last executing test programs: 18.605090855s ago: executing program 2 (id=22): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$FIONCLEX(r1, 0x5450) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x4ff1, 0x0) clock_adjtime(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 18.521786647s ago: executing program 2 (id=23): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xed) rmdir(&(0x7f0000000280)='./file0/file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') 17.179856182s ago: executing program 2 (id=26): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 17.031033997s ago: executing program 2 (id=27): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000c80)={[{@init_itable}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@quota}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$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") close(0xffffffffffffffff) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 16.177512879s ago: executing program 2 (id=30): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 15.262010753s ago: executing program 2 (id=39): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0x1, 0x2, 0x10001}}}}}, 0x0) 14.811113036s ago: executing program 32 (id=39): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0x1, 0x2, 0x10001}}}}}, 0x0) 4.209424878s ago: executing program 5 (id=104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, 0xa8, 0x3, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket(0x2, 0x3, 0xff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) socket$netlink(0x10, 0x3, 0x0) 3.849551408s ago: executing program 5 (id=106): close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200c00, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89"], 0x0) 3.705885692s ago: executing program 0 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x289a2400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.759026006s ago: executing program 0 (id=118): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/stat\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000001c40)={0x2020}, 0x2020) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 2.139143423s ago: executing program 4 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.111107574s ago: executing program 4 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40) 2.041197066s ago: executing program 4 (id=125): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80) userfaultfd(0x801) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127e", 0x4e) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) waitid(0x0, r1, &(0x7f0000000100), 0x41000004, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) 2.041029766s ago: executing program 1 (id=126): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001040)=@broute={'broute\x00', 0x20, 0x2, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000d80], 0x0, 0x0, &(0x7f0000000d80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0xc, 0x36, 0x8917, 'pim6reg\x00', 'veth1_to_hsr\x00', 'ip6erspan0\x00', 'hsr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0xff, 0xff, 0xff], @random="e729590bc52c", [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}]}, 0x1a6) 2.022904426s ago: executing program 1 (id=127): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x7b8, &(0x7f0000000880)="$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") 1.849670151s ago: executing program 0 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) 1.713671804s ago: executing program 4 (id=130): syz_read_part_table(0x5cc, &(0x7f0000000100)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) 1.707243865s ago: executing program 0 (id=131): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.649584496s ago: executing program 1 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10001, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4090}, 0x24044804) 1.410467473s ago: executing program 1 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000240007"], 0x38}}, 0x0) 1.285913756s ago: executing program 5 (id=134): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8) modify_ldt$write2(0x11, &(0x7f0000000200)={0x7, 0x20000800, 0x9d2b114a5b3c4749, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) 1.209565828s ago: executing program 4 (id=135): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xf, 0xfff3}, {0x0, 0xfff3}, {0x5, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.209365288s ago: executing program 5 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='errors=continue,checkpoint_merge,alloc_mode=default,active_logs=6,acl,fault_injection=00000000000000001262,acl,noacl,compress_cache,alloc_mode=default,noextent_cache,compress_cache,mode=lfs,\x00\x00\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x84042, 0x1df2a23c5997fa5f) read$rfkill(r0, 0x0, 0x0) 1.209258328s ago: executing program 1 (id=137): r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) wait4(0x0, 0x0, 0x8, 0x0) 1.147777649s ago: executing program 4 (id=138): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.050090462s ago: executing program 1 (id=139): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x35, {0x35, 0x5, "908925b570843634c17c754fd047cdf2eb037b13eba495b8813a8ed68c719a273dba02cd74c077dab3e6e811d42374b7285873"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}, &(0x7f0000000140)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf00, 0x1, [0xffffcf, 0xff0000, 0xf, 0x3f00, 0xc000]}, @ssp_cap={0x20, 0x10, 0xa, 0xc, 0x5, 0x1ff, 0xf000, 0x5, [0xff0030, 0xc0, 0xc030, 0xff0000, 0x0]}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x8, 0x6, "edeb7c6e", "1aa50e7e"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x5, 0xc, 0x52, 0x4, 0x9}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x31, 0x5f, "d45d4ef98b85a30c65ff51385406cc5577858326cb35f39d26b39ea41a018e4ba1976ec4b1420b666f4dc045a0ae4defc43a0ce3c2fc2a1a3f74ee2a3a356277f1ad6afd6509db2acc334aa5fa5731773f9c83c00ebaeeaa875c9db7d91b08"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1000, 0x10}}, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xea}, &(0x7f0000000580)={0x40, 0xb, 0x2, "8441"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x128}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000680)={0x40, 0x19, 0x2, '#e'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xd9}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x1a}}) syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x124002) 1.010674983s ago: executing program 5 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x360, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) keyctl$clear(0x3, 0xfffffffffffffffd) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x190) ioctl$TCSETS(r3, 0x40045431, 0x0) dup3(0xffffffffffffffff, r3, 0x80000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 781.573039ms ago: executing program 3 (id=141): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000002680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f050000000500000000eaffff03000000002e00000030"], &(0x7f0000000040)=""/235, 0x37, 0xeb, 0xa, 0x7e8}, 0x28) 675.032112ms ago: executing program 