last executing test programs: 4.399471801s ago: executing program 0 (id=2417): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x350, 0x1d8, 0x1d8, 0x350, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xffff, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x122, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x4, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x9, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xe, 0xff, 0x0, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x80, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0xc}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7f, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0x90, 0x94}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="ca0870395de7506c2d000000000000000000000000080018110000", @ANYRES32=r8, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x4, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x61, 0x0, 0x2e, 0x0, 0x2e, 0x30]}}, &(0x7f0000001940)=""/4096, 0x2d, 0x1000, 0x1, 0x1, 0x10000}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = dup(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="717207000034b7e81d0f9b15400400", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',k']) r12 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r12, &(0x7f0000000340)=[{{0x0, 0xea60}, 0x11, 0x7f}], 0x18) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r11, @ANYRES32, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x44854}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071121600000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x308, 0x3f8, 0x308, 0x308, 0x0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, &(0x7f0000000600), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x16}, @remote, 0xffffffff, 0x0, 'wg1\x00', 'rose0\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x1, 0x4, 0x0, 0x6], 0x5, 0x4}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x2, 0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x7f}}}, {{@ip={@local, @empty, 0xffffff00, 0x0, 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x21, 0x0, 0x8}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x19}}}, {{@ip={@private=0xa010100, @empty, 0xffffffff, 0xff, 'dvmrp0\x00', 'dvmrp0\x00', {0xff}, {}, 0x89, 0x2, 0x8}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x18}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0xffffff00, 0xff, 0xff000000, 0xffffffff], 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x400, 0x8, 0x1, 0x95, 0xa5}}}, {{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'macsec0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x1d, 0x0, 0x8}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6erspan0\x00', {0x2, 0x6, 0x7, 0x0, 0x7, 0x7ff, 0xfffffa72, 0x18, 0xf8}, {0x3}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x8dd54b38fc84a6ee, 0x0, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0xff000000, 'pim6reg0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x1, 0x2, 0x2c}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x9, 0xf, [0x3c, 0x1c, 0x3d, 0x27, 0x1f, 0x1a, 0x11, 0xa, 0x20, 0x8, 0x2b, 0x28, 0x1, 0x1f, 0x2, 0x3e], 0x0, 0x3, 0x100000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5e8) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.367924864s ago: executing program 3 (id=2418): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c00028014000700fe8000000000001800000000000000420400120008000a00", @ANYRES32], 0x58}}, 0x8000) 4.338283886s ago: executing program 1 (id=2420): socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x2}) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 4.324614177s ago: executing program 1 (id=2421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x1) 4.008530963s ago: executing program 3 (id=2422): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000012c0)={0x24, 0x0, &(0x7f0000000d40)=[@increfs, @decrefs={0x40046307, 0x5}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}}], 0xaf, 0x0, &(0x7f0000000b80)="cc0592db80f61f59f43cf208a577634b3f3c39a6d652346bf829bc341862637f8031ac0c991288728fe4ca27c46975da6ef759a3bd34e64aea93a10e32b17cd0f3d3e1f257e8c4d1d4f4336def994302"}) 4.002930844s ago: executing program 1 (id=2423): mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x3ae4c21, &(0x7f0000000140)={[], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 3.932588s ago: executing program 3 (id=2424): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) 3.878551554s ago: executing program 3 (id=2425): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000300)) 3.841047766s ago: executing program 4 (id=2426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="e20e3e2ef30fbd7200269f66b99a0800000f32f0826b8090440f20c0663508000000440f22c066b9044d564b0f320f01d1baf80c66b80c824c8866efbafc0cedb800008ed8", 0x45}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.770142942s ago: executing program 1 (id=2428): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1b8, 0x0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x350, 0x1d8, 0x1d8, 0x350, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0x90, 0x94}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x218) r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="ca0870395de7506c2d000000000000000000000000080018110000", @ANYRES32=r8, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x4, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x61, 0x0, 0x2e, 0x0, 0x2e, 0x30]}}, &(0x7f0000001940)=""/4096, 0x2d, 0x1000, 0x1, 0x1, 0x10000}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = dup(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="717207000034b7e81d0f9b15400400", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',k']) r12 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r12, &(0x7f0000000340)=[{{0x0, 0xea60}, 0x11, 0x7f}], 0x18) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r11, @ANYRES32, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x44854}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071121600000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x308, 0x3f8, 0x308, 0x308, 0x0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, &(0x7f0000000600), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x16}, @remote, 0xffffffff, 0x0, 'wg1\x00', 'rose0\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x1, 0x4, 0x0, 0x6], 0x5, 0x4}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x2, 0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x7f}}}, {{@ip={@local, @empty, 0xffffff00, 0x0, 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x21, 0x0, 0x8}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x19}}}, {{@ip={@private=0xa010100, @empty, 0xffffffff, 0xff, 'dvmrp0\x00', 'dvmrp0\x00', {0xff}, {}, 0x89, 0x2, 0x8}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x18}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0xffffff00, 0xff, 0xff000000, 0xffffffff], 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x400, 0x8, 0x1, 0x95, 0xa5}}}, {{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'macsec0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x1d, 0x0, 0x8}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6erspan0\x00', {0x2, 0x6, 0x7, 0x0, 0x7, 0x7ff, 0xfffffa72, 0x18, 0xf8}, {0x3}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x8dd54b38fc84a6ee, 0x0, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0xff000000, 'pim6reg0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x1, 0x2, 0x2c}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x9, 0xf, [0x3c, 0x1c, 0x3d, 0x27, 0x1f, 0x1a, 0x11, 0xa, 0x20, 0x8, 0x2b, 0x28, 0x1, 0x1f, 0x2, 0x3e], 0x0, 0x3, 0x100000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5e8) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.767239843s ago: executing program 2 (id=2429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000080)) 3.750919054s ago: executing program 2 (id=2430): syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10020, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) 3.708089908s ago: executing program 4 (id=2431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980dc58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952fd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2acc5014f74e420988486de2ace27ce59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba194fc70973b39525123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49963a195e2fdffe6bdce6fa78ab2ded1ff74f9e54f1b82da2d444f9727be708710b90a872282f"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0x204, 0x2e, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) wait4(0x0, &(0x7f0000000000), 0x40000000, &(0x7f0000000100)) creat(&(0x7f0000000240)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000400009500"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.765965784s ago: executing program 4 (id=2432): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x54) 2.716325638s ago: executing program 4 (id=2433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1.758321977s ago: executing program 3 (id=2434): utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x6}, 0x7}], 0x1, 0x102, 0x0) 1.757853026s ago: executing program 4 (id=2435): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000004c0)={{0x1, 0x1, 0x80000001, 0x0, 0xfff}}) quotactl$Q_SYNC(0xffffffff80000100, 0x1000000, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000240)={0x3, 0xf8, 0x200}) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f00000004c0)={&(0x7f0000004000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.368819208s ago: executing program 0 (id=2436): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00'}, 0x94) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) fsmount(r11, 0x0, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0), 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.058624594s ago: executing program 0 (id=2437): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@request_death, @release], 0x0, 0x0, 0x0}) 1.048580634s ago: executing program 0 (id=2438): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32=r1], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x141601) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x0, 0x0) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2101}, {r5, 0x6790}], 0x2, 0x0, 0x0, 0x0) shutdown(r5, 0x0) socketpair(0x18, 0xa, 0x2, &(0x7f00000003c0)) getgid() unshare(0x60000480) 594.893711ms ago: executing program 1 (id=2439): mkdir(&(0x7f0000000100)='./file0\x00', 0x1bd) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000280)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 590.669262ms ago: executing program 3 (id=2440): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) read$FUSE(r0, &(0x7f0000001340)={0x2020}, 0x2020) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 587.880092ms ago: executing program 4 (id=2441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="448b1e0008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, 0x0, &(0x7f00000005c0)=""/155}, 0x20) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) setreuid(0x0, 