last executing test programs: 8.350031043s ago: executing program 3 (id=26): r0 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000001c00)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pwrite64(r0, &(0x7f0000001c80)='2', 0xfe63, 0xe7c) 8.307870668s ago: executing program 3 (id=28): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180), 0xfe, 0x246, &(0x7f00000001c0)="$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") mknod$loop(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000fc0)={@id={0x2, 0x0, @d}}) unlink(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.132373746s ago: executing program 3 (id=32): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000009c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000a40)='bridge0\x00', 0x10) write(r0, &(0x7f0000000a80)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 8.087515261s ago: executing program 3 (id=34): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000005000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 8.076056722s ago: executing program 3 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 8.060851283s ago: executing program 3 (id=36): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x8502, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) 1.695117696s ago: executing program 0 (id=148): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x40801, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) 1.595894636s ago: executing program 0 (id=151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000080)={@void, @val={0x2, 0x3, 0x1b, 0x30, 0x14, 0x6}, @ipv6=@gre_packet={0x3, 0x6, "1772ab", 0x44, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x3a00, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0xa888, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x86dd}}}, {0x8, 0x22eb, 0x1, {{0xc, 0x2, 0xfa, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0xfdef) 1.530980373s ago: executing program 0 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xc00, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x8054, &(0x7f0000000240)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002cc0)={0x2020}, 0xa5a) 1.480046628s ago: executing program 0 (id=154): setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x4, [{0x11}, {0x1000000000000, 0x100000000000000}]}, 0x68) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000480), 0x0}, 0x20) 1.476996748s ago: executing program 0 (id=155): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") r0 = open(&(0x7f00000011c0)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000001200)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000001240)=[{&(0x7f0000001280)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 1.180126919s ago: executing program 0 (id=164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0415c200000000000109022400010000a00209040001020300020009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0xa, 0x62080) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) 547.796234ms ago: executing program 2 (id=172): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000005c0)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in=@loopback, @in=@local, 0x4e28, 0x0, 0x4, 0xf000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xffffffffffffffff, 0x5, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5, 0x4000000}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@loopback, 0x4d2, 0x33}, 0x0, @in6=@remote, 0x3507, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 547.690234ms ago: executing program 2 (id=173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002022206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 547.621904ms ago: executing program 2 (id=174): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9a) 546.593974ms ago: executing program 2 (id=175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1aa3, 0x4) sendmmsg$inet6(r0, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)="0f", 0x1}], 0x1}}, {{&(0x7f0000002dc0)={0xa, 0x4e22, 0x4, @private1, 0x4}, 0x1c, &(0x7f0000003340)=[{&(0x7f0000002e00)="771e1ca8d073018cdd92", 0xa}, {&(0x7f0000002f00)}, {0x0}, {0x0}], 0x4}}], 0x2, 0x4000041) 539.789025ms ago: executing program 2 (id=176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 532.665245ms ago: executing program 2 (id=177): unshare(0x60000600) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) exit(0x100000000000035) tkill(r0, 0x12) 528.316776ms ago: executing program 1 (id=178): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f0000002400)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000980)='mounts\x00') read$FUSE(r0, &(0x7f0000007900)={0x2020}, 0x2020) 230.226296ms ago: executing program 4 (id=190): openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000009c0)={0x5, 0x25b7edb3, 0x0, 0x4, 0x6, 0x1, 0xfffffffffffffffa, 0x1}, &(0x7f0000000a00)={0xc, 0xc, 0xfffffffffffffffa, 0x800, 0xc, 0x10000, 0xfffffffffffff2e0, 0x40000005}, 0x0, 0x0, 0x0) 220.700128ms ago: executing program 1 (id=191): mmap$IORING_OFF_SQ_RING(0x0, 0xd7c6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) unshare(0x64000400) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x79}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) 147.075805ms ago: executing program 4 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/net/ipv4/conf/all/proxy_arp\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xbfb3) 99.50117ms ago: executing program 4 (id=193): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000938000/0x8000)=nil, 0x8000, 0x2, 0x22052, r0, 0xdfe7000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000000)="511bd0881ce184", 0x7) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) 99.36311ms ago: executing program 4 (id=194): r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46040022ff0a00000000000000030003001b0500008600000038000000b402000058070000bf00200003000900050002000000000050e57464040000000f0000000500000001010000000400000700000006000000380000000f0b0000400000000800000007000000ffaf0000010400006f000000030000"], 0x98) r2 = dup(r0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 99.25966ms ago: executing program 1 (id=195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in=@local, 0x4e28, 0x0, 0x4, 0xf000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xffffffffffffffff, 0x5, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5, 0x4000000}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@private0, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3507, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 99.16482ms ago: executing program 1 (id=196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x8006}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x6, 0x0, 0xbffd}}}}}}, 0x0) 99.05528ms ago: executing program 4 (id=197): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x44000001) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 98.46762ms ago: executing program 1 (id=198): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x800000, &(0x7f00000000c0)=ANY=[], 0x1, 0x1509, &(0x7f0000000640)="$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") openat$vsock(0xffffffffffffff9c, 0x0, 0x82, 0x0) r0 = open(&(0x7f0000002140)='./file1\x00', 0x145142, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 97.1406ms ago: executing program 4 (id=199): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000a40), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000a80)={{0x1, 0x200, 0x7, 0x8000, 0xe, 0x7}, 0x189, [0x10, 0x3, 0x5, 0x2, 0xffff, 0x2, 0x30, 0x3, 0x28, 0x5, 0x9, 0x228, 0xe, 0x2, 0x7, 0x7fffffff, 0x7ff, 0xb4, 0x4, 0x0, 0xa, 0x877e, 0x9, 0x8, 0x6, 0x4, 0x401, 0x44e5afe7, 0x5, 0x5fe6ef64, 0x3, 0x7, 0x7fffffff, 0x5, 0x7, 0xc, 0x4, 0x4, 0x1a2, 0x880b, 0x2, 0x0, 0x81, 0x6, 0x101, 0x8, 0x400, 0x552, 0x9, 0x7, 0xcb75, 0x0, 0x10000, 0x1, 0x7, 0x5, 0x4, 0x7, 0x7fff, 0x3, 0xfff, 0x2, 0x0, 0x1, 0x0, 0x5, 0x1, 0xd29, 0x70, 0x1, 0x80000001, 0xee000000, 0x40, 0x1, 0x4, 0x6, 0x2, 0x80000001, 0x2, 0x40, 0x800, 0x5, 