][ T1636] device batadv_slave_1 entered promiscuous mode [ 74.067374][ T1634] exfat: Deprecated parameter 'namecase' [ 74.077868][ T1634] exfat: Deprecated parameter 'namecase' [ 74.150589][ T1634] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd8f0c8a0, utbl_chksum : 0xe619d30d) [ 74.199968][ T1601] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 74.230067][ T286] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 74.239920][ T422] usb 8-1: 0:2 : does not exist [ 74.284324][ T422] usb 8-1: USB disconnect, device number 5 [ 74.464088][ T1644] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 74.473060][ T1644] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.504971][ T286] usb 6-1: Using ep0 maxpacket: 32 [ 74.510674][ T701] udevd[701]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.522215][ T1601] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 74.539035][ T1601] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.552084][ T1601] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 74.560923][ T1601] System zones: 0-1, 3-36 [ 74.566352][ T1601] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 74.637970][ T1615] device batadv_slave_1 left promiscuous mode [ 74.689914][ T286] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 74.697970][ T286] usb 6-1: config 0 has no interface number 0 [ 74.706595][ T286] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.717942][ T286] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.728093][ T1650] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 74.734798][ T286] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 74.743946][ T286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.752099][ T418] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 74.761873][ T286] usb 6-1: config 0 descriptor?? [ 74.768248][ T418] usb 1-1: USB disconnect, device number 11 [ 75.041640][ T1657] APIC base relocation is unsupported by KVM [ 75.126182][ T1661] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 75.141140][ T1661] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.211624][ T1665] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 75.310211][ T1670] device batadv_slave_1 entered promiscuous mode [ 75.509828][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 75.548331][ T1627] EXT4-fs (loop5): Ignoring removed oldalloc option [ 75.585958][ T1627] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue [ 75.644725][ T286] uclogic 0003:28BD:0094.000A: pen parameters not found [ 75.652007][ T286] uclogic 0003:28BD:0094.000A: interface is invalid, ignoring [ 75.735762][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 75.735772][ T24] audit: type=1400 audit(2000000000.860:617): avc: denied { bind } for pid=1673 comm="syz.6.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.779914][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 75.811608][ T1681] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue [ 75.835421][ T1681] EXT4-fs warning (device loop6): dx_probe:836: inode #2: comm syz.6.372: Unimplemented hash flags: 0x0001 [ 75.847050][ T1681] EXT4-fs warning (device loop6): dx_probe:946: inode #2: comm syz.6.372: Corrupt directory, running e2fsck is recommended [ 75.860368][ T1681] EXT4-fs warning (device loop6): dx_probe:836: inode #2: comm syz.6.372: Unimplemented hash flags: 0x0001 [ 75.871929][ T1681] EXT4-fs warning (device loop6): dx_probe:946: inode #2: comm syz.6.372: Corrupt directory, running e2fsck is recommended [ 75.885531][ T1681] EXT4-fs warning (device loop6): dx_probe:836: inode #2: comm syz.6.372: Unimplemented hash flags: 0x0001 [ 75.897041][ T1681] EXT4-fs warning (device loop6): dx_probe:946: inode #2: comm syz.6.372: Corrupt directory, running e2fsck is recommended [ 75.899868][ T25] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.910429][ T1681] EXT4-fs warning (device loop6): dx_probe:836: inode #2: comm syz.6.372: Unimplemented hash flags: 0x0001 [ 75.936954][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.938395][ T1660] device batadv_slave_1 left promiscuous mode [ 75.949931][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 75.959196][ T1681] EXT4-fs warning (device loop6): dx_probe:946: inode #2: comm syz.6.372: Corrupt directory, running e2fsck is recommended [ 75.976642][ T1681] EXT4-fs warning (device loop6): dx_probe:836: inode #2: comm syz.6.372: Unimplemented hash flags: 0x0001 [ 75.991210][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.998887][ T1681] EXT4-fs warning (device loop6): dx_probe:946: inode #2: comm syz.6.372: Corrupt directory, running e2fsck is recommended [ 76.002539][ T25] usb 1-1: config 0 descriptor?? [ 76.169994][ T1672] usb 6-1: USB disconnect, device number 10 [ 76.214091][ T1686] FAT-fs (loop3): Directory bread(block 64) failed [ 76.220765][ T1686] FAT-fs (loop3): Directory bread(block 65) failed [ 76.227300][ T1686] FAT-fs (loop3): Directory bread(block 66) failed [ 76.234069][ T1686] FAT-fs (loop3): Directory bread(block 67) failed [ 76.240606][ T1686] FAT-fs (loop3): Directory bread(block 68) failed [ 76.247131][ T1686] FAT-fs (loop3): Directory bread(block 69) failed [ 76.253650][ T1686] FAT-fs (loop3): Directory bread(block 70) failed [ 76.260182][ T1686] FAT-fs (loop3): Directory bread(block 71) failed [ 76.266677][ T1686] FAT-fs (loop3): Directory bread(block 72) failed [ 76.273240][ T1686] FAT-fs (loop3): Directory bread(block 73) failed [ 76.285749][ T1686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'. [ 76.384041][ T1698] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 76.393135][ T1698] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.478278][ T1703] FAULT_INJECTION: forcing a failure. [ 76.478278][ T1703] name failslab, interval 1, probability 0, space 0, times 0 [ 76.490943][ T1703] CPU: 1 PID: 1703 Comm: syz.3.377 Tainted: G W syzkaller #0 [ 76.499597][ T1703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.509633][ T1703] Call Trace: [ 76.512910][ T1703] __dump_stack+0x21/0x24 [ 76.517222][ T1703] dump_stack_lvl+0x1a7/0x208 [ 76.521882][ T1703] ? show_regs_print_info+0x18/0x18 [ 76.527241][ T1703] dump_stack+0x15/0x1c [ 76.531395][ T1703] should_fail+0x3c1/0x510 [ 76.535795][ T1703] ? __anon_vma_prepare+0x9a/0x420 [ 76.541007][ T1703] __should_failslab+0xa4/0xe0 [ 76.545755][ T1703] should_failslab+0x9/0x20 [ 76.550253][ T1703] kmem_cache_alloc+0x3d/0x2d0 [ 76.555007][ T1703] ? __anon_vma_prepare+0x51/0x420 [ 76.560105][ T1703] __anon_vma_prepare+0x9a/0x420 [ 76.565024][ T1703] wp_page_copy+0xfff/0x15f0 [ 76.569596][ T1703] ? __alloc_pages_nodemask+0x290/0x620 [ 76.575126][ T1703] ? trace_spf_pte_lock+0x110/0x110 [ 76.578429][ T1705] device batadv_slave_1 entered promiscuous mode [ 76.580314][ T1703] ? __kasan_check_write+0x14/0x20 [ 76.580331][ T1703] do_wp_page+0x9a6/0xc80 [ 76.596015][ T1703] handle_pte_fault+0xac1/0x3750 [ 76.600940][ T1703] handle_mm_fault+0xf81/0x1710 [ 76.605780][ T1703] ? can_reuse_spf_vma+0xe0/0xe0 [ 76.610704][ T1703] ? __kasan_check_write+0x14/0x20 [ 76.615799][ T1703] ? down_read_trylock+0x106/0x160 [ 76.620890][ T1703] ? __kasan_check_write+0x14/0x20 [ 76.625985][ T1703] ? can_reuse_spf_vma+0xc8/0xe0 [ 76.630903][ T1703] do_user_addr_fault+0x5a8/0xc90 [ 76.635913][ T1703] ? do_kern_addr_fault+0x80/0x80 [ 76.640918][ T1703] ? debug_smp_processor_id+0x17/0x20 [ 76.646276][ T1703] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 76.652328][ T1703] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 76.657956][ T1703] exc_page_fault+0x5a/0xc0 [ 76.662447][ T1703] ? asm_exc_page_fault+0x8/0x30 [ 76.667365][ T1703] asm_exc_page_fault+0x1e/0x30 [ 76.672195][ T1703] RIP: 0033:0x7fab84f4fa63 [ 76.676596][ T1703] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 76.696181][ T1703] RSP: 002b:00007fab83ab0470 EFLAGS: 00010202 [ 76.702233][ T1703] RAX: 0000000000000400 RBX: 00007fab83ab0530 RCX: 00007fab7b691000 [ 76.710183][ T1703] RDX: 00007fab83ab06d0 RSI: 0000000000000001 RDI: 00007fab83ab05d0 [ 76.718134][ T1703] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000b6 [ 76.726079][ T1703] R10: 00000000000000c6 R11: 00007fab83ab0530 R12: 0000000000000001 [ 76.734022][ T1703] R13: 00007fab8514e200 R14: 0000000000000020 R15: 00007fab83ab05d0 [ 76.742334][ T1703] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 76.821123][ T1703] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.848250][ T1703] EXT4-fs (loop3): 1 truncate cleaned up [ 76.854104][ T1703] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 76.909862][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 76.915845][ T25] usbhid: probe of 1-1:0.0 failed with error -71 [ 76.924091][ T25] usb 1-1: USB disconnect, device number 12 [ 76.962447][ T1713] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 76.971922][ T1713] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.085098][ T24] audit: type=1400 audit(2000000002.210:618): avc: denied { setattr } for pid=1716 comm="syz.5.381" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 77.108162][ T422] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 77.183130][ T1697] device batadv_slave_1 left promiscuous mode [ 77.278501][ T1719] binder: BINDER_SET_CONTEXT_MGR already set [ 77.284580][ T1719] binder: 1718:1719 ioctl 4018620d 200000004a80 returned -16 [ 77.347005][ T1724] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 77.392563][ T1721] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 77.469864][ T422] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.602596][ T1732] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 77.611665][ T1732] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.630144][ T1732] fscrypt (loop3, inode 12): Unsupported encryption flags (0x13) [ 77.649906][ T422] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 77.658984][ T422] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.667180][ T422] usb 8-1: Product: syz [ 77.671668][ T422] usb 8-1: Manufacturer: syz [ 77.676430][ T422] usb 8-1: SerialNumber: syz [ 77.683812][ T422] usb 8-1: config 0 descriptor?? [ 77.802941][ T1738] F2FS-fs (loop3): invalid crc value [ 77.809185][ T1738] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.831303][ T1738] F2FS-fs (loop3): Start checkpoint disabled! [ 77.837911][ T1738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 77.873081][ T1743] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 77.882085][ T1743] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.892372][ T423] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 77.920488][ T1708] netlink: 40 bytes leftover after parsing attributes in process `syz.7.379'. [ 77.929411][ T1708] netlink: 40 bytes leftover after parsing attributes in process `syz.7.379'. [ 77.939811][ T1708] input: syz1 as /devices/virtual/input/input8 [ 78.149931][ T422] snd-usb-audio: probe of 8-1:0.0 failed with error -2 [ 78.157606][ T422] usb 8-1: USB disconnect, device number 6 [ 78.189855][ T421] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 78.259863][ T423] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.267840][ T423] usb 6-1: config 0 has no interface number 0 [ 78.274030][ T423] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.283938][ T423] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.296914][ T423] usb 6-1: config 0 interface 1 has no altsetting 0 [ 78.303522][ T423] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 78.312678][ T423] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.321336][ T423] usb 6-1: config 0 descriptor?? [ 78.360408][ T423] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 78.379835][ T25] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 78.549872][ T421] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 78.562420][ T421] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.572709][ T421] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.585743][ T421] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 78.594874][ T421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.606516][ T421] usb 4-1: config 0 descriptor?? [ 78.629840][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 78.650270][ T421] usb-storage 4-1:0.0: USB Mass Storage device detected [ 78.667178][ T421] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 78.759840][ T25] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.767846][ T25] usb 7-1: config 0 has no interface number 0 [ 78.779820][ T25] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.799823][ T25] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.809565][ T25] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 78.818648][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.840162][ T25] usb 7-1: config 0 descriptor?? [ 78.880741][ T1736] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue [ 78.910792][ T24] audit: type=1400 audit(2000000004.040:619): avc: denied { setattr } for pid=1735 comm="syz.5.388" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.004758][ T1761] F2FS-fs (loop7): Invalid log blocks per segment (83886089) [ 79.012271][ T1761] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 79.021409][ T1766] EXT4-fs (loop0): Test dummy encryption mode enabled [ 79.028436][ T423] usb 6-1: USB disconnect, device number 11 [ 79.050473][ T1766] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,barrier=0x00000000000007ff,,errors=continue [ 79.080043][ T1766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 79.353451][ T1788] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 79.362429][ T1788] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.696188][ T1752] EXT4-fs (loop6): Ignoring removed oldalloc option [ 79.707019][ T1796] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 79.711915][ T1792] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 79.732937][ T1752] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue [ 79.736583][ T1792] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.821268][ T25] uclogic 0003:28BD:0094.000B: pen parameters not found [ 79.828401][ T25] uclogic 0003:28BD:0094.000B: interface is invalid, ignoring [ 79.965485][ T1801] device batadv_slave_1 entered promiscuous mode [ 80.301460][ T421] usb 7-1: USB disconnect, device number 10 [ 80.366024][ T1791] device batadv_slave_1 left promiscuous mode [ 80.398271][ T24] audit: type=1400 audit(2000000005.520:620): avc: denied { mount } for pid=1803 comm="syz.0.403" name="/" dev="configfs" ino=13301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 80.421076][ T24] audit: type=1400 audit(2000000005.520:621): avc: denied { remount } for pid=1803 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 80.441064][ T24] audit: type=1400 audit(2000000005.520:622): avc: denied { read } for pid=1803 comm="syz.0.403" name="/" dev="configfs" ino=13301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.463047][ T24] audit: type=1400 audit(2000000005.520:623): avc: denied { open } for pid=1803 comm="syz.0.403" path="/83/file0" dev="configfs" ino=13301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.489166][ T24] audit: type=1400 audit(2000000005.520:624): avc: denied { search } for pid=1803 comm="syz.0.403" name="/" dev="configfs" ino=13301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.512612][ T24] audit: type=1400 audit(2000000005.550:625): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 80.533641][ T1810] netlink: 40 bytes leftover after parsing attributes in process `syz.7.406'. [ 80.543166][ T1810] netlink: 40 bytes leftover after parsing attributes in process `syz.7.406'. [ 80.552053][ T1810] netlink: 40 bytes leftover after parsing attributes in process `syz.7.406'. [ 80.707321][ T25] usb 4-1: USB disconnect, device number 16 [ 80.820999][ T1808] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 80.829365][ T1808] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 80.840626][ T421] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 80.849472][ T1808] F2FS-fs (loop0): invalid crc value [ 80.862574][ T1808] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.893335][ T1826] netlink: 180 bytes leftover after parsing attributes in process `syz.6.410'. [ 80.893815][ T1808] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 80.903368][ T1826] netlink: 180 bytes leftover after parsing attributes in process `syz.6.410'. [ 80.911181][ T1808] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 80.923263][ T1826] netlink: 180 bytes leftover after parsing attributes in process `syz.6.410'. [ 80.976254][ T1822] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 81.000284][ T277] F2FS-fs (loop0): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:1407713280 [ 81.100362][ T1837] tmpfs: Unknown parameter 'fscontext18446744073709551615' [ 81.107928][ T24] audit: type=1400 audit(2000000006.230:626): avc: denied { write } for pid=1836 comm="syz.3.415" name="001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.166201][ T24] audit: type=1400 audit(2000000006.260:627): avc: denied { map } for pid=1836 comm="syz.3.415" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.190853][ T24] audit: type=1404 audit(2000000006.270:628): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 81.209917][ T421] usb 8-1: device descriptor read/all, error -71 [ 81.239819][ T24] audit: type=1400 audit(2000000006.270:629): avc: denied { map } for pid=1836 comm="syz.3.415" path="socket:[21954]" dev="sockfs" ino=21954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 81.271695][ T1841] FAULT_INJECTION: forcing a failure. [ 81.271695][ T1841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.274282][ T24] audit: type=1400 audit(2000000006.280:630): avc: denied { ioctl } for pid=1811 comm="syz.7.407" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 81.309671][ T24] audit: type=1400 audit(2000000006.280:631): avc: denied { mounton } for pid=1811 comm="syz.7.407" path="/48/file1" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 81.323982][ T1841] CPU: 0 PID: 1841 Comm: syz.3.417 Tainted: G W syzkaller #0 [ 81.333401][ T24] audit: type=1400 audit(2000000006.280:632): avc: denied { prog_load } for pid=1811 comm="syz.7.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 81.340608][ T1841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.340612][ T1841] Call Trace: [ 81.340627][ T1841] __dump_stack+0x21/0x24 [ 81.340643][ T1841] dump_stack_lvl+0x1a7/0x208 [ 81.359514][ T24] audit: type=1400 audit(2000000006.280:633): avc: denied { read write } for pid=372 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 81.369472][ T1841] ? show_regs_print_info+0x18/0x18 [ 81.369484][ T1841] ? 0xffffffffa002c000 [ 81.372791][ T24] audit: type=1400 audit(2000000006.310:634): avc: denied { read write } for pid=276 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 81.377042][ T1841] ? __kernel_text_address+0xa0/0x100 [ 81.390037][ T24] audit: type=1400 audit(2000000006.340:635): avc: denied { mounton } for pid=1840 comm="syz.3.417" path="/75" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 81.405596][ T1841] dump_stack+0x15/0x1c [ 81.405606][ T1841] should_fail+0x3c1/0x510 [ 81.405622][ T1841] should_fail_usercopy+0x1a/0x20 [ 81.479317][ T1841] _copy_from_user+0x20/0xd0 [ 81.483888][ T1841] __copy_msghdr_from_user+0x48a/0x630 [ 81.489322][ T1841] ? stack_trace_snprint+0xf0/0xf0 [ 81.494408][ T1841] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 81.499667][ T1841] ? kasan_set_track+0x5b/0x70 [ 81.504403][ T1841] ? kasan_set_track+0x4a/0x70 [ 81.509137][ T1841] ? kasan_set_free_info+0x23/0x40 [ 81.514218][ T1841] ? ____kasan_slab_free+0x125/0x160 [ 81.519474][ T1841] ? __kasan_slab_free+0x11/0x20 [ 81.524384][ T1841] ___sys_sendmsg+0x19a/0x2e0 [ 81.529037][ T1841] ? __sys_sendmsg+0x280/0x280 [ 81.533770][ T1841] ? kstrtouint_from_user+0x1c4/0x220 [ 81.539120][ T1841] __sys_sendmmsg+0x2ab/0x4c0 [ 81.543771][ T1841] ? __ia32_sys_sendmsg+0x2c0/0x2c0 [ 81.548946][ T1841] ? __ia32_sys_read+0x90/0x90 [ 81.553683][ T1841] ? debug_smp_processor_id+0x17/0x20 [ 81.559024][ T1841] __x64_sys_sendmmsg+0xa0/0xb0 [ 81.563845][ T1841] do_syscall_64+0x31/0x40 [ 81.568236][ T1841] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 81.574102][ T1841] RIP: 0033:0x7fab85098629 [ 81.578491][ T1841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.598069][ T1841] RSP: 002b:00007fab83af3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 81.606455][ T1841] RAX: ffffffffffffffda RBX: 00007fab85311fa0 RCX: 00007fab85098629 [ 81.614401][ T1841] RDX: 040000000000024e RSI: 0000200000001980 RDI: 0000000000000004 [ 81.622346][ T1841] RBP: 00007fab83af3090 R08: 0000000000000000 R09: 0000000000000000 [ 81.630289][ T1841] R10: 0000000020002040 R11: 0000000000000246 R12: 0000000000000001 [ 81.638237][ T1841] R13: 00007fab85312038 R14: 00007fab85311fa0 R15: 00007ffeb5566ff8 [ 81.974693][ T1867] netlink: 4 bytes leftover after parsing attributes in process `syz.7.425'. [ 82.007225][ T1867] netlink: 4 bytes leftover after parsing attributes in process `syz.7.425'. [ 82.133585][ T1874] kernel profiling enabled (shift: 63) [ 82.139115][ T1874] profiling shift: 63 too large [ 82.289282][ T1884] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.303575][ T1884] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.448547][ T1897] FAULT_INJECTION: forcing a failure. [ 82.448547][ T1897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.466358][ T1897] CPU: 0 PID: 1897 Comm: syz.3.435 Tainted: G W syzkaller #0 [ 82.475032][ T1897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.485080][ T1897] Call Trace: [ 82.488364][ T1897] __dump_stack+0x21/0x24 [ 82.492683][ T1897] dump_stack_lvl+0x1a7/0x208 [ 82.497350][ T1897] ? show_regs_print_info+0x18/0x18 [ 82.502537][ T1897] dump_stack+0x15/0x1c [ 82.506677][ T1897] should_fail+0x3c1/0x510 [ 82.511092][ T1897] should_fail_usercopy+0x1a/0x20 [ 82.516104][ T1897] _copy_to_iter+0x1df/0xa40 [ 82.520686][ T1897] ? __check_object_size+0x84/0x3c0 [ 82.525874][ T1897] tty_read+0x30a/0x5c0 [ 82.530018][ T1897] ? release_one_tty+0x310/0x310 [ 82.534959][ T1897] ? security_file_permission+0x83/0xa0 [ 82.540490][ T1897] ? iov_iter_init+0x3f/0x120 [ 82.545158][ T1897] vfs_read+0x62a/0xa60 [ 82.549305][ T1897] ? kernel_read+0x70/0x70 [ 82.553709][ T1897] ? __fget_files+0x2c4/0x320 [ 82.558373][ T1897] ? __fdget_pos+0x1f7/0x380 [ 82.562950][ T1897] ? ksys_read+0x71/0x250 [ 82.567268][ T1897] ksys_read+0x149/0x250 [ 82.571495][ T1897] ? vfs_write+0xdc0/0xdc0 [ 82.575901][ T1897] ? debug_smp_processor_id+0x17/0x20 [ 82.581259][ T1897] __x64_sys_read+0x7b/0x90 [ 82.585746][ T1897] do_syscall_64+0x31/0x40 [ 82.590150][ T1897] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 82.596032][ T1897] RIP: 0033:0x7fab85098629 [ 82.600431][ T1897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.620019][ T1897] RSP: 002b:00007fab83ad2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.628418][ T1897] RAX: ffffffffffffffda RBX: 00007fab85312090 RCX: 00007fab85098629 [ 82.636372][ T1897] RDX: 0000000000000fff RSI: 0000200000001d40 RDI: 0000000000000003 [ 82.644331][ T1897] RBP: 00007fab83ad2090 R08: 0000000000000000 R09: 0000000000000000 [ 82.652286][ T1897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.660245][ T1897] R13: 00007fab85312128 R14: 00007fab85312090 R15: 00007ffeb5566ff8 [ 82.860784][ T1905] FAULT_INJECTION: forcing a failure. [ 82.860784][ T1905] name failslab, interval 1, probability 0, space 0, times 0 [ 82.878587][ T1905] CPU: 1 PID: 1905 Comm: syz.7.439 Tainted: G W syzkaller #0 [ 82.887260][ T1905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.897302][ T1905] Call Trace: [ 82.900581][ T1905] __dump_stack+0x21/0x24 [ 82.904899][ T1905] dump_stack_lvl+0x1a7/0x208 [ 82.909561][ T1905] ? show_regs_print_info+0x18/0x18 [ 82.914755][ T1905] ? blk_mq_submit_bio+0x899/0x1820 [ 82.919938][ T1905] dump_stack+0x15/0x1c [ 82.924081][ T1905] should_fail+0x3c1/0x510 [ 82.928487][ T1905] ? mempool_alloc_slab+0x1d/0x30 [ 82.933498][ T1905] __should_failslab+0xa4/0xe0 [ 82.938250][ T1905] should_failslab+0x9/0x20 [ 82.942738][ T1905] kmem_cache_alloc+0x3d/0x2d0 [ 82.947485][ T1905] mempool_alloc_slab+0x1d/0x30 [ 82.952324][ T1905] ? mempool_free+0x340/0x340 [ 82.956992][ T1905] mempool_alloc+0x11e/0x460 [ 82.961571][ T1905] ? __kasan_check_write+0x14/0x20 [ 82.966685][ T1905] ? mempool_resize+0x840/0x840 [ 82.966696][ T1905] ? __mod_memcg_state+0xbc/0x230 [ 82.966707][ T1905] ? _raw_spin_unlock+0x4d/0x70 [ 82.966717][ T1905] ? __mod_node_page_state+0x9e/0xd0 [ 82.966734][ T1905] bio_alloc_bioset+0x18c/0x570 [ 82.991427][ T1905] ? xas_create+0x12ce/0x1450 [ 82.996072][ T1905] ? xas_create+0x12d5/0x1450 [ 83.000724][ T1905] get_swap_bio+0x87/0x350 [ 83.005111][ T1905] ? madvise_free_pte_range+0x1240/0x1240 [ 83.010800][ T1905] ? page_file_offset+0x180/0x180 [ 83.015795][ T1905] ? xas_store+0xc80/0x17f0 [ 83.020269][ T1905] ? bdev_write_page+0xf3/0x220 [ 83.025103][ T1905] ? madvise_free_pte_range+0x1240/0x1240 [ 83.025119][ T1905] __swap_writepage+0x146/0xb90 [ 83.035636][ T1905] ? xas_create+0x12ce/0x1450 [ 83.035645][ T1905] ? swap_writepage+0x70/0x70 [ 83.035662][ T1905] ? _raw_spin_lock+0x94/0xf0 [ 83.049589][ T1905] ? _raw_spin_trylock_bh+0x150/0x150 [ 83.054930][ T1905] ? _raw_spin_unlock+0x4d/0x70 [ 83.059753][ T1905] ? page_swapcount+0x25c/0x340 [ 83.064578][ T1905] ? try_to_free_swap+0x29b/0x9e0 [ 83.069584][ T1905] swap_writepage+0x58/0x70 [ 83.074068][ T1905] shmem_writepage+0xe83/0x10c0 [ 83.078890][ T1905] ? shmem_unused_huge_shrink+0xee0/0xee0 [ 83.084576][ T1905] ? wait_on_page_writeback+0x1e0/0x1e0 [ 83.090089][ T1905] shrink_page_list+0x2f60/0x4250 [ 83.095088][ T1905] ? generic_exec_single+0x21a/0x370 [ 83.100340][ T1905] ? reclaim_clean_pages_from_list+0x750/0x750 [ 83.106463][ T1905] ? smp_call_function_single+0x490/0x490 [ 83.112153][ T1905] ? smp_call_function_single+0x39a/0x490 [ 83.117843][ T1905] ? native_flush_tlb_others+0x230/0x230 [ 83.123444][ T1905] ? flush_smp_call_function_from_idle+0x190/0x190 [ 83.129915][ T1905] ? native_flush_tlb_others+0x230/0x230 [ 83.135517][ T1905] reclaim_pages+0x5cc/0x990 [ 83.140077][ T1905] ? isolate_lru_page+0x7f0/0x7f0 [ 83.145071][ T1905] ? __this_cpu_preempt_check+0x13/0x20 [ 83.150586][ T1905] madvise_cold_or_pageout_pte_range+0x1287/0x1800 [ 83.157056][ T1905] ? put_page+0xd0/0xd0 [ 83.161182][ T1905] ? smp_call_function_many_cond+0x91b/0xa00 [ 83.167131][ T1905] walk_pgd_range+0xb3b/0x13a0 [ 83.171866][ T1905] walk_page_range+0x3e1/0x540 [ 83.176599][ T1905] ? page_mapped_in_vma+0x400/0x400 [ 83.181763][ T1905] do_madvise+0x1a32/0x1d70 [ 83.186236][ T1905] ? madvise_set_anon_name+0x470/0x470 [ 83.191665][ T1905] ? memset+0x35/0x40 [ 83.195615][ T1905] ? __fsnotify_parent+0x6d2/0x7c0 [ 83.200694][ T1905] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 83.207254][ T1905] ? proc_fail_nth_read+0x220/0x220 [ 83.212438][ T1905] ? kernel_write+0x3c0/0x3c0 [ 83.217091][ T1905] ? __kasan_check_write+0x14/0x20 [ 83.222176][ T1905] ? mutex_lock+0x92/0xf0 [ 83.226475][ T1905] ? mutex_trylock+0xa0/0xa0 [ 83.231042][ T1905] ? __fget_files+0x2c4/0x320 [ 83.235711][ T1905] ? __kasan_check_write+0x14/0x20 [ 83.240806][ T1905] ? fput_many+0x15a/0x1a0 [ 83.245202][ T1905] ? ksys_write+0x1f4/0x250 [ 83.249677][ T1905] ? __ia32_sys_read+0x90/0x90 [ 83.254414][ T1905] ? debug_smp_processor_id+0x17/0x20 [ 83.259760][ T1905] __x64_sys_madvise+0xa9/0xc0 [ 83.264504][ T1905] do_syscall_64+0x31/0x40 [ 83.268902][ T1905] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 83.274773][ T1905] RIP: 0033:0x7fcc997cc629 [ 83.279166][ T1905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.298749][ T1905] RSP: 002b:00007fcc98227028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 83.307138][ T1905] RAX: ffffffffffffffda RBX: 00007fcc99a45fa0 RCX: 00007fcc997cc629 [ 83.315082][ T1905] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 83.323031][ T1905] RBP: 00007fcc98227090 R08: 0000000000000000 R09: 0000000000000000 [ 83.330978][ T1905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.338922][ T1905] R13: 00007fcc99a46038 R14: 00007fcc99a45fa0 R15: 00007ffc8d530348 [ 83.522074][ T1925] FAULT_INJECTION: forcing a failure. [ 83.522074][ T1925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.557079][ T1925] CPU: 0 PID: 1925 Comm: syz.7.446 Tainted: G W syzkaller #0 [ 83.565762][ T1925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.575803][ T1925] Call Trace: [ 83.579087][ T1925] __dump_stack+0x21/0x24 [ 83.583408][ T1925] dump_stack_lvl+0x1a7/0x208 [ 83.588070][ T1925] ? show_regs_print_info+0x18/0x18 [ 83.593247][ T1925] ? format_decode+0x1bb/0x1520 [ 83.598083][ T1925] dump_stack+0x15/0x1c [ 83.602221][ T1925] should_fail+0x3c1/0x510 [ 83.606619][ T1925] should_fail_usercopy+0x1a/0x20 [ 83.611632][ T1925] _copy_from_user+0x20/0xd0 [ 83.616206][ T1925] kstrtouint_from_user+0xd3/0x220 [ 83.621299][ T1925] ? kstrtol_from_user+0x2a0/0x2a0 [ 83.626401][ T1925] ? memset+0x35/0x40 [ 83.630367][ T1925] ? avc_policy_seqno+0x1b/0x70 [ 83.635201][ T1925] ? selinux_file_permission+0x2a5/0x510 [ 83.640817][ T1925] proc_fail_nth_write+0x8b/0x200 [ 83.645824][ T1925] ? proc_fail_nth_read+0x220/0x220 [ 83.651005][ T1925] ? rw_verify_area+0x1c0/0x360 [ 83.655839][ T1925] ? proc_fail_nth_read+0x220/0x220 [ 83.661022][ T1925] vfs_write+0x338/0xdc0 [ 83.665254][ T1925] ? kernel_write+0x3c0/0x3c0 [ 83.669936][ T1925] ? __kasan_check_write+0x14/0x20 [ 83.675038][ T1925] ? mutex_lock+0x92/0xf0 [ 83.679352][ T1925] ? mutex_trylock+0xa0/0xa0 [ 83.683929][ T1925] ? __fget_files+0x2c4/0x320 [ 83.688593][ T1925] ? __fdget_pos+0x2d2/0x380 [ 83.693169][ T1925] ? ksys_write+0x71/0x250 [ 83.697571][ T1925] ksys_write+0x149/0x250 [ 83.701886][ T1925] ? __ia32_sys_read+0x90/0x90 [ 83.706636][ T1925] ? debug_smp_processor_id+0x17/0x20 [ 83.711994][ T1925] __x64_sys_write+0x7b/0x90 [ 83.716778][ T1925] do_syscall_64+0x31/0x40 [ 83.721188][ T1925] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 83.727066][ T1925] RIP: 0033:0x7fcc9978cece [ 83.731471][ T1925] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.751061][ T1925] RSP: 002b:00007fcc98226fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.759464][ T1925] RAX: ffffffffffffffda RBX: 00007fcc982276c0 RCX: 00007fcc9978cece [ 83.767422][ T1925] RDX: 0000000000000001 RSI: 00007fcc982270a0 RDI: 0000000000000003 [ 83.775379][ T1925] RBP: 00007fcc98227090 R08: 0000000000000000 R09: 0000000000000000 [ 83.783344][ T1925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.791302][ T1925] R13: 00007fcc99a46038 R14: 00007fcc99a45fa0 R15: 00007ffc8d530348 [ 83.860163][ T1939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.452'. [ 83.881407][ T1939] FAULT_INJECTION: forcing a failure. [ 83.881407][ T1939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.900600][ T1939] CPU: 0 PID: 1939 Comm: syz.6.452 Tainted: G W syzkaller #0 [ 83.909269][ T1939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.919312][ T1939] Call Trace: [ 83.922589][ T1939] __dump_stack+0x21/0x24 [ 83.926903][ T1939] dump_stack_lvl+0x1a7/0x208 [ 83.931567][ T1939] ? thaw_kernel_threads+0x220/0x220 [ 83.936836][ T1939] ? show_regs_print_info+0x18/0x18 [ 83.942026][ T1939] ? slab_post_alloc_hook+0x7d/0x2f0 [ 83.947303][ T1939] dump_stack+0x15/0x1c [ 83.951444][ T1939] should_fail+0x3c1/0x510 [ 83.955774][ T1944] device bridge2 entered promiscuous mode [ 83.955851][ T1939] should_fail_usercopy+0x1a/0x20 [ 83.966537][ T1939] _copy_from_iter_full+0x1ac/0x750 [ 83.971724][ T1939] ? __check_object_size+0x2f4/0x3c0 [ 83.976995][ T1939] netlink_sendmsg+0x6fb/0xb50 [ 83.981745][ T1939] ? netlink_getsockopt+0x530/0x530 [ 83.986926][ T1939] ? kasan_set_track+0x5b/0x70 [ 83.991675][ T1939] ? slab_free_freelist_hook+0xc5/0x190 [ 83.997208][ T1939] ? security_socket_sendmsg+0x82/0xa0 [ 84.002652][ T1939] ? netlink_getsockopt+0x530/0x530 [ 84.007839][ T1939] ____sys_sendmsg+0x5b7/0x8f0 [ 84.012592][ T1939] ? __sys_sendmsg_sock+0x40/0x40 [ 84.017601][ T1939] ? import_iovec+0x7c/0xb0 [ 84.022089][ T1939] ___sys_sendmsg+0x236/0x2e0 [ 84.026754][ T1939] ? __sys_sendmsg+0x280/0x280 [ 84.031504][ T1939] ? rw_verify_area+0x1c0/0x360 [ 84.036346][ T1939] ? __fdget+0x1a1/0x230 [ 84.040576][ T1939] __x64_sys_sendmsg+0x1f9/0x2c0 [ 84.045502][ T1939] ? fput+0x1a/0x20 [ 84.049300][ T1939] ? ___sys_sendmsg+0x2e0/0x2e0 [ 84.054137][ T1939] ? debug_smp_processor_id+0x17/0x20 [ 84.059486][ T1939] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 84.065524][ T1939] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 84.071125][ T1939] do_syscall_64+0x31/0x40 [ 84.075517][ T1939] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 84.081376][ T1939] RIP: 0033:0x7f218c9a2629 [ 84.085760][ T1939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.105339][ T1939] RSP: 002b:00007f218b3fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.113740][ T1939] RAX: ffffffffffffffda RBX: 00007f218cc1bfa0 RCX: 00007f218c9a2629 [ 84.117446][ T1949] xt_hashlimit: size too large, truncated to 1048576 [ 84.121694][ T1939] RDX: 0000000000040020 RSI: 0000200000000280 RDI: 0000000000000006 [ 84.121700][ T1939] RBP: 00007f218b3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 84.121706][ T1939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.121712][ T1939] R13: 00007f218cc1c038 R14: 00007f218cc1bfa0 R15: 00007ffc8dfd8f18 [ 84.336307][ T1974] FAULT_INJECTION: forcing a failure. [ 84.336307][ T1974] name failslab, interval 1, probability 0, space 0, times 0 [ 84.348937][ T1974] CPU: 1 PID: 1974 Comm: syz.7.466 Tainted: G W syzkaller #0 [ 84.357586][ T1974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.367623][ T1974] Call Trace: [ 84.370903][ T1974] __dump_stack+0x21/0x24 [ 84.375218][ T1974] dump_stack_lvl+0x1a7/0x208 [ 84.379879][ T1974] ? show_regs_print_info+0x18/0x18 [ 84.385069][ T1974] dump_stack+0x15/0x1c [ 84.389210][ T1974] should_fail+0x3c1/0x510 [ 84.393615][ T1974] ? __inet_hash_connect+0x705/0xe10 [ 84.398887][ T1974] __should_failslab+0xa4/0xe0 [ 84.403636][ T1974] should_failslab+0x9/0x20 [ 84.408126][ T1974] kmem_cache_alloc+0x3d/0x2d0 [ 84.412878][ T1974] __inet_hash_connect+0x705/0xe10 [ 84.417972][ T1974] ? inet6_hash_connect+0xe0/0xe0 [ 84.422996][ T1974] ? __inet_unhash+0x430/0x430 [ 84.427743][ T1974] ? tcp_peek_sndq+0x230/0x230 [ 84.432496][ T1974] ? dst_release+0x5e/0x190 [ 84.436984][ T1974] inet6_hash_connect+0x91/0xe0 [ 84.441826][ T1974] tcp_v6_connect+0xf87/0x1ad0 [ 84.446575][ T1974] ? tcp_v6_pre_connect+0x70/0x70 [ 84.451586][ T1974] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 84.457121][ T1974] ? tcp_sendmsg+0x2f/0x50 [ 84.461523][ T1974] ? inet6_sendmsg+0xa5/0xc0 [ 84.466105][ T1974] __inet_stream_connect+0x28f/0xd80 [ 84.471377][ T1974] ? inet_dgram_connect+0x3f0/0x3f0 [ 84.476565][ T1974] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 84.482095][ T1974] ? tcp_sendmsg_fastopen+0x1b0/0x5c0 [ 84.487450][ T1974] tcp_sendmsg_fastopen+0x389/0x5c0 [ 84.492635][ T1974] tcp_sendmsg_locked+0x32ab/0x37d0 [ 84.497824][ T1974] ? _raw_spin_lock_bh+0x94/0xf0 [ 84.502747][ T1974] ? __local_bh_enable_ip+0x53/0x80 [ 84.507928][ T1974] ? local_bh_enable+0x1f/0x30 [ 84.512677][ T1974] ? lock_sock_nested+0x21c/0x2a0 [ 84.517688][ T1974] ? tcp_free_fastopen_req+0x80/0x80 [ 84.522960][ T1974] ? unwind_get_return_address+0x4d/0x90 [ 84.528582][ T1974] tcp_sendmsg+0x2f/0x50 [ 84.532813][ T1974] inet6_sendmsg+0xa5/0xc0 [ 84.537216][ T1974] ? inet6_compat_ioctl+0x340/0x340 [ 84.542398][ T1974] ____sys_sendmsg+0x5b7/0x8f0 [ 84.547150][ T1974] ? __sys_sendmsg_sock+0x40/0x40 [ 84.552165][ T1974] ? import_iovec+0x7c/0xb0 [ 84.556655][ T1974] ___sys_sendmsg+0x236/0x2e0 [ 84.561318][ T1974] ? __sys_sendmsg+0x280/0x280 [ 84.566065][ T1974] ? kstrtouint_from_user+0x1c4/0x220 [ 84.571430][ T1974] __sys_sendmmsg+0x2ab/0x4c0 [ 84.576090][ T1974] ? __ia32_sys_sendmsg+0x2c0/0x2c0 [ 84.581274][ T1974] ? __ia32_sys_read+0x90/0x90 [ 84.586024][ T1974] ? debug_smp_processor_id+0x17/0x20 [ 84.591381][ T1974] __x64_sys_sendmmsg+0xa0/0xb0 [ 84.596215][ T1974] do_syscall_64+0x31/0x40 [ 84.600615][ T1974] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 84.606488][ T1974] RIP: 0033:0x7fcc997cc629 [ 84.610891][ T1974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.630479][ T1974] RSP: 002b:00007fcc98227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 84.638877][ T1974] RAX: ffffffffffffffda RBX: 00007fcc99a45fa0 RCX: 00007fcc997cc629 [ 84.646835][ T1974] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 84.654797][ T1974] RBP: 00007fcc98227090 R08: 0000000000000000 R09: 0000000000000000 [ 84.662754][ T1974] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 84.670710][ T1974] R13: 00007fcc99a46038 R14: 00007fcc99a45fa0 R15: 00007ffc8d530348 [ 86.245358][ T24] kauditd_printk_skb: 282 callbacks suppressed [ 86.245373][ T24] audit: type=1400 audit(2000000011.370:918): avc: denied { read write } for pid=2022 comm="syz.0.483" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.330163][ T24] audit: type=1400 audit(2000000011.430:919): avc: denied { read write } for pid=413 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.409947][ T24] audit: type=1400 audit(2000000011.490:920): avc: denied { read write } for pid=372 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.414105][ T2032] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2032 comm=syz.7.487 [ 86.473391][ T2035] FAULT_INJECTION: forcing a failure. [ 86.473391][ T2035] name failslab, interval 1, probability 0, space 0, times 0 [ 86.499821][ T24] audit: type=1400 audit(2000000011.490:921): avc: denied { read write } for pid=860 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.560564][ T2035] CPU: 1 PID: 2035 Comm: syz.5.484 Tainted: G W syzkaller #0 [ 86.569236][ T2035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.579273][ T2035] Call Trace: [ 86.581711][ T24] audit: type=1400 audit(2000000011.490:922): avc: denied { module_request } for pid=2027 comm="syz.7.486" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 86.582556][ T2035] __dump_stack+0x21/0x24 [ 86.604722][ T24] audit: type=1400 audit(2000000011.490:923): avc: denied { sys_module } for pid=2027 comm="syz.7.486" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 86.608596][ T2035] dump_stack_lvl+0x1a7/0x208 [ 86.608610][ T2035] ? thaw_kernel_threads+0x220/0x220 [ 86.629810][ T24] audit: type=1400 audit(2000000011.490:924): avc: denied { create } for pid=2027 comm="syz.7.