0xee01) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) syz_emit_ethernet(0x14a, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = eventfd(0x1) r6 = fcntl$dupfd(r5, 0x0, r5) write$FUSE_ATTR(r6, &(0x7f0000000240)={0x78, 0xffffffffffffffda, 0x0, {0x9, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x6c3000000, 0xb, 0x200000, 0xb0, 0x0, 0x2000, 0x8, 0x0, 0x0, 0x3000000, 0x1000}}}, 0x78) writev(r6, &(0x7f0000002480)=[{&(0x7f0000002400)="3151549062641a31", 0x8}], 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) 493.23751ms ago: executing program 2 (id=2442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x108000) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 492.44819ms ago: executing program 1 (id=2443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a0000000000000008000100010000000400"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0x204, 0x2e, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) wait4(0x0, &(0x7f0000000000), 0x40000000, &(0x7f0000000100)) creat(&(0x7f0000000240)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000400009500"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 476.306101ms ago: executing program 2 (id=2444): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x800, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x7, 0xed, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {0x8000, 0x7f, 0x3, 0x3}, 0x3a, [0x5, 0x1, 0x7, 0x83e, 0x5, 0xd, 0x6, 0x2000, 0x7, 0x9, 0x4, 0x7, 0x1, 0x3ff, 0x3, 0xfffffff9, 0x27e8, 0xf93, 0x6, 0x3, 0x2, 0x1, 0x47dc, 0x10000, 0x4, 0x3, 0x3ff, 0x1, 0x0, 0x18, 0x8, 0x9, 0x190a, 0x1000, 0x23, 0x0, 0x4, 0x1, 0x1, 0x5, 0x2, 0xfd84, 0x200, 0x3, 0x6, 0x9, 0xffffffc0, 0x8, 0xe0000000, 0x5, 0x77, 0xb, 0x7, 0x5, 0x7, 0x22, 0x1, 0x7fffffff, 0x4, 0x80000000, 0xdc6, 0xfffffffc, 0x0, 0x7], [0x9, 0x1, 0x0, 0xffffc5b3, 0x2, 0x5, 0x2, 0xdc0, 0x0, 0x3, 0x2, 0x8, 0x6, 0x661b, 0x7, 0x5f, 0x7d, 0x10001, 0x2, 0x2, 0x8, 0x7, 0xbda, 0x80000000, 0x20, 0x4, 0x8, 0xfffffffc, 0x2, 0x9, 0x7fff, 0x4, 0x8, 0x6, 0x60, 0x6, 0x5, 0xfff, 0xfffffff9, 0x8, 0x6, 0xfffffffc, 0x7fffffff, 0x8, 0x8, 0x3, 0x2, 0xe14, 0x200, 0x7, 0x63, 0x8, 0x9, 0x7f, 0x3, 0xcbf, 0x200, 0x2, 0x2, 0x8, 0x3, 0x0, 0x400, 0x7], [0x9, 0x4, 0x0, 0x0, 0x6, 0x8, 0xffffff81, 0x4, 0x401, 0xb, 0x200, 0x9, 0xfe0, 0x5, 0x4, 0x40, 0xfffffff9, 0x956, 0x63, 0xb72, 0xf816, 0x57d, 0x0, 0x7, 0x1, 0x6, 0x1, 0xe9, 0x0, 0x3, 0x1, 0xfffffffb, 0x3, 0x3, 0x81, 0xf, 0x9, 0x3, 0x3cc, 0x9, 0xc, 0x800, 0x9e86, 0x31, 0x2, 0x0, 0x3, 0x7, 0x3, 0x6, 0x9, 0xe0, 0x7, 0x7f, 0x1ff, 0x6d, 0x7, 0xfffffffb, 0x1175, 0x8000, 0x11d, 0x8f9b, 0x3, 0x6], [0x9, 0x5, 0xfffffbff, 0x5, 0x6, 0x5, 0x80000001, 0x7fff, 0xff, 0x0, 0x1, 0x1, 0x6, 0xffffd529, 0x408, 0x0, 0x2f5, 0x1ff, 0x8000, 0x3, 0x7f, 0x7fffffff, 0x40000000, 0x4b1, 0x6, 0xc, 0x5, 0x5, 0x508f, 0xc6, 0x81, 0x9, 0x7ea692d0, 0x2, 0x8, 0x1d59, 0xfff, 0x2, 0xc, 0x40, 0x4, 0x3, 0xfff, 0xfe, 0x1, 0x3, 0x366e, 0x7, 0xfffffffc, 0x8001, 0x3, 0x3, 0x4, 0x0, 0x8, 0x0, 0x3ff, 0x6, 0x1000, 0x1, 0x9, 0xffffffff, 0x7, 0x5]}, 0x45c) 436.332634ms ago: executing program 2 (id=2445): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 426.914865ms ago: executing program 2 (id=2446): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) setpgid(r0, 0x0) 160.465807ms ago: executing program 0 (id=2447): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) 0s ago: executing program 0 (id=2448): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00'}, 0x94) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) fsmount(r11, 0x0, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0), 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 330.643320][ T28] audit: type=1326 audit(1753984992.862:7268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f926d185b27 code=0x7ffc0000 [ 330.666819][ T28] audit: type=1326 audit(1753984992.862:7269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f926d12ad69 code=0x7ffc0000 [ 330.690557][ T28] audit: type=1326 audit(1753984992.862:7270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 331.257912][ T28] audit: type=1326 audit(1753984992.882:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f926d185b27 code=0x7ffc0000 [ 331.283370][ T28] audit: type=1326 audit(1753984992.882:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f926d12ad69 code=0x7ffc0000 [ 331.307324][ T28] audit: type=1326 audit(1753984992.882:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 331.332734][ T28] audit: type=1326 audit(1753984992.912:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f926d185b27 code=0x7ffc0000 [ 331.508690][ T4413] x_tables: duplicate underflow at hook 1 [ 333.732944][ T4005] udevd[4005]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 334.801239][ T4005] udevd[4005]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 334.836469][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 337.452291][ T60] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 337.474488][ T4005] udevd[4005]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 337.580184][ T4523] syz.3.1243[4523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.580268][ T4523] syz.3.1243[4523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.612107][ T1175] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 338.365868][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 338.387706][ T60] usb 2-1: device descriptor read/all, error -71 [ 339.026024][ T1175] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.042570][ T1175] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 339.055111][ T1175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.063555][ T28] kauditd_printk_skb: 257 callbacks suppressed [ 339.063568][ T28] audit: type=1400 audit(1753985001.302:7532): avc: denied { map } for pid=4540 comm="syz.4.1249" path="socket:[33030]" dev="sockfs" ino=33030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 339.099325][ T1175] usb 1-1: Product: syz [ 339.103873][ T1175] usb 1-1: Manufacturer: syz [ 339.114329][ T1175] usb 1-1: SerialNumber: syz [ 339.123243][ T28] audit: type=1400 audit(1753985001.302:7533): avc: denied { read } for pid=4540 comm="syz.4.1249" path="socket:[33030]" dev="sockfs" ino=33030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 339.153603][ T1175] hub 1-1:1.0: bad descriptor, ignoring hub [ 339.160134][ T1175] hub: probe of 1-1:1.0 failed with error -5 [ 340.800988][ T4563] overlayfs: conflicting options: userxattr,redirect_dir=on [ 340.924104][ T1175] usb 1-1: USB disconnect, device number 10 [ 341.708296][ T28] audit: type=1326 audit(1753985003.972:7534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 341.858799][ T28] audit: type=1326 audit(1753985003.982:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 341.861412][ T4594] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 341.887652][ T28] audit: type=1326 audit(1753985003.992:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 342.035736][ T4005] udevd[4005]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 342.111897][ T28] audit: type=1326 audit(1753985003.992:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 342.136422][ T4594] SELinux: failed to load policy [ 342.141536][ T28] audit: type=1326 audit(1753985003.992:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 342.202426][ T28] audit: type=1326 audit(1753985003.992:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 342.302294][ T4036] udevd[4036]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 342.382691][ T28] audit: type=1326 audit(1753985003.992:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 342.415145][ T28] audit: type=1326 audit(1753985003.992:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 343.492695][ T4005] udevd[4005]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 343.573186][ T418] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 345.789239][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 345.789254][ T28] audit: type=1326 audit(1753985007.262:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 345.929872][ T4647] syz.4.1283 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 346.375063][ T28] audit: type=1326 audit(1753985007.262:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 346.687469][ T4665] x_tables: duplicate underflow at hook 1 [ 346.700573][ T28] audit: type=1326 audit(1753985007.262:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 346.731362][ T28] audit: type=1326 audit(1753985007.262:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 346.759081][ T28] audit: type=1326 audit(1753985007.262:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 346.784498][ T28] audit: type=1326 audit(1753985008.562:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 346.808779][ T28] audit: type=1326 audit(1753985008.562:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 346.844360][ T28] audit: type=1326 audit(1753985008.562:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 346.876925][ T28] audit: type=1326 audit(1753985008.562:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 346.901421][ T28] audit: type=1326 audit(1753985008.562:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 348.106526][ T4709] netlink: 'syz.2.1304': attribute type 5 has an invalid length. [ 348.456351][ T4724] tipc: Started in network mode [ 348.461248][ T4724] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 348.471511][ T4724] tipc: Enabling of bearer rejected, failed to enable media [ 349.502065][ T1175] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 349.668295][ T4770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1328'. [ 349.842053][ T1175] usb 2-1: Using ep0 maxpacket: 16 [ 349.849218][ T1175] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 349.858498][ T1175] usb 2-1: config 0 has no interface number 0 [ 349.865661][ T1175] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 349.875654][ T1175] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 349.887807][ T1175] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 349.897265][ T1175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.905325][ T1175] usb 2-1: Product: syz [ 349.909510][ T1175] usb 2-1: Manufacturer: syz [ 349.914150][ T1175] usb 2-1: SerialNumber: syz [ 349.919902][ T1175] usb 2-1: config 0 descriptor?? [ 349.925210][ T4748] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 349.932458][ T4748] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.035854][ T4780] x_tables: duplicate underflow at hook 1 [ 350.142386][ T4748] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.149661][ T4748] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.593155][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 350.709409][ T1175] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 350.719959][ T1175] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 350.732186][ T1175] asix: probe of 2-1:0.251 failed with error -71 [ 350.745317][ T1175] usb 2-1: USB disconnect, device number 14 [ 351.305572][ T4833] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1354'. [ 351.521405][ T4847] x_tables: duplicate underflow at hook 1 [ 352.414361][ T4860] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1362'. [ 352.486354][ T28] kauditd_printk_skb: 