last executing test programs: 2.693479091s ago: executing program 1 (id=231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRESOCT, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2.433176642s ago: executing program 3 (id=237): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) close(0x4) 2.372745957s ago: executing program 3 (id=238): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.352078169s ago: executing program 1 (id=239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r2) 2.34235076s ago: executing program 3 (id=240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='kfree\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2.291585853s ago: executing program 1 (id=241): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r0, 0x0, 0x0) 2.030584345s ago: executing program 3 (id=244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r2, 0x267a4e37}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000000c0)=0xb, 0x4) 1.990790628s ago: executing program 3 (id=247): mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x200008, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) 1.95828103s ago: executing program 3 (id=249): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000080904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x14, 0x1010, 0x83, 0x5, 0xb, 0xa53, 0xd, 0x9, 0x5, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.420607374s ago: executing program 1 (id=270): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.122051639s ago: executing program 1 (id=272): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 987.0221ms ago: executing program 1 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="0f22d0f20fc8b980050000b800000100ba000000000f300f01c466b8aa00b9800000c00f3235002000000f30660f683166b89f000f00d0c7442400a20248dac744240200100000c7442406000000000f011424400f0f36a0", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 607.614461ms ago: executing program 2 (id=284): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) close(r1) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/25, 0x19}], 0x1}, 0x4003) 579.671323ms ago: executing program 0 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) 577.994353ms ago: executing program 2 (id=286): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pimreg\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 537.918307ms ago: executing program 2 (id=287): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001f27df26e108b074d9b8a7d20d89cff1edc7c21e1f657a737e327789ae1e8770ad09ea52ddf908d7d6a99d7e000aad98ec09bec56c0f4cfa0582107b941ee588a7ccc923b7cf2a90f3ee0c4fee8a1b062016a084834267c1f220a24ed05fee0c965776ce444c7ec40a5cc1e4b8e765eacba50e201c"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x5, 0x2, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 526.893867ms ago: executing program 0 (id=289): setresuid(0xee01, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x4000010) recvfrom(r1, &(0x7f0000000080)=""/123, 0x7b, 0x40010110, 0x0, 0x0) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x6, 0x20, 0x9}, 0x2f) 478.587171ms ago: executing program 2 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10) getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 458.988623ms ago: executing program 4 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 443.245664ms ago: executing program 0 (id=293): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x10) 419.631246ms ago: executing program 4 (id=294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}, 0xb00}], 0x1, 0x0) 411.922987ms ago: executing program 0 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 381.975179ms ago: executing program 4 (id=296): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@noop]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x3f7, 0x4) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x1, 0x2, 0x0) 380.335299ms ago: executing program 0 (id=297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4, 0x20}]}}}}}}}, 0x0) 345.121312ms ago: executing program 4 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) 344.434772ms ago: executing program 0 (id=299): connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}, 0x4}}, 0x10) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 284.002827ms ago: executing program 4 (id=300): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640)={[{@prjquota}, {@delalloc}]}, 0xfe, 0x480, &(0x7f0000000180)="$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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 83.313413ms ago: executing program 2 (id=301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) close(r0) 49.720196ms ago: executing program 4 (id=302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x3, 0x0, 0x1000, &(0x7f0000fe5000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts. [ 24.811961][ T28] audit: type=1400 audit(1755873845.040:64): avc: denied { mounton } for pid=276 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.813479][ T276] cgroup: Unknown subsys name 'net' [ 24.834858][ T28] audit: type=1400 audit(1755873845.040:65): avc: denied { mount } for pid=276 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.862238][ T28] audit: type=1400 audit(1755873845.060:66): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.862404][ T276] cgroup: Unknown subsys name 'devices' [ 25.003959][ T276] cgroup: Unknown subsys name 'hugetlb' [ 25.009606][ T276] cgroup: Unknown subsys name 'rlimit' [ 25.114683][ T28] audit: type=1400 audit(1755873845.340:67): avc: denied { setattr } for pid=276 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.137890][ T28] audit: type=1400 audit(1755873845.340:68): avc: denied { mounton } for pid=276 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.162755][ T28] audit: type=1400 audit(1755873845.340:69): avc: denied { mount } for pid=276 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.185901][ T278] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.195095][ T28] audit: type=1400 audit(1755873845.420:70): avc: denied { relabelto } for pid=278 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.220547][ T28] audit: type=1400 audit(1755873845.420:71): avc: denied { write } for pid=278 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.233782][ T276] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.246443][ T28] audit: type=1400 audit(1755873845.460:72): avc: denied { read } for pid=276 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.280317][ T28] audit: type=1400 audit(1755873845.460:73): avc: denied { open } for pid=276 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.418520][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.425913][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.433446][ T285] device bridge_slave_0 entered promiscuous mode [ 26.441615][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.448767][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.456329][ T285] device bridge_slave_1 entered promiscuous mode [ 26.555327][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.562646][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.570067][ T288] device bridge_slave_0 entered promiscuous mode [ 26.589309][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.596398][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.603894][ T288] device bridge_slave_1 entered promiscuous mode [ 26.650483][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.657677][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.665362][ T284] device bridge_slave_0 entered promiscuous mode [ 26.682892][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.689973][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.697562][ T284] device bridge_slave_1 entered promiscuous mode [ 26.724433][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.731511][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.739046][ T287] device bridge_slave_0 entered promiscuous mode [ 26.754555][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.761621][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.769187][ T287] device bridge_slave_1 entered promiscuous mode [ 26.804396][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.811464][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.818997][ T286] device bridge_slave_0 entered promiscuous mode [ 26.837988][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.845080][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.852572][ T286] device bridge_slave_1 entered promiscuous mode [ 26.912409][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.919494][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.926814][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.933867][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.033501][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.040869][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.050380][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.057953][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.077600][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.085934][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.093024][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.100553][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.108888][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.116009][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.123439][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.131402][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.197709][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.219518][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.227902][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.235011][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.242720][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.258232][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.266508][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.274371][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.282447][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.290803][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.299203][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.306273][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.326534][ T285] device veth0_vlan entered promiscuous mode [ 27.333037][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.340979][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.348654][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.357191][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.364252][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.372000][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.410804][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.419364][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.426539][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.434803][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.443134][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.450176][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.457587][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.466399][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.474566][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.482675][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.490596][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.498842][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.505887][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.513289][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.521268][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.529662][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.546135][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.553959][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.561414][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.569060][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.578702][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.587138][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.594229][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.601797][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.610054][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.618407][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.626686][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.634858][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.647513][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.656207][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.664557][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.671617][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.680176][ T285] device veth1_macvtap entered promiscuous mode [ 27.696578][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.704436][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.712712][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.720826][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.728572][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.737536][ T288] device veth0_vlan entered