3 (id=142): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x4, 0x40, 0x7fff0000}]}) 599.276404ms ago: executing program 3 (id=143): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001680)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) 573.941655ms ago: executing program 0 (id=144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800801, &(0x7f0000000080), 0x3, 0x53c, &(0x7f0000000500)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) 573.655525ms ago: executing program 3 (id=145): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000140)={[{@inlinecrypt}, {@stripe={'stripe', 0x3d, 0xa7}}]}, 0x3, 0x465, &(0x7f0000000940)="$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") 517.510316ms ago: executing program 0 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 348.568631ms ago: executing program 3 (id=147): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r1, 0xcdc09acceafb60d5, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x27}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 280.573063ms ago: executing program 3 (id=148): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) 0s ago: executing program 5 (id=149): shutdown(0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x5}}]}}]}, 0x48}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0xffffffffffffffff, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 22.740663][ T30] audit: type=1400 audit(1785518083.266:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.744114][ T277] cgroup: Unknown subsys name 'net' [ 22.763349][ T30] audit: type=1400 audit(1785518083.266:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.790767][ T30] audit: type=1400 audit(1785518083.296:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.791167][ T277] cgroup: Unknown subsys name 'devices' [ 22.939175][ T277] cgroup: Unknown subsys name 'hugetlb' [ 22.944819][ T277] cgroup: Unknown subsys name 'rlimit' [ 23.114605][ T30] audit: type=1400 audit(1785518083.636:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.138342][ T30] audit: type=1400 audit(1785518083.636:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.155874][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.163853][ T30] audit: type=1400 audit(1785518083.636:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.194920][ T30] audit: type=1400 audit(1785518083.696:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.220543][ T30] audit: type=1400 audit(1785518083.696:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.253707][ T30] audit: type=1400 audit(1785518083.776:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.279336][ T30] audit: type=1400 audit(1785518083.776:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.279371][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.098828][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.105902][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.113429][ T285] device bridge_slave_0 entered promiscuous mode [ 24.121425][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.128535][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.135880][ T285] device bridge_slave_1 entered promiscuous mode [ 24.161025][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.168170][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.175619][ T286] device bridge_slave_0 entered promiscuous mode [ 24.183579][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.190686][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.198168][ T286] device bridge_slave_1 entered promiscuous mode [ 24.278397][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.285462][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.292978][ T287] device bridge_slave_0 entered promiscuous mode [ 24.315598][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.322730][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.330191][ T287] device bridge_slave_1 entered promiscuous mode [ 24.356838][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.363958][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.371455][ T289] device bridge_slave_0 entered promiscuous mode [ 24.380249][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.387388][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.394765][ T289] device bridge_slave_1 entered promiscuous mode [ 24.434582][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.441930][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.449436][ T288] device bridge_slave_0 entered promiscuous mode [ 24.456516][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.463635][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.471074][ T288] device bridge_slave_1 entered promiscuous mode [ 24.533314][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.540419][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.547757][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.554797][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.562958][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.570030][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.577345][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.584380][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.631223][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.638339][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.645615][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.652677][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.701228][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.708366][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.715647][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.722708][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.742105][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.749744][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.757353][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.764686][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.771849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.779429][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.786760][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.794338][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.801543][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.814587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.833400][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.841772][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.848846][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.857786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.865200][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.874096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.882282][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.889345][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.899269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.907828][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.914866][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.935466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.943695][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.950775][