537 callbacks suppressed [ 352.486370][ T28] audit: type=1400 audit(1753985014.752:8160): avc: denied { connect } for pid=4863 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 352.497699][ T4866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1365'. [ 352.577811][ T28] audit: type=1326 audit(1753985014.842:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 352.601306][ T28] audit: type=1326 audit(1753985014.852:8162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 352.625353][ T28] audit: type=1326 audit(1753985014.852:8163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 352.650252][ T28] audit: type=1326 audit(1753985014.852:8164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 352.681904][ T28] audit: type=1326 audit(1753985014.852:8165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 352.706590][ T28] audit: type=1326 audit(1753985014.852:8166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 352.746085][ T28] audit: type=1326 audit(1753985014.852:8167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 352.963337][ T28] audit: type=1326 audit(1753985014.852:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 352.988397][ T28] audit: type=1326 audit(1753985014.852:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 358.044060][ T4948] loop0: detected capacity change from 0 to 1024 [ 358.050745][ T4948] EXT4-fs: Ignoring removed i_version option [ 358.341688][ T4948] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1388: Invalid block bitmap block 0 in block_group 0 [ 358.699867][ T4948] __quota_error: 286 callbacks suppressed [ 358.699893][ T4948] Quota error (device loop0): write_blk: dquota write failed [ 358.713104][ T4948] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 358.723418][ T4948] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.1388: Failed to acquire dquot type 0 [ 358.735666][ T4948] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.1388: Freeing blocks not in datazone - block = 0, count = 4096 [ 358.749715][ T4948] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1388: Invalid inode bitmap blk 0 in block_group 0 [ 358.763835][ T4948] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 358.773328][ T4948] EXT4-fs (loop0): 1 orphan inode deleted [ 358.779104][ T4948] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 358.851780][ T700] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 359.021602][ T700] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:7: Failed to release dquot type 0 [ 359.053846][ T4961] binder: 4960:4961 ioctl 400c620e 0 returned -14 [ 359.071372][ T4963] netlink: 'syz.3.1395': attribute type 6 has an invalid length. [ 359.505767][ T283] EXT4-fs (loop0): unmounting filesystem. [ 359.550784][ T4973] x_tables: duplicate underflow at hook 1 [ 359.615036][ T28] audit: type=1326 audit(1753985021.882:8456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 359.639560][ T28] audit: type=1326 audit(1753985021.882:8457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 359.663809][ T28] audit: type=1326 audit(1753985021.882:8458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 359.698208][ T4987] loop0: detected capacity change from 0 to 1024 [ 359.705133][ T4987] EXT4-fs: Ignoring removed i_version option [ 359.747385][ T28] audit: type=1326 audit(1753985021.882:8459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 359.783080][ T4987] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1397: Invalid block bitmap block 0 in block_group 0 [ 359.797470][ T4987] Quota error (device loop0): write_blk: dquota write failed [ 359.804981][ T4987] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 359.815053][ T4987] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.1397: Failed to acquire dquot type 0 [ 359.828726][ T4987] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.1397: Freeing blocks not in datazone - block = 0, count = 4096 [ 359.843205][ T4987] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1397: Invalid inode bitmap blk 0 in block_group 0 [ 359.891845][ T10] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 359.902450][ T4987] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 359.912065][ T4987] EXT4-fs (loop0): 1 orphan inode deleted [ 359.917848][ T4987] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 360.086046][ T10] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 0 [ 361.371047][ T283] EXT4-fs (loop0): unmounting filesystem. [ 361.376987][ T5016] x_tables: duplicate underflow at hook 1 [ 361.405669][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 363.146919][ T5065] tipc: Cannot configure node identity twice [ 364.780110][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 364.780123][ T28] audit: type=1400 audit(1753985027.042:8547): avc: denied { write } for pid=5086 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 364.818082][ T28] audit: type=1326 audit(1753985027.082:8548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 364.850926][ T28] audit: type=1326 audit(1753985027.112:8549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 365.513457][ T28] audit: type=1326 audit(1753985027.112:8550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 365.536916][ T28] audit: type=1326 audit(1753985027.112:8551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 365.561362][ T28] audit: type=1326 audit(1753985027.112:8552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 365.688633][ T28] audit: type=1326 audit(1753985027.112:8553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 365.799900][ T4005] udevd[4005]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 365.876451][ T28] audit: type=1326 audit(1753985027.112:8554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 365.929765][ T28] audit: type=1326 audit(1753985027.112:8555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 366.158005][ T28] audit: type=1326 audit(1753985027.112:8556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 366.202421][ T5113] x_tables: duplicate underflow at hook 1 [ 366.332074][ T1175] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 366.527431][ T1175] usb 3-1: Using ep0 maxpacket: 16 [ 366.534463][ T1175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.548057][ T1175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.558725][ T1175] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.574125][ T1175] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 366.584732][ T1175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.315413][ T1175] usb 3-1: config 0 descriptor?? [ 367.394478][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 368.651469][ T1175] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000D/input/input8 [ 368.733602][ T1175] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 369.079993][ T418] usb 3-1: USB disconnect, device number 12 [ 369.352083][ T1175] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 369.543082][ T1175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.554047][ T1175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.563934][ T1175] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 369.576884][ T1175] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 369.585965][ T1175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.593861][ T5151] binder: 5150:5151 ioctl 541b 0 returned -22 [ 369.597634][ T1175] usb 1-1: config 0 descriptor?? [ 370.746040][ T5168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1464'. [ 370.785475][ T60] hid-generic 0000:0009:0001.000E: unknown main item tag 0x0 [ 370.793578][ T60] hid-generic 0000:0009:0001.000E: unknown main item tag 0x0 [ 370.801045][ T60] hid-generic 0000:0009:0001.000E: unknown main item tag 0x0 [ 370.811104][ T60] hid-generic 0000:0009:0001.000E: hidraw0: HID v0.04 Device [syz0] on syz1 [ 370.871017][ T5173] fido_id[5173]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 370.941778][ T1175] plantronics 0003:047F:FFFF.000F: collection stack underflow [ 370.951158][ T1175] plantronics 0003:047F:FFFF.000F: item 0 2 0 12 parsing failed [ 370.959265][ T1175] plantronics 0003:047F:FFFF.000F: parse failed [ 370.965825][ T1175] plantronics: probe of 0003:047F:FFFF.000F failed with error -22 [ 371.132097][ T60] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 371.171672][ T1175] usb 1-1: USB disconnect, device number 11 [ 371.720583][ T28] kauditd_printk_skb: 247 callbacks suppressed [ 371.720597][ T28] audit: type=1326 audit(1753985033.982:8804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 371.768637][ T28] audit: type=1326 audit(1753985034.012:8805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 371.797033][ T28] audit: type=1326 audit(1753985034.012:8806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 371.820689][ T28] audit: type=1326 audit(1753985034.012:8807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 371.844245][ T28] audit: type=1326 audit(1753985034.012:8808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 371.867942][ T28] audit: type=1326 audit(1753985034.012:8809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 371.891345][ T28] audit: type=1326 audit(1753985034.012:8810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 371.915082][ T28] audit: type=1326 audit(1753985034.012:8811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 371.915662][ T60] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 371.938660][ T28] audit: type=1326 audit(1753985034.012:8812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 371.946754][ T60] usb 3-1: config 0 has no interface number 0 [ 371.970137][ T28] audit: type=1326 audit(1753985034.022:8813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 371.979891][ T60] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.010570][ T60] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.020338][ T60] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 372.029441][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.037911][ T60] usb 3-1: config 0 descriptor?? [ 372.479299][ T60] uclogic 0003:28BD:0905.0010: Interface probing failed: -22 [ 372.487497][ T60] uclogic 0003:28BD:0905.0010: interface is invalid, ignoring [ 373.518219][ T60] usb 3-1: USB disconnect, device number 13 [ 374.098345][ T5238] block device autoloading is deprecated and will be removed. [ 377.226935][ T4036] udevd[4036]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 377.622109][ T1175] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 377.832231][ T1175] usb 2-1: Using ep0 maxpacket: 16 [ 377.839276][ T1175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.937352][ T1175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.030945][ T1175] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 378.045975][ T1175] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 378.056640][ T1175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.112205][ T1175] usb 2-1: config 0 descriptor?? [ 379.146874][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 379.440470][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 379.664289][ T1175] microsoft 0003:045E:07DA.0011: No inputs registered, leaving [ 379.676170][ T1175] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 381.499838][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 381.798713][ T1175] microsoft 0003:045E:07DA.0011: no inputs found [ 381.805148][ T1175] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 382.146419][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 382.202231][ T1175] usb 2-1: USB disconnect, device number 15 [ 382.253922][ T5404] fido_id[5404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 382.334465][ T5411] overlayfs: workdir and upperdir must be separate subtrees [ 382.413697][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 382.486368][ T4036] udevd[4036]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 382.619691][ T28] kauditd_printk_skb: 319 callbacks suppressed [ 382.619708][ T28] audit: type=1400 audit(1753985044.882:9133): avc: denied { getopt } for pid=5416 comm="syz.0.