last executing test programs: 1m3.112287194s ago: executing program 4 (id=71): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000141cb59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe80"], 0x48}}, 0x0) 1m3.107646573s ago: executing program 4 (id=72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffff9, 0x10000000005, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x6, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0xa, 0x2, 0x2, 0x700000000000000, 0xb, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0xfff, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x4ff, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x150b0000, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x7fff, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa8, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffe, 0x401, 0x9, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x6, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x10000003, 0xd, 0x4, 0x6, 0xffff, 0x1, 0x401, 0x4, 0x2, 0x7, 0xea7, 0x5]}) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240080d5}, 0x14) (async, rerun: 32) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) (rerun: 32) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000740), 0x42, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) (async) setsockopt$MRT_DONE(r7, 0x0, 0xc9, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000106, 0x0, 0x5}]}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) unshare(0x2040400) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0xe8, 0x300, 0x300, 0x3e8, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="66b824010f00d80f01d10f0736420f001d0f000000f366360f2067b9cd0800000f320f201ec74424003f010000c74424020c000000ff2c24b9800000c00f3235000800000f308fa928932e", 0x4b}], 0x1, 0x42, 0x0, 0x0) (async, rerun: 32) ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) (rerun: 32) 1m3.09064829s ago: executing program 4 (id=73): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, 0x0, 0x1e, 0x0, 0x1}, 0x28) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0xb, 0x1}}, 0x6d, 0x1000, &(0x7f0000000040)="806bb75241b426e22ed3ed531b93591c32aed8c761e075915d003250ebcd0a99cdc9ee2f892d8b1e923c0a51875f68f04106a8c3442eea963f3a1f78260fb0d5ab0fde3081a46c5913d965e1e6307fbcbe089c8d4ed49cf1d8d661d5a685016045c93d5287b24214e9cea0d63b"}) 1m3.060663894s ago: executing program 4 (id=74): r0 = syz_usb_connect$midi(0x6, 0x38, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000020303000000000000000011000000100800010001"], 0x1c}}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x6, 0x0, 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000480)='./file0/../file0/../file0/../file0\x00', r5, &(0x7f0000000300)='./file0\x00', 0x0) r7 = userfaultfd(0x80801) r8 = epoll_create(0x5) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000bc0)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000340)={0x80002015}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYRES8=r9, @ANYRES8=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r11, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x40) openat$procfs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sysvipc/shm\x00', 0x0, 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000c00)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB="2c726f6f746d6f64653d49216673ffff53a806303030328b647e303034303030302c7573ba725f69643d", @ANYBLOB="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", @ANYBLOB=',group_id=', @ANYRESDEC=r0, @ANYBLOB="2cdbfd50d9977981c3773add97db4d484409fa0ab7adb85acadc9750a3a0bf2911bdf9df00ea6ddd280a7b48b325751fd228395d0fbd42fa7f0d0c01162312f7"], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") 1m2.353842503s ago: executing program 4 (id=81): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESOCT, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xffffffff}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c40)={'vcan0\x00', 0x0}) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f0000001480)={0x7, &(0x7f0000001380)=[{0x5, 0xfa, &(0x7f0000000ec0)="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"}, {0x6, 0x42, &(0x7f0000000fc0)="29a8577063cfe14e65fed5f89bb231f9e4a71b0980c5cc35c527f433772010f6d427f18f2f97bf99b9582da06c85952cb73959d56ed63ab8bd1585c1ac3b67f689db", 0x1, 0x1}, {0x2, 0x2e, &(0x7f00000004c0)="fce0b48de7129a961ac7c9cd1012b9f91ebb49aedd9dac877323292fb18e217276bb7461b6e12448eb12407dee73", 0x0, 0x1}, {0x10001, 0x5e, &(0x7f0000001040)="679be0d40bf4caa14f29067016fc1173a37a5ec6ac3d0bfda97579ce3b02e126edfe14e395bf42ba7c8bdbc10bf3a5bc051621044209a69652bf2bde5f5b2ee668c0d05a48340186398c99e9a02f1c94539fa2ba59d49a6c022e97af3f9d", 0x1}, {0x8, 0xc7, &(0x7f00000010c0)="34efdc13da31c37e9fae81de63d218258c42ba258785194a5ee4c2b02e533bebe172fe8f17e83f64fbb437beb66cd999eb6f2c374a5d12a7c81f32a1b409b8d6ae7a2a647423b36e8e3f6d1e449354144f52e088c272066c4babf53dd4a1a61e1040c70372823f1237eda9b4cbc8fd3f0969222e1e7ba49201792e00ff8c879f9e9ba9076b510e398c9f985ac1472764a4dac86b4886a7e7a4ee093582fea2c145be124d69933033d1888d28658dfb7812a224bea9b5ed56b9c44a759b586200164c5fd2132ea3"}, {0x2, 0xee, &(0x7f00000011c0)="6ecdfbb35bd0e0928411a5b5eee7dfcb82a99f08423d60a43bbf61efda1411093e3a14d24255681920a1ed5f0bdcb313eb427fc415334689191b8fc85023ddf89f6636cd981a4ba3bfe5780e5ad46f058f4c49dd72245bf3b3eb8ba4831bbddaeba0a7245c8f2e193cbae7516e012fe50f43a0adc64eab35cf850b74a11f97ec43c46562675fad732b14ad09aa0d282ff89c9903e54e134278e1d7ce554dc51fbea709c0c8f83c69334905862c9ce6da1b2653e1f5d8b2b4029d2295fdb9bdbcd4ffb83edd4dca1d61a9c585d7122d59680915a0cfbec269113d585f86db1a7aa6ea2def44d7d6422ba8ff86c54e"}, {0xcd, 0x50, &(0x7f00000012c0)="01a2c9780648547a547808aac1b5f7a1cc69696fa036c46ebc9ffe54031c8ac8b4d6767441586c43d1bb37d0d5925473d7b67c45127bb7cf36542383134d0af197a8aa853941a10f08950dc14bcd6744", 0x1}]}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x800}}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e30, @rand_addr=0x64010102}}]}, 0x50}, 0x1, 0x7}, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x80}}], 0x1, 0x4000004) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x80}}], 0x1, 0x4000004) socket(0x840000000002, 0x3, 0x100) (async) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) listen(r9, 0x8000) setsockopt$inet6_int(r7, 0x29, 0x16, 0x0, 0x0) (async) setsockopt$inet6_int(r7, 0x29, 0x16, 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) (async) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xf, 0x3e, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x401}, @map_val={0x18, 0x6c376c88c0f02b75, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x34, &(0x7f0000000700)=""/52, 0x1f00, 0x4, '\x00', r3, @cgroup_device, r5, 0x8, &(0x7f0000000c80)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000cc0)={0x2, 0x7, 0xfffffffb, 0xff}, 0x10, 0xffffffffffffffff, r10, 0x4, &(0x7f0000000d40)=[r0, r0, r0, r0], &(0x7f0000000d80)=[{0x0, 0x3, 0xa, 0xc}, {0x4, 0x3, 0x8, 0x6}, {0x4, 0x4, 0x1, 0xb}, {0x4, 0x1, 0xe, 0xb}], 0x10, 0x10000}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, @exit, @call={0x85, 0x0, 0x0, 0x40089}, @alu={0x7, 0x0, 0x8, 0x1, 0x9, 0x18, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x40, 0xa2, &(0x7f0000000100)=""/162, 0x41100, 0x54, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xd, 0xb881, 0x74be}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x5, 0x2, 0xe, 0x4}, {0x2, 0x2, 0x6, 0x3}, {0x5, 0x2, 0x1}, {0x3, 0x1, 0xd, 0x3}, {0x5, 0x2, 0xc}], 0x10, 0x40}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map, 0x2, 0x1, 0x7, &(0x7f0000000400)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x6ae61bf5}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x6ae61bf5, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='-\x00\x00\x00\" \x00\x00', @ANYRES32=r11, @ANYBLOB, @ANYRES32=r13, @ANYBLOB="1a7998fa73b4efee965b615810177381e83a16f744ecf5829788adffbf839dbf829d89745d70199b74bf5db4b50622ac7461e9b960372df4", @ANYRES64=r12], 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='-\x00\x00\x00\" \x00\x00', @ANYRES32=r11, @ANYBLOB, @ANYRES32=r13, @ANYBLOB="1a7998fa73b4efee965b615810177381e83a16f744ecf5829788adffbf839dbf829d89745d70199b74bf5db4b50622ac7461e9b960372df4", @ANYRES64=r12], 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) 1m2.223472629s ago: executing program 4 (id=82): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000040)={[{@nfs_export_on}, {@metacopy_on}]}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x46a, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) r4 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x1, 0x2, 0xffe}) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x8007, 0x4}) sendto$packet(r0, &(0x7f0000000240)='\t\x00\x00', 0x3, 0x200400c4, &(0x7f00000001c0)={0x11, 0x16, r2, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x9, 0xf, 0x800, 0x0, 0xffffffffffffffff, 0x7, '\x00', r2, r5, 0x5, 0x5, 0x2, 0x7}, 0x50) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a000000000000db11a40000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1204542, 0x0) r7 = dup(r6) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0x11b21234, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x4, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) pwrite64(r8, &(0x7f0000000140)="1be464566bf506decc92f159cfdd4fec156c791813d66d51300d77eb67f65aaeeba399628c3edddf2955bf4a97b07ef4426a9ac28de84c151818debc42e19fc34e54", 0x42, 0x2) 1m2.132750782s ago: executing program 32 (id=82): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000040)={[{@nfs_export_on}, {@metacopy_on}]}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x46a, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) r4 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x1, 0x2, 0xffe}) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x8007, 0x4}) sendto$packet(r0, &(0x7f0000000240)='\t\x00\x00', 0x3, 0x200400c4, &(0x7f00000001c0)={0x11, 0x16, r2, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x9, 0xf, 0x800, 0x0, 0xffffffffffffffff, 0x7, '\x00', r2, r5, 0x5, 0x5, 0x2, 0x7}, 0x50) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a000000000000db11a40000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1204542, 0x0) r7 = dup(r6) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0x11b21234, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x4, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) pwrite64(r8, &(0x7f0000000140)="1be464566bf506decc92f159cfdd4fec156c791813d66d51300d77eb67f65aaeeba399628c3edddf2955bf4a97b07ef4426a9ac28de84c151818debc42e19fc34e54", 0x42, 0x2) 2.228146715s ago: executing program 3 (id=1025): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000000), 0x760, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1c3) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x1ab400, 0x130) syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) close(0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, 0x0, 0x4040004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x88700, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0) 1.914903496s ago: executing program 0 (id=1049): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x80}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.856148756s ago: executing program 0 (id=1052): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.855697815s ago: executing program 0 (id=1055): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 1.464120182s ago: executing program 1 (id=1079): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000009000000000000000080000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000273b7b98500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 1.463959322s ago: executing program 1 (id=1080): socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001040)=ANY=[@ANYBLOB='t'], 0x174}, 0x1, 0x0, 0x0, 0x4008000}, 0x4044) 1.244250982s ago: executing program 1 (id=1088): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.244080462s ago: executing program 1 (id=1089): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r0}, 0xc) 1.243886471s ago: executing program 1 (id=1090): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xffffffff, 0x5, 0x90, 0xdcfe, 0x0, [{0x4, 0x96, 0xc, '\x00', 0x9a}, {0x6, 0x2, 0x7, '\x00', 0x8}, {0x3, 0x10, 0xfc, '\x00', 0x6}, {0x6, 0x9, 0x1, '\x00', 0x1}, {0x9, 0x5, 0x3, '\x00', 0xf}, {0x5, 0xfe, 0xa0, '\x00', 0x5}, {0x1, 0x9, 0xca, '\x00', 0xcf}, {0x1, 0x6, 0x6, '\x00', 0x6}, {0x0, 0x1, 0xf5, '\x00', 0x9}, {0x5, 0x7, 0x6, '\x00', 0x3}, {0x9, 0x7f, 0x7, '\x00', 0xff}, {0xff, 0x1, 0xcd, '\x00', 0x3}, {0x81, 0x4, 0x42, '\x00', 0x8}, {0xb, 0x8b, 0x8, '\x00', 0x56}, {0xd, 0x3, 0xff, '\x00', 0x5}, {0x6, 0x7, 0x8, '\x00', 0x52}, {0x1e, 0x7, 0x2, '\x00', 0x6}, {0x3, 0x4, 0x0, '\x00', 0x4}, {0xff, 0x4, 0x6}, {0x8d, 0x2, 0x9}, {0x81, 0x5, 0x8, '\x00', 0x69}, {0x24, 0xd8, 0x7}, {0x5, 0x81, 0x4, '\x00', 0xb5}, {0xfa, 0x2, 0x7}]}}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x10c}, 0x1, 0x0, 0x0, 0x4000090}, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x38, 0x1, 0x2, 0xc05, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_open_dev$char_usb(0xc, 0xb4, 0x7cfd) 963.150589ms ago: executing program 0 (id=1103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d0001"], 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000080)=""/50, 0x32}], 0x2, 0x8, 0x10) 863.688211ms ago: executing program 0 (id=1105): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000006100)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x10120, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @random="7609844322f6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 749.953909ms ago: executing program 1 (id=1112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) write(r0, &(0x7f00000005c0)="b78e", 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/174, 0xae, 0x0, 0x0}, &(0x7f0000000100)=0x40) 617.820255ms ago: executing program 2 (id=1122): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0xe20, 0x0, @mcast1, 0x5}, 0x1c) 617.620045ms ago: executing program 2 (id=1123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 617.410335ms ago: executing program 2 (id=1124): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="02000000040000000500000043"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 597.470761ms ago: executing program 2 (id=1125): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x31670d8, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 597.069161ms ago: executing program 2 (id=1126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 577.362878ms ago: executing program 2 (id=1127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @remote, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x10001, 0x20000000) 575.390797ms ago: executing program 3 (id=1128): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)="c495", 0x2}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x10}, 0xa8d1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb228, 0x5d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000580)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@oldalloc}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) setreuid(0xee01, 0xee01) fallocate(r4, 0x3, 0xf00, 0x10000) pwrite64(r2, &(0x7f0000000280)="01", 0x200000d2, 0x9000) 252.164617ms ago: executing program 3 (id=1129): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000400)={[{@umask={'umask', 0x3d, 0x8}}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x1ff}}, {@umask={'umask', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x400}}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x1534, &(0x7f0000002d00)="$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") 133.142755ms ago: executing program 3 (id=1130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 121.148383ms ago: executing program 3 (id=1131): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)="050f", 