0xe9, 0x10, 0x9860, 0x300000, 0xc000, 0x5, 0x3, 0x1, 0xf, 0x2, 0x1, 0xc, 0x8, 0x0, 0x9, 0xffffb43d, 0x8, 0xb, 0x8, 0x3, 0x8, 0xfffffe00, 0x10001, 0x3, 0x0, 0x81, 0x0, 0x0, 0x5, 0x9, 0xfffffffc, 0x9, 0x2a93, 0x4, 0x2, 0x8, 0x400, 0x0, 0x7fff, 0x7, 0x2, 0x10000, 0xf, 0x7, 0x100, 0x3, 0x5, 0x7, 0x7, 0x79, 0xff000000, 0x1, 0x8, 0x80, 0x9, 0x9, 0xa1, 0x8, 0xaae6, 0x5, 0x10, 0x20bf, 0xffff, 0x5, 0xffff8001, 0x1, 0xc, 0x8, 0x10001, 0x0, 0xffffffff, 0x6, 0x879, 0x934b, 0x7, 0x1, 0xfffffffa, 0x80000000, 0x4, 0x8, 0x6, 0x67, 0x3, 0x140000, 0x3, 0x0, 0x0, 0x9, 0x4d8, 0x1000, 0x4, 0x100, 0x9bc, 0x5, 0xd4f9, 0x8001, 0x6, 0x67, 0xf7, 0x8, 0x7, 0x5, 0x7, 0x6, 0x0, 0x3, 0x6, 0x7, 0x7, 0x9, 0x101, 0xb, 0x7, 0x33da, 0x9, 0x361f, 0x8000, 0x2, 0x100, 0x7ff, 0x2a, 0x9, 0x3f, 0x4, 0x3, 0xfffffffc, 0xb, 0x9, 0x2, 0x6, 0x80000001, 0x100, 0x10000, 0x6, 0x1, 0x4, 0x3, 0x70, 0x4, 0x709, 0x5, 0x10001, 0x6, 0x1, 0x3ff, 0x3d50f53f, 0x1, 0x9, 0x8, 0xc4, 0x67159837, 0x2, 0xb, 0x401, 0x9, 0xa, 0x34, 0x78, 0x1, 0xffffff00, 0x8, 0x5, 0x2, 0x7, 0x86, 0x8, 0x7, 0x1, 0x58b8, 0xb, 0x9, 0x401, 0x5, 0x9, 0x9, 0x6, 0x1, 0x7081ca43, 0x2, 0x80000001, 0xffffffff, 0xc, 0x3, 0x3, 0x5, 0xf8b, 0x4, 0x8, 0x3, 0x7, 0x1, 0x8, 0x360, 0xff, 0xbc, 0x5, 0x3, 0x6, 0x0, 0xf, 0x101, 0x9aca, 0x5, 0x5, 0xdfb, 0xe, 0xb35, 0x2, 0x8, 0x1, 0xdb38, 0xf, 0x1, 0x379d, 0x4, 0x2, 0x4, 0x75b, 0x3, 0x10000, 0x9, 0xffffff80, 0x81, 0x8000, 0x5, 0x10000, 0x1, 0x4, 0x40, 0xffffffe8, 0x100, 0x80000000, 0x8000, 0x0, 0x0, 0xa, 0xf, 0xfffffff7, 0x1000, 0x6, 0x3, 0xe7, 0x5, 0x80000001, 0xfff, 0x0, 0x5e, 0xfffff51b, 0x9, 0x9, 0x7, 0x2, 0x0, 0x6, 0x6, 0x4, 0x3483, 0x6, 0x8, 0xfff, 0x4, 0x7, 0x7, 0xfff, 0x0, 0x3, 0x8a2, 0x3, 0x4, 0x9, 0x5, 0x81, 0x3, 0x4, 0x1ff, 0x5, 0x9, 0x7f, 0x7ff, 0x2, 0x10000, 0xa4, 0x7fffffff, 0x0, 0x401, 0x0, 0xd7, 0x101, 0x6, 0xb, 0xa7, 0x5, 0x9, 0x1, 0x4, 0x2, 0x100, 0x6, 0x0, 0x0, 0x8, 0x7710cee5, 0x4bc7, 0x3ff, 0xf92b, 0x2, 0x7, 0x9c1, 0x380c, 0x6, 0x2, 0x2, 0x9, 0x4, 0xfffffffb, 0x6634, 0x108b, 0x401, 0x100, 0x9, 0x1, 0x3, 0x2, 0x0, 0x4, 0x4, 0xfa5, 0x7, 0x5, 0x9, 0x9, 0xb012, 0x0, 0x1, 0x40, 0x1, 0x70000000, 0x5, 0xfffffff8, 0xf765, 0x1000, 0x0, 0xfff, 0x6, 0xc483, 0xff, 0x3, 0x5, 0x58000000, 0x1, 0x9, 0x7f, 0x4, 0x1986, 0x2, 0x6, 0x2, 0xffff, 0x8, 0x5, 0x40, 0x1, 0x7, 0x2, 0xe78b, 0x1, 0x1c, 0x0, 0x3, 0x9, 0x3ff, 0xd42, 0x6, 0x3, 0x101, 0x3, 0xff, 0x4, 0x4, 0x9, 0x5, 0x401, 0x1, 0x1400000, 0x2d, 0x6, 0x7fffffff, 0x5, 0x3, 0x200, 0x2, 0x1, 0x18000, 0x5, 0x3, 0xc, 0x6, 0x2, 0x6a0, 0x2, 0x1, 0x1, 0x8, 0x9, 0x4, 0x1ff, 0x400, 0x2, 0xfffffffc, 0x9, 0x5, 0x3ff, 0xd, 0xff, 0x7, 0x54, 0x8, 0x7, 0x9, 0x1, 0xffffffff, 0x7fff, 0x6, 0xffff, 0x0, 0x1, 0x3, 0x7, 0x9a2, 0x2, 0x5, 0x8, 0x8000, 0x401, 0x0, 0x80000000, 0xfff, 0x4, 0x27b, 0x8ca, 0x0, 0x8, 0xff7a, 0x7, 0x5e, 0x7, 0x0, 0x2, 0x200, 0xc, 0x8, 0xffffffff, 0x8000, 0x7fff, 0x0, 0x7fffffff, 0x7, 0x7, 0x70e, 0xffffff54, 0x9, 0x36, 0x7ff, 0x5, 0x8, 0x0, 0x4, 0xd, 0x970a, 0x6, 0x8, 0x3, 0x5, 0x6, 0x6, 0x4, 0x8, 0x8000, 0x7044, 0x2, 0x7fffffff, 0x7, 0x8000, 0xfab5, 0x1000, 0x1, 0x7fffffff, 0x4, 0x8d232d8, 0xffff, 0x0, 0xffffffff, 0xffffffff, 0x7fffffff, 0x3ff, 0x4, 0xd, 0x1, 0x1ff, 0x7, 0x6, 0x0, 0x3, 0xc2f, 0x7ff, 0x8, 0xffff8000, 0x3, 0x3, 0xf4f, 0xd, 0x7, 0x7, 0xfffffff8, 0x9, 0x3, 0x1, 0x3, 0xe, 0x9, 0x4, 0x7fff, 0x1, 0x4, 0x9a, 0x3, 0x3, 0xfffffff9, 0x10eb, 0x7, 0xdf6, 0x0, 0x5, 0x5, 0x7, 0x9, 0x4, 0x7, 0x4a3d2076, 0xa48b, 0x6, 0x6, 0x8, 0x8, 0x6, 0x1000, 0x7, 0xdc53, 0x80000001, 0x10000000, 0x6, 0x8000, 0x0, 0x400, 0x0, 0xfffffff8, 0x7fff, 0xc, 0x10000, 0x80, 0x9, 0x7, 0x7, 0xa4, 0x5, 0xd5ec, 0x6, 0x3f3f, 0xa342313, 0x3, 0x60c0, 0x10, 0x10000, 0x9f6, 0x3, 0x1, 0x7, 0x512b, 0x9, 0x8, 0xd168, 0xff, 0x2, 0x1, 0x80000000, 0x8, 0x100, 0x2, 0x80000001, 0x9, 0xe, 0x80, 0x7fffffff, 0x5, 0x1000, 0x5, 0xa8b5, 0xffff2ba7, 0x8, 0x6, 0x0, 0x8, 0x0, 0x4, 0xd, 0x2, 0x10000, 0xa3, 0x2, 0x1, 0x4, 0x2, 0x2, 0x400, 0x5, 0xcfa, 0xed, 0x5, 0x80000001, 0x0, 0x9, 0x58aa9955, 0xdc, 0x8, 0x8, 0x7, 0x1000, 0x9, 0x1, 0xff, 0x400, 0x10000, 0x4, 0x7, 0x8, 0x67, 0x1, 0x8, 0x3, 0x9, 0xfffffff7, 0xe, 0x7, 0x5, 0x8, 0x3, 0x9, 0x7, 0x5, 0x8001, 0x15, 0x7, 0xf9, 0x100, 0x401, 0xfffffffa, 0x6, 0x200, 0x7, 0x2, 0x7f, 0x100, 0x7, 0x7, 0xffff2859, 0x8, 0x9353, 0x0, 0xffffffff, 0x0, 0x7, 0x3ff, 0x10, 0x3, 0xd1, 0xffff, 0x0, 0x0, 0x4, 0x4308, 0x800000, 0xb3, 0x4, 0x3ff, 0x12a0014f, 0x6, 0xf1, 0xc0f5, 0xf, 0x7fff, 0x400, 0xff, 0x5, 0x0, 0x9, 0x4, 0x2, 0x80000000, 0x6, 0x82, 0x80000001, 0x4, 0x8, 0x8, 0x400, 0x7903, 0x3, 0x0, 0x3, 0x6dcd, 0x5, 0x400, 0x2, 0x5, 0xfffffbfd, 0x8, 0x180000, 0x9, 0x8, 0x7, 0x4, 0x101, 0x7fff, 0x2a, 0x1, 0x9f4b, 0x7, 0x3, 0x2, 0x26f2, 0x9, 0xfffffff8, 0x0, 0x8, 0x0, 0x39, 0x7, 0x352ec742, 0x4, 0x1c, 0x6, 0x7, 0x6000000, 0xe, 0x8, 0xa, 0xca49, 0x5, 0x162, 0x7f, 0x8, 0x401, 0x5, 0x1, 0x3, 0x1, 0x9183, 0x9, 0x7, 0xc788, 0xd6, 0xffff, 0x7, 0x0, 0x8000, 0xd2, 0x0, 0xb7d5, 0x1, 0x3, 0x3, 0x1, 0x8, 0x1, 0x5, 0x6, 0x92, 0x7, 0x9, 0xffffffff, 0x6, 0x3, 0x472, 0x4, 0x9220, 0x9, 0x7, 0x24, 0x2, 0x4, 0x613e, 0x1ff, 0x40, 0x6, 0x5, 0x8, 0x0, 0x3f, 0xbe, 0x0, 0x80a2, 0xffff, 0x9544, 0x5, 0x0, 0x7f, 0x93, 0x2000, 0x18000000, 0x5ad78457, 0xfffffff8, 0x9, 0x7f, 0x4, 0xfcd, 0x3, 0xfffffd0e, 0x7, 0x7fffffff, 0xcf, 0x1, 0x1, 0x6, 0x5, 0x9, 0x1, 0x2, 0x5, 0x80000001, 0xfff, 0x3, 0x7, 0x1, 0x1, 0x0, 0x0, 0x5, 0xb, 0x7, 0x3ff, 0x0, 0x100, 0x5, 0x4, 0x0, 0x8, 0xfffffffd, 0x6, 0x0, 0x1, 0x7, 0x0, 0x7de, 0x7, 0x2562, 0x1, 0x6, 0x2bd, 0x0, 0x8, 0x3, 0x300000, 0x9, 0x1, 0xffffffff, 0x2, 0x7f, 0x7fff, 0x101, 0x7, 0xe, 0x10, 0x6, 0xb, 0x58, 0xffff, 0x8, 0x5, 0x0, 0x5, 0x7ff, 0x2, 0x18, 0x6, 0xceb8, 0x0, 0x7, 0x8, 0x6, 0x0, 0x3ff, 0x10, 0x0, 0x1ff, 0x9, 0xa82, 0xd8, 0xc3, 0x7, 0x2, 0x80000001, 0x7, 0x6, 0xbd1b, 0x2, 0xfff, 0x8, 0xe533, 0x8, 0xc, 0x80000001, 0xd225f55, 0xc00000, 0x1, 0x5, 0x62, 0xffff, 0x4, 0x2, 0xf, 0x3, 0x2d0, 0x872, 0x7, 0x2, 0x4, 0x4, 0x9f, 0x1, 0x1, 0x5, 0xe2, 0x3, 0x59a, 0x5, 0x5, 0x6d, 0x10, 0x6, 0x5, 0x4, 0x8]}) 0s ago: executing program 1 (id=200): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0xa, 0x4, 0x3c00000, 0xfffff800}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.83' (ED25519) to the list of known hosts. [ 17.209728][ T24] audit: type=1400 audit(1793184410.219:64): avc: denied { mounton } for pid=257 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 17.210857][ T257] cgroup: Unknown subsys name 'net' [ 17.213068][ T24] audit: type=1400 audit(1793184410.219:65): avc: denied { mount } for pid=257 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.216687][ T24] audit: type=1400 audit(1793184410.229:66): avc: denied { unmount } for pid=257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.216816][ T257] cgroup: Unknown subsys name 'devices' [ 17.312108][ T257] cgroup: Unknown subsys name 'hugetlb' [ 17.317701][ T257] cgroup: Unknown subsys name 'rlimit' [ 17.424004][ T24] audit: type=1400 audit(1793184410.439:67): avc: denied { setattr } for pid=257 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 17.447153][ T24] audit: type=1400 audit(1793184410.439:68): avc: denied { mounton } for pid=257 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 17.471902][ T24] audit: type=1400 audit(1793184410.439:69): avc: denied { mount } for pid=257 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 17.477360][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 17.503850][ T24] audit: type=1400 audit(1793184410.519:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 17.529337][ T24] audit: type=1400 audit(1793184410.519:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 17.601943][ T24] audit: type=1400 audit(1793184410.619:72): avc: denied { read } for pid=257 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 17.627479][ T257] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 17.627569][ T24] audit: type=1400 audit(1793184410.619:73): avc: denied { open } for pid=257 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.117228][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.124352][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.131766][ T279] device bridge_slave_0 entered promiscuous mode [ 18.139580][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.146734][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.154059][ T279] device bridge_slave_1 entered promiscuous mode [ 18.209792][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.216876][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.224403][ T280] device bridge_slave_0 entered promiscuous mode [ 18.231724][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.238744][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.246175][ T280] device bridge_slave_1 entered promiscuous mode [ 18.305699][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.313010][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.320380][ T281] device bridge_slave_0 entered promiscuous mode [ 18.341400][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.348447][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.355798][ T281] device bridge_slave_1 entered promiscuous mode [ 18.371192][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.378245][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.385707][ T284] device bridge_slave_0 entered promiscuous mode [ 18.392319][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.399338][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.406797][ T282] device bridge_slave_0 entered promiscuous mode [ 18.413751][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.420787][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.428170][ T282] device bridge_slave_1 entered promiscuous mode [ 18.441581][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.448607][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.456013][ T284] device bridge_slave_1 entered promiscuous mode [ 18.515221][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.522287][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.529554][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.536587][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.559974][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.567042][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.574302][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.581326][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.642564][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.649777][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.657050][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.664284][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.672519][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 18.679887][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.709595][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.717401][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 18.726084][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.733131][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.740549][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 18.748672][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.755733][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.763120][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 18.771292][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.778320][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.799584][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 18.807882][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.814922][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.833494][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 18.862826][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.870871][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.878404][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.886408][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 18.894801][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.901842][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.909542][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 18.917621][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 18.925825][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.932849][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.940214][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 18.948083][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 18.956082][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 18.969075][ T279] device veth0_vlan entered promiscuous mode [ 18.990321][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 18.998794][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.007479][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.015653][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.023784][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.031974][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.039008][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.046468][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.054592][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.061610][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.068936][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.077105][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.084121][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.091548][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.099631][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.106664][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.114034][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.121989][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.129848][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.137805][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.145995][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 19.153783][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 19.168663][ T280] device veth0_vlan entered promiscuous mode [ 19.188096][ T284] device veth0_vlan entered promiscuous mode [ 19.194479][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 19.202746][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.212159][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 19.220504][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.228690][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 19.236798][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.244784][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 19.253090][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.261165][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 19.269390][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.277815][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 19.286309][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.294503][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 19.302829][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.311075][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 19.318851][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.326777][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 19.335027][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.347714][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.355185][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.362711][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.370051][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.378503][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 19.386517][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.398097][ T281] device veth0_vlan entered promiscuous mode [ 19.405138][ T282] device veth0_vlan entered promiscuous mode [ 19.413289][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.420833][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.428253][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 19.436401][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.444488][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.452167][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.460464][ T279] device veth1_macvtap entered promiscuous mode [ 