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.629816][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.661335][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 382.733044][ T24] usb 3-1: SerialNumber: syz [ 383.686804][ T5441] netlink: 'syz.3.1559': attribute type 11 has an invalid length. [ 384.579997][ T24] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 384.612711][ T24] usb 3-1: USB disconnect, device number 14 [ 384.715288][ T28] audit: type=1400 audit(1753985046.982:9134): avc: denied { ioctl } for pid=5454 comm="syz.3.1563" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 384.740135][ T5455] random: crng reseeded on system resumption [ 385.287924][ T5465] device vlan2 entered promiscuous mode [ 385.298989][ T5465] device bridge0 entered promiscuous mode [ 385.448029][ T28] audit: type=1400 audit(1753985047.712:9135): avc: denied { bind } for pid=5474 comm="syz.0.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 386.693533][ T28] audit: type=1326 audit(1753985048.952:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 386.909413][ T28] audit: type=1326 audit(1753985048.952:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 387.152562][ T28] audit: type=1326 audit(1753985048.962:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 388.711549][ T4036] udevd[4036]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 389.000115][ T5544] x_tables: duplicate underflow at hook 1 [ 389.429853][ T5550] x_tables: duplicate underflow at hook 1 [ 389.782207][ T28] audit: type=1326 audit(1753985052.042:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 389.967663][ T28] audit: type=1326 audit(1753985052.042:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 390.167075][ T28] audit: type=1326 audit(1753985052.042:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 391.003975][ T28] audit: type=1326 audit(1753985053.272:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.0.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 391.028082][ T28] audit: type=1326 audit(1753985053.272:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.0.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 391.052402][ T28] audit: type=1326 audit(1753985053.272:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.0.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 391.057243][ T5578] x_tables: duplicate underflow at hook 1 [ 391.076163][ T28] audit: type=1326 audit(1753985053.272:9145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.0.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 391.105028][ T28] audit: type=1326 audit(1753985053.272:9146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.0.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 391.128517][ T28] audit: type=1326 audit(1753985053.272:9147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.0.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 391.151928][ T28] audit: type=1326 audit(1753985053.272:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.0.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 393.612013][ T1175] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 393.630884][ T5591] x_tables: duplicate underflow at hook 1 [ 393.692127][ T5598] tmpfs: Unknown parameter '' [ 393.853146][ T1175] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 393.861418][ T1175] usb 4-1: config 1 has an invalid interface number: 4 but max is 0 [ 393.869637][ T1175] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 396.762022][ T1175] usb 4-1: config 1 has no interface number 0 [ 396.768302][ T1175] usb 4-1: config 1 has no interface number 1 [ 396.774662][ T1175] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.818140][ T28] kauditd_printk_skb: 231 callbacks suppressed [ 396.818154][ T28] audit: type=1400 audit(1753985059.082:9380): avc: denied { map } for pid=5620 comm="syz.3.1620" path="socket:[37207]" dev="sockfs" ino=37207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 396.853305][ T5623] random: crng reseeded on system resumption [ 396.959125][ T28] audit: type=1400 audit(1753985059.142:9381): avc: denied { accept } for pid=5620 comm="syz.3.1620" path="socket:[37207]" dev="sockfs" ino=37207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 397.279843][ T28] audit: type=1326 audit(1753985059.142:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 397.328931][ T1175] usb 4-1: config 1 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 397.361405][ T5638] x_tables: duplicate underflow at hook 1 [ 397.372073][ T1175] usb 4-1: config 1 interface 105 has no altsetting 0 [ 397.380530][ T1175] usb 4-1: config 1 interface 4 has no altsetting 0 [ 397.388614][ T1175] usb 4-1: string descriptor 0 read error: -71 [ 397.402674][ T1175] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 397.419284][ T1175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.455113][ T28] audit: type=1326 audit(1753985059.142:9383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 397.480250][ T1175] usb 4-1: can't set config #1, error -71 [ 397.487980][ T28] audit: type=1326 audit(1753985059.142:9384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 397.511159][ T1175] usb 4-1: USB disconnect, device number 10 [ 397.536436][ T28] audit: type=1326 audit(1753985059.142:9385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 397.636518][ T5646] x_tables: duplicate underflow at hook 1 [ 397.735970][ T28] audit: type=1326 audit(1753985059.142:9386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 397.760562][ T28] audit: type=1326 audit(1753985059.142:9387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 397.784205][ T28] audit: type=1326 audit(1753985059.142:9388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 397.808085][ T28] audit: type=1326 audit(1753985059.142:9389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 398.472119][ T5619] udevd[5619]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 398.516713][ T5677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1635'. [ 398.883031][ T418] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 399.062003][ T418] usb 5-1: Using ep0 maxpacket: 8 [ 399.068923][ T418] usb 5-1: unable to get BOS descriptor or descriptor too short [ 399.077789][ T418] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 399.086392][ T418] usb 5-1: config 0 has no interface number 0 [ 399.092762][ T418] usb 5-1: config 0 interface 125 has no altsetting 0 [ 399.101310][ T418] usb 5-1: New USB device found, idVendor=0fce, idProduct=e092, bcdDevice= 0.00 [ 399.111043][ T418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.119541][ T418] usb 5-1: Product: syz [ 399.123994][ T418] usb 5-1: Manufacturer: syz [ 399.128984][ T418] usb 5-1: SerialNumber: syz [ 399.137974][ T418] usb 5-1: config 0 descriptor?? [ 399.348219][ T418] usb-storage 5-1:0.125: USB Mass Storage device detected [ 399.362681][ T418] usb-storage 5-1:0.125: Quirks match for vid 0fce pid e092: 20 [ 399.436023][ T418] usb 5-1: USB disconnect, device number 12 [ 400.818340][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 401.714053][ T5729] loop0: detected capacity change from 0 to 2048 [ 401.854794][ T5729] Alternate GPT is invalid, using primary GPT. [ 401.861267][ T5729] loop0: p1 p2 p3 [ 402.019699][ T28] kauditd_printk_skb: 308 callbacks suppressed [ 402.019714][ T28] audit: type=1326 audit(1753985064.282:9698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 402.118165][ T28] audit: type=1326 audit(1753985064.322:9699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 402.144709][ T28] audit: type=1326 audit(1753985064.322:9700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 402.168868][ T28] audit: type=1326 audit(1753985064.322:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 402.195466][ T28] audit: type=1326 audit(1753985064.322:9702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 402.226643][ T28] audit: type=1326 audit(1753985064.322:9703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 402.250286][ T28] audit: type=1326 audit(1753985064.322:9704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 402.274975][ T28] audit: type=1326 audit(1753985064.322:9705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 402.298793][ T28] audit: type=1326 audit(1753985064.322:9706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 402.322444][ T28] audit: type=1326 audit(1753985064.322:9707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 402.454867][ T5748] block device autoloading is deprecated and will be removed. [ 404.172163][ T1175] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 404.430488][ T5784] x_tables: duplicate underflow at hook 1 [ 404.452051][ T1175] usb 4-1: Using ep0 maxpacket: 16 [ 404.458940][ T1175] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.498028][ T1175] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.517208][ T1175] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.539055][ T1175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.556881][ T1175] usb 4-1: Product: syz [ 404.566591][ T1175] usb 4-1: Manufacturer: syz [ 404.576632][ T1175] usb 4-1: SerialNumber: syz [ 404.865096][ T1175] usb 4-1: 0:2 : does not exist [ 404.884007][ T1175] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 404.907955][ T1175] usb 4-1: USB disconnect, device number 11 [ 405.551095][ T5815] x_tables: duplicate underflow at hook 1 [ 405.693187][ T5859] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1703'. [ 405.932530][ T418] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 406.161386][ T5871] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1707'. [ 406.213044][ T418] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.224016][ T418] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.234323][ T418] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 406.243634][ T418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.271915][ T418] usb 4-1: config 0 descriptor?? [ 406.836512][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 407.486885][ T5891] x_tables: duplicate underflow at hook 1 [ 407.972115][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 407.981721][ T418] hid-led: probe of 0003:27B8:01ED.0012 failed with error -71 [ 