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.959178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.967408][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.974449][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.981874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.996341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.007667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.015678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.024131][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.031216][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.039911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.057525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.065667][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.072762][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.080191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.089299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.110030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.118668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.126864][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.134015][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.141597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.149875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.158133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.166133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.174146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.182198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.190210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.198229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.206129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.213734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.223272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.231709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.248640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.257311][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.265463][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.272553][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.280244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.288628][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.296791][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.303863][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.315428][ T287] device veth0_vlan entered promiscuous mode [ 25.327838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.335891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.344306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.352685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.360894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.369151][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.377172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.385534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.394109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.401663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.420440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.428865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.438116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.446439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.454870][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.463608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.474497][ T287] device veth1_macvtap entered promiscuous mode [ 25.485609][ T286] device veth0_vlan entered promiscuous mode [ 25.495440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.503313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.511613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.519927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.527995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.536025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.543615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.551337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.558903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.567039][ T285] device veth0_vlan entered promiscuous mode [ 25.578691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.587097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.601626][ T285] device veth1_macvtap entered promiscuous mode [ 25.611190][ T286] device veth1_macvtap entered promiscuous mode [ 25.623237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.631469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.639864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.648328][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.656618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.665045][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.673439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.681222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.689465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.697814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.705417][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.713579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.721491][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.729746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.737295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.744724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.752599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.760820][ T288] device veth0_vlan entered promiscuous mode [ 25.770402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.778824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.788569][ T289] device veth0_vlan entered promiscuous mode [ 25.806650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.809940][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 25.816423][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.831382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.840431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.859896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.868312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.877813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.886424][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.898644][ T288] device veth1_macvtap entered promiscuous mode [ 25.911713][ T289] device veth1_macvtap entered promiscuous mode [ 25.954558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.989181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.038508][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.050360][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.447936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.521549][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.565898][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.612027][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.901597][ T329] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 27.140194][ T356] loop0: detected capacity change from 0 to 128 [ 27.217068][ T306] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.224878][ T358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 