last executing test programs: 5.723411941s ago: executing program 0 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in=@dev}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xffffffffffffff95) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) 5.595927412s ago: executing program 2 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) sync() 5.239245557s ago: executing program 2 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x1f, 0xf, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x520beaf08043c77b, 0x5a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000880)={r5, r4}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.443412596s ago: executing program 0 (id=158): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000080)={[{@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@numtail}, {@utf8}, {@shortname_lower}, {@shortname_mixed}, {@shortname_lower}, {@numtail}, {@utf8}, {@fat=@quiet}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x1, 0x379, &(0x7f0000000880)="$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") r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe) open_tree(r3, 0x0, 0x101) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) 4.260615108s ago: executing program 2 (id=159): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000004c0)) 4.180321849s ago: executing program 2 (id=161): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.736094915s ago: executing program 4 (id=170): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x7a, &(0x7f0000000240)={@remote, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, "ab68c6", 0x44, 0x6, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x4, 0x0, 0x1, 0xe, 0x80, 0x4, 0x4e20, 0x4e23, 0x3, 0x1, 0x0, 0x0, 0x1}, [{0xe8, 0x6f9, 0x8, 0x2, 0x1, 0x3, 0x4, 0x3ff}]}}}}}}, 0x0) 3.698770185s ago: executing program 4 (id=171): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3.697556725s ago: executing program 4 (id=172): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f00000010c0), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 3.532207687s ago: executing program 0 (id=173): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 3.142873902s ago: executing program 3 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x9, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r3, 0x4bfa, 0x0) 3.014123643s ago: executing program 0 (id=177): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x40021080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.768213436s ago: executing program 4 (id=178): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.552177949s ago: executing program 4 (id=179): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="4015050000000500b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x368, 0x77, 0x9d, 0xe9, 0x8, 0x1bc7, 0x9010, 0x2c29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x9, 0xd0, 0x9, "", [{{0x9, 0x4, 0xe2, 0xfb, 0x0, 0x37, 0xde, 0x82, 0x4}}]}}]}}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x84100) 2.216938733s ago: executing program 0 (id=180): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$eJzs3V9oHHkdAPDvbJOY6+W6FQ7U49Cg4B2eJm2T63kcyB34j3optfFFGyhJu01CN9mQbLSJoBWLFHzxSYRK0T4oiGJ87JuKoMWiD4WiL6VIQS20harPkdnd6YVk02zbdCdJPx+Yzm9+2+zvO/PNbGZ+O/ObAJ5ZvRHxdkTsiojXIqLYqC80pjhbn9L/NzawNJFOSSwvD99LIomIQwNLE9l7JY358403eDUift+ZxNi5te3OLSyeHi2XS7ON5f7q1Ez/3MLipyanRsdL46XpgTff+PTBgdcHDw5s2rreHD029cvK0Fs/u334Nx/++CfuJfF29DReW7kem6U3ehvbpDNeWPlCEvH1zW4sZ90ryklHjoHQsj+/8fIP844BAGi/QuPYv6N2/F+MXVE/eOu+NnK/GLf+st7PHRq5+O92xgkAAAA8vuXljzTmAAAAwM6VOPcHAACAHS67DuDQwNJENrXr2oPbX2hXS6znzjsRsbee/+z+7vorHY17erujMyJ2/yeJlbf1Jqvu+X0c1c9F9MY3/lg9+4NT6RRP6T5stqalf+QdAXnqGsw7AvL00pfzjoA8/fV83hGQp2t38o6APB0dzjsC8nT4YN4RkKcL9/KOgN++Ux8AcG3/X6E25l/Wy7O6/yctP/eEbd8tRPRG969W1un/aa+s/29sTf9f4UH/3651+v/2tNjG5a9d/1Cz+i9+Nc3/8FjW//fJkR+X0vbT+ROvGC25852Ilzqa5T95kP9knfwXW2zjD1cHm/b0/25Pmv+f/yLNdzbJf3st/zTilWie/0zy8PFZ+09Nlkv76v82beOj9//5v2b1039L83/lM9n+n05p+9l3ATx96f6/e538b/T5v7fFNi5N3mra0zvck+b/lW89PP+F213JV2q/jF2NmjOj1ers/oiu5N219QcedQs8W7JtlG3DNP+vfqz53/8P1ubNP//T34n3t9jmu8cKbzWrH/x1mv/vf97+n580/yc32P/X+/v/YqttXL852qx+4rNp/o9ekn8AAAAAAAAAeDKFiOiJpND3oFwo9PXVn+H9YuwulCtz1ddOVeanT0btWdl7o7OQXelVrC8n6fL+xvVA2fKBVcsDjetFzhefqy33naiUT+a98gAAALDD9UTcOPbdyx94ftX5/7+K9fN/AAAAYPtLz/9f/snFC2n5v60O5AMAAABsK+n5//3v3b0Szv8BAABgx+rpdv4PAAAAO132/f+RoaE4MjS0nD33b7oyPnl6YubNA/v6puZP9J2ozM70jVcq47UR+6Y2ft9ypTKz//WYP9NfLc1V++cWFo9PVeanq8drz409Xupsw7oBGzv398sjeccAAAC0T8864/+/sGLs/n0RsScirhY735eN9Q8AAABsfT0RN770o2/+aW5h8fRouVyaVXjUwvK3I7ZAGAprCtlFJlslnm1ZyPkDCgAA2HTvHfTnHQkAAAAAAAAAAAAAAAAAAAA8u9oxnFje6wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD28f8AAAD//0FW/Wk=") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 2.193498503s ago: executing program 3 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601fcff00000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.043293935s ago: executing program 3 (id=182): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010058}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/22, 0x16}], 0x2}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.043103385s ago: executing program 1 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2.036363935s ago: executing program 0 (id=184): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f57584"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) 1.64301072s ago: executing program 2 (id=185): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8088, &(0x7f0000002480)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x3, 0x232, &(0x7f00000002c0)="$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") write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *'], 0xa) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000280)='./file1\x00', 0x200400, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000001fc0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 1.584316171s ago: executing program 3 (id=186): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.58277727s ago: executing program 2 (id=187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_usb_connect(0x5, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0x5b, 0xbe, 0x35, 0x20, 0x19d2, 0x1088, 0x6b53, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x27, 0xf, 0x60, 0x0, "", [{{0x9, 0x4, 0x85, 0xf, 0x0, 0xff, 0xff, 0xff, 0xc}}]}}]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.440165902s ago: executing program 3 (id=188): socket(0x11, 0x3, 0x0) getxattr(0x0, &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07710936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r6, r6, r5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syncfs(0xffffffffffffffff) 1.001163217s ago: executing program 1 (id=189): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x10, 0x4, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000780), 0x0}, 0x20) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x21, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1, 0x8}) 520.251293ms ago: executing program 3 (id=190): socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) 94.935628ms ago: executing program 1 (id=191): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[], 0xd0}}, 0x0) 80.881219ms ago: executing program 1 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000004c0)={0xffff, 0x41a, &(0x7f0000000380)="7480a33f4940f2e5b92399fd", 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x6, 0x2, 0x4, 0x7f, 0x4230, 0x500000000000000, 0x81, 0x9be, 0x8001, 0x5, 0x7, 0x101, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.017559ms ago: executing program 1 (id=193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) 