408.036735][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 408.058219][ T24] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 408.111421][ T418] usb 4-1: USB disconnect, device number 12 [ 408.162407][ T24] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 408.174995][ T24] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 408.189063][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 408.198272][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 408.207898][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.216887][ T24] usb 2-1: Product: syz [ 408.221090][ T24] usb 2-1: Manufacturer: syz [ 408.226045][ T24] usb 2-1: SerialNumber: syz [ 408.244610][ T5906] x_tables: duplicate underflow at hook 1 [ 408.411492][ T28] kauditd_printk_skb: 394 callbacks suppressed [ 408.411507][ T28] audit: type=1326 audit(1753985070.672:10102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 408.441601][ T28] audit: type=1326 audit(1753985070.672:10103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 408.446079][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 408.476366][ T28] audit: type=1326 audit(1753985070.672:10104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 408.501732][ T28] audit: type=1326 audit(1753985070.672:10105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 408.530688][ T28] audit: type=1326 audit(1753985070.672:10106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 408.563106][ T28] audit: type=1326 audit(1753985070.672:10107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 408.587670][ T28] audit: type=1326 audit(1753985070.682:10108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 408.611723][ T28] audit: type=1326 audit(1753985070.682:10109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 408.635925][ T28] audit: type=1326 audit(1753985070.682:10110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 408.651571][ T24] usb 2-1: USB disconnect, device number 16 [ 408.659629][ T28] audit: type=1326 audit(1753985070.682:10111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926d18eb69 code=0x7ffc0000 [ 408.699195][ T24] usblp0: removed [ 408.738894][ T5927] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1728' sets config #0 [ 408.754529][ T5929] syz.2.1729[5929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.754577][ T5929] syz.2.1729[5929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.648264][ T291] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 409.685036][ T5942] x_tables: duplicate underflow at hook 1 [ 409.872030][ T291] usb 4-1: Using ep0 maxpacket: 32 [ 409.878396][ T291] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 409.886501][ T291] usb 4-1: config 0 has no interface number 0 [ 409.894036][ T291] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 409.903113][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.911187][ T291] usb 4-1: Product: syz [ 409.915496][ T291] usb 4-1: Manufacturer: syz [ 409.920112][ T291] usb 4-1: SerialNumber: syz [ 409.947289][ T291] usb 4-1: config 0 descriptor?? [ 410.076856][ T5618] udevd[5618]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 410.107397][ T291] smsc95xx v2.0.0 [ 411.840873][ T5995] x_tables: duplicate underflow at hook 1 [ 412.522822][ T291] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 412.538398][ T291] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 412.554318][ T291] usb 4-1: USB disconnect, device number 13 [ 412.856100][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 413.022950][ T6031] x_tables: duplicate underflow at hook 1 [ 413.959734][ T6043] x_tables: duplicate underflow at hook 1 [ 414.515791][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 414.558555][ T5618] udevd[5618]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 414.717563][ T6067] tipc: Enabling of bearer rejected, failed to enable media [ 414.739152][ T6070] syz.3.1779[6070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.739221][ T6070] syz.3.1779[6070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.740659][ T28] kauditd_printk_skb: 837 callbacks suppressed [ 414.740670][ T28] audit: type=1326 audit(1753985077.002:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 414.768600][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 414.793762][ T28] audit: type=1326 audit(1753985077.062:10950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 414.831903][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 414.856213][ T28] audit: type=1326 audit(1753985077.062:10951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 414.881235][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.891044][ T28] audit: type=1326 audit(1753985077.062:10952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 414.903506][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 414.918114][ T28] audit: type=1326 audit(1753985077.062:10953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 414.957489][ T28] audit: type=1326 audit(1753985077.062:10954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 414.977115][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.993282][ T24] usb 2-1: Product: syz [ 414.997750][ T24] usb 2-1: Manufacturer: syz [ 415.002631][ T24] usb 2-1: SerialNumber: syz [ 415.007255][ T28] audit: type=1326 audit(1753985077.062:10955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 415.023626][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 415.036859][ T24] hub: probe of 2-1:1.0 failed with error -5 [ 415.045540][ T28] audit: type=1326 audit(1753985077.062:10956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 415.121421][ T28] audit: type=1326 audit(1753985077.062:10957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 415.192241][ T28] audit: type=1326 audit(1753985077.062:10958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 415.215619][ T6087] x_tables: duplicate underflow at hook 1 [ 415.226394][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 415.257028][ T6091] block device autoloading is deprecated and will be removed. [ 415.264878][ T6091] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 415.274318][ T6091] FAT-fs (loop9): unable to read boot sector [ 415.536542][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.544206][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.551640][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.559419][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.566898][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.585764][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.593263][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.600750][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.610454][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.618077][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.626326][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.633985][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.643491][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.651919][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.659362][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.666838][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.674269][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.681671][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.689123][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.697255][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.704690][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.712109][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.719514][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.727324][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.734794][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.743334][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.757933][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.778840][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.794584][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.813317][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.822761][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 415.835322][ T1175] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 416.086898][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 416.088579][ T19] usb 2-1: USB disconnect, device number 17 [ 417.329969][ T1175] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 417.351509][ T19] usblp0: removed [ 417.406046][ T6120] fido_id[6120]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 417.655035][ T24] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.794944][ T24] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.814854][ T6127] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1797'. [ 417.818500][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 417.840147][ T24] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 417.849641][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.859292][ T24] usb 1-1: config 0 descriptor?? [ 418.954893][ T24] usb 1-1: string descriptor 0 read error: -71 [ 418.963867][ T24] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #200: -71 [ 418.992076][ T24] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 419.062042][ T24] uclogic 0003:256C:006D.0014: failed probing pen v2 parameters: -71 [ 419.070559][ T24] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 419.078323][ T24] uclogic: probe of 0003:256C:006D.0014 failed with error -71 [ 419.087615][ T24] usb 1-1: USB disconnect, device number 12 [ 419.324853][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 419.511267][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 419.784845][ T28] kauditd_printk_skb: 364 callbacks suppressed [ 419.784866][ T28] audit: type=1326 audit(1753985082.052:11323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5eb3185b27 code=0x7ffc0000 [ 419.849266][ T28] audit: type=1326 audit(1753985082.082:11324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5eb312ad69 code=0x7ffc0000 [ 419.905651][ T28] audit: type=1326 audit(1753985082.082:11325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5eb3185b27 code=0x7ffc0000 [ 419.961930][ T28] audit: type=1326 audit(1753985082.082:11326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5eb312ad69 code=0x7ffc0000 [ 419.987227][ T28] audit: type=1326 audit(1753985082.082:11327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 420.011699][ T28] audit: type=1326 audit(1753985082.092:11328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5eb3185b27 code=0x7ffc0000 [ 420.011735][ T28] audit: type=1326 audit(1753985082.092:11329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5eb312ad69 code=0x7ffc0000 [ 420.011862][ T28] audit: type=1326 audit(1753985082.092:11330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 420.011919][ T28] audit: type=1326 audit(1753985082.092:11331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5eb3185b27 code=0x7ffc0000 [ 420.012594][ T28] audit: type=1326 audit(1753985082.092:11332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5eb312ad69 code=0x7ffc0000 [ 421.984051][ T291] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 422.315608][ T291] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.337812][ T291] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.420573][ T291] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 422.430311][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 422.438898][ T291] usb 2-1: SerialNumber: syz [ 423.887192][ T291] usb 2-1: 0:2 : does not exist [ 424.257384][ T291] usb 2-1: USB disconnect, device number 18 [ 424.973463][ T28] kauditd_printk_skb: 330 callbacks suppressed [ 424.974206][ T28] audit: type=1326 audit(1753985087.232:11664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 424.975540][ T28] audit: type=1326 audit(1753985087.232:11665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 424.978317][ T28] audit: type=1326 audit(1753985087.232:11666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 425.107524][ T28] audit: type=1326 audit(1753985086.672:11663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f926d185b27 code=0x7ffc0000 [ 425.184377][ T28] audit: type=1326 audit(1753985087.372:11667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f926d12ad69 code=0x7ffc0000 [ 425.220143][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 425.238117][ T6263] loop0: detected capacity change from 0 to 512 [ 425.241382][ T6263] EXT4-fs: Ignoring removed orlov option [ 425.245221][ T6263] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 425.248526][ T6263] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 425.250835][ T6263] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.1837: corrupted in-inode xattr [ 425.251122][ T6263] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1837: couldn't read orphan inode 15 (err -117) [ 425.251355][ T6263] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 425.255559][ T28] audit: type=1400 audit(1753985087.522:11668): avc: denied { append } for pid=6261 comm="syz.0.1837" path="/383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/pids.current" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 425.266066][ T283] EXT4-fs (loop0): unmounting filesystem. [ 425.515167][ T6259] tty tty3: ldisc open failed (-12), clearing slot 2 [ 428.113690][ T28] audit: type=1326 audit(1753985090.372:11669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 428.169719][ T28] audit: type=1326 audit(1753985090.372:11670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 428.194399][ T1175] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 428.243810][ T28] audit: type=1326 audit(1753985090.372:11671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 428.386422][ T28] audit: type=1326 audit(1753985090.372:11672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 428.682634][ T6314] loop1: detected capacity change from 0 to 1024 [ 428.692660][ T1175] usb 2-1: device descriptor read/all, error -71 [ 428.713895][ T6314] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 428.722841][ T6314] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.743521][ T700] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 428.758499][ T700] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 428.770949][ T700] EXT4-fs (loop1): This should not happen!! Data will be lost [ 428.770949][ T700] [ 428.780997][ T700] EXT4-fs (loop1): Total free blocks count 0 [ 428.787368][ T700] EXT4-fs (loop1): Free/Dirty block details [ 428.793435][ T700] EXT4-fs (loop1): free_blocks=4293918720 [ 428.799187][ T700] EXT4-fs (loop1): dirty_blocks=16 [ 428.804476][ T700] EXT4-fs (loop1): Block reservation details [ 428.810476][ T700] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 428.817228][ T285] EXT4-fs (loop1): unmounting filesystem. [ 430.145896][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 431.115424][ T19] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 431.492032][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 431.947704][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 431.973396][ T19] usb 5-1: config 0 has no interfaces? [ 432.049528][ T19] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 432.058681][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.100292][ T28] kauditd_printk_skb: 190 callbacks suppressed [ 432.100306][ T28] audit: type=1400 audit(1753985094.362:11863): avc: denied { create } for pid=6401 comm="syz.4.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 432.132456][ T19] usb 5-1: config 0 descriptor?? [ 432.147779][ T19] usb 5-1: can't set config #0, error -71 [ 432.157736][ T19] usb 5-1: USB disconnect, device number 13 [ 432.372072][ T1175] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 432.650359][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 432.781212][ T28] audit: type=1326 audit(1753985095.042:11864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 432.804925][ T28] audit: type=1326 audit(1753985095.042:11865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 432.828541][ T28] audit: type=1326 audit(1753985095.042:11866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 432.852155][ T1175] usb 2-1: Using ep0 maxpacket: 32 [ 432.853067][ T28] audit: type=1326 audit(1753985095.042:11867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 432.858535][ T1175] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 432.889140][ T1175] usb 2-1: config 0 has no interface number 0 [ 432.889402][ T28] audit: type=1326 audit(1753985095.042:11868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 432.918860][ T28] audit: type=1326 audit(1753985095.042:11869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 432.942529][ T28] audit: type=1326 audit(1753985095.042:11870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 432.966391][ T28] audit: type=1326 audit(1753985095.042:11871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 432.989959][ T28] audit: type=1326 audit(1753985095.042:11872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8b5e18eb69 code=0x7ffc0000 [ 432.990705][ T1175] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 433.023433][ T1175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.031445][ T1175] usb 2-1: Product: syz [ 433.035698][ T1175] usb 2-1: Manufacturer: syz [ 433.040290][ T1175] usb 2-1: SerialNumber: syz [ 433.046499][ T1175] usb 2-1: config 0 descriptor?? [ 433.053178][ T1175] smsc95xx v2.0.0 [ 433.231384][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 433.407057][ T6436] random: crng reseeded on system resumption [ 433.692086][ T19] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 433.807443][ T6115] udevd[6115]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 434.013005][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.023974][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.033738][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 434.046759][ T19] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 434.055826][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.064461][ T19] usb 4-1: config 0 descriptor?? [ 434.474469][ T19] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd [ 434.483256][ T19] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 434.493403][ T19] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 434.742596][ T291] usb 4-1: USB disconnect, device number 14 [ 434.802034][ T6424] Bluetooth: hci0: command 0x1003 tx timeout [ 434.802093][ T1029] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 434.976851][ T2586] Bluetooth: hci0: Frame reassembly failed (-84) [ 435.099517][ T5672] udevd[5672]: setting owner of /dev/loop0 to uid=0, gid=6 failed: No such file or directory [ 435.167028][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 435.221932][ T1175] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 435.232052][ T1175] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 435.267199][ T1175] usb 2-1: USB disconnect, device number 21 [ 435.712166][ T1175] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 435.952047][ T1175] usb 2-1: Using ep0 maxpacket: 32 [ 435.960374][ T1175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.021244][ T1175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.077514][ T1175] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 436.182182][ T1175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.295792][ T1175] usb 2-1: config 0 descriptor?? [ 436.297272][ T1175] hub 2-1:0.0: USB hub found [ 436.616695][ T1175] hub 2-1:0.0: 1 port detected [ 436.901999][ T291] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 437.021577][ T1175] usb 2-1: USB disconnect, device number 22 [ 437.042549][ T6424] Bluetooth: hci0: command 0x1003 tx timeout [ 437.042816][ T1029] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 437.113409][ T291] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 437.133171][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.206553][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.541979][ T291] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 438.397379][ T5618] udevd[5618]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 438.416203][ T291] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 438.426077][ T291] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 438.485959][ T291] usb 3-1: Manufacturer: syz [ 438.497741][ T291] usb 3-1: config 0 descriptor?? [ 438.503630][ T6533] loop1: detected capacity change from 0 to 4096 [ 438.792887][ T6533] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 438.815316][ T28] kauditd_printk_skb: 383 callbacks suppressed [ 438.815331][ T28] audit: type=1400 audit(1753985101.082:12256): avc: denied { setattr } for pid=6532 comm="syz.1.1927" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.850288][ T285] EXT4-fs (loop1): unmounting filesystem. [ 438.884354][ T28] audit: type=1400 audit(1753985101.152:12257): avc: denied { read } for pid=6541 comm="syz.1.1930" path="socket:[42098]" dev="sockfs" ino=42098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 439.030113][ T291] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 439.040867][ T291] appleir 0003:05AC:8243.0016: No inputs registered, leaving [ 439.066218][ T291] appleir 0003:05AC:8243.0016: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 439.972121][ T291] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 440.173110][ T291] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.184335][ T291] usb 5-1: config 0 interface 0 has no altsetting 0 [ 440.191080][ T291] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 440.200346][ T291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.214913][ T291] usb 5-1: config 0 descriptor?? [ 440.446233][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 440.455271][ T6593] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.462342][ T6593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.469606][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.476661][ T6593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.484463][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 440.670812][ T291] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0 [ 440.677736][ T291] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0 [ 440.685033][ T291] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0 [ 440.691746][ T291] lua 0003:1E7D:2C2E.0017: item fetching failed at offset 4/5 [ 440.699406][ T291] lua 0003:1E7D:2C2E.0017: parse failed [ 440.705030][ T291] lua: probe of 0003:1E7D:2C2E.0017 failed with error -22 [ 440.877480][ T19] usb 5-1: USB disconnect, device number 14 [ 441.012054][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 442.433917][ T1175] usb 3-1: USB disconnect, device number 15 [ 443.882133][ T6622] x_tables: duplicate underflow at hook 1 [ 443.896598][ T28] audit: type=1400 audit(1753985106.152:12258): avc: denied { setopt } for pid=6637 comm="syz.4.