last executing test programs: 13.248261614s ago: executing program 3 (id=192): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020400) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x1, 0x0, 0xb0}) 12.368021931s ago: executing program 3 (id=203): syz_btf_id_by_name$bpf_lsm(0x0) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_path_mkdir\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 12.245705644s ago: executing program 3 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x3d, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0x1, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000380)=@arm64={0x7, 0xb, 0x4, '\x00', 0x1}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x3c, 0x8, 0x0, 0x1, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x25000, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x80}, {0x58000, 0x5000, 0xc, 0xff, 0x16, 0x4, 0x0, 0xfc, 0x3, 0x81, 0x0, 0xfc}, {0x30000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x9, 0x3, 0x6}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc8}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3, 0x0, 0xff, 0x0, 0x80}, {0x6000, 0xb000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000, 0xfffe}, {0x1}, 0xddf8ffdb, 0x0, 0xeeee0000, 0x50, 0x0, 0xf801, 0x54000, [0x0, 0x4, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.140070755s ago: executing program 3 (id=207): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@fat=@discard}, {@rodir}, {@utf8}, {@shortname_lower}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@numtail}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") syz_open_procfs(0x0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) 12.019964298s ago: executing program 3 (id=212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f0000000280)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b600", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d9cf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004316ce4f9289f8f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ff00"}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f3804589e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.672413365s ago: executing program 3 (id=216): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) 11.659844845s ago: executing program 32 (id=216): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) 1.400081783s ago: executing program 0 (id=342): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x40, 0x3, 0x41, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) 1.399913163s ago: executing program 0 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x6, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 1.324663584s ago: executing program 0 (id=345): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000e6"], 0x0, 0x26}, 0x28) 1.227888066s ago: executing program 0 (id=349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.01909014s ago: executing program 0 (id=355): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002000000000000000a0000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="ca87a9505c0d6708f0c10c566786", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 959.865171ms ago: executing program 1 (id=358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c"], 0xffdd) 880.184173ms ago: executing program 0 (id=360): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x9, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61103c00000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e750000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r4 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c0000"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x0, 0xe, 0x1, 0x1, 0xffff, 0x7, 0x1040, 0x6, 0xffff, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) write$cgroup_devices(r3, &(0x7f0000000180)=ANY=[], 0xffdd) 783.706845ms ago: executing program 1 (id=364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2}, {0x6, 0x0, 0xfe, 0x10000000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 691.434777ms ago: executing program 2 (id=368): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000240)={'wlan1\x00', @multicast}) 691.054017ms ago: executing program 1 (id=369): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1b41, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) 690.871486ms ago: executing program 2 (id=370): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000440), 0x12) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x6a) 690.736737ms ago: executing program 2 (id=371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 636.191598ms ago: executing program 5 (id=373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x200040, &(0x7f0000005880)={[{@auto_da_alloc}], [{@seclabel}]}, 0xfc, 0x5b1, &(0x7f0000005a80)="$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") fstatfs(0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b600", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d9cf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004316ce4f9289f8f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ff00"}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f3804589e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 636.010178ms ago: executing program 1 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) 635.872507ms ago: executing program 2 (id=375): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000200)=0x30) 622.540728ms ago: executing program 1 (id=376): r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x38, &(0x7f0000000240)={0x7, 0x1, 0x8}) 593.763959ms ago: executing program 1 (id=377): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0xa2, "", [{{0x9, 0x4, 0x0, 0xde, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0xc4, 0xe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="2009280000002800826313612b85ff0f0000bdeace918d0fb74237cc6e446c4e88e78881ce"], 0x0, 0x0, 0x0, 0x0}, 0x0) 460.098861ms ago: executing program 2 (id=378): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000340)='./file0\x00', 0x3800014, &(0x7f0000000000)={[{@nodots}, {@fat=@uid}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@nodots}, {@dots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@nodots}, {@fat=@errors_continue}, {@dots}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@nodots}, {@dots}, {@dots}]}, 0x0, 0x218, &(0x7f0000000dc0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 459.040911ms ago: executing program 2 (id=379): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 421.863272ms ago: executing program 5 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x34c}, 0x1, 0x0, 0x0, 0x200c080}, 0x0) 405.289142ms ago: executing program 4 (id=381): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x3a, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf={0x16, &(0x7f00000000c0)="ba57c417eefff6f1192c5f6677f659cbc0512edd0d18"}) socket$key(0xf, 0x3, 0x2) 336.280364ms ago: executing program 5 (id=382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x3, &(0x7f0000000340)=[@cr4={0x1, 0x380}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 293.831565ms ago: executing program 5 (id=383): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/98, 0x11}, 0x401}], 0x1, 0x40012021, 0x0) 266.180675ms ago: executing program 4 (id=384): socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f00000000c0)={0xa, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x2e) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f00000006c0)=""/4124, 0x101c) 258.744595ms ago: executing program 5 (id=385): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[{0x10, 0x1, 0x5}], 0x10}}], 0x2, 0x4000045) 140.150848ms ago: executing program 5 (id=386): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 121.124908ms ago: executing program 4 (id=387): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x5c}, {@in6=@mcast1, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1e, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3507, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 95.007329ms ago: executing program 4 (id=388): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000000)=0x36) 315.58µs ago: executing program 4 (id=389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x3}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 0s ago: executing program 4 (id=390): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc00000000000000e9ffffffffffffffe000000100000000000000000000000000000004000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): T30] audit: type=1400 audit(1783519323.273:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.347739][ T30] audit: type=1400 audit(1783519323.273:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 20.418983][ T30] audit: type=1400 audit(1783519330.353:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.420123][ T277] cgroup: Unknown subsys name 'net' [ 20.441634][ T30] audit: type=1400 audit(1783519330.353:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.469224][ T30] audit: type=1400 audit(1783519330.383:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.469504][ T277] cgroup: Unknown subsys name 'devices' [ 20.583144][ T277] cgroup: Unknown subsys name 'hugetlb' [ 20.588737][ T277] cgroup: Unknown subsys name 'rlimit' [ 20.695008][ T30] audit: type=1400 audit(1783519330.633:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.718186][ T30] audit: type=1400 audit(1783519330.633:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.730104][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.743078][ T30] audit: type=1400 audit(1783519330.633:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.774636][ T30] audit: type=1400 audit(1783519330.693:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.800021][ T30] audit: type=1400 audit(1783519330.693:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.814360][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.825744][ T30] audit: type=1400 audit(1783519330.753:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.859877][ T30] audit: type=1400 audit(1783519330.753:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.733029][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.740101][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.747592][ T289] device bridge_slave_0 entered promiscuous mode [ 21.754407][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.761780][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.769199][ T288] device bridge_slave_0 entered promiscuous mode [ 21.780515][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.787617][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.795043][ T289] device bridge_slave_1 entered promiscuous mode [ 21.802002][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.809033][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.816516][ T288] device bridge_slave_1 entered promiscuous mode [ 21.862428][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.869487][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.876910][ T287] device bridge_slave_0 entered promiscuous mode [ 21.883597][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.890631][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.898071][ T285] device bridge_slave_0 entered promiscuous mode [ 21.905075][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.912221][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.919894][ T285] device bridge_slave_1 entered promiscuous mode [ 21.937407][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.944588][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.952119][ T287] device bridge_slave_1 entered promiscuous mode [ 21.982213][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.989269][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.996711][ T286] device bridge_slave_0 entered promiscuous mode [ 22.006024][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.013139][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.020656][ T286] device bridge_slave_1 entered promiscuous mode [ 22.178846][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.186179][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.193699][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.200810][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.209334][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.216394][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.223811][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.231186][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.249768][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.256962][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.264377][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.271408][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.299122][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.306215][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.313515][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.320702][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.332893][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.339946][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.347317][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.354404][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.369627][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.377372][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.384644][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.392351][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.399579][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.407499][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.414808][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.422025][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.429403][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.436708][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.443917][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.464512][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.472045][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.479411][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.487210][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.495704][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.502763][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.527600][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.535983][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.543117][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.550480][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.558882][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.566021][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.573564][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.581763][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.588767][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.596908][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.608341][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.616723][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.623763][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.645635][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.654675][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.662777][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.670934][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.677994][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.685588][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.694070][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.701077][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.708455][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.717484][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.724688][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.732229][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.756561][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.764845][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.773370][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.782045][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.790144][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.797864][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.806125][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.814431][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.822880][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.829917][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.837823][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.845964][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.854206][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.862779][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.870893][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.877935][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.885379][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.893652][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.911923][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.920172][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.928223][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.936514][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.944768][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.953060][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.960931][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.969738][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.988725][ T286] device veth0_vlan entered promiscuous mode [ 22.995589][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.004153][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.012662][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.020937][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.029583][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.037590][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.045870][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.053473][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.062717][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.070666][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.086463][ T287] device veth0_vlan entered promiscuous mode [ 23.094464][ T285] device veth0_vlan entered promiscuous mode [ 23.101669][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.109200][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.116827][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.124769][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.132913][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.141402][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.158012][ T288] device veth0_vlan entered promiscuous mode [ 23.168122][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.175718][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.183311][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.191794][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.200271][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.208374][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.216560][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.224075][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.233298][ T289] device veth0_vlan entered promiscuous mode [ 23.243952][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.252196][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.260055][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.268222][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.276503][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.284974][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.292480][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.302993][ T288] device veth1_macvtap entered promiscuous mode [ 23.314786][ T286] device veth1_macvtap entered promiscuous mode [ 23.325153][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.333679][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.342071][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.350610][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.360984][ T289] device veth1_macvtap entered promiscuous mode [ 23.369873][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.377569][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.385814][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.401188][ T287] device veth1_macvtap entered promiscuous mode [ 23.409056][ T285] device veth1_macvtap entered promiscuous mode [ 