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 86.634056][ T2035] ? show_regs_print_info+0x18/0x18 [ 86.639305][ T24] audit: type=1400 audit(2000000011.500:925): avc: denied { read write } for pid=2027 comm="syz.7.486" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.658700][ T2035] dump_stack+0x15/0x1c [ 86.658709][ T2035] should_fail+0x3c1/0x510 [ 86.658720][ T2035] ? sock_wmalloc+0xb5/0x130 [ 86.658730][ T2035] __should_failslab+0xa4/0xe0 [ 86.658745][ T2035] should_failslab+0x9/0x20 [ 86.666529][ T24] audit: type=1400 audit(2000000011.500:926): avc: denied { execmem } for pid=2027 comm="syz.7.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 86.687654][ T2035] __kmalloc_track_caller+0x5f/0x320 [ 86.687664][ T2035] ? kmem_cache_alloc+0x162/0x2d0 [ 86.687674][ T2035] ? __kasan_check_write+0x14/0x20 [ 86.687684][ T2035] ? __alloc_skb+0x9e/0x520 [ 86.687698][ T2035] ? sock_wmalloc+0xb5/0x130 [ 86.699814][ T24] audit: type=1400 audit(2000000011.500:927): avc: denied { prog_load } for pid=2027 comm="syz.7.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.700778][ T2035] __alloc_skb+0xdc/0x520 [ 86.776443][ T2035] sock_wmalloc+0xb5/0x130 [ 86.780831][ T2035] unix_stream_connect+0x2e7/0xf90 [ 86.785913][ T2035] ? unix_bind+0x9e0/0x9e0 [ 86.790298][ T2035] __sys_connect+0x3ce/0x450 [ 86.794859][ T2035] ? __sys_connect_file+0x170/0x170 [ 86.800031][ T2035] ? debug_smp_processor_id+0x17/0x20 [ 86.805373][ T2035] __x64_sys_connect+0x7a/0x90 [ 86.810109][ T2035] do_syscall_64+0x31/0x40 [ 86.814496][ T2035] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 86.820356][ T2035] RIP: 0033:0x7fbe3a82a629 [ 86.824745][ T2035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.844329][ T2035] RSP: 002b:00007fbe39264028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 86.852718][ T2035] RAX: ffffffffffffffda RBX: 00007fbe3aaa4090 RCX: 00007fbe3a82a629 [ 86.860664][ T2035] RDX: 000000000000006e RSI: 00002000000004c0 RDI: 0000000000000006 [ 86.868611][ T2035] RBP: 00007fbe39264090 R08: 0000000000000000 R09: 0000000000000000 [ 86.876555][ T2035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.884498][ T2035] R13: 00007fbe3aaa4128 R14: 00007fbe3aaa4090 R15: 00007ffee673b548 [ 87.755076][ T2084] netlink: 188 bytes leftover after parsing attributes in process `syz.6.507'. [ 87.917011][ T2096] xt_hashlimit: size too large, truncated to 1048576 [ 88.019557][ T2096] xt_hashlimit: size too large, truncated to 1048576 [ 88.125251][ T2096] xt_hashlimit: size too large, truncated to 1048576 [ 88.289380][ T2104] netlink: 40 bytes leftover after parsing attributes in process `syz.7.515'. [ 88.294140][ T2096] xt_hashlimit: size too large, truncated to 1048576 [ 88.570991][ T2096] xt_hashlimit: size too large, truncated to 1048576 [ 89.128242][ T2146] FAULT_INJECTION: forcing a failure. [ 89.128242][ T2146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.141364][ T2146] CPU: 1 PID: 2146 Comm: syz.0.532 Tainted: G W syzkaller #0 [ 89.150008][ T2146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.160032][ T2146] Call Trace: [ 89.163296][ T2146] __dump_stack+0x21/0x24 [ 89.167597][ T2146] dump_stack_lvl+0x1a7/0x208 [ 89.172244][ T2146] ? thaw_kernel_threads+0x220/0x220 [ 89.177498][ T2146] ? vsnprintf+0x189c/0x1990 [ 89.182058][ T2146] ? show_regs_print_info+0x18/0x18 [ 89.187226][ T2146] dump_stack+0x15/0x1c [ 89.191351][ T2146] should_fail+0x3c1/0x510 [ 89.195737][ T2146] should_fail_usercopy+0x1a/0x20 [ 89.200734][ T2146] _copy_to_user+0x20/0x90 [ 89.205121][ T2146] simple_read_from_buffer+0xe9/0x160 [ 89.210464][ T2146] proc_fail_nth_read+0x1a6/0x220 [ 89.215460][ T2146] ? proc_fault_inject_write+0x310/0x310 [ 89.221065][ T2146] ? rw_verify_area+0x1c0/0x360 [ 89.225885][ T2146] ? proc_fault_inject_write+0x310/0x310 [ 89.231488][ T2146] vfs_read+0x209/0xa60 [ 89.235615][ T2146] ? kernel_read+0x70/0x70 [ 89.240003][ T2146] ? __kasan_check_write+0x14/0x20 [ 89.245083][ T2146] ? mutex_lock+0x92/0xf0 [ 89.249390][ T2146] ? mutex_trylock+0xa0/0xa0 [ 89.253969][ T2146] ? __fget_files+0x2c4/0x320 [ 89.258642][ T2146] ? __fdget_pos+0x2d2/0x380 [ 89.263211][ T2146] ? ksys_read+0x71/0x250 [ 89.267516][ T2146] ksys_read+0x149/0x250 [ 89.271731][ T2146] ? vfs_write+0xdc0/0xdc0 [ 89.276135][ T2146] ? __kasan_check_read+0x11/0x20 [ 89.281142][ T2146] __x64_sys_read+0x7b/0x90 [ 89.285621][ T2146] do_syscall_64+0x31/0x40 [ 89.290015][ T2146] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.295880][ T2146] RIP: 0033:0x7fefa33e8ece [ 89.300272][ T2146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.319852][ T2146] RSP: 002b:00007fefa1e61fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.328246][ T2146] RAX: ffffffffffffffda RBX: 00007fefa1e626c0 RCX: 00007fefa33e8ece [ 89.337502][ T2146] RDX: 000000000000000f RSI: 00007fefa1e620a0 RDI: 0000000000000004 [ 89.345460][ T2146] RBP: 00007fefa1e62090 R08: 0000000000000000 R09: 0000000000000000 [ 89.353415][ T2146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.361361][ T2146] R13: 00007fefa36a2128 R14: 00007fefa36a2090 R15: 00007ffe06027468 [ 91.088576][ T2226] FAULT_INJECTION: forcing a failure. [ 91.088576][ T2226] name failslab, interval 1, probability 0, space 0, times 0 [ 91.101235][ T2226] CPU: 0 PID: 2226 Comm: syz.0.566 Tainted: G W syzkaller #0 [ 91.109880][ T2226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.119907][ T2226] Call Trace: [ 91.123173][ T2226] __dump_stack+0x21/0x24 [ 91.127476][ T2226] dump_stack_lvl+0x1a7/0x208 [ 91.132127][ T2226] ? show_regs_print_info+0x18/0x18 [ 91.137295][ T2226] dump_stack+0x15/0x1c [ 91.141423][ T2226] should_fail+0x3c1/0x510 [ 91.145812][ T2226] ? audit_log_d_path+0xa2/0x200 [ 91.150733][ T2226] __should_failslab+0xa4/0xe0 [ 91.155487][ T2226] should_failslab+0x9/0x20 [ 91.159986][ T2226] kmem_cache_alloc_trace+0x3a/0x2e0 [ 91.165253][ T2226] ? audit_log_n_string+0x3af/0x5a0 [ 91.170429][ T2226] audit_log_d_path+0xa2/0x200 [ 91.175169][ T2226] audit_log_d_path_exe+0x42/0x70 [ 91.180173][ T2226] audit_log_task+0x214/0x300 [ 91.184832][ T2226] ? audit_core_dumps+0x110/0x110 [ 91.189838][ T2226] ? memset+0x35/0x40 [ 91.193796][ T2226] audit_seccomp+0x7f/0x160 [ 91.198279][ T2226] __seccomp_filter+0xc1a/0x1b00 [ 91.203207][ T2226] ? proc_fail_nth_read+0x220/0x220 [ 91.208388][ T2226] ? preempt_count_add+0x90/0x1b0 [ 91.213395][ T2226] ? __secure_computing+0x290/0x290 [ 91.218586][ T2226] ? vfs_write+0xb27/0xdc0 [ 91.222994][ T2226] ? kernel_write+0x3c0/0x3c0 [ 91.224850][ T2230] netlink: 'syz.6.568': attribute type 13 has an invalid length. [ 91.227659][ T2226] ? __kasan_check_write+0x14/0x20 [ 91.227668][ T2226] ? mutex_lock+0x92/0xf0 [ 91.227683][ T2226] ? mutex_trylock+0xa0/0xa0 [ 91.249335][ T2226] ? __fget_files+0x2c4/0x320 [ 91.254006][ T2226] ? __kasan_check_write+0x14/0x20 [ 91.259103][ T2226] ? fput_many+0x15a/0x1a0 [ 91.263509][ T2226] ? fput+0x1a/0x20 [ 91.267314][ T2226] ? ksys_write+0x1f4/0x250 [ 91.271811][ T2226] __secure_computing+0xea/0x290 [ 91.276738][ T2226] syscall_trace_enter+0xb5/0x170 [ 91.281755][ T2226] syscall_enter_from_user_mode+0x20/0x30 [ 91.287464][ T2226] do_syscall_64+0x13/0x40 [ 91.291874][ T2226] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 91.297757][ T2226] RIP: 0033:0x7fefa3428629 [ 91.302160][ T2226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.310435][ T24] kauditd_printk_skb: 450 callbacks suppressed [ 91.310446][ T24] audit: type=1400 audit(2000000016.400:1379): avc: denied { read write } for pid=860 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.321745][ T2226] RSP: 002b:00007fefa1e83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 91.321758][ T2226] RAX: ffffffffffffffda RBX: 00007fefa36a1fa0 RCX: 00007fefa3428629 [ 91.321764][ T2226] RDX: 0000000000000701 RSI: 0000000000000000 RDI: 0000200000000000 [ 91.321770][ T2226] RBP: 00007fefa1e83090 R08: 0000000000000000 R09: 0000000000000000 [ 91.321776][ T2226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.321782][ T2226] R13: 00007fefa36a2038 R14: 00007fefa36a1fa0 R15: 00007ffe06027468 [ 91.462237][ T24] audit: type=1326 audit(2000000016.210:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2225 comm="syz.0.566" exe="" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fefa3428629 code=0x7ffc0000 [ 91.502644][ T24] audit: type=1326 audit(2000000016.460:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2225 comm="syz.0.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fefa33e8ece code=0x7ffc0000 [ 91.525789][ T24] audit: type=1326 audit(2000000016.460:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2225 comm="syz.0.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fefa33e8ece code=0x7ffc0000 [ 91.549089][ T24] audit: type=1326 audit(2000000016.460:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2225 comm="syz.0.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fefa33e8ece code=0x7ffc0000 [ 91.572360][ T24] audit: type=1326 audit(2000000016.460:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2225 comm="syz.0.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa3428629 code=0x7ffc0000 [ 91.595693][ T2239] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 91.611224][ T24] audit: type=1326 audit(2000000016.460:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2225 comm="syz.0.