last executing test programs: 1.559137994s ago: executing program 4 (id=5): syz_read_part_table(0x5e2, &(0x7f0000000b00)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4d1, &(0x7f0000000500)="$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") capset(0x0, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) 1.360171169s ago: executing program 2 (id=3): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f00000003c0)='./file2\x00', 0x20404a, &(0x7f0000000140)=ANY=[], 0xfd, 0x1ea, &(0x7f0000001ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0x26000, 0x209000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x9e, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@noop, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback=0x7f00002f}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}]}}}}}}}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4800) syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x48, &(0x7f00000000c0)={[{@inline_dentry}, {@atgc}, {@discard}, {@jqfmt_vfsold}, {@usrjquota={'usrjquota', 0x3d, '!'}}, {@two_active_logs}, {@adaptive_mode}, {@fault_injection={'fault_injection', 0x3d, 0x10001}}, {@inline_xattr}, {@usrjquota={'usrjquota', 0x3d, '!'}}]}, 0x1, 0x551d, &(0x7f0000000600)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x3376039, 0x0) 1.072605385s ago: executing program 1 (id=2): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x75a, 0x51, 0x54, 0xd, 0x8, 0x1c}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 1.061170365s ago: executing program 3 (id=4): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000016c0)={0x28, 0x11, 0x0, 0xffffffffffffffff, &(0x7f00000006c0)="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", 0x1, 0x8, 0x1, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x3}}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.033520936s ago: executing program 0 (id=1): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 476.22951ms ago: executing program 4 (id=6): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x75a, 0x51, 0x54, 0xd, 0x8, 0x1c}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83116752ddb11cfafffa3837841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e30df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cd17b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0544c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf80300cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9874620e322d9348900000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a35df8574eb49e972f7976eafee43a6c17009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d5040000000000000000000000000000074f21ec2b57bb2daf8fab7cd564d1e84c93af254ab029e6cd168007b9a10a6664d9d264aceede0183b2306c440b2c81c9e120ece36a61b0b015ea6716decf8783e0845fa975b6e5f7f4dd4abe2a95e764ae13288d4439ec2906659bc9f26212615423c3d8d58901a6b51a93c8aacb19c416d5260662031a295f2b33295a60db77b5f082bdc48cd06c6cd01e7a40e456d829d277c77c2ca9159c82a391a24d5f6193228d93e2fd99cd0cdeefa9b7c5ea02c5454ef4c6631e6766ffcba3cce4ab13c69622675683ab1f05edbb09641c9dba535b319a21a00287645449a61eefc00a2a8f6955d6573023325bc00ca0facb69d67c8b95e29b36c4a5f84a959262c382de9a411be7b9b500ca329e5eefcd323490eed4bcbcba4764618bf51a08498a64b0e19c00e33480b27c2b12c326e6bf10234f883b3082512e9ad2fbdf6bae"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001200)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x13c7200, 0x6, 0x8c, 0x0, 0x7ffe, 0x34d, 0xfff, 0x0, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x0) 472.72743ms ago: executing program 3 (id=7): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000240)=ANY=[], 0x21, 0x14ff, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ftruncate(r0, 0x201f) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xd1, 0xa0, 0x5e, 0x20, 0xccd, 0x102, 0x890e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x54, 0x40, 0x1, "", [{{0x9, 0x4, 0xbc, 0x80, 0x0, 0xc, 0xf1, 0xc7, 0x7f}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0xbb42) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x366, 0xc000, 0x800c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x9, 0x4, 0x3, 0x34, "22536af39b2dd23a9ada34cc97af10fd4fcca1574843d30b59c491c8b3e74d9389515d1002374a2979479a2d2dfe00", "0410b1617b6268917d9cb72c2e9e13be3626fce25310f5db74161ccef2c5cf5e", [0x3, 0x3]}) open$dir(&(0x7f0000000180)='./bus\x00', 0x8000, 0x100) 166.658937ms ago: executing program 0 (id=8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 125.389518ms ago: executing program 2 (id=9): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff0005008005090581030002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x7d, 0x241) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000300)={0x1, 0x2, "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"}) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) 0s ago: executing program 4 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x1, 0x1, 0x0, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 30.308534][ T30] audit: type=1400 audit(1788870737.552:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.312355][ T277] cgroup: Unknown subsys name 'net' [ 30.331545][ T30] audit: type=1400 audit(1788870737.562:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.359024][ T30] audit: type=1400 audit(1788870737.592:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.359720][ T277] cgroup: Unknown subsys name 'devices' [ 30.501642][ T277] cgroup: Unknown subsys name 'hugetlb' [ 30.507589][ T277] cgroup: Unknown subsys name 'rlimit' [ 30.709008][ T30] audit: type=1400 audit(1788870737.952:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.732526][ T30] audit: type=1400 audit(1788870737.962:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.758397][ T30] audit: type=1400 audit(1788870737.962:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.765922][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.791087][ T30] audit: type=1400 audit(1788870738.052:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.817087][ T30] audit: type=1400 audit(1788870738.052:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.828311][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.843929][ T30] audit: type=1400 audit(1788870738.072:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.877482][ T30] audit: type=1400 audit(1788870738.072:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.481231][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.488369][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.496116][ T285] device bridge_slave_0 entered promiscuous mode [ 31.504872][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.512120][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.520056][ T285] device bridge_slave_1 entered promiscuous mode [ 31.558280][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.565500][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.573661][ T286] device bridge_slave_0 entered promiscuous mode [ 31.581905][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.589105][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.597264][ T286] device bridge_slave_1 entered promiscuous mode [ 31.631094][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.638211][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.645963][ T287] device bridge_slave_0 entered promiscuous mode [ 31.656789][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.664320][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.673857][ T287] device bridge_slave_1 entered promiscuous mode [ 31.741755][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.748848][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.756585][ T289] device bridge_slave_0 entered promiscuous mode [ 31.765634][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.772850][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.781000][ T289] device bridge_slave_1 entered promiscuous mode [ 31.871022][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.878378][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.886229][ T288] device bridge_slave_0 entered promiscuous mode [ 31.896193][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.903308][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.911316][ T288] device bridge_slave_1 entered promiscuous mode [ 31.990231][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.997523][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.004926][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.012095][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.044349][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.051476][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.067090][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.074479][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.081847][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.088898][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.119475][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.126923][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.134636][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.141806][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.155168][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.162744][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.170189][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.177605][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.211566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.220935][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.229236][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.240104][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.247951][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.255673][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.264326][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.272647][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.282874][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.290537][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.322716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.331607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