0x0, 0x1}, 0x50) 106.81027ms ago: executing program 3 (id=1133): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) fcntl$dupfd(r2, 0x406, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0x4000200a}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 67.929613ms ago: executing program 5 (id=1134): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0xe20, 0x0, @mcast1, 0x5}, 0x1c) 67.584463ms ago: executing program 5 (id=1135): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 67.441743ms ago: executing program 5 (id=1136): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x31670d8, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 54.91268ms ago: executing program 5 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 329.15µs ago: executing program 5 (id=1138): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="02000000040000000500000043"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 169.32µs ago: executing program 5 (id=1139): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="400c100000003f3a12df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 0s ago: executing program 0 (id=1140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): ave_1) entered disabled state [ 22.415321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.422911][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.430173][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.437685][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.444866][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.452322][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.459483][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.466746][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.474243][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.495870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.504132][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.511205][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.530656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.538079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.545410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.553977][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.561064][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.569201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.577648][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.584672][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.592105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.600303][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.607387][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.627447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.635132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.642789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.651085][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.658181][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.665638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.673827][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.680887][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.692683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.703422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.714886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.724274][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.731386][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.739027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.747344][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.754378][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.762474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.770575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.788038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.796476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.804725][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.811781][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.819557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.827853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.835725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.844109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.852255][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.859314][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.867135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.875183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.901397][ T275] device veth0_vlan entered promiscuous mode [ 22.907780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.915856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.924015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.932303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.941335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.949813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.958293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.966114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.974215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.982283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.990251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.998502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.006787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.014378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.028801][ T278] device veth0_vlan entered promiscuous mode [ 23.037777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.045957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.054023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.062134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.070318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.078663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.086713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.094235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.113580][ T278] device veth1_macvtap entered promiscuous mode [ 23.123794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.132656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.141545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.150350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.158681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.169649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.177830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.185270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.198947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.207556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.216149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.224895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.236196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.244260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.254063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.261661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.269334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.278030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.288608][ T275] device veth1_macvtap entered promiscuous mode [ 23.295260][ T279] device veth0_vlan entered promiscuous mode [ 23.301657][ T277] device veth0_vlan entered promiscuous mode [ 23.313527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.321218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.329193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.337712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.346099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.354586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.362188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.370301][ T276] device veth0_vlan entered promiscuous mode [ 23.382465][ T277] device veth1_macvtap entered promiscuous mode [ 23.392659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.401061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.409529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.417927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.426096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.446116][ T278] request_module fs-gadgetfs succeeded, but still no fs? [ 23.453143][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.462065][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.470574][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.479558][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.488436][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.496600][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.507562][ T276] device veth1_macvtap entered promiscuous mode [ 23.515382][ T278] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.539857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.553137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.568623][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.577930][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.588257][ T279] device veth1_macvtap entered promiscuous mode [ 23.612747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.626291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.860931][ T308] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 24.261374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.280558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.317513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.325812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.377230][ T307] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.627105][ T307] usb 1-1: Using ep0 maxpacket: 32 [ 24.731275][ T322] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 24.747352][ T307] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.769791][ T307] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.839646][ T313] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.119242][ T313] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.207272][ T307] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 25.216369][ T307] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 25.267099][ T307] usb 1-1: Product: syz [ 25.271313][ T307] usb 1-1: Manufacturer: syz [ 25.287144][ T322] usb 5-1: device descriptor read/64, error -71 [ 25.337785][ T307] hub 1-1:4.0: USB hub found [ 25.594345][ T348] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 25.598318][ T307] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 25.621558][ T354] ====================================================== [ 25.621558][ T354] WARNING: the mand mount option is being deprecated and [ 25.621558][ T354] will be removed in v5.15! [ 25.621558][ T354] ====================================================== [ 25.648014][ T354] 9pnet: Insufficient options for proto=fd [ 25.655056][ T354] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.657891][ T24] kauditd_printk_skb: 47 callbacks suppressed [ 25.657930][ T24] audit: type=1400 audit(1773242803.550:121): avc: denied { ioctl } for pid=353 comm="syz.1.15" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 25.702333][ T322] usb 5-1: device descriptor read/64, error -71 [ 25.737756][ T307] usb 1-1: USB disconnect, device number 2 [ 25.841910][ T358] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 25.859692][ T358] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.977105][ T322] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 26.015626][ T364] FAULT_INJECTION: forcing a failure. [ 26.015626][ T364] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 26.046771][ T364] CPU: 1 PID: 364 Comm: syz.3.17 Not tainted syzkaller #0 [ 26.053929][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 26.064015][ T364] Call Trace: [ 26.067342][ T364] __dump_stack+0x21/0x24 [ 26.071694][ T364] dump_stack_lvl+0x1a7/0x208 [ 26.076404][ T364] ? show_regs_print_info+0x18/0x18 [ 26.081623][ T364] dump_stack+0x15/0x1c [ 26.085797][ T364] should_fail+0x3c1/0x510 [ 26.090226][ T364] should_fail_usercopy+0x1a/0x20 [ 26.095307][ T364] _copy_from_user+0x20/0xd0 [ 26.099949][ T364] sock_do_ioctl+0x1d8/0x380 [ 26.104585][ T364] ? sock_show_fdinfo+0xa0/0xa0 [ 26.109476][ T364] ? selinux_file_ioctl+0x3a0/0x4d0 [ 26.114686][ T364] ? mutex_trylock+0xa0/0xa0 [ 26.119288][ T364] ? __fget_files+0x2c4/0x320 [ 26.123965][ T364] sock_ioctl+0x4bd/0x760 [ 26.128300][ T364] ? sock_poll+0x350/0x350 [ 26.132719][ T364] ? __fget_files+0x2c4/0x320 [ 26.137400][ T364] ? security_file_ioctl+0x84/0xa0 [ 26.142511][ T364] ? sock_poll+0x350/0x350 [ 26.146938][ T364] __se_sys_ioctl+0x121/0x1a0 [ 26.151619][ T364] __x64_sys_ioctl+0x7b/0x90 [ 26.156230][ T364] do_syscall_64+0x31/0x40 [ 26.160663][ T364] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.166593][ T364] RIP: 0033:0x7f1e2d6ac799 [ 26.171020][ T364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.190640][ T364] RSP: 002b:00007f1e2c107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 26.199058][ T364] RAX: ffffffffffffffda RBX: 00007f1e2d925fa0 RCX: 00007f1e2d6ac799 [ 26.207053][ T364] RDX: 0000200000001040 RSI: 0000000000008920 RDI: 0000000000000003 [ 26.215035][ T364] RBP: 00007f1e2c107090 R08: 0000000000000000 R09: 0000000000000000 [ 26.223020][ T364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.231028][ T364] R13: 00007f1e2d926038 R14: 00007f1e2d925fa0 R15: 00007ffd7ae08418 [ 26.280111][ T24] audit: type=1400 audit(1773242804.180:122): avc: denied { wake_alarm } for pid=369 comm="syz.2.18" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.321117][ T24] audit: type=1400 audit(1773242804.220:123): avc: denied { create } for pid=371 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.387094][ T322] usb 5-1: device descriptor read/64, error -71 [ 26.391957][ T358] capability: warning: `syz.1.16' uses deprecated v2 capabilities in a way that may be insecure [ 26.410937][ T24] audit: type=1400 audit(1773242804.310:124): avc: denied { mount } for pid=373 comm="syz.3.20" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 26.454952][ T24] audit: type=1400 audit(1773242804.350:125): avc: denied { create } for pid=357 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.490274][ T24] audit: type=1400 audit(1773242804.350:126): avc: denied { getopt } for pid=357 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.527143][ T307] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.543669][ T24] audit: type=1400 audit(1773242804.440:127): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 26.730885][ T382] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 26.757342][ T382] EXT4-fs (loop3): Test dummy encryption mode enabled [ 26.764171][ T382] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 26.777187][ T307] usb 1-1: Using ep0 maxpacket: 16 [ 26.782459][ T322] usb 5-1: device descriptor read/64, error -71 [ 26.787164][ T382] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.827108][ T382] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 26.864510][ T382] EXT4-fs (loop3): 1 truncate cleaned up [ 26.877075][ T382] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 26.910644][ T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.918396][ T24] audit: type=1400 audit(1773242804.810:128): avc: denied { write } for pid=381 comm="syz.3.24" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.921502][ T322] usb usb5-port1: attempt power cycle [ 26.954302][ T307] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 26.957356][ T24] audit: type=1400 audit(1773242804.840:129): avc: denied { add_name } for pid=381 comm="syz.3.24" name="freezer.self_freezing" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.987213][ T24] audit: type=1400 audit(1773242804.840:130): avc: denied { create } for pid=381 comm="syz.3.24" name="freezer.self_freezing" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.008753][ T307] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 27.107217][ T307] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.116384][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 