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa3428629 code=0x7ffc0000 [ 91.634611][ T24] audit: type=1400 audit(2000000016.470:1385): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.668633][ T24] audit: type=1400 audit(2000000016.530:1386): avc: denied { read write } for pid=413 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.720148][ T24] audit: type=1400 audit(2000000016.540:1387): avc: denied { read write } for pid=2235 comm="syz.6.571" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.765229][ T2254] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 94.057900][ T2357] netlink: 5 bytes leftover after parsing attributes in process `syz.7.615'. [ 94.066885][ T2357] 0ªî{X¹¦: renamed from gretap0 [ 94.072347][ T2357] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 94.423993][ T2405] serio: Serial port ttyS3 [ 94.460779][ T2407] FAULT_INJECTION: forcing a failure. [ 94.460779][ T2407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.484331][ T2407] CPU: 0 PID: 2407 Comm: syz.0.635 Tainted: G W syzkaller #0 [ 94.493003][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.503047][ T2407] Call Trace: [ 94.506333][ T2407] __dump_stack+0x21/0x24 [ 94.510657][ T2407] dump_stack_lvl+0x1a7/0x208 [ 94.515325][ T2407] ? thaw_kernel_threads+0x220/0x220 [ 94.520597][ T2407] ? vsnprintf+0x189c/0x1990 [ 94.525177][ T2407] ? show_regs_print_info+0x18/0x18 [ 94.530366][ T2407] dump_stack+0x15/0x1c [ 94.534509][ T2407] should_fail+0x3c1/0x510 [ 94.538919][ T2407] should_fail_usercopy+0x1a/0x20 [ 94.543933][ T2407] _copy_to_user+0x20/0x90 [ 94.548341][ T2407] simple_read_from_buffer+0xe9/0x160 [ 94.553703][ T2407] proc_fail_nth_read+0x1a6/0x220 [ 94.558720][ T2407] ? proc_fault_inject_write+0x310/0x310 [ 94.564344][ T2407] ? rw_verify_area+0x1c0/0x360 [ 94.569184][ T2407] ? proc_fault_inject_write+0x310/0x310 [ 94.574809][ T2407] vfs_read+0x209/0xa60 [ 94.578956][ T2407] ? kernel_read+0x70/0x70 [ 94.583363][ T2407] ? __kasan_check_write+0x14/0x20 [ 94.588463][ T2407] ? mutex_lock+0x92/0xf0 [ 94.592783][ T2407] ? mutex_trylock+0xa0/0xa0 [ 94.597363][ T2407] ? __fget_files+0x2c4/0x320 [ 94.602031][ T2407] ? __fdget_pos+0x2d2/0x380 [ 94.606607][ T2407] ? ksys_read+0x71/0x250 [ 94.610930][ T2407] ksys_read+0x149/0x250 [ 94.615168][ T2407] ? vfs_write+0xdc0/0xdc0 [ 94.619575][ T2407] __x64_sys_read+0x7b/0x90 [ 94.624068][ T2407] do_syscall_64+0x31/0x40 [ 94.628478][ T2407] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 94.634358][ T2407] RIP: 0033:0x7fefa33e8ece [ 94.638764][ T2407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.658356][ T2407] RSP: 002b:00007fefa1e82fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.666761][ T2407] RAX: ffffffffffffffda RBX: 00007fefa1e836c0 RCX: 00007fefa33e8ece [ 94.674722][ T2407] RDX: 000000000000000f RSI: 00007fefa1e830a0 RDI: 0000000000000005 [ 94.682682][ T2407] RBP: 00007fefa1e83090 R08: 0000000000000000 R09: 0000000000000000 [ 94.690641][ T2407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.698604][ T2407] R13: 00007fefa36a2038 R14: 00007fefa36a1fa0 R15: 00007ffe06027468 [ 96.009123][ T2511] netlink: 28 bytes leftover after parsing attributes in process `syz.6.677'. [ 96.282980][ T24] kauditd_printk_skb: 694 callbacks suppressed [ 96.282991][ T24] audit: type=1400 audit(2000000021.410:2082): avc: denied { create } for pid=2542 comm="syz.7.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 96.338141][ T24] audit: type=1400 audit(2000000021.440:2083): avc: denied { read write } for pid=2542 comm="syz.7.692" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.379349][ T24] audit: type=1400 audit(2000000021.440:2084): avc: denied { read write } for pid=2542 comm="syz.7.692" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.422636][ T24] audit: type=1400 audit(2000000021.450:2085): avc: denied { read write } for pid=2540 comm="syz.3.691" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 96.469820][ T24] audit: type=1400 audit(2000000021.450:2086): avc: denied { create } for pid=2540 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 96.490101][ T24] audit: type=1400 audit(2000000021.450:2087): avc: denied { create } for pid=2540 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 96.509965][ T24] audit: type=1400 audit(2000000021.460:2088): avc: denied { read write } for pid=860 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.534705][ T24] audit: type=1400 audit(2000000021.460:2089): avc: denied { read } for pid=2545 comm="syz.7.693" dev="nsfs" ino=4026532330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 96.556157][ T24] audit: type=1400 audit(2000000021.460:2090): avc: denied { read } for pid=2545 comm="syz.7.693" dev="nsfs" ino=4026532330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 96.577640][ T24] audit: type=1400 audit(2000000021.540:2091): avc: denied { map_create } for pid=2545 comm="syz.7.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.827662][ T2572] syzkaller0: mtu greater than device maximum [ 97.171016][ T2592] netlink: 72 bytes leftover after parsing attributes in process `syz.3.714'. [ 97.230691][ T2596] netlink: 52 bytes leftover after parsing attributes in process `syz.3.716'. [ 97.351899][ T2608] xt_TCPMSS: Only works on TCP SYN packets [ 97.765853][ T2626] FAULT_INJECTION: forcing a failure. [ 97.765853][ T2626] name failslab, interval 1, probability 0, space 0, times 0 [ 97.779018][ T2626] CPU: 0 PID: 2626 Comm: syz.5.729 Tainted: G W syzkaller #0 [ 97.787688][ T2626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.797729][ T2626] Call Trace: [ 97.801011][ T2626] __dump_stack+0x21/0x24 [ 97.805325][ T2626] dump_stack_lvl+0x1a7/0x208 [ 97.809994][ T2626] ? show_regs_print_info+0x18/0x18 [ 97.815181][ T2626] ? __hw_addr_add_ex+0x1a1/0x5b0 [ 97.820198][ T2626] ? memcpy+0x56/0x70 [ 97.824174][ T2626] dump_stack+0x15/0x1c [ 97.828320][ T2626] should_fail+0x3c1/0x510 [ 97.832733][ T2626] ? kvmalloc_node+0x88/0x130 [ 97.837403][ T2626] __should_failslab+0xa4/0xe0 [ 97.842164][ T2626] should_failslab+0x9/0x20 [ 97.846664][ T2626] __kmalloc+0x60/0x330 [ 97.850807][ T2626] ? memset+0x35/0x40 [ 97.854780][ T2626] kvmalloc_node+0x88/0x130 [ 97.859275][ T2626] alloc_netdev_mqs+0x61e/0xc80 [ 97.864118][ T2626] rtnl_create_link+0x242/0x930 [ 97.868958][ T2626] veth_newlink+0x2cb/0xb60 [ 97.873447][ T2626] ? veth_validate+0x200/0x200 [ 97.878215][ T2626] ? rtnl_create_link+0x6e5/0x930 [ 97.883228][ T2626] ? veth_validate+0x200/0x200 [ 97.887982][ T2626] rtnl_newlink+0x1310/0x18f0 [ 97.892660][ T2626] ? rtnl_newlink+0x461/0x18f0 [ 97.897413][ T2626] ? rtnl_setlink+0x480/0x480 [ 97.902082][ T2626] ? memcpy+0x56/0x70 [ 97.906058][ T2626] ? cap_capable+0x19c/0x220 [ 97.910637][ T2626] ? __kasan_check_write+0x14/0x20 [ 97.915745][ T2626] ? mutex_lock+0x92/0xf0 [ 97.920168][ T2626] ? mutex_trylock+0xa0/0xa0 [ 97.924748][ T2626] ? ns_capable+0x8c/0xf0 [ 97.929071][ T2626] ? netlink_net_capable+0x125/0x160 [ 97.934344][ T2626] ? rtnl_setlink+0x480/0x480 [ 97.939011][ T2626] rtnetlink_rcv_msg+0xa31/0xcc0 [ 97.943938][ T2626] ? rtnetlink_bind+0x80/0x80 [ 97.948603][ T2626] ? arch_stack_walk+0xee/0x140 [ 97.953446][ T2626] ? stack_trace_save+0xa6/0xf0 [ 97.958281][ T2626] ? stack_trace_snprint+0xf0/0xf0 [ 97.963379][ T2626] ? avc_has_perm+0x168/0x3d0 [ 97.968149][ T2626] ? memcpy+0x56/0x70 [ 97.972125][ T2626] ? avc_has_perm+0x27f/0x3d0 [ 97.976791][ T2626] ? __kasan_slab_alloc+0xbd/0xf0 [ 97.981803][ T2626] ? slab_post_alloc_hook+0x5d/0x2f0 [ 97.987077][ T2626] ? avc_has_perm_noaudit+0x260/0x260 [ 97.992444][ T2626] ? selinux_nlmsg_lookup+0x3de/0x4a0 [ 97.997809][ T2626] netlink_rcv_skb+0x1f5/0x440 [ 98.002567][ T2626] ? rtnetlink_bind+0x80/0x80 [ 98.007234][ T2626] ? netlink_ack+0xb70/0xb70 [ 98.011811][ T2626] ? __netlink_lookup+0x387/0x3b0 [ 98.016823][ T2626] rtnetlink_rcv+0x1c/0x20 [ 98.021229][ T2626] netlink_unicast+0x876/0xa40 [ 98.025981][ T2626] netlink_sendmsg+0x89c/0xb50 [ 98.030733][ T2626] ? netlink_getsockopt+0x530/0x530 [ 98.035920][ T2626] ? kasan_set_track+0x5b/0x70 [ 98.040672][ T2626] ? slab_free_freelist_hook+0xc5/0x190 [ 98.046205][ T2626] ? security_socket_sendmsg+0x82/0xa0 [ 98.051648][ T2626] ? netlink_getsockopt+0x530/0x530 [ 98.056834][ T2626] ____sys_sendmsg+0x5b7/0x8f0 [ 98.061593][ T2626] ? __sys_sendmsg_sock+0x40/0x40 [ 98.066613][ T2626] ? import_iovec+0x7c/0xb0 [ 98.071107][ T2626] ___sys_sendmsg+0x236/0x2e0 [ 98.075778][ T2626] ? __sys_sendmsg+0x280/0x280 [ 98.080532][ T2626] ? rw_verify_area+0x1c0/0x360 [ 98.085381][ T2626] ? __fdget+0x1a1/0x230 [ 98.089615][ T2626] __x64_sys_sendmsg+0x1f9/0x2c0 [ 98.094545][ T2626] ? fput+0x1a/0x20 [ 98.098344][ T2626] ? ___sys_sendmsg+0x2e0/0x2e0 [ 98.103192][ T2626] ? debug_smp_processor_id+0x17/0x20 [ 98.108557][ T2626] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 98.114612][ T2626] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 98.120237][ T2626] do_syscall_64+0x31/0x40 [ 98.124651][ T2626] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 98.130533][ T2626] RIP: 0033:0x7fbe3a82a629 [ 98.134938][ T2626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.154525][ T2626] RSP: 002b:00007fbe39285028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.162910][ T2626] RAX: ffffffffffffffda RBX: 00007fbe3aaa3fa0 RCX: 00007fbe3a82a629 [ 98.170854][ T2626] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 98.178804][ T2626] RBP: 00007fbe39285090 R08: 0000000000000000 R09: 0000000000000000 [ 98.186748][ T2626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.194701][ T2626] R13: 00007fbe3aaa4038 R14: 00007fbe3aaa3fa0 R15: 00007ffee673b548 [ 98.227584][ T2644] FAULT_INJECTION: forcing a failure. [ 98.227584][ T2644] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.246339][ T2644] CPU: 0 PID: 2644 Comm: syz.6.736 Tainted: G W syzkaller #0 [ 98.255009][ T2644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.265048][ T2644] Call Trace: [ 98.268328][ T2644] __dump_stack+0x21/0x24 [ 98.272645][ T2644] dump_stack_lvl+0x1a7/0x208 [ 98.277312][ T2644] ? show_regs_print_info+0x18/0x18 [ 98.282499][ T2644] dump_stack+0x15/0x1c [ 98.286639][ T2644] should_fail+0x3c1/0x510 [ 98.291063][ T2644] should_fail_alloc_page+0x4f/0x60 [ 98.296250][ T2644] __alloc_pages_nodemask+0x119/0x620 [ 98.301614][ T2644] ? avc_has_perm_noaudit+0x135/0x260 [ 98.306972][ T2644] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 98.312506][ T2644] ? avc_has_perm_noaudit+0x172/0x260 [ 98.317868][ T2644] ? avc_denied+0x1b0/0x1b0 [ 98.322361][ T2644] new_slab+0x84/0x3f0 [ 98.326422][ T2644] ___slab_alloc+0x2a6/0x450 [ 98.331004][ T2644] ? kvmalloc_node+0x88/0x130 [ 98.335666][ T2644] ? selinux_capset+0xf0/0xf0 [ 98.340328][ T2644] __slab_alloc+0x63/0xa0 [ 98.344644][ T2644] ? kvmalloc_node+0x88/0x130 [ 98.349308][ T2644] ? kvmalloc_node+0x88/0x130 [ 98.353973][ T2644] __kmalloc+0x1fe/0x330 [ 98.358202][ T2644] ? kvmalloc_node+0x88/0x130 [ 98.362870][ T2644] kvmalloc_node+0x88/0x130 [ 98.367358][ T2644] xt_alloc_table_info+0x3b/0xa0 [ 98.372281][ T2644] do_ipt_set_ctl+0x85e/0xd70 [ 98.376948][ T2644] ? cleanup_entry+0x340/0x340 [ 98.381709][ T2644] ? __kasan_check_write+0x14/0x20 [ 98.386810][ T2644] ? mutex_lock+0x92/0xf0 [ 98.391132][ T2644] ? mutex_trylock+0xa0/0xa0 [ 98.395711][ T2644] ? _raw_spin_lock_bh+0x94/0xf0 [ 98.400640][ T2644] ? _raw_spin_lock_irq+0xf0/0xf0 [ 98.405656][ T2644] nf_setsockopt+0x272/0x2a0 [ 98.410239][ T2644] ip_setsockopt+0x28b1/0x3490 [ 98.414995][ T2644] ? ipv4_pktinfo_prepare+0x540/0x540 [ 98.420355][ T2644] ? 0xffffffffa002c000 [ 98.424501][ T2644] ? is_bpf_text_address+0x177/0x190 [ 98.429775][ T2644] ? __kernel_text_address+0xa0/0x100 [ 98.435141][ T2644] ? unwind_get_return_address+0x4d/0x90 [ 98.440768][ T2644] ? stack_trace_save+0xf0/0xf0 [ 98.445606][ T2644] ? arch_stack_walk+0xee/0x140 [ 98.450445][ T2644] ? stack_trace_save+0xa6/0xf0 [ 98.455280][ T2644] ? stack_trace_snprint+0xf0/0xf0 [ 98.460379][ T2644] ? __kasan_slab_alloc+0xcf/0xf0 [ 98.465391][ T2644] ? __kasan_slab_alloc+0xbd/0xf0 [ 98.470406][ T2644] ? slab_post_alloc_hook+0x5d/0x2f0 [ 98.475682][ T2644] ? kmem_cache_alloc+0x162/0x2d0 [ 98.480697][ T2644] ? security_inode_alloc+0x33/0x110 [ 98.485971][ T2644] ? inode_init_always+0x70a/0x9b0 [ 98.491070][ T2644] ? new_inode_pseudo+0x91/0x210 [ 98.495992][ T2644] ? new_inode+0x28/0x1e0 [ 98.500311][ T2644] ? proc_pid_make_inode+0x27/0x1d0 [ 98.505497][ T2644] ? proc_pident_instantiate+0x69/0x2b0 [ 98.511030][ T2644] ? proc_pident_lookup+0x1c0/0x270 [ 98.516215][ T2644] ? proc_tid_base_lookup+0x2b/0x30 [ 98.521404][ T2644] ? path_openat+0x1140/0x31c0 [ 98.526152][ T2644] ? do_filp_open+0x1e2/0x410 [ 98.530818][ T2644] ? do_sys_openat2+0x19f/0x750 [ 98.535661][ T2644] ? __x64_sys_openat+0x136/0x160 [ 98.540674][ T2644] ? do_syscall_64+0x31/0x40 [ 98.545259][ T2644] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 98.551316][ T2644] ? memcpy+0x56/0x70 [ 98.555289][ T2644] udp_setsockopt+0x8a/0xa0 [ 98.559780][ T2644] ipv6_setsockopt+0x296/0x3590 [ 98.564622][ T2644] ? avc_has_perm_noaudit+0x260/0x260 [ 98.569987][ T2644] ? ipv6_update_options+0x390/0x390 [ 98.575268][ T2644] ? 