.340527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.348882][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.356038][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.364039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.372739][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.379863][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.387454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.397532][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.404853][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.412827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.421193][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.428600][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.474646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.485110][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.492758][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.500664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.509994][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.517894][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.526140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.533816][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.542518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.551467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.560428][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.568036][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.575972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.584473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.593880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.603059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.611404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.620212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.628451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.637229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.646409][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.655531][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.663123][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.671771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.683428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.692392][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.701514][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.710642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.721284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.738223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.747172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.761018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.769815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.781140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.790757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.800464][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.807633][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.820265][ T287] device veth0_vlan entered promiscuous mode [ 32.831308][ T286] device veth0_vlan entered promiscuous mode [ 32.838305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.846963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.855683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.864076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.872421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.880753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.888976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.897729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.906275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.914152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.931012][ T287] device veth1_macvtap entered promiscuous mode [ 32.940719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.957755][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.966704][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.975397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.984280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.993092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.001680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.010142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.024050][ T289] device veth0_vlan entered promiscuous mode [ 33.033762][ T288] device veth0_vlan entered promiscuous mode [ 33.045889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.054238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.061964][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.070116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.078226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.085874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.093455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.101907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.110710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.119614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.127599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.136069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.148523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.162954][ T286] device veth1_macvtap entered promiscuous mode [ 33.171428][ T289] device veth1_macvtap entered promiscuous mode [ 33.183648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.192998][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.202249][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 33.217941][ T288] device veth1_macvtap entered promiscuous mode [ 33.236324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.245664][ T307] loop4: detected capacity change from 0 to 2048 [ 33.246683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.261429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.270226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.278977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.284005][ T307] loop4: p2 p3 < > p4 < p5 > [ 33.290531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.294033][ T307] loop4: partition table partially beyond EOD, truncated [ 33.310851][ T307] loop4: p3 start 4284289 is beyond EOD, truncated [ 33.321848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.336188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.345933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.355259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.379712][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.389232][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.406285][ T285] device veth0_vlan entered promiscuous mode [ 33.422202][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.433665][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.444411][ T313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.451706][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.471377][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.482594][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.491356][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.500898][ T311] udevd[311]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 33.511037][ T307] loop4: detected capacity change from 0 to 512 [ 33.525268][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.533791][ T308] udevd[308]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 33.541008][ T315] udevd[315]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 33.554501][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.562585][ T313] loop2: detected capacity change from 0 to 16 [ 33.566642][ T285] device veth1_macvtap entered promiscuous mode [ 33.599738][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.611227][ T313] ======================================================= [ 33.611227][ T313] WARNING: The mand mount option has been deprecated and [ 33.611227][ T313] and is ignored by this kernel. Remove the mand [ 33.611227][ T313] option from the mount to silence this warning. [ 33.611227][ T313] ======================================================= [ 33.622465][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.659866][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.668444][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.682110][ T308] udevd[308]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 33.693424][ T311] udevd[311]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 33.756292][ T313] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.768268][ T324] FAULT_INJECTION: forcing a failure. [ 33.768268][ T324] name failslab, interval 1, probability 0, space 0, times 1 [ 33.781167][ T324] CPU: 0 PID: 324 Comm: syz.3.4 Not tainted syzkaller #0 [ 33.788239][ T324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.798960][ T324] Call Trace: [ 33.802319][ T324] [ 33.805426][ T324] __dump_stack+0x21/0x30 [ 33.810335][ T324] dump_stack_lvl+0x110/0x170 [ 33.815253][ T324] ? show_regs_print_info+0x20/0x20 [ 33.820616][ T324] ? pcpu_memcg_post_alloc_hook+0x176/0x210 [ 33.826757][ T324] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 33.833515][ T324] dump_stack+0x15/0x20 [ 33.837739][ T324] should_fail+0x3ab/0x500 [ 33.842299][ T324] __should_failslab+0xa4/0xe0 [ 33.847306][ T324] should_failslab+0x9/0x20 [ 33.852216][ T324] slab_pre_alloc_hook+0x39/0xd0 [ 33.857396][ T324] kmem_cache_alloc_trace+0x48/0x270 [ 33.862925][ T324] ? ioprio_alloc_pd+0x6d/0x90 [ 33.867754][ T324] ioprio_alloc_pd+0x6d/0x90 [ 33.872577][ T324] blkg_alloc+0x474/0x5d0 [ 33.876974][ T324] blkg_create+0x105/0xe50 [ 33.881895][ T324] ? mempool_resize+0x880/0x880 [ 33.886828][ T324] ? radix_tree_lookup+0x276/0x290 [ 33.892288][ T324] bio_associate_blkg_from_css+0x7e2/0xb10 [ 33.898328][ T324] bio_associate_blkg+0xda/0xf0 [ 33.903330][ T324] __swap_writepage+0x501/0x1010 [ 33.908942][ T324] ? madvise_free_pte_range+0x11c0/0x11c0 [ 33.914984][ T324] ? swap_writepage+0x150/0x150 [ 33.920667][ T324] ? __kasan_check_read+0x11/0x20 [ 33.926147][ T324] ? _raw_spin_unlock+0x4d/0x70 [ 33.931131][ T324] ? page_swapcount+0x240/0x320 [ 33.936031][ T324] ? try_to_free_swap+0x251/0x9b0 [ 33.936061][ T313] Zero length