promiscuous mode [ 27.751630][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.760026][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.768485][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.777159][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.793576][ T286] device veth0_vlan entered promiscuous mode [ 27.805278][ T288] device veth1_macvtap entered promiscuous mode [ 27.812582][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.820829][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.829548][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.837779][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.845859][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.854284][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.862641][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.870684][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.879073][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.887569][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.896037][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.904380][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.912440][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.919933][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.929807][ T287] device veth0_vlan entered promiscuous mode [ 27.942344][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.950353][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.958657][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.966336][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.981596][ T286] device veth1_macvtap entered promiscuous mode [ 27.994119][ T287] device veth1_macvtap entered promiscuous mode [ 28.001285][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 28.008870][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.017978][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.026438][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.036974][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.044863][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.053265][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.061912][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.070262][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.078913][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.087536][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.105111][ T284] device veth0_vlan entered promiscuous mode [ 28.120866][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.129428][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.138825][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.147787][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.156199][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.164745][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.173423][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.182316][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.190790][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.198475][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.218999][ T337] bridge0: port 3(vlan2) entered blocking state [ 28.226211][ T337] bridge0: port 3(vlan2) entered disabled state [ 28.236507][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.245014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.304517][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.317778][ T284] device veth1_macvtap entered promiscuous mode [ 28.332276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.340930][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.370738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.391079][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.404806][ T353] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 28.512461][ T369] loop3: detected capacity change from 0 to 512 [ 28.519174][ T369] ======================================================= [ 28.519174][ T369] WARNING: The mand mount option has been deprecated and [ 28.519174][ T369] and is ignored by this kernel. Remove the mand [ 28.519174][ T369] option from the mount to silence this warning. [ 28.519174][ T369] ======================================================= [ 28.563502][ T371] netlink: 'syz.1.15': attribute type 12 has an invalid length. [ 28.576174][ T369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 28.578203][ T371] netlink: 'syz.1.15': attribute type 29 has an invalid length. [ 28.593834][ T371] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15'. [ 28.615495][ T371] Zero length message leads to an empty skb [ 28.657108][ T369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.684336][ T382] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.693474][ T369] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.721989][ T383] loop0: detected capacity change from 0 to 2048 [ 28.757226][ T284] EXT4-fs (loop3): unmounting filesystem. [ 28.787625][ T383] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.860459][ T286] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 28.893594][ T286] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 28.915571][ T286] EXT4-fs (loop0): unmounting filesystem. [ 28.970873][ T407] netlink: 48 bytes leftover after parsing attributes in process `syz.4.29'. [ 28.988122][ T409] 9pnet: p9_errstr2errno: server reported unknown error len=1 [ 28.988122][ T409] . val=17587891078792 [ 28.988122][ T409] [ 29.090097][ T420] syz.3.32[420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.090178][ T420] syz.3.32[420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.229996][ T420] syz.3.32 (420) used greatest stack depth: 21280 bytes left [ 29.264118][ T441] loop4: detected capacity change from 0 to 512 [ 29.279665][ T441] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 29.299800][ T443] netlink: 96 bytes leftover after parsing attributes in process `syz.3.45'. [ 29.318182][ T441] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 29.326464][ T441] System zones: 0-2, 18-18, 34-34 [ 29.333032][ T441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.342148][ T441] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.360062][ T450] loop3: detected capacity change from 0 to 1024 [ 29.366439][ T441] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 29.366731][ T441] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32896 with max blocks 1 with error 28 [ 29.395265][ T441] EXT4-fs (loop4): This should not happen!! Data will be lost [ 29.395265][ T441] [ 29.405568][ T441] EXT4-fs (loop4): Total free blocks count 0 [ 29.413501][ T441] EXT4-fs (loop4): Free/Dirty block details [ 29.419503][ T441] EXT4-fs (loop4): free_blocks=39626 [ 29.425722][ T450] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 29.441022][ T441] EXT4-fs (loop4): dirty_blocks=1 [ 29.451869][ T441] EXT4-fs (loop4): Block reservation details [ 29.458528][ T441] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 29.482349][ T284] EXT4-fs (loop3): unmounting filesystem. [ 29.511656][ T288] EXT4-fs (loop4): unmounting filesystem. [ 29.534263][ T465] netem: change failed [ 29.832473][ T494] loop3: detected capacity change from 0 to 256 [ 29.849378][ T494] FAT-fs (loop3): bogus number of FAT sectors [ 29.855714][ T494] FAT-fs (loop3): Can't find a valid FAT filesystem [ 29.907181][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 29.907197][ T28] audit: type=1400 audit(1755873850.130:153): avc: denied { setopt } for pid=493 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.111770][ T292] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.290618][ T28] audit: type=1400 audit(1755873850.510:154): avc: denied { compute_member } for pid=516 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 30.311783][ T292] usb 5-1: Using ep0 maxpacket: 16 [ 30.318475][ T292] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 30.332798][ T292] usb 5-1: config 0 has no interface number 0 [ 30.349315][ T292] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 30.359554][ T292] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 30.404366][ T28] audit: type=1400 audit(1755873850.630:155): avc: denied { write } for pid=531 comm="syz.0.82" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.439789][ T292] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 30.472276][ T292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.480339][ T28] audit: type=1326 audit(1755873850.700:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=538 comm="syz.3.87" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f23b8ebe9 code=0x0 [ 30.503886][ T292] usb 5-1: Product: syz [ 30.508082][ T292] usb 5-1: Manufacturer: syz [ 30.513478][ T292] usb 5-1: SerialNumber: syz [ 30.523114][ T292] usb 5-1: config 0 descriptor?? [ 30.531854][ T491] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 30.545031][ T491] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 30.610906][ T28] audit: type=1400 audit(1755873850.830:157): avc: denied { create } for pid=550 comm="syz.1.90" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.635180][ T28] audit: type=1400 audit(1755873850.860:158): avc: denied { unlink } for pid=550 comm="syz.1.90" name="#1" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 30.657282][ T28] audit: type=1400 audit(1755873850.870:159): avc: denied { remount } for pid=550 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.677047][ T28] audit: type=1400 audit(1755873850.870:160): avc: denied { read append } for pid=550 comm="syz.1.90" name="file5" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.699771][ T28] audit: type=1400 audit(1755873850.870:161): avc: denied { open } for pid=550 comm="syz.1.90" path="/19/file0/file5" dev="overlay" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.723276][ T28] audit: type=1400 audit(1755873850.900:162): avc: denied { unlink } for pid=285 comm="syz-executor" name="file5" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.728319][ T346] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.758940][ T491] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 30.780576][ T491] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 30.813866][ T557] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 30.980727][ T575] loop1: detected capacity change from 0 to 4096 [ 30.994173][ T292] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 31.005639][ T346] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.016396][ T292] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 31.026861][ T346] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.039261][ T346] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 31.048793][ T292] asix: probe of 5-1:0.251 failed with error -5 [ 31.054221][ T575] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 31.056166][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.072642][ T346] usb 3-1: SerialNumber: syz [ 31.108482][ T285] EXT4-fs (loop1): unmounting filesystem. [ 31.197318][ T587] capability: warning: `syz.0.105' uses deprecated v2 capabilities in a way that may be insecure [ 31.285166][ T346] usb 3-1: 0:2 : does not exist [ 31.303688][ T346] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 31.322534][ T346] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 31.339083][ T346] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 31.359070][ T346] usb 3-1: USB disconnect, device number 2 [ 31.380283][ T603] process 'syz.0.112' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 31.520285][ T621] loop1: detected capacity change from 0 to 1024 [ 31.527240][ T621] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 31.535710][ T621] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 31.547046][ T621] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 31.557163][ T621] EXT4-fs error (device loop1): ext4_get_journal_inode:5722: inode #17: comm syz.1.120: iget: bad i_size value: 4398046511204 [ 31.570603][ T621] EXT4-fs (loop1): no journal found [ 31.576744][ T595] udevd[595]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.189547][ T645] loop3: detected capacity change from 0 to 128 [ 32.200813][ T645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.211299][ T645] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.233158][ T284] EXT4-fs (loop3): unmounting filesystem. [ 32.357755][ T657] loop1: detected capacity change from 0 to 512 [ 32.383599][ T657] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.393437][ T657] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.416479][ T657] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.135: corrupted inode contents [ 32.429159][ T657] EXT4-fs error (device loop1): ext4_dirty_inode:6121: inode #2: comm syz.1.135: mark_inode_dirty error [ 32.441078][ T657] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.135: corrupted inode contents [ 32.455783][ T664] syz.3.137 uses obsolete (PF_INET,SOCK_PACKET) [ 32.458909][ T657] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.135: mark_inode_dirty error [ 32.479503][ T657] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 32.489687][ T657] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.135: corrupted inode contents [ 32.502525][ T657] EXT4-fs error (device loop1): ext4_dirty_inode:6121: inode #2: comm syz.1.135: mark_inode_dirty error [ 32.520794][ T657] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.135: corrupted inode contents [ 32.550602][ T285] EXT4-fs (loop1): unmounting filesystem. [ 32.586420][ T673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.141'. [ 32.645689][ T681] netlink: 96 bytes leftover after parsing attributes in process `syz.1.145'. [ 32.713775][ T687] loop1: detected capacity change from 0 to 256 [ 32.734213][ T687] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.749023][ T687] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 32.759982][ T694] netlink: 'syz.2.151': attribute type 2 has an invalid length. [ 32.790856][ T687] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 32.810079][ T346] usb 5-1: USB disconnect, device number 2 [ 33.117390][ T738] syz.2.171 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.176237][ T745] netlink: 'syz.1.173': attribute type 1 has an invalid length. [ 33.177848][ T747] 9pnet: p9_errstr2errno: server reported unknown error ™^Pœ£— [ 33.238159][ T751] loop2: detected capacity change from 0 to 1024 [ 33.257083][ T751] EXT4-fs: Ignoring removed bh option [ 33.261655][ T753] loop1: detected capacity change from 0 to 512 [ 33.272002][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.280872][ T751] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.311161][ T753] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 33.330546][ T753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 33.344049][ T751] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.352545][ T753] System zones: 1-12 [ 33.357671][ T753] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.178: corrupted in-inode xattr [ 33.376458][ T753] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.178: couldn't read orphan inode 15 (err -117) [ 33.383372][ T751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'. [ 33.407557][ T287] EXT4-fs (loop2): unmounting filesystem. [ 33.411566][ T753] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.486103][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.501605][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.513606][ T771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 33.523274][ T39] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 33.539216][ T285] EXT4-fs (loop1): unmounting filesystem. [ 33.541777][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 33.554790][ T39] usb 1-1: SerialNumber: syz [ 33.613108][ T781] loop4: detected capacity change from 0 to 1024 [ 33.634655][ T781] EXT4-fs: Ignoring removed nobh option [ 33.640994][ T781] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.652580][ T786] device wireguard0 entered promiscuous mode [ 33.664271][ T781] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.709727][ T288] EXT4-fs (loop4): unmounting filesystem. [ 33.769114][ T801] loop2: detected capacity change from 0 to 2048 [ 33.783005][ T39] usb 1-1: 0:2 : does not exist [ 33.792377][ T39] usb 1-1: USB disconnect, device number 2 [ 33.815670][ T804] loop1: detected capacity change from 0 to 8192 [ 33.833588][ T801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 33.865026][ T287] EXT4-fs (loop2): unmounting filesystem. [ 33.872625][ T804] loop1: p1 p2 p3 p4[DM] [ 33.877349][ T804] loop1: p1 size 835331 extends beyond EOD, truncated [ 33.892913][ T804] loop1: p2 size 16777223 extends beyond EOD, truncated [ 33.909698][ T804] loop1: p3 start 1052673 is beyond EOD, truncated [ 33.920070][ T804] loop1: p4 size 262144 extends beyond EOD, truncated [ 33.961818][ T338] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.048529][ T825] loop4: detected capacity change from 0 to 512 [ 34.055619][ T336] udevd[336]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 34.065821][ T825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.067868][ T362] udevd[362]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 34.087217][ T492] udevd[492]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 34.115970][ T336] udevd[336]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 34.119302][ T595] udevd[595]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 34.130129][ T362] udevd[362]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 34.148002][ T825] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.162949][ T825] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.183922][ T338] usb 4-1: Using ep0 maxpacket: 16 [ 34.194382][ T338] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 34.205315][ T338] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 34.215261][ T338] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.228328][ T338] usb 4-1: config 1 interface 0 has no altsetting 0 [ 34.248751][ T338] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 34.261037][ T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.270688][ T288] EXT4-fs (loop4): unmounting filesystem. [ 34.281717][ T338] usb 4-1: Product: syz [ 34.285977][ T338] usb 4-1: Manufacturer: syz [ 34.290723][ T338] usb 4-1: SerialNumber: syz [ 34.355777][ T840] loop0: detected capacity change from 0 to 128 [ 34.401308][ T840] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.428455][ T840] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.447868][ T840] syz.0.210 (pid 840) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 34.468132][ T286] EXT4-fs (loop0): unmounting filesystem. [ 34.513462][ T338] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 34.694324][ T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 34.801088][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 34.818084][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 34.825509][ T792] usblp0:failed reading printer status (-32) [ 34.832190][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.840686][ T19] usb 4-1: USB disconnect, device number 2 [ 34.848399][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 34.858481][ T19] usblp0: removed [ 34.865907][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.882120][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.899121][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.907873][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.911729][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 34.916399][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.922403][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.939728][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.950470][ T39] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 34.959624][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.972148][ T39] usb 5-1: config 0 descriptor?? [ 35.049308][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 35.049323][ T28] audit: type=1400 audit(2000000002.460:237): avc: denied { mount } for pid=871 comm="syz.0.225" name="/" dev="configfs" ino=13814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 35.078483][ T28] audit: type=1400 audit(2000000002.460:238): avc: denied { search } for pid=871 comm="syz.0.225" name="/" dev="configfs" ino=13814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.100655][ T28] audit: type=1400 audit(2000000002.460:239): avc: denied { read } for pid=871 comm="syz.0.225" name="/" dev="configfs" ino=13814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.128762][ T28] audit: type=1400 audit(2000000002.460:240): avc: denied { open } for pid=871 comm="syz.0.225" path="/" dev="configfs" ino=13814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.186761][ T879] netlink: 176 bytes leftover after parsing attributes in process `syz.0.226'. [ 35.267548][ T887] loop1: detected capacity change from 0 to 256 [ 35.278331][ T887] FAT-fs (loop1): bogus number of FAT sectors [ 35.284781][ T887] FAT-fs (loop1): Can't find a valid FAT filesystem [ 35.381914][ T39] savu 0003:1E7D:2D5A.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 35.426218][ T28] audit: type=1400 audit(2000000002.840:241): avc: denied { bind } for pid=892 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.452776][ T28] audit: type=1400 audit(2000000002.840:242): avc: denied { setopt } for pid=892 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.529848][ T898] kvm [897]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 35.539601][ T898] kvm [897]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 35.551575][ T28] audit: type=1400 audit(2000000002.960:243): avc: denied { bind } for pid=900 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.616205][ T905] loop3: detected capacity change from 0 to 256 [ 35.626885][ T905] FAT-fs (loop3): bogus number of FAT sectors [ 35.634865][ T905] FAT-fs (loop3): Can't find a valid FAT filesystem [ 35.663925][ T338] usb 5-1: USB disconnect, device number 3 [ 35.687075][ T28] audit: type=1326 audit(2000000003.100:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=908 comm="syz.1.241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37a498ebe9 code=0x0 [ 35.787729][ T28] audit: type=1400 audit(2000000003.200:245): avc: denied { write } for pid=913 comm="syz.2.243" name="igmp" dev="proc" ino=4026532670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 35.804582][ T914] virtiofs: Unknown parameter 'always 1 V3 [ 35.804582][ T914] 010000E0 1 0:00000000 0 [ 35.804582][ T914] 18 wg0 : 1 V3 [ 35.804582][ T914] 010000E0 1 0:00000000 0 [ 35.804582][ T914] 19 wg1 : 1 V3 [ 35.804582][ T914] 010000E0 1 0:00000000 0 [ 35.804582][ T914] 20 wg2 : 1 V3 [ 35.804582][ T914] 010000E0 1 0:00000000 0 [ 35.804582][ T914] 21 veth0_to_bridge: 1 V3 [ 35.804582][ T914] 010000E0 1 0:00000000 0 [ 35.804582][ T914] 22 bridge_slave_0: 1 V3 [ 35.804582][ T914] 010000E0 1 0:00000000 0 [ 35.804582][ T914] 23 veth1_to_bridge: 1 V3 [ 35.804582][ T914] 010000E0 1 0:00000000 0 [ 35.804582][ T914] 24 bridge_slave_1: 1 V3 [ 35.804582][ T914] 010000E0 1 0:00000000 0 [ 35.804582][ T914] 25 veth0_to_bond: 1 V3 [ 35.804582][ T914] 010000E0 1 0:00000000 0 [ 35.813203][ T914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 35.976397][ T698] tipc: Subscription rejected, illegal request [ 36.068122][ T935] tmpfs: Unknown parameter 'usrquota' [ 36.108226][ T28] audit: type=1400 audit(2000000003.520:246): avc: denied { create } for pid=938 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.281754][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.372152][ T968] loop4: detected capacity change from 0 to 16 [ 36.386051][ T968] erofs: (device loop4): mounted with root inode @ nid 36. [ 36.428733][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 36.438432][ T966] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 36.455307][ T966] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 36.466113][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 36.478450][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 36.479149][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.491035][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 36.510410][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 36.530537][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 36.534102][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.550576][ T975] loop1: detected capacity change from 0 to 128 [ 36.560736][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 36.570297][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.584030][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 36.593623][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 36.602933][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 36.603434][ T975] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.613385][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 36.623301][ T19] usb 4-1: Product: syz [ 36.629904][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 36.643509][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 36.654086][ T19] usb 4-1: Manufacturer: syz [ 36.654399][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 36.666779][ T19] usb 4-1: SerialNumber: syz [ 36.668542][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 36.682268][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 36.682268][ T975] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.691484][ T966] syz.4.266: attempt to access beyond end of device [ 36.691484][ T966] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 36.736867][ T966] syz.4.266: attempt to access beyond end of device [ 36.736867][ T966] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 36.751189][ T966] syz.4.266: attempt to access beyond end of device [ 36.751189][ T966] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 36.765622][ T966] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[2639] [ 36.767204][ T982] IPv6: sit1: Disabled Multicast RS [ 36.777012][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 36.802652][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 36.822954][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 36.832381][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 36.833743][ T285] EXT4-fs (loop1): unmounting filesystem. [ 36.841448][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 36.856974][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 36.866146][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 36.875302][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 36.884578][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 36.899859][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 36.909471][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 36.921543][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 36.941136][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 36.950885][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 36.973103][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 36.984436][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 37.011314][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 37.020856][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 37.051803][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 37.068090][ T997] syz.2.277[997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.068183][ T997] syz.2.277[997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.071529][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 37.090643][ T1000] loop0: detected capacity change from 0 to 256 [ 37.108327][ T1000] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 37.128816][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 37.138340][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 37.176314][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 37.196548][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 37.222109][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 37.231378][ T966] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 37.240947][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 37.258391][ T966] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 37.267906][ T966] syz.4.266: attempt to access beyond end of device [ 37.267906][ T966] loop4: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 37.281647][ T966] syz.4.266: attempt to access beyond end of device [ 37.281647][ T966] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 37.295530][ T966] syz.4.266: attempt to access beyond end of device [ 37.295530][ T966] loop4: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 37.310219][ T966] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[5297] [ 37.628087][ T1042] xt_hashlimit: size too large, truncated to 1048576 [ 37.700171][ T1046] loop4: detected capacity change from 0 to 512 [ 37.732706][ T1046] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.300: casefold flag without casefold feature [ 37.754404][ T19] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 37.762090][ T19] cdc_ncm 4-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 37.787729][ T19] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 37.803648][ T1046] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.300: couldn't read orphan inode 15 (err -117) [ 37.854551][ T1046] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.900343][ T288] EXT4-fs (loop4): unmounting filesystem. [ 37.963887][ T19] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 37.987558][ T19] usb 4-1: USB disconnect, device number 3 [ 38.000679][ T19] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 38.123339][ T347] ================================================================== [ 38.131467][ T347] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 38.139312][ T347] Read of size 8 at addr ffff88811d032cf0 by task kworker/0:4/347 [ 38.147326][ T347] [ 38.149723][ T347] CPU: 0 PID: 347 Comm: kworker/0:4 Not tainted syzkaller #0 [ 38.157212][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.167295][ T347] Workqueue: rcu_gp process_srcu [ 38.172288][ T347] Call Trace: [ 38.175579][ T347] [ 38.178530][ T347] __dump_stack+0x21/0x24 [ 38.182897][ T347] dump_stack_lvl+0xee/0x150 [ 38.187519][ T347] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.192572][ T347] ? __list_del_entry_valid+0xa6/0x130 [ 38.198058][ T347] print_address_description+0x71/0x210 [ 38.203638][ T347] print_report+0x4a/0x60 [ 38.207995][ T347] kasan_report+0x122/0x150 [ 38.212532][ T347] ? __list_del_entry_valid+0xa6/0x130 [ 38.218014][ T347] __asan_report_load8_noabort+0x14/0x20 [ 38.223694][ T347] __list_del_entry_valid+0xa6/0x130 [ 38.229007][ T347] process_one_work+0x4b9/0xc40 [ 38.233993][ T347] worker_thread+0xa29/0x11f0 [ 38.238796][ T347] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 38.244344][ T347] ? __kthread_parkme+0x142/0x180 [ 38.249404][ T347] kthread+0x281/0x320 [ 38.253503][ T347] ? __cfi_worker_thread+0x10/0x10 [ 38.258640][ T347] ? __cfi_kthread+0x10/0x10 [ 38.263257][ T347] ret_from_fork+0x1f/0x30 [ 38.267703][ T347] [ 38.270734][ T347] [ 38.273069][ T347] Allocated by task 19: [ 38.277231][ T347] kasan_set_track+0x4b/0x70 [ 38.281845][ T347] kasan_save_alloc_info+0x25/0x30 [ 38.286999][ T347] __kasan_kmalloc+0x95/0xb0 [ 38.291623][ T347] __kmalloc_node+0xb2/0x1e0 [ 38.296248][ T347] kvmalloc_node+0x294/0x480 [ 38.300903][ T347] alloc_netdev_mqs+0x8d/0xf90 [ 38.305706][ T347] alloc_etherdev_mqs+0x37/0x40 [ 38.310635][ T347] usbnet_probe+0x20c/0x2780 [ 38.315428][ T347] usb_probe_interface+0x610/0xaf0 [ 38.320567][ T347] really_probe+0x2cb/0x960 [ 38.325097][ T347] __driver_probe_device+0x198/0x280 [ 38.330507][ T347] driver_probe_device+0x54/0x3e0 [ 38.335558][ T347] __device_attach_driver+0x2e9/0x4a0 [ 38.340954][ T347] bus_for_each_drv+0x183/0x210 [ 38.345825][ T347] __device_attach+0x2a2/0x400 [ 38.350644][ T347] device_initial_probe+0x1a/0x20 [ 38.355675][ T347] bus_probe_device+0xc0/0x1f0 [ 38.360488][ T347] device_add+0xb4d/0xef0 [ 38.364851][ T347] usb_set_configuration+0x19c2/0x1f10 [ 38.370323][ T347] usb_generic_driver_probe+0x91/0x150 [ 38.375835][ T347] usb_probe_device+0x159/0x270 [ 38.380685][ T347] really_probe+0x2cb/0x960 [ 38.385189][ T347] __driver_probe_device+0x198/0x280 [ 38.390500][ T347] driver_probe_device+0x54/0x3e0 [ 38.395620][ T347] __device_attach_driver+0x2e9/0x4a0 [ 38.400991][ T347] bus_for_each_drv+0x183/0x210 [ 38.405866][ T347] __device_attach+0x2a2/0x400 [ 38.410632][ T347] device_initial_probe+0x1a/0x20 [ 38.415652][ T347] bus_probe_device+0xc0/0x1f0 [ 38.420409][ T347] device_add+0xb4d/0xef0 [ 38.424735][ T347] usb_new_device+0xa70/0x1520 [ 38.429489][ T347] hub_event+0x2a5d/0x4680 [ 38.433901][ T347] process_one_work+0x71f/0xc40 [ 38.438741][ T347] worker_thread+0xa29/0x11f0 [ 38.443429][ T347] kthread+0x281/0x320 [ 38.447668][ T347] ret_from_fork+0x1f/0x30 [ 38.452084][ T347] [ 38.454401][ T347] Freed by task 19: [ 38.458197][ T347] kasan_set_track+0x4b/0x70 [ 38.462780][ T347] kasan_save_free_info+0x31/0x50 [ 38.467905][ T347] ____kasan_slab_free+0x132/0x180 [ 38.473012][ T347] __kasan_slab_free+0x11/0x20 [ 38.477769][ T347] slab_free_freelist_hook+0xc2/0x190 [ 38.483144][ T347] __kmem_cache_free+0xb7/0x1b0 [ 38.487990][ T347] kfree+0x6f/0xf0 [ 38.491720][ T347] kvfree+0x35/0x40 [ 38.495529][ T347] netdev_freemem+0x3f/0x60 [ 38.500034][ T347] netdev_release+0x7f/0xb0 [ 38.504530][ T347] device_release+0xa4/0x1d0 [ 38.509125][ T347] kobject_put+0x19d/0x280 [ 38.513625][ T347] put_device+0x1f/0x30 [ 38.517815][ T347] free_netdev+0x392/0x490 [ 38.522234][ T347] usbnet_disconnect+0x25a/0x3b0 [ 38.527174][ T347] usb_unbind_interface+0x223/0x8d0 [ 38.532369][ T347] device_release_driver_internal+0x508/0x820 [ 38.538739][ T347] device_release_driver+0x19/0x20 [ 38.543946][ T347] bus_remove_device+0x2ee/0x350 [ 38.548876][ T347] device_del+0x6a4/0xeb0 [ 38.553207][ T347] usb_disable_device+0x3a8/0x750 [ 38.558226][ T347] usb_disconnect+0x31e/0x860 [ 38.562906][ T347] hub_event+0x1bd5/0x4680 [ 38.567323][ T347] process_one_work+0x71f/0xc40 [ 38.572196][ T347] worker_thread+0xd2e/0x11f0 [ 38.576976][ T347] kthread+0x281/0x320 [ 38.581064][ T347] ret_from_fork+0x1f/0x30 [ 38.585510][ T347] [ 38.587827][ T347] Last potentially related work creation: [ 38.593537][ T347] kasan_save_stack+0x3a/0x60 [ 38.598232][ T347] __kasan_record_aux_stack+0xb6/0xc0 [ 38.603620][ T347] kasan_record_aux_stack_noalloc+0xb/0x10 [ 38.609440][ T347] insert_work+0x51/0x300 [ 38.613767][ T347] __queue_work+0x9b1/0xd30 [ 38.618267][ T347] queue_work_on+0xd2/0x140 [ 38.622948][ T347] usbnet_link_change+0x176/0x1a0 [ 38.627971][ T347] usbnet_probe+0x1d55/0x2780 [ 38.632648][ T347] usb_probe_interface+0x610/0xaf0 [ 38.638121][ T347] really_probe+0x2cb/0x960 [ 38.642627][ T347] __driver_probe_device+0x198/0x280 [ 38.647960][ T347] driver_probe_device+0x54/0x3e0 [ 38.652992][ T347] __device_attach_driver+0x2e9/0x4a0 [ 38.658363][ T347] bus_for_each_drv+0x183/0x210 [ 38.663209][ T347] __device_attach+0x2a2/0x400 [ 38.667973][ T347] device_initial_probe+0x1a/0x20 [ 38.673020][ T347] bus_probe_device+0xc0/0x1f0 [ 38.677788][ T347] device_add+0xb4d/0xef0 [ 38.682116][ T347] usb_set_configuration+0x19c2/0x1f10 [ 38.687570][ T347] usb_generic_driver_probe+0x91/0x150 [ 38.693021][ T347] usb_probe_device+0x159/0x270 [ 38.697896][ T347] really_probe+0x2cb/0x960 [ 38.702411][ T347] __driver_probe_device+0x198/0x280 [ 38.707695][ T347] driver_probe_device+0x54/0x3e0 [ 38.712716][ T347] __device_attach_driver+0x2e9/0x4a0 [ 38.718086][ T347] bus_for_each_drv+0x183/0x210 [ 38.722928][ T347] __device_attach+0x2a2/0x400 [ 38.727690][ T347] device_initial_probe+0x1a/0x20 [ 38.732712][ T347] bus_probe_device+0xc0/0x1f0 [ 38.737489][ T347] device_add+0xb4d/0xef0 [ 38.741840][ T347] usb_new_device+0xa70/0x1520 [ 38.746595][ T347] hub_event+0x2a5d/0x4680 [ 38.751005][ T347] process_one_work+0x71f/0xc40 [ 38.755848][ T347] worker_thread+0xa29/0x11f0 [ 38.760521][ T347] kthread+0x281/0x320 [ 38.764681][ T347] ret_from_fork+0x1f/0x30 [ 38.769097][ T347] [ 38.771467][ T347] The buggy address belongs to the object at ffff88811d032000 [ 38.771467][ T347] which belongs to the cache kmalloc-4k of size 4096 [ 38.785538][ T347] The buggy address is located 3312 bytes inside of [ 38.785538][ T347] 4096-byte region [ffff88811d032000, ffff88811d033000) [ 38.799151][ T347] [ 38.801553][ T347] The buggy address belongs to the physical page: [ 38.807977][ T347] page:ffffea0004740c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d030 [ 38.818233][ T347] head:ffffea0004740c00 order:3 compound_mapcount:0 compound_pincount:0 [ 38.826546][ T347] flags: 0x4000000000010200(slab|head|zone=1) [ 38.832626][ T347] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380 [ 38.841198][ T347] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 38.849783][ T347] page dumped because: kasan: bad access detected [ 38.856198][ T347] page_owner tracks the page as allocated [ 38.861988][ T347] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 104, tgid 104 (udevd), ts 30758451633, free_ts 30607373694 [ 38.883964][ T347] post_alloc_hook+0x1f5/0x210 [ 38.888820][ T347] prep_new_page+0x1c/0x110 [ 38.893344][ T347] get_page_from_freelist+0x2c7b/0x2cf0 [ 38.898886][ T347] __alloc_pages+0x1c3/0x450 [ 38.903503][ T347] alloc_slab_page+0x6e/0xf0 [ 38.908119][ T347] new_slab+0x98/0x3d0 [ 38.912196][ T347] ___slab_alloc+0x6f6/0xb50 [ 38.916801][ T347] __slab_alloc+0x5e/0xa0 [ 38.921169][ T347] __kmem_cache_alloc_node+0x203/0x2c0 [ 38.926649][ T347] kmalloc_trace+0x29/0xb0 [ 38.931097][ T347] uevent_show+0x163/0x350 [ 38.935531][ T347] dev_attr_show+0x64/0xe0 [ 38.939941][ T347] sysfs_kf_seq_show+0x280/0x3a0 [ 38.944874][ T347] kernfs_seq_show+0x12a/0x180 [ 38.949806][ T347] seq_read_iter+0x4c4/0xdd0 [ 38.954391][ T347] kernfs_fop_read_iter+0x147/0x480 [ 38.959616][ T347] page last free stack trace: [ 38.964282][ T347] free_unref_page_prepare+0x742/0x750 [ 38.969755][ T347] free_unref_page+0x8f/0x530 [ 38.974434][ T347] __free_pages+0x67/0x100 [ 38.978844][ T347] __free_slab+0xca/0x1a0 [ 38.983175][ T347] __unfreeze_partials+0x160/0x190 [ 38.988286][ T347] put_cpu_partial+0xa9/0x100 [ 38.992961][ T347] __slab_free+0x1c4/0x280 [ 38.997378][ T347] ___cache_free+0xbf/0xd0 [ 39.002223][ T347] qlist_free_all+0xc6/0x140 [ 39.006813][ T347] kasan_quarantine_reduce+0x14a/0x170 [ 39.012293][ T347] __kasan_slab_alloc+0x24/0x80 [ 39.017141][ T347] slab_post_alloc_hook+0x4f/0x2d0 [ 39.022258][ T347] __kmem_cache_alloc_node+0x192/0x2c0 [ 39.027809][ T347] __kmalloc+0xa1/0x1e0 [ 39.031975][ T347] kernfs_fop_write_iter+0x156/0x410 [ 39.037258][ T347] vfs_write+0x5db/0xca0 [ 39.041503][ T347] [ 39.043994][ T347] Memory state around the buggy address: [ 39.049801][ T347] ffff88811d032b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.057983][ T347] ffff88811d032c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.066325][ T347] >ffff88811d032c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.074397][ T347] ^ [ 39.082112][ T347] ffff88811d032d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.090168][ T347] ffff88811d032d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.098226][ T347] ================================================================== [ 39.106373][ T347] Disabling lock debugging due to kernel taint