27.124600][ T307] usb 1-1: SerialNumber: syz [ 27.167976][ T307] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 27.175930][ T307] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 27.182913][ T307] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 27.269098][ T398] Zero length message leads to an empty skb [ 27.291510][ T400] process 'syz.1.29' launched './file0' with NULL argv: empty string added [ 27.400326][ T286] usb 1-1: USB disconnect, device number 3 [ 27.437096][ T322] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 27.477399][ T396] FAT-fs (loop2): Unrecognized mount option "/dev/kvm" or missing value [ 27.656860][ T394] EXT4-fs (loop2): Test dummy encryption mode enabled [ 27.667804][ T407] netlink: 25 bytes leftover after parsing attributes in process `syz.4.30'. [ 27.673142][ T394] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 27.688056][ T394] EXT4-fs (loop2): can't mount with commit=7, fs mounted w/o journal [ 27.696417][ T407] device gretap0 entered promiscuous mode [ 27.717214][ T406] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.30'. [ 27.726514][ T406] 0ªX¹¦Dö»: renamed from gretap0 [ 27.732501][ T406] device 00ªX¹¦Dö» left promiscuous mode [ 27.762461][ T415] FAT-fs (loop1): Directory bread(block 64) failed [ 27.769215][ T415] FAT-fs (loop1): Directory bread(block 65) failed [ 27.775791][ T415] FAT-fs (loop1): Directory bread(block 66) failed [ 27.782521][ T415] FAT-fs (loop1): Directory bread(block 67) failed [ 27.789412][ T415] FAT-fs (loop1): Directory bread(block 68) failed [ 27.796051][ T415] FAT-fs (loop1): Directory bread(block 69) failed [ 27.802663][ T415] FAT-fs (loop1): Directory bread(block 70) failed [ 27.809224][ T415] FAT-fs (loop1): Directory bread(block 71) failed [ 27.815759][ T415] FAT-fs (loop1): Directory bread(block 72) failed [ 27.822423][ T415] FAT-fs (loop1): Directory bread(block 73) failed [ 27.902040][ T429] usb usb8: usbfs: process 429 (syz.1.37) did not claim interface 0 before use [ 27.927136][ T322] usb 5-1: device not accepting address 4, error -71 [ 27.993711][ T437] x_tables: duplicate underflow at hook 2 [ 28.000572][ T440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36'. [ 28.122065][ T440] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x111aaed0) [ 28.132458][ T440] exFAT-fs (loop2): invalid boot region [ 28.133646][ T20] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.138045][ T440] exFAT-fs (loop2): failed to recognize exfat type [ 28.155473][ T439] F2FS-fs (loop0): fault_injection options not supported [ 28.164665][ T439] F2FS-fs (loop0): invalid crc value [ 28.170939][ T20] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 28.190419][ T439] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.253199][ T439] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 28.268425][ T454] netlink: 6 bytes leftover after parsing attributes in process `syz.3.44'. [ 28.282782][ T454] netlink: 6 bytes leftover after parsing attributes in process `syz.3.44'. [ 28.305996][ T444] FAULT_INJECTION: forcing a failure. [ 28.305996][ T444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 28.320039][ T444] CPU: 0 PID: 444 Comm: syz.1.42 Not tainted syzkaller #0 [ 28.327181][ T444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.337254][ T444] Call Trace: [ 28.340585][ T444] __dump_stack+0x21/0x24 [ 28.344928][ T444] dump_stack_lvl+0x1a7/0x208 [ 28.349615][ T444] ? show_regs_print_info+0x18/0x18 [ 28.354822][ T444] dump_stack+0x15/0x1c [ 28.358987][ T444] should_fail+0x3c1/0x510 [ 28.363453][ T444] should_fail_usercopy+0x1a/0x20 [ 28.368488][ T444] _copy_from_user+0x20/0xd0 [ 28.373080][ T444] do_sys_poll+0x2be/0x1240 [ 28.377583][ T444] ? __kernel_text_address+0xa0/0x100 [ 28.382963][ T444] ? arch_stack_walk+0xee/0x140 [ 28.387821][ T444] ? poll_select_finish+0x620/0x620 [ 28.393023][ T444] ? stack_trace_save+0xa6/0xf0 [ 28.397878][ T444] ? stack_trace_snprint+0xf0/0xf0 [ 28.403000][ T444] ? path_openat+0x2970/0x31c0 [ 28.407809][ T444] ? proc_fail_nth_read+0x220/0x220 [ 28.413011][ T444] ? rw_verify_area+0x1c0/0x360 [ 28.417862][ T444] ? preempt_count_add+0x90/0x1b0 [ 28.422893][ T444] ? nsecs_to_jiffies+0x30/0x30 [ 28.427746][ T444] __se_sys_poll+0x136/0x370 [ 28.432338][ T444] ? __x64_sys_poll+0x90/0x90 [ 28.437051][ T444] ? debug_smp_processor_id+0x17/0x20 [ 28.442463][ T444] __x64_sys_poll+0x7b/0x90 [ 28.446980][ T444] do_syscall_64+0x31/0x40 [ 28.451401][ T444] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.457295][ T444] RIP: 0033:0x7f1e96656799 [ 28.461719][ T444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.481331][ T444] RSP: 002b:00007f1e950b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 28.489750][ T444] RAX: ffffffffffffffda RBX: 00007f1e968cffa0 RCX: 00007f1e96656799 [ 28.497743][ T444] RDX: 0000000000000101 RSI: 0000000000000001 RDI: 0000200000000040 [ 28.505716][ T444] RBP: 00007f1e950b1090 R08: 0000000000000000 R09: 0000000000000000 [ 28.513705][ T444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 28.521683][ T444] R13: 00007f1e968d0038 R14: 00007f1e968cffa0 R15: 00007ffd7cfaf718 [ 28.531819][ T460] netlink: 36 bytes leftover after parsing attributes in process `syz.3.45'. [ 28.583702][ T275] attempt to access beyond end of device [ 28.583702][ T275] loop0: rw=2049, want=45104, limit=40427 [ 28.608872][ T462] input: syz1 as /devices/virtual/input/input4 [ 28.670194][ T466] usb usb8: usbfs: process 466 (syz.3.49) did not claim interface 0 before use [ 28.760499][ T471] SELinux: failed to load policy [ 28.777798][ T464] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 28.790238][ T464] F2FS-fs (loop1): Unrecognized mount option "grpquota=}%.^@&" or missing value [ 28.869758][ T474] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue [ 28.884097][ T474] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.141342][ T492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 29.391343][ T485] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 29.411928][ T485] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.547005][ T485] EXT4-fs error (device loop1) in ext4_do_update_inode:5355: error 27 [ 29.573819][ T485] EXT4-fs error (device loop1): ext4_dirty_inode:6162: inode #2: comm syz.1.55: mark_inode_dirty error [ 29.592465][ T15] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.604264][ T15] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 29.624385][ T485] EXT4-fs error (device loop1) in ext4_do_update_inode:5355: error 27 [ 29.647349][ T485] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.55: mark_inode_dirty error [ 29.683041][ T485] EXT4-fs error (device loop1): ext4_get_first_dir_block:3719: inode #18: comm syz.1.55: directory missing '.' [ 29.729382][ T485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.55'. [ 29.902095][ T20] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.928304][ T20] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 30.039214][ T502] EXT4-fs (loop4): Ignoring removed orlov option [ 30.047125][ T502] EXT4-fs (loop4): Test dummy encryption mode enabled [ 30.054075][ T502] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 30.054075][ T502] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 30.054075][ T502] [ 30.088575][ T502] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nouser_xattr,,errors=continue [ 30.107151][ T321] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 30.410632][ T531] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856e018, mo2=0002] [ 30.418911][ T531] System zones: 0-5 [ 30.423616][ T531] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000009,grpquota,nouid32,debug,nojournal_checksum,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue [ 30.487197][ T321] usb 2-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 30.503375][ T321] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 30.514559][ T321] usb 2-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 30.554890][ T538] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.560603][ T545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7188 sclass=netlink_route_socket pid=545 comm=syz.4.71 [ 30.562568][ T538] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.617229][ T321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.627355][ T321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 30.635551][ T321] usb 2-1: SerialNumber: syz [ 30.656409][ T557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.74'. [ 30.695058][ T24] kauditd_printk_skb: 77 callbacks suppressed [ 30.695080][ T24] audit: type=1400 audit(2000000000.140:208): avc: denied { create } for pid=556 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 30.721928][ T557] fuse: Bad value for 'rootmode' [ 30.744481][ T24] audit: type=1400 audit(2000000000.170:209): avc: denied { ioctl } for pid=556 comm="syz.4.74" path="socket:[16431]" dev="sockfs" ino=16431 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 30.788908][ T557] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 30.798165][ T557] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.801212][ T562] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 30.820192][ T562] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.919430][ T24] audit: type=1400 audit(2000000000.370:210): avc: denied { read write } for pid=571 comm="syz.2.78" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.943154][ T24] audit: type=1400 audit(2000000000.370:211): avc: denied { open } for pid=571 comm="syz.2.78" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.966724][ T24] audit: type=1400 audit(2000000000.380:212): avc: denied { ioctl } for pid=571 comm="syz.2.78" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.077523][ T321] rndis_host: probe of 2-1:253.0 failed with error -22 [ 31.090211][ T24] audit: type=1400 audit(2000000000.540:213): avc: denied { setopt } for pid=578 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.092210][ T321] usb 2-1: USB disconnect, device number 2 [ 31.161743][ T322] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.177974][ T24] audit: type=1400 audit(2000000000.630:214): avc: denied { mounton } for pid=580 comm="syz.1.80" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 31.203499][ T15] kernel write not supported for file /uinput (pid: 15 comm: kworker/0:1) [ 31.212420][ T322] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 31.283701][ T24] audit: type=1400 audit(2000000000.730:215): avc: denied { create } for pid=571 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.337194][ T535] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.418139][ T24] audit: type=1400 audit(2000000000.870:216): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.452874][ T581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 31.622750][ T24] audit: type=1400 audit(2000000000.140:217): avc: denied { write } for pid=571 comm="syz.2.78" name="dev" dev="proc" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 31.627255][ T535] usb 1-1: device descriptor read/64, error -71 [ 31.695459][ T590] HTB: quantum of class 4000A is big. Consider r2q change. [ 31.773830][ T591] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.786067][ T591] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.793689][ T591] device bridge_slave_0 entered promiscuous mode [ 31.801081][ T591] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.816853][ T591] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.824559][ T591] device bridge_slave_1 entered promiscuous mode [ 31.837401][ T596] exfat: Bad value for 'umask' [ 31.896071][ T591] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.903195][ T591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.910519][ T591] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.917575][ T591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.937669][ T599] exfat: Bad value for 'umask' [ 31.967454][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.987439][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.019259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.031142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.040192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.048739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.056919][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.063994][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.099996][ T591] device veth0_vlan entered promiscuous mode [ 32.112420][ T591] device veth1_macvtap entered promiscuous mode [ 32.468057][ T535] usb 1-1: device descriptor read/64, error -71 [ 32.478913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.487761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.497935][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.505108][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.521179][ T605] EXT4-fs (loop3): Test dummy encryption mode enabled [ 32.536583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.545502][ T605] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 32.560145][ T605] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.577889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.586059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.594626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.602912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.611635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.620422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.628638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.639578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.648156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.656567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.667377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.675810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.684370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.692670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.701198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.709165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.767285][ T612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8212 sclass=netlink_route_socket pid=612 comm=syz.5.83 [ 32.827240][ T613] EXT4-fs (loop1): Test dummy encryption mode enabled [ 32.871472][ T613] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 32.886615][ T613] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.946866][ T623] usb usb8: usbfs: process 623 (syz.2.91) did not claim interface 0 before use [ 33.017563][ T302] device bridge_slave_1 left promiscuous mode [ 33.025736][ T624] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x111aaed0) [ 33.041556][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.055503][ T624] exFAT-fs (loop5): invalid boot region [ 33.062081][ T302] device bridge_slave_0 left promiscuous mode [ 33.091556][ T624] exFAT-fs (loop5): failed to recognize exfat type [ 33.099044][ T629] cgroup: syz.2.93 (629) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 33.115577][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.124817][ T302] device veth1_macvtap left promiscuous mode [ 33.131186][ T302] device veth0_vlan left promiscuous mode [ 33.136981][ T629] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 33.268826][ T634] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 33.280115][ T634] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.310785][ T535] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.497555][ T641] 9pnet: Insufficient options for proto=fd [ 33.511503][ T642] 9pnet: Insufficient options for proto=fd [ 33.657093][ T535] usb 1-1: device descriptor read/64, error -71 [ 33.817122][ T322] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.827326][ T15] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.357127][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 34.447365][ T654] exfat: Bad value for 'umask' [ 34.477603][ T15] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.488670][ T322] usb 4-1: config index 0 descriptor too short (expected 64575, got 68) [ 34.497163][ T322] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 34.508581][ T15] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.518506][ T322] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 34.531420][ T15] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 34.545064][ T15] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.551859][ T15] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 34.561232][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.593856][ T648] F2FS-fs (loop5): Found nat_bits in checkpoint [ 34.600643][ T15] usb 2-1: config 0 descriptor?? [ 34.642846][ T648] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 34.653442][ T322] usb 4-1: config index 1 descriptor too short (expected 64575, got 68) [ 34.662618][ T322] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 34.672808][ T322] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 35.763556][ T24] kauditd_printk_skb: 44 callbacks suppressed [ 35.763566][ T24] audit: type=1400 audit(2000000004.280:262): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 35.777318][ T322] usb 4-1: string descriptor 0 read error: -71 [ 35.799145][ T15] hid (null): unknown global tag 0xc [ 35.804503][ T15] hid (null): report_id 54332 is invalid [ 35.817352][ T322] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 35.826481][ T15] hid (null): report_id 0 is invalid [ 35.838513][ T15] hid (null): unknown global tag 0xc [ 35.850041][ T322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.850129][ T675] __nla_validate_parse: 1 callbacks suppressed [ 35.850149][ T675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 35.865299][ T15] hid (null): unknown global tag 0xd [ 35.886604][ T675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.107'. [ 35.894454][ T15] hid (null): report_id 27944 is invalid [ 35.901430][ T322] usb 4-1: can't set config #1, error -71 [ 35.909546][ T322] usb 4-1: USB disconnect, device number 2 [ 35.969488][ T534] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 35.987790][ T534] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.009815][ T15] usb 2-1: USB disconnect, device number 3 [ 36.135773][ T692] FAULT_INJECTION: forcing a failure. [ 36.135773][ T692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.149141][ T692] CPU: 0 PID: 692 Comm: syz.5.104 Not tainted syzkaller #0 [ 36.156348][ T692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 36.166415][ T692] Call Trace: [ 36.169717][ T692] __dump_stack+0x21/0x24 [ 36.174143][ T692] dump_stack_lvl+0x1a7/0x208 [ 36.178837][ T692] ? show_regs_print_info+0x18/0x18 [ 36.184042][ T692] ? path_openat+0x2970/0x31c0 [ 36.188828][ T692] dump_stack+0x15/0x1c [ 36.193019][ T692] should_fail+0x3c1/0x510 [ 36.197438][ T692] should_fail_usercopy+0x1a/0x20 [ 36.202459][ T692] _copy_from_user+0x20/0xd0 [ 36.207063][ T692] iovec_from_user+0x1bc/0x2f0 [ 36.211837][ T692] ? __copy_msghdr_from_user+0x329/0x630 [ 36.217473][ T692] __import_iovec+0x71/0x390 [ 36.222062][ T692] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 36.227349][ T692] import_iovec+0x7c/0xb0 [ 36.231682][ T692] ___sys_sendmsg+0x1fd/0x2e0 [ 36.236364][ T692] ? __sys_sendmsg+0x280/0x280 [ 36.241131][ T692] ? rw_verify_area+0x1c0/0x360 [ 36.245991][ T692] ? __fdget+0x1a1/0x230 [ 36.250235][ T692] __x64_sys_sendmsg+0x1f9/0x2c0 [ 36.255173][ T692] ? fput+0x1a/0x20 [ 36.258984][ T692] ? ___sys_sendmsg+0x2e0/0x2e0 [ 36.263837][ T692] ? debug_smp_processor_id+0x17/0x20 [ 36.269228][ T692] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 36.275314][ T692] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 36.280957][ T692] do_syscall_64+0x31/0x40 [ 36.285382][ T692] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.291276][ T692] RIP: 0033:0x7ff67a208799 [ 36.295700][ T692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.315400][ T692] RSP: 002b:00007ff678c63028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.323835][ T692] RAX: ffffffffffffffda RBX: 00007ff67a481fa0 RCX: 00007ff67a208799 [ 36.331810][ T692] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 36.339780][ T692] RBP: 00007ff678c63090 R08: 0000000000000000 R09: 0000000000000000 [ 36.347750][ T692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.355916][ T692] R13: 00007ff67a482038 R14: 00007ff67a481fa0 R15: 00007fff716568a8 [ 36.552715][ T695] FAT-fs (loop5): Directory bread(block 64) failed [ 36.560033][ T695] FAT-fs (loop5): Directory bread(block 65) failed [ 36.566805][ T695] FAT-fs (loop5): Directory bread(block 66) failed [ 36.573711][ T695] FAT-fs (loop5): Directory bread(block 67) failed [ 36.580430][ T695] FAT-fs (loop5): Directory bread(block 68) failed [ 36.586967][ T695] FAT-fs (loop5): Directory bread(block 69) failed [ 36.593819][ T695] FAT-fs (loop5): Directory bread(block 70) failed [ 36.600410][ T695] FAT-fs (loop5): Directory bread(block 71) failed [ 36.607891][ T695] FAT-fs (loop5): Directory bread(block 72) failed [ 36.614545][ T695] FAT-fs (loop5): Directory bread(block 73) failed [ 36.675554][ T322] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 36.728150][ T24] audit: type=1326 audit(2000000005.250:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.5.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67a208799 code=0x7ffc0000 [ 36.777294][ T24] audit: type=1326 audit(2000000005.250:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.5.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67a208799 code=0x7ffc0000 [ 36.805140][ T24] audit: type=1326 audit(2000000005.250:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.5.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff67a208799 code=0x7ffc0000 [ 36.828674][ T24] audit: type=1326 audit(2000000005.290:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.5.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67a208799 code=0x7ffc0000 [ 36.852022][ T24] audit: type=1326 audit(2000000005.290:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.5.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff67a208799 code=0x7ffc0000 [ 36.875182][ T24] audit: type=1326 audit(2000000005.300:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.5.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67a208799 code=0x7ffc0000 [ 36.898802][ T24] audit: type=1326 audit(2000000005.300:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.5.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67a208799 code=0x7ffc0000 [ 36.922303][ T24] audit: type=1326 audit(2000000005.320:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.5.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67a208799 code=0x7ffc0000 [ 36.945813][ T24] audit: type=1326 audit(2000000005.320:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=694 comm="syz.5.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67a208799 code=0x7ffc0000 [ 37.042154][ T680] F2FS-fs (loop0): Found nat_bits in checkpoint [ 37.087253][ T322] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.100281][ T322] usb 4-1: config 1 interface 0 has no altsetting 0 [ 37.122195][ T703] F2FS-fs (loop1): invalid crc value [ 37.130595][ T703] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.160687][ T703] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.317625][ T322] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 37.327170][ T322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.327181][ T322] usb 4-1: Product: Л [ 37.327190][ T322] usb 4-1: Manufacturer: Т [ 37.327202][ T322] usb 4-1: SerialNumber: 랡᫟줩ïžâ¶¢êˆž×†à·™á‚žä‘¡â¿œì”½â“§ïƒ·æ£¤ë·Œëµƒï‰¨î§»ë£¶ê¥„⺻꺋譥ॡ䟌 [ 37.537751][ T689] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 37.758994][ T689] udc-core: couldn't find an available UDC or it's busy [ 37.766106][ T689] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.774990][ T731] bridge0: port 3(dummy0) entered blocking state [ 37.782442][ T731] bridge0: port 3(dummy0) entered disabled state [ 37.797622][ T731] device dummy0 entered promiscuous mode [ 37.811028][ T731] bridge0: port 3(dummy0) entered blocking state [ 37.817466][ T731] bridge0: port 3(dummy0) entered forwarding state [ 37.858547][ T731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'. [ 37.898114][ T322] usb 4-1: USB disconnect, device number 3 [ 38.117103][ T534] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 38.357108][ T534] usb 3-1: Using ep0 maxpacket: 16 [ 38.478016][ T534] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.489024][ T534] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.498907][ T534] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 38.511861][ T534] usb 3-1: config 0 interface 0 has no altsetting 0 [ 38.518558][ T534] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 38.527625][ T534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.536195][ T534] usb 3-1: config 0 descriptor?? [ 39.018467][ T534] hid (null): unknown global tag 0xc [ 39.023843][ T534] hid (null): report_id 54332 is invalid [ 39.029583][ T534] hid (null): report_id 0 is invalid [ 39.034875][ T534] hid (null): unknown global tag 0xc [ 39.041136][ T534] hid (null): unknown global tag 0xd [ 39.046435][ T534] hid (null): report_id 27944 is invalid [ 39.125561][ T747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.128'. [ 39.160308][ T758] Module has invalid ELF structures [ 39.219836][ T20] usb 3-1: USB disconnect, device number 2 [ 39.330036][ T763] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 39.339067][ T763] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.547103][ T534] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.787272][ T534] usb 1-1: Using ep0 maxpacket: 32 [ 39.907173][ T534] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 39.919860][ T534] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 39.953500][ T534] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 39.988372][ T534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.012910][ T534] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.122304][ T534] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 102 [ 40.132834][ T534] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 40.146640][ T534] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 40.155931][ T534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.167939][ T534] usb 1-1: config 0 descriptor?? [ 40.180255][ T302] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 345: padding at end of block bitmap is not set [ 40.194928][ T760] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 40.202526][ T302] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 40.216598][ T302] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.216598][ T302] [ 40.243713][ T302] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28 [ 40.258041][ T302] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.258041][ T302] [ 40.268377][ T302] EXT4-fs (loop3): Total free blocks count 0 [ 40.274426][ T302] EXT4-fs (loop3): Free/Dirty block details [ 40.280599][ T302] EXT4-fs (loop3): free_blocks=0 [ 40.285596][ T302] EXT4-fs (loop3): dirty_blocks=2032 [ 40.291194][ T302] EXT4-fs (loop3): Block reservation details [ 40.297343][ T302] EXT4-fs (loop3): i_reserved_data_blocks=127 [ 40.327118][ T20] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 40.417758][ T534] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 40.462374][ T786] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 40.471618][ T786] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.637104][ C1] usblp0: nonzero read bulk status received: -71 [ 40.643646][ T760] usblp0: error -71 reading from printer [ 40.667084][ C1] usblp0: nonzero read bulk status received: -71 [ 40.745764][ T20] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.767948][ T20] usb 2-1: config 1 interface 0 has no altsetting 0 [ 40.977210][ T20] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 40.986401][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.994480][ T20] usb 2-1: Product: Л [ 40.998851][ T20] usb 2-1: Manufacturer: Т [ 41.003379][ T20] usb 2-1: SerialNumber: 랡᫟줩ïžâ¶¢êˆž×†à·™á‚žä‘¡â¿œì”½â“§ïƒ·æ£¤ë·Œëµƒï‰¨î§»ë£¶ê¥„⺻꺋譥ॡ䟌 [ 41.027136][ T775] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 41.037231][ T322] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 41.247773][ T775] udc-core: couldn't find an available UDC or it's busy [ 41.254830][ T775] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 41.277132][ T322] usb 3-1: Using ep0 maxpacket: 8 [ 41.367906][ T20] usb 2-1: USB disconnect, device number 4 [ 41.407152][ T322] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.417524][ T322] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 41.426480][ T322] usb 3-1: config 1 has no interface number 0 [ 41.587172][ T322] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 41.596389][ T322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.604541][ T322] usb 3-1: Product: syz [ 41.608823][ T322] usb 3-1: Manufacturer: syz [ 41.613454][ T322] usb 3-1: SerialNumber: syz [ 41.917581][ T322] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 41.937458][ T322] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 41.945253][ T322] usb 3-1: USB disconnect, device number 3 [ 42.199831][ T20] usb 1-1: USB disconnect, device number 6 [ 42.207372][ T20] usblp0: removed [ 50.870953][ T52] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 50.882763][ T814] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 50.894400][ T52] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.904570][ T814] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.910218][ T818] EXT4-fs (loop1): Ignoring removed orlov option [ 50.931536][ T818] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 50.972644][ T818] EXT4-fs error (device loop1): ext4_iget_extra_inode:4685: inode #15: comm syz.1.153: corrupted in-inode xattr [ 50.992829][ T818] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.153: couldn't read orphan inode 15 (err -117) [ 51.005473][ T818] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue [ 51.107875][ T828] netlink: 'syz.2.154': attribute type 1 has an invalid length. [ 51.158478][ T52] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 51.158517][ T322] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.231775][ T24] kauditd_printk_skb: 7596 callbacks suppressed [ 51.231813][ T24] audit: type=1400 audit(2000000019.750:7868): avc: denied { create } for pid=831 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 51.241989][ T832] syz.1.155 uses obsolete (PF_INET,SOCK_PACKET) [ 51.318551][ T832] exfat: Bad value for 'uid' [ 51.377083][ T20] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 51.537235][ T322] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.537278][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.558544][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.569369][ T322] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.647331][ T52] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 51.760491][ T322] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 51.769837][ T52] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 51.778396][ T322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 51.786663][ T322] usb 6-1: SerialNumber: syz [ 51.791532][ T52] usb 4-1: Manufacturer: syz [ 51.796927][ T52] usb 4-1: config 0 descriptor?? [ 51.798201][ T20] usb 3-1: unable to get BOS descriptor or descriptor too short [ 51.907232][ T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 51.918966][ T20] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 51.984257][ T839] F2FS-fs (loop0): invalid crc value [ 51.987443][ T834] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 51.998521][ T839] F2FS-fs (loop0): Found nat_bits in checkpoint [ 52.031719][ T839] F2FS-fs (loop0): Start checkpoint disabled! [ 52.039502][ T839] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 52.042999][ T24] audit: type=1400 audit(2000000020.560:7869): avc: denied { write } for pid=810 comm="syz.5.