27.270582][ T362] syz.2.22 uses obsolete (PF_INET,SOCK_PACKET) [ 27.279059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.351869][ T365] loop2: detected capacity change from 0 to 512 [ 27.387114][ T329] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 27.395873][ T329] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 27.511355][ T365] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 27.523575][ T365] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 27.535184][ T365] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.23: Corrupt directory, running e2fsck is recommended [ 27.558042][ T365] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 27.567748][ T365] EXT4-fs error (device loop2): ext4_iget_extra_inode:4604: inode #15: comm syz.2.23: corrupted in-inode xattr [ 27.585775][ T365] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.23: couldn't read orphan inode 15 (err -117) [ 27.600126][ T365] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 27.769729][ T365] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 28.451658][ T306] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 28.462355][ T365] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 28.473315][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.481665][ T365] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.23: Corrupt directory, running e2fsck is recommended [ 28.506113][ T306] usb 2-1: Product: syz [ 28.510605][ T306] usb 2-1: Manufacturer: syz [ 28.515243][ T306] usb 2-1: SerialNumber: syz [ 28.521087][ T372] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 28.536946][ T306] usb 2-1: config 0 descriptor?? [ 28.544790][ T372] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 28.556059][ T372] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.23: Corrupt directory, running e2fsck is recommended [ 28.576063][ T365] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 28.592976][ T365] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 28.603495][ T365] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.23: Corrupt directory, running e2fsck is recommended [ 28.621021][ T365] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 28.657223][ T329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 28.666699][ T329] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 28.691167][ T375] process 'syz.0.25' launched '/dev/fd/-1' with NULL argv: empty string added [ 28.749193][ T377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 28.774499][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 28.774514][ T30] audit: type=1400 audit(1785518089.296:130): avc: denied { create } for pid=379 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.795408][ T380] loop2: detected capacity change from 0 to 1024 [ 28.801994][ T30] audit: type=1400 audit(1785518089.306:131): avc: denied { ioctl } for pid=379 comm="syz.2.27" path="socket:[15333]" dev="sockfs" ino=15333 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.941739][ T380] EXT4-fs (loop2): Ignoring removed bh option [ 29.001064][ T380] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 29.009971][ T380] System zones: 0-1, 3-12 [ 29.039374][ T380] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,dioread_lock,barrier=0x0000000000000004,nolazytime,quota,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: writeback. [ 29.084287][ T329] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 29.093438][ T329] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 29.101498][ T329] usb 4-1: Product: syz [ 29.105696][ T329] usb 4-1: Manufacturer: syz [ 29.163473][ T329] cdc_wdm 4-1:1.0: skipping garbage [ 29.168916][ T329] cdc_wdm 4-1:1.0: skipping garbage [ 29.174859][ T329] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 29.284375][ T30] audit: type=1400 audit(1785518089.806:132): avc: denied { write } for pid=379 comm="syz.2.27" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.310834][ T30] audit: type=1400 audit(1785518089.806:133): avc: denied { add_name } for pid=379 comm="syz.2.27" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.331393][ T30] audit: type=1400 audit(1785518089.806:134): avc: denied { create } for pid=379 comm="syz.2.27" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 29.366016][ T30] audit: type=1400 audit(1785518089.826:135): avc: denied { mounton } for pid=379 comm="syz.2.27" path="/4/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.393254][ T306] usb 4-1: USB disconnect, device number 2 [ 29.416361][ T30] audit: type=1400 audit(1785518089.836:136): avc: denied { write } for pid=379 comm="syz.2.27" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 29.438002][ T30] audit: type=1400 audit(1785518089.836:137): avc: denied { add_name } for pid=379 comm="syz.2.27" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 29.458345][ T30] audit: type=1400 audit(1785518089.836:138): avc: denied { setattr } for pid=379 comm="syz.2.27" name="work" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 29.480036][ T30] audit: type=1400 audit(1785518089.836:139): avc: denied { create } for pid=379 comm="syz.2.27" name="#1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.658935][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.681566][ T369] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.782498][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 29.792536][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.815464][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 29.822562][ T288] EXT4-fs error (device loop2): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 29.846070][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 29.875142][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.901543][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.925341][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 29.932634][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.978554][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 30.008140][ T288] EXT4-fs error (device loop2): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 30.029944][ T329] usb 2-1: USB disconnect, device number 2 [ 30.037350][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 30.044031][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.064316][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 30.086575][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 30.087332][ T369] usb 5-1: Using ep0 maxpacket: 8 [ 30.098400][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 30.125101][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 30.131937][ T288] EXT4-fs error (device loop2): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 30.159404][ T403] loop3: detected capacity change from 0 to 4096 [ 30.166026][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 30.172882][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.187407][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 30.209586][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 30.216604][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.231713][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.247112][ T369] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 30.255365][ T369] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 30.264743][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.265739][ T369] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 30.283856][ T403] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 30.290704][ T369] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 30.307918][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.311291][ T369] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 30.337390][ T369] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 30.345347][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.347695][ T369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.366250][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.390065][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.577148][ T329] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.599201][ T288] syz-executor (288) used greatest stack depth: 22024 bytes left [ 30.696672][ T418] loop0: detected capacity change from 0 to 512 [ 30.865389][ T418] EXT4-fs error (device loop0): ext4_quota_enable:6431: comm syz.0.38: Bad quota inum: 12023, type: 1 [ 30.878428][ T418] EXT4-fs warning (device loop0): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 30.895910][ T418] EXT4-fs (loop0): mount failed [ 31.474248][ T310] device bridge_slave_1 left promiscuous mode [ 31.481638][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.492103][ T310] device bridge_slave_0 left promiscuous mode [ 31.498719][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.510653][ T310] device veth1_macvtap left promiscuous mode [ 31.517886][ T310] device veth0_vlan left promiscuous mode [ 31.840354][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.847579][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.855053][ T423] device bridge_slave_0 entered promiscuous mode [ 31.862264][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.869338][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.876764][ T423] device bridge_slave_1 entered promiscuous mode [ 31.907088][ T60] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.952701][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.959840][ T423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.967205][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.974254][ T423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.996654][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.004197][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.012373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.020001][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.029359][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.037648][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.044674][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.058269][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.066545][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.073621][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.082537][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.115655][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.174938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.187616][ T423] device veth0_vlan entered promiscuous mode [ 32.194360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.206691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.214338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.217381][ T329] usb 2-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 32.232496][ T423] device veth1_macvtap entered promiscuous mode [ 32.239025][ T329] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 32.249117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.253942][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.269140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.297091][ T407] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 32.299562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.317796][ T329] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 32.387111][ T60] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 32.397980][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.410998][ T60] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.420527][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.430904][ T60] usb 4-1: config 0 descriptor?? [ 32.457093][ T410] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 32.479888][ T60] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 32.637105][ T329] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 32.877093][ T329] usb 6-1: Using ep0 maxpacket: 32 [ 32.987136][ T60] usb 5-1: USB disconnect, device number 2 [ 33.893650][ T448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 33.977253][ T329] usb 6-1: unable to get BOS descriptor or descriptor too short [ 34.054052][ T306] usb 2-1: USB disconnect, device number 3 [ 34.060339][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 34.060352][ T30] audit: type=1400 audit(1785518094.586:163): avc: denied { create } for pid=452 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.106623][ T30] audit: type=1400 audit(1785518094.606:164): avc: denied { connect } for pid=452 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.126608][ T30] audit: type=1400 audit(1785518094.606:165): avc: denied { write } for pid=452 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.184632][ T30] audit: type=1400 audit(1785518094.706:166): avc: denied { create } for pid=450 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.203988][ T30] audit: type=1400 audit(1785518094.706:167): avc: denied { setopt } for pid=450 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.223259][ T30] audit: type=1400 audit(1785518094.706:168): avc: denied { write } for pid=450 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.300660][ T457] device batadv_slave_0 entered promiscuous mode [ 34.327546][ T30] audit: type=1400 audit(1785518094.826:169): avc: denied { ioctl } for pid=452 comm="syz.0.46" path="socket:[16690]" dev="sockfs" ino=16690 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.468688][ T30] audit: type=1400 audit(1785518094.896:170): avc: denied { mount } for pid=458 comm="syz.4.47" name="/" dev="configfs" ino=13200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 34.562310][ T329] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 34.570742][ T329] usb 6-1: config 7 has no interface number 0 [ 34.576889][ T329] usb 6-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 34.586777][ T329] usb 6-1: config 7 interface 187 has no altsetting 0 [ 34.590778][ T30] audit: type=1400 audit(1785518094.896:171): avc: denied { search } for pid=458 comm="syz.4.47" name="/" dev="configfs" ino=13200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 34.615767][ T30] audit: type=1400 audit(1785518094.896:172): avc: denied { write } for pid=458 comm="syz.4.47" name="usb_gadget" dev="configfs" ino=13201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 34.619925][ T461] tmpfs: Unknown parameter 'usrquota' [ 34.827319][ T329] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 