0xffffffffa002c000 [ 98.579421][ T2644] ? is_bpf_text_address+0x177/0x190 [ 98.584695][ T2644] ? __kernel_text_address+0xa0/0x100 [ 98.590061][ T2644] ? unwind_get_return_address+0x4d/0x90 [ 98.595683][ T2644] ? stack_trace_save+0xf0/0xf0 [ 98.600525][ T2644] ? arch_stack_walk+0xee/0x140 [ 98.605370][ T2644] ? stack_trace_save+0xa6/0xf0 [ 98.610211][ T2644] ? stack_trace_snprint+0xf0/0xf0 [ 98.615310][ T2644] ? path_openat+0x2970/0x31c0 [ 98.620063][ T2644] ? kasan_set_track+0x5b/0x70 [ 98.624816][ T2644] ? kasan_set_track+0x4a/0x70 [ 98.629579][ T2644] ? kasan_set_free_info+0x23/0x40 [ 98.634679][ T2644] ? ____kasan_slab_free+0x125/0x160 [ 98.639953][ T2644] ? __kasan_slab_free+0x11/0x20 [ 98.644883][ T2644] ? slab_free_freelist_hook+0xc5/0x190 [ 98.650422][ T2644] ? kmem_cache_free+0x100/0x2d0 [ 98.655347][ T2644] ? putname+0xfe/0x150 [ 98.659494][ T2644] ? do_sys_openat2+0x68e/0x750 [ 98.664333][ T2644] ? __x64_sys_openat+0x136/0x160 [ 98.669354][ T2644] ? do_syscall_64+0x31/0x40 [ 98.673939][ T2644] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 98.679994][ T2644] ? _kstrtoull+0x3c0/0x4d0 [ 98.682107][ T2665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.684488][ T2644] ? avc_has_perm+0x168/0x3d0 [ 98.684506][ T2644] ? memcpy+0x56/0x70 [ 98.708190][ T2644] ? avc_has_perm+0x27f/0x3d0 [ 98.712866][ T2644] ? avc_has_perm_noaudit+0x260/0x260 [ 98.718231][ T2644] tcp_setsockopt+0x22b/0x1db0 [ 98.722989][ T2644] ? selinux_socket_setsockopt+0x282/0x360 [ 98.728786][ T2644] ? tcp_sock_set_keepcnt+0xa0/0xa0 [ 98.733976][ T2644] ? __fget_files+0x2c4/0x320 [ 98.738645][ T2644] sock_common_setsockopt+0xa0/0xb0 [ 98.743832][ T2644] ? sock_common_recvmsg+0x1c0/0x1c0 [ 98.749108][ T2644] __sys_setsockopt+0x2fa/0x480 [ 98.753945][ T2644] ? __ia32_sys_recv+0xb0/0xb0 [ 98.758700][ T2644] ? ksys_write+0x1f4/0x250 [ 98.763200][ T2644] ? fput_many+0x15a/0x1a0 [ 98.767604][ T2644] __x64_sys_setsockopt+0xbf/0xd0 [ 98.772625][ T2644] do_syscall_64+0x31/0x40 [ 98.777029][ T2644] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 98.782905][ T2644] RIP: 0033:0x7f218c9a2629 [ 98.787308][ T2644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.806896][ T2644] RSP: 002b:00007f218b3fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.815302][ T2644] RAX: ffffffffffffffda RBX: 00007f218cc1bfa0 RCX: 00007f218c9a2629 [ 98.823262][ T2644] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 98.831221][ T2644] RBP: 00007f218b3fd090 R08: 00000000000004c8 R09: 0000000000000000 [ 98.839179][ T2644] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.847138][ T2644] R13: 00007f218cc1c038 R14: 00007f218cc1bfa0 R15: 00007ffc8dfd8f18 [ 99.445528][ T2709] FAULT_INJECTION: forcing a failure. [ 99.445528][ T2709] name failslab, interval 1, probability 0, space 0, times 0 [ 99.458208][ T2709] CPU: 0 PID: 2709 Comm: syz.0.760 Tainted: G W syzkaller #0 [ 99.466857][ T2709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.476888][ T2709] Call Trace: [ 99.480156][ T2709] __dump_stack+0x21/0x24 [ 99.484461][ T2709] dump_stack_lvl+0x1a7/0x208 [ 99.489108][ T2709] ? show_regs_print_info+0x18/0x18 [ 99.494295][ T2709] dump_stack+0x15/0x1c [ 99.498563][ T2709] should_fail+0x3c1/0x510 [ 99.502954][ T2709] ? kvmalloc_node+0x88/0x130 [ 99.507606][ T2709] __should_failslab+0xa4/0xe0 [ 99.512346][ T2709] should_failslab+0x9/0x20 [ 99.516825][ T2709] __kmalloc+0x60/0x330 [ 99.520953][ T2709] kvmalloc_node+0x88/0x130 [ 99.525427][ T2709] btf_new_fd+0x1e4/0xa00 [ 99.529732][ T2709] bpf_btf_load+0x5e/0x70 [ 99.534035][ T2709] __se_sys_bpf+0x4ea/0x740 [ 99.538512][ T2709] ? __x64_sys_bpf+0x90/0x90 [ 99.543090][ T2709] ? debug_smp_processor_id+0x17/0x20 [ 99.548447][ T2709] __x64_sys_bpf+0x7b/0x90 [ 99.552838][ T2709] do_syscall_64+0x31/0x40 [ 99.557237][ T2709] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 99.563111][ T2709] RIP: 0033:0x7fefa3428629 [ 99.567503][ T2709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.587081][ T2709] RSP: 002b:00007fefa1e83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.595466][ T2709] RAX: ffffffffffffffda RBX: 00007fefa36a1fa0 RCX: 00007fefa3428629 [ 99.603416][ T2709] RDX: 0000000000000028 RSI: 0000200000001e40 RDI: 0000000000000012 [ 99.611362][ T2709] RBP: 00007fefa1e83090 R08: 0000000000000000 R09: 0000000000000000 [ 99.619308][ T2709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.627261][ T2709] R13: 00007fefa36a2038 R14: 00007fefa36a1fa0 R15: 00007ffe06027468 [ 99.763028][ T2721] FAULT_INJECTION: forcing a failure. [ 99.763028][ T2721] name failslab, interval 1, probability 0, space 0, times 0 [ 99.775767][ T2721] CPU: 1 PID: 2721 Comm: syz.5.765 Tainted: G W syzkaller #0 [ 99.784425][ T2721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.794454][ T2721] Call Trace: [ 99.797724][ T2721] __dump_stack+0x21/0x24 [ 99.802029][ T2721] dump_stack_lvl+0x1a7/0x208 [ 99.806677][ T2721] ? thaw_kernel_threads+0x220/0x220 [ 99.811937][ T2721] ? show_regs_print_info+0x18/0x18 [ 99.817111][ T2721] ? __kasan_slab_free+0x11/0x20 [ 99.822028][ T2721] ? slab_free_freelist_hook+0xc5/0x190 [ 99.827560][ T2721] dump_stack+0x15/0x1c [ 99.831709][ T2721] should_fail+0x3c1/0x510 [ 99.836123][ T2721] ? alloc_workqueue+0x158/0x11a0 [ 99.841140][ T2721] __should_failslab+0xa4/0xe0 [ 99.845894][ T2721] should_failslab+0x9/0x20 [ 99.850389][ T2721] __kmalloc+0x60/0x330 [ 99.854535][ T2721] alloc_workqueue+0x158/0x11a0 [ 99.859375][ T2721] ? snprintf+0xe5/0x140 [ 99.863603][ T2721] ? idr_replace+0x1a0/0x1a0 [ 99.868184][ T2721] ? apply_workqueue_attrs+0x180/0x180 [ 99.873638][ T2721] hci_register_dev+0x1e6/0x830 [ 99.878481][ T2721] hci_uart_tty_ioctl+0x8e7/0xa70 [ 99.883496][ T2721] ? hci_uart_tty_write+0x10/0x10 [ 99.888506][ T2721] tty_ioctl+0x8dc/0xc60 [ 99.892747][ T2721] ? tty_do_resize+0x160/0x160 [ 99.897501][ T2721] __se_sys_ioctl+0x121/0x1a0 [ 99.902162][ T2721] __x64_sys_ioctl+0x7b/0x90 [ 99.906745][ T2721] do_syscall_64+0x31/0x40 [ 99.911150][ T2721] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 99.917029][ T2721] RIP: 0033:0x7fbe3a82a629 [ 99.921433][ T2721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.941024][ T2721] RSP: 002b:00007fbe39285028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.949432][ T2721] RAX: ffffffffffffffda RBX: 00007fbe3aaa3fa0 RCX: 00007fbe3a82a629 [ 99.957395][ T2721] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000004 [ 99.965357][ T2721] RBP: 00007fbe39285090 R08: 0000000000000000 R09: 0000000000000000 [ 99.973317][ T2721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.981269][ T2721] R13: 00007fbe3aaa4038 R14: 00007fbe3aaa3fa0 R15: 00007ffee673b548 [ 100.004639][ T2721] Bluetooth: Can't register HCI device [ 100.880153][ T2778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.783'. [ 101.308604][ T24] kauditd_printk_skb: 378 callbacks suppressed [ 101.308616][ T24] audit: type=1400 audit(2000000026.430:2470): avc: denied { read write } for pid=2800 comm="syz.3.790" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.375182][ T24] audit: type=1400 audit(2000000026.470:2471): avc: denied { read write } for pid=2800 comm="syz.3.790" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.429910][ T24] audit: type=1400 audit(2000000026.470:2472): avc: denied { read write } for pid=2771 comm="syz.5.782" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.478783][ T2810] device syzkaller0 entered promiscuous mode [ 101.505057][ T24] audit: type=1400 audit(2000000026.480:2473): avc: denied { create } for pid=2800 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 101.544869][ T24] audit: type=1400 audit(2000000026.480:2474): avc: denied { create } for pid=2800 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 101.579838][ T24] audit: type=1400 audit(2000000026.530:2475): avc: denied { read write } for pid=860 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.663095][ T24] audit: type=1326 audit(2000000026.540:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.7.791" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc997cc629 code=0x0 [ 101.710235][ T24] audit: type=1400 audit(2000000026.560:2477): avc: denied { read write } for pid=276 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.714002][ T2824] FAULT_INJECTION: forcing a failure. [ 101.714002][ T2824] name failslab, interval 1, probability 0, space 0, times 0 [ 101.758135][ T24] audit: type=1400 audit(2000000026.580:2478): avc: denied { read } for pid=2806 comm="syz.3.792" dev="nsfs" ino=4026532375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 101.799440][ T24] audit: type=1400 audit(2000000026.590:2479): avc: denied { read } for pid=2804 comm="syz.7.791" dev="nsfs" ino=4026532330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 101.843087][ T2824] CPU: 1 PID: 2824 Comm: syz.5.799 Tainted: G W syzkaller #0 [ 101.851767][ T2824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.861809][ T2824] Call Trace: [ 101.865098][ T2824] __dump_stack+0x21/0x24 [ 101.869648][ T2824] dump_stack_lvl+0x1a7/0x208 [ 101.874338][ T2824] ? show_regs_print_info+0x18/0x18 [ 101.879533][ T2824] dump_stack+0x15/0x1c [ 101.883682][ T2824] should_fail+0x3c1/0x510 [ 101.888095][ T2824] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 101.893562][ T2824] __should_failslab+0xa4/0xe0 [ 101.898319][ T2824] should_failslab+0x9/0x20 [ 101.902817][ T2824] __kmalloc_track_caller+0x5f/0x320 [ 101.908097][ T2824] ? kmem_cache_alloc+0x162/0x2d0 [ 101.913132][ T2824] ? __alloc_skb+0x9e/0x520 [ 101.917627][ T2824] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 101.923078][ T2824] __alloc_skb+0xdc/0x520 [ 101.927401][ T2824] rtmsg_ifinfo_build_skb+0x7c/0x180 [ 101.932765][ T2824] rtmsg_ifinfo+0x7a/0x130 [ 101.937181][ T2824] netdev_state_change+0x190/0x230 [ 101.942284][ T2824] ? netdev_features_change+0x190/0x190 [ 101.947821][ T2824] ? set_operstate+0x261/0x2c0 [ 101.952577][ T2824] do_setlink+0x48d/0x3e10 [ 101.956986][ T2824] ? stack_trace_save+0xa6/0xf0 [ 101.961826][ T2824] ? __kasan_slab_alloc+0x69/0xf0 [ 101.966844][ T2824] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 101.972998][ T2824] ? rtnl_newlink+0x14b/0x18f0 [ 101.977749][ T2824] ? rtnl_newlink+0x14b/0x18f0 [ 101.982500][ T2824] ? __kasan_kmalloc+0xec/0x110 [ 101.987336][ T2824] ? __kasan_kmalloc+0xda/0x110 [ 101.992181][ T2824] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 101.997716][ T2824] ? __nla_validate_parse+0x1e0b/0x26a0 [ 102.003357][ T2824] ? __nla_validate+0x60/0x60 [ 102.008032][ T2824] rtnl_newlink+0xed0/0x18f0 [ 102.012615][ T2824] ? rtnl_newlink+0x961/0x18f0 [ 102.017370][ T2824] ? rtnl_setlink+0x480/0x480 [ 102.022043][ T2824] ? memcpy+0x56/0x70 [ 102.026029][ T2824] ? cap_capable+0x19c/0x220 [ 102.030613][ T2824] ? __kasan_check_write+0x14/0x20 [ 102.035715][ T2824] ? mutex_lock+0x92/0xf0 [ 102.040037][ T2824] ? mutex_trylock+0xa0/0xa0 [ 102.044618][ T2824] ? ns_capable+0x8c/0xf0 [ 102.048942][ T2824] ? netlink_net_capable+0x125/0x160 [ 102.054218][ T2824] ? rtnl_setlink+0x480/0x480 [ 102.058886][ T2824] rtnetlink_rcv_msg+0xa31/0xcc0 [ 102.063816][ T2824] ? rtnetlink_bind+0x80/0x80 [ 102.068479][ T2824] ? arch_stack_walk+0xee/0x140 [ 102.073319][ T2824] ? stack_trace_save+0xa6/0xf0 [ 102.078155][ T2824] ? stack_trace_snprint+0xf0/0xf0 [ 102.083255][ T2824] ? avc_has_perm+0x168/0x3d0 [ 102.087933][ T2824] ? memcpy+0x56/0x70 [ 102.091905][ T2824] ? avc_has_perm+0x27f/0x3d0 [ 102.096574][ T2824] ? __kasan_slab_alloc+0xbd/0xf0 [ 102.101601][ T2824] ? slab_post_alloc_hook+0x5d/0x2f0 [ 102.106882][ T2824] ? avc_has_perm_noaudit+0x260/0x260 [ 102.112251][ T2824] ? selinux_nlmsg_lookup+0x3de/0x4a0 [ 102.117622][ T2824] netlink_rcv_skb+0x1f5/0x440 [ 102.122382][ T2824] ? rtnetlink_bind+0x80/0x80 [ 102.127050][ T2824] ? netlink_ack+0xb70/0xb70 [ 102.131630][ T2824] ? __netlink_lookup+0x387/0x3b0 [ 102.136645][ T2824] rtnetlink_rcv+0x1c/0x20 [ 102.141053][ T2824] netlink_unicast+0x876/0xa40 [ 102.145808][ T2824] netlink_sendmsg+0x89c/0xb50 [ 102.150563][ T2824] ? netlink_getsockopt+0x530/0x530 [ 102.155748][ T2824] ? kasan_set_track+0x5b/0x70 [ 102.160504][ T2824] ? slab_free_freelist_hook+0xc5/0x190 [ 102.166035][ T2824] ? security_socket_sendmsg+0x82/0xa0 [ 102.171466][ T2824] ? netlink_getsockopt+0x530/0x530 [ 102.176638][ T2824] ____sys_sendmsg+0x5b7/0x8f0 [ 102.181379][ T2824] ? __sys_sendmsg_sock+0x40/0x40 [ 102.186380][ T2824] ? import_iovec+0x7c/0xb0 [ 102.190860][ T2824] ___sys_sendmsg+0x236/0x2e0 [ 102.195513][ T2824] ? __sys_sendmsg+0x280/0x280 [ 102.200253][ T2824] ? rw_verify_area+0x1c0/0x360 [ 102.205077][ T2824] ? __fdget+0x1a1/0x230 [ 102.209294][ T2824] __x64_sys_sendmsg+0x1f9/0x2c0 [ 102.214207][ T2824] ? fput+0x1a/0x20 [ 102.217988][ T2824] ? ___sys_sendmsg+0x2e0/0x2e0 [ 102.222822][ T2824] ? debug_smp_processor_id+0x17/0x20 [ 102.228188][ T2824] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 102.234241][ T2824] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 102.239855][ T2824] do_syscall_64+0x31/0x40 [ 102.244257][ T2824] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 102.250130][ T2824] RIP: 0033:0x7fbe3a82a629 [ 102.254524][ T2824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.274102][ T2824] RSP: 002b:00007fbe39285028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.282490][ T2824] RAX: ffffffffffffffda RBX: 00007fbe3aaa3fa0 RCX: 00007fbe3a82a629 [ 102.290437][ T2824] RDX: 0000000020000880 RSI: 0000200000000140 RDI: 0000000000000003 [ 102.298384][ T2824] RBP: 00007fbe39285090 R08: 0000000000000000 R09: 0000000000000000 [ 102.306331][ T2824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.314281][ T2824] R13: 00007fbe3aaa4038 R14: 00007fbe3aaa3fa0 R15: 00007ffee673b548 [ 102.328954][ T2824] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.337755][ T2824] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.893997][ T2902] FAULT_INJECTION: forcing a failure. [ 102.893997][ T2902] name failslab, interval 1, probability 0, space 0, times 0 [ 102.919845][ T2902] CPU: 0 PID: 2902 Comm: syz.6.828 Tainted: G W syzkaller #0 [ 102.928530][ T2902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.938575][ T2902] Call Trace: [ 102.941862][ T2902] __dump_stack+0x21/0x24 [ 102.946182][ T2902] dump_stack_lvl+0x1a7/0x208 [ 102.950857][ T2902] ? show_regs_print_info+0x18/0x18 [ 102.956045][ T2902] dump_stack+0x15/0x1c [ 102.960189][ T2902] should_fail+0x3c1/0x510 [ 102.964595][ T2902] ? sidtab_sid2str_get+0x137/0x2c0 [ 102.969786][ T2902] __should_failslab+0xa4/0xe0 [ 102.974542][ T2902] should_failslab+0x9/0x20 [ 102.979037][ T2902] __kmalloc_track_caller+0x5f/0x320 [ 102.984316][ T2902] ? skb_put+0x10e/0x1f0 [ 102.988555][ T2902] kmemdup+0x26/0x60 [ 102.992447][ T2902] sidtab_sid2str_get+0x137/0x2c0 [ 102.997464][ T2902] security_sid_to_context_core+0x2ac/0x480 [ 103.003348][ T2902] security_sid_to_context+0x33/0x40 [ 103.008622][ T2902] avc_audit_post_callback+0x135/0x830 [ 103.014072][ T2902] ? avc_audit_pre_callback+0x2a0/0x2a0 [ 103.019614][ T2902] ? audit_log_untrustedstring+0xe6/0x100 [ 103.025327][ T2902] ? avc_audit_pre_callback+0x2a0/0x2a0 [ 103.030863][ T2902] common_lsm_audit+0x149b/0x1850 [ 103.035877][ T2902] ? avc_audit_pre_callback+0x2a0/0x2a0 [ 103.041415][ T2902] ? ipv6_skb_to_auditdata+0xd30/0xd30 [ 103.046884][ T2902] slow_avc_audit+0x1c4/0x240 [ 103.051565][ T2902] ? avc_get_hash_stats+0x180/0x180 [ 103.056756][ T2902] ? avc_compute_av+0x1c7/0x6b0 [ 103.061589][ T2902] ? avc_compute_av+0x502/0x6b0 [ 103.066411][ T2902] ? avc_denied+0xaa/0x1b0 [ 103.070797][ T2902] avc_has_perm+0x215/0x3d0 [ 103.075283][ T2902] ? avc_has_perm_noaudit+0x260/0x260 [ 103.080629][ T2902] ? avc_denied+0x1b0/0x1b0 [ 103.085107][ T2902] ? security_transition_sid+0x7d/0x90 [ 103.090536][ T2902] may_create+0x57a/0x7d0 [ 103.094838][ T2902] ? show_sid+0x1b0/0x1b0 [ 103.099230][ T2902] ? from_kgid+0x169/0x690 [ 103.103644][ T2902] ? cap_capable+0x19c/0x220 [ 103.108216][ T2902] selinux_inode_mknod+0x7b/0xa0 [ 103.113129][ T2902] security_inode_mknod+0xba/0x110 [ 103.118218][ T2902] vfs_mknod+0x454/0x580 [ 103.122432][ T2902] do_mknodat+0x288/0x5a0 [ 103.126733][ T2902] __x64_sys_mknod+0x80/0x90 [ 103.131295][ T2902] do_syscall_64+0x31/0x40 [ 103.135684][ T2902] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 103.141545][ T2902] RIP: 0033:0x7f218c9a2629 [ 103.145933][ T2902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.165517][ T2902] RSP: 002b:00007f218b3fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 103.173913][ T2902] RAX: ffffffffffffffda RBX: 00007f218cc1bfa0 RCX: 00007f218c9a2629 [ 103.181859][ T2902] RDX: 000000000000070d RSI: 0000000000002000 RDI: 00002000000009c0 [ 103.189810][ T2902] RBP: 00007f218b3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 103.197754][ T2902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.205706][ T2902] R13: 00007f218cc1c038 R14: 00007f218cc1bfa0 R15: 00007ffc8dfd8f18 [ 103.553756][ T2945] binfmt_misc: register: failed to install interpreter file ./file0 [ 105.017334][ T3035] FAULT_INJECTION: forcing a failure. [ 105.017334][ T3035] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.030692][ T3035] CPU: 0 PID: 3035 Comm: syz.6.878 Tainted: G W syzkaller #0 [ 105.039353][ T3035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.049392][ T3035] Call Trace: [ 105.052670][ T3035] __dump_stack+0x21/0x24 [ 105.056986][ T3035] dump_stack_lvl+0x1a7/0x208 [ 105.061651][ T3035] ? show_regs_print_info+0x18/0x18 [ 105.066836][ T3035] dump_stack+0x15/0x1c [ 105.070976][ T3035] should_fail+0x3c1/0x510 [ 105.075366][ T3035] should_fail_alloc_page+0x4f/0x60 [ 105.080534][ T3035] __alloc_pages_nodemask+0x119/0x620 [ 105.085875][ T3035] ? __kasan_check_write+0x14/0x20 [ 105.090959][ T3035] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 105.096477][ T3035] ? do_wp_page+0x9a6/0xc80 [ 105.100955][ T3035] ? handle_pte_fault+0xac1/0x3750 [ 105.106040][ T3035] handle_pte_fault+0x1719/0x3750 [ 105.111039][ T3035] __handle_speculative_fault+0xe77/0x1390 [ 105.116818][ T3035] ? finish_fault+0xa70/0xa70 [ 105.121469][ T3035] ? down_read_trylock+0x106/0x160 [ 105.126555][ T3035] ? __kasan_check_write+0x14/0x20 [ 105.131637][ T3035] do_user_addr_fault+0x7f3/0xc90 [ 105.136630][ T3035] ? do_kern_addr_fault+0x80/0x80 [ 105.141625][ T3035] ? debug_smp_processor_id+0x17/0x20 [ 105.146968][ T3035] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 105.153010][ T3035] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 105.158611][ T3035] exc_page_fault+0x5a/0xc0 [ 105.163084][ T3035] ? asm_exc_page_fault+0x8/0x30 [ 105.167991][ T3035] asm_exc_page_fault+0x1e/0x30 [ 105.172811][ T3035] RIP: 0033:0x7f218c859b18 [ 105.177200][ T3035] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 105.196777][ T3035] RSP: 002b:00007f218b3db470 EFLAGS: 00010286 [ 105.202816][ T3035] RAX: 0000000000001000 RBX: 00007f218b3db530 RCX: 0000000000000001 [ 105.210760][ T3035] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00007f218b3db5d0 [ 105.218703][ T3035] RBP: 00000000000000db R08: 00007f2182fbc000 R09: 00000000000000ff [ 105.226645][ T3035] R10: 0000000000000000 R11: 00007f218b3db540 R12: 0000000000000001 [ 105.234587][ T3035] R13: 00007f218ca58200 R14: 0000000000000000 R15: 00007f218b3db5d0 [ 105.242791][ T3035] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 105.732791][ T3048] sch_fq: defrate 0 ignored. [ 106.340706][ T24] kauditd_printk_skb: 400 callbacks suppressed [ 106.340716][ T24] audit: type=1400 audit(2000000002.570:2880): avc: denied { read write } for pid=3062 comm="syz.7.889" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.371064][ T24] audit: type=1400 audit(2000000002.570:2881): avc: denied { name_bind } for pid=3062 comm="syz.7.889" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 106.508671][ T24] audit: type=1400 audit(2000000002.730:2882): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.533384][ T24] audit: type=1400 audit(2000000002.760:2883): avc: denied { execmem } for pid=3065 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 106.599926][ T24] audit: type=1400 audit(2000000002.830:2884): avc: denied { prog_load } for pid=3065 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 106.632260][ T24] audit: type=1400 audit(2000000002.860:2885): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.656371][ T24] audit: type=1400 audit(2000000002.860:2886): avc: denied { read } for pid=3068 comm="syz.0.892" dev="nsfs" ino=4026532454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 106.677465][ T24] audit: type=1400 audit(2000000002.870:2887): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.701608][ T24] audit: type=1400 audit(2000000002.870:2888): avc: denied { create } for pid=3070 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 106.721304][ T24] audit: type=1400 audit(2000000002.870:2889): avc: denied { create } for pid=3070 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 106.768033][ T3079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.897'. [ 106.777026][ T3079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.897'. [ 106.786099][ T3079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.897'. [ 107.087142][ T3114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.913'. [ 107.108470][ T3114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.913'. [ 107.138715][ T3121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.918'. [ 107.157145][ T3121] device ip6gre1 entered promiscuous mode [ 107.165152][ T296] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.173915][ T296] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.189821][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.208715][ T3138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.924'. [ 107.249585][ T3153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 107.268693][ T3160] netlink: 12 bytes leftover after parsing attributes in process `syz.7.935'. [ 107.278533][ T3160] netlink: 12 bytes leftover after parsing attributes in process `syz.7.935'. [ 107.411020][ T3196] device bridge_slave_0 left promiscuous mode [ 107.417167][ T3196] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.441030][ T3196] device bridge_slave_1 left promiscuous mode [ 107.447153][ T3196] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.799820][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.949825][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.442456][ T3364] syz.3.1033 uses obsolete (PF_INET,SOCK_PACKET) [ 108.857497][ T3423] bridge0: port 3(syz_tun) entered blocking state [ 108.868368][ T3423] bridge0: port 3(syz_tun) entered disabled state [ 108.880700][ T3423] device syz_tun entered promiscuous mode [ 108.891973][ T3423] bridge0: port 3(syz_tun) entered blocking state [ 108.898413][ T3423] bridge0: port 3(syz_tun) entered forwarding state [ 110.226958][ T3604] binfmt_misc: register: failed to install interpreter file ./file2 [ 110.409366][ T3618] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 110.829834][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 111.106617][ T3770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=3770 comm=syz.6.1227 [ 111.145323][ T3782] device syzkaller0 entered promiscuous mode [ 111.349859][ T24] kauditd_printk_skb: 811 callbacks suppressed [ 111.349870][ T24] audit: type=1400 audit(2000000007.580:3701): avc: denied { read write } for pid=276 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.380447][ T24] audit: type=1400 audit(2000000007.580:3702): avc: denied { map_create } for pid=3809 comm="syz.3.