last executing test programs: 3.878092588s ago: executing program 2 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r3) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002080)=ANY=[@ANYBLOB="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", @ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r8, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b39094bf70e06d038e7ff7fc6e5539b324b298b089b3208376d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31310d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaa8aaaaaa0180c200000008004500002800000000000690780a010101ac1414cd00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x4, 0x4}, {0x6, 0x24, 0x1a, 0xc, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0x9f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xa, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb, 0x3, 0x7}}}}}}}]}}, 0x0) 2.849266431s ago: executing program 4 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'pim6reg1\x00', @broadcast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x18) close(r0) 2.766811977s ago: executing program 4 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.741288509s ago: executing program 4 (id=260): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x2) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYRES16=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) 2.557102544s ago: executing program 4 (id=261): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, 0x0) fdatasync(r0) 2.309237674s ago: executing program 4 (id=264): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f00"], 0x54}}, 0x0) 2.309026144s ago: executing program 4 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x6a98047402e98331}, 0x14}}, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000880)) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000002ac0)='.\x00', 0x820002ca) inotify_rm_watch(r2, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 1.089338402s ago: executing program 0 (id=287): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r6, {}, {0x1}, {0x4, 0x3d}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x3c}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 875.070589ms ago: executing program 3 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xc3b, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) 789.503827ms ago: executing program 3 (id=289): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000880)={[{@nombcache}]}, 0x3, 0x4e6, &(0x7f0000001240)="$eJzs3d9rXFkdAPDvnSRt2qZNqj7UgrVoJS3amaSxbfChRhB9Kljre4zJJIRMMiEzaZtQJMU/QBB/oU8+6YPgswjSP0GEgr6LLLuU3bbLsg+7O8tM7mzT2ZlkQpNMmvl84PTec+7N/Z4z0zkz557LvQF0rYsRMRERPRFxJSIG0/JMmmJjM1X3e/7s4XQ1JVGp3H03iSQtqx8rSZen0j/rj4gf/zDiZ8nn45bW1hemCoX8SprPlReXc6W19avzi1Nz+bn80sTY6I3xm+PXx0f2rK23vv/Wb3/55x/c+ue37v9v8p3LP69WayDdtrUd7dhoc7/NpvfVXou63ohY2U2wQ6wnbU9fpysCAEBbqr/xvxARX4uIF39o3OpXHQAAABwFle8OxEdJRKVSqZyplwEAAABHSqZ2DWySyabXAgxEJpPNbl7D+6U4mSkUS+VvzhZXl2Y2r5Udir7M7HwhP5JeKzwUfUk1P1pbf5m/1pAfi4izEfHrwRO1fHa6WJjp8LkPAAAA6BanGsb/7w9ujv8BAACAI2ao0xUAAAAA9p3xPwAAABx9Lcf/Se/BVgQAAADYDz+6fbuaKvXnX8/cW1tdKN67OpMvLWQXV6ez08WV5excsThXu2ff4k7HKxSLy9+OpdUHuXK+VM6V1tYnF4urS+XJ2nO9J/OeKAgAAAAH7+xXH/83iYiN75yopapj6bY2xuoT+1s7YD9ldrd7sl/1AA5eT6crAHSMC3yhe5mPB3YY2P+mIb/L0wYAAMBhMPzl15r/Nx8IbzADeehe5v+he5n/h+5l/h+63PGdd+lvteFfbRzfWUIAADgUBmopyWTTucCByGSy2YjTtccC9CWz84X8SESciYj/DPYdr+ZHO11pAAAAAAAAAAAAAAAAAAAAAAAAAHjDVCpJVAAAAIAjLSLzdpI+omt48NJA4/mBY8mHg7VlRNz/493fPZgql1dGq+XvfVZe/n1afq0TZzAAAACARvVxen0cDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB76fmzh9P1dJBxn34vIoaaxe+N/tqy/++DEXHyRRK9W/4uiYiePYi/8SgizjWLn1SrFUMfbNaiMX4mIk4cRPxoHf/UHsSHbva42v9MNPv8ZeJibdn889ebptf19GKr/i9T7/9q/Vyz/u90mzHOP/lbrmX8RxHne5v3P/X4yWv2vz/9yfp6q22VP0UMN/3+SV6JlSsvLudKa+tX5xen5vJz+aWxsdEb4zfHr4+P5GbnC/n036YxfvWVf3yyXftPtog/tEP7L7XZ/o+fPHj2xW3iX/568/f/3Dbxq6/9N9Lvger24fr6xub6Vhf++u8LDUXHtsafadH+nd7/y222/8qdX/y/zV0BgANQWltfmCoU8itWjuxK7wHEqv9/OiRN7uqVv2wtuZO+Mbs+Tuf6JAAAYH+8/NHf6ZoAAAAAAAAAAAAAAAAAAABA93rlpl89EbHXdyM7/uqdBfo711QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG19GgAA//9UPsbW") link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 788.423147ms ago: executing program 2 (id=290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x20040054) 787.398447ms ago: executing program 0 (id=291): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d8fd8149af9faf44ad5b7b6ad1c94490d970e81143918946b559ce53bffdfdc795aac1209898e5826eda1962cf6e3c4c0ade52151923a70cb6eacfc"], 0x1, 0x177, &(0x7f0000000240)="$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") lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) 664.821937ms ago: executing program 0 (id=292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) close(0xffffffffffffffff) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 664.576796ms ago: executing program 2 (id=293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0xe03, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) 663.440906ms ago: executing program 3 (id=294): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) 613.265401ms ago: executing program 2 (id=295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x16}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 606.071511ms ago: executing program 3 (id=296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 605.941291ms ago: executing program 0 (id=297): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffffff7f00000000) close_range(r0, 0xffffffffffffffff, 0x0) 552.979565ms ago: executing program 2 (id=298): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101206, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000010000004d564b"]) 475.982382ms ago: executing program 3 (id=299): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ce, &(0x7f0000000640)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 475.737792ms ago: executing program 2 (id=300): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000140)=""/65, 0x41}], 0x1) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 438.519464ms ago: executing program 3 (id=301): syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) 434.222215ms ago: executing program 0 (id=302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 261.322609ms ago: executing program 0 (id=303): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 193.230435ms ago: executing program 1 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x90}}, 0x4000040) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 192.798544ms ago: executing program 1 (id=308): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7dffeffc) close(r1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_RATE64={0xb, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x6c}}, 0x0) remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r7 = gettid() r8 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r8, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000300)) preadv(r3, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000800)=""/151, 0x97}, {&(0x7f00000003c0)=""/92, 0x5c}], 0x5, 0x0, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) 171.266576ms ago: executing program 1 (id=309): syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x3, 0x0, 0x800}, @eol, @window={0x3, 0x3, 0x8}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @generic={0x8, 0x9, "51856b51127d90"}, @exp_fastopen={0xfe, 0xc, 0xf989, "82ffc471c71bdd64"}]}}}}}}}}, 0x0) 162.383687ms ago: executing program 1 (id=310): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0x1a22002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 105.180041ms ago: executing program 1 (id=311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xff, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x3}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x805}}]}, 0x40}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 1 (id=312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x7, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x7, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 20.639511][ T24] audit: type=1400 audit(1756524068.420:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.640553][ T267] cgroup: Unknown subsys name 'net' [ 20.662710][ T24] audit: type=1400 audit(1756524068.420:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.691653][ T24] audit: type=1400 audit(1756524068.450:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.692078][ T267] cgroup: Unknown subsys name 'devices' [ 20.833675][ T267] cgroup: Unknown subsys name 'hugetlb' [ 20.839294][ T267] cgroup: Unknown subsys name 'rlimit' [ 21.007605][ T24] audit: type=1400 audit(1756524068.790:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.032077][ T24] audit: type=1400 audit(1756524068.790:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.057712][ T24] audit: type=1400 audit(1756524068.790:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.088360][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.098004][ T24] audit: type=1400 audit(1756524068.880:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.125386][ T24] audit: type=1400 audit(1756524068.880:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.165389][ T24] audit: type=1400 audit(1756524068.950:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.191537][ T24] audit: type=1400 audit(1756524068.950:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.191565][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.010779][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.018249][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.026295][ T277] device bridge_slave_0 entered promiscuous mode [ 22.034316][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.041639][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.049961][ T277] device bridge_slave_1 entered promiscuous mode [ 22.106521][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.114076][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.122364][ T275] device bridge_slave_0 entered promiscuous mode [ 22.140804][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.148172][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.155827][ T275] device bridge_slave_1 entered promiscuous mode [ 22.174723][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.181980][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.189294][ T276] device bridge_slave_0 entered promiscuous mode [ 22.211744][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.219027][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.227094][ T276] device bridge_slave_1 entered promiscuous mode [ 22.259051][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.266532][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.274383][ T278] device bridge_slave_0 entered promiscuous mode [ 22.284628][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.292225][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.299708][ T278] device bridge_slave_1 entered promiscuous mode [ 22.324770][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.333305][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.342413][ T279] device bridge_slave_0 entered promiscuous mode [ 22.349748][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.357719][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.365378][ T279] device bridge_slave_1 entered promiscuous mode [ 22.459901][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.467348][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.474891][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.482057][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.533718][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.541115][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.548613][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.555824][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.564000][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.571514][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.579271][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.586734][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.595300][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.603085][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.615178][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.642925][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.651648][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.660468][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.667837][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.676096][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.685049][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.693645][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.701026][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.708621][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.716959][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.725217][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.733518][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.740763][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.748579][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.756875][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.764222][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.771624][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.793732][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.822962][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.833312][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.841210][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.849721][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.857059][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.864956][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.873626][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.880814][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.888688][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.898170][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.913929][ T275] device veth0_vlan entered promiscuous mode [ 22.928075][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.937516][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.945758][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.953700][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.962373][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.971282][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.980697][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.988356][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.997237][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.005989][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.013659][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.023427][ T277] device veth0_vlan entered promiscuous mode [ 23.035376][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.045649][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.064439][ T275] device veth1_macvtap entered promiscuous mode [ 23.073585][ T279] device veth0_vlan entered promiscuous mode [ 23.083092][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.091116][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.099068][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.107904][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.116405][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.125456][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.134651][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.143538][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.152356][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.160985][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.170607][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.179488][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.187819][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.196038][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.204895][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.213806][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.222102][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.245367][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.255078][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.265139][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.274710][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.286464][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.294705][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.305800][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.314636][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.332899][ T277] device veth1_macvtap entered promiscuous mode [ 23.342147][ T279] device veth1_macvtap entered promiscuous mode [ 23.358822][ T275] request_module fs-gadgetfs succeeded, but still no fs? [ 23.367989][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.378461][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.388393][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.397922][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.408936][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.418862][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.428533][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.436761][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.445342][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.454391][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.463638][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.471907][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.480137][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.489282][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.498790][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.507475][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.515887][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.524496][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.533292][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.550144][ T275] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.567556][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.577753][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.586853][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.596292][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.605798][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.614707][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.623909][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.632453][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.641122][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.651205][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.674820][ T276] device veth0_vlan entered promiscuous mode [ 23.690841][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.704712][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.714063][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.722232][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.732540][ T278] device veth0_vlan entered promiscuous mode [ 23.759121][ T276] device veth1_macvtap entered promiscuous mode [ 23.782378][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.790921][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.803291][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.810959][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.820079][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.841033][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.853113][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.873557][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.882873][ T307] ====================================================== [ 23.882873][ T307] WARNING: the mand mount option is being deprecated and [ 23.882873][ T307] will be removed in v5.15! [ 23.882873][ T307] ====================================================== [ 23.910319][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.919532][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.927912][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.934173][ T307] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 23.937014][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.958568][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.968673][ T278] device veth1_macvtap entered promiscuous mode [ 24.100746][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.101086][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.101317][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.101753][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.102059][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.707606][ T24] kauditd_printk_skb: 144 callbacks suppressed [ 26.707627][ T24] audit: type=1400 audit(1756524074.480:218): avc: denied { read } for pid=345 comm="syz.3.13" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.840506][ T24] audit: type=1400 audit(1756524074.480:219): avc: denied { open } for pid=345 comm="syz.3.13" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.880378][ T24] audit: type=1400 audit(1756524074.490:220): avc: denied { ioctl } for pid=345 comm="syz.3.13" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.979778][ T24] audit: type=1400 audit(1756524074.760:221): avc: denied { read } for pid=353 comm="syz.2.15" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.040042][ T24] audit: type=1400 audit(1756524074.790:222): avc: denied { open } for pid=353 comm="syz.2.15" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.068057][ T352] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 27.068941][ T24] audit: type=1400 audit(1756524074.790:223): avc: denied { ioctl } for pid=353 comm="syz.2.15" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.111603][ T24] audit: type=1400 audit(1756524074.810:224): avc: denied { write } for pid=353 comm="syz.2.15" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.149113][ T24] audit: type=1400 audit(1756524074.900:225): avc: denied { create } for pid=358 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.170582][ T24] audit: type=1400 audit(1756524074.920:226): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.176285][ T360] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 27.201684][ T360] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.278972][ T24] audit: type=1400 audit(1756524075.060:227): avc: denied { unlink } for pid=276 comm="syz-executor" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 27.582033][ T54] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 27.789810][ T372] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.021934][ T54] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 28.030433][ T54] usb 3-1: config 0 has no interface number 0 [ 28.048538][ T54] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01b1, bcdDevice=12.3b [ 28.076603][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.090434][ T381] netlink: 44 bytes leftover after parsing attributes in process `syz.3.21'. [ 28.101410][ T54] usb 3-1: config 0 descriptor?? [ 28.310148][ T386] FAT-fs (loop1): Directory bread(block 64) failed [ 28.317272][ T386] FAT-fs (loop1): Directory bread(block 65) failed [ 28.324022][ T386] FAT-fs (loop1): Directory bread(block 66) failed [ 28.330855][ T386] FAT-fs (loop1): Directory bread(block 67) failed [ 28.337776][ T386] FAT-fs (loop1): Directory bread(block 68) failed [ 28.344426][ T386] FAT-fs (loop1): Directory bread(block 69) failed [ 28.351394][ T386] FAT-fs (loop1): Directory bread(block 70) failed [ 28.359595][ T386] FAT-fs (loop1): Directory bread(block 71) failed [ 28.366883][ T386] FAT-fs (loop1): Directory bread(block 72) failed [ 28.374275][ T386] FAT-fs (loop1): Directory bread(block 73) failed [ 28.381859][ T54] usb 3-1: string descriptor 0 read error: -71 [ 28.390961][ T54] cdc_ether 3-1:0.8: More than one union descriptor, skipping ... [ 28.400797][ T54] usb 3-1: bad CDC descriptors [ 28.408080][ T54] ftdi_sio 3-1:0.8: FTDI USB Serial Device converter detected [ 28.418240][ T54] usb 3-1: Detected FT-X [ 28.453485][ T390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 28.671724][ T54] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 28.764413][ T54] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 28.799764][ T54] ftdi_sio 3-1:0.8: GPIO initialisation failed: -71 [ 28.808773][ T54] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 28.819578][ T54] usb 3-1: USB disconnect, device number 2 [ 28.827123][ T54] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 28.841568][ T54] ftdi_sio 3-1:0.8: device disconnected [ 29.280869][ T405] FAT-fs (loop1): Directory bread(block 64) failed [ 29.288518][ T405] FAT-fs (loop1): Directory bread(block 65) failed [ 29.297837][ T405] FAT-fs (loop1): Directory bread(block 66) failed [ 29.305373][ T405] FAT-fs (loop1): Directory bread(block 67) failed [ 29.315888][ T405] FAT-fs (loop1): Directory bread(block 68) failed [ 29.345845][ T405] FAT-fs (loop1): Directory bread(block 69) failed [ 29.371432][ T405] FAT-fs (loop1): Directory bread(block 70) failed [ 29.386458][ T405] FAT-fs (loop1): Directory bread(block 71) failed [ 29.395002][ T405] FAT-fs (loop1): Directory bread(block 72) failed [ 29.403820][ T405] FAT-fs (loop1): Directory bread(block 73) failed [ 29.581276][ T423] syz.0.31[423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.581579][ T423] syz.0.31[423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.588185][ T430] FAT-fs (loop4): Directory bread(block 64) failed [ 30.652050][ T430] FAT-fs (loop4): Directory bread(block 65) failed [ 30.680514][ T430] FAT-fs (loop4): Directory bread(block 66) failed [ 30.700750][ T430] FAT-fs (loop4): Directory bread(block 67) failed [ 30.734846][ T430] FAT-fs (loop4): Directory bread(block 68) failed [ 30.755153][ T430] FAT-fs (loop4): Directory bread(block 69) failed [ 30.791923][ T430] FAT-fs (loop4): Directory bread(block 70) failed [ 30.812008][ T430] FAT-fs (loop4): Directory bread(block 71) failed [ 30.832169][ T430] FAT-fs (loop4): Directory bread(block 72) failed [ 30.838842][ T430] FAT-fs (loop4): Directory bread(block 73) failed [ 30.891312][ T435] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 30.900537][ T435] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.970652][ T435] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.38: bg 0: block 393: padding at end of block bitmap is not set [ 30.985874][ T54] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 31.046130][ T435] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 31.229804][ T435] EXT4-fs (loop3): This should not happen!! Data will be lost [ 31.229804][ T435] [ 31.291872][ T375] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 31.875690][ T54] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.887054][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 31.906132][ T24] kauditd_printk_skb: 137 callbacks suppressed [ 31.906144][ T24] audit: type=1326 audit(1756524079.690:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=454 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 31.910764][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 31.947906][ T24] audit: type=1326 audit(1756524079.700:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=454 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 31.958567][ T54] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.001238][ T24] audit: type=1326 audit(1756524079.730:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=454 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 32.028717][ T24] audit: type=1326 audit(1756524079.730:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=454 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 32.057572][ T54] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 32.067835][ T24] audit: type=1326 audit(1756524079.730:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=454 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 32.069469][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.095514][ T24] audit: type=1326 audit(1756524079.730:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=454 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 32.118774][ T54] usb 3-1: config 0 descriptor?? [ 32.136544][ T24] audit: type=1326 audit(1756524079.730:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=454 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 32.169358][ T24] audit: type=1326 audit(1756524079.730:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=454 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 32.197360][ T24] audit: type=1326 audit(1756524079.730:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=454 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 32.223940][ T54] usb 3-1: MIDIStreaming interface descriptor not found [ 32.224504][ T24] audit: type=1326 audit(1756524079.730:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=454 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 32.269678][ T375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.300103][ T375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 32.319042][ T375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 32.331601][ T375] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.346753][ T375] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 32.347453][ T435] netlink: 6 bytes leftover after parsing attributes in process `syz.3.38'. [ 32.358163][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.398790][ T375] usb 1-1: config 0 descriptor?? [ 32.431628][ T20] usb 3-1: USB disconnect, device number 3 [ 32.442479][ T375] usb 1-1: MIDIStreaming interface descriptor not found [ 32.452573][ T460] EXT4-fs (loop4): Test dummy encryption mode enabled [ 32.460988][ T460] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.475034][ T460] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.487145][ T460] EXT4-fs (loop4): 1 truncate cleaned up [ 32.494045][ T460] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 32.504237][ T463] EXT4-fs (loop1): Test dummy encryption mode enabled [ 32.547791][ T463] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.601490][ T463] EXT4-fs (loop1): 1 truncate cleaned up [ 32.608474][ T463] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 32.703992][ T473] syz.4.46[473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.704223][ T473] syz.4.46[473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.600612][ T477] syz.1.44[477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.612681][ T477] syz.1.44[477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.624611][ C0] sched: RT throttling activated [ 34.266775][ T20] kernel write not supported for file bpf-prog (pid: 20 comm: kworker/1:0) [ 34.277207][ T475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.49'. [ 34.425011][ T280] usb 1-1: USB disconnect, device number 2 [ 34.501950][ T325] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.545310][ T486] FAT-fs (loop4): Directory bread(block 64) failed [ 34.563044][ T486] FAT-fs (loop4): Directory bread(block 65) failed [ 34.570130][ T486] FAT-fs (loop4): Directory bread(block 66) failed [ 34.577455][ T486] FAT-fs (loop4): Directory bread(block 67) failed [ 34.584733][ T486] FAT-fs (loop4): Directory bread(block 68) failed [ 34.594464][ T486] FAT-fs (loop4): Directory bread(block 69) failed [ 34.621352][ T486] FAT-fs (loop4): Directory bread(block 70) failed [ 34.628336][ T486] FAT-fs (loop4): Directory bread(block 71) failed [ 34.635516][ T486] FAT-fs (loop4): Directory bread(block 72) failed [ 34.642825][ T486] FAT-fs (loop4): Directory bread(block 73) failed [ 34.922085][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.933940][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.944626][ T325] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.958291][ T325] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.967556][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.976544][ T325] usb 3-1: config 0 descriptor?? [ 34.981870][ T319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 35.001904][ T280] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.221873][ T319] usb 4-1: Using ep0 maxpacket: 16 [ 35.242256][ T280] usb 1-1: Using ep0 maxpacket: 32 [ 35.342053][ T319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.361976][ T280] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 35.371147][ T319] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 35.384674][ T280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.402006][ T280] usb 1-1: config 0 descriptor?? [ 35.423728][ T506] EXT4-fs (loop4): Test dummy encryption mode enabled [ 35.430809][ T506] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.443316][ T325] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xe [ 35.451149][ T325] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.460025][ T325] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 35.471521][ T325] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 35.493990][ T506] EXT4-fs (loop4): 1 truncate cleaned up [ 35.500241][ T506] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 35.561950][ T319] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 