19.469665][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 19.477511][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 19.485920][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.499739][ T284] device veth1_macvtap entered promiscuous mode [ 19.507703][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 19.516185][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.524495][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 19.532655][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 19.540824][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.549346][ T281] device veth1_macvtap entered promiscuous mode [ 19.557607][ T280] device veth1_macvtap entered promiscuous mode [ 19.569091][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 19.576802][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 19.584527][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 19.592827][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.601502][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 19.609639][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.619849][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 19.628091][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.642491][ T282] device veth1_macvtap entered promiscuous mode [ 19.653045][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 19.661504][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.669693][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 19.677883][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.686352][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 19.694139][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 19.702545][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.711222][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 19.719377][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.727783][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 19.736131][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.758128][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 19.766012][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 19.774732][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.783482][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 19.791944][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.800566][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 19.808775][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.830432][ T284] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 19.981084][ T310] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 20.024753][ T321] EXT4-fs (loop0): Ignoring removed bh option [ 20.032895][ T310] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.2: bg 0: bad block bitmap checksum [ 20.034926][ T325] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 20.054593][ T321] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 20.081191][ T327] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 20.091217][ T327] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 20.091777][ T321] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,bh,delalloc,nogrpid,noblock_validity,dioread_nolock,,errors=continue [ 20.098515][ T327] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 20.111432][ T327] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 20.137219][ T327] System zones: 0-1, 3-36 [ 20.165888][ T327] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 20.440484][ T348] exfat: Deprecated parameter 'utf8' [ 20.443777][ T345] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 20.447396][ T348] exfat: Deprecated parameter 'utf8' [ 20.458910][ T345] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 20.459616][ T348] exfat: Deprecated parameter 'namecase' [ 20.468679][ T345] ext2 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 20.476380][ T348] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x917246c7, utbl_chksum : 0xe619d30d) [ 20.580203][ T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 20.608905][ T356] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 20.622246][ T356] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 20.633560][ T356] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #16: comm syz.0.17: invalid indirect mapped block 32768 (level 2) [ 20.647308][ T356] EXT4-fs (loop0): 1 orphan inode deleted [ 20.653080][ T356] EXT4-fs (loop0): 1 truncate cleaned up [ 20.658717][ T356] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 20.707012][ T360] binder: 359:360 ioctl c0306201 200000000480 returned -14 [ 20.743162][ T363] erofs: (device loop0): mounted with root inode @ nid 36. [ 20.754103][ T363] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=89 [ 20.763866][ T363] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=89 [ 20.873996][ T367] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue [ 20.886787][ T367] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 20.901611][ T367] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 20.914696][ T367] EXT4-fs (loop3): This should not happen!! Data will be lost [ 20.914696][ T367] [ 20.924435][ T367] EXT4-fs (loop3): Total free blocks count 0 [ 20.930467][ T367] EXT4-fs (loop3): Free/Dirty block details [ 20.936341][ T367] EXT4-fs (loop3): free_blocks=2415919504 [ 20.942103][ T367] EXT4-fs (loop3): dirty_blocks=16 [ 20.947205][ T367] EXT4-fs (loop3): Block reservation details [ 20.953258][ T367] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 20.970245][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 20.979977][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 21.111949][ T385] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 21.121385][ T385] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 21.124837][ T393] ====================================================== [ 21.124837][ T393] WARNING: the mand mount option is being deprecated and [ 21.124837][ T393] will be removed in v5.15! [ 21.124837][ T393] ====================================================== [ 21.179530][ T301] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 21.181334][ T20] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 21.196494][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 21.201420][ T385] EXT4-fs (loop3): shut down requested (2) [ 21.204963][ T20] usb 5-1: Product: syz [ 21.214655][ T20] usb 5-1: Manufacturer: syz [ 21.219265][ T20] usb 5-1: SerialNumber: syz [ 21.316482][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 21.403713][ T418] input: syz0 as /devices/virtual/input/input4 [ 21.481021][ T20] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 21.580313][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 21.591316][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 21.594738][ T429] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 21.601312][ T301] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 21.618793][ T429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 21.620430][ T301] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 21.629608][ T429] F2FS-fs (loop1): invalid crc value [ 21.638187][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 21.645372][ T429] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 21.651689][ T301] usb 1-1: config 0 descriptor?? [ 21.682081][ T429] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 21.689314][ T429] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 21.722146][ T279] attempt to access beyond end of device [ 21.722146][ T279] loop1: rw=2049, want=45104, limit=40427 [ 21.921469][ T302] usb 5-1: USB disconnect, device number 2 [ 21.930744][ T302] usblp0: removed [ 22.032893][ T451] x86/PAT: syz.1.52:451 freeing invalid memtype [mem 0xfe408000-0xfe408fff] [ 22.042576][ T451] x86/PAT: syz.1.52:451 freeing invalid memtype [mem 0xfe407000-0xfe407fff] [ 22.131027][ T301] plantronics 0003:047F:FFFF.0001: unbalanced collection at end of report description [ 22.140784][ T301] plantronics 0003:047F:FFFF.0001: parse failed [ 22.147087][ T301] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 