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 111.400644][ T24] audit: type=1400 audit(2000000007.580:3703): avc: denied { read write } for pid=276 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.428702][ T24] audit: type=1400 audit(2000000007.590:3704): avc: denied { read write } for pid=860 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.453499][ T24] audit: type=1400 audit(2000000007.600:3705): avc: denied { read write } for pid=3811 comm="syz.7.1249" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.480151][ T24] audit: type=1400 audit(2000000007.610:3706): avc: denied { read write } for pid=860 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.480168][ T24] audit: type=1400 audit(2000000007.620:3707): avc: denied { read write } for pid=3815 comm="syz.7.1250" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.480184][ T24] audit: type=1400 audit(2000000007.630:3708): avc: denied { read write } for pid=860 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.480199][ T24] audit: type=1400 audit(2000000007.650:3709): avc: denied { read write } for pid=276 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.480214][ T24] audit: type=1400 audit(2000000007.650:3710): avc: denied { read write } for pid=413 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.707363][ T3856] device bridge_slave_1 left promiscuous mode [ 111.714919][ T3856] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.722940][ T3856] device bridge_slave_0 left promiscuous mode [ 111.729139][ T3856] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.000153][ T3936] __nla_validate_parse: 8 callbacks suppressed [ 112.000161][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'. [ 112.310182][ T4005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1340'. [ 112.780984][ T4053] device syzkaller0 entered promiscuous mode [ 113.143350][ T4101] device vlan2 entered promiscuous mode [ 113.479454][ T4164] device syzkaller0 entered promiscuous mode [ 114.224408][ T4272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1466'. [ 114.527291][ T4309] netlink: 'syz.6.1474': attribute type 3 has an invalid length. [ 115.197211][ T4339] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 115.376519][ T4377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 115.485301][ T4401] ================================================================== [ 115.493367][ T4401] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 115.501488][ T4401] Read of size 8 at addr ffff888111f612c0 by task syz.6.1524/4401 [ 115.509256][ T4401] [ 115.511563][ T4401] CPU: 1 PID: 4401 Comm: syz.6.1524 Tainted: G W syzkaller #0 [ 115.520288][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.530313][ T4401] Call Trace: [ 115.533575][ T4401] __dump_stack+0x21/0x24 [ 115.537881][ T4401] dump_stack_lvl+0x1a7/0x208 [ 115.542531][ T4401] ? show_regs_print_info+0x18/0x18 [ 115.547701][ T4401] ? thaw_kernel_threads+0x220/0x220 [ 115.552959][ T4401] print_address_description+0x7f/0x2c0 [ 115.558477][ T4401] ? tc_setup_flow_action+0x842/0x3280 [ 115.563911][ T4401] kasan_report+0xe2/0x130 [ 115.568300][ T4401] ? flow_action_cookie_create+0x28/0x90 [ 115.573904][ T4401] ? tc_setup_flow_action+0x842/0x3280 [ 115.579341][ T4401] __asan_report_load8_noabort+0x14/0x20 [ 115.584945][ T4401] tc_setup_flow_action+0x842/0x3280 [ 115.590202][ T4401] ? __kmalloc+0x1a4/0x330 [ 115.594589][ T4401] ? flow_rule_alloc+0x32/0x2c0 [ 115.599410][ T4401] mall_replace_hw_filter+0x2cc/0x8a0 [ 115.604753][ T4401] ? pcpu_block_update_hint_alloc+0x8bf/0xc50 [ 115.610792][ T4401] ? mall_set_parms+0x410/0x410 [ 115.615617][ T4401] ? tcf_exts_destroy+0xb0/0xb0 [ 115.620441][ T4401] ? pcpu_alloc+0xf9b/0x16b0 [ 115.625002][ T4401] ? mall_set_parms+0x19d/0x410 [ 115.629828][ T4401] mall_change+0x546/0x760 [ 115.634218][ T4401] ? __kasan_check_write+0x14/0x20 [ 115.639300][ T4401] ? mall_get+0xa0/0xa0 [ 115.643426][ T4401] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 115.649288][ T4401] ? nla_strcmp+0xf4/0x140 [ 115.653678][ T4401] tc_new_tfilter+0x1452/0x1a90 [ 115.658507][ T4401] ? mall_get+0xa0/0xa0 [ 115.662647][ T4401] ? tcf_gate_entry_destructor+0x20/0x20 [ 115.668254][ T4401] ? security_capable+0x87/0xb0 [ 115.673074][ T4401] ? ns_capable+0x8c/0xf0 [ 115.677374][ T4401] ? netlink_net_capable+0x125/0x160 [ 115.682629][ T4401] ? tcf_gate_entry_destructor+0x20/0x20 [ 115.688235][ T4401] rtnetlink_rcv_msg+0x845/0xcc0 [ 115.693154][ T4401] ? rtnetlink_bind+0x80/0x80 [ 115.697803][ T4401] ? arch_stack_walk+0xee/0x140 [ 115.702625][ T4401] ? stack_trace_save+0xa6/0xf0 [ 115.707446][ T4401] ? stack_trace_snprint+0xf0/0xf0 [ 115.712528][ T4401] ? avc_has_perm+0x168/0x3d0 [ 115.717180][ T4401] ? memcpy+0x56/0x70 [ 115.721133][ T4401] ? avc_has_perm+0x27f/0x3d0 [ 115.725795][ T4401] ? __kasan_slab_alloc+0xbd/0xf0 [ 115.730798][ T4401] ? slab_post_alloc_hook+0x5d/0x2f0 [ 115.736054][ T4401] ? avc_has_perm_noaudit+0x260/0x260 [ 115.741398][ T4401] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 115.746743][ T4401] netlink_rcv_skb+0x1f5/0x440 [ 115.751491][ T4401] ? rtnetlink_bind+0x80/0x80 [ 115.756153][ T4401] ? netlink_ack+0xb70/0xb70 [ 115.760715][ T4401] ? __netlink_lookup+0x387/0x3b0 [ 115.765711][ T4401] rtnetlink_rcv+0x1c/0x20 [ 115.770101][ T4401] netlink_unicast+0x876/0xa40 [ 115.774838][ T4401] netlink_sendmsg+0x89c/0xb50 [ 115.779579][ T4401] ? netlink_getsockopt+0x530/0x530 [ 115.784752][ T4401] ? security_socket_sendmsg+0x82/0xa0 [ 115.790181][ T4401] ? netlink_getsockopt+0x530/0x530 [ 115.795349][ T4401] ____sys_sendmsg+0x5b7/0x8f0 [ 115.800107][ T4401] ? __sys_sendmsg_sock+0x40/0x40 [ 115.805104][ T4401] ? import_iovec+0x7c/0xb0 [ 115.809576][ T4401] ___sys_sendmsg+0x236/0x2e0 [ 115.814221][ T4401] ? __sys_sendmsg+0x280/0x280 [ 115.818972][ T4401] ? alloc_file+0x82/0x540 [ 115.823385][ T4401] ? __fdget+0x1a1/0x230 [ 115.827605][ T4401] __x64_sys_sendmsg+0x1f9/0x2c0 [ 115.832539][ T4401] ? __kasan_check_write+0x14/0x20 [ 115.837622][ T4401] ? ___sys_sendmsg+0x2e0/0x2e0 [ 115.842450][ T4401] ? __kasan_check_read+0x11/0x20 [ 115.847444][ T4401] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 115.853054][ T4401] do_syscall_64+0x31/0x40 [ 115.857450][ T4401] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 115.863315][ T4401] RIP: 0033:0x7f218c9a2629 [ 115.867703][ T4401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.887280][ T4401] RSP: 002b:00007f218b3fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.895666][ T4401] RAX: ffffffffffffffda RBX: 00007f218cc1bfa0 RCX: 00007f218c9a2629 [ 115.903610][ T4401] RDX: 0000000020000010 RSI: 0000200000000580 RDI: 0000000000000006 [ 115.911552][ T4401] RBP: 00007f218ca38b39 R08: 0000000000000000 R09: 0000000000000000 [ 115.919495][ T4401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.927437][ T4401] R13: 00007f218cc1c038 R14: 00007f218cc1bfa0 R15: 00007ffc8dfd8f18 [ 115.935380][ T4401] [ 115.937682][ T4401] Allocated by task 4401: [ 115.942015][ T4401] __kasan_kmalloc+0xda/0x110 [ 115.946669][ T4401] __kmalloc+0x1a4/0x330 [ 115.950889][ T4401] tcf_idr_create+0x5f/0x790 [ 115.955450][ T4401] tcf_idr_create_from_flags+0x61/0x70 [ 115.960883][ T4401] tcf_gact_init+0x2e6/0x560 [ 115.965441][ T4401] tcf_action_init_1+0x443/0x6e0 [ 115.970356][ T4401] tcf_action_init+0x227/0x780 [ 115.975100][ T4401] tcf_exts_validate+0x248/0x570 [ 115.980006][ T4401] mall_set_parms+0x4b/0x410 [ 115.984564][ T4401] mall_change+0x47a/0x760 [ 115.988952][ T4401] tc_new_tfilter+0x1452/0x1a90 [ 115.993781][ T4401] rtnetlink_rcv_msg+0x845/0xcc0 [ 115.998687][ T4401] netlink_rcv_skb+0x1f5/0x440 [ 116.003419][ T4401] rtnetlink_rcv+0x1c/0x20 [ 116.007804][ T4401] netlink_unicast+0x876/0xa40 [ 116.012541][ T4401] netlink_sendmsg+0x89c/0xb50 [ 116.017277][ T4401] ____sys_sendmsg+0x5b7/0x8f0 [ 116.022013][ T4401] ___sys_sendmsg+0x236/0x2e0 [ 116.026662][ T4401] __x64_sys_sendmsg+0x1f9/0x2c0 [ 116.031570][ T4401] do_syscall_64+0x31/0x40 [ 116.035959][ T4401] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.041814][ T4401] [ 116.044113][ T4401] Last potentially related work creation: [ 116.049808][ T4401] kasan_save_stack+0x3a/0x60 [ 116.054456][ T4401] __kasan_record_aux_stack+0xd2/0x100 [ 116.059890][ T4401] kasan_record_aux_stack_noalloc+0xb/0x10 [ 116.065668][ T4401] call_rcu+0x11a/0x10b0 [ 116.069882][ T4401] neigh_parms_release+0x1c8/0x200 [ 116.074970][ T4401] inetdev_event+0x82e/0x1040 [ 116.079636][ T4401] raw_notifier_call_chain+0x90/0x100 [ 116.084996][ T4401] unregister_netdevice_many+0x1074/0x1a80 [ 116.090786][ T4401] ip6_tnl_exit_batch_net+0x3d5/0x420 [ 116.096134][ T4401] cleanup_net+0x603/0xb80 [ 116.100520][ T4401] process_one_work+0x6e1/0xba0 [ 116.105339][ T4401] worker_thread+0xa6a/0x13c0 [ 116.109989][ T4401] kthread+0x346/0x3d0 [ 116.114032][ T4401] ret_from_fork+0x1f/0x30 [ 116.118411][ T4401] [ 116.120710][ T4401] The buggy address belongs to the object at ffff888111f61200 [ 116.120710][ T4401] which belongs to the cache kmalloc-192 of size 192 [ 116.134730][ T4401] The buggy address is located 0 bytes to the right of [ 116.134730][ T4401] 192-byte region [ffff888111f61200, ffff888111f612c0) [ 116.148314][ T4401] The buggy address belongs to the page: [ 116.153928][ T4401] page:ffffea000447d840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111f61 [ 116.164128][ T4401] flags: 0x4000000000000200(slab) [ 116.169126][ T4401] raw: 4000000000000200 ffffea00043d6540 0000000300000003 ffff888100043380 [ 116.177678][ T4401] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 116.186226][ T4401] page dumped because: kasan: bad access detected [ 116.192603][ T4401] page_owner tracks the page as allocated [ 116.198300][ T4401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1241, ts 59390089915, free_ts 59090003479 [ 116.214234][ T4401] prep_new_page+0x179/0x180 [ 116.218796][ T4401] get_page_from_freelist+0x223b/0x23d0 [ 116.224309][ T4401] __alloc_pages_nodemask+0x290/0x620 [ 116.229647][ T4401] new_slab+0x84/0x3f0 [ 116.233687][ T4401] ___slab_alloc+0x2a6/0x450 [ 116.238253][ T4401] __slab_alloc+0x63/0xa0 [ 116.242563][ T4401] kmem_cache_alloc_trace+0x1b0/0x2e0 [ 116.247915][ T4401] push_stack+0x91/0x4f0 [ 116.252131][ T4401] do_check+0xb801/0xdf60 [ 116.256434][ T4401] do_check_common+0x8e7/0x1190 [ 116.261254][ T4401] bpf_check+0x9623/0xdb10 [ 116.265641][ T4401] bpf_prog_load+0xfca/0x14a0 [ 116.270287][ T4401] __se_sys_bpf+0x49a/0x740 [ 116.274759][ T4401] __x64_sys_bpf+0x7b/0x90 [ 116.279146][ T4401] do_syscall_64+0x31/0x40 [ 116.283531][ T4401] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.289396][ T4401] page last free stack trace: [ 116.294057][ T4401] free_unref_page_prepare+0x2b7/0x2d0 [ 116.299485][ T4401] free_unref_page_list+0x129/0x9c0 [ 116.304658][ T4401] release_pages+0xe52/0xea0 [ 116.309223][ T4401] free_pages_and_swap_cache+0x86/0xa0 [ 116.314655][ T4401] tlb_finish_mmu+0x17e/0x310 [ 116.319314][ T4401] exit_mmap+0x329/0x590 [ 116.323540][ T4401] __mmput+0x93/0x2f0 [ 116.327490][ T4401] mmput+0x4e/0x150 [ 116.331267][ T4401] do_exit+0x9ec/0x2500 [ 116.335389][ T4401] do_group_exit+0x141/0x310 [ 116.339952][ T4401] get_signal+0xf7d/0x12e0 [ 116.344341][ T4401] arch_do_signal_or_restart+0xe2/0x11d0 [ 116.349954][ T4401] exit_to_user_mode_loop+0xa2/0xe0 [ 116.355134][ T4401] exit_to_user_mode_prepare+0x76/0xa0 [ 116.360567][ T4401] syscall_exit_to_user_mode+0x1d/0x40 [ 116.365996][ T4401] do_syscall_64+0x3d/0x40 [ 116.370378][ T4401] [ 116.372677][ T4401] Memory state around the buggy address: [ 116.378280][ T4401] ffff888111f61180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 116.386315][ T4401] ffff888111f61200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.394350][ T4401] >ffff888111f61280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 116.402379][ T4401] ^ [ 116.408502][ T4401] ffff888111f61300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.416533][ T4401] ffff888111f61380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 116.424561][ T4401] ================================================================== [ 116.432591][ T4401] Disabling lock debugging due to kernel taint [ 116.451552][ T24] kauditd_printk_skb: 647 callbacks suppressed [ 116.451562][ T24] audit: type=1400 audit(2000000012.680:4358): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 May 18 03:33:32 [ 116.480125][ T24] audit: type=1400 audit(2000000012.680:4359): avc: denied { read write } for pid=860 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 syzkaller kern.a[ 116.505107][ T24] audit: type=1400 audit(2000000012.710:4360): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 lert kernel: [ [ 116.529133][ T24] audit: type=1400 audit(2000000012.760:4361): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 116.192603][ T4401] page_owner tracks the page as allocated May 18 03:33:32 syzkaller kern.alert kernel: [ 116.198300][ T4401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1241, ts 59390089915, free_ts 59090003479 May 18 03:33:32 syzkaller kern.alert kernel: [ 116.289396][ T4401] page last free stack trace: [ 116.603267][ T24] audit: type=1400 audit(2000000012.830:4362): avc: denied { read write } for pid=413 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 118.989981][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.275098][ T24] audit: type=1400 audit(2000000016.500:4363): avc: denied { read write } for pid=372 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0