message leads to an empty skb [ 33.947590][ T324] swap_writepage+0x57/0x150 [ 33.952257][ T324] shrink_page_list+0x326c/0x5800 [ 33.957359][ T324] ? arch_stack_walk+0xee/0x140 [ 33.962776][ T324] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 33.969838][ T324] ? is_bpf_text_address+0x177/0x190 [ 33.975668][ T324] ? __update_load_avg_cfs_rq+0xb1/0x2e0 [ 33.981525][ T324] ? update_load_avg+0x442/0x1110 [ 33.986973][ T324] reclaim_pages+0x54c/0x800 [ 33.991736][ T324] ? isolate_lru_page+0xbd0/0xbd0 [ 33.997071][ T324] ? isolate_lru_page+0x8ab/0xbd0 [ 34.002701][ T324] ? __kasan_check_write+0x14/0x20 [ 34.008097][ T324] madvise_cold_or_pageout_pte_range+0x1819/0x1b50 [ 34.015677][ T324] ? put_page+0xb0/0xb0 [ 34.020351][ T324] ? futex_wait_queue_me+0x2ff/0x660 [ 34.025788][ T324] ? futex_wait_setup+0x510/0x510 [ 34.031200][ T324] walk_pgd_range+0xb3b/0x13b0 [ 34.036125][ T324] walk_page_range+0x3e1/0x540 [ 34.041203][ T324] ? page_mapped_in_vma+0x3c0/0x3c0 [ 34.046980][ T324] do_madvise+0x1e6e/0x2420 [ 34.051782][ T324] ? kstrtouint_from_user+0x1c4/0x220 [ 34.058140][ T324] ? madvise_set_anon_name+0x470/0x470 [ 34.063664][ T324] ? __kasan_check_write+0x14/0x20 [ 34.070007][ T324] ? proc_fail_nth_write+0x180/0x200 [ 34.075877][ T324] ? proc_fail_nth_read+0x220/0x220 [ 34.081499][ T324] ? security_file_permission+0x79/0xa0 [ 34.087191][ T324] ? file_end_write+0x1b0/0x1b0 [ 34.092210][ T324] ? __kasan_check_write+0x14/0x20 [ 34.097476][ T324] ? mutex_unlock+0x8f/0x230 [ 34.102283][ T324] ? __se_sys_futex+0x135/0x330 [ 34.107186][ T324] ? __kasan_check_write+0x14/0x20 [ 34.112344][ T324] ? ksys_write+0x1fa/0x260 [ 34.116942][ T324] ? __kasan_check_write+0x14/0x20 [ 34.122439][ T324] ? switch_fpu_return+0x15d/0x2c0 [ 34.127653][ T324] __x64_sys_madvise+0xa9/0xc0 [ 34.132645][ T324] x64_sys_call+0x89b/0x9a0 [ 34.137288][ T324] do_syscall_64+0x4c/0xa0 [ 34.141742][ T324] ? clear_bhb_loop+0x50/0xa0 [ 34.146576][ T324] ? clear_bhb_loop+0x50/0xa0 [ 34.151385][ T324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.157319][ T324] RIP: 0033:0x7f0d2ad10159 [ 34.161767][ T324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.181870][ T324] RSP: 002b:00007f0d29769028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 34.190689][ T324] RAX: ffffffffffffffda RBX: 00007f0d2af97fa0 RCX: 00007f0d2ad10159 [ 34.198806][ T324] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 34.206873][ T324] RBP: 00007f0d2ada7024 R08: 0000000000000000 R09: 0000000000000000 [ 34.216423][ T324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.224932][ T324] R13: 00007f0d2af98038 R14: 00007f0d2af97fa0 R15: 00007fff6599cc78 [ 34.233378][ T324] [ 34.321505][ T329] loop3: detected capacity change from 0 to 256 [ 34.388295][ T329] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 34.419398][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.679375][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 34.755634][ T337] ================================================================== [ 34.764028][ T337] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3200 [ 34.772467][ T337] Read of size 8 at addr ffff8881101e4cc0 by task syz.4.10/337 [ 34.780855][ T337] [ 34.783380][ T337] CPU: 1 PID: 337 Comm: syz.4.10 Not tainted syzkaller #0 [ 34.790608][ T337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.800108][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.802006][ T337] Call Trace: [ 34.802015][ T337] [ 34.821877][ T332] syz.0.8 (332) used greatest stack depth: 22312 bytes left [ 34.822675][ T337] __dump_stack+0x21/0x30 [ 34.850684][ T337] dump_stack_lvl+0x110/0x170 [ 34.857033][ T337] ? show_regs_print_info+0x20/0x20 [ 34.862756][ T337] ? load_image+0x3f0/0x3f0 [ 34.868337][ T337] print_address_description+0x7f/0x2c0 [ 34.879877][ T337] ? tc_setup_flow_action+0x88e/0x3200 [ 34.892555][ T337] kasan_report+0x10f/0x150 [ 34.902656][ T20] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 34.905493][ T337] ? tc_setup_flow_action+0x88e/0x3200 [ 34.905533][ T337] __asan_report_load8_noabort+0x14/0x20 [ 34.928980][ T20] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 34.941041][ T337] tc_setup_flow_action+0x88e/0x3200 [ 34.941087][ T337] mall_replace_hw_filter+0x2db/0x8d0 [ 34.941111][ T337] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 34.985950][ T337] ? mall_set_parms+0x520/0x520 [ 34.992767][ T337] ? tcf_exts_destroy+0xb0/0xb0 [ 34.998603][ T337] ? pcpu_alloc+0x1118/0x16f0 [ 35.004838][ T337] ? mall_set_parms+0x1e4/0x520 [ 35.010618][ T337] mall_change+0x544/0x760 [ 35.014586][ T20] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 35.015798][ T337] ? __kasan_check_write+0x14/0x20 [ 35.029565][ T20] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 35.033789][ T337] ? mall_get+0xa0/0xa0 [ 35.033824][ T337] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 35.049967][ T20] usb 2-1: config 0 interface 0 has no altsetting 0 [ 35.054928][ T337] ? mall_get+0xa0/0xa0 [ 35.054961][ T337] tc_new_tfilter+0x13df/0x1990 [ 35.079554][ T337] ? tcf_gate_entry_destructor+0x20/0x20 [ 35.085871][ T337] ? security_capable+0x87/0xb0 [ 35.091334][ T337] ? ns_capable+0x8c/0xf0 [ 35.095810][ T337] ? netlink_net_capable+0x125/0x160 [ 35.102679][ T337] ? tcf_gate_entry_destructor+0x20/0x20 [ 35.110046][ T337] rtnetlink_rcv_msg+0x83c/0xcb0 [ 35.117094][ T337] ? rtnetlink_bind+0x80/0x80 [ 35.125266][ T337] ? avc_has_perm_noaudit+0x390/0x490 [ 35.133271][ T337] ? memcpy+0x56/0x70 [ 35.137650][ T337] ? avc_has_perm_noaudit+0x30a/0x490 [ 35.143225][ T337] ? arch_stack_walk+0xee/0x140 [ 35.148882][ T337] ? avc_denied+0x1b0/0x1b0 [ 35.154926][ T337] ? stack_trace_save+0xa6/0xf0 [ 35.159824][ T337] ? avc_has_perm+0x163/0x250 [ 35.164698][ T337] ? avc_has_perm_noaudit+0x490/0x490 [ 35.170302][ T337] ? x64_sys_call+0x4b/0x9a0 [ 35.175077][ T337] ? selinux_nlmsg_lookup+0x39d/0x440 [ 35.181095][ T337] netlink_rcv_skb+0x1e9/0x430 [ 35.186234][ T337] ? rtnetlink_bind+0x80/0x80 [ 35.189824][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 35.191304][ T337] ? netlink_ack+0xb10/0xb10 [ 35.191335][ T337] ? _copy_from_iter+0x4a4/0x10a0 [ 35.213732][ T337] ? __netlink_lookup+0x387/0x3b0 [ 35.223109][ T337] rtnetlink_rcv+0x1c/0x20 [ 35.228055][ T337] netlink_unicast+0x86c/0xa30 [ 35.236409][ T337] netlink_sendmsg+0x879/0xb80 [ 35.242478][ T337] ? netlink_getsockopt+0x530/0x530 [ 35.252719][ T337] ? security_socket_sendmsg+0x82/0xa0 [ 35.259482][ T337] ? netlink_getsockopt+0x530/0x530 [ 35.266002][ T337] ____sys_sendmsg+0x5be/0x8f0 [ 35.273674][ T337] ? __sys_sendmsg_sock+0x40/0x40 [ 35.283114][ T337] ? import_iovec+0x7c/0xb0 [ 35.289219][ T337] ___sys_sendmsg+0x236/0x2e0 [ 35.295052][ T337] ? __sys_sendmsg+0x280/0x280 [ 35.301542][ T337] ? sock_show_fdinfo+0xa0/0xa0 [ 35.310072][ T337] ? __fdget+0x1a1/0x230 [ 35.316671][ T337] __x64_sys_sendmsg+0x201/0x2d0 [ 35.323474][ T337] ? ___sys_sendmsg+0x2e0/0x2e0 [ 35.328778][ T337] ? __kasan_check_write+0x14/0x20 [ 35.334232][ T337] ? switch_fpu_return+0x15d/0x2c0 [ 35.339456][ T337] x64_sys_call+0x4b/0x9a0 [ 35.344822][ T337] do_syscall_64+0x4c/0xa0 [ 35.350247][ T337] ? clear_bhb_loop+0x50/0xa0 [ 35.356315][ T337] ? clear_bhb_loop+0x50/0xa0 [ 35.361922][ T337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.367880][ T337] RIP: 0033:0x7f1c8685c159 [ 35.372829][ T337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.396512][ T337] RSP: 002b:00007f1c852b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.406369][ T337] RAX: ffffffffffffffda RBX: 00007f1c86ae3fa0 RCX: 00007f1c8685c159 [ 35.417707][ T337] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 35.430028][ T20] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 35.430959][ T337] RBP: 00007f1c868f3024 R08: 0000000000000000 R09: 0000000000000000 [ 35.441688][ T20] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 35.451739][ T337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.451760][ T337] R13: 00007f1c86ae4038 R14: 00007f1c86ae3fa0 R15: 00007ffd42d2a608 [ 35.451859][ T337] [ 35.468031][ T20] usb 2-1: Product: syz [ 35.471541][ T337] [ 35.471549][ T337] Allocated by task 337: [ 35.471560][ T337] __kasan_kmalloc+0xd4/0x100 [ 35.471584][ T337] __kmalloc+0x13d/0x2c0 [ 35.482711][ T20] usb 2-1: Manufacturer: syz [ 35.484125][ T337] tcf_idr_create+0x5f/0x790 [ 35.488561][ T20] usb 2-1: SerialNumber: syz [ 35.490996][ T337] tcf_idr_create_from_flags+0x61/0x70 [ 35.491026][ T337] tcf_gact_init+0x342/0x570 [ 35.491046][ T337] tcf_action_init_1+0x3fd/0x6b0 [ 35.508042][ T20] usb 2-1: config 0 descriptor?? [ 35.509937][ T337] tcf_action_init+0x233/0x7a0 [ 35.509966][ T337] tcf_exts_validate+0x24a/0x580 [ 35.554389][ T337] mall_set_parms+0x48/0x520 [ 35.559361][ T337] mall_change+0x478/0x760 [ 35.563918][ T337] tc_new_tfilter+0x13df/0x1990 [ 35.570638][ T337] rtnetlink_rcv_msg+0x83c/0xcb0 [ 35.576216][ T337] netlink_rcv_skb+0x1e9/0x430 [ 35.581467][ T337] rtnetlink_rcv+0x1c/0x20 [ 35.586124][ T337] netlink_unicast+0x86c/0xa30 [ 35.591504][ T337] netlink_sendmsg+0x879/0xb80 [ 35.596550][ T337] ____sys_sendmsg+0x5be/0x8f0 [ 35.601537][ T337] ___sys_sendmsg+0x236/0x2e0 [ 35.606272][ T337] __x64_sys_sendmsg+0x201/0x2d0 [ 35.611430][ T337] x64_sys_call+0x4b/0x9a0 [ 35.616120][ T337] do_syscall_64+0x4c/0xa0 [ 35.619695][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.620731][ T337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.634543][ T337] [ 35.636949][ T337] The buggy address belongs to the object at ffff8881101e4c00 [ 35.636949][ T337] which belongs to the cache kmalloc-192 of size 192 [ 35.651304][ T337] The buggy address is located 0 bytes to the right of [ 35.651304][ T337] 192-byte region [ffff8881101e4c00, ffff8881101e4cc0) [ 35.665679][ T337] The buggy address belongs to the page: [ 35.671339][ T337] page:ffffea0004407900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1101e4 [ 35.682068][ T337] flags: 0x4000000000000200(slab|zone=1) [ 35.688123][ T337] raw: 4000000000000200 ffffea0004407740 0000000c0000000c ffff888100042c00 [ 35.697784][ T337] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 35.706784][ T337] page dumped