34.838089][ T329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.846181][ T329] usb 6-1: Product: syz [ 34.855521][ T329] usb 6-1: Manufacturer: syz [ 34.860451][ T329] usb 6-1: SerialNumber: syz [ 34.929384][ T452] device batadv_slave_0 left promiscuous mode [ 35.027948][ T306] usb 4-1: USB disconnect, device number 3 [ 35.672572][ T501] loop0: detected capacity change from 0 to 40427 [ 35.687155][ T369] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.742380][ T501] ======================================================= [ 35.742380][ T501] WARNING: The mand mount option has been deprecated and [ 35.742380][ T501] and is ignored by this kernel. Remove the mand [ 35.742380][ T501] option from the mount to silence this warning. [ 35.742380][ T501] ======================================================= [ 35.790800][ T501] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.824350][ T501] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 35.997070][ T369] usb 4-1: Using ep0 maxpacket: 16 [ 36.127535][ T369] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 36.743157][ T20] usb 6-1: USB disconnect, device number 2 [ 36.762068][ T369] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 36.777983][ T369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.786047][ T369] usb 4-1: Product: syz [ 36.790570][ T369] usb 4-1: Manufacturer: syz [ 36.795271][ T369] usb 4-1: SerialNumber: syz [ 36.800863][ T369] r8152-cfgselector 4-1: config 0 descriptor?? [ 36.866771][ T532] loop4: detected capacity change from 0 to 4096 [ 36.886755][ T532] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 36.953817][ T528] loop5: detected capacity change from 0 to 40427 [ 37.077107][ T369] r8152-cfgselector 4-1: Unknown version 0x0000 [ 37.088641][ T528] F2FS-fs (loop5): Found nat_bits in checkpoint [ 37.137270][ T369] r8152-cfgselector 4-1: Unknown version 0x0020 [ 37.145723][ T369] r8152-cfgselector 4-1: bad CDC descriptors [ 37.158143][ T528] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 37.438080][ T550] loop0: detected capacity change from 0 to 1024 [ 37.457190][ T369] r8152-cfgselector 4-1: Unknown version 0x0000 [ 37.466721][ T369] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 37.478253][ T550] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.505612][ T550] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.79: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.527906][ T550] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.79: Invalid inode table block 1 in block_group 0 [ 37.541743][ T423] attempt to access beyond end of device [ 37.541743][ T423] loop5: rw=2049, want=45104, limit=40427 [ 37.554710][ T550] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 37.571480][ T550] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.79: mark_inode_dirty error [ 37.582895][ T550] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.79: Failed to acquire dquot type 0 [ 37.594568][ T550] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 37.604336][ T550] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.79: mark_inode_dirty error [ 37.615761][ T550] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 37.626287][ T550] EXT4-fs (loop0): 1 orphan inode deleted [ 37.632222][ T550] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,noblock_validity,user_xattr,max_batch_time=0x00000000000008c9,inlinecrypt,dioread_nolock,,errors=continue. Quota mode: none. [ 37.651111][ T310] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.668585][ T550] EXT4-fs (loop0): shut down requested (2) [ 37.837058][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.919255][ T563] loop4: detected capacity change from 0 to 1024 [ 38.044849][ T563] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.047126][ T514] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.105362][ T563] overlayfs: missing 'lowerdir' [ 38.110413][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 38.237459][ T26] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 38.249430][ T26] usb 2-1: config 0 has no interface number 0 [ 38.327223][ T514] usb 1-1: Using ep0 maxpacket: 8 [ 38.447142][ T26] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 38.447165][ T514] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 38.447199][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.480847][ T514] usb 1-1: config 0 has no interface number 0 [ 38.491742][ T26] usb 2-1: Product: syz [ 38.501593][ T514] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 38.524838][ T26] usb 2-1: Manufacturer: syz [ 38.529639][ T514] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 38.537134][ T26] usb 2-1: SerialNumber: syz [ 38.545687][ T579] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 38.554646][ T514] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 38.565669][ T26] usb 2-1: config 0 descriptor?? [ 38.572218][ T579] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 38.580635][ T514] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 38.585749][ T579] overlayfs: missing 'lowerdir' [ 38.702120][ T575] loop3: detected capacity change from 0 to 40427 [ 38.757582][ T575] F2FS-fs (loop3): fault_injection options not supported [ 38.769471][ T575] F2FS-fs (loop3): fault_type options not supported [ 38.776796][ T575] F2FS-fs (loop3): extra_attr or flexible_inline_xattr feature is off [ 38.797269][ T514] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 38.806609][ T514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.815004][ T514] usb 1-1: Product: syz [ 38.819323][ T514] usb 1-1: Manufacturer: syz [ 38.824024][ T514] usb 1-1: SerialNumber: syz [ 38.831562][ T514] usb 1-1: config 0 descriptor?? [ 41.044272][ T590] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 41.054077][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 41.055131][ T30] audit: type=1400 audit(1785518101.566:213): avc: denied { read } for pid=586 comm="syz.4.94" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.087707][ T30] audit: type=1400 audit(1785518101.566:214): avc: denied { open } for pid=586 comm="syz.4.94" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.112413][ T30] audit: type=1400 audit(1785518101.566:215): avc: denied { read write } for pid=584 comm="syz.5.93" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 41.127331][ T514] usb 1-1: can't set config #0, error -71 [ 41.143180][ T514] usb 1-1: USB disconnect, device number 2 [ 41.150158][ T30] audit: type=1400 audit(1785518101.566:216): avc: denied { open } for pid=584 comm="syz.5.93" path="/6/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 41.210475][ T30] audit: type=1400 audit(1785518101.566:217): avc: denied { ioctl } for pid=584 comm="syz.5.93" path="/6/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 41.287056][ T30] audit: type=1400 audit(1785518101.736:218): avc: denied { create } for pid=594 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.343800][ T30] audit: type=1400 audit(1785518101.736:219): avc: denied { bind } for pid=594 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.447451][ T30] audit: type=1400 audit(1785518101.956:220): avc: denied { block_suspend } for pid=596 comm="syz.4.97" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.787739][ T30] audit: type=1400 audit(1785518102.126:221): avc: denied { name_bind } for pid=609 comm="syz.5.102" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 41.978747][ T30] audit: type=1400 audit(1785518102.306:222): avc: denied { setopt } for pid=616 comm="syz.5.