11.849989ms ago: executing program 1 (id=194): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 4 (id=195): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 23.564195][ T24] audit: type=1400 audit(1778424154.960:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.567981][ T271] cgroup: Unknown subsys name 'net' [ 23.587250][ T24] audit: type=1400 audit(1778424154.960:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.614493][ T24] audit: type=1400 audit(1778424154.990:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.615039][ T271] cgroup: Unknown subsys name 'devices' [ 23.822617][ T271] cgroup: Unknown subsys name 'hugetlb' [ 23.828703][ T271] cgroup: Unknown subsys name 'rlimit' [ 23.999463][ T24] audit: type=1400 audit(1778424155.390:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.023067][ T24] audit: type=1400 audit(1778424155.390:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.048243][ T24] audit: type=1400 audit(1778424155.390:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.068655][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.080946][ T24] audit: type=1400 audit(1778424155.480:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.106626][ T24] audit: type=1400 audit(1778424155.480:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.132565][ T24] audit: type=1400 audit(1778424155.520:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.132719][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.158595][ T24] audit: type=1400 audit(1778424155.520:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.761021][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.768266][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.775896][ T279] device bridge_slave_0 entered promiscuous mode [ 24.802770][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.809838][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.817384][ T279] device bridge_slave_1 entered promiscuous mode [ 24.916982][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.924930][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.932369][ T282] device bridge_slave_0 entered promiscuous mode [ 24.940399][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.947575][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.955183][ T282] device bridge_slave_1 entered promiscuous mode [ 24.968250][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.975477][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.982950][ T280] device bridge_slave_0 entered promiscuous mode [ 24.991097][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.998348][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.005816][ T280] device bridge_slave_1 entered promiscuous mode [ 25.033840][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.041055][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.048656][ T285] device bridge_slave_0 entered promiscuous mode [ 25.058463][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.065667][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.073292][ T285] device bridge_slave_1 entered promiscuous mode [ 25.132053][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.139143][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.146775][ T284] device bridge_slave_0 entered promiscuous mode [ 25.156645][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.163772][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.171711][ T284] device bridge_slave_1 entered promiscuous mode [ 25.248821][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.255943][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.263257][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.270513][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.306441][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.313635][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.320932][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.328298][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.349745][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.356866][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.364246][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.371948][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.386289][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.393466][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.400844][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.407947][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.439604][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.446726][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.454159][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.461302][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.474166][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.481697][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.489339][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.497048][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.504424][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.511903][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.519264][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.526665][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.533922][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.541431][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.549214][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.556781][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.575885][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.583775][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.592374][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.599404][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.606850][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.615637][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.622733][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.641096][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.649174][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.657231][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.665573][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.672992][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.680389][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.688700][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.695840][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.703261][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.711933][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.718976][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.727105][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.735598][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.742693][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.772507][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.780835][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.788870][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.798142][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.807088][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.815258][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.823568][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.831922][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.839909][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.848296][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.856411][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.864739][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.873333][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.881095][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