22.169680][ T453] F2FS-fs (loop1): invalid crc value [ 22.177062][ T453] F2FS-fs (loop1): Found nat_bits in checkpoint [ 22.197789][ T453] F2FS-fs (loop1): Start checkpoint disabled! [ 22.204876][ T453] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 22.219668][ T24] kauditd_printk_skb: 103 callbacks suppressed [ 22.219678][ T24] audit: type=1400 audit(1793184415.239:177): avc: denied { unlink } for pid=457 comm="syz.2.54" name="#1" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 22.248168][ T24] audit: type=1400 audit(1793184415.249:178): avc: denied { create } for pid=452 comm="syz.1.53" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 22.265397][ T9] attempt to access beyond end of device [ 22.265397][ T9] loop1: rw=2049, want=40984, limit=40427 [ 22.268597][ T24] audit: type=1400 audit(1793184415.249:179): avc: denied { rename } for pid=452 comm="syz.1.53" name="file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 22.302441][ T24] audit: type=1400 audit(1793184415.259:180): avc: denied { unlink } for pid=452 comm="syz.1.53" name="file0" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 22.324459][ T24] audit: type=1400 audit(1793184415.259:181): avc: denied { rename } for pid=452 comm="syz.1.53" name="file0" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 22.346531][ T24] audit: type=1400 audit(1793184415.259:182): avc: denied { rmdir } for pid=452 comm="syz.1.53" name=2E02 dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 22.368021][ T24] audit: type=1400 audit(1793184415.259:183): avc: denied { create } for pid=457 comm="syz.2.54" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 22.388866][ T20] usb 1-1: USB disconnect, device number 2 [ 22.484920][ T24] audit: type=1400 audit(1793184415.499:184): avc: denied { mount } for pid=472 comm="syz.4.60" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 22.514566][ T24] audit: type=1400 audit(1793184415.499:185): avc: denied { block_suspend } for pid=474 comm="syz.1.61" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 22.535999][ T24] audit: type=1400 audit(1793184415.529:186): avc: denied { read write } for pid=472 comm="syz.4.60" name="control" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 22.594193][ T478] erofs: (device loop4): mounted with root inode @ nid 36. [ 22.610674][ T41] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 22.625580][ T478] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 22.643049][ T478] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 22.686517][ T478] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 22.703924][ T478] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 23.100185][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.190229][ T54] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 23.362431][ T519] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 23.369121][ T519] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 23.378018][ T519] F2FS-fs (loop1): invalid crc value [ 23.384571][ T519] F2FS-fs (loop1): Found nat_bits in checkpoint [ 23.391125][ T15] Bluetooth: hci0: command 0x1003 tx timeout [ 23.397241][ T410] Bluetooth: hci0: sending frame failed (-49) [ 23.410663][ T519] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 23.417871][ T519] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 23.425472][ T407] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 23.435668][ T279] attempt to access beyond end of device [ 23.435668][ T279] loop1: rw=2049, want=45104, limit=40427 [ 23.460251][ T20] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 23.469345][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.550336][ T54] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 23.560010][ T54] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 23.640742][ T532] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 23.647243][ T532] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 23.656226][ T532] F2FS-fs (loop1): invalid crc value [ 23.662700][ T532] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 23.683261][ T532] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 23.690376][ T532] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 23.720277][ T54] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 23.729474][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.737707][ T54] usb 1-1: Product: syz [ 23.742637][ T54] usb 1-1: Manufacturer: syz [ 23.747232][ T54] usb 1-1: SerialNumber: syz [ 23.791944][ T54] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 23.801109][ T407] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.817839][ T407] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.829057][ T407] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 23.839589][ T407] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.852855][ T54] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 23.852855][ T54] Please send a copy of this message to and [ 23.878451][ T279] attempt to access beyond end of device [ 23.878451][ T279] loop1: rw=2049, want=45104, limit=40427 [ 23.915307][ T302] usb 3-1: USB disconnect, device number 2 [ 24.030373][ T407] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.039535][ T407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.047610][ T407] usb 5-1: Product: syz [ 24.051979][ T407] usb 5-1: Manufacturer: syz [ 24.056582][ T407] usb 5-1: SerialNumber: syz [ 24.100690][ T407] cdc_mbim 5-1:1.0: skipping garbage [ 24.107959][ T555] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 24.223433][ T565] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 24.232453][ T565] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 24.470252][ T302] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.704101][ T584] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.103: iget: bad i_size value: 38620345925642 [ 24.716913][ T584] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.103: couldn't read orphan inode 15 (err -117) [ 24.729013][ T584] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 24.740265][ T584] EXT4-fs error (device loop1): ext4_check_dx_root:2229: inode #2: comm syz.1.103: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 24.814919][ T589] capability: warning: `syz.1.104' uses deprecated v2 capabilities in a way that may be insecure [ 24.830476][ T302] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 24.833950][ T591] FAULT_INJECTION: forcing a failure. [ 24.833950][ T591] name failslab, interval 1, probability 0, space 0, times 1 [ 24.839813][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.852676][ T591] CPU: 0 PID: 591 Comm: syz.1.105 Not tainted syzkaller #0 [ 24.867325][ T591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.877375][ T591] Call Trace: [ 24.880668][ T591] __dump_stack+0x21/0x24 [ 24.885074][ T591] dump_stack_lvl+0x1a7/0x208 [ 24.889724][ T591] ? show_regs_print_info+0x18/0x18 [ 24.894902][ T591] ? tty_init_dev+0xd0/0x500 [ 24.899470][ T591] ? vfs_open+0x73/0x80 [ 24.903628][ T591] ? do_filp_open+0x1df/0x400 [ 24.908310][ T591] ? do_sys_openat2+0x19f/0x750 [ 24.913320][ T591] ? __x64_sys_openat+0x136/0x160 [ 24.918423][ T591] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.924640][ T591] dump_stack+0x15/0x1c [ 24.928774][ T591] should_fail+0x3ab/0x500 [ 24.933259][ T591] ? alloc_tty_struct+0xa6/0x740 [ 24.938173][ T591] __should_failslab+0xa4/0xe0 [ 24.942942][ T591] should_failslab+0x9/0x20 [ 24.947706][ T591] kmem_cache_alloc_trace+0x3a/0x2e0 [ 24.953001][ T591] alloc_tty_struct+0xa6/0x740 [ 24.958114][ T591] ? tty_init_dev+0x500/0x500 [ 24.962775][ T591] ? kmem_cache_alloc_trace+0x179/0x2e0 [ 24.968386][ T591] ? pty_unix98_install+0xd9/0x550 [ 24.973650][ T591] pty_unix98_install+0x174/0x550 [ 24.978673][ T591] tty_init_dev+0xd0/0x500 [ 24.983069][ T591] ptmx_open+0xdd/0x2e0 [ 24.987201][ T591] chrdev_open+0x585/0x5f0 [ 24.991599][ T591] ? cd_forget+0x170/0x170 [ 24.996265][ T591] ? cd_forget+0x170/0x170 [ 25.000679][ T591] do_dentry_open+0x7a5/0x10a0 [ 25.005438][ T591] vfs_open+0x73/0x80 [ 25.009570][ T591] path_openat+0x26c3/0x3040 [ 25.014138][ T591] ? __kasan_slab_alloc+0xc9/0xe0 [ 25.019311][ T591] ? getname_flags+0xba/0x510 [ 25.024075][ T591] ? getname+0x19/0x20 [ 25.028379][ T591] ? do_sys_openat2+0xde/0x750 [ 25.033208][ T591] ? do_filp_open+0x400/0x400 [ 25.038118][ T591] do_filp_open+0x1df/0x400 [ 25.042597][ T591] ? vfs_tmpfile+0x2c0/0x2c0 [ 25.047165][ T591] ? get_unused_fd_flags+0x92/0xa0 [ 25.052257][ T591] do_sys_openat2+0x19f/0x750 [ 25.056909][ T591] ? do_sys_open+0xe0/0xe0 [ 25.061324][ T591] ? __kasan_check_write+0x14/0x20 [ 25.066721][ T591] ? switch_fpu_return+0x19c/0x330 [ 25.071859][ T591] ? fpu__clear_all+0x20/0x20 [ 25.076536][ T591] __x64_sys_openat+0x136/0x160 [ 25.081366][ T591] do_syscall_64+0x31/0x40 [ 25.085758][ T591] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.091710][ T591] RIP: 0033:0x7fb5ec142559 [ 25.096101][ T591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.116506][ T591] RSP: 002b:00007fb5eab9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 25.122427][ T302] usb 3-1: USB disconnect, device number 3 [ 25.125051][ T591] RAX: ffffffffffffffda RBX: 00007fb5ec3c8fa0 RCX: 00007fb5ec142559 [ 25.125059][ T591] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 25.125065][ T591] RBP: 00007fb5ec1d9b20 R08: 0000000000000000 R09: 0000000000000000 [ 25.125080][ T591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.163117][ T591] R13: 00007fb5ec3c9038 R14: 00007fb5ec3c8fa0 R15: 00007ffdf7aa2568 [ 25.190550][ T54] scsi host1: usb-storage 1-1:1.0 [ 25.198204][ T54] usb 1-1: USB disconnect, device number 3 [ 25.216969][ T601] FAULT_INJECTION: forcing a failure. [ 25.216969][ T601] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 25.230734][ T601] CPU: 1 PID: 601 Comm: syz.1.109 Not tainted syzkaller #0 [ 25.237941][ T601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.247974][ T601] Call Trace: [ 25.251252][ T601] __dump_stack+0x21/0x24 [ 25.255731][ T601] dump_stack_lvl+0x1a7/0x208 [ 25.260733][ T601] ? show_regs_print_info+0x18/0x18 [ 25.266115][ T601] dump_stack+0x15/0x1c [ 25.270531][ T601] should_fail+0x3ab/0x500 [ 25.275025][ T601] should_fail_alloc_page+0x4f/0x60 [ 25.280223][ T601] __alloc_pages_nodemask+0x11a/0x640 [ 25.285598][ T601] ? vm_mmap_pgoff+0x23b/0x350 [ 25.290515][ T601] ? ksys_mmap_pgoff+0xfd/0x1e0 [ 25.295340][ T601] ? __x64_sys_mmap+0xfa/0x110 [ 25.300076][ T601] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 25.305598][ T601] shmem_alloc_page+0x1fd/0x380 [ 25.310427][ T601] ? put_page+0xd0/0xd0 [ 25.314561][ T601] ? xas_create+0x12ae/0x1430 [ 25.319233][ T601] ? xas_create+0x12ae/0x1430 [ 25.323897][ T601] ? __memcg_kmem_charge+0x150/0x150 [ 25.329153][ T601] shmem_alloc_and_acct_page+0x3d3/0x840 [ 25.334768][ T601] ? shmem_swapin_page+0x16f0/0x16f0 [ 25.340119][ T601] ? xas_load+0x28b/0x2a0 [ 25.344523][ T601] ? find_get_entry+0x38e/0x400 [ 25.349348][ T601] ? page_cache_prev_miss+0x290/0x290 [ 25.354701][ T601] ? pagevec_add_and_need_flush+0x19d/0x2f0 [ 25.360572][ T601] ? __kasan_check_write+0x14/0x20 [ 25.365658][ T601] ? _raw_spin_lock_irq+0x95/0xf0 [ 25.370661][ T601] ? _raw_spin_lock_irqsave+0x130/0x130 [ 25.376183][ T601] ? find_lock_entry+0x4b/0x200 [ 25.381083][ T601] shmem_getpage_gfp+0x785/0x20f0 [ 25.386088][ T601] shmem_fault+0x2b5/0x650 [ 25.390483][ T601] ? shmem_write_end+0x600/0x600 [ 25.395398][ T601] ? _raw_spin_unlock+0x4d/0x70 [ 25.400228][ T601] ? finish_fault+0x532/0xa60 [ 25.404883][ T601] ? vma_data_pages+0xfc/0x130 [ 25.409623][ T601] handle_pte_fault+0x2466/0x3910 [ 25.414630][ T601] handle_mm_fault+0xf86/0x1720 [ 25.419463][ T601] ? can_reuse_spf_vma+0xe0/0xe0 [ 25.424378][ T601] ? follow_page_mask+0x7ac/0x1150 [ 25.429464][ T601] __get_user_pages+0xbf8/0x1400 [ 25.434387][ T601] ? populate_vma_page_range+0xf0/0xf0 [ 25.439819][ T601] __mm_populate+0x31c/0x420 [ 25.444385][ T601] ? __get_user_pages+0x1400/0x1400 [ 25.449561][ T601] ? __kasan_check_write+0x14/0x20 [ 25.454650][ T601] vm_mmap_pgoff+0x23b/0x350 [ 25.459217][ T601] ? account_locked_vm+0x1a0/0x1a0 [ 25.464314][ T601] ? switch_fpu_return+0x19c/0x330 [ 25.469411][ T601] ? __x64_sys_futex+0x100/0x100 [ 25.474328][ T601] ksys_mmap_pgoff+0xfd/0x1e0 [ 25.478989][ T601] __x64_sys_mmap+0xfa/0x110 [ 25.483561][ T601] do_syscall_64+0x31/0x40 [ 25.487958][ T601] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.493829][ T601] RIP: 0033:0x7fb5ec142559 [ 25.498229][ T601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.517815][ T601] RSP: 002b:00007fb5eab9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 25.526208][ T601] RAX: ffffffffffffffda RBX: 00007fb5ec3c8fa0 RCX: 00007fb5ec142559 [ 25.534180][ T601] RDX: 0000000002000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 25.542142][ T601] RBP: 00007fb5ec1d9b20 R08: ffffffffffffffff R09: 0000000000000000 [ 25.550102][ T601] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 25.558060][ T601] R13: 00007fb5ec3c9038 R14: 00007fb5ec3c8fa0 R15: 00007ffdf7aa2568 [ 25.566077][ T290] Bluetooth: hci0: command 0x1001 tx timeout [ 25.573189][ T410] Bluetooth: hci0: sending frame failed (-49) [ 25.580366][ T407] cdc_mbim 5-1:1.0: bind() failure [ 25.600265][ T407] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 25.620277][ T407] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 25.629890][ T407] usb 5-1: USB disconnect, device number 3 [ 25.654025][ T603] synth uevent: /bus/acpi: unknown uevent action string [ 26.013338][ T407] kernel write not supported for file /ppp (pid: 407 comm: kworker/1:4) [ 26.070169][ T54] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.111759][ T634] EXT4-fs (loop2): invalid journal inode [ 26.117541][ T634] EXT4-fs (loop2): can't get journal size [ 26.131031][ T634] EXT4-fs (loop2): 1 truncate cleaned up [ 26.150196][ T634] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 26.162410][ T634] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 26.660362][ T646] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(0) [ 26.677746][ T646] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 26.686902][ T646] F2FS-fs (loop1): invalid crc value [ 26.702555][ T646] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 26.771080][ T646] F2FS-fs (loop1): Start checkpoint disabled! [ 26.781585][ T646] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 26.795186][ T646] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 26.830927][ T644] F2FS-fs (loop2): Found nat_bits in checkpoint [ 26.849085][ T9] attempt to access beyond end of device [ 26.849085][ T9] loop1: rw=2049, want=40984, limit=40427 [ 26.881397][ T644] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 26.935008][ T644] syz.2.127 (pid 644) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 27.061535][ T669] tipc: Started in network mode [ 27.070323][ T669] tipc: Own node identity fe80000000000000000000000000001, cluster identity 4711 [ 27.083223][ T669] tipc: Enabled bearer , priority 10 [ 27.123823][ T661] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 27.151031][ T661] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 27.160001][ T661] F2FS-fs (loop0): invalid crc value [ 27.166516][ T661] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 27.186687][ T661] F2FS-fs (loop0): Start checkpoint disabled! [ 27.193554][ T661] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 27.200706][ T661] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 27.220389][ T24] kauditd_printk_skb: 76 callbacks suppressed [ 27.220400][ T24] audit: type=1326 audit(1793184420.229:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=675 comm="syz.2.138" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d90fc559 code=0x7ffc0000 [ 27.256571][ T24] audit: type=1326 audit(1793184420.239:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=675 comm="syz.2.138" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d90fc559 code=0x7ffc0000 [ 27.282257][ T24] audit: type=1326 audit(1793184420.239:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=675 