23.417307][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.425625][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.434136][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.442577][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.451157][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.459527][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.468018][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.475825][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.484124][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.497698][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.506354][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.518413][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.526898][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.544538][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 23.573453][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.583423][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.592218][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.600519][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.609188][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.617540][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.626021][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.634278][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.698244][ T321] loop2: detected capacity change from 0 to 512 [ 23.718334][ T321] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.3: inode has both inline data and extents flags [ 23.732075][ T321] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 23.761781][ T321] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 23.851274][ T290] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.960556][ T333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.976900][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.111272][ T290] usb 1-1: Using ep0 maxpacket: 8 [ 24.231394][ T290] usb 1-1: config 0 interface 0 has no altsetting 0 [ 24.238049][ T290] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 24.247283][ T290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.256380][ T290] usb 1-1: config 0 descriptor?? [ 24.281381][ T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.311324][ T339] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.391376][ T6] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 24.402495][ T6] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 24.504626][ T310] UDC core: couldn't find an available UDC or it's busy: -16 [ 24.512148][ T310] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 24.521255][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 24.571306][ T339] usb 2-1: Using ep0 maxpacket: 8 [ 24.581485][ T6] usb 5-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 24.590693][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.599001][ T6] usb 5-1: Product: syz [ 24.603435][ T6] usb 5-1: Manufacturer: syz [ 24.608109][ T6] usb 5-1: SerialNumber: syz [ 24.651586][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 24.662750][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 24.672521][ T312] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 24.682398][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 24.692738][ T339] usb 2-1: config 0 interface 0 has no altsetting 0 [ 24.699358][ T339] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 24.708434][ T312] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 24.718201][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.726248][ T312] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 24.735643][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.743928][ T339] usb 2-1: config 0 descriptor?? [ 24.750573][ T312] usb 4-1: config 0 descriptor?? [ 24.755922][ T290] hid (null): unknown global tag 0xc [ 24.761319][ T290] hid (null): report_id 19533 is invalid [ 24.768135][ T290] lg-g15 0003:046D:C225.0001: unknown main item tag 0x1 [ 24.775439][ T290] lg-g15 0003:046D:C225.0001: unknown main item tag 0x6 [ 24.783365][ T290] lg-g15 0003:046D:C225.0001: unknown global tag 0xc [ 24.790040][ T290] lg-g15 0003:046D:C225.0001: item 0 1 1 12 parsing failed [ 24.797856][ T290] lg-g15: probe of 0003:046D:C225.0001 failed with error -22 [ 24.963401][ T290] usb 1-1: USB disconnect, device number 2 [ 24.971472][ T6] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 24.991443][ T6] usb 5-1: unit 5 not found! [ 24.998574][ T6] usb 5-1: USB disconnect, device number 2 [ 25.027596][ T312] usb 4-1: USB disconnect, device number 2 [ 25.211549][ T339] hid (null): unknown global tag 0xc [ 25.217394][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.218571][ T339] lg-g15 0003:046D:C225.0002: unknown main item tag 0x1 [ 25.240319][ T339] lg-g15 0003:046D:C225.0002: unknown main item tag 0x6 [ 25.247405][ T339] lg-g15 0003:046D:C225.0002: unknown global tag 0xc [ 25.254153][ T339] lg-g15 0003:046D:C225.0002: item 0 1 1 12 parsing failed [ 25.263471][ T339] lg-g15: probe of 0003:046D:C225.0002 failed with error -22 [ 25.429810][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 25.429833][ T30] audit: type=1400 audit(1783519335.363:130): avc: denied { wake_alarm } for pid=346 comm="syz.4.12" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 25.455906][ T308] usb 2-1: USB disconnect, device number 2 [ 25.519275][ T350] loop0: detected capacity change from 0 to 512 [ 25.570535][ T350] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 25.633659][ T350] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 25.654458][ T359] loop4: detected capacity change from 0 to 512 [ 25.661684][ T350] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.13: bg 0: block 248: padding at end of block bitmap is not set [ 25.663663][ T360] loop3: detected capacity change from 0 to 512 [ 25.697664][ T350] Quota error (device loop0): write_blk: dquota write failed [ 25.706865][ T350] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 25.712780][ T359] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 25.717015][ T350] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.13: Failed to acquire dquot type 1 [ 25.741807][ T359] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.761140][ T350] EXT4-fs (loop0): 1 truncate cleaned up [ 25.767110][ T350] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 25.773126][ T360] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 25.791086][ T350] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 25.795861][ T360] ext4 filesystem being mounted at /4/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.805928][ T30] audit: type=1400 audit(1783519335.723:131): avc: denied { remove_name } for pid=349 comm="syz.0.13" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.829053][ T350] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 25.848776][ T350] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.13: Failed to acquire dquot type 1 [ 25.860200][ T30] audit: type=1400 audit(1783519335.723:132): avc: denied { rename } for pid=349 comm="syz.0.13" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.895853][ T30] audit: type=1400 audit(1783519335.723:133): avc: denied { unlink } for pid=349 comm="syz.0.13" name="file3" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.921445][ T45] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6) [ 25.930045][ T45] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 1 [ 25.941527][ T350] syz.0.13 (350) used greatest stack depth: 21032 bytes left [ 25.953625][ T30] audit: type=1400 audit(1783519335.783:134): avc: denied { create } for pid=351 comm="syz.3.14" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.232418][ T392] loop3: detected capacity change from 0 to 256 [ 26.329222][ T392] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 26.369282][ T392] exFAT-fs (loop3): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 26.384799][ T392] exFAT-fs (loop3): Filesystem has been set read-only [ 26.392959][ T391] exFAT-fs (loop3): invalid start cluster (520) [ 26.421271][ T313] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.470855][ T411] loop1: detected capacity change from 0 to 512 [ 26.563261][ T415] loop4: detected capacity change from 0 to 512 [ 26.564425][ T411] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 26.587001][ T411] ext4 filesystem being mounted at /12/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.607967][ T415] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.621475][ T415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 26.643748][ T415] EXT4-fs (loop4): 1 truncate cleaned up [ 26.649531][ T415] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,auto_da_alloc,,errors=continue. Quota mode: none. [ 26.671347][ T313] usb 1-1: Using ep0 maxpacket: 32 [ 26.711385][ T308] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.801377][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.812517][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.822285][ T313] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 26.831424][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.840861][ T313] usb 1-1: config 0 descriptor?? [ 26.881840][ T313] hub 1-1:0.0: USB hub found [ 26.990991][ T437] loop2: detected capacity change from 0 to 512 [ 27.001333][ T339] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 27.013950][ T437] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 27.025114][ T437] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 27.038330][ T437] EXT4-fs (loop2): 1 truncate cleaned up [ 27.044135][ T437] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,errors=continue,sb=0x000000000000ffff,debug_want_extra_isize=0x0000000000000080,block_validity,noload,,errors=continue. Quota mode: none. [ 27.081304][ T308] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 27.089458][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.100617][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.110468][ T313] hub 1-1:0.0: 26 ports detected [ 27.115504][ T308] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.135297][ T313] hub 1-1:0.0: insufficient power available to use all downstream ports [ 27.136833][ T442] loop2: detected capacity change from 0 to 128 [ 27.150167][ T308] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.159249][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.167819][ T308] usb 4-1: config 0 descriptor?? [ 27.233038][ T442] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.243790][ T442] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 27.321279][ T313] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 27.328892][ T313] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 27.348338][ T445] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 27.356332][ T445] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 27.401557][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.413710][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.423631][ T339] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.431354][ T313] usbhid 1-1:0.0: can't add hid device: -71 [ 27.436718][ T339] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.451311][ T313] usbhid: probe of 1-1:0.0 failed with error -71 [ 27.451643][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.462386][ T450] loop2: detected capacity change from 0 to 512 [ 27.472756][ T339] usb 5-1: config 0 descriptor?? [ 27.502495][ T313] usb 1-1: USB disconnect, device number 3 [ 27.523083][ T450] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 27.540092][ T450] ext4 filesystem being mounted at /8/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.642318][ T308] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 27.655711][ T308] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 27.665196][ T456] device syzkaller0 entered promiscuous mode [ 27.671998][ T308] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 27.672850][ T458] netlink: 144 bytes leftover after parsing attributes in process `syz.2.50'. [ 27.681504][ T308] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 27.700284][ T308] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 27.708237][ T308] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 27.716480][ T308] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 27.724908][ T308] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 27.733360][ T308] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 27.740939][ T308] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 27.759758][ T463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 27.768926][ T308] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 27.779016][ T308] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 27.791315][ T308] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 27.799051][ T308] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 27.809060][ T308] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 27.922353][ T60] usb 4-1: USB disconnect, device number 3 [ 27.952183][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 27.959626][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 27.974349][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 27.983569][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 27.991024][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 27.998641][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 28.006255][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 28.014406][ T484] ======================================================= [ 28.014406][ T484] WARNING: The mand mount option has been deprecated and [ 28.014406][ T484] and is ignored by this kernel. Remove the mand [ 28.014406][ T484] option from the mount to silence this warning. [ 28.014406][ T484] ======================================================= [ 28.049409][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 28.057694][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 28.065294][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 28.079506][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 28.087345][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 28.098883][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 28.106572][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 28.114448][ T339] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 28.115075][ T486] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 28.122257][ T339] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 28.148517][ T484] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (40992!=35945) [ 28.159589][ T486] ext4 filesystem being mounted at /12/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.170681][ T339] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 28.189982][ T484] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 28.212061][ T339] usb 5-1: USB disconnect, device number 3 [ 28.227163][ T491] fido_id[491]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 28.247286][ T484] EXT4-fs (loop1): orphan cleanup on readonly fs [ 28.319966][ T484] EXT4-fs warning (device loop1): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 28.377560][ T484] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 28.411522][ T495] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 28.416842][ T484] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.63: Freeing blocks not in datazone - block = 0, count = 4096 [ 28.443141][ T484] EXT4-fs (loop1): 1 truncate cleaned up [ 28.449981][ T484] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 28.461464][ T500] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 28.468915][ T495] ext4 filesystem being mounted at /11/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.490910][ T500] EXT4-fs (loop2): 1 truncate cleaned up [ 28.490934][ T500] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 28.587718][ T510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 28.637782][ T518] Illegal XDP return value 32768, expect packet loss! [ 28.675754][ T516] process 'syz.1.70' launched './file0' with NULL argv: empty string added [ 28.936761][ T60] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 28.961010][ T513] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.034961][ T60] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 29.054492][ T513] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 29.117209][ T550] set_capacity_and_notify: 5 callbacks suppressed [ 29.117227][ T550] loop3: detected capacity change from 0 to 512 [ 29.184055][ T550] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 29.267990][ T550] ext4 filesystem being mounted at /15/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.336055][ T541] hid-generic 0000:0000:0000.0005: pid 541 passed too short report [ 29.468936][ T566] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 29.551374][ T544] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.591489][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 29.811333][ T544] usb 3-1: Using ep0 maxpacket: 8 [ 29.841268][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 29.931332][ T544] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.941836][ T544] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 29.961389][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.972419][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.982523][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.995649][ T26] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.004881][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.013845][ T26] usb 5-1: config 0 descriptor?? [ 30.051348][ T308] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 30.091304][ T339] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.101292][ T544] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 30.110401][ T544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.118561][ T544] usb 3-1: Product: syz [ 30.122842][ T544] usb 3-1: Manufacturer: syz [ 30.127503][ T544] usb 3-1: SerialNumber: syz [ 30.361269][ T339] usb 1-1: Using ep0 maxpacket: 16 [ 30.411346][ T308] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 30.422826][ T308] usb 2-1: config 0 interface 0 has no altsetting 0 [ 30.429464][ T308] usb 2-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 30.438568][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.447203][ T308] usb 2-1: config 0 descriptor?? [ 30.471354][ T581] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 30.492402][ T26] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 30.501149][ T26] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 30.512733][ T544] usb 3-1: unit 3 not found! [ 30.517577][ T26] microsoft 0003:045E:07DA.0006: no inputs found [ 30.521279][ T339] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 30.523978][ T26] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 30.532487][ T339] usb 1-1: config 0 has no interface number 0 [ 30.540839][ T544] usb 3-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x600, type = 0 [ 30.547304][ T339] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 30.564219][ T544] usb 3-1: USB disconnect, device number 2 [ 30.576628][ T339] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 30.619083][ T586] loop3: detected capacity change from 0 to 256 [ 30.695277][ T6] usb 5-1: USB disconnect, device number 4 [ 30.705753][ T586] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 30.724544][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 30.724560][ T30] audit: type=1400 audit(1783519340.663:189): avc: denied { write } for pid=585 comm="syz.3.97" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.751300][ T339] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 30.754015][ T30] audit: type=1400 audit(1783519340.663:190): avc: denied { open } for pid=585 comm="syz.3.97" path="/dev/input/event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.763028][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.787794][ T30] audit: type=1400 audit(1783519340.663:191): avc: denied { ioctl } for pid=585 comm="syz.3.97" path="/dev/input/event2" dev="devtmpfs" ino=270 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.797109][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.840751][ T339] usb 1-1: Product: syz [ 30.845006][ T339] usb 1-1: Manufacturer: syz [ 30.849612][ T339] usb 1-1: SerialNumber: syz [ 30.855038][ T339] usb 1-1: config 0 descriptor?? [ 30.871301][ T564] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 30.878284][ T564] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 31.011676][ T596] loop2: detected capacity change from 0 to 512 [ 31.066463][ T596] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 31.084658][ T596] ext4 filesystem being mounted at /20/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.092486][ T564] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 31.102861][ T564] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 31.138241][ T308] usb 2-1: USB disconnect, device number 3 [ 31.281445][ T601] xt_hashlimit: size too large, truncated to 1048576 [ 31.288600][ T601] xt_hashlimit: max too large, truncated to 1048576 [ 31.341463][ T339] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 31.976830][ T30] audit: type=1400 audit(1783519341.913:192): avc: denied { block_suspend } for pid=607 comm="syz.3.104" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.093977][ T618] loop2: detected capacity change from 0 to 128 [ 32.115915][ T615] loop1: detected capacity change from 0 to 2048 [ 32.162382][ T30] audit: type=1400 audit(1783519342.103:193): avc: denied { bind } for pid=619 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.212116][ T618] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 32.241748][ T618] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.258559][ T623] loop3: detected capacity change from 0 to 512 [ 32.271868][ T30] audit: type=1400 audit(1783519342.143:194): avc: denied { name_bind } for pid=619 comm="syz.3.109" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 32.319367][ T615] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.320570][ T30] audit: type=1400 audit(1783519342.143:195): avc: denied { node_bind } for pid=619 comm="syz.3.109" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 32.353275][ T30] audit: type=1400 audit(1783519342.143:196): avc: denied { read } for pid=619 comm="syz.3.109" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.358898][ T615] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.397671][ T30] audit: type=1400 audit(1783519342.333:197): avc: denied { create } for pid=613 comm="syz.1.106" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 32.429956][ T632] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 32.457276][ T623] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 32.468178][ T30] audit: type=1400 audit(1783519342.403:198): avc: denied { map } for pid=622 comm="syz.3.110" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.561846][ T650] loop1: detected capacity change from 0 to 512 [ 32.819398][ T662] capability: warning: `syz.2.123' uses deprecated v2 capabilities in a way that may be insecure [ 32.833605][ T663] loop3: detected capacity change from 0 to 256 [ 32.955604][ T650] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 32.980480][ T663] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.140160][ T650] ext4 filesystem being mounted at /31/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.147042][ T663] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 33.161300][ T339] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 33.163667][ T663] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 33.182630][ T339] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 33.195779][ T339] asix: probe of 1-1:0.34 failed with error -71 [ 33.216924][ T339] usb 1-1: USB disconnect, device number 4 [ 33.307827][ T673] loop4: detected capacity change from 0 to 4096 [ 33.309136][ T676] loop3: detected capacity change from 0 to 128 [ 33.327799][ T676] EXT4-fs (loop3): Test dummy encryption mode enabled [ 33.336023][ T676] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 33.352107][ T676] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.365598][ T676] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 33.374336][ T673] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 33.388264][ T673] EXT4-fs (loop4): Test dummy encryption mode enabled [ 33.399174][ T673] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,noblock_validity,minixdf,. Quota mode: writeback. [ 33.867770][ T694] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,i_version,,errors=continue. Quota mode: writeback. [ 34.517684][ T718] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 35.159493][ T736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 35.271859][ T718] ext4 filesystem being mounted at /31/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.379708][ T748] set_capacity_and_notify: 2 callbacks suppressed [ 35.379726][ T748] loop4: detected capacity change from 0 to 256 [ 35.386391][ T750] loop0: detected capacity change from 0 to 256 [ 35.407028][ T750] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 35.464140][ T754] loop1: detected capacity change from 0 to 256 [ 35.488058][ T748] FAT-fs (loop4): Directory bread(block 64) failed [ 35.508269][ T748] FAT-fs (loop4): Directory bread(block 65) failed [ 35.515694][ T748] FAT-fs (loop4): Directory bread(block 66) failed [ 35.522336][ T748] FAT-fs (loop4): Directory bread(block 67) failed [ 35.528967][ T748] FAT-fs (loop4): Directory bread(block 68) failed [ 35.535597][ T748] FAT-fs (loop4): Directory bread(block 69) failed [ 35.542296][ T748] FAT-fs (loop4): Directory bread(block 70) failed [ 35.548877][ T748] FAT-fs (loop4): Directory bread(block 71) failed [ 35.552371][ T754] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.555528][ T748] FAT-fs (loop4): Directory bread(block 72) failed [ 35.572657][ T748] FAT-fs (loop4): Directory bread(block 73) failed [ 35.582839][ T754] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 35.607827][ T754] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 35.627633][ T758] loop0: detected capacity change from 0 to 128 [ 35.645724][ T758] FAT-fs (loop0): Unrecognized mount option "c4106(gcm(aes)) [ 35.645724][ T758] driver : rfc4106-gcm-aesni [ 35.645724][ T758] module : kernel [ 35.645724][ T758] priority : 400 [ 35.645724][ T758] refcnt : 1 [ 35.645724][ T758] selftest : passed [ 35.645724][ T758] internal : no [ 35.645724][ T758] type : aead [ 35.645724][ T758] async : yes [ 35.645724][ T758] blocksize : 1 [ 35.645724][ T758] ivsize : 8 [ 35.645724][ T758] maxa" or missing value [ 36.254166][ T759] attempt to access beyond end of device [ 36.254166][ T759] loop4: rw=2051, want=1768, limit=256 [ 36.309980][ T795] loop0: detected capacity change from 0 to 512 [ 36.320461][ T759] attempt to access beyond end of device [ 36.320461][ T759] loop4: rw=2051, want=1928, limit=256 [ 36.332107][ T759] attempt to access beyond end of device [ 36.332107][ T759] loop4: rw=2051, want=21576, limit=256 [ 36.368067][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 36.368080][ T30] audit: type=1400 audit(1783519346.303:219): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.691525][ T809] loop3: detected capacity change from 0 to 1024 [ 36.725114][ T809] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 36.736128][ T795] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 36.795030][ T809] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 36.845707][ T809] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.873375][ T30] audit: type=1400 audit(1783519346.813:220): avc: denied { read } for pid=813 comm="syz.4.177" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.930905][ T795] ext4 filesystem being mounted at /27/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.946942][ T30] audit: type=1400 audit(1783519346.843:221): avc: denied { open } for pid=813 comm="syz.4.177" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.971071][ T30] audit: type=1400 audit(1783519346.843:222): avc: denied { ioctl } for pid=813 comm="syz.4.177" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.997006][ T809] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,nomblk_io_submit,inlinecrypt,nouid32,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: none. [ 37.003933][ T30] audit: type=1400 audit(1783519346.843:223): avc: denied { set_context_mgr } for pid=813 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 37.038203][ T30] audit: type=1400 audit(1783519346.853:224): avc: denied { map } for pid=813 comm="syz.4.177" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.062310][ T30] audit: type=1400 audit(1783519346.863:225): avc: denied { call } for pid=813 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 37.072533][ T809] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.180675][ T809] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.176: bg 0: block 112: padding at end of block bitmap is not set [ 37.194941][ T30] audit: type=1400 audit(1783519347.113:226): avc: denied { append } for pid=808 comm="syz.3.176" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.241647][ T809] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 37.254055][ T308] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 37.269261][ T809] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.269261][ T809] [ 37.279721][ T809] EXT4-fs (loop3): Total free blocks count 0 [ 37.286180][ T809] EXT4-fs (loop3): Free/Dirty block details [ 37.292426][ T809] EXT4-fs (loop3): free_blocks=0 [ 37.297395][ T809] EXT4-fs (loop3): dirty_blocks=0 [ 37.303085][ T809] EXT4-fs (loop3): Block reservation details [ 37.309260][ T809] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 37.658981][ T30] audit: type=1400 audit(1783519347.593:227): avc: denied { lock } for pid=848 comm="syz.3.192" path="socket:[19518]" dev="sockfs" ino=19518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 37.683283][ T308] usb 5-1: not running at top speed; connect to a high speed hub [ 37.771323][ T308] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 37.881281][ T60] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.941328][ T308] usb 5-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 37.966332][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.983159][ T308] usb 5-1: Product: syz [ 37.991659][ T308] usb 5-1: Manufacturer: syz [ 37.996317][ T308] usb 5-1: SerialNumber: syz [ 38.088016][ T30] audit: type=1400 audit(1783519348.023:228): avc: denied { ioctl } for pid=859 comm="syz.0.195" path="socket:[19592]" dev="sockfs" ino=19592 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.121414][ T60] usb 2-1: Using ep0 maxpacket: 8 [ 38.241590][ T60] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.249268][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 38.259318][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.338976][ T60] usb 2-1: config 0 descriptor?? [ 38.411331][ T308] usb 5-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 38.431294][ T308] usb 5-1: incorrect wMaxPacketSize 0x8 for BADD profile [ 38.446047][ T308] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 38.462928][ T874] loop0: detected capacity change from 0 to 512 [ 38.479604][ T308] usb 5-1: USB disconnect, device number 5 [ 38.583404][ T846] UDC core: couldn't find an available UDC or it's busy: -16 [ 38.601127][ T846] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 38.656774][ T874] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 38.673875][ T874] ext4 filesystem being mounted at /36/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.695639][ T885] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.732870][ T894] loop3: detected capacity change from 0 to 128 [ 38.820912][ T286] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 38.828890][ T286] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 38.836989][ T60] hid (null): unknown global tag 0xc [ 38.843080][ T60] hid (null): report_id 19533 is invalid [ 38.849974][ T60] lg-g15 0003:046D:C225.0008: unknown main item tag 0x1 [ 38.861303][ T60] lg-g15 0003:046D:C225.0008: unknown main item tag 0x6 [ 38.868512][ T60] lg-g15 0003:046D:C225.0008: unknown global tag 0xc [ 38.876336][ T60] lg-g15 0003:046D:C225.0008: item 0 1 1 12 parsing failed [ 38.896662][ T60] lg-g15: probe of 0003:046D:C225.0008 failed with error -22 [ 39.141724][ T544] usb 2-1: USB disconnect, device number 4 [ 39.504155][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.521283][ T922] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.530903][ T922] device bridge_slave_0 entered promiscuous mode [ 39.544462][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.556976][ T922] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.585291][ T922] device bridge_slave_1 entered promiscuous mode [ 39.683560][ T942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 39.720087][ T8] device bridge_slave_1 left promiscuous mode [ 39.726813][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.777342][ T8] device bridge_slave_0 left promiscuous mode [ 39.827171][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.884677][ T957] loop1: detected capacity change from 0 to 256 [ 39.895201][ T8] device veth1_macvtap left promiscuous mode [ 39.902757][ T951] loop4: detected capacity change from 0 to 512 [ 39.920991][ T8] device veth0_vlan left promiscuous mode [ 40.321752][ T966] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue. Quota mode: none. [ 40.403636][ T974] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 40.446464][ T974] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,noblock_validity,noquota,delalloc,journal_dev=0x0000000000000008,grpjquota=,,errors=continue. Quota mode: none. [ 40.467020][ T951] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 40.469571][ T974] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.488967][ T951] ext4 filesystem being mounted at /36/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.522798][ T974] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: comm syz.1.238: lblock 0 mapped to illegal pblock 0 (length 6) [ 40.536375][ T974] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 40.545678][ T988] set_capacity_and_notify: 2 callbacks suppressed [ 40.545695][ T988] loop0: detected capacity change from 0 to 512 [ 40.561660][ T974] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.561660][ T974] [ 40.583287][ T988] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 40.646625][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.654609][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.695933][ T988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0102] [ 40.728608][ T988] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.750359][ T988] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.243: attempt to clear invalid blocks 1024 len 1 [ 40.764592][ T988] EXT4-fs (loop0): Remounting filesystem read-only [ 40.851334][ T988] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.243: bg 0: block 361: padding at end of block bitmap is not set [ 40.875175][ T988] EXT4-fs (loop0): Remounting filesystem read-only [ 40.912241][ T988] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 40.917739][ T974] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.238: Invalid inode table block 4760450085616159230 in block_group 0 [ 40.987725][ T988] EXT4-fs (loop0): Remounting filesystem read-only [ 40.995202][ T974] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 41.005643][ T974] EXT4-fs error (device loop1): ext4_alloc_file_blocks:4568: inode #15: comm syz.1.238: mark_inode_dirty error [ 41.006018][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.025413][ T988] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.243: invalid indirect mapped block 1811939328 (level 0) [ 41.026217][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.048594][ T988] EXT4-fs (loop0): Remounting filesystem read-only [ 41.056253][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.056855][ T988] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.243: invalid indirect mapped block 2185560079 (level 1) [ 41.079213][ T988] EXT4-fs (loop0): Remounting filesystem read-only [ 41.086719][ T988] EXT4-fs (loop0): 1 truncate cleaned up [ 41.086822][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.100698][ T988] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,abort. Quota mode: none. [ 41.101645][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.121774][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.144690][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.153665][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.164898][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.174589][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.181648][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.198621][ T45] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm kworker/u4:2: Invalid inode table block 4760450085616159230 in block_group 0 [ 41.236431][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.245650][ T45] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 41.269134][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.271968][ T45] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm kworker/u4:2: mark_inode_dirty error [ 41.290859][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.297385][ T994] SELinux: failed to load policy [ 41.304909][ T45] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 41.305135][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.347224][ T45] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.347224][ T45] [ 41.357500][ T45] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm kworker/u4:2: Invalid inode table block 4760450085616159230 in block_group 0 [ 41.402075][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.411576][ T996] loop4: detected capacity change from 0 to 512 [ 41.416767][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 41.416781][ T30] audit: type=1400 audit(1783519351.353:237): avc: denied { getopt } for pid=997 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.426202][ T922] device veth0_vlan entered promiscuous mode [ 41.453266][ T996] EXT4-fs (loop4): Test dummy encryption mode enabled [ 41.460544][ T996] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.471426][ T996] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 41.472991][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.490743][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.502652][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.694144][ T922] device veth1_macvtap entered promiscuous mode [ 41.837928][ T30] audit: type=1400 audit(1783519351.773:238): avc: denied { mounton } for pid=922 comm="syz-executor" path="/root/syzkaller.aJ6i2J/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.867638][ T1013] loop0: detected capacity change from 0 to 1024 [ 41.948356][ T1022] loop1: detected capacity change from 0 to 512 [ 41.957016][ T1013] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue. Quota mode: none. [ 42.023368][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.054808][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.063409][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.072115][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.080622][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.113536][ T1022] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 42.122161][ T1030] loop0: detected capacity change from 0 to 1024 [ 42.145118][ T30] audit: type=1400 audit(1783519352.083:239): avc: denied { connect } for pid=1031 comm="syz.4.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.176963][ T1022] ext4 filesystem being mounted at /50/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.180965][ T1034] device syzkaller0 entered promiscuous mode [ 42.187758][ T30] audit: type=1400 audit(1783519352.113:240): avc: denied { listen } for pid=1031 comm="syz.4.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.213271][ T30] audit: type=1400 audit(1783519352.113:241): avc: denied { accept } for pid=1031 comm="syz.4.