35.613677][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.621732][ T319] usb 4-1: Product: syz [ 35.627022][ T319] usb 4-1: Manufacturer: syz [ 35.637624][ T319] usb 4-1: SerialNumber: syz [ 35.644478][ T319] usb 4-1: config 0 descriptor?? [ 36.000188][ T517] syz.4.60[517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.000257][ T517] syz.4.60[517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.330650][ T280] logitech 0003:046D:C29C.0002: unknown main item tag 0x3 [ 36.354631][ T319] usb 4-1: USB disconnect, device number 2 [ 36.362932][ T280] logitech 0003:046D:C29C.0002: hidraw1: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 36.416463][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 36.656574][ T280] logitech 0003:046D:C29C.0002: no inputs found [ 36.668264][ T280] usb 1-1: USB disconnect, device number 3 [ 36.670877][ T518] usb 3-1: USB disconnect, device number 4 [ 36.707102][ T524] fido_id[524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 36.751677][ T522] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 36.911986][ T24] kauditd_printk_skb: 246 callbacks suppressed [ 36.911998][ T24] audit: type=1326 audit(1756524084.690:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=540 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94445c6be9 code=0x7ffc0000 [ 36.970665][ T544] FAT-fs (loop4): Directory bread(block 64) failed [ 36.978880][ T544] FAT-fs (loop4): Directory bread(block 65) failed [ 36.987187][ T544] FAT-fs (loop4): Directory bread(block 66) failed [ 36.995611][ T544] FAT-fs (loop4): Directory bread(block 67) failed [ 37.087623][ T544] FAT-fs (loop4): Directory bread(block 68) failed [ 37.124262][ T544] FAT-fs (loop4): Directory bread(block 69) failed [ 37.172433][ T24] audit: type=1400 audit(1756524084.940:622): avc: denied { mounton } for pid=521 comm="syz.2.64" path="/10/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.199255][ T544] FAT-fs (loop4): Directory bread(block 70) failed [ 37.206632][ T544] FAT-fs (loop4): Directory bread(block 71) failed [ 37.252016][ T544] FAT-fs (loop4): Directory bread(block 72) failed [ 37.261995][ T24] audit: type=1400 audit(1756524085.040:623): avc: denied { read } for pid=521 comm="syz.2.64" name="memory.events" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.310232][ T544] FAT-fs (loop4): Directory bread(block 73) failed [ 37.329745][ T24] audit: type=1326 audit(1756524085.110:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 37.356393][ T552] EXT4-fs (loop0): Test dummy encryption mode enabled [ 37.363931][ T552] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.374858][ T24] audit: type=1326 audit(1756524085.120:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 37.400221][ T24] audit: type=1326 audit(1756524085.120:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 37.425976][ T24] audit: type=1326 audit(1756524085.120:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 37.445806][ T552] EXT4-fs (loop0): 1 truncate cleaned up [ 37.455157][ T24] audit: type=1326 audit(1756524085.120:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 37.462242][ T552] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 37.518136][ T24] audit: type=1326 audit(1756524085.120:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 37.569210][ T24] audit: type=1326 audit(1756524085.120:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=549 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 37.711983][ T280] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 37.799621][ T569] syz.0.73[569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.799808][ T569] syz.0.73[569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.101942][ T25] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 38.225838][ T572] EXT4-fs (loop2): Test dummy encryption mode enabled [ 38.242312][ T572] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.407829][ T572] EXT4-fs (loop2): 1 truncate cleaned up [ 38.415245][ T572] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 38.472298][ T280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 38.513457][ T280] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 38.626754][ T280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.638314][ T280] usb 2-1: config 0 descriptor?? [ 38.661965][ T557] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 39.461948][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 39.473435][ T25] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 39.483245][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.495925][ T25] usb 4-1: config 0 descriptor?? [ 39.512253][ T566] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 39.747504][ T280] hid-generic 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 39.835277][ T595] udc-core: couldn't find an available UDC or it's busy [ 39.843711][ T595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.879113][ T598] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 40.050851][ T602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 40.352280][ T25] hid-generic 0003:04F3:0755.0004: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 40.594996][ T570] udc-core: couldn't find an available UDC or it's busy [ 40.602272][ T570] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.791947][ T280] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.830521][ T612] FAT-fs (loop4): Directory bread(block 64) failed [ 40.838052][ T612] FAT-fs (loop4): Directory bread(block 65) failed [ 40.845100][ T612] FAT-fs (loop4): Directory bread(block 66) failed [ 40.852023][ T612] FAT-fs (loop4): Directory bread(block 67) failed [ 40.858949][ T612] FAT-fs (loop4): Directory bread(block 68) failed [ 40.866152][ T612] FAT-fs (loop4): Directory bread(block 69) failed [ 40.873295][ T612] FAT-fs (loop4): Directory bread(block 70) failed [ 40.880584][ T612] FAT-fs (loop4): Directory bread(block 71) failed [ 40.887364][ T612] FAT-fs (loop4): Directory bread(block 72) failed [ 40.894573][ T612] FAT-fs (loop4): Directory bread(block 73) failed [ 40.981839][ T350] usb 2-1: reset full-speed USB device number 2 using dummy_hcd [ 41.191878][ T350] usb 2-1: device descriptor read/64, error -32 [ 41.191892][ T280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.191912][ T280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.222545][ T280] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.237285][ T280] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.246842][ T280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.256175][ T280] usb 1-1: config 0 descriptor?? [ 41.533774][ T350] usb 2-1: device descriptor read/64, error -32 [ 41.591985][ T319] usb 4-1: reset full-speed USB device number 3 using dummy_hcd [ 41.802329][ T350] usb 2-1: reset full-speed USB device number 2 using dummy_hcd [ 41.936734][ T280] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xe [ 41.946710][ T280] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.955408][ T24] kauditd_printk_skb: 77 callbacks suppressed [ 41.955421][ T24] audit: type=1400 audit(1756524089.730:708): avc: denied { accept } for pid=606 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 41.996732][ T625] EXT4-fs (loop1): Test dummy encryption mode enabled [ 42.009394][ T625] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.022113][ T625] EXT4-fs (loop1): 1 truncate cleaned up [ 42.025397][ T280] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 42.028328][ T625] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 42.039571][ T280] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 43.060360][ T634] syz.1.92[634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.060656][ T634] syz.1.92[634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.618539][ T325] usb 1-1: USB disconnect, device number 4 [ 43.735867][ T24] audit: type=1400 audit(1756524091.520:709): avc: denied { remount } for pid=651 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 43.758174][ T25] usb 2-1: USB disconnect, device number 2 [ 44.052014][ T657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.428016][ T650] FAT-fs (loop3): Directory bread(block 64) failed [ 44.436883][ T650] FAT-fs (loop3): Directory bread(block 65) failed [ 44.475127][ T24] audit: type=1400 audit(1756524092.250:710): avc: denied { bind } for pid=659 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.476802][ T650] FAT-fs (loop3): Directory bread(block 66) failed [ 44.506846][ T664] syz.2.102[664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.507097][ T664] syz.2.102[664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.546602][ T661] Zero length message leads to an empty skb [ 44.568840][ T650] FAT-fs (loop3): Directory bread(block 67) failed [ 44.577412][ T650] FAT-fs (loop3): Directory bread(block 68) failed [ 44.589035][ T648] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 44.600104][ T650] FAT-fs (loop3): Directory bread(block 69) failed [ 44.608075][ T650] FAT-fs (loop3): Directory bread(block 70) failed [ 44.615475][ T650] FAT-fs (loop3): Directory bread(block 71) failed [ 44.622762][ T650] FAT-fs (loop3): Directory bread(block 72) failed [ 44.630986][ T650] FAT-fs (loop3): Directory bread(block 73) failed [ 45.439672][ T478] kernel write not supported for file bpf-prog (pid: 478 comm: kworker/0:5) [ 45.498701][ T24] audit: type=1400 audit(1756524093.280:711): avc: denied { read write } for pid=678 comm="syz.2.109" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 45.546187][ T24] audit: type=1400 audit(1756524093.310:712): avc: denied { open } for pid=678 comm="syz.2.109" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 45.610517][ T682] EXT4-fs (loop1): Test dummy encryption mode enabled [ 45.633334][ T682] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.644992][ T682] EXT4-fs (loop1): 1 truncate cleaned up [ 45.651224][ T682] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 45.676479][ T519] usb 4-1: USB disconnect, device number 3 [ 45.742465][ T24] audit: type=1400 audit(1756524093.530:713): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 45.764129][ T478] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 45.822414][ T24] audit: type=1326 audit(1756524093.610:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=693 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 45.850962][ T699] syz.1.110[699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.851223][ T699] syz.1.110[699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.872617][ T24] audit: type=1326 audit(1756524093.650:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=693 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 45.962356][ T24] audit: type=1326 audit(1756524093.740:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=693 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 46.112208][ T695] FAT-fs (loop2): Directory bread(block 64) failed [ 46.213326][ T695] FAT-fs (loop2): Directory bread(block 65) failed [ 46.344308][ T695] FAT-fs (loop2): Directory bread(block 66) failed [ 46.473206][ T24] audit: type=1326 audit(1756524093.780:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=693 