comm="syz.2.138" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f29d90fc2c2 code=0x7ffc0000 [ 27.307128][ T24] audit: type=1326 audit(1793184420.239:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=675 comm="syz.2.138" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f29d90fc357 code=0x7ffc0000 [ 27.307281][ T9] attempt to access beyond end of device [ 27.307281][ T9] loop0: rw=2049, want=45104, limit=40427 [ 27.331948][ T24] audit: type=1326 audit(1793184420.239:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=675 comm="syz.2.138" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f29d90b9251 code=0x7ffc0000 [ 27.380030][ T24] audit: type=1326 audit(1793184420.239:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=675 comm="syz.2.138" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f29d90fd349 code=0x7ffc0000 [ 27.404812][ T24] audit: type=1326 audit(1793184420.239:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=675 comm="syz.2.138" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f29d90b92bb code=0x7ffc0000 [ 27.429579][ T24] audit: type=1326 audit(1793184420.239:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=675 comm="syz.2.138" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d90fc559 code=0x7ffc0000 [ 27.454149][ T54] usb 2-1: device descriptor read/64, error -71 [ 27.460451][ T24] audit: type=1326 audit(1793184420.239:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=675 comm="syz.2.138" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d90fc559 code=0x7ffc0000 [ 27.485174][ T24] audit: type=1326 audit(1793184420.239:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=675 comm="syz.2.138" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f29d90b89ac code=0x7ffc0000 [ 27.593898][ T700] netlink: 57 bytes leftover after parsing attributes in process `syz.0.146'. [ 27.603484][ T700] netlink: 57 bytes leftover after parsing attributes in process `syz.0.146'. [ 27.630226][ T15] Bluetooth: hci0: command 0x1009 tx timeout [ 27.671554][ T698] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 27.680685][ T698] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.798719][ T712] attempt to access beyond end of device [ 27.798719][ T712] loop2: rw=2049, want=544, limit=256 [ 27.810033][ T712] attempt to access beyond end of device [ 27.810033][ T712] loop2: rw=2049, want=1024, limit=256 [ 27.821433][ T712] attempt to access beyond end of device [ 27.821433][ T712] loop2: rw=2049, want=1508, limit=256 [ 27.930261][ T54] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.942006][ T54] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.961747][ T723] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 27.975606][ T723] EXT4-fs error (device loop0): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 27.994704][ T723] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 242 with error 28 [ 28.007229][ T723] EXT4-fs (loop0): This should not happen!! Data will be lost [ 28.007229][ T723] [ 28.016975][ T723] EXT4-fs (loop0): Total free blocks count 0 [ 28.023082][ T723] EXT4-fs (loop0): Free/Dirty block details [ 28.028994][ T723] EXT4-fs (loop0): free_blocks=4096 [ 28.034364][ T54] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 28.043518][ T723] EXT4-fs (loop0): dirty_blocks=256 [ 28.048784][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 28.057010][ T723] EXT4-fs (loop0): Block reservation details [ 28.065265][ T54] usb 2-1: SerialNumber: syz [ 28.070243][ T723] EXT4-fs (loop0): i_reserved_data_blocks=16 [ 28.080185][ T25] tipc: 32-bit node address hash set to 100080fe [ 28.088328][ T722] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 28.109822][ T722] EXT4-fs (loop0): This should not happen!! Data will be lost [ 28.109822][ T722] [ 28.370658][ T54] usb 2-1: 0:2 : does not exist [ 28.376829][ T54] usb 2-1: USB disconnect, device number 2 [ 28.421084][ T742] F2FS-fs (loop2): fault_injection options not supported [ 28.435722][ T738] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 28.438703][ T742] F2FS-fs (loop2): fault_type options not supported [ 28.451118][ T738] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 28.459525][ T742] F2FS-fs (loop2): invalid crc value [ 28.465107][ T738] F2FS-fs (loop4): invalid crc value [ 28.471157][ T742] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.471867][ T738] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.483945][ T15] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.505144][ T742] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.519597][ T738] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 28.526735][ T738] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 28.534678][ T282] attempt to access beyond end of device [ 28.534678][ T282] loop2: rw=2049, want=45104, limit=40427 [ 28.590481][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.730202][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 28.850219][ T15] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.870158][ T15] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.884392][ T15] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.897469][ T15] usb 1-1: config 0 interface 0 has no altsetting 0 [ 28.910187][ T15] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 28.924419][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.936125][ T15] usb 1-1: config 0 descriptor?? [ 29.053275][ T785] F2FS-fs (loop1): invalid crc value [ 29.061009][ T785] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.103242][ T785] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 29.110041][ T785] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 29.124457][ T815] tipc: Enabling of bearer rejected, already enabled [ 29.246470][ T825] process 'syz.4.194' launched '/dev/fd/5' with NULL argv: empty string added [ 29.293126][ T834] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04f, utbl_chksum : 0xe619d30d) [ 29.308159][ T834] attempt to access beyond end of device [ 29.308159][ T834] loop1: rw=0, want=34225520832, limit=256 [ 29.355677][ T838] ================================================================== [ 29.364103][ T838] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3160 [ 29.372249][ T838] Read of size 8 at addr ffff8881192c68d8 by task syz.1.200/838 [ 29.379963][ T838] [ 29.382278][ T838] CPU: 1 PID: 838 Comm: syz.1.200 Not tainted syzkaller #0 [ 29.389447][ T838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.399482][ T838] Call Trace: [ 29.402789][ T838] __dump_stack+0x21/0x24 [ 29.407117][ T838] dump_stack_lvl+0x1a7/0x208 [ 29.411786][ T838] ? show_regs_print_info+0x18/0x18 [ 29.411936][ T15] input: HID 046d:c215 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C215.0002/input/input6 [ 29.416980][ T838] ? thaw_kernel_threads+0x220/0x220 [ 29.416993][ T838] print_address_description+0x7f/0x2c0 [ 29.417011][ T838] ? tc_setup_flow_action+0x88e/0x3160 [ 29.444488][ T838] kasan_report+0x100/0x140 [ 29.448975][ T838] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 29.454768][ T838] ? tc_setup_flow_action+0x88e/0x3160 [ 29.460211][ T838] __asan_report_load8_noabort+0x14/0x20 [ 29.465912][ T838] tc_setup_flow_action+0x88e/0x3160 [ 29.471177][ T838] mall_replace_hw_filter+0x2db/0x8c0 [ 29.476535][ T838] ? pcpu_block_update_hint_alloc+0x8b7/0xc50 [ 29.482648][ T838] ? mall_set_parms+0x450/0x450 [ 29.487491][ T838] ? tcf_exts_destroy+0xb0/0xb0 [ 29.492335][ T838] ? pcpu_alloc+0xf8d/0x16c0 [ 29.493516][ T15] logitech 0003:046D:C215.0002: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.0-1/input0 [ 29.496930][ T838] ? mall_set_parms+0x1a0/0x450 [ 29.496949][ T838] mall_change+0x546/0x770 [ 29.518748][ T838] ? __kasan_check_write+0x14/0x20 [ 29.523869][ T838] ? mall_get+0xa0/0xa0 [ 29.528052][ T838] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 29.533959][ T838] tc_new_tfilter+0x1487/0x1ab0 [ 29.538815][ T838] ? mall_get+0xa0/0xa0 [ 29.540177][ T301] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 