.907273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.915562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.924489][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.933159][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.941661][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.949815][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.957214][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.964629][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.973413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.981863][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.988898][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.996429][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.004852][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.013366][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.021441][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.029444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.038159][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.047837][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.056180][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.066149][ T284] device veth0_vlan entered promiscuous mode [ 26.078456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.087160][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.096414][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.103629][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.111387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.119544][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.128191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.135900][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.146281][ T282] device veth0_vlan entered promiscuous mode [ 26.158081][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.166910][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.176156][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.183272][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.191061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.199822][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.215755][ T284] device veth1_macvtap entered promiscuous mode [ 26.227012][ T282] device veth1_macvtap entered promiscuous mode [ 26.234727][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.243024][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.252863][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.261646][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.269491][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.277846][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.286112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.294415][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.302248][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.309974][ T279] device veth0_vlan entered promiscuous mode [ 26.318462][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.330432][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.338790][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.351600][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.359646][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.368067][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.377951][ T280] device veth0_vlan entered promiscuous mode [ 26.387063][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.395507][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.403780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.412533][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.424676][ T279] device veth1_macvtap entered promiscuous mode [ 26.439049][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.447199][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.455175][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.463790][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.472694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.480474][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.489062][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.518640][ T280] device veth1_macvtap entered promiscuous mode [ 26.520937][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 26.534895][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.544018][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.553032][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.561708][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.570164][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.578924][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.588090][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.603583][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.618041][ T285] device veth0_vlan entered promiscuous mode [ 26.625108][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.634162][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.642432][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.649966][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.660543][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.670006][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.679133][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.794810][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.807049][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.840142][ T285] device veth1_macvtap entered promiscuous mode [ 26.858771][ T310] EXT4-fs (loop2): dax option not supported [ 27.054089][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.095628][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.104707][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.126049][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.292366][ T310] ====================================================== [ 27.292366][ T310] WARNING: the mand mount option is being deprecated and [ 27.292366][ T310] will be removed in v5.15! [ 27.292366][ T310] ====================================================== [ 27.322755][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.506339][ T326] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.565402][ T330] tipc: Started in network mode [ 27.570481][ T330] tipc: Own node identity 561eaa274468, cluster identity 4711 [ 27.578990][ T330] tipc: Enabled bearer , priority 0 [ 27.599952][ T330] device syzkaller0 entered promiscuous mode [ 27.796246][ T330] tipc: Resetting bearer [ 27.851721][ T329] tipc: Resetting bearer [ 27.987935][ T329] tipc: Disabling bearer [ 28.483045][ T343] raw_sendmsg: syz.0.13 forgot to set AF_INET. Fix it! [ 28.542334][ T345] Zero length message leads to an empty skb [ 28.623191][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 28.623203][ T24] audit: type=1400 audit(1778424160.020:124): avc: denied { create } for pid=348 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.660879][ T24] audit: type=1400 audit(1778424160.040:125): avc: denied { write } for pid=348 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.776780][ T360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 28.871733][ T357] kvm [356]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 28.902708][ T357] kvm [356]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 28.926904][ T357] APIC base relocation is unsupported by KVM [ 29.109741][ T379] device bridge_slave_0 left promiscuous mode [ 29.140906][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.258073][ T24] audit: type=1400 audit(1778424160.650:126): avc: denied { create } for pid=392 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.280165][ T388] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 29.290904][ T388] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 29.330745][ T24] audit: type=1400 audit(1778424160.690:127): avc: denied { mount } for pid=387 comm="syz.4.29" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.477348][ T400] device bond_slave_0 entered promiscuous mode [ 29.513515][ T24] audit: type=1400 audit(1778424160.910:128): avc: denied { read } for pid=404 comm="syz.1.33" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 29.560927][ T407] process 'syz.4.29' launched './file1' with NULL argv: empty string added [ 29.573067][ T391] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.618672][ T391] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.673364][ T24] audit: type=1400 audit(1778424160.930:129): avc: denied { open } for pid=404 comm="syz.1.33" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 29.697281][ T391] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0 [ 29.707465][ T24] audit: type=1400 audit(1778424160.930:130): avc: denied { ioctl } for pid=404 comm="syz.1.33" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 29.733061][ T391] CPU: 0 PID: 391 Comm: syz.3.28 Not tainted syzkaller #0 [ 29.740213][ T391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 29.750426][ T391] Call Trace: [ 29.753778][ T391] __dump_stack+0x21/0x24 [ 29.758141][ T391] dump_stack_lvl+0x1a7/0x208 [ 29.762862][ T391] ? f2fs_get_next_page_offset+0x760/0x760 [ 29.768759][ T391] ? show_regs_print_info+0x18/0x18 [ 29.773990][ T391] dump_stack+0x15/0x1c [ 29.778185][ T391] f2fs_is_valid_blkaddr+0xc49/0x1360 [ 29.783584][ T391] f2fs_get_read_data_page+0x3e7/0x7a0 [ 29.789066][ T391] ? f2fs_get_block+0x140/0x140 [ 29.793944][ T391] ? memset+0x35/0x40 [ 29.797953][ T391] f2fs_find_data_page+0x18f/0x3f0 [ 29.803083][ T391] ? f2fs_readdir+0x382/0x970 [ 29.807775][ T391] f2fs_readdir+0x457/0x970 [ 29.812328][ T391] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 29.817558][ T391] ? fsnotify_perm+0x31b/0x4b0 [ 29.822373][ T391] ? __kasan_check_write+0x14/0x20 [ 29.827607][ T391] iterate_dir+0x260/0x570 [ 29.832140][ T391] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 29.837378][ T391] __se_sys_getdents64+0xf2/0x250 [ 29.842433][ T391] ? __x64_sys_getdents64+0x90/0x90 [ 29.847664][ T391] ? switch_fpu_return+0x19c/0x330 [ 29.852820][ T391] ? filldir+0x690/0x690 [ 29.857094][ T391] ? fpu__clear_all+0x20/0x20 [ 29.861808][ T391] ? ____fput+0x15/0x20 [ 29.865991][ T391] ? __kasan_check_read+0x11/0x20 [ 29.871245][ T391] __x64_sys_getdents64+0x7b/0x90 [ 29.876295][ T391] do_syscall_64+0x31/0x40 [ 29.880732][ T391] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.886953][ T391] RIP: 0033:0x7f9d3b06add9 [ 29.891393][ T391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.904268][ T24] audit: type=1400 audit(1778424160.950:131): avc: denied { write } for pid=387 comm="syz.4.29" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.911143][ T391] RSP: 002b:00007f9d39ac5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 29.911160][ T391] RAX: ffffffffffffffda RBX: 00007f9d3b2e3fa0 RCX: 00007f9d3b06add9 [ 29.911166][ T391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 29.911175][ T391] RBP: 00007f9d3b100d69 R08: 0000000000000000 R09: 0000000000000000 [ 29.911192][ T391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.933170][ T24] audit: type=1400 audit(1778424160.950:132): avc: denied { add_name } for pid=387 comm="syz.4.29" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.941073][ T391] R13: 00007f9d3b2e4038 R14: 00007f9d3b2e3fa0 R15: 00007ffe8c0e5538 [ 30.128350][ T416] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 30.169452][ T416] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 30.245994][ T24] audit: type=1400 audit(1778424160.950:133): avc: denied { create } for pid=387 comm="syz.4.29" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.764656][ T433] device syzkaller0 entered promiscuous mode [ 31.002648][ T442] binder: BINDER_SET_CONTEXT_MGR already set [ 31.010027][ T442] binder: 440:442 ioctl 4018620d 200000000500 returned -16 [ 31.150917][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.520998][ T20] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 31.529714][ T20] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 31.539041][ T20] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 31.550239][ T20] usb 2-1: config 220 has no interface number 2 [ 31.556778][ T20] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 31.570817][ T20] usb 2-1: config 220 interface 0 has no altsetting 0 [ 31.577709][ T20] usb 2-1: config 220 interface 76 has no altsetting 0 [ 31.585024][ T20] usb 2-1: config 220 interface 1 has no altsetting 0 [ 31.760842][ T20] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 31.779786][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.805794][ T20] usb 2-1: Product: syz [ 31.815461][ T20] usb 2-1: Manufacturer: syz [ 31.824486][ T20] usb 2-1: SerialNumber: syz [ 32.191514][ T20] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 32.198159][ T20] uvcvideo: No valid video chain found. [ 32.212213][ T20] usb 2-1: selecting invalid altsetting 0 [ 32.226174][ T460] FAT-fs (loop0): Directory bread(block 64) failed [ 32.232979][ T302] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.241158][ T460] FAT-fs (loop0): Directory bread(block 65) failed [ 32.247815][ T460] FAT-fs (loop0): Directory bread(block 66) failed [ 32.254622][ T460] FAT-fs (loop0): Directory bread(block 67) failed [ 32.261709][ T460] FAT-fs (loop0): Directory bread(block 68) failed [ 32.268344][ T460] FAT-fs (loop0): Directory bread(block 69) failed [ 32.275287][ T460] FAT-fs (loop0): Directory bread(block 70) failed [ 32.282343][ T460] FAT-fs (loop0): Directory bread(block 71) failed [ 32.289282][ T460] FAT-fs (loop0): Directory bread(block 72) failed [ 32.296124][ T460] FAT-fs (loop0): Directory bread(block 73) failed [ 32.314668][ T20] usb 2-1: USB disconnect, device number 2 [ 32.326006][ T463] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 32.345010][ T463] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.731178][ T301] kernel write not supported for file /cpu/0/msr (pid: 301 comm: kworker/1:3) [ 33.610457][ T493] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.61: bad orphan inode 13 [ 33.621170][ T493] ext4_test_bit(bit=12, block=4) = 1 [ 33.626594][ T493] is_bad_inode(inode)=0 [ 33.631569][ T493] NEXT_ORPHAN(inode)=0 [ 33.635741][ T493] max_ino=32 [ 33.639094][ T493] i_nlink=1 [ 33.642660][ T493] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,stripe=0x0000000000000007,,errors=continue [ 33.671442][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 33.671455][ T24] audit: type=1400 audit(1778424165.070:158): avc: denied { create } for pid=492 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.707245][ T24] audit: type=1400 audit(1778424165.100:159): avc: denied { bind } for pid=492 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.727006][ T24] audit: type=1400 audit(1778424165.100:160): avc: denied { name_bind } for pid=492 comm="syz.1.61" src=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 33.747598][ T24] audit: type=1400 audit(1778424165.100:161): avc: denied { node_bind } for pid=492 comm="syz.1.61" src=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 33.747793][ T301] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.841791][ T302] usb 3-1: Using ep0 maxpacket: 32 [ 33.855844][ T24] audit: type=1400 audit(1778424165.240:162): avc: denied { mounton } for pid=496 comm="syz.1.62" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 33.955536][ T24] audit: type=1400 audit(1778424165.350:163): avc: denied { write } for pid=502 comm="syz.1.65" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 33.992431][ T302] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 34.002926][ T24] audit: type=1400 audit(1778424165.370:164): avc: denied { open } for pid=502 comm="syz.1.65" path="/21/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 34.124982][ T509] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 34.132349][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.150481][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.154103][ T509] EXT4-fs (loop3): Test dummy encryption mode enabled [ 34.161827][ T53] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 34.176029][ T301] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 34.182767][ T509] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 34.185880][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.219116][ T301] usb 1-1: config 0 descriptor?? [ 34.268087][ T24] audit: type=1400 audit(1778424165.660:165): avc: denied { read } for pid=510 comm="syz.1.67" dev="nsfs" ino=4026532371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.289362][ T24] audit: type=1400 audit(1778424165.660:166): avc: denied { open } for pid=510 comm="syz.1.67" path="net:[4026532371]" dev="nsfs" ino=4026532371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.315482][ T24] audit: type=1400 audit(1778424165.660:167): avc: denied { getopt } for pid=510 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.375435][ T302] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 34.384583][ T302] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 34.392793][ T302] usb 3-1: Product: syz [ 34.397015][ T302] usb 3-1: Manufacturer: syz [ 34.401645][ T302] usb 3-1: SerialNumber: syz [ 34.407327][ T302] usb 3-1: config 0 descriptor?? [ 34.430856][ T455] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 34.458614][ T302] hub 3-1:0.0: bad descriptor, ignoring hub [ 34.465542][ T302] hub: probe of 3-1:0.0 failed with error -5 [ 34.560807][ T53] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 34.569079][ T53] usb 5-1: config 0 has no interface number 0 [ 34.575303][ T53] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.586355][ T53] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.596165][ T53] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 34.605334][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.613968][ T53] usb 5-1: config 0 descriptor?? [ 34.692506][ T301] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 34.704870][ T301] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 34.760823][ T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.778464][ T317] usb 3-1: USB disconnect, device number 2 [ 34.784433][ T301] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 34.893683][ T448] usb 1-1: USB disconnect, device number 2 [ 34.901412][ T448] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 35.103039][ T526] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 35.120889][ T521] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.120932][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.168422][ T20] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 35.180945][ T53] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0003/input/input4 [ 35.270930][ T53] holtek_kbd 0003:04D9:A055.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 35.327095][ T53] usb 5-1: USB disconnect, device number 2 [ 35.350958][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.365342][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.373715][ T521] usb 3-1: Using ep0 maxpacket: 32 [ 35.379588][ T20] usb 4-1: Product: syz [ 35.384479][ T20] usb 4-1: Manufacturer: syz [ 35.384995][ T527] fido_id[527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 35.403773][ T20] usb 4-1: SerialNumber: syz [ 35.472785][ T20] cdc_mbim 4-1:1.0: skipping garbage [ 35.490963][ T521] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 35.998488][ T520] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 36.026793][ T532] input: syz1 as /devices/virtual/input/input5 [ 36.330803][ T521] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 36.355674][ T521] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 36.415164][ T521] usb 3-1: config 0 descriptor?? [ 36.450817][ T521] usb 3-1: can't set config #0, error -71 [ 36.472717][ T521] usb 3-1: USB disconnect, device number 3 [ 36.771160][ T520] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 36.790878][ T20] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 36.808500][ T20] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 37.000823][ T20] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 37.010861][ T20] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 37.048994][ T20] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, f2:d5:3d:f9:eb:c2 [ 37.203068][ T20] usb 4-1: USB disconnect, device number 2 [ 37.211609][ T20] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 39.477015][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 39.477028][ T24] audit: type=1400 audit(1778424170.870:194): avc: denied { create } for pid=630 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.513682][ T24] audit: type=1400 audit(1778424170.870:195): avc: denied { shutdown } for pid=630 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.766694][ T637] EXT4-fs (loop3): Test dummy encryption mode enabled [ 39.782497][ T637] EXT4-fs (loop3): Ignoring removed orlov option [ 39.789231][ T637] EXT4-fs (loop3): Test dummy encryption mode enabled [ 39.894419][ T637] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,orlov,minixdf,jqfmt=vfsv1,prjquota,noauto_da_alloc,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,journal_ioprio=0x0000000000000001,resuid=0x0000000000000000,user_xattr [ 39.923724][ T24] audit: type=1400 audit(1778424171.320:196): avc: denied { mount } for pid=636 comm="syz.3.94" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.963270][ T637] EXT4-fs (loop3): Test dummy encryption mode enabled [ 39.970290][ T24] audit: type=1400 audit(1778424171.360:197): avc: denied { remount } for pid=636 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.002690][ T647] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 40.011883][ T647] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.032466][ T24] audit: type=1400 audit(1778424171.430:198): avc: denied { create } for pid=643 comm="syz.4.86" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.051633][ T637] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.066471][ T637] EXT4-fs (loop3): re-mounted. Opts: commit=0x0000000000000002,errors=continue,usrquota,dioread_nolock,usrquota,resuid=0x000000000000ee00,usrjquota=usrjquota=,nodiscard,test_dummy_encryption, [ 40.383119][ T24] audit: type=1400 audit(1778424171.700:199): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.499830][ T24] audit: type=1400 audit(1778424171.890:200): avc: denied { append } for pid=650 comm="syz.2.97" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.713189][ T24] audit: type=1400 audit(1778424171.960:201): avc: denied { read } for pid=650 comm="syz.2.97" name="usbmon7" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.859726][ T24] audit: type=1400 audit(1778424171.960:202): avc: denied { open } for pid=650 comm="syz.2.97" path="/dev/usbmon7" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.044877][ T674] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 41.127468][ T24] audit: type=1400 audit(1778424172.490:203): avc: denied { write } for pid=662 comm="syz.0.103" name="file2" dev="loop0" ino=1048598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.290783][ T53] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 41.368998][ T685] kvm [684]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 41.378277][ T685] kvm [684]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 41.523029][ T685] kvm [684]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x5900 [ 41.540899][ T685] kvm [684]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 41.620807][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 41.741065][ T53] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 41.773135][ T53] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 41.821821][ T53] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 41.869379][ T53] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.931191][ T53] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 41.970663][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.395772][ T705] EXT4-fs (loop2): Ignoring removed orlov option [ 42.402735][ T705] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 42.420973][ T705] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 42.429823][ T705] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 42.429823][ T705] [ 42.440742][ T705] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 42.449929][ T705] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,auto_da_alloc=0x00000000000001ff,errors=remount-ro,user_xattr, [ 42.503392][ T708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 42.870255][ T722] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000857,,errors=continue [ 43.760816][ T737] FAT-fs (loop3): Directory bread(block 64) failed [ 43.780024][ T737] FAT-fs (loop3): Directory bread(block 65) failed [ 43.787097][ T737] FAT-fs (loop3): Directory bread(block 66) failed [ 43.794222][ T737] FAT-fs (loop3): Directory bread(block 67) failed [ 43.813888][ T737] FAT-fs (loop3): Directory bread(block 68) failed [ 43.821250][ T737] FAT-fs (loop3): Directory bread(block 69) failed [ 43.851528][ T737] FAT-fs (loop3): Directory bread(block 70) failed [ 43.858406][ T737] FAT-fs (loop3): Directory bread(block 71) failed [ 43.867254][ T737] FAT-fs (loop3): Directory bread(block 72) failed [ 43.874103][ T737] FAT-fs (loop3): Directory bread(block 73) failed [ 44.057129][ T531] usb 5-1: USB disconnect, device number 3 [ 44.233251][ T757] erofs: (device loop3): mounted with root inode @ nid 36. [ 44.743764][ T774] EXT4-fs (loop1): Ignoring removed bh option [ 44.776228][ T774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b802c02d, mo2=0002] [ 44.804590][ T774] System zones: 1-12 [ 44.824409][ T774] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.136: error while reading EA inode 32 err=-116 [ 44.878330][ T774] EXT4-fs (loop1): Remounting filesystem read-only [ 44.905834][ T774] EXT4-fs (loop1): 1 orphan inode deleted [ 44.930776][ T774] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x0000000000000004,data_err=abort,bsdgroups,bh,abort,nombcache, [ 45.477111][ T24] kauditd_printk_skb: 22 callbacks suppressed [ 45.477123][ T24] audit: type=1400 audit(1778424176.870:226): avc: denied { perfmon } for pid=771 comm="syz.0.137" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.510738][ T531] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 45.688450][ T24] audit: type=1400 audit(1778424176.950:227): avc: denied { create } for pid=783 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.817922][ T24] audit: type=1400 audit(1778424176.950:228): avc: denied { bind } for pid=783 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.838056][ T24] audit: type=1400 audit(1778424176.950:229): avc: denied { setopt } for pid=783 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.910623][ T24] audit: type=1400 audit(1778424177.010:230): avc: denied { prog_run } for pid=771 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 46.293892][ T531] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 46.303187][ T531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.321142][ T531] usb 4-1: Product: syz [ 46.325461][ T531] usb 4-1: Manufacturer: syz [ 46.330266][ T531] usb 4-1: SerialNumber: syz [ 46.610784][ T281] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 47.263073][ T24] audit: type=1400 audit(1778424178.660:231): avc: denied { create } for pid=809 comm="syz.0.149" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.517772][ T825] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000008,nodioread_nolock,,errors=continue [ 47.541517][ T24] audit: type=1400 audit(1778424178.690:232): avc: denied { write } for pid=809 comm="syz.0.149" name="file0" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.554677][ T281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.690681][ T281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.711976][ T281] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.726593][ T825] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.776626][ T281] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.794030][ T281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.808267][ T24] audit: type=1400 audit(1778424178.700:233): avc: denied { open } for pid=809 comm="syz.0.149" path="/27/file0" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.861763][ T281] usb 2-1: config 0 descriptor?? [ 47.868012][ T24] audit: type=1400 audit(1778424179.260:234): avc: denied { write } for pid=823 comm="syz.4.155" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.890831][ T825] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: block 3: comm syz.4.155: lblock 3 mapped to illegal pblock 3 (length 3) [ 47.921282][ T825] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 47.938092][ T24] audit: type=1400 audit(1778424179.310:235): avc: denied { append } for pid=823 comm="syz.4.155" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.969059][ T825] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.969059][ T825] [ 47.990182][ T837] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.155: bg 0: block 112: padding at end of block bitmap is not set [ 48.018702][ T837] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 28 [ 48.031314][ T837] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.031314][ T837] [ 48.041282][ T837] EXT4-fs (loop4): Total free blocks count 0 [ 48.047390][ T837] EXT4-fs (loop4): Free/Dirty block details [ 48.053627][ T837] EXT4-fs (loop4): free_blocks=0 [ 48.058715][ T837] EXT4-fs (loop4): dirty_blocks=64 [ 48.064067][ T837] EXT4-fs (loop4): Block reservation details [ 48.070534][ T837] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 48.084894][ T300] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 48.276116][ T531] usb 4-1: USB disconnect, device number 3 [ 48.397183][ T843] FAT-fs (loop0): Directory bread(block 64) failed [ 48.404756][ T843] FAT-fs (loop0): Directory bread(block 65) failed [ 48.412180][ T843] FAT-fs (loop0): Directory bread(block 66) failed [ 48.419125][ T843] FAT-fs (loop0): Directory bread(block 67) failed [ 48.426024][ T843] FAT-fs (loop0): Directory bread(block 68) failed [ 48.432682][ T843] FAT-fs (loop0): Directory bread(block 69) failed [ 48.439436][ T843] FAT-fs (loop0): Directory bread(block 70) failed [ 48.446144][ T843] FAT-fs (loop0): Directory bread(block 71) failed [ 48.452917][ T843] FAT-fs (loop0): Directory bread(block 72) failed [ 48.459640][ T843] FAT-fs (loop0): Directory bread(block 73) failed [ 48.473811][ T281] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 48.487827][ T843] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000616b) [ 48.495783][ T843] FAT-fs (loop0): Filesystem has been set read-only [ 48.510746][ T281] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 48.518482][ T281] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 48.539058][ T281] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 48.547140][ T281] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 48.554671][ T281] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 48.569250][ T281] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 48.576884][ T281] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 48.584784][ T281] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 48.592447][ T281] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 48.602165][ T281] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 48.694618][ T860] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 48.762649][ T281] usb 2-1: USB disconnect, device number 3 [ 48.771018][ T807] usb 2-1: string descriptor 0 read error: -19 [ 48.790788][ T521] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 48.843734][ T866] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001, [ 48.858224][ T866] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.873193][ T866] EXT4-fs (loop4): Remounting filesystem read-only [ 49.360882][ T521] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 49.444924][ T521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.453234][ T521] usb 3-1: Product: syz [ 49.457468][ T521] usb 3-1: Manufacturer: syz [ 49.462346][ T521] usb 3-1: SerialNumber: syz [ 49.488211][ T521] usb 3-1: config 0 descriptor?? [ 50.424123][ T5] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 50.579090][ T907] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 50.590621][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 50.590634][ T24] audit: type=1400 audit(1778424181.990:241): avc: denied { ioctl } for pid=906 comm="syz.0.180" path="/31/file0/file1" dev="loop0" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.004096][ T610] usb 3-1: USB disconnect, device number 4 [ 51.110851][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.122246][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.132421][ T5] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 51.141705][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.150427][ T5] usb 5-1: config 0 descriptor?? [ 51.170832][ T905] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 51.586635][ T24] audit: type=1326 audit(1778424182.820:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=936 comm="syz.3.188" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3b06add9 code=0x7ffc0000 [ 51.613193][ T24] audit: type=1326 audit(1778424182.820:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=936 comm="syz.3.188" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3b06add9 code=0x7ffc0000 [ 51.647865][ T24] audit: type=1326 audit(1778424182.820:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=936 comm="syz.3.188" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3b06add9 code=0x7ffc0000 [ 51.673095][ T24] audit: type=1326 audit(1778424182.820:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=936 comm="syz.3.188" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3b06add9 code=0x7ffc0000 [ 51.698219][ T24] audit: type=1326 audit(1778424182.820:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=936 comm="syz.3.188" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f9d3b06add9 code=0x7ffc0000 [ 51.723472][ T24] audit: type=1326 audit(1778424182.820:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=936 comm="syz.3.188" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3b06add9 code=0x7ffc0000 [ 51.748672][ T24] audit: type=1326 audit(1778424182.820:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=936 comm="syz.3.188" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3b06add9 code=0x7ffc0000 [ 51.774071][ T24] audit: type=1326 audit(1778424182.820:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=936 comm="syz.3.188" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d3b02b60e code=0x7ffc0000 [ 51.799036][ T24] audit: type=1326 audit(1778424182.830:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=936 comm="syz.3.188" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d3b02b60e code=0x7ffc0000 [ 51.840816][ T905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.851998][ T905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.862306][ T905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.875789][ T905] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.885447][ T905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.894515][ T5] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 51.902428][ T5] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 51.915734][ T905] usb 1-1: config 0 descriptor?? [ 51.917690][ T5] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 51.928778][ T5] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 51.950774][ T610] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 52.010764][ T5] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 52.101764][ T901] udc-core: couldn't find an available UDC or it's busy [ 52.108932][ T901] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 52.117718][ T20] usb 5-1: USB disconnect, device number 4 [ 52.125137][ T20] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 52.230764][ T610] usb 3-1: Using ep0 maxpacket: 32 [ 52.292041][ T930] kvm [929]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 52.301463][ T930] kvm [929]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 52.371120][ T610] usb 3-1: unable to get BOS descriptor or descriptor too short [ 52.401659][ T905] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 52.409184][ T905] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 52.416737][ T905] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 52.424359][ T905] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 52.431963][ T905] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 52.440068][ T905] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 52.441059][ T610] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 52.456208][ T905] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 52.457698][ T610] usb 3-1: can't read configurations, error -71 [ 52.638180][ T958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 52.652889][ T958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 52.678540][ T960] ================================================================== [ 52.686772][ T960] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x32b0 [ 52.695013][ T960] Read of size 8 at addr ffff88810f9d70c0 by task syz.4.195/960 [ 52.702664][ T960] [ 52.705134][ T960] CPU: 0 PID: 960 Comm: syz.4.195 Not tainted syzkaller #0 [ 52.712340][ T960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 52.722880][ T960] Call Trace: [ 52.726210][ T960] __dump_stack+0x21/0x24 [ 52.730846][ T960] dump_stack_lvl+0x1a7/0x208 [ 52.736065][ T960] ? show_regs_print_info+0x18/0x18 [ 52.741669][ T960] ? thaw_kernel_threads+0x220/0x220 [ 52.746972][ T960] print_address_description+0x7f/0x2c0 [ 52.752553][ T960] ? tc_setup_flow_action+0x842/0x32b0 [ 52.758026][ T960] kasan_report+0xe2/0x130 [ 52.762448][ T960] ? flow_action_cookie_create+0x28/0x90 [ 52.768097][ T960] ? tc_setup_flow_action+0x842/0x32b0 [ 52.773767][ T960] __asan_report_load8_noabort+0x14/0x20 [ 52.779421][ T960] tc_setup_flow_action+0x842/0x32b0 [ 52.784717][ T960] ? __kmalloc+0x1a4/0x330 [ 52.789194][ T960] ? flow_rule_alloc+0x32/0x2c0 [ 52.794055][ T960] mall_replace_hw_filter+0x2cc/0x8a0 [ 52.799830][ T960] ? pcpu_block_update_hint_alloc+0x8bf/0xc50 [ 52.805934][ T960] ? mall_set_parms+0x410/0x410 [ 52.810885][ T960] ? tcf_exts_destroy+0xb0/0xb0 [ 52.815744][ T960] ? pcpu_alloc+0xf9b/0x16b0 [ 52.820375][ T960] ? mall_set_parms+0x19d/0x410 [ 52.825524][ T960] mall_change+0x546/0x760 [ 52.829941][ T960] ? __kasan_check_write+0x14/0x20 [ 52.835083][ T960] ? mall_get+0xa0/0xa0 [ 52.839261][ T960] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 52.845240][ T960] ? nla_strcmp+0xf4/0x140 [ 52.849668][ T960] tc_new_tfilter+0x1452/0x1a90 [ 52.854550][ T960] ? mall_get+0xa0/0xa0 [ 52.858736][ T960] ? tcf_gate_entry_destructor+0x20/0x20 [ 52.864408][ T960] ? security_capable+0x87/0xb0 [ 52.869293][ T960] ? ns_capable+0x8c/0xf0 [ 52.873789][ T960] ? netlink_net_capable+0x125/0x160 [ 52.879472][ T960] ? tcf_gate_entry_destructor+0x20/0x20 [ 52.885353][ T960] rtnetlink_rcv_msg+0x845/0xcc0 [ 52.890379][ T960] ? rtnetlink_bind+0x80/0x80 [ 52.895203][ T960] ? arch_stack_walk+0xee/0x140 [ 52.900095][ T960] ? stack_trace_save+0xa6/0xf0 [ 52.905012][ T960] ? stack_trace_snprint+0xf0/0xf0 [ 52.910358][ T960] ? do_syscall_64+0x31/0x40 [ 52.915067][ T960] ? avc_has_perm+0x168/0x3d0 [ 52.919778][ T960] ? memcpy+0x56/0x70 [ 52.923805][ T960] ? avc_has_perm+0x27f/0x3d0 [ 52.928523][ T960] ? __kasan_slab_alloc+0xbd/0xf0 [ 52.933684][ T960] ? slab_post_alloc_hook+0x5d/0x2f0 [ 52.939341][ T960] ? avc_has_perm_noaudit+0x260/0x260 [ 52.944832][ T960] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 52.950291][ T960] netlink_rcv_skb+0x1f5/0x440 [ 52.955194][ T960] ? rtnetlink_bind+0x80/0x80 [ 52.959938][ T960] ? netlink_ack+0xb70/0xb70 [ 52.964677][ T960] ? __netlink_lookup+0x387/0x3b0 [ 52.969818][ T960] rtnetlink_rcv+0x1c/0x20 [ 52.974256][ T960] netlink_unicast+0x876/0xa40 [ 52.979934][ T960] netlink_sendmsg+0x89c/0xb50 [ 52.984948][ T960] ? __kasan_check_read+0x11/0x20 [ 52.989983][ T960] ? netlink_getsockopt+0x530/0x530 [ 52.995189][ T960] ? security_socket_sendmsg+0x82/0xa0 [ 53.000656][ T960] ? netlink_getsockopt+0x530/0x530 [ 53.005890][ T960] ____sys_sendmsg+0x5b7/0x8f0 [ 53.010860][ T960] ? __sys_sendmsg_sock+0x40/0x40 [ 53.015892][ T960] ? import_iovec+0x7c/0xb0 [ 53.020428][ T960] ___sys_sendmsg+0x236/0x2e0 [ 53.025222][ T960] ? __sys_sendmsg+0x280/0x280 [ 53.030029][ T960] ? alloc_file+0x82/0x540 [ 53.034657][ T960] ? __fdget+0x1a1/0x230 [ 53.038914][ T960] __x64_sys_sendmsg+0x1f9/0x2c0 [ 53.043875][ T960] ? __kasan_check_write+0x14/0x20 [ 53.049161][ T960] ? ___sys_sendmsg+0x2e0/0x2e0 [ 53.054078][ T960] ? __kasan_check_read+0x11/0x20 [ 53.059125][ T960] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 53.064792][ T960] do_syscall_64+0x31/0x40 [ 53.069223][ T960] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.075117][ T960] RIP: 0033:0x7f740cbd9dd9 [ 53.079659][ T960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.099280][ T960] RSP: 002b:00007f740b634028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.107706][ T960] RAX: ffffffffffffffda RBX: 00007f740ce52fa0 RCX: 00007f740cbd9dd9 [ 53.115810][ T960] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 53.123878][ T960] RBP: 00007f740cc6fd69 R08: 0000000000000000 R09: 0000000000000000 [ 53.131880][ T960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.140037][ T960] R13: 00007f740ce53038 R14: 00007f740ce52fa0 R15: 00007ffe2f9dc378 [ 53.148025][ T960] [ 53.150361][ T960] Allocated by task 960: [ 53.154608][ T960] __kasan_kmalloc+0xda/0x110 [ 53.159435][ T960] __kmalloc+0x1a4/0x330 [ 53.163713][ T960] tcf_idr_create+0x5f/0x790 [ 53.168457][ T960] tcf_idr_create_from_flags+0x61/0x70 [ 53.173947][ T960] tcf_gact_init+0x2e6/0x560 [ 53.178536][ T960] tcf_action_init_1+0x443/0x6e0 [ 53.183473][ T960] tcf_action_init+0x227/0x780 [ 53.188323][ T960] tcf_exts_validate+0x248/0x570 [ 53.193258][ T960] mall_set_parms+0x4b/0x410 [ 53.197867][ T960] mall_change+0x47a/0x760 [ 53.202281][ T960] tc_new_tfilter+0x1452/0x1a90 [ 53.207286][ T960] rtnetlink_rcv_msg+0x845/0xcc0 [ 53.212239][ T960] netlink_rcv_skb+0x1f5/0x440 [ 53.217002][ T960] rtnetlink_rcv+0x1c/0x20 [ 53.221439][ T960] netlink_unicast+0x876/0xa40 [ 53.226255][ T960] netlink_sendmsg+0x89c/0xb50 [ 53.231023][ T960] ____sys_sendmsg+0x5b7/0x8f0 [ 53.235814][ T960] ___sys_sendmsg+0x236/0x2e0 [ 53.240588][ T960] __x64_sys_sendmsg+0x1f9/0x2c0 [ 53.245560][ T960] do_syscall_64+0x31/0x40 [ 53.250174][ T960] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.256155][ T960] [ 53.258522][ T960] The buggy address belongs to the object at ffff88810f9d7000 [ 53.258522][ T960] which belongs to the cache kmalloc-192 of size 192 [ 53.272599][ T960] The buggy address is located 0 bytes to the right of [ 53.272599][ T960] 192-byte region [ffff88810f9d7000, ffff88810f9d70c0) [ 53.286311][ T960] The buggy address belongs to the page: [ 53.291980][ T960] page:ffffea00043e75c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f9d7 [ 53.302301][ T960] flags: 0x4000000000000200(slab) [ 53.307367][ T960] raw: 4000000000000200 ffffea00043510c0 0000000600000006 ffff888100043380 [ 53.315952][ T960] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 53.324550][ T960] page dumped because: kasan: bad access detected [ 53.331247][ T960] page_owner tracks the page as allocated [ 53.336978][ T960] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 96, ts 5638871146, free_ts 5638849511 [ 53.352700][ T960] prep_new_page+0x179/0x180 [ 53.357382][ T960] get_page_from_freelist+0x223b/0x23d0 [ 53.362932][ T960] __alloc_pages_nodemask+0x290/0x620 [ 53.368304][ T960] new_slab+0x84/0x3f0 [ 53.372391][ T960] ___slab_alloc+0x2a6/0x450 [ 53.377014][ T960] __slab_alloc+0x63/0xa0 [ 53.381348][ T960] kmem_cache_alloc_trace+0x1b0/0x2e0 [ 53.386718][ T960] kernfs_fop_open+0x343/0xb30 [ 53.391602][ T960] do_dentry_open+0x793/0x1090 [ 53.396359][ T960] vfs_open+0x73/0x80 [ 53.400339][ T960] path_openat+0x280f/0x31c0 [ 53.405116][ T960] do_filp_open+0x1e2/0x410 [ 53.409632][ T960] do_sys_openat2+0x19f/0x750 [ 53.414318][ T960] __x64_sys_openat+0x136/0x160 [ 53.419163][ T960] do_syscall_64+0x31/0x40 [ 53.423573][ T960] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.429456][ T960] page last free stack trace: [ 53.434150][ T960] free_unref_page_prepare+0x2b7/0x2d0 [ 53.439622][ T960] __free_pages+0x146/0x3b0 [ 53.444120][ T960] free_pages+0x82/0x90 [ 53.448284][ T960] selinux_genfs_get_sid+0x20b/0x250 [ 53.453592][ T960] inode_doinit_with_dentry+0x879/0xd70 [ 53.459140][ T960] selinux_d_instantiate+0x27/0x40 [ 53.464284][ T960] security_d_instantiate+0x9e/0xf0 [ 53.469603][ T960] d_splice_alias+0x6d/0x390 [ 53.474364][ T960] kernfs_iop_lookup+0x2c5/0x310 [ 53.479323][ T960] path_openat+0x1140/0x31c0 [ 53.484030][ T960] do_filp_open+0x1e2/0x410 [ 53.488535][ T960] do_sys_openat2+0x19f/0x750 [ 53.493209][ T960] __x64_sys_openat+0x136/0x160 [ 53.498070][ T960] do_syscall_64+0x31/0x40 [ 53.502484][ T960] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.508597][ T960] [ 53.511025][ T960] Memory state around the buggy address: [ 53.516838][ T960] ffff88810f9d6f80: fb fb fc fc fb fb fc fc fb fb fc fc fb fb fc fc [ 53.525130][ T960] ffff88810f9d7000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.533305][ T960] >ffff88810f9d7080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 53.541809][ T960] ^ [ 53.547959][ T960] ffff88810f9d7100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.556017][ T960] ffff88810f9d7180: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 53.564096][ T960] ================================================================== [ 53.572163][ T960] Disabling lock debugging due to kernel taint [ 53.730810][ T924] usb 1-1: string descriptor 0 read error: -71 [ 54.531140][ T302] usb 1-1: USB disconnect, device number 3