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.214066][ T1030] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,grpquota,grpid,nombcache,,errors=continue. Quota mode: writeback. [ 42.252373][ T1030] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.269861][ T1030] bridge0: port 3(ip6gretap0) entered blocking state [ 42.276668][ T1030] bridge0: port 3(ip6gretap0) entered disabled state [ 42.283976][ T1030] device ip6gretap0 entered promiscuous mode [ 42.411892][ T1030] bridge0: port 3(ip6gretap0) entered blocking state [ 42.418692][ T1030] bridge0: port 3(ip6gretap0) entered forwarding state [ 42.651654][ T1055] netlink: 52 bytes leftover after parsing attributes in process `syz.5.266'. [ 42.723746][ T1060] fuse: Bad value for 'fd' [ 42.842377][ T60] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 43.068897][ T1065] loop5: detected capacity change from 0 to 512 [ 43.101369][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 43.235299][ T60] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 43.260346][ T60] usb 5-1: config 179 has no interface number 0 [ 43.267017][ T60] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 43.278549][ T60] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 43.290233][ T60] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 43.319603][ T1071] syz.0.265 uses obsolete (PF_INET,SOCK_PACKET) [ 43.337804][ T60] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 43.349680][ T60] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 43.364203][ T60] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 43.373589][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.402225][ T1046] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 44.359692][ T308] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8 [ 44.378530][ T30] audit: type=1400 audit(1783519354.313:242): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=780 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.479352][ T30] audit: type=1400 audit(1783519354.313:243): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=780 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.502877][ T1086] netlink: 292 bytes leftover after parsing attributes in process `syz.1.277'. [ 44.506264][ T30] audit: type=1400 audit(1783519354.313:244): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=780 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.539779][ T30] audit: type=1400 audit(1783519354.473:245): avc: denied { setopt } for pid=1085 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.547763][ T1096] loop0: detected capacity change from 0 to 256 [ 45.227805][ T1046] UDC core: couldn't find an available UDC or it's busy: -16 [ 45.263230][ T1046] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 45.275106][ T1088] loop5: detected capacity change from 0 to 1024 [ 45.398566][ T1088] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue. Quota mode: none. [ 45.435926][ T30] audit: type=1400 audit(1783519355.323:246): avc: denied { write } for pid=1108 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.471764][ T339] usb 5-1: USB disconnect, device number 6 [ 45.487658][ T1120] loop0: detected capacity change from 0 to 512 [ 45.491379][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 45.502586][ T339] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 45.565976][ T1123] netlink: 'syz.1.285': attribute type 3 has an invalid length. [ 46.385511][ T1144] loop4: detected capacity change from 0 to 512 [ 46.434790][ T1148] loop5: detected capacity change from 0 to 1024 [ 46.440597][ T1154] loop1: detected capacity change from 0 to 128 [ 46.454175][ T1144] EXT4-fs (loop4): Test dummy encryption mode enabled [ 46.481873][ T1144] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.298: inode has both inline data and extents flags [ 46.484958][ T1139] kvm [1138]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x58f8 [ 46.508138][ T1144] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.298: couldn't read orphan inode 15 (err -117) [ 46.508173][ T1154] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 46.529330][ T1144] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 46.553758][ T1139] kvm [1138]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 46.571466][ T1144] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 46.572190][ T1139] kvm [1138]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x307c [ 46.589583][ T1148] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue. Quota mode: none. [ 46.592124][ T1144] EXT4-fs (loop4): shut down requested (1) [ 46.607186][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 46.607198][ T30] audit: type=1400 audit(1783519356.543:249): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 46.650793][ T1139] kvm [1138]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x101c [ 46.659311][ T1139] kvm [1138]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 46.670842][ T1139] kvm [1138]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xb9b9, nop [ 46.718113][ T30] audit: type=1400 audit(1783519356.543:250): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.744977][ T30] audit: type=1400 audit(1783519356.543:251): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.745853][ T1154] FAT-fs (loop1): error, clusters badly computed (9 != 1) [ 46.775301][ T30] audit: type=1400 audit(1783519356.543:252): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.797283][ T30] audit: type=1400 audit(1783519356.543:253): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.821976][ T1154] FAT-fs (loop1): Filesystem has been set read-only [ 46.831023][ T30] audit: type=1400 audit(1783519356.543:254): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.854588][ T285] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 46.931789][ T339] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 47.003764][ T30] audit: type=1400 audit(1783519356.543:255): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.099046][ T30] audit: type=1400 audit(1783519356.643:256): avc: denied { rmdir } for pid=1142 comm="syz.4.298" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.211245][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 47.243490][ T30] audit: type=1400 audit(1783519357.083:257): avc: denied { name_bind } for pid=1175 comm="syz.4.309" src=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 47.286669][ T1182] loop4: detected capacity change from 0 to 1024 [ 47.330930][ T1185] loop0: detected capacity change from 0 to 1024 [ 47.342105][ T339] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.367517][ T339] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 47.375321][ T1182] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue. Quota mode: none. [ 47.379087][ T339] usb 6-1: config 1 has no interface number 0 [ 47.395324][ T339] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.395662][ T1185] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c01c, mo2=0103] [ 47.456533][ T1185] System zones: 0-1, 3-12 [ 47.461407][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 47.467333][ T1185] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,debug,bsddf,max_dir_size_kb=0x00000000000007b1,i_version,data_err=ignore,abort,user_xattr,grpid,,errors=continue. Quota mode: none. [ 47.495719][ T1182] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 47.505708][ T1182] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 47.581297][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.592433][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 42408, setting to 1024 [ 47.604024][ T26] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 47.612828][ T339] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.658385][ T1197] loop0: detected capacity change from 0 to 256 [ 47.664760][ T339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.672970][ T339] usb 6-1: Product: syz [ 47.677206][ T339] usb 6-1: Manufacturer: syz [ 47.681838][ T339] usb 6-1: SerialNumber: syz [ 47.725919][ T1197] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 47.764189][ T30] audit: type=1400 audit(1783519357.703:258): avc: denied { remount } for pid=1196 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.784341][ T26] usb 2-1: New USB device found, idVendor=0499, idProduct=474b, bcdDevice= 0.40 [ 47.793824][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.802417][ T26] usb 2-1: Product: syz [ 47.806660][ T26] usb 2-1: Manufacturer: syz [ 47.811780][ T26] usb 2-1: SerialNumber: syz [ 47.851308][ T1172] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 47.961246][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 47.997142][ T339] usb 6-1: selecting invalid altsetting 1 [ 48.201228][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 48.247278][ T26] usb 2-1: USB disconnect, device number 5 [ 48.282555][ T1222] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 48.331373][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.340871][ T60] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 48.354452][ T1226] loop0: detected capacity change from 0 to 512 [ 48.360950][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.400842][ T60] usb 5-1: config 0 descriptor?? [ 48.486606][ T339] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 48.493307][ T339] cdc_ncm 6-1:1.1: bind() failure [ 48.774435][ T1237] loop1: detected capacity change from 0 to 2048 [ 48.884956][ T60] hid (null): unknown global tag 0xc [ 48.892036][ T60] hid (null): report_id 19533 is invalid [ 48.906697][ T1237] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.934636][ T1237] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.934781][ T60] lg-g15 0003:046D:C225.0009: unknown main item tag 0x1 [ 49.208330][ T60] lg-g15 0003:046D:C225.0009: unknown main item tag 0x6 [ 49.215603][ T60] lg-g15 0003:046D:C225.0009: unknown global tag 0xc [ 49.222749][ T60] lg-g15 0003:046D:C225.0009: item 0 1 1 12 parsing failed [ 49.230166][ T60] lg-g15: probe of 0003:046D:C225.0009 failed with error -22 [ 49.271415][ T60] usb 5-1: USB disconnect, device number 7 [ 49.346269][ T1242] loop1: detected capacity change from 0 to 4096 [ 49.466251][ T1242] EXT4-fs (loop1): Test dummy encryption mode enabled [ 49.502168][ T1242] EXT4-fs (loop1): Ignoring removed orlov option [ 49.527456][ T1242] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 49.679370][ T60] usb 6-1: USB disconnect, device number 2 [ 50.239827][ T1332] loop5: detected capacity change from 0 to 1024 [ 50.271266][ T60] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 50.323232][ T1338] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 50.346977][ T1338] ext4 filesystem being mounted at /58/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.382421][ T1332] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue. Quota mode: none. [ 50.561267][ T290] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 50.641338][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.651853][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 50.660908][ T60] usb 1-1: config 1 has no interface number 0 [ 50.667383][ T60] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.801271][ T290] usb 2-1: Using ep0 maxpacket: 16 [ 50.891490][ T1377] ================================================================== [ 50.899614][ T1377] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x635/0x6e0 [ 50.908855][ T1377] Read of size 1 at addr ffff88810dde43f8 by task syz.4.390/1377 [ 50.916863][ T1377] [ 50.919232][ T1377] CPU: 0 PID: 1377 Comm: syz.4.390 Not tainted syzkaller #0 [ 50.926616][ T1377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 50.936783][ T1377] Call Trace: [ 50.940074][ T1377] [ 50.943006][ T1377] __dump_stack+0x21/0x30 [ 50.947350][ T1377] dump_stack_lvl+0x110/0x170 [ 50.952046][ T1377] ? show_regs_print_info+0x20/0x20 [ 50.957257][ T1377] ? load_image+0x3f0/0x3f0 [ 50.961774][ T1377] print_address_description+0x7f/0x2c0 [ 50.967521][ T1377] ? xfrm_policy_inexact_list_reinsert+0x635/0x6e0 [ 50.974094][ T1377] kasan_report+0x10f/0x150 [ 50.978615][ T1377] ? xfrm_policy_inexact_list_reinsert+0x635/0x6e0 [ 50.985137][ T1377] __asan_report_load1_noabort+0x14/0x20 [ 50.990879][ T1377] xfrm_policy_inexact_list_reinsert+0x635/0x6e0 [ 50.997246][ T1377] xfrm_policy_inexact_insert_node+0x954/0xb60 [ 51.003427][ T1377] ? xfrm_netlink_rcv+0x72/0x90 [ 51.008306][ T1377] ? netlink_unicast+0x86c/0xa30 [ 51.013266][ T1377] ? netlink_sendmsg+0x879/0xb80 [ 51.018229][ T1377] ? ____sys_sendmsg+0x5be/0x8f0 [ 51.023184][ T1377] ? ___sys_sendmsg+0x236/0x2e0 [ 51.028056][ T1377] ? __x64_sys_sendmsg+0x201/0x2d0 [ 51.033328][ T1377] xfrm_policy_inexact_alloc_chain+0x540/0xb40 [ 51.039509][ T1377] xfrm_policy_inexact_insert+0x6a/0x1190 [ 51.045254][ T1377] ? __kasan_check_write+0x14/0x20 [ 51.050387][ T1377] ? _raw_spin_lock_bh+0x94/0xf0 [ 51.055342][ T1377] xfrm_policy_insert+0x12c/0x9c0 [ 51.060385][ T1377] xfrm_add_policy+0x4e1/0x840 [ 51.065160][ T1377] ? xfrm_dump_sa_done+0xc0/0xc0 [ 51.070109][ T1377] xfrm_user_rcv_msg+0x559/0x7f0 [ 51.075570][ T1377] ? xfrm_netlink_rcv+0x90/0x90 [ 51.080438][ T1377] ? avc_has_perm_noaudit+0x490/0x490 [ 51.085837][ T1377] ? x64_sys_call+0x4b/0x9a0 [ 51.090431][ T1377] ? selinux_nlmsg_lookup+0x233/0x440 [ 51.095810][ T1377] netlink_rcv_skb+0x1e9/0x430 [ 51.100578][ T1377] ? xfrm_netlink_rcv+0x90/0x90 [ 51.105429][ T1377] ? netlink_ack+0xb10/0xb10 [ 51.110027][ T1377] ? wait_for_completion_killable_timeout+0x10/0x10 [ 51.116712][ T1377] ? __netlink_lookup+0x387/0x3b0 [ 51.121747][ T1377] xfrm_netlink_rcv+0x72/0x90 [ 51.126425][ T1377] netlink_unicast+0x86c/0xa30 [ 51.131193][ T1377] netlink_sendmsg+0x879/0xb80 [ 51.135971][ T1377] ? netlink_getsockopt+0x530/0x530 [ 51.141192][ T1377] ? alloc_file+0x59/0x580 [ 51.145632][ T1377] ? security_socket_sendmsg+0x82/0xa0 [ 51.151097][ T1377] ? netlink_getsockopt+0x530/0x530 [ 51.156302][ T1377] ____sys_sendmsg+0x5be/0x8f0 [ 51.161071][ T1377] ? __sys_sendmsg_sock+0x40/0x40 [ 51.166101][ T1377] ? import_iovec+0x7c/0xb0 [ 51.170610][ T1377] ___sys_sendmsg+0x236/0x2e0 [ 51.175295][ T1377] ? __sys_sendmsg+0x280/0x280 [ 51.180110][ T1377] ? percpu_counter_add_batch+0x13c/0x160 [ 51.185929][ T1377] ? __fdget+0x1a1/0x230 [ 51.190179][ T1377] __x64_sys_sendmsg+0x201/0x2d0 [ 51.195131][ T1377] ? ___sys_sendmsg+0x2e0/0x2e0 [ 51.200075][ T1377] ? __kasan_check_write+0x14/0x20 [ 51.205207][ T1377] ? switch_fpu_return+0x15d/0x2c0 [ 51.210341][ T1377] x64_sys_call+0x4b/0x9a0 [ 51.214772][ T1377] do_syscall_64+0x4c/0xa0 [ 51.219752][ T1377] ? clear_bhb_loop+0x50/0xa0 [ 51.224438][ T1377] ? clear_bhb_loop+0x50/0xa0 [ 51.229120][ T1377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.235027][ T1377] RIP: 0033:0x7f8f74598e59 [ 51.239454][ T1377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.259161][ T1377] RSP: 002b:00007f8f72ff2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.267596][ T1377] RAX: ffffffffffffffda RBX: 00007f8f74820fa0 RCX: 00007f8f74598e59 [ 51.275581][ T1377] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 51.283555][ T1377] RBP: 00007f8f7462ee6f R08: 0000000000000000 R09: 0000000000000000 [ 51.291528][ T1377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.299505][ T1377] R13: 00007f8f74821038 R14: 00007f8f74820fa0 R15: 00007ffd771de488 [ 51.307499][ T1377] [ 51.310530][ T1377] [ 51.312865][ T1377] Allocated by task 1377: [ 51.317193][ T1377] __kasan_kmalloc+0xd4/0x100 [ 51.321887][ T1377] __kmalloc+0x13d/0x2c0 [ 51.326231][ T1377] sk_prot_alloc+0xed/0x320 [ 51.330757][ T1377] sk_alloc+0x38/0x430 [ 51.334853][ T1377] pfkey_create+0x12a/0x650 [ 51.339381][ T1377] __sock_create+0x38d/0x7a0 [ 51.343979][ T1377] __sys_socket+0xec/0x190 [ 51.348400][ T1377] __x64_sys_socket+0x7a/0x90 [ 51.353080][ T1377] x64_sys_call+0x8c5/0x9a0 [ 51.357591][ T1377] do_syscall_64+0x4c/0xa0 [ 51.362115][ T1377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.368030][ T1377] [ 51.370354][ T1377] The buggy address belongs to the object at ffff88810dde4000 [ 51.370354][ T1377] which belongs to the cache kmalloc-1k of size 1024 [ 51.384532][ T1377] The buggy address is located 1016 bytes inside of [ 51.384532][ T1377] 1024-byte region [ffff88810dde4000, ffff88810dde4400) [ 51.391360][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.398029][ T1377] The buggy address belongs to the page: [ 51.398043][ T1377] page:ffffea0004377800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10dde0 [ 51.398067][ T1377] head:ffffea0004377800 order:3 compound_mapcount:0 compound_pincount:0 [ 51.398082][ T1377] flags: 0x4000000000010200(slab|head|zone=1) [ 51.407502][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.412912][ T1377] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 51.412936][ T1377] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 51.412945][ T1377] page dumped because: kasan: bad access detected [ 51.412954][ T1377] page_owner tracks the page as allocated [ 51.412959][ T1377] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 286, ts 23496300290, free_ts 23359309327 [ 51.423432][ T60] usb 1-1: Product: syz [ 51.431519][ T1377] post_alloc_hook+0x192/0x1b0 [ 51.431551][ T1377] prep_new_page+0x1c/0x110 [ 51.431569][ T1377] get_page_from_freelist+0x2c3a/0x2cd0 [ 51.437832][ T60] usb 1-1: Manufacturer: syz [ 51.445568][ T1377] __alloc_pages+0x1a2/0x460 [ 51.445601][ T1377] new_slab+0xa0/0x4d0 [ 51.445614][ T1377] ___slab_alloc+0x3ac/0x840 [ 51.454405][ T60] usb 1-1: SerialNumber: syz [ 51.462743][ T1377] __slab_alloc+0x49/0x90 [ 51.462768][ T1377] __kmalloc_track_caller+0x169/0x2c0 [ 51.501786][ T60] usb 1-1: selecting invalid altsetting 1 [ 51.502714][ T1377] __alloc_skb+0x210/0x730 [ 51.554848][ T1377] rtmsg_fib+0x5fe/0xe20 [ 51.559109][ T1377] fib_table_insert+0xb76/0x1e80 [ 51.564047][ T1377] fib_add_ifaddr+0x879/0xdb0 [ 51.568731][ T1377] fib_netdev_event+0x22e/0x5b0 [ 51.573592][ T1377] raw_notifier_call_chain+0x90/0x100 [ 51.579057][ T1377] __dev_notify_flags+0x2f4/0x5b0 [ 51.584086][ T1377] dev_change_flags+0xe3/0x1a0 [ 51.588866][ T1377] page last free stack trace: [ 51.593535][ T1377] free_unref_page_prepare+0x5fa/0x600 [ 51.598999][ T1377] free_unref_page+0xae/0x540 [ 51.603683][ T1377] __free_pages+0x6c/0x100 [ 51.608106][ T1377] __free_slab+0xe5/0x1e0 [ 51.612440][ T1377] discard_slab+0x29/0x40 [ 51.616769][ T1377] __slab_free+0x211/0x290 [ 51.621192][ T1377] ___cache_free+0x104/0x120 [ 51.625782][ T1377] qlink_free+0x4d/0x90 [ 51.629936][ T1377] qlist_free_all+0x5f/0xb0 [ 51.634433][ T1377] kasan_quarantine_reduce+0x14a/0x170 [ 51.639892][ T1377] __kasan_slab_alloc+0x2f/0xe0 [ 51.644743][ T1377] slab_post_alloc_hook+0x4f/0x2b0 [ 51.649854][ T1377] kmem_cache_alloc+0xf7/0x260 [ 51.654619][ T1377] __alloc_skb+0xe4/0x730 [ 51.658949][ T1377] rtmsg_ifinfo_build_skb+0x75/0x180 [ 51.664235][ T1377] rtmsg_ifinfo+0x7a/0x130 [ 51.668654][ T1377] [ 51.670968][ T1377] Memory state around the buggy address: [ 51.676588][ T1377] ffff88810dde4280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.684644][ T1377] ffff88810dde4300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.692700][ T1377] >ffff88810dde4380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 51.700753][ T1377] ^ [ 51.708722][ T1377] ffff88810dde4400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.716783][ T1377] ffff88810dde4480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.724838][ T1377] ================================================================== [ 51.732889][ T1377] Disabling lock debugging due to kernel taint [ 51.749310][ T1372] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 51.773134][ T1372] EXT4-fs (loop5): 1 truncate cleaned up [ 51.778814][ T1372] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 51.801614][ T290] usb 2-1: config 0 interface 0 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 51.815639][ T290] usb 2-1: config 0 interface 0 has no altsetting 0 [ 51.822484][ T290] usb 2-1: New USB device found, idVendor=056a, idProduct=0034, bcdDevice= 0.00 [ 51.831728][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.862209][ T290] usb 2-1: config 0 descriptor?? [ 51.981297][ T60] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 51.987349][ T60] cdc_ncm 1-1:1.1: bind() failure [ 52.328549][ T1382] kernel profiling enabled (shift: 6) [ 52.342778][ T290] wacom 0003:056A:0034.000A: unknown main item tag 0x0 [ 52.349724][ T290] wacom 0003:056A:0034.000A: unknown main item tag 0x6 [ 52.356676][ T290] wacom 0003:056A:0034.000A: unknown main item tag 0x0 [ 52.363580][ T290] wacom 0003:056A:0034.000A: unknown main item tag 0x0 [ 52.370444][ T290] wacom 0003:056A:0034.000A: unknown main item tag 0x0 [ 52.377396][ T290] wacom 0003:056A:0034.000A: unknown main item tag 0x0 [ 52.384818][ T290] wacom 0003:056A:0034.000A: unknown main item tag 0x0 [ 52.391723][ T290] wacom 0003:056A:0034.000A: unknown main item tag 0x0 [ 52.398649][ T290] wacom 0003:056A:0034.000A: unknown main item tag 0x0 [ 52.405790][ T290] wacom 0003:056A:0034.000A: unknown main item tag 0x0 [ 52.412706][ T290] wacom 0003:056A:0034.000A: unknown main item tag 0x0 [ 52.420516][ T290] wacom 0003:056A:0034.000A: hidraw0: USB HID v0.81 Device [HID 056a:0034] on usb-dummy_hcd.1-1/input0 [ 52.543648][ T312] usb 2-1: USB disconnect, device number 6 [ 53.351424][ T312] usb 1-1: USB disconnect, device number 5