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.097828][ T322] usb 6-1: 0:2 : does not exist [ 52.112685][ T322] usb 6-1: USB disconnect, device number 2 [ 52.167232][ T20] usb 3-1: string descriptor 0 read error: -22 [ 52.173531][ T20] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 52.182804][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.237964][ T20] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 52.244934][ T834] usb 2-1: Using ep0 maxpacket: 16 [ 52.270472][ T859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=859 comm=syz.0.157 [ 52.284536][ T859] netlink: 7 bytes leftover after parsing attributes in process `syz.0.157'. [ 52.317538][ T819] udevd[819]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.440092][ T536] usb 3-1: USB disconnect, device number 4 [ 52.457226][ T834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.537237][ T834] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 52.667623][ T865] exfat: Bad value for 'umask' [ 52.707171][ T52] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 52.707226][ T834] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 52.726226][ T52] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 52.745447][ T834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.747369][ T52] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 52.755675][ T834] usb 2-1: Product: syz [ 52.776106][ T834] usb 2-1: Manufacturer: syz [ 52.777197][ T52] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 52.786308][ T834] usb 2-1: SerialNumber: syz [ 52.793054][ T52] uclogic: probe of 0003:256C:006D.0009 failed with error -71 [ 52.804803][ T52] usb 4-1: USB disconnect, device number 4 [ 53.021968][ T868] EXT4-fs (loop5): Test dummy encryption mode enabled [ 53.032822][ T868] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 53.047103][ T868] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.087939][ T834] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 53.104618][ T834] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 53.307235][ T536] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 53.517267][ T834] usb 2-1: 2:1 : bogus bTerminalLink 6 [ 53.523091][ T321] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 53.697144][ T536] usb 1-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.710477][ T536] usb 1-1: config 1 interface 0 has no altsetting 0 [ 53.724851][ T24] audit: type=1400 audit(2000000022.240:7870): avc: denied { read } for pid=887 comm="syz.5.166" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.749803][ T24] audit: type=1400 audit(2000000022.240:7871): avc: denied { open } for pid=887 comm="syz.5.166" path="/18/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.777542][ T834] usb 2-1: USB disconnect, device number 5 [ 53.897131][ T321] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 53.905357][ T321] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.915815][ T321] usb 3-1: config 0 has no interface number 0 [ 53.927148][ T536] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 53.936488][ T536] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.944809][ T536] usb 1-1: Product: Л [ 53.949167][ T536] usb 1-1: Manufacturer: Т [ 53.953729][ T536] usb 1-1: SerialNumber: 랡᫟줩ïžâ¶¢êˆž×†à·™á‚žä‘¡â¿œì”½â“§ïƒ·æ£¤ë·Œëµƒï‰¨î§»ë£¶ê¥„⺻꺋譥ॡ䟌 [ 53.987179][ T872] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 53.989549][ T861] udevd[861]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.038401][ T889] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 54.046334][ T889] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 54.055587][ T889] F2FS-fs (loop5): invalid crc value [ 54.064792][ T889] F2FS-fs (loop5): Found nat_bits in checkpoint [ 54.087860][ T321] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 54.096945][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.117118][ T321] usb 3-1: Product: syz [ 54.121335][ T321] usb 3-1: Manufacturer: syz [ 54.125938][ T321] usb 3-1: SerialNumber: syz [ 54.131331][ T321] usb 3-1: config 0 descriptor?? [ 54.137115][ T889] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 54.144160][ T889] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 54.155821][ T895] EXT4-fs (loop3): Ignoring removed orlov option [ 54.167847][ T321] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 54.177343][ T895] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 54.188830][ T321] uvcvideo: No valid video chain found. [ 54.202500][ T895] EXT4-fs error (device loop3): ext4_iget_extra_inode:4685: inode #15: comm syz.3.167: corrupted in-inode xattr [ 54.215180][ T895] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.167: couldn't read orphan inode 15 (err -117) [ 54.216117][ T872] udc-core: couldn't find an available UDC or it's busy [ 54.228517][ T895] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue [ 54.257270][ T872] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 54.365956][ T24] audit: type=1400 audit(2000000022.880:7872): avc: denied { bind } for pid=900 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.406226][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 54.413266][ T536] usb 1-1: USB disconnect, device number 7 [ 54.430790][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.609180][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 54.617879][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.626584][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.634921][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.643764][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.652011][ T24] audit: type=1400 audit(2000000023.170:7873): avc: denied { unmount } for pid=591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 54.652560][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.680810][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 54.694243][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 54.742175][ T321] usb 3-1: USB disconnect, device number 5 [ 54.905065][ T913] EXT4-fs (loop0): Ignoring removed orlov option [ 54.918467][ T913] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 54.928489][ T913] EXT4-fs error (device loop0): ext4_iget_extra_inode:4685: inode #15: comm syz.0.172: corrupted in-inode xattr [ 54.943252][ T913] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.172: couldn't read orphan inode 15 (err -117) [ 54.955263][ T913] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue [ 54.980655][ T909] F2FS-fs (loop5): invalid crc value [ 55.061845][ T909] F2FS-fs (loop5): Found nat_bits in checkpoint [ 55.262460][ T909] F2FS-fs (loop5): Start checkpoint disabled! [ 55.297706][ T909] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 55.627783][ T922] EXT4-fs (loop2): Invalid log cluster size: 16776453 [ 55.671058][ T901] F2FS-fs (loop1): Found nat_bits in checkpoint [ 55.687283][ T930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=930 comm=syz.5.170 [ 55.879629][ T938] netlink: 7 bytes leftover after parsing attributes in process `syz.5.170'. [ 56.177372][ T936] EXT4-fs (loop0): Invalid log cluster size: 16776453 [ 56.269444][ T939] EXT4-fs (loop2): Ignoring removed orlov option [ 56.453689][ T939] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,auto_da_alloc=0x0000000000000001,orlov,usrquota,data_err=ignore,sb=0x0000000000000003,noauto_da_alloc,,errors=continue [ 56.472616][ T939] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.859906][ T944] EXT4-fs (loop1): Test dummy encryption mode enabled [ 56.878719][ T944] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 56.893171][ T944] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.927038][ C0] sched: RT throttling activated [ 57.215000][ T24] audit: type=1400 audit(2000000025.730:7874): avc: denied { watch watch_reads } for pid=953 comm="syz.2.179" path="/42/file1" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.226796][ T954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 57.509221][ T955] EXT4-fs (loop0): Ignoring removed orlov option [ 57.687907][ T24] audit: type=1400 audit(2000000025.950:7875): avc: denied { accept } for pid=953 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 57.754414][ T955] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,auto_da_alloc=0x0000000000000001,orlov,usrquota,data_err=ignore,sb=0x0000000000000003,noauto_da_alloc,,errors=continue [ 57.773329][ T955] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.364094][ T961] 9pnet: Insufficient options for proto=fd [ 58.452782][ T24] audit: type=1400 audit(2000000026.970:7876): avc: denied { read } for pid=960 comm="syz.2.180" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.479280][ T925] F2FS-fs (loop3): Found nat_bits in checkpoint [ 58.660037][ T24] audit: type=1400 audit(2000000026.970:7877): avc: denied { open } for pid=960 comm="syz.2.180" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.878258][ T970] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 58.897237][ T970] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.448474][ T986] EXT4-fs (loop2): Ignoring removed orlov option [ 59.457116][ T986] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 59.494060][ T986] EXT4-fs error (device loop2): ext4_iget_extra_inode:4685: inode #15: comm syz.2.186: corrupted in-inode xattr [ 59.506817][ T986] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.186: couldn't read orphan inode 15 (err -117) [ 59.520016][ T986] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue [ 59.668080][ T997] EXT4-fs (loop3): Ignoring removed orlov option [ 59.682999][ T997] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 59.691937][ T997] EXT4-fs error (device loop3): ext4_iget_extra_inode:4685: inode #15: comm syz.3.183: corrupted in-inode xattr [ 59.704441][ T997] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.183: couldn't read orphan inode 15 (err -117) [ 59.716740][ T997] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue [ 59.790063][ T1003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 59.824581][ T1003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 60.079978][ T1011] 9pnet: Insufficient options for proto=fd [ 60.097434][ T307] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.107112][ T52] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 60.407231][ T307] usb 6-1: Using ep0 maxpacket: 32 [ 60.413517][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 60.537321][ T307] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 60.548942][ T307] usb 6-1: config 0 has no interface number 0 [ 60.566392][ T1015] F2FS-fs (loop2): invalid crc value [ 60.583420][ T1015] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.626438][ T1015] F2FS-fs (loop2): Start checkpoint disabled! [ 60.632989][ T52] usb 1-1: config 0 has an invalid interface number: 80 but max is 2 [ 60.642171][ T52] usb 1-1: config 0 has an invalid interface number: 193 but max is 2 [ 60.650509][ T1015] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 60.669290][ T52] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 60.678392][ T52] usb 1-1: config 0 has an invalid interface number: 249 but max is 2 [ 60.686642][ T52] usb 1-1: config 0 has an invalid interface number: 106 but max is 2 [ 60.694998][ T52] usb 1-1: config 0 has an invalid interface number: 88 but max is 2 [ 60.703462][ T52] usb 1-1: config 0 has 5 interfaces, different from the descriptor's value: 3 [ 60.712748][ T52] usb 1-1: config 0 has no interface number 0 [ 60.719218][ T52] usb 1-1: config 0 has no interface number 1 [ 60.725444][ T52] usb 1-1: config 0 has no interface number 2 [ 60.731620][ T52] usb 1-1: config 0 has no interface number 3 [ 60.738199][ T307] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 60.747350][ T52] usb 1-1: config 0 has no interface number 4 [ 60.753724][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.761835][ T52] usb 1-1: config 0 interface 80 altsetting 244 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 60.773040][ T307] usb 6-1: Product: syz [ 60.777269][ T307] usb 6-1: Manufacturer: syz [ 60.781987][ T307] usb 6-1: SerialNumber: syz [ 60.786931][ T52] usb 1-1: config 0 interface 80 altsetting 244 has an invalid endpoint with address 0x0, skipping [ 60.798274][ T52] usb 1-1: config 0 interface 80 altsetting 244 bulk endpoint 0x6 has invalid maxpacket 1023 [ 60.808803][ T307] usb 6-1: config 0 descriptor?? [ 60.814372][ T52] usb 1-1: config 0 interface 80 altsetting 244 has a duplicate endpoint with address 0x6, skipping [ 60.825376][ T52] usb 1-1: config 0 interface 80 altsetting 244 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 60.838989][ T52] usb 1-1: too many endpoints for config 0 interface 193 altsetting 149: 168, using maximum allowed: 30 [ 60.850400][ T52] usb 1-1: config 0 interface 193 altsetting 149 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 60.862236][ T307] smsc95xx v2.0.0 [ 60.866181][ T52] usb 1-1: config 0 interface 193 altsetting 149 has an invalid endpoint with address 0xBF, skipping [ 60.877544][ T52] usb 1-1: config 0 interface 193 altsetting 149 endpoint 0x3 has invalid maxpacket 552, setting to 64 [ 60.888803][ T52] usb 1-1: config 0 interface 193 altsetting 149 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 60.900151][ T52] usb 1-1: config 0 interface 193 altsetting 149 has an invalid endpoint with address 0xE1, skipping [ 60.911399][ T52] usb 1-1: config 0 interface 193 altsetting 149 has a duplicate endpoint with address 0x6, skipping [ 60.922465][ T52] usb 1-1: config 0 interface 193 altsetting 149 endpoint 0xD has invalid maxpacket 1536, setting to 1024 [ 60.953152][ T52] usb 1-1: config 0 interface 193 altsetting 149 bulk endpoint 0xD has invalid maxpacket 1024 [ 60.980963][ T52] usb 1-1: config 0 interface 193 altsetting 149 has an invalid endpoint with address 0x80, skipping [ 61.009531][ T52] usb 1-1: config 0 interface 193 altsetting 149 has a duplicate endpoint with address 0x8, skipping [ 61.022852][ T52] usb 1-1: config 0 interface 193 altsetting 149 has a duplicate endpoint with address 0x2, skipping [ 61.034402][ T52] usb 1-1: config 0 interface 193 altsetting 149 has 13 endpoint descriptors, different from the interface descriptor's value: 168 [ 61.048267][ T52] usb 1-1: config 0 interface 249 altsetting 114 has a duplicate endpoint with address 0xD, skipping [ 61.059619][ T52] usb 1-1: config 0 interface 249 altsetting 114 has an invalid endpoint with address 0x80, skipping [ 61.076847][ T52] usb 1-1: config 0 interface 249 altsetting 114 has a duplicate endpoint with address 0x8F, skipping [ 61.088949][ T52] usb 1-1: config 0 interface 249 altsetting 114 has a duplicate endpoint with address 0x4, skipping [ 61.100131][ T52] usb 1-1: config 0 interface 249 altsetting 114 has 5 endpoint descriptors, different from the interface descriptor's value: 10 [ 61.113656][ T52] usb 1-1: too many endpoints for config 0 interface 106 altsetting 179: 195, using maximum allowed: 30 [ 61.125176][ T52] usb 1-1: config 0 interface 106 altsetting 179 has a duplicate endpoint with address 0x8, skipping [ 61.136506][ T52] usb 1-1: config 0 interface 106 altsetting 179 bulk endpoint 0x9 has invalid maxpacket 1024 [ 61.147168][ T52] usb 1-1: config 0 interface 106 altsetting 179 has an invalid endpoint with address 0xAE, skipping [ 61.158256][ T52] usb 1-1: config 0 interface 106 altsetting 179 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 61.169557][ T52] usb 1-1: config 0 interface 106 altsetting 179 has a duplicate endpoint with address 0xD, skipping [ 61.180618][ T52] usb 1-1: config 0 interface 106 altsetting 179 has a duplicate endpoint with