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 445.948362][ T6664] loop1: detected capacity change from 0 to 128 [ 446.913567][ T6115] udevd[6115]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 446.964581][ T6664] EXT4-fs: error -4 creating inode table initialization thread [ 446.972757][ T6664] EXT4-fs (loop1): mount failed [ 447.420446][ T6694] x_tables: duplicate underflow at hook 1 [ 447.732008][ T1175] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 448.271844][ T1175] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.284127][ T1175] usb 2-1: config 0 interface 0 has no altsetting 0 [ 448.290753][ T1175] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 448.301765][ T1175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.319479][ T1175] usb 2-1: config 0 descriptor?? [ 448.480736][ T6712] x_tables: duplicate underflow at hook 1 [ 448.765262][ T1175] lua 0003:1E7D:2C2E.0018: unknown main item tag 0x0 [ 448.772005][ T1175] lua 0003:1E7D:2C2E.0018: unknown main item tag 0x0 [ 448.778780][ T1175] lua 0003:1E7D:2C2E.0018: unknown main item tag 0x0 [ 448.785513][ T1175] lua 0003:1E7D:2C2E.0018: item fetching failed at offset 4/5 [ 449.939960][ T1175] lua 0003:1E7D:2C2E.0018: parse failed [ 449.945873][ T1175] lua: probe of 0003:1E7D:2C2E.0018 failed with error -22 [ 449.959443][ T1175] usb 2-1: USB disconnect, device number 23 [ 451.458530][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 451.661991][ T60] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 451.773033][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.784100][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.678790][ T24] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 452.749957][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 453.826633][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.910913][ T60] usb 4-1: unable to read config index 0 descriptor/all [ 454.016836][ T6794] input: syz0 as /devices/virtual/input/input13 [ 454.035312][ T24] usb 5-1: config 0 descriptor?? [ 454.040864][ T24] usb 5-1: can't set config #0, error -71 [ 454.047287][ T24] usb 5-1: USB disconnect, device number 15 [ 456.737176][ T6806] x_tables: duplicate underflow at hook 1 [ 456.990822][ T60] usb 4-1: can't read configurations, error -71 [ 458.134207][ T28] audit: type=1326 audit(1753985120.282:12259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 458.315959][ T28] audit: type=1326 audit(1753985120.282:12260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 458.339705][ T28] audit: type=1326 audit(1753985120.282:12261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 458.903857][ T6829] loop0: detected capacity change from 0 to 128 [ 459.892399][ T6829] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 459.901111][ T6829] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.906105][ T283] EXT4-fs (loop0): unmounting filesystem. [ 462.049236][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2027'. [ 462.058580][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2027'. [ 462.169065][ T6869] loop0: detected capacity change from 0 to 2048 [ 462.225328][ T6869] Alternate GPT is invalid, using primary GPT. [ 462.231769][ T6869] loop0: p1 p2 p3 [ 462.936521][ T6878] tmpfs: Unknown parameter 'q' [ 462.957645][ T6880] loop1: detected capacity change from 0 to 1024 [ 462.982630][ T6880] EXT4-fs: Ignoring removed i_version option [ 462.995138][ T6880] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 463.036508][ T6880] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 463.045671][ T28] audit: type=1400 audit(1753985125.282:12262): avc: denied { bind } for pid=6884 comm="syz.3.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 463.065414][ T60] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 463.074365][ T28] audit: type=1326 audit(1753985125.302:12263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 463.098008][ T28] audit: type=1326 audit(1753985125.302:12264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 463.121540][ T28] audit: type=1326 audit(1753985125.302:12265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 463.145057][ T28] audit: type=1326 audit(1753985125.302:12266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 463.168944][ T28] audit: type=1326 audit(1753985125.302:12267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 463.193051][ T28] audit: type=1326 audit(1753985125.302:12268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 463.193663][ T285] EXT4-fs (loop1): unmounting filesystem. [ 463.216875][ T28] audit: type=1326 audit(1753985125.302:12269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 463.245870][ T19] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 463.246457][ T28] audit: type=1326 audit(1753985125.302:12270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 463.253688][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 463.283613][ T28] audit: type=1326 audit(1753985125.302:12271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 463.432662][ T6895] loop0: detected capacity change from 0 to 2048 [ 463.441345][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 463.474117][ T6895] Alternate GPT is invalid, using primary GPT. [ 463.480563][ T6895] loop0: p1 p2 p3 [ 463.544439][ T19] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.567690][ T103] Alternate GPT is invalid, using primary GPT. [ 463.588200][ T60] usb 5-1: config 3 has an invalid interface number: 212 but max is 1 [ 463.605923][ T19] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.667446][ T103] loop0: p1 p2 p3 [ 463.671328][ T60] usb 5-1: config 3 has an invalid interface number: 3 but max is 1 [ 463.702824][ T19] usb 3-1: config 0 interface 0 has no altsetting 0 [ 463.719122][ T28] audit: type=1326 audit(1753985125.302:12272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 463.751742][ T60] usb 5-1: config 3 has no interface number 0 [ 464.365676][ T28] audit: type=1326 audit(1753985125.362:12273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0d7d85b27 code=0x7ffc0000 [ 464.397424][ T5618] udevd[5618]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 464.455146][ T5618] udevd[5618]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 464.532049][ T28] audit: type=1326 audit(1753985125.362:12274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb0d7d2ad69 code=0x7ffc0000 [ 464.603776][ T6910] x_tables: duplicate underflow at hook 1 [ 464.639975][ T28] audit: type=1326 audit(1753985125.362:12275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 464.673890][ T60] usb 5-1: config 3 has no interface number 1 [ 464.680252][ T60] usb 5-1: config 3 interface 212 has no altsetting 0 [ 464.687213][ T19] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 464.696295][ T60] usb 5-1: config 3 interface 3 has no altsetting 0 [ 464.702926][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.713777][ T19] usb 3-1: config 0 descriptor?? [ 464.719347][ T60] usb 5-1: New USB device found, idVendor=0499, idProduct=1507, bcdDevice=aa.69 [ 464.728662][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.737304][ T60] usb 5-1: Product: syz [ 464.741526][ T60] usb 5-1: Manufacturer: syz [ 464.746391][ T60] usb 5-1: SerialNumber: syz [ 464.963630][ T60] snd-usb-audio: probe of 5-1:3.212 failed with error -2 [ 464.981774][ T60] snd-usb-audio: probe of 5-1:3.3 failed with error -2 [ 464.994977][ T60] usb 5-1: USB disconnect, device number 16 [ 464.996509][ T5672] udevd[5672]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.3/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 465.388966][ T19] usb 3-1: string descriptor 0 read error: -22 [ 465.607276][ T19] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0019/input/input14 [ 465.687624][ T19] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0019/input/input15 [ 465.706171][ T19] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0019/input/input16 [ 465.726457][ T19] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0019/input/input17 [ 465.751787][ T19] uclogic 0003:256C:006D.0019: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 465.853829][ T19] usb 3-1: USB disconnect, device number 16 [ 468.880319][ T7009] x_tables: duplicate underflow at hook 1 [ 469.477424][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 469.477436][ T28] audit: type=1400 audit(1753985131.742:12338): avc: denied { write } for pid=7084 comm="syz.2.2079" name="icmp6" dev="proc" ino=4026532689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 469.585373][ T7097] SELinux: ebitmap start bit (1768187248) is not a multiple of the map unit size (64) [ 469.596852][ T7097] SELinux: failed to load policy [ 469.705747][ T28] audit: type=1400 audit(1753985131.972:12339): avc: denied { mounton } for pid=7117 comm="syz.2.2089" path="/412/file1" dev="tmpfs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 471.281410][ T7330] tipc: Started in network mode [ 471.292329][ T7330] tipc: Node identity 48, cluster identity 4711 [ 471.298658][ T7330] tipc: Node number set to 72 [ 471.412491][ T7336] x_tables: duplicate underflow at hook 1 [ 471.668289][ T7342] device batadv_slave_1 entered promiscuous mode [ 471.682811][ T7341] device batadv_slave_1 left promiscuous mode [ 471.744280][ T28] audit: type=1326 audit(1753985134.012:12340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 471.789203][ T28] audit: type=1326 audit(1753985134.032:12341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 471.836420][ T28] audit: type=1326 audit(1753985134.032:12342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 471.882062][ T28] audit: type=1326 audit(1753985134.032:12343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 471.917986][ T28] audit: type=1326 audit(1753985134.032:12344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 471.942304][ T28] audit: type=1326 audit(1753985134.032:12345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 471.966163][ T28] audit: type=1326 audit(1753985134.032:12346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 471.989850][ T28] audit: type=1326 audit(1753985134.032:12347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d7d8eb69 code=0x7ffc0000 [ 473.883775][ T7365] loop0: detected capacity change from 0 to 512 [ 473.984810][ T7365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 473.998259][ T7365] ext4 filesystem being mounted at /442/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 474.046992][ T7365] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.2105: corrupted inode contents [ 474.097883][ T7365] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #2: comm syz.0.2105: mark_inode_dirty error [ 474.184921][ T7365] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.2105: corrupted inode contents [ 474.262187][ T7365] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.2105: mark_inode_dirty error [ 474.375487][ T283] EXT4-fs (loop0): unmounting filesystem. [ 475.512026][ T28] kauditd_printk_skb: 214 callbacks suppressed [ 475.512045][ T28] audit: type=1400 audit(1753985137.772:12562): avc: denied { create } for pid=7397 comm="syz.4.