because: kasan: bad access detected [ 35.713599][ T337] page_owner tracks the page as allocated [ 35.719986][ T337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 102, ts 7324225833, free_ts 7324202038 [ 35.738299][ T337] post_alloc_hook+0x192/0x1b0 [ 35.744864][ T337] prep_new_page+0x1c/0x110 [ 35.750174][ T337] get_page_from_freelist+0x2c3a/0x2cd0 [ 35.755938][ T337] __alloc_pages+0x1a2/0x460 [ 35.760659][ T337] new_slab+0xa0/0x4d0 [ 35.764862][ T337] ___slab_alloc+0x3ac/0x840 [ 35.769488][ T337] __slab_alloc+0x49/0x90 [ 35.774669][ T337] kmem_cache_alloc_trace+0x146/0x270 [ 35.781114][ T337] kernfs_fop_open+0x375/0xbb0 [ 35.787519][ T337] do_dentry_open+0x82a/0x1010 [ 35.793517][ T337] vfs_open+0x73/0x80 [ 35.798053][ T337] path_openat+0x26e6/0x2f80 [ 35.803111][ T337] do_filp_open+0x1df/0x400 [ 35.807937][ T337] do_sys_openat2+0x15e/0x7f0 [ 35.813532][ T337] __x64_sys_openat+0x136/0x160 [ 35.818912][ T337] x64_sys_call+0x219/0x9a0 [ 35.824459][ T337] page last free stack trace: [ 35.830227][ T337] free_unref_page_prepare+0x5fa/0x600 [ 35.836308][ T337] free_unref_page+0xae/0x540 [ 35.841480][ T337] __free_pages+0x6c/0x100 [ 35.847343][ T337] free_pages+0x82/0x90 [ 35.852546][ T337] selinux_genfs_get_sid+0x20b/0x250 [ 35.858601][ T337] inode_doinit_with_dentry+0x884/0xd90 [ 35.859735][ T6] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 35.864537][ T337] selinux_d_instantiate+0x27/0x40 [ 35.864566][ T337] security_d_instantiate+0x9e/0xf0 [ 35.885202][ T337] d_splice_alias+0x6d/0x390 [ 35.887501][ T6] usb 4-1: config 8 has no interface number 0 [ 35.890180][ T337] kernfs_iop_lookup+0x2c2/0x310 [ 35.890206][ T337] path_openat+0x1436/0x2f80 [ 35.909794][ T337] do_filp_open+0x1df/0x400 [ 35.914891][ T337] do_sys_openat2+0x15e/0x7f0 [ 35.920747][ T337] __x64_sys_openat+0x136/0x160 [ 35.926194][ T337] x64_sys_call+0x219/0x9a0 [ 35.930752][ T337] do_syscall_64+0x4c/0xa0 [ 35.930760][ T6] usb 4-1: config 8 interface 188 has no altsetting 0 [ 35.942825][ T337] [ 35.945185][ T337] Memory state around the buggy address: [ 35.951665][ T337] ffff8881101e4b80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.961603][ T337] ffff8881101e4c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 35.970703][ T337] >ffff8881101e4c80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 35.980013][ T337] ^ [ 35.989496][ T337] ffff8881101e4d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.998685][ T337] ffff8881101e4d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 36.006892][ T337] ================================================================== [ 36.016832][ T337] Disabling lock debugging due to kernel taint [ 36.026152][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 36.026171][ T30] audit: type=1400 audit(1788870743.062:124): avc: denied { name_bind } for pid=319 comm="syz.1.2" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 36.057374][ T30] audit: type=1400 audit(1788870743.112:125): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 36.101153][ T30] audit: type=1400 audit(1788870743.112:126): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.132980][ T30] audit: type=1400 audit(1788870743.112:127): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.135084][ T295] usb 2-1: USB disconnect, device number 2 [ 36.170182][ T30] audit: type=1400 audit(1788870743.112:128): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.201086][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 36.208804][ T30] audit: type=1400 audit(1788870743.112:129): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.240598][ T30] audit: type=1400 audit(1788870743.112:130): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.267522][ T30] audit: type=1400 audit(1788870743.112:131): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.319497][ T6] usb 4-1: string descriptor 0 read error: -22 [ 36.326871][ T6] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 36.336221][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.581566][ T30] audit: type=1400 audit(1788870743.832:132): avc: denied { map_create } for pid=328 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.587675][ T317] usb 4-1: USB disconnect, device number 2 [ 36.602843][ T30] audit: type=1400 audit(1788870743.832:133): avc: denied { read } for pid=328 comm="syz.3.7" name="bus" dev="loop3" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.607380][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.645884][ T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.819479][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.828735][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.837005][ T39] usb 3-1: Product: syz [ 36.841521][ T39] usb 3-1: Manufacturer: syz [ 36.846220][ T39] usb 3-1: SerialNumber: syz [ 36.890091][ T39] cdc_mbim 3-1:1.0: skipping garbage [ 36.895426][ T39] usb 3-1: selecting invalid altsetting 1 [ 37.319422][ T39] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 37.325598][ T39] cdc_mbim 3-1:1.0: bind() failure [ 38.664712][ T338] usb 3-1: USB disconnect, device number 2