address 0x7, skipping [ 61.201976][ T52] usb 1-1: config 0 interface 106 altsetting 179 has 6 endpoint descriptors, different from the interface descriptor's value: 195 [ 61.225929][ T52] usb 1-1: config 0 interface 88 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 61.257131][ T52] usb 1-1: config 0 interface 88 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 61.277110][ T52] usb 1-1: config 0 interface 88 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 61.285919][ T1028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=1028 comm=syz.2.192 [ 61.297223][ T52] usb 1-1: config 0 interface 88 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 61.321178][ T52] usb 1-1: config 0 interface 88 altsetting 4 has an invalid endpoint with address 0xAF, skipping [ 61.342194][ T52] usb 1-1: config 0 interface 88 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 61.373340][ T52] usb 1-1: config 0 interface 88 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 61.387153][ T52] usb 1-1: config 0 interface 88 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 61.398486][ T1029] netlink: 7 bytes leftover after parsing attributes in process `syz.2.192'. [ 61.407679][ T52] usb 1-1: config 0 interface 88 altsetting 4 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 61.421682][ T52] usb 1-1: config 0 interface 80 has no altsetting 0 [ 61.428620][ T52] usb 1-1: config 0 interface 193 has no altsetting 0 [ 61.435581][ T52] usb 1-1: config 0 interface 249 has no altsetting 0 [ 61.442589][ T52] usb 1-1: config 0 interface 106 has no altsetting 0 [ 61.449684][ T52] usb 1-1: config 0 interface 88 has no altsetting 0 [ 61.512448][ T1005] udc-core: couldn't find an available UDC or it's busy [ 61.530377][ T1005] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.582406][ T1026] F2FS-fs (loop1): invalid crc value [ 61.617127][ T52] usb 1-1: Dual-Role OTG device on HNP port [ 61.635503][ T1026] F2FS-fs (loop1): Found nat_bits in checkpoint [ 61.653584][ T52] usb 1-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=85.3a [ 61.663641][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.683014][ T52] usb 1-1: Product: syz [ 61.687604][ T52] usb 1-1: Manufacturer: syz [ 61.695807][ T1026] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 61.702363][ T52] usb 1-1: SerialNumber: syz [ 61.707868][ T52] usb 1-1: config 0 descriptor?? [ 61.713161][ T1026] F2FS-fs (loop1): Start checkpoint disabled! [ 61.722431][ T1026] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 61.737171][ T1003] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 61.757749][ T1005] loop5: p1 p2 < > p3 p4 < p5 > [ 61.762915][ T1005] loop5: partition table partially beyond EOD, truncated [ 61.783160][ T1005] loop5: p1 size 1342439424 extends beyond EOD, truncated [ 61.802373][ T1005] loop5: p2 start 16384 is beyond EOD, truncated [ 61.808874][ T24] audit: type=1400 audit(2000000030.320:7878): avc: denied { watch_reads } for pid=1004 comm="syz.5.190" path="/26" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.817947][ T1005] loop5: p3 start 67108864 is beyond EOD, truncated [ 61.847695][ T1017] F2FS-fs (loop3): Found nat_bits in checkpoint [ 61.863500][ T1026] attempt to access beyond end of device [ 61.863500][ T1026] loop1: rw=2049, want=45104, limit=40427 [ 61.875977][ T1005] loop5: p5 size 1342439424 extends beyond EOD, truncated [ 61.947186][ T307] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 61.958185][ T307] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 61.987173][ T307] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 61.998566][ T307] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 62.006314][ T307] usb 6-1: USB disconnect, device number 3 [ 62.243133][ T1026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.196'. [ 62.281107][ T112] attempt to access beyond end of device [ 62.281107][ T112] loop1: rw=2049, want=40976, limit=40427 [ 62.447149][ T307] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 62.468745][ T1045] EXT4-fs (loop1): Ignoring removed orlov option [ 62.478236][ T1045] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 62.484535][ T1042] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 62.492622][ T1045] EXT4-fs error (device loop1): ext4_iget_extra_inode:4685: inode #15: comm syz.1.198: corrupted in-inode xattr [ 62.507486][ T1042] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.509837][ T1045] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.198: couldn't read orphan inode 15 (err -117) [ 62.531544][ T1045] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue [ 62.754724][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 62.858244][ T52] usb 1-1: USB disconnect, device number 8 [ 62.894959][ T1056] EXT4-fs (loop0): Ignoring removed orlov option [ 62.904517][ T1056] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 63.007158][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 63.071170][ T1072] futex_wake_op: syz.1.207 tries to shift op by 32; fix this program [ 63.101668][ T1074] EXT4-fs (loop5): Ignoring removed orlov option [ 63.108521][ T1074] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 63.117690][ T1056] EXT4-fs error (device loop0): ext4_iget_extra_inode:4685: inode #15: comm syz.0.203: corrupted in-inode xattr [ 63.131543][ T1074] EXT4-fs error (device loop5): ext4_iget_extra_inode:4685: inode #15: comm syz.5.208: corrupted in-inode xattr [ 63.139768][ T1056] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.203: couldn't read orphan inode 15 (err -117) [ 63.158095][ T1074] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.208: couldn't read orphan inode 15 (err -117) [ 63.171680][ T1074] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue [ 63.215076][ T1078] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 63.260414][ T1056] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue [ 63.296170][ T307] usb 3-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 63.407356][ T307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.600382][ T1083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1083 comm=syz.5.210 [ 63.634264][ T24] audit: type=1400 audit(2000000032.150:7879): avc: denied { getopt } for pid=1085 comm="syz.5.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.697394][ T307] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.707742][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.723060][ T1086] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 63.735783][ T307] usb 3-1: Product: syz [ 63.740079][ T307] usb 3-1: Manufacturer: syz [ 63.744747][ T307] usb 3-1: SerialNumber: syz [ 63.784933][ T1088] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 63.809422][ T1088] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.026925][ T24] audit: type=1400 audit(2000000032.540:7880): avc: denied { read } for pid=1099 comm="syz.1.215" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.097086][ T24] audit: type=1400 audit(2000000032.540:7881): avc: denied { open } for pid=1099 comm="syz.1.215" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.140202][ T1040] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 64.147838][ T24] audit: type=1400 audit(2000000032.620:7882): avc: denied { ioctl } for pid=1099 comm="syz.1.215" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.173762][ T24] audit: type=1400 audit(2000000032.620:7883): avc: denied { set_context_mgr } for pid=1099 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 64.174623][ T1040] EXT4-fs (loop2): Test dummy encryption mode enabled [ 64.252208][ T1040] EXT4-fs (loop2): invalid inodes per group: 0 [ 64.252208][ T1040] [ 64.397101][ T52] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 64.557378][ T307] usb 3-1: 0:255 : does not exist [ 64.567531][ T307] usb 3-1: USB disconnect, device number 6 [ 64.627926][ T1110] EXT4-fs (loop0): Invalid log cluster size: 16776453 [ 64.667155][ T52] usb 2-1: device descriptor read/64, error -71 [ 64.840648][ T816] udevd[816]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.121112][ T1115] EXT4-fs (loop0): Ignoring removed orlov option [ 65.248531][ T1115] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,auto_da_alloc=0x0000000000000001,orlov,usrquota,data_err=ignore,sb=0x0000000000000003,noauto_da_alloc,,errors=continue [ 65.268334][ T1115] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.335670][ T1102] F2FS-fs (loop5): Found nat_bits in checkpoint [ 65.805676][ T1123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.220'. [ 65.825181][ T1123] HTB: quantum of class 4000A is big. Consider r2q change. [ 65.852496][ T1102] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 66.067583][ T1130] EXT4-fs (loop0): Invalid log cluster size: 16776453 [ 66.138669][ T1135] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue [ 66.151142][ T1135] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.167130][ T52] usb 2-1: device descriptor read/64, error -71 [ 66.239572][ T1147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1147 comm=syz.5.221 [ 66.672860][ T1167] EXT4-fs (loop0): Ignoring removed orlov option [ 66.743774][ T1167] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,auto_da_alloc=0x0000000000000001,orlov,usrquota,data_err=ignore,sb=0x0000000000000003,noauto_da_alloc,,errors=continue [ 66.762797][ T1167] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.499515][ T52] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 67.725496][ T1186] attempt to access beyond end of device [ 67.725496][ T1186] loop1: rw=0, want=57848, limit=8192 [ 67.927964][ T24] audit: type=1400 audit(2000000036.450:7884): avc: denied { bind } for pid=1208 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.948099][ T1212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 68.150043][ T1235] kvm [1234]: vcpu2, guest rIP: 0x9131 ignored wrmsr: 0x11e data 0x0 [ 68.183890][ T24] audit: type=1400 audit(2000000036.700:7885): avc: denied { write } for pid=1239 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.217598][ T24] audit: type=1400 audit(2000000036.700:7886): avc: denied { read } for pid=1239 comm="syz.3.265" path="socket:[18837]" dev="sockfs" ino=18837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.451045][ T1251] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 68.509116][ T24] audit: type=1326 audit(2000000037.030:7887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67a208799 code=0x7ffc0000 [ 68.533439][ T24] audit: type=1326 audit(2000000037.060:7888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff67a202517 code=0x7ffc0000 [ 68.637701][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 68.637713][ T24] audit: type=1326 audit(2000000037.160:7918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff67a202517 code=0x7ffc0000 [ 68.667458][ T24] audit: type=1326 audit(2000000037.160:7919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67a1a9b19 code=0x7ffc0000 [ 68.691027][ T24] audit: type=1326 audit(2000000037.160:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff67a208799 code=0x7ffc0000 [ 68.715034][ T24] audit: type=1326 audit(2000000037.190:7921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff67a202517 code=0x7ffc0000 [ 68.738851][ T24] audit: type=1326 audit(2000000037.190:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67a1a9b19 code=0x7ffc0000 [ 68.762828][ T24] audit: type=1326 audit(2000000037.190:7923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff67a202517 code=0x7ffc0000 [ 68.786899][ T24] audit: type=1326 audit(2000000037.190:7924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67a1a9b19 code=0x7ffc0000 [ 68.810354][ T24] audit: type=1326 audit(2000000037.190:7925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff67a208799 code=0x7ffc0000 [ 68.834426][ T24] audit: type=1326 audit(2000000037.190:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff67a202517 code=0x7ffc0000 [ 68.858437][ T24] audit: type=1326 audit(2000000037.190:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67a1a9b19 code=0x7ffc0000 [ 68.888757][ T1266] attempt to access beyond end of device [ 68.888757][ T1266] loop2: rw=2049, want=178, limit=128 [ 68.900986][ T1265] attempt to access beyond end of device [ 68.900986][ T1265] loop2: rw=2049, want=204, limit=128 [ 68.968329][ T1275] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 69.153208][ T1293] netlink: 'syz.0.286': attribute type 3 has an invalid length. [ 69.416910][ T1311] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 69.633398][ T1326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.299'. [ 69.745281][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 69.758202][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.783078][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 69.806783][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.831526][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.850419][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.867799][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.886448][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.904946][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 69.923196][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 69.941573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 69.966264][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 70.031438][ T1340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 70.425967][ T1359] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 70.445146][ T1359] pit: kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 70.470952][ T1359] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 70.486030][ T1359] pit: kvm: requested 104761 ns i8254 timer period limited to 200000 ns [ 70.509728][ T1359] pit: kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 70.529641][ T1359] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 70.551552][ T1359] pit: kvm: requested 121523 ns i8254 timer period limited to 200000 ns [ 71.157571][ T1385] device syzkaller0 entered promiscuous mode [ 71.296953][ T1392] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.074893][ T1449] ------------[ cut here ]------------ [ 72.083948][ T1449] trace type BPF program uses run-time allocation [ 72.093199][ T1449] WARNING: CPU: 1 PID: 1449 at kernel/bpf/verifier.c:10509 check_map_prog_compatibility+0x5d6/0x740 [ 72.104638][ T1449] Modules linked in: [ 72.109094][ T1449] CPU: 1 PID: 1449 Comm: syz.0.350 Not tainted syzkaller #0 [ 72.116590][ T1449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.127472][ T1449] RIP: 0010:check_map_prog_compatibility+0x5d6/0x740 [ 72.134483][ T1449] Code: 85 e9 14 fe ff ff e8 a9 d1 ef ff 31 c0 e9 15 fe ff ff e8 9d d1 ef ff c6 05 a4 b5 4b 05 01 48 c7 c7 80 cf 25 85 e8 0a 02 05 03 <0f> 0b e9 85 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a3 fa ff [ 72.165067][ T1449] RSP: 0018:ffffc90000cd7448 EFLAGS: 00010246 [ 72.176748][ T1449] RAX: dcb724e798c81f00 RBX: 0000000000000001 RCX: 0000000000080000 [ 72.191859][ T1449] RDX: ffffc9000153b000 RSI: 0000000000001ceb RDI: 0000000000001cec [ 72.207170][ T1449] RBP: ffffc90000cd7490 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7 [ 72.225120][ T1449] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: ffff8881183a0000 [ 72.234350][ T1464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.356'. [ 72.247062][ T1449] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff88810aad7000 [ 72.267108][ T1449] FS: 00007f0e2d1126c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 72.298190][ T1449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.316544][ T1449] CR2: 00007f1e966255c0 CR3: 0000000112a8d000 CR4: 00000000003506a0 [ 72.335192][ T1449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.363576][ T1449] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.388388][ T1449] Call Trace: [ 72.391776][ T1449] ? __fdget+0x1a1/0x230 [ 72.398723][ T1449] resolve_pseudo_ldimm64+0x55e/0x1060 [ 72.404709][ T1449] ? bpf_check+0xdb10/0xdb10 [ 72.409704][ T1449] ? kvmalloc_node+0x88/0x130 [ 72.414436][ T1449] bpf_check+0x9058/0xdb10 [ 72.419261][ T1449] ? bpf_get_btf_vmlinux+0x60/0x60 [ 72.424718][ T1449] ? is_bpf_text_address+0x177/0x190 [ 72.436355][ T1449] ? selinux_bpf_prog_alloc+0x51/0x140 [ 72.442047][ T1449] ? __kernel_text_address+0xa0/0x100 [ 72.447582][ T1449] ? unwind_get_return_address+0x4d/0x90 [ 72.453352][ T1449] ? stack_trace_save+0xf0/0xf0 [ 72.458372][ T1449] ? arch_stack_walk+0xee/0x140 [ 72.463421][ T1449] ? stack_trace_save+0xa6/0xf0 [ 72.468795][ T1449] ? stack_trace_snprint+0xf0/0xf0 [ 72.474020][ T1449] ? __kasan_slab_alloc+0x69/0xf0 [ 72.487900][ T1479] netlink: 64 bytes leftover after parsing attributes in process `syz.1.363'. [ 72.498564][ T1449] ? selinux_bpf_prog_alloc+0x51/0x140 [ 72.504355][ T1449] ? selinux_bpf_prog_alloc+0x51/0x140 [ 72.510144][ T1449] ? __kasan_kmalloc+0xec/0x110 [ 72.515058][ T1449] ? __kasan_kmalloc+0xda/0x110 [ 72.527101][ T1449] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 72.532831][ T1449] ? selinux_bpf_prog_alloc+0x51/0x140 [ 72.557521][ T1449] ? security_bpf_prog_alloc+0x62/0x90 [ 72.580471][ T1449] ? bpf_prog_load+0x9d8/0x14a0 [ 72.585396][ T1449] ? __se_sys_bpf+0x49a/0x740 [ 72.605071][ T1449] ? __x64_sys_bpf+0x7b/0x90 [ 72.609791][ T1449] ? do_syscall_64+0x31/0x40 [ 72.614733][ T1449] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 72.621626][ T1449] ? memset+0x35/0x40 [ 72.625752][ T1449] ? bpf_obj_name_cpy+0x193/0x1e0 [ 72.634482][ T1449] bpf_prog_load+0xfca/0x14a0 [ 72.639437][ T1449] ? map_freeze+0x320/0x320 [ 72.644063][ T1449] ? selinux_bpf+0xc7/0xf0 [ 72.648839][ T1449] ? security_bpf+0x82/0xa0 [ 72.653477][ T1449] __se_sys_bpf+0x49a/0x740 [ 72.659690][ T1449] ? __x64_sys_bpf+0x90/0x90 [ 72.664430][ T1449] ? __kasan_check_read+0x11/0x20 [ 72.669972][ T1449] __x64_sys_bpf+0x7b/0x90 [ 72.674657][ T1449] do_syscall_64+0x31/0x40 [ 72.677829][ T1488] erofs: (device loop1): mounted with root inode @ nid 36. [ 72.680796][ T1449] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 72.692569][ T1449] RIP: 0033:0x7f0e2e6b7799 [ 72.697256][ T1449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.721306][ T1449] RSP: 002b:00007f0e2d112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.733951][ T1449] RAX: ffffffffffffffda RBX: 00007f0e2e930fa0 RCX: 00007f0e2e6b7799 [ 72.742451][ T1449] RDX: 0000000000000094 RSI: 0000200000001400 RDI: 0000000000000005 [ 72.750700][ T1449] RBP: 00007f0e2e74dc99 R08: 0000000000000000 R09: 0000000000000000 [ 72.759173][ T1449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.767554][ T1449] R13: 00007f0e2e931038 R14: 00007f0e2e930fa0 R15: 00007ffeb1731bc8 [ 72.775847][ T1449] ---[ end trace 064a26a251d6ef30 ]--- [ 72.836379][ T1495] netlink: 40 bytes leftover after parsing attributes in process `syz.2.370'. [ 73.269603][ T1546] mmap: syz.0.387 (1546) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 74.086341][ T1568] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 74.270680][ T1573] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 74.304324][ T1573] FAT-fs (loop2): Filesystem has been set read-only [ 74.342657][ T1573] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 74.538563][ T24] kauditd_printk_skb: 210 callbacks suppressed [ 74.538577][ T24] audit: type=1400 audit(2000000043.060:8138): avc: denied { create } for pid=1600 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.592231][ T24] audit: type=1400 audit(2000000043.110:8139): avc: denied { remount } for pid=1605 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 74.606922][ T1606] overlayfs: upper fs does not support tmpfile. [ 74.623434][ T24] audit: type=1400 audit(2000000043.110:8140): avc: denied { mounton } for pid=1605 comm="syz.2.414" path="/92/file0/bus" dev="ramfs" ino=20306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 74.647113][ T1606] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 74.652897][ T1608] device erspan0 entered promiscuous mode [ 74.654245][ T1606] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 74.670433][ T1606] SELinux: (dev overlay, type overlay) has no security xattr handler [ 74.680574][ T1608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 74.695990][ T1608] device erspan0 left promiscuous mode [ 74.704605][ T24] audit: type=1400 audit(2000000043.220:8141): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 74.843713][ T1623] overlayfs: upper fs does not support tmpfile. [ 74.850295][ T1623] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 74.857708][ T1623] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 74.869901][ T1623] SELinux: (dev overlay, type overlay) has no security xattr handler [ 74.886216][ T1628] xt_hashlimit: size too large, truncated to 1048576 [ 75.059100][ T1640] xt_hashlimit: size too large, truncated to 1048576 [ 75.208212][ T1637] pit: kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 75.250812][ T1637] pit: kvm: requested 197790 ns i8254 timer period limited to 200000 ns [ 75.259815][ T1637] pit: kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 75.392735][ T1654] capability: warning: `syz.0.433' uses 32-bit capabilities (legacy support in use) [ 75.440233][ T1656] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.450627][ T1666] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.497812][ T1656] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.538521][ T1671] netlink: 'syz.5.435': attribute type 16 has an invalid length. [ 75.560277][ T1671] netlink: 'syz.5.435': attribute type 17 has an invalid length. [ 75.630361][ T1678] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 75.656651][ T1671] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.663876][ T1671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.682625][ T1671] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.689772][ T1671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.710418][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): syztnl2: link becomes ready [ 75.721311][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 75.733162][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.747552][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 75.761331][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.775292][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.789059][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.808253][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.816733][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.825968][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 75.834423][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 75.959962][ T1701] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 76.091469][ T1722] device syzkaller0 entered promiscuous mode [ 76.324287][ T1732] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.346200][ T1732] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.439250][ T24] audit: type=1400 audit(2000000044.960:8142): avc: denied { read } for pid=1744 comm="syz.5.469" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.719104][ T24] audit: type=1400 audit(2000000045.240:8143): avc: denied { map } for pid=1777 comm="syz.1.481" path="socket:[21329]" dev="sockfs" ino=21329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 76.793246][ T24] audit: type=1326 audit(2000000045.310:8144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1781 comm="syz.5.482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff67a208799 code=0x0 [ 76.872326][ T24] audit: type=1400 audit(2000000045.390:8145): avc: denied { write } for pid=1790 comm="syz.0.486" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 77.137725][ T1811] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.172918][ T1811] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.383904][ T1843] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2801761391 (179312729024 ns) > initial count (48342571392 ns). Using initial count to start timer. [ 77.448640][ T24] audit: type=1326 audit(2000000045.970:8146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1846 comm="syz.3.506" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e2d6ac799 code=0x0 [ 77.563203][ T1855] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.575503][ T1855] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.615985][ T1862] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 78.109061][ T24] audit: type=1400 audit(2000000046.630:8147): avc: denied { setopt } for pid=1911 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.394567][ T1936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 78.415993][ T1936] netlink: 48 bytes leftover after parsing attributes in process `syz.2.539'. [ 78.466949][ T1941] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.922740][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 79.922753][ T24] audit: type=1400 audit(2000000048.440:8156): avc: denied { lock } for pid=2056 comm="syz.5.586" path="socket:[23830]" dev="sockfs" ino=23830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 80.263433][ T24] audit: type=1326 audit(2000000048.780:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888d79a799 code=0x7ffc0000 [ 80.293961][ T24] audit: type=1326 audit(2000000048.780:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888d79a799 code=0x7ffc0000 [ 80.331133][ T24] audit: type=1326 audit(2000000048.810:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888d79a799 code=0x7ffc0000 [ 80.355747][ T24] audit: type=1326 audit(2000000048.810:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f888d79a799 code=0x7ffc0000 [ 80.392274][ T24] audit: type=1326 audit(2000000048.810:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888d79a799 code=0x7ffc0000 [ 80.427306][ T24] audit: type=1326 audit(2000000048.810:8162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888d79a799 code=0x7ffc0000 [ 80.456666][ T24] audit: type=1326 audit(2000000048.810:8163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f888d79a799 code=0x7ffc0000 [ 80.517662][ T24] audit: type=1326 audit(2000000048.810:8164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888d79a799 code=0x7ffc0000 [ 80.580524][ T24] audit: type=1326 audit(2000000048.810:8165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f888d79a799 code=0x7ffc0000 [ 81.124563][ T2138] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.230694][ T2146] kvm: MWAIT instruction emulated as NOP! [ 81.286712][ T2152] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3632396020 (3632396020 ns) > initial count (548550703 ns). Using initial count to start timer. [ 81.673142][ T2215] kvm [2213]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0 [ 81.683429][ T2215] kvm [2213]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0 [ 81.695031][ T2215] kvm [2213]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111 [ 82.239253][ T2293] overlayfs: failed to clone upperpath [ 82.270344][ T2293] overlayfs: failed to clone lowerpath [ 82.488096][ T2318] xt_hashlimit: size too large, truncated to 1048576 [ 82.640863][ T2324] 9pnet_virtio: no channels available for device syz [ 83.187714][ T2372] binder: BINDER_SET_CONTEXT_MGR already set [ 83.198759][ T2376] 9pnet_virtio: no channels available for device syz [ 83.211235][ T2372] binder: 2371:2372 ioctl 4018620d 200000004a80 returned -16 [ 83.523179][ T52] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 83.777105][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 83.807942][ T2443] 9pnet_virtio: no channels available for device syz [ 83.917834][ T52] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 83.926112][ T52] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.936292][ T52] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.946424][ T52] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.956447][ T52] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.969487][ T52] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 83.982615][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.060371][ T2479] Illegal XDP return value 4294967274, expect packet loss! [ 84.078454][ T2481] overlayfs: unrecognized mount option "verity=require" or missing value [ 84.098231][ T2483] overlayfs: failed to clone upperpath [ 84.423504][ T2542] tap0: tun_chr_ioctl cmd 1074025675 [ 84.430623][ T2542] tap0: persist enabled [ 84.445048][ T2542] tap0: tun_chr_ioctl cmd 1074025675 [ 84.451452][ T2542] tap0: persist disabled [ 84.545217][ T2564] overlayfs: failed to clone upperpath [ 85.187090][ T15] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 85.293369][ T803] usb 6-1: USB disconnect, device number 4 [ 85.340452][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 85.340468][ T24] audit: type=1400 audit(2000000053.860:8191): avc: denied { ioctl } for pid=2624 comm="syz.5.834" path="socket:[26202]" dev="sockfs" ino=26202 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.377728][ T2627] overlayfs: failed to clone upperpath [ 85.437122][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 85.444088][ T2630] kvm [2628]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc1 data 0xff0000001af9 [ 85.456086][ T2630] kvm [2628]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0xff010000f31c [ 85.475526][ T2630] kvm [2628]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc1 data 0xff020000ce00 [ 85.505180][ T2630] kvm [2628]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0xff0e00000100 [ 85.518047][ T2630] kvm [2628]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0xff1300000900 [ 85.544808][ T2630] kvm [2628]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc1 data 0xff1e00003600 [ 85.567473][ T2630] kvm [2628]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0xff2500006500 [ 85.581415][ T2630] kvm [2628]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0xff2900007100 [ 85.591352][ T15] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.612766][ T15] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 85.623501][ T15] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x2E, skipping [ 85.634530][ T15] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 85.747170][ T15] usb 1-1: New USB device found, idVendor=0725, idProduct=a4a1, bcdDevice= 0.40 [ 85.756301][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.764765][ T15] usb 1-1: SerialNumber: syz [ 85.787195][ T2616] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 85.794220][ T2616] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 85.987131][ T803] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 86.010409][ T535] usb 1-1: USB disconnect, device number 9 [ 86.227095][ T803] usb 6-1: Using ep0 maxpacket: 32 [ 86.259539][ T24] audit: type=1400 audit(2000000054.780:8192): avc: denied { create } for pid=2664 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.279148][ T24] audit: type=1400 audit(2000000054.780:8193): avc: denied { setopt } for pid=2664 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.357514][ T803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.380213][ T803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.390867][ T803] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 86.400393][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.422027][ T803] usb 6-1: config 0 descriptor?? [ 86.898095][ T803] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 86.905375][ T803] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 86.912593][ T803] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 86.919692][ T803] savu 0003:1E7D:2D5A.000A: item fetching failed at offset 6/8 [ 86.927741][ T803] savu 0003:1E7D:2D5A.000A: parse failed [ 86.933577][ T803] savu: probe of 0003:1E7D:2D5A.000A failed with error -22 [ 87.100371][ T803] usb 6-1: USB disconnect, device number 5 [ 87.503199][ T24] audit: type=1400 audit(2000000056.020:8194): avc: denied { mounton } for pid=2753 comm="syz.3.890" path="/150/file0" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 87.625655][ T24] audit: type=1400 audit(2000000056.140:8195): avc: denied { listen } for pid=2762 comm="syz.5.