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 46.510090][ T695] FAT-fs (loop2): Directory bread(block 67) failed [ 46.539508][ T695] FAT-fs (loop2): Directory bread(block 68) failed [ 46.551881][ T695] FAT-fs (loop2): Directory bread(block 69) failed [ 46.569546][ T695] FAT-fs (loop2): Directory bread(block 70) failed [ 46.586897][ T695] FAT-fs (loop2): Directory bread(block 71) failed [ 46.595576][ T695] FAT-fs (loop2): Directory bread(block 72) failed [ 46.640907][ T695] FAT-fs (loop2): Directory bread(block 73) failed [ 47.322372][ T478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.347548][ T478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.358225][ T478] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.372068][ T478] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.382249][ T478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.392614][ T478] usb 1-1: config 0 descriptor?? [ 47.398947][ T719] FAT-fs (loop1): Directory bread(block 64) failed [ 47.410945][ T719] FAT-fs (loop1): Directory bread(block 65) failed [ 47.418459][ T719] FAT-fs (loop1): Directory bread(block 66) failed [ 47.425977][ T719] FAT-fs (loop1): Directory bread(block 67) failed [ 47.433170][ T719] FAT-fs (loop1): Directory bread(block 68) failed [ 47.440338][ T719] FAT-fs (loop1): Directory bread(block 69) failed [ 47.447797][ T719] FAT-fs (loop1): Directory bread(block 70) failed [ 47.449195][ T724] EXT4-fs (loop4): Test dummy encryption mode enabled [ 47.457605][ T719] FAT-fs (loop1): Directory bread(block 71) failed [ 47.463227][ T724] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.468068][ T719] FAT-fs (loop1): Directory bread(block 72) failed [ 47.479333][ T724] EXT4-fs (loop4): 1 truncate cleaned up [ 47.485074][ T719] FAT-fs (loop1): Directory bread(block 73) failed [ 47.491231][ T724] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 47.519980][ T24] kauditd_printk_skb: 70 callbacks suppressed [ 47.519990][ T24] audit: type=1400 audit(1756524095.300:788): avc: denied { unlink } for pid=278 comm="syz-executor" name="file0" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.657944][ T25] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 47.771033][ T731] syz.4.123[731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.771315][ T731] syz.4.123[731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.961897][ T620] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 48.071935][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.082898][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 48.098993][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 48.111250][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.125499][ T25] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 48.135709][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.621485][ T25] usb 3-1: config 0 descriptor?? [ 48.672692][ T25] usb 3-1: MIDIStreaming interface descriptor not found [ 48.675405][ T478] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xe [ 48.688740][ T478] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 48.697137][ T478] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 48.707857][ T478] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 48.751997][ T620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.763478][ T620] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 48.773789][ T620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.786123][ T620] usb 4-1: config 0 descriptor?? [ 48.843347][ T740] EXT4-fs (loop1): Test dummy encryption mode enabled [ 48.851050][ T740] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.863726][ T740] EXT4-fs (loop1): 1 truncate cleaned up [ 48.869412][ T740] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 48.881010][ T25] usb 3-1: USB disconnect, device number 5 [ 49.071273][ T749] syz.1.127[749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.072096][ T749] syz.1.127[749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.432236][ T325] usb 1-1: USB disconnect, device number 5 [ 50.322326][ T747] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 50.332490][ T747] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.621974][ T620] holtek 0003:1241:5015.0007: item fetching failed at offset 1/5 [ 50.630133][ T620] holtek 0003:1241:5015.0007: parse failed [ 50.637924][ T620] holtek: probe of 0003:1241:5015.0007 failed with error -22 [ 50.650789][ T620] usb 4-1: USB disconnect, device number 4 [ 50.804185][ T24] audit: type=1326 audit(1756524098.590:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=763 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 50.859107][ T24] audit: type=1326 audit(1756524098.610:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94445c6be9 code=0x7ffc0000 [ 50.912671][ T24] audit: type=1326 audit(1756524098.610:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94445c6be9 code=0x7ffc0000 [ 50.937551][ T24] audit: type=1326 audit(1756524098.610:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94445c6be9 code=0x7ffc0000 [ 50.964485][ T24] audit: type=1326 audit(1756524098.610:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94445c6be9 code=0x7ffc0000 [ 50.989457][ T24] audit: type=1326 audit(1756524098.610:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94445c6be9 code=0x7ffc0000 [ 51.014275][ T24] audit: type=1326 audit(1756524098.610:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94445c6be9 code=0x7ffc0000 [ 51.039137][ T24] audit: type=1326 audit(1756524098.610:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94445c6be9 code=0x7ffc0000 [ 51.071139][ T24] audit: type=1326 audit(1756524098.620:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=763 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 51.142871][ T771] FAT-fs (loop1): Directory bread(block 64) failed [ 51.149884][ T771] FAT-fs (loop1): Directory bread(block 65) failed [ 51.157150][ T771] FAT-fs (loop1): Directory bread(block 66) failed [ 51.163829][ T771] FAT-fs (loop1): Directory bread(block 67) failed [ 51.170823][ T771] FAT-fs (loop1): Directory bread(block 68) failed [ 51.177869][ T771] FAT-fs (loop1): Directory bread(block 69) failed [ 51.184985][ T771] FAT-fs (loop1): Directory bread(block 70) failed [ 51.192167][ T771] FAT-fs (loop1): Directory bread(block 71) failed [ 51.199107][ T771] FAT-fs (loop1): Directory bread(block 72) failed [ 51.206696][ T771] FAT-fs (loop1): Directory bread(block 73) failed [ 51.290425][ T325] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 51.372480][ T775] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 51.844481][ T325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.856492][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 51.868230][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 51.881137][ T325] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.895982][ T325] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 51.906602][ T325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.917328][ T325] usb 1-1: config 0 descriptor?? [ 51.962535][ T325] usb 1-1: MIDIStreaming interface descriptor not found [ 52.079561][ T789] 9pnet: Insufficient options for proto=fd [ 52.188622][ T375] usb 1-1: USB disconnect, device number 6 [ 52.343894][ T801] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.651915][ T24] kauditd_printk_skb: 119 callbacks suppressed [ 52.651928][ T24] audit: type=1326 audit(1756524100.420:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 52.732854][ T24] audit: type=1326 audit(1756524100.420:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 52.776315][ T24] audit: type=1326 audit(1756524100.420:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 52.804687][ T24] audit: type=1326 audit(1756524100.420:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 52.835468][ T24] audit: type=1326 audit(1756524100.420:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 52.860892][ T24] audit: type=1326 audit(1756524100.420:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 52.953566][ T24] audit: type=1326 audit(1756524100.420:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 53.086737][ T24] audit: type=1326 audit(1756524100.430:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 53.781372][ T24] audit: type=1326 audit(1756524100.430:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 53.825382][ T822] syz.4.149[822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.825677][ T822] syz.4.149[822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.953534][ T24] audit: type=1326 audit(1756524100.430:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e09cabe9 code=0x7ffc0000 [ 54.631834][ T519] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 55.535079][ T831] 9pnet: Insufficient options for proto=fd [ 55.606344][ T835] FAT-fs (loop4): Directory bread(block 64) failed [ 55.614257][ T835] FAT-fs (loop4): Directory bread(block 65) failed [ 55.621652][ T835] FAT-fs (loop4): Directory bread(block 66) failed [ 55.628915][ T835] FAT-fs (loop4): Directory bread(block 67) failed [ 55.636542][ T835] FAT-fs (loop4): Directory bread(block 68) failed [ 55.644405][ T835] FAT-fs (loop4): Directory bread(block 69) failed [ 55.652114][ T835] FAT-fs (loop4): Directory bread(block 70) failed [ 55.659587][ T835] FAT-fs (loop4): Directory bread(block 71) failed [ 55.669050][ T835] FAT-fs (loop4): Directory bread(block 72) failed [ 55.673184][ T841] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 55.676172][ T835] FAT-fs (loop4): Directory bread(block 73) failed [ 55.685935][ T841] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.725932][ T841] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.155: bg 0: block 393: padding at end of block bitmap is not set [ 55.742160][ T841] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 55.760610][ T519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.769084][ T841] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.769084][ T841] [ 55.772212][ T519] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 55.791354][ T519] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.801116][ T519] usb 2-1: config 0 descriptor?? [ 55.941932][ T375] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 56.022099][ T519] usbhid 2-1:0.0: can't add hid device: -71 [ 56.031406][ T519] usbhid: probe of 2-1:0.0 failed with error -71 [ 56.079959][ T519] usb 2-1: USB disconnect, device number 3 [ 56.201847][ T375] usb 3-1: Using ep0 maxpacket: 16 [ 56.284459][ T853] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 56.294280][ T853] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.452199][ T375] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.538662][ T375] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.141610][ T841] netlink: 6 bytes leftover after parsing attributes in process `syz.0.155'. [ 57.152089][ T375] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 57.188053][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.196931][ T375] usb 3-1: Product: syz [ 57.201713][ T375] usb 3-1: Manufacturer: syz [ 57.207250][ T375] usb 3-1: SerialNumber: syz [ 57.282387][ T375] usb 3-1: config 0 descriptor?? [ 57.540989][ T15] usb 3-1: USB disconnect, device number 6 [ 57.605515][ T863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=863 comm=syz.1.160 [ 57.621428][ T863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=863 comm=syz.1.160 [ 57.681832][ T620] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 57.805881][ T875] 9pnet: Insufficient options for proto=fd [ 58.081883][ T620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.095103][ T620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.107378][ T620] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.121877][ T620] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.133040][ T620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.246884][ T620] usb 1-1: config 0 descriptor?? [ 58.453957][ T892] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 58.455105][ T893] FAT-fs (loop2): Directory bread(block 64) failed [ 58.464216][ T892] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.472415][ T893] FAT-fs (loop2): Directory bread(block 65) failed [ 58.497308][ T892] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.171: bg 0: block 393: padding at end of block bitmap is not set [ 58.498275][ T893] FAT-fs (loop2): Directory bread(block 66) failed [ 58.512996][ T892] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 58.521534][ T893] FAT-fs (loop2): Directory bread(block 67) failed [ 58.535281][ T892] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.535281][ T892] [ 58.554242][ T893] FAT-fs (loop2): Directory bread(block 68) failed [ 58.561263][ T893] FAT-fs (loop2): Directory bread(block 69) failed [ 58.569003][ T893] FAT-fs (loop2): Directory bread(block 70) failed [ 58.576120][ T893] FAT-fs (loop2): Directory bread(block 71) failed [ 58.583712][ T893] FAT-fs (loop2): Directory bread(block 72) failed [ 58.590640][ T893] FAT-fs (loop2): Directory bread(block 73) failed [ 58.732790][ T620] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xe [ 58.740338][ T620] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 58.750903][ T24] kauditd_printk_skb: 145 callbacks suppressed [ 58.750915][ T24] audit: type=1326 audit(1756524106.520:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=891 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 58.784133][ T892] netlink: 6 bytes leftover after parsing attributes in process `syz.4.171'. [ 58.792153][ T620] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 58.816760][ T24] audit: type=1326 audit(1756524106.520:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=891 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 58.844448][ T620] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 58.845649][ T24] audit: type=1326 audit(1756524106.520:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=891 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc8be14fbe9 code=0x7ffc0000 [ 58.883623][ T24] audit: type=1326 audit(1756524106.520:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=891 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc8be14fc23 code=0x7ffc0000 [ 58.907927][ T24] audit: type=1326 audit(1756524106.520:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=891 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc8be14e69f code=0x7ffc0000 [ 58.932038][ T24] audit: type=1326 audit(1756524106.520:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=891 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc8be14fc77 code=0x7ffc0000 [ 58.965175][ T24] audit: type=1326 audit(1756524106.520:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=891 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8be14e550 code=0x7ffc0000 [ 58.990122][ T24] audit: type=1326 audit(1756524106.520:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=891 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8be14f7eb code=0x7ffc0000 [ 59.015409][ T24] audit: type=1326 audit(1756524106.520:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=891 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8be14f7eb code=0x7ffc0000 [ 59.068145][ T24] audit: type=1326 audit(1756524106.520:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=891 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc8be1824a5 code=0x7ffc0000 [ 59.398204][ T15] kernel write not supported for file bpf-prog (pid: 15 comm: kworker/0:1) [ 59.743620][ T923] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 59.753332][ T923] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.798516][ T923] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.181: bg 0: block 393: padding at end of block bitmap is not set [ 59.822957][ T923] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 59.841099][ T923] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.841099][ T923] [ 60.201929][ T325] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 60.633333][ T943] syz.0.184[943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.633453][ T943] syz.0.184[943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.669964][ T752] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 60.808753][ T620] kernel write not supported for file bpf-prog (pid: 620 comm: kworker/1:7) [ 61.147602][ T752] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.162152][ T752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 61.175950][ T752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 61.187404][ T752] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.204440][ T752] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 61.216096][ T752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.738558][ T752] usb 3-1: config 0 descriptor?? [ 61.806946][ T752] usb 3-1: MIDIStreaming interface descriptor not found [ 61.872648][ T25] usb 1-1: USB disconnect, device number 7 [ 61.960097][ T953] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 62.018145][ T375] usb 3-1: USB disconnect, device number 7 [ 62.041890][ T479] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 62.351902][ T479] usb 2-1: Using ep0 maxpacket: 16 [ 62.471932][ T479] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.482662][ T479] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.544396][ T971] fuse: Bad value for 'user_id' [ 62.586568][ T970] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 62.675242][ T479] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 62.685368][ T479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.693882][ T479] usb 2-1: Product: syz [ 62.698916][ T479] usb 2-1: Manufacturer: syz [ 62.703996][ T479] usb 2-1: SerialNumber: syz [ 62.710539][ T479] usb 2-1: config 0 descriptor?? [ 62.901837][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 63.051851][ T752] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.060885][ T350] usb 2-1: USB disconnect, device number 4 [ 63.181848][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 63.321916][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.334211][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.530534][ T752] usb 5-1: Using ep0 maxpacket: 32 [ 63.541921][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 63.552251][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.561522][ T25] usb 3-1: Product: syz [ 63.566444][ T25] usb 3-1: Manufacturer: syz [ 63.572800][ T25] usb 3-1: SerialNumber: syz [ 63.579814][ T25] usb 3-1: config 0 descriptor?? [ 63.922687][ T280] usb 3-1: USB disconnect, device number 8 [ 63.952015][ T752] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 63.963144][ T752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.974139][ T752] usb 5-1: config 0 descriptor?? [ 64.181906][ T375] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 64.421853][ T375] usb 2-1: Using ep0 maxpacket: 32 [ 64.503626][ T1002] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 64.515934][ T1002] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.537193][ T1002] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.204: bg 0: block 393: padding at end of block bitmap is not set [ 64.541914][ T375] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 64.562266][ T375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.562341][ T1002] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 64.575531][ T375] usb 2-1: config 0 descriptor?? [ 64.591154][ T1002] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.591154][ T1002] [ 64.662988][ T752] logitech 0003:046D:C29C.0009: unknown main item tag 0x3 [ 64.671453][ T752] logitech 0003:046D:C29C.0009: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 64.721954][ T24] kauditd_printk_skb: 153 callbacks suppressed [ 64.721967][ T24] audit: type=1326 audit(1756524112.510:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 64.756867][ T24] audit: type=1326 audit(1756524112.510:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 64.781208][ T24] audit: type=1326 audit(1756524112.510:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 64.806002][ T24] audit: type=1326 audit(1756524112.510:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e9ccb0c23 code=0x7ffc0000 [ 64.831179][ T24] audit: type=1326 audit(1756524112.510:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4e9ccaf69f code=0x7ffc0000 [ 64.856788][ T24] audit: type=1326 audit(1756524112.510:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4e9ccb0c77 code=0x7ffc0000 [ 64.862067][ T979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 64.886137][ T24] audit: type=1326 audit(1756524112.510:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e9ccaf550 code=0x7ffc0000 [ 64.916362][ T24] audit: type=1326 audit(1756524112.510:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e9ccb07eb code=0x7ffc0000 [ 64.943113][ T24] audit: type=1326 audit(1756524112.510:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e9ccb07eb code=0x7ffc0000 [ 64.985444][ T24] audit: type=1326 audit(1756524112.510:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e9cce34a5 code=0x7ffc0000 [ 65.041952][ T752] logitech 0003:046D:C29C.0009: no inputs found [ 65.050515][ T752] usb 5-1: USB disconnect, device number 2 [ 65.068061][ T1011] fido_id[1011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 65.124356][ T375] logitech 0003:046D:C29C.000A: unknown main item tag 0x3 [ 65.141396][ T375] logitech 0003:046D:C29C.000A: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 65.303141][ T997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 65.331911][ T375] logitech 0003:046D:C29C.000A: no inputs found [ 65.352523][ T375] usb 2-1: USB disconnect, device number 5 [ 65.388675][ T1019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.207'. [ 65.461860][ T478] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 65.593599][ T1021] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.602051][ T1021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.614752][ T1021] EXT4-fs (loop4): 1 truncate cleaned up [ 65.620594][ T1021] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 65.819974][ T1025] syz.4.208[1025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.820186][ T1025] syz.4.208[1025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.888774][ T478] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 65.922511][ T478] usb 4-1: config 0 has no interface number 0 [ 67.673141][ T478] usb 4-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.684640][ T478] usb 4-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.695666][ T478] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 67.705151][ T478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.714476][ T478] usb 4-1: config 0 descriptor?? [ 67.856024][ T1042] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #3: comm syz.0.215: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 67.875252][ T1042] EXT4-fs error (device loop0): ext4_quota_enable:6450: comm syz.0.215: Bad quota inode: 3, type: 0 [ 67.890174][ T1042] EXT4-fs warning (device loop0): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 67.908709][ T1042] EXT4-fs (loop0): mount failed [ 67.991859][ T752] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 68.384423][ T280] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.451857][ T478] usbhid 4-1:0.28: can't add hid device: -71 [ 68.458966][ T478] usbhid: probe of 4-1:0.28 failed with error -71 [ 68.467816][ T478] usb 4-1: USB disconnect, device number 5 [ 68.475185][ T1067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.222'. [ 68.631924][ T752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 68.643061][ T280] usb 5-1: Using ep0 maxpacket: 16 [ 68.648408][ T752] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 68.657755][ T752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.666888][ T752] usb 3-1: config 0 descriptor?? [ 68.691957][ T1038] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 68.762117][ T280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.773440][ T280] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.941907][ T280] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 68.956367][ T280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.964886][ T280] usb 5-1: Product: syz [ 68.969260][ T280] usb 5-1: Manufacturer: syz [ 68.974708][ T280] usb 5-1: SerialNumber: syz [ 68.980274][ T280] usb 5-1: config 0 descriptor?? [ 69.051884][ T478] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 69.153355][ T752] hid-generic 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 69.221934][ T479] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 69.227309][ T752] usb 5-1: USB disconnect, device number 3 [ 69.357342][ T1038] udc-core: couldn't find an available UDC or it's busy [ 69.364787][ T1038] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.411934][ T478] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 69.423358][ T478] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 69.432749][ T478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.441666][ T478] usb 4-1: config 0 descriptor?? [ 69.461935][ T1072] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 69.581933][ T479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.593155][ T479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.603497][ T479] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.616638][ T479] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.626221][ T479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.635919][ T479] usb 1-1: config 0 descriptor?? [ 69.930316][ T1080] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.121135][ T479] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xe [ 70.128865][ T479] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 70.136592][ T479] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 70.222809][ T478] hid-generic 0003:04F3:0755.000C: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 70.223060][ T1072] udc-core: couldn't find an available UDC or it's busy [ 70.242638][ T1072] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.250481][ T479] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 70.371855][ T325] usb 3-1: reset full-speed USB device number 9 using dummy_hcd [ 70.581825][ T325] usb 3-1: device descriptor read/64, error -32 [ 70.971829][ T325] usb 3-1: device descriptor read/64, error -32 [ 71.305947][ T1092] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 71.315464][ T1092] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.338503][ T518] usb 4-1: reset full-speed USB device number 6 using dummy_hcd [ 71.364222][ T325] usb 3-1: reset full-speed USB device number 9 using dummy_hcd [ 71.623682][ T350] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 72.163426][ T1119] EXT4-fs (loop2): Test dummy encryption mode enabled [ 72.184325][ T1119] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.219047][ T1119] EXT4-fs (loop2): 1 truncate cleaned up [ 72.226748][ T1119] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 72.252273][ T1122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.235'. [ 72.362173][ T479] usb 3-1: USB disconnect, device number 9 [ 72.411890][ T1104] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.494750][ T1130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.621706][ T1128] FAT-fs (loop3): Directory bread(block 64) failed [ 72.651914][ T1104] usb 5-1: Using ep0 maxpacket: 16 [ 72.696856][ T1128] FAT-fs (loop3): Directory bread(block 65) failed [ 72.753165][ T1128] FAT-fs (loop3): Directory bread(block 66) failed [ 72.969741][ T20] usb 1-1: USB disconnect, device number 8 [ 72.975903][ T1104] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.992747][ T1125] syz.2.238[1125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.992990][ T1125] syz.2.238[1125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.009498][ T1128] FAT-fs (loop3): Directory bread(block 67) failed [ 73.081562][ T1104] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.631883][ T1128] FAT-fs (loop3): Directory bread(block 68) failed [ 73.641390][ T1128] FAT-fs (loop3): Directory bread(block 69) failed [ 73.651915][ T1128] FAT-fs (loop3): Directory bread(block 70) failed [ 73.659305][ T1128] FAT-fs (loop3): Directory bread(block 71) failed [ 73.708798][ T1128] FAT-fs (loop3): Directory bread(block 72) failed [ 73.716284][ T1128] FAT-fs (loop3): Directory bread(block 73) failed [ 73.829082][ T25] usb 4-1: USB disconnect, device number 6 [ 73.898311][ T24] kauditd_printk_skb: 86 callbacks suppressed [ 73.898325][ T24] audit: type=1326 audit(1756524121.680:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 73.931153][ T1104] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 73.931166][ T1104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.931175][ T1104] usb 5-1: Product: syz [ 73.931184][ T1104] usb 5-1: Manufacturer: syz [ 73.931193][ T1104] usb 5-1: SerialNumber: syz [ 73.931982][ T1104] usb 5-1: config 0 descriptor?? [ 73.942502][ T24] audit: type=1326 audit(1756524121.680:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 73.990043][ T1145] 9pnet: Insufficient options for proto=fd [ 74.066381][ T24] audit: type=1326 audit(1756524121.680:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 74.093175][ T24] audit: type=1326 audit(1756524121.680:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 74.148153][ T24] audit: type=1326 audit(1756524121.680:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 74.227388][ T1153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.467748][ T24] audit: type=1326 audit(1756524121.680:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 74.472496][ T1104] usb 5-1: USB disconnect, device number 4 [ 74.508711][ T24] audit: type=1326 audit(1756524121.680:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 74.553243][ T24] audit: type=1326 audit(1756524121.680:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4e9ccaf69f code=0x7ffc0000 [ 74.591170][ T24] audit: type=1326 audit(1756524121.680:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 74.681896][ T24] audit: type=1326 audit(1756524121.680:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4e9ccb0be9 code=0x7ffc0000 [ 75.171900][ T280] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 75.402112][ T1176] syz.4.256[1176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.402187][ T1176] syz.4.256[1176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.425418][ T280] usb 1-1: Using ep0 maxpacket: 16 [ 75.502826][ T1181] device pim6reg1 entered promiscuous mode [ 75.561854][ T280] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.581833][ T280] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.662961][ T1185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'. [ 75.726129][ T1186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.260'. [ 75.771883][ T280] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 75.791808][ T280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.800188][ T280] usb 1-1: Product: syz [ 75.809893][ T280] usb 1-1: Manufacturer: syz [ 75.820312][ T280] usb 1-1: SerialNumber: syz [ 75.843161][ T280] usb 1-1: config 0 descriptor?? [ 76.012714][ T1188] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 76.045932][ T1195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 76.058099][ T1195] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.150839][ T280] usb 1-1: USB disconnect, device number 9 [ 76.266097][ T1201] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 76.278469][ T1201] FAT-fs (loop3): Filesystem has been set read-only [ 76.401865][ T478] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.756979][ T1210] tmpfs: Unknown parameter 'usrquota' [ 76.761910][ T478] usb 5-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 76.774363][ T478] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 76.784749][ T478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.821949][ T1199] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 76.843486][ T478] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 76.864755][ T1214] device veth1_macvtap left promiscuous mode [ 76.920553][ T1218] kvm: pic: single mode not supported [ 76.920563][ T1218] kvm: pic: level sensitive irq not supported [ 76.927903][ T1218] kvm: pic: single mode not supported [ 76.934615][ T1218] kvm: pic: level sensitive irq not supported [ 76.964195][ T1225] Disabled LAPIC found during irq injection [ 77.186961][ T1230] F2FS-fs (loop0): invalid crc value [ 77.202493][ T1230] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.240276][ T1230] F2FS-fs (loop0): Start checkpoint disabled! [ 77.252681][ T1230] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 77.278549][ T1230] attempt to access beyond end of device [ 77.278549][ T1230] loop0: rw=2049, want=45120, limit=40427 [ 77.309016][ T7] attempt to access beyond end of device [ 77.309016][ T7] loop0: rw=2049, want=40976, limit=40427 [ 77.478334][ T1254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 77.491533][ T1254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 77.655016][ T1258] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,,errors=continue [ 77.667361][ T1266] erofs: (device loop0): mounted with root inode @ nid 36. [ 77.684699][ T1258] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.908382][ T1285] erofs: (device loop3): mounted with root inode @ nid 36. [ 78.172857][ T1304] netlink: 'syz.1.308': attribute type 8 has an invalid length. [ 78.180860][ T1304] netem: change failed [ 78.185097][ T752] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 78.185760][ T1304] mmap: syz.1.308 (1304) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 78.290528][ T1311] tipc: Started in network mode [ 78.295697][ T478] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 78.295955][ T1311] tipc: Own node identity 165272ba2e6, cluster identity 4711 [ 78.311459][ T1311] tipc: Enabled bearer , priority 0 [ 78.321235][ T1311] device syzkaller0 entered promiscuous mode [ 78.330339][ T1311] tipc: Resetting bearer [ 78.336986][ T1310] tipc: Resetting bearer [ 78.343494][ T1310] tipc: Disabling bearer [ 78.394757][ T1313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 78.403923][ T1313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 78.413623][ T1313] ================================================================== [ 78.421847][ T1313] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 78.430536][ T1313] Read of size 8 at addr ffff88810f5f90c0 by task syz.1.312/1313 [ 78.438698][ T1313] [ 78.441234][ T1313] CPU: 1 PID: 1313 Comm: syz.1.312 Not tainted 5.10.240-syzkaller #0 [ 78.450450][ T1313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 78.461809][ T1313] Call Trace: [ 78.465354][ T1313] __dump_stack+0x21/0x24 [ 78.470519][ T1313] dump_stack_lvl+0x169/0x1d8 [ 78.475486][ T1313] ? show_regs_print_info+0x18/0x18 [ 78.482128][ T1313] ? thaw_kernel_threads+0x220/0x220 [ 78.488883][ T1313] print_address_description+0x7f/0x2c0 [ 78.494807][ T1313] ? tc_setup_flow_action+0x842/0x3280 [ 78.500313][ T1313] kasan_report+0xe2/0x130 [ 78.505373][ T1313] ? flow_action_cookie_create+0x28/0x90 [ 78.511453][ T1313] ? tc_setup_flow_action+0x842/0x3280 [ 78.517947][ T1313] __asan_report_load8_noabort+0x14/0x20 [ 78.524370][ T1313] tc_setup_flow_action+0x842/0x3280 [ 78.529763][ T1313] ? __kmalloc+0x1a7/0x330 [ 78.534249][ T1313] ? flow_rule_alloc+0x32/0x2c0 [ 78.539459][ T1313] mall_replace_hw_filter+0x293/0x810 [ 78.545529][ T1313] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 78.551999][ T752] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.552333][ T1313] ? mall_set_parms+0x410/0x410 [ 78.552360][ T1313] ? tcf_exts_destroy+0xb0/0xb0 [ 78.561452][ T752] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 78.566169][ T1313] ? pcpu_alloc+0xf8a/0x16b0 [ 78.566187][ T1313] ? mall_set_parms+0x19d/0x410 [ 78.566266][ T1313] mall_change+0x528/0x750 [ 78.566291][ T1313] ? __kasan_check_write+0x14/0x20 [ 78.566303][ T1313] ? mall_get+0xa0/0xa0 [ 78.566318][ T1313] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 78.566334][ T1313] ? nla_strcmp+0xf4/0x140 [ 78.566349][ T1313] tc_new_tfilter+0x13f6/0x1a10 [ 78.566361][ T1313] ? mall_get+0xa0/0xa0 [ 78.566374][ T1313] ? tcf_gate_entry_destructor+0x20/0x20 [ 78.566389][ T1313] ? security_capable+0x87/0xb0 [ 78.566400][ T1313] ? ns_capable+0x8c/0xf0 [ 78.566411][ T1313] ? netlink_net_capable+0x125/0x160 [ 78.566435][ T1313] ? tcf_gate_entry_destructor+0x20/0x20 [ 78.574029][ T752] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.582582][ T1313] rtnetlink_rcv_msg+0x800/0xb90 [ 78.582600][ T1313] ? rtnetlink_bind+0x80/0x80 [ 78.582610][ T1313] ? arch_stack_walk+0xee/0x140 [ 78.582623][ T1313] ? stack_trace_save+0x98/0xe0 [ 78.582634][ T1313] ? stack_trace_snprint+0xf0/0xf0 [ 78.582646][ T1313] ? memcpy+0x56/0x70 [ 78.582659][ T1313] ? avc_has_perm+0x234/0x360 [ 78.582670][ T1313] ? __kasan_slab_alloc+0xbd/0xf0 [ 78.582682][ T1313] ? slab_post_alloc_hook+0x5d/0x2f0 [ 78.582695][ T1313] ? ___sys_sendmsg+0x1f0/0x260 [ 78.582704][ T1313] ? avc_has_perm_noaudit+0x240/0x240 [ 78.582727][ T1313] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 78.588620][ T752] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 78.592464][ T1313] netlink_rcv_skb+0x1e0/0x430 [ 78.592479][ T1313] ? rtnetlink_bind+0x80/0x80 [ 78.592490][ T1313] ? netlink_ack+0xb80/0xb80 [ 78.592503][ T1313] ? __netlink_lookup+0x387/0x3b0 [ 78.592513][ T1313] rtnetlink_rcv+0x1c/0x20 [ 78.592535][ T1313] netlink_unicast+0x876/0xa40 [ 78.597620][ T752] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 78.602311][ T1313] netlink_sendmsg+0x88d/0xb30 [ 78.602325][ T1313] ? netlink_getsockopt+0x530/0x530 [ 78.602340][ T1313] ? security_socket_sendmsg+0x82/0xa0 [ 78.602351][ T1313] ? netlink_getsockopt+0x530/0x530 [ 78.602364][ T1313] ____sys_sendmsg+0x5a2/0x8c0 [ 78.602376][ T1313] ? __sys_sendmsg_sock+0x40/0x40 [ 78.602388][ T1313] ? import_iovec+0x7c/0xb0 [ 78.602399][ T1313] ___sys_sendmsg+0x1f0/0x260 [ 78.602412][ T1313] ? __sys_sendmsg+0x250/0x250 [ 78.602426][ T1313] ? __fdget+0x1a1/0x230 [ 78.602446][ T1313] __x64_sys_sendmsg+0x1e2/0x2a0 [ 78.721966][ T752] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 78.726176][ T1313] ? ___sys_sendmsg+0x260/0x260 [ 78.726210][ T1313] ? switch_fpu_return+0x197/0x340 [ 78.726236][ T1313] do_syscall_64+0x31/0x40 [ 78.737787][ T752] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 78.742541][ T1313] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 78.742553][ T1313] RIP: 0033:0x7f94445c6be9 [ 78.742566][ T1313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.742574][ T1313] RSP: 002b:00007f944302f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.742589][ T1313] RAX: ffffffffffffffda RBX: 00007f94447fdfa0 RCX: 00007f94445c6be9 [ 78.742597][ T1313] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 78.742604][ T1313] RBP: 00007f9444649e19 R08: 0000000000000000 R09: 0000000000000000 [ 78.742610][ T1313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.742618][ T1313] R13: 00007f94447fe038 R14: 00007f94447fdfa0 R15: 00007ffce4a19208 [ 78.742623][ T1313] [ 78.742630][ T1313] Allocated by task 1313: [ 78.742643][ T1313] __kasan_kmalloc+0xda/0x110 [ 78.742665][ T1313] __kmalloc+0x1a7/0x330 [ 78.748968][ T752] usb 3-1: Product: syz [ 78.752553][ T1313] tcf_idr_create+0x5f/0x790 [ 78.752564][ T1313] tcf_idr_create_from_flags+0x61/0x70 [ 78.752572][ T1313] tcf_gact_init+0x2b4/0x520 [ 78.752582][ T1313] tcf_action_init_1+0x3e1/0x670 [ 78.752590][ T1313] tcf_action_init+0x1e6/0x700 [ 78.752599][ T1313] tcf_exts_validate+0x215/0x510 [ 78.752624][ T1313] mall_set_parms+0x4b/0x410 [ 78.758573][ T752] usb 3-1: Manufacturer: syz [ 78.762349][ T1313] mall_change+0x45c/0x750 [ 78.762363][ T1313] tc_new_tfilter+0x13f6/0x1a10 [ 78.762374][ T1313] rtnetlink_rcv_msg+0x800/0xb90 [ 78.762384][ T1313] netlink_rcv_skb+0x1e0/0x430 [ 78.762393][ T1313] rtnetlink_rcv+0x1c/0x20 [ 78.762402][ T1313] netlink_unicast+0x876/0xa40 [ 78.762410][ T1313] netlink_sendmsg+0x88d/0xb30 [ 78.762422][ T1313] ____sys_sendmsg+0x5a2/0x8c0 [ 78.762449][ T1313] ___sys_sendmsg+0x1f0/0x260 [ 78.802655][ T752] cdc_wdm 3-1:1.0: skipping garbage [ 78.806101][ T1313] __x64_sys_sendmsg+0x1e2/0x2a0 [ 78.806113][ T1313] do_syscall_64+0x31/0x40 [ 78.806136][ T1313] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 78.811564][ T752] cdc_wdm 3-1:1.0: skipping garbage [ 78.815810][ T1313] [ 78.815823][ T1313] The buggy address belongs to the object at ffff88810f5f9000 [ 78.815823][ T1313] which belongs to the cache kmalloc-192 of size 192 [ 78.815833][ T1313] The buggy address is located 0 bytes to the right of [ 78.815833][ T1313] 192-byte region [ffff88810f5f9000, ffff88810f5f90c0) [ 78.815838][ T1313] The buggy address belongs to the page: [ 78.815855][ T1313] page:ffffea00043d7e40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f5f9 [ 78.815865][ T1313] flags: 0x4000000000000200(slab) [ 78.815881][ T1313] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100043380 [ 78.815897][ T1313] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 78.822302][ T478] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 78.825819][ T1313] page dumped because: kasan: bad access detected [ 78.831079][ T752] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 78.835232][ T1313] page_owner tracks the page as allocated [ 78.835256][ T1313] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 96, ts 6139758357, free_ts 6139721187 [ 78.835275][ T1313] prep_new_page+0x179/0x180 [ 78.835305][ T1313] get_page_from_freelist+0x2235/0x23d0 [ 78.835324][ T1313] __alloc_pages_nodemask+0x268/0x5f0 [ 78.835351][ T1313] new_slab+0x84/0x3f0 [ 78.845462][ T478] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 78.850201][ T1313] ___slab_alloc+0x2a6/0x450 [ 78.850212][ T1313] __slab_alloc+0x63/0xa0 [ 78.850223][ T1313] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 78.850233][ T1313] kernfs_fop_open+0x343/0xb30 [ 78.850255][ T1313] do_dentry_open+0x793/0x1090 [ 78.857620][ T478] usb 4-1: Product: syz [ 78.859858][ T1313] vfs_open+0x73/0x80 [ 78.859870][ T1313] path_openat+0x27ad/0x3160 [ 78.859879][ T1313] do_filp_open+0x1b3/0x3e0 [ 78.859895][ T1313] do_sys_openat2+0x14c/0x6d0 [ 78.881332][ T478] usb 4-1: Manufacturer: syz [ 78.899096][ T1313] __x64_sys_openat+0x136/0x160 [ 78.899108][ T1313] do_syscall_64+0x31/0x40 [ 78.899120][ T1313] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 78.899126][ T1313] page last free stack trace: [ 78.899139][ T1313] free_unref_page_prepare+0x2b7/0x2d0 [ 78.899148][ T1313] __free_pages+0x14b/0x380 [ 78.899158][ T1313] free_pages+0x82/0x90 [ 78.899169][ T1313] selinux_genfs_get_sid+0x20b/0x250 [ 78.899179][ T1313] inode_doinit_with_dentry+0x86d/0xd70 [ 78.899190][ T1313] selinux_d_instantiate+0x27/0x40 [ 78.899199][ T1313] security_d_instantiate+0x9e/0xf0 [ 78.899228][ T1313] d_splice_alias+0x6d/0x390 [ 78.908768][ T478] usb 4-1: SerialNumber: syz [ 78.916346][ T1313] kernfs_iop_lookup+0x2c5/0x310 [ 78.916358][ T1313] path_openat+0x1127/0x3160 [ 78.916368][ T1313] do_filp_open+0x1b3/0x3e0 [ 78.916378][ T1313] do_sys_openat2+0x14c/0x6d0 [ 78.916386][ T1313] __x64_sys_openat+0x136/0x160 [ 78.916395][ T1313] do_syscall_64+0x31/0x40 [ 78.916408][ T1313] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 78.916412][ T1313] [ 78.916416][ T1313] Memory state around the buggy address: [ 78.916439][ T1313] ffff88810f5f8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.136339][ T478] usb 5-1: USB disconnect, device number 5 [ 79.139207][ T1313] ffff88810f5f9000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.185669][ T752] usb 4-1: USB disconnect, device number 7 [ 79.192306][ T1313] >ffff88810f5f9080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 79.192312][ T1313] ^ [ 79.192321][ T1313] ffff88810f5f9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.192329][ T1313] ffff88810f5f9180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 79.192334][ T1313] ================================================================== [ 79.192339][ T1313] Disabling lock debugging due to kernel taint [ 80.917926][ T752] usb 3-1: USB disconnect, device number 10