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.367036][ T514] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 42.464082][ T592] usb 2-1: USB disconnect, device number 4 [ 42.677028][ T514] usb 6-1: Using ep0 maxpacket: 16 [ 42.686294][ T640] loop3: detected capacity change from 0 to 512 [ 42.695017][ T642] loop1: detected capacity change from 0 to 512 [ 42.739817][ T642] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.757860][ T642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.768204][ T642] EXT4-fs (loop1): inodes count not valid: 1 vs 32 [ 42.798941][ T640] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 42.806121][ T640] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.818140][ T640] EXT4-fs (loop3): 1 truncate cleaned up [ 42.823924][ T640] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,usrjquota=,mblk_io_submit,,errors=continue. Quota mode: none. [ 42.857190][ T514] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.870449][ T514] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.082342][ T514] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 43.223857][ T514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.234023][ T514] usb 6-1: Product: syz [ 43.554509][ T514] usb 6-1: Manufacturer: syz [ 43.572913][ T652] loop3: detected capacity change from 0 to 40427 [ 43.589274][ T652] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 43.602137][ T652] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 43.613005][ T652] F2FS-fs (loop3): Found nat_bits in checkpoint [ 43.615163][ T514] usb 6-1: SerialNumber: syz [ 43.660922][ T652] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 43.668137][ T652] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 43.702331][ T310] attempt to access beyond end of device [ 43.702331][ T310] loop3: rw=1, want=45112, limit=40427 [ 43.769782][ T670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 43.805447][ T674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.124'. [ 43.857076][ T680] loop1: detected capacity change from 0 to 2048 [ 44.139027][ T680] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.179984][ T693] loop4: detected capacity change from 0 to 2048 [ 44.198355][ T390] loop4: p1 < > p4 < > [ 44.202562][ T390] loop4: partition table partially beyond EOD, truncated [ 44.410138][ T390] loop4: p4 start 42180 is beyond EOD, truncated [ 44.521260][ T514] usb 6-1: 0:2 : does not exist [ 44.542223][ T514] usb 6-1: USB disconnect, device number 3 [ 44.558653][ T693] loop4: p1 < > p4 < > [ 44.563661][ T693] loop4: partition table partially beyond EOD, truncated [ 44.577352][ T693] loop4: p4 start 42180 is beyond EOD, truncated [ 44.587425][ T701] netlink: 32 bytes leftover after parsing attributes in process `syz.1.133'. [ 44.680115][ T390] udevd[390]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 44.709084][ T390] udevd[390]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 44.757775][ T385] udevd[385]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.789681][ T705] loop5: detected capacity change from 0 to 40427 [ 44.802047][ T705] F2FS-fs (loop5): Unrecognized mount option "errors=continue" or missing value [ 45.067120][ T398] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 45.315016][ T730] loop3: detected capacity change from 0 to 512 [ 45.329864][ T730] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.339895][ T730] EXT4-fs (loop3): invalid inodes per group: 1883504672 [ 45.339895][ T730] [ 45.447040][ T514] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 45.549685][ T734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=734 comm=syz.3.147 [ 45.615804][ T736] loop3: detected capacity change from 0 to 512 [ 45.637213][ T398] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 45.646576][ T398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.659067][ T736] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 45.664119][ T398] usb 5-1: Product: syz [ 45.673878][ T398] usb 5-1: Manufacturer: syz [ 45.735560][ T398] usb 5-1: SerialNumber: syz [ 45.746417][ T736] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 45.763964][ T736] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.812233][ T718] syz.5.140 (718) used greatest stack depth: 21224 bytes left [ 45.837192][ T514] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 45.857036][ T514] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.867276][ T514] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 45.876606][ T514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.891493][ T514] usb 2-1: config 0 descriptor?? [ 45.910541][ T741] ================================================================== [ 45.918663][ T741] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3200 [ 45.926840][ T741] Read of size 8 at addr ffff888114a1e0c0 by task syz.5.149/741 [ 45.934466][ T741] [ 45.936790][ T741] CPU: 0 PID: 741 Comm: syz.5.149 Not tainted syzkaller #0 [ 45.943989][ T741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.954057][ T741] Call Trace: [ 45.957334][ T741] [ 45.960265][ T741] __dump_stack+0x21/0x30 [ 45.964615][ T741] dump_stack_lvl+0x110/0x170 [ 45.969288][ T741] ? show_regs_print_info+0x20/0x20 [ 45.974487][ T741] ? load_image+0x3f0/0x3f0 [ 45.978996][ T741] ? __kasan_check_read+0x11/0x20 [ 45.984034][ T741] print_address_description+0x7f/0x2c0 [ 45.989604][ T741] ? tc_setup_flow_action+0x88e/0x3200 [ 45.995065][ T741] kasan_report+0x10f/0x150 [ 45.999572][ T741] ? tc_setup_flow_action+0x88e/0x3200 [ 46.005059][ T741] __asan_report_load8_noabort+0x14/0x20 [ 46.010699][ T741] tc_setup_flow_action+0x88e/0x3200 [ 46.015993][ T741] mall_replace_hw_filter+0x2db/0x8d0 [ 46.021364][ T741] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 46.027435][ T741] ? mall_set_parms+0x520/0x520 [ 46.032284][ T741] ? tcf_exts_destroy+0xb0/0xb0 [ 46.037148][ T741] ? pcpu_alloc+0x1118/0x16f0 [ 46.041862][ T741] ? mall_set_parms+0x1e4/0x520 [ 46.046716][ T741] mall_change+0x544/0x760 [ 46.051285][ T741] ? __kasan_check_write+0x14/0x20 [ 46.056454][ T741] ? mall_get+0xa0/0xa0 [ 46.060629][ T741] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 46.066548][ T741] ? mall_get+0xa0/0xa0 [ 46.070704][ T741] tc_new_tfilter+0x13df/0x1990 [ 46.075581][ T741] ? tcf_gate_entry_destructor+0x20/0x20 [ 46.081249][ T741] ? security_capable+0x87/0xb0 [ 46.086129][ T741] ? ns_capable+0x8c/0xf0 [ 46.090484][ T741] ? netlink_net_capable+0x125/0x160 [ 46.095771][ T741] ? tcf_gate_entry_destructor+0x20/0x20 [ 46.101409][ T741] rtnetlink_rcv_msg+0x83c/0xcb0 [ 46.106351][ T741] ? preempt_schedule_irq+0xca/0x120 [ 46.111640][ T741] ? rtnetlink_bind+0x80/0x80 [ 46.116324][ T741] ? avc_has_perm_noaudit+0x390/0x490 [ 46.121702][ T741] ? memcpy+0x56/0x70 [ 46.125696][ T741] ? avc_has_perm_noaudit+0x30a/0x490 [ 46.131079][ T741] ? sysvec_reschedule_ipi+0x78/0x80 [ 46.136392][ T741] ? avc_denied+0x1b0/0x1b0 [ 46.140913][ T741] ? __stack_depot_save+0x172/0x480 [ 46.146122][ T741] ? avc_has_perm+0x163/0x250 [ 46.150824][ T741] ? avc_has_perm_noaudit+0x490/0x490 [ 46.156207][ T741] ? x64_sys_call+0x4b/0x9a0 [ 46.160803][ T741] ? selinux_nlmsg_lookup+0x39d/0x440 [ 46.166180][ T741] netlink_rcv_skb+0x1e9/0x430 [ 46.170982][ T741] ? rtnetlink_bind+0x80/0x80 [ 46.175661][ T741] ? netlink_ack+0xb10/0xb10 [ 46.180260][ T741] ? _copy_from_iter+0x4a4/0x10a0 [ 46.185461][ T741] ? __netlink_lookup+0x387/0x3b0 [ 46.190500][ T741] rtnetlink_rcv+0x1c/0x20 [ 46.194927][ T741] netlink_unicast+0x86c/0xa30 [ 46.199697][ T741] netlink_sendmsg+0x879/0xb80 [ 46.204470][ T741] ? netlink_getsockopt+0x530/0x530 [ 46.209671][ T741] ? security_socket_sendmsg+0x82/0xa0 [ 46.215134][ T741] ? netlink_getsockopt+0x530/0x530 [ 46.220377][ T741] ____sys_sendmsg+0x5be/0x8f0 [ 46.225171][ T741] ? __sys_sendmsg_sock+0x40/0x40 [ 46.230198][ T741] ? import_iovec+0x7c/0xb0 [ 46.234720][ T741] ___sys_sendmsg+0x236/0x2e0 [ 46.239401][ T741] ? __sys_sendmsg+0x280/0x280 [ 46.244166][ T741] ? sock_show_fdinfo+0xa0/0xa0 [ 46.249026][ T741] ? __fdget+0x1a1/0x230 [ 46.253272][ T741] __x64_sys_sendmsg+0x201/0x2d0 [ 46.258212][ T741] ? ___sys_sendmsg+0x2e0/0x2e0 [ 46.263085][ T741] ? __kasan_check_write+0x14/0x20 [ 46.268203][ T741] ? switch_fpu_return+0x15d/0x2c0 [ 46.273333][ T741] x64_sys_call+0x4b/0x9a0 [ 46.277760][ T741] do_syscall_64+0x4c/0xa0 [ 46.282178][ T741] ? clear_bhb_loop+0x50/0xa0 [ 46.286864][ T741] ? clear_bhb_loop+0x50/0xa0 [ 46.291563][ T741] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.297504][ T741] RIP: 0033:0x7fe5ff32d019 [ 46.301963][ T741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.321725][ T741] RSP: 002b:00007fe5fdd86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.330143][ T741] RAX: ffffffffffffffda RBX: 00007fe5ff5b4fa0 RCX: 00007fe5ff32d019 [ 46.338119][ T741] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 46.346097][ T741] RBP: 00007fe5ff3c400c R08: 0000000000000000 R09: 0000000000000000 [ 46.354109][ T741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.362106][ T741] R13: 00007fe5ff5b5038 R14: 00007fe5ff5b4fa0 R15: 00007fffcbc83e98 [ 46.370109][ T741] [ 46.373149][ T741] [ 46.375470][ T741] Allocated by task 741: [ 46.379702][ T741] __kasan_kmalloc+0xd4/0x100 [ 46.384404][ T741] __kmalloc+0x13d/0x2c0 [ 46.388650][ T741] tcf_idr_create+0x5f/0x790 [ 46.393242][ T741] tcf_idr_create_from_flags+0x61/0x70 [ 46.398851][ T741] tcf_gact_init+0x342/0x570 [ 46.403449][ T741] tcf_action_init_1+0x3fd/0x6b0 [ 46.408418][ T741] tcf_action_init+0x233/0x7a0 [ 46.413183][ T741] tcf_exts_validate+0x24a/0x580 [ 46.418122][ T741] mall_set_parms+0x48/0x520 [ 46.422734][ T741] mall_change+0x478/0x760 [ 46.427150][ T741] tc_new_tfilter+0x13df/0x1990 [ 46.432002][ T741] rtnetlink_rcv_msg+0x83c/0xcb0 [ 46.436942][ T741] netlink_rcv_skb+0x1e9/0x430 [ 46.441729][ T741] rtnetlink_rcv+0x1c/0x20 [ 46.446165][ T741] netlink_unicast+0x86c/0xa30 [ 46.450929][ T741] netlink_sendmsg+0x879/0xb80 [ 46.455726][ T741] ____sys_sendmsg+0x5be/0x8f0 [ 46.460504][ T741] ___sys_sendmsg+0x236/0x2e0 [ 46.465211][ T741] __x64_sys_sendmsg+0x201/0x2d0 [ 46.470158][ T741] x64_sys_call+0x4b/0x9a0 [ 46.474582][ T741] do_syscall_64+0x4c/0xa0 [ 46.479009][ T741] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.484911][ T741] [ 46.487240][ T741] The buggy address belongs to the object at ffff888114a1e000 [ 46.487240][ T741] which belongs to the cache kmalloc-192 of size 192 [ 46.501300][ T741] The buggy address is located 0 bytes to the right of [ 46.501300][ T741] 192-byte region [ffff888114a1e000, ffff888114a1e0c0) [ 46.515024][ T741] The buggy address belongs to the page: [ 46.520671][ T741] page:ffffea0004528780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114a1e [ 46.530918][ T741] flags: 0x4000000000000200(slab|zone=1) [ 46.536567][ T741] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100042c00 [ 46.545158][ T741] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 46.553743][ T741] page dumped because: kasan: bad access detected [ 46.560161][ T741] page_owner tracks the page as allocated [ 46.565874][ T741] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 107, ts 5772848001, free_ts 5772779036 [ 46.581674][ T741] post_alloc_hook+0x192/0x1b0 [ 46.586470][ T741] prep_new_page+0x1c/0x110 [ 46.590981][ T741] get_page_from_freelist+0x2c3a/0x2cd0 [ 46.596533][ T741] __alloc_pages+0x1a2/0x460 [ 46.601132][ T741] new_slab+0xa0/0x4d0 [ 46.605199][ T741] ___slab_alloc+0x3ac/0x840 [ 46.609787][ T741] __slab_alloc+0x49/0x90 [ 46.614137][ T741] kmem_cache_alloc_trace+0x146/0x270 [ 46.619509][ T741] kernfs_fop_open+0x375/0xbb0 [ 46.624296][ T741] do_dentry_open+0x82a/0x1010 [ 46.629063][ T741] vfs_open+0x73/0x80 [ 46.633045][ T741] path_openat+0x26e6/0x2f80 [ 46.637631][ T741] do_filp_open+0x1df/0x400 [ 46.642133][ T741] do_sys_openat2+0x15e/0x7f0 [ 46.646826][ T741] __x64_sys_openat+0x136/0x160 [ 46.651673][ T741] x64_sys_call+0x219/0x9a0 [ 46.656174][ T741] page last free stack trace: [ 46.660839][ T741] free_unref_page_prepare+0x5fa/0x600 [ 46.666319][ T741] free_unref_page+0xae/0x540 [ 46.670995][ T741] __free_pages+0x6c/0x100 [ 46.675409][ T741] free_pages+0x82/0x90 [ 46.679596][ T741] selinux_genfs_get_sid+0x20b/0x250 [ 46.684881][ T741] inode_doinit_with_dentry+0x884/0xd90 [ 46.690449][ T741] selinux_d_instantiate+0x27/0x40 [ 46.695563][ T741] security_d_instantiate+0x9e/0xf0 [ 46.700784][ T741] d_splice_alias+0x6d/0x390 [ 46.705381][ T741] kernfs_iop_lookup+0x2c2/0x310 [ 46.710348][ T741] __lookup_slow+0x2b8/0x410 [ 46.714981][ T741] lookup_slow+0x57/0x70 [ 46.719227][ T741] walk_component+0x326/0x460 [ 46.724083][ T741] path_lookupat+0x155/0x430 [ 46.728676][ T741] filename_lookup+0x21e/0x550 [ 46.733447][ T741] user_path_at_empty+0x46/0x1c0 [ 46.738392][ T741] [ 46.740716][ T741] Memory state around the buggy address: [ 46.746357][ T741] ffff888114a1df80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 46.754420][ T741] ffff888114a1e000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.762509][ T741] >ffff888114a1e080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 46.770587][ T741] ^ [ 46.776752][ T741] ffff888114a1e100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.784809][ T741] ffff888114a1e180: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.792866][ T741] ================================================================== [ 46.800966][ T741] Disabling lock debugging due to kernel taint [ 47.067562][ T26] usb 5-1: USB disconnect, device number 3 [ 47.287319][ T514] hid (null): global environment stack underflow [ 47.294928][ T514] hid-generic 0003:0C70:F0B6.0001: global environment stack underflow [ 47.303197][ T514] hid-generic 0003:0C70:F0B6.0001: item 0 1 1 11 parsing failed [ 47.311005][ T514] hid-generic: probe of 0003:0C70:F0B6.0001 failed with error -22 [ 47.489290][ T514] usb 2-1: USB disconnect, device number 5