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.705404][ T24] audit: type=1400 audit(2000000056.220:8196): avc: denied { map } for pid=2771 comm="syz.5.898" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.847110][ T20] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 88.007093][ T834] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 88.087133][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 88.247165][ T834] usb 6-1: Using ep0 maxpacket: 32 [ 88.252409][ T20] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.337154][ T20] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 88.345358][ T20] usb 1-1: config 0 has no interface number 0 [ 88.351536][ T20] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 88.362537][ T20] usb 1-1: config 0 interface 88 has no altsetting 0 [ 88.369330][ T834] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 88.377504][ T834] usb 6-1: config 0 has no interface number 0 [ 88.537236][ T834] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 88.546369][ T834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.554420][ T834] usb 6-1: Product: syz [ 88.558698][ T834] usb 6-1: Manufacturer: syz [ 88.563471][ T834] usb 6-1: SerialNumber: syz [ 88.569156][ T834] usb 6-1: config 0 descriptor?? [ 88.607747][ T834] smsc95xx v2.0.0 [ 88.617156][ T20] usb 1-1: string descriptor 0 read error: -22 [ 88.623434][ T20] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 88.633159][ T20] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 88.645442][ T20] usb 1-1: config 0 descriptor?? [ 88.688509][ T20] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input5 [ 88.716931][ T24] audit: type=1400 audit(2000000057.230:8197): avc: denied { map } for pid=2795 comm="syz.2.909" path="socket:[27583]" dev="sockfs" ino=27583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 88.892595][ T20] usb 1-1: USB disconnect, device number 10 [ 89.027163][ T834] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 89.038363][ T834] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 89.593310][ T2827] fuse: Bad value for 'fd' [ 89.727126][ T834] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 89.743483][ T834] smsc95xx: probe of 6-1:0.67 failed with error -32 [ 90.634711][ T2905] device vlan1 entered promiscuous mode [ 90.748586][ T803] usb 6-1: USB disconnect, device number 6 [ 91.070328][ T2985] device syzkaller0 entered promiscuous mode [ 91.177249][ T3002] device syzkaller0 entered promiscuous mode [ 91.276964][ T3019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.294641][ T24] audit: type=1400 audit(2000000059.810:8198): avc: denied { create } for pid=3020 comm="syz.5.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 91.345208][ T24] audit: type=1400 audit(2000000059.860:8199): avc: denied { create } for pid=3010 comm="syz.3.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 91.483301][ T24] audit: type=1400 audit(2000000060.000:8200): avc: denied { append } for pid=3042 comm="syz.3.1025" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.680358][ T24] audit: type=1400 audit(2000000060.200:8201): avc: denied { bind } for pid=3076 comm="syz.5.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.711010][ T24] audit: type=1400 audit(2000000060.200:8202): avc: denied { write } for pid=3076 comm="syz.5.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.737180][ T3087] netlink: 'syz.5.1047': attribute type 12 has an invalid length. [ 91.745118][ T3087] netlink: 'syz.5.1047': attribute type 29 has an invalid length. [ 91.754507][ T3087] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1047'. [ 91.768336][ T3087] netlink: 'syz.5.1047': attribute type 2 has an invalid length. [ 91.776190][ T3087] netlink: 'syz.5.1047': attribute type 3 has an invalid length. [ 91.777278][ T5] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 91.784357][ T3087] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1047'. [ 92.094744][ T24] audit: type=1400 audit(2000000060.610:8203): avc: denied { create } for pid=3135 comm="syz.1.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.114704][ T536] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 92.122341][ T24] audit: type=1400 audit(2000000060.620:8204): avc: denied { ioctl } for pid=3135 comm="syz.1.1071" path="socket:[28093]" dev="sockfs" ino=28093 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.157173][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.167599][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.283942][ T3158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 92.309715][ T24] audit: type=1400 audit(2000000060.830:8205): avc: denied { create } for pid=3153 comm="syz.1.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 92.327418][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.342340][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.351340][ T5] usb 4-1: Product: syz [ 92.356058][ T5] usb 4-1: Manufacturer: syz [ 92.360768][ T5] usb 4-1: SerialNumber: syz [ 92.377071][ T536] usb 6-1: Using ep0 maxpacket: 8 [ 92.537155][ T536] usb 6-1: unable to get BOS descriptor or descriptor too short [ 92.687126][ T5] usb 4-1: 0:2 : does not exist [ 92.695225][ T5] usb 4-1: USB disconnect, device number 5 [ 92.726859][ T3202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 92.764217][ T3202] device syzkaller0 entered promiscuous mode [ 92.797144][ T536] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 92.806233][ T536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.814460][ T536] usb 6-1: Product: syz [ 92.818816][ T536] usb 6-1: Manufacturer: syz [ 92.823492][ T536] usb 6-1: SerialNumber: syz [ 92.927426][ T816] udevd[816]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.160246][ T3255] EXT4-fs (loop3): Ignoring removed bh option [ 93.166443][ T3255] EXT4-fs (loop3): Ignoring removed oldalloc option [ 93.173588][ T3255] EXT4-fs (loop3): Ignoring removed nobh option [ 93.180101][ T3255] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.197187][ T536] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 93.201356][ T3255] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 93.227081][ T24] audit: type=1400 audit(2000000061.750:8206): avc: denied { create } for pid=3254 comm="syz.3.1128" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 93.247665][ T536] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 93.275865][ T3255] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3358: comm syz.3.1128: Allocating blocks 497-513 which overlap fs metadata [ 93.290861][ T3255] EXT4-fs (loop3): pa ffff88811c0913f0: logic 128, phys. 385, len 8 [ 93.297976][ T536] usb 6-1: USB disconnect, device number 7 [ 93.298983][ T3255] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4375: group 0, free 0, pa_free 1 [ 93.468326][ T3262] exfat: Deprecated parameter 'utf8' [ 93.476699][ T3262] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 93.489360][ T3262] exFAT-fs (loop3): failed to load alloc-bitmap [ 93.495658][ T3262] exFAT-fs (loop3): failed to recognize exfat type [ 93.507452][ T816] udevd[816]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.699282][ T3286] ================================================================== [ 93.707434][ T3286] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 93.715618][ T3286] Read of size 8 at addr ffff8881273ac8c0 by task syz.0.1140/3286 [ 93.723448][ T3286] [ 93.725828][ T3286] CPU: 1 PID: 3286 Comm: syz.0.1140 Tainted: G W syzkaller #0 [ 93.734613][ T3286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.744683][ T3286] Call Trace: [ 93.748013][ T3286] __dump_stack+0x21/0x24 [ 93.752375][ T3286] dump_stack_lvl+0x1a7/0x208 [ 93.757072][ T3286] ? show_regs_print_info+0x18/0x18 [ 93.762310][ T3286] ? thaw_kernel_threads+0x220/0x220 [ 93.767629][ T3286] print_address_description+0x7f/0x2c0 [ 93.773211][ T3286] ? tc_setup_flow_action+0x842/0x3280 [ 93.778695][ T3286] kasan_report+0xe2/0x130 [ 93.783129][ T3286] ? flow_action_cookie_create+0x28/0x90 [ 93.788825][ T3286] ? tc_setup_flow_action+0x842/0x3280 [ 93.794419][ T3286] __asan_report_load8_noabort+0x14/0x20 [ 93.800097][ T3286] tc_setup_flow_action+0x842/0x3280 [ 93.805411][ T3286] ? __kmalloc+0x1a4/0x330 [ 93.809848][ T3286] ? flow_rule_alloc+0x32/0x2c0 [ 93.814722][ T3286] mall_replace_hw_filter+0x2cc/0x8a0 [ 93.820113][ T3286] ? pcpu_block_update_hint_alloc+0x8bf/0xc50 [ 93.826204][ T3286] ? mall_set_parms+0x410/0x410 [ 93.831078][ T3286] ? tcf_exts_destroy+0xb0/0xb0 [ 93.835950][ T3286] ? pcpu_alloc+0xf9b/0x16b0 [ 93.840558][ T3286] ? mall_set_parms+0x19d/0x410 [ 93.845448][ T3286] mall_change+0x546/0x760 [ 93.849894][ T3286] ? __kasan_check_write+0x14/0x20 [ 93.855030][ T3286] ? mall_get+0xa0/0xa0 [ 93.859210][ T3286] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 93.865128][ T3286] ? nla_strcmp+0xf4/0x140 [ 93.869565][ T3286] tc_new_tfilter+0x1452/0x1a90 [ 93.874548][ T3286] ? mall_get+0xa0/0xa0 [ 93.878726][ T3286] ? tcf_gate_entry_destructor+0x20/0x20 [ 93.884388][ T3286] ? security_capable+0x87/0xb0 [ 93.889260][ T3286] ? ns_capable+0x8c/0xf0 [ 93.893622][ T3286] ? netlink_net_capable+0x125/0x160 [ 93.899020][ T3286] ? tcf_gate_entry_destructor+0x20/0x20 [ 93.904680][ T3286] rtnetlink_rcv_msg+0x845/0xcc0 [ 93.909640][ T3286] ? rtnetlink_bind+0x80/0x80 [ 93.914337][ T3286] ? set_next_entity+0xb4/0x5d0 [ 93.919239][ T3286] ? compat_start_thread+0x80/0x80 [ 93.924375][ T3286] ? pick_next_task_fair+0x812/0xa40 [ 93.929685][ T3286] ? native_set_ldt+0x370/0x370 [ 93.934565][ T3286] ? __update_idle_core+0x2a0/0x2a0 [ 93.939782][ T3286] ? queued_spin_lock_slowpath+0x47/0x50 [ 93.945467][ T3286] ? _raw_spin_unlock_irq+0x4e/0x70 [ 93.950688][ T3286] ? finish_task_switch+0x12e/0x5a0 [ 93.956049][ T3286] ? switch_mm_irqs_off+0x75f/0x990 [ 93.961277][ T3286] ? __switch_to_asm+0x34/0x60 [ 93.966066][ T3286] ? __schedule+0xb5b/0x1320 [ 93.970679][ T3286] ? __sched_text_start+0x8/0x8 [ 93.975556][ T3286] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 93.980970][ T3286] netlink_rcv_skb+0x1f5/0x440 [ 93.985777][ T3286] ? rtnetlink_bind+0x80/0x80 [ 93.990719][ T3286] ? netlink_ack+0xb70/0xb70 [ 93.995337][ T3286] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 94.001000][ T3286] ? netlink_unicast+0x72e/0xa40 [ 94.006078][ T3286] rtnetlink_rcv+0x1c/0x20 [ 94.010534][ T3286] netlink_unicast+0x876/0xa40 [ 94.015329][ T3286] netlink_sendmsg+0x89c/0xb50 [ 94.020250][ T3286] ? netlink_getsockopt+0x530/0x530 [ 94.025686][ T3286] ? security_socket_sendmsg+0x82/0xa0 [ 94.031191][ T3286] ? netlink_getsockopt+0x530/0x530 [ 94.036411][ T3286] ____sys_sendmsg+0x5b7/0x8f0 [ 94.041207][ T3286] ? __sys_sendmsg_sock+0x40/0x40 [ 94.046273][ T3286] ? import_iovec+0x7c/0xb0 [ 94.050802][ T3286] ___sys_sendmsg+0x236/0x2e0 [ 94.055503][ T3286] ? __sys_sendmsg+0x280/0x280 [ 94.060293][ T3286] ? __fdget+0x1a1/0x230 [ 94.064558][ T3286] __x64_sys_sendmsg+0x1f9/0x2c0 [ 94.069533][ T3286] ? __kasan_check_write+0x14/0x20 [ 94.074671][ T3286] ? ___sys_sendmsg+0x2e0/0x2e0 [ 94.079543][ T3286] ? __kasan_check_read+0x11/0x20 [ 94.084582][ T3286] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 94.090224][ T3286] do_syscall_64+0x31/0x40 [ 94.094655][ T3286] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 94.100551][ T3286] RIP: 0033:0x7f0e2e6b7799 [ 94.104973][ T3286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.124611][ T3286] RSP: 002b:00007f0e2d112028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.133035][ T3286] RAX: ffffffffffffffda RBX: 00007f0e2e930fa0 RCX: 00007f0e2e6b7799 [ 94.141015][ T3286] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 94.148992][ T3286] RBP: 00007f0e2e74dc99 R08: 0000000000000000 R09: 0000000000000000 [ 94.157003][ T3286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.165019][ T3286] R13: 00007f0e2e931038 R14: 00007f0e2e930fa0 R15: 00007ffeb1731bc8 [ 94.173001][ T3286] [ 94.175345][ T3286] Allocated by task 3286: [ 94.179680][ T3286] __kasan_kmalloc+0xda/0x110 [ 94.184362][ T3286] __kmalloc+0x1a4/0x330 [ 94.188604][ T3286] tcf_idr_create+0x5f/0x790 [ 94.193228][ T3286] tcf_idr_create_from_flags+0x61/0x70 [ 94.198690][ T3286] tcf_gact_init+0x2e6/0x560 [ 94.203282][ T3286] tcf_action_init_1+0x443/0x6e0 [ 94.208220][ T3286] tcf_action_init+0x227/0x780 [ 94.212990][ T3286] tcf_exts_validate+0x248/0x570 [ 94.217943][ T3286] mall_set_parms+0x4b/0x410 [ 94.222535][ T3286] mall_change+0x47a/0x760 [ 94.226950][ T3286] tc_new_tfilter+0x1452/0x1a90 [ 94.231813][ T3286] rtnetlink_rcv_msg+0x845/0xcc0 [ 94.236750][ T3286] netlink_rcv_skb+0x1f5/0x440 [ 94.241517][ T3286] rtnetlink_rcv+0x1c/0x20 [ 94.245934][ T3286] netlink_unicast+0x876/0xa40 [ 94.250697][ T3286] netlink_sendmsg+0x89c/0xb50 [ 94.255459][ T3286] ____sys_sendmsg+0x5b7/0x8f0 [ 94.260238][ T3286] ___sys_sendmsg+0x236/0x2e0 [ 94.264922][ T3286] __x64_sys_sendmsg+0x1f9/0x2c0 [ 94.269865][ T3286] do_syscall_64+0x31/0x40 [ 94.274287][ T3286] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 94.280173][ T3286] [ 94.282507][ T3286] The buggy address belongs to the object at ffff8881273ac800 [ 94.282507][ T3286] which belongs to the cache kmalloc-192 of size 192 [ 94.296560][ T3286] The buggy address is located 0 bytes to the right of [ 94.296560][ T3286] 192-byte region [ffff8881273ac800, ffff8881273ac8c0) [ 94.310174][ T3286] The buggy address belongs to the page: [ 94.315828][ T3286] page:ffffea00049ceb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1273ac [ 94.326065][ T3286] flags: 0x4000000000000200(slab) [ 94.331097][ T3286] raw: 4000000000000200 ffffea00042b5380 0000000300000003 ffff888100043380 [ 94.339684][ T3286] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 94.348266][ T3286] page dumped because: kasan: bad access detected [ 94.354675][ T3286] page_owner tracks the page as allocated [ 94.360402][ T3286] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 278, ts 22144150864, free_ts 0 [ 94.375542][ T3286] prep_new_page+0x179/0x180 [ 94.380143][ T3286] get_page_from_freelist+0x223b/0x23d0 [ 94.385690][ T3286] __alloc_pages_nodemask+0x290/0x620 [ 94.391066][ T3286] new_slab+0x84/0x3f0 [ 94.395149][ T3286] ___slab_alloc+0x2a6/0x450 [ 94.399737][ T3286] __slab_alloc+0x63/0xa0 [ 94.404067][ T3286] kmem_cache_alloc_trace+0x1b0/0x2e0 [ 94.409443][ T3286] kset_create_and_add+0x59/0x2c0 [ 94.414469][ T3286] netdev_register_kobject+0x1ec/0x360 [ 94.419932][ T3286] register_netdevice+0xdf0/0x13e0 [ 94.425047][ T3286] veth_newlink+0x678/0xb60 [ 94.429550][ T3286] rtnl_newlink+0x1310/0x18f0 [ 94.434230][ T3286] rtnetlink_rcv_msg+0xa31/0xcc0 [ 94.439181][ T3286] netlink_rcv_skb+0x1f5/0x440 [ 94.443957][ T3286] rtnetlink_rcv+0x1c/0x20 [ 94.448382][ T3286] netlink_unicast+0x876/0xa40 [ 94.453143][ T3286] page_owner free stack trace missing [ 94.458510][ T3286] [ 94.460844][ T3286] Memory state around the buggy address: [ 94.466480][ T3286] ffff8881273ac780: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 94.474542][ T3286] ffff8881273ac800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.482607][ T3286] >ffff8881273ac880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 94.490668][ T3286] ^ [ 94.496821][ T3286] ffff8881273ac900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.504887][ T3286] ffff8881273ac980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 94.512948][ T3286] ================================================================== [ 94.521012][ T3286] Disabling lock debugging due to kernel taint [ 94.546295][ T24] audit: type=1400 audit(2000000063.060:8207): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1