29.542953][ T838] ? tcf_gate_entry_destructor+0x20/0x20 [ 29.542966][ T838] ? security_capable+0x87/0xb0 [ 29.542983][ T838] ? ns_capable+0x8c/0xf0 [ 29.565722][ T838] ? netlink_net_capable+0x125/0x160 [ 29.571007][ T838] ? tcf_gate_entry_destructor+0x20/0x20 [ 29.576635][ T838] rtnetlink_rcv_msg+0x811/0xca0 [ 29.581574][ T838] ? unwind_get_return_address+0x4d/0x90 [ 29.587192][ T838] ? rtnetlink_bind+0x80/0x80 [ 29.592285][ T838] ? stack_trace_save+0xa6/0xf0 [ 29.597116][ T838] ? stack_trace_snprint+0xe0/0xe0 [ 29.602813][ T838] ? avc_has_perm+0x168/0x3d0 [ 29.607478][ T838] ? memcpy+0x56/0x70 [ 29.611447][ T838] ? avc_has_perm+0x27f/0x3d0 [ 29.616118][ T838] ? __kasan_slab_alloc+0xc9/0xe0 [ 29.616315][ T290] usb 1-1: USB disconnect, device number 4 [ 29.621138][ T838] ? avc_has_perm_noaudit+0x3b0/0x3b0 [ 29.621150][ T838] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.621161][ T838] ? selinux_nlmsg_lookup+0x398/0x430 [ 29.621172][ T838] netlink_rcv_skb+0x1e9/0x430 [ 29.621181][ T838] ? rtnetlink_bind+0x80/0x80 [ 29.621189][ T838] ? netlink_ack+0xb30/0xb30 [ 29.621206][ T838] ? __netlink_lookup+0x387/0x3b0 [ 29.662658][ T838] rtnetlink_rcv+0x1c/0x20 [ 29.667052][ T838] netlink_unicast+0x86c/0xa30 [ 29.671792][ T838] netlink_sendmsg+0x949/0xb70 [ 29.676540][ T838] ? netlink_getsockopt+0x530/0x530 [ 29.681735][ T838] ? security_socket_sendmsg+0x82/0xa0 [ 29.687196][ T838] ? netlink_getsockopt+0x530/0x530 [ 29.692522][ T838] ____sys_sendmsg+0x5be/0x8f0 [ 29.697282][ T838] ? __sys_sendmsg_sock+0x40/0x40 [ 29.702284][ T838] ? import_iovec+0x7c/0xb0 [ 29.706781][ T838] ___sys_sendmsg+0x236/0x2e0 [ 29.711435][ T838] ? __sys_sendmsg+0x280/0x280 [ 29.716176][ T838] ? alloc_file+0x82/0x580 [ 29.720576][ T838] ? __fdget+0x1a1/0x230 [ 29.724823][ T838] __x64_sys_sendmsg+0x201/0x2d0 [ 29.729759][ T838] ? __kasan_check_write+0x14/0x20 [ 29.734855][ T838] ? ___sys_sendmsg+0x2e0/0x2e0 [ 29.739688][ T838] ? __kasan_check_read+0x11/0x20 [ 29.744692][ T838] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 29.750315][ T838] do_syscall_64+0x31/0x40 [ 29.754709][ T838] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.760594][ T838] RIP: 0033:0x7fb5ec142559 [ 29.764990][ T838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.784824][ T838] RSP: 002b:00007fb5eab9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 29.793673][ T838] RAX: ffffffffffffffda RBX: 00007fb5ec3c8fa0 RCX: 00007fb5ec142559 [ 29.801629][ T838] RDX: 0000000020000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 29.809577][ T838] RBP: 00007fb5ec1d9b20 R08: 0000000000000000 R09: 0000000000000000 [ 29.817526][ T838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.825487][ T838] R13: 00007fb5ec3c9038 R14: 00007fb5ec3c8fa0 R15: 00007ffdf7aa2568 [ 29.833566][ T838] [ 29.835873][ T838] Allocated by task 838: [ 29.840092][ T838] __kasan_kmalloc+0xd4/0x100 [ 29.844748][ T838] __kmalloc+0x19f/0x330 [ 29.848974][ T838] tcf_idr_create+0x5f/0x790 [ 29.853580][ T838] tcf_idr_create_from_flags+0x61/0x70 [ 29.859017][ T838] tcf_gact_init+0x2e6/0x560 [ 29.863578][ T838] tcf_action_init_1+0x443/0x6d0 [ 29.868485][ T838] tcf_action_init+0x227/0x780 [ 29.873227][ T838] tcf_exts_validate+0x23c/0x540 [ 29.878225][ T838] mall_set_parms+0x4a/0x450 [ 29.882789][ T838] mall_change+0x47a/0x770 [ 29.887193][ T838] tc_new_tfilter+0x1487/0x1ab0 [ 29.892032][ T838] rtnetlink_rcv_msg+0x811/0xca0 [ 29.896951][ T838] netlink_rcv_skb+0x1e9/0x430 [ 29.901702][ T838] rtnetlink_rcv+0x1c/0x20 [ 29.906095][ T838] netlink_unicast+0x86c/0xa30 [ 29.910247][ T301] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 29.910843][ T838] netlink_sendmsg+0x949/0xb70 [ 29.921718][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.926333][ T838] ____sys_sendmsg+0x5be/0x8f0 [ 29.926341][ T838] ___sys_sendmsg+0x236/0x2e0 [ 29.926348][ T838] __x64_sys_sendmsg+0x201/0x2d0 [ 29.926366][ T838] do_syscall_64+0x31/0x40 [ 29.939066][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.941929][ T838] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.941932][ T838] [ 29.941940][ T838] The buggy address belongs to the object at ffff8881192c6800 [ 29.941940][ T838] which belongs to the cache kmalloc-256 of size 256 [ 29.941949][ T838] The buggy address is located 216 bytes inside of [ 29.941949][ T838] 256-byte region [ffff8881192c6800, ffff8881192c6900) [ 29.941953][ T838] The buggy address belongs to the page: [ 29.941986][ T838] page:ffffea000464b180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1192c6 [ 29.947067][ T301] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 29.951703][ T838] head:ffffea000464b180 order:1 compound_mapcount:0 [ 29.951711][ T838] flags: 0x4000000000010200(slab|head) [ 29.951725][ T838] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043200 [ 29.951734][ T838] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 29.951738][ T838] page dumped because: kasan: bad access detected [ 29.951744][ T838] page_owner tracks the page as allocated [ 29.951771][ T838] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 821, ts 29238987742, free_ts 29197722377 [ 29.951792][ T838] prep_new_page+0x176/0x190 [ 30.030377][ T301] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 30.030407][ T838] get_page_from_freelist+0x225f/0x23f0 [ 30.030423][ T838] __alloc_pages_nodemask+0x29a/0x640 [ 30.037082][ T301] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 30.042427][ T838] new_slab+0x84/0x3f0 [ 30.042438][ T838] ___slab_alloc+0x2f8/0x4c0 [ 30.042444][ T838] __slab_alloc+0x63/0xa0 [ 30.042452][ T838] __kmalloc+0x1f9/0x330 [ 30.042463][ T838] __register_sysctl_table+0xa35/0x1240 [ 30.042472][ T838] register_net_sysctl+0x2c/0x40 [ 30.042490][ T838] neigh_sysctl_register+0x9a9/0xa90 [ 30.051613][ T301] usb 5-1: Manufacturer: syz [ 30.059638][ T838] addrconf_sysctl_register+0xb3/0x1a0 [ 30.059647][ T838] ipv6_add_dev+0xbb2/0x10b0 [ 30.059662][ T838] addrconf_notify+0x582/0xea0 [ 30.069872][ T301] usb 5-1: config 0 descriptor?? [ 30.071750][ T838] raw_notifier_call_chain+0x90/0x100 [ 30.071760][ T838] call_netdevice_notifiers+0x119/0x190 [ 30.071770][ T838] register_netdevice+0x100a/0x13a0 [ 30.071775][ T838] page last free stack trace: [ 30.071795][ T838] free_unref_page_prepare+0x2b7/0x2d0 [ 30.207710][ T838] free_unref_page_list+0x129/0x9c0 [ 30.212881][ T838] release_pages+0xe41/0xe90 [ 30.217446][ T838] free_pages_and_swap_cache+0x86/0xa0 [ 30.222879][ T838] tlb_finish_mmu+0x17e/0x310 [ 30.227547][ T838] exit_mmap+0x329/0x590 [ 30.231761][ T838] __mmput+0x92/0x2d0 [ 30.235713][ T838] mmput+0x4e/0x150 [ 30.239492][ T838] do_exit+0x9d8/0x24e0 [ 30.243619][ T838] do_group_exit+0x149/0x310 [ 30.248181][ T838] get_signal+0xfb1/0x1300 [ 30.252570][ T838] arch_do_signal_or_restart+0xe7/0x11b0 [ 30.258173][ T838] exit_to_user_mode_loop+0xa2/0xe0 [ 30.263342][ T838] exit_to_user_mode_prepare+0x76/0xa0 [ 30.268772][ T838] syscall_exit_to_user_mode+0x1d/0x40 [ 30.274207][ T838] do_syscall_64+0x3d/0x40 [ 30.278597][ T838] [ 30.280898][ T838] Memory state around the buggy address: [ 30.286502][ T838] ffff8881192c6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 30.294778][ T838] ffff8881192c6800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 30.302820][ T838] >ffff8881192c6880: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 30.310871][ T838] ^ [ 30.317812][ T838] ffff8881192c6900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 30.325849][ T838] ffff8881192c6980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 30.333883][ T838] ================================================================== [ 30.341920][ T838] Disabling lock debugging due to kernel taint [ 30.363162][ T839] fido_id[839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 30.570886][ T301] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 30.578117][ T301] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 30.587065][ T301] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 30.850884][ T54] usb 5-1: USB disconnect, device number 4