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 475.515317][ T7402] SELinux: failed to load policy [ 475.690435][ T7427] x_tables: duplicate underflow at hook 1 [ 477.278113][ T7451] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2135'. [ 477.298630][ T28] audit: type=1400 audit(1753985139.562:12563): avc: denied { mount } for pid=7452 comm="syz.2.2136" name="/" dev="configfs" ino=13299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 477.356475][ T28] audit: type=1400 audit(1753985139.592:12564): avc: denied { search } for pid=7452 comm="syz.2.2136" name="/" dev="configfs" ino=13299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 477.396535][ T28] audit: type=1326 audit(1753985139.612:12565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 477.403613][ T7457] x_tables: duplicate underflow at hook 1 [ 477.431515][ T28] audit: type=1326 audit(1753985139.612:12566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 477.456246][ T28] audit: type=1326 audit(1753985139.612:12567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 477.480818][ T28] audit: type=1326 audit(1753985139.612:12568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 477.504998][ T28] audit: type=1326 audit(1753985139.612:12569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 477.533430][ T28] audit: type=1326 audit(1753985139.622:12570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 477.559028][ T28] audit: type=1326 audit(1753985139.622:12571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 478.649876][ T7498] x_tables: duplicate underflow at hook 1 [ 479.055537][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 479.307243][ T7523] x_tables: duplicate underflow at hook 1 [ 479.556458][ T7538] x_tables: duplicate underflow at hook 1 [ 480.511670][ T7573] device veth0 entered promiscuous mode [ 480.517798][ T7572] device veth0 left promiscuous mode [ 480.524543][ T28] kauditd_printk_skb: 332 callbacks suppressed [ 480.524556][ T28] audit: type=1326 audit(1753985142.792:12904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.2.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ac8f85b27 code=0x7ffc0000 [ 480.554615][ T28] audit: type=1326 audit(1753985142.792:12905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.2.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ac8f2ad69 code=0x7ffc0000 [ 480.587414][ T28] audit: type=1326 audit(1753985142.792:12906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.2.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 480.613335][ T28] audit: type=1326 audit(1753985142.822:12907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.2.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ac8f85b27 code=0x7ffc0000 [ 480.651585][ T28] audit: type=1326 audit(1753985142.822:12908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.2.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ac8f2ad69 code=0x7ffc0000 [ 480.681598][ T28] audit: type=1326 audit(1753985142.822:12909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.2.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 480.999612][ T28] audit: type=1326 audit(1753985142.832:12910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.2.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ac8f85b27 code=0x7ffc0000 [ 481.221233][ T28] audit: type=1326 audit(1753985142.832:12911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.2.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ac8f2ad69 code=0x7ffc0000 [ 481.375055][ T28] audit: type=1326 audit(1753985142.832:12912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.2.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 481.514117][ T28] audit: type=1326 audit(1753985142.842:12913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.2.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ac8f85b27 code=0x7ffc0000 [ 481.779191][ T7594] binder: 7592:7594 ioctl c0306201 200000000040 returned -14 [ 481.821754][ T7604] x_tables: duplicate underflow at hook 1 [ 481.837937][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2194'. [ 483.571600][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 483.580842][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 483.589775][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 483.808508][ T7649] x_tables: duplicate underflow at hook 1 [ 485.462951][ T7148] Bluetooth: hci0: Frame reassembly failed (-84) [ 485.467999][ T7686] x_tables: duplicate underflow at hook 1 [ 486.439835][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 487.060042][ T7724] x_tables: duplicate underflow at hook 1 [ 487.197881][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 487.197895][ T28] audit: type=1326 audit(1753985149.462:12981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 487.228847][ T28] audit: type=1326 audit(1753985149.492:12982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 487.252944][ T28] audit: type=1326 audit(1753985149.492:12983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 487.276752][ T28] audit: type=1326 audit(1753985149.492:12984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 487.303364][ T28] audit: type=1326 audit(1753985149.492:12985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 487.327374][ T28] audit: type=1326 audit(1753985149.492:12986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 487.357379][ T28] audit: type=1326 audit(1753985149.492:12987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 487.382872][ T28] audit: type=1326 audit(1753985149.492:12988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 487.406375][ T28] audit: type=1326 audit(1753985149.492:12989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 487.406402][ T28] audit: type=1326 audit(1753985149.492:12990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5eb318eb69 code=0x7ffc0000 [ 487.525396][ T6424] Bluetooth: hci0: command 0x1003 tx timeout [ 487.531654][ T1029] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 487.551123][ T7752] x_tables: duplicate underflow at hook 1 [ 488.440500][ T5618] udevd[5618]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 488.451595][ T6115] udevd[6115]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 488.852648][ T60] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 489.576539][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 489.585379][ T60] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 489.677173][ T60] usb 2-1: config 0 has no interface number 0 [ 489.759901][ T60] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 490.221792][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.231040][ T60] usb 2-1: Product: syz [ 490.235552][ T60] usb 2-1: Manufacturer: syz [ 490.240173][ T60] usb 2-1: SerialNumber: syz [ 490.252395][ T60] usb 2-1: config 0 descriptor?? [ 490.264411][ T60] smsc95xx v2.0.0 [ 490.378741][ T7221] Bluetooth: hci0: Frame reassembly failed (-84) [ 490.417111][ T7841] Bluetooth: hci0: Frame reassembly failed (-84) [ 492.206099][ T28] kauditd_printk_skb: 125 callbacks suppressed [ 492.206112][ T28] audit: type=1326 audit(1753985154.472:13116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ac8f85b27 code=0x7ffc0000 [ 492.235767][ T28] audit: type=1326 audit(1753985154.472:13117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ac8f2ad69 code=0x7ffc0000 [ 492.259236][ T28] audit: type=1326 audit(1753985154.472:13118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 492.282688][ T28] audit: type=1326 audit(1753985154.482:13119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ac8f85b27 code=0x7ffc0000 [ 492.306149][ T28] audit: type=1326 audit(1753985154.482:13120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ac8f2ad69 code=0x7ffc0000 [ 492.329701][ T28] audit: type=1326 audit(1753985154.482:13121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 492.353190][ T28] audit: type=1326 audit(1753985154.492:13122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ac8f85b27 code=0x7ffc0000 [ 492.376648][ T28] audit: type=1326 audit(1753985154.492:13123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ac8f2ad69 code=0x7ffc0000 [ 492.400146][ T28] audit: type=1326 audit(1753985154.492:13124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0ac8f8eb69 code=0x7ffc0000 [ 492.402027][ T6424] Bluetooth: hci0: command 0x1003 tx timeout [ 492.428634][ T28] audit: type=1326 audit(1753985154.502:13125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ac8f85b27 code=0x7ffc0000 [ 492.429646][ T1029] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 492.605326][ T60] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 492.875026][ T60] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 492.882878][ T60] usb 2-1: USB disconnect, device number 24 [ 494.673975][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 494.751978][ T291] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 494.805757][ T60] kernel write not supported for file /1489/clear_refs (pid: 60 comm: kworker/0:2) [ 494.939549][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 494.954355][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.961399][ T7960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.968748][ T7960] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.975797][ T7960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.986561][ T291] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.026653][ T291] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.038413][ T291] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 495.050493][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 495.057901][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 495.067194][ T291] usb 1-1: SerialNumber: syz [ 495.109814][ T7148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 495.130881][ T7148] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 495.141533][ T7148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 495.153419][ T7148] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 495.161868][ T7148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 495.178499][ T7148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 495.187196][ T7148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 495.197421][ T7148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 495.205732][ T7148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 495.334684][ T291] usb 1-1: 0:2 : does not exist [ 495.361724][ T291] usb 1-1: USB disconnect, device number 13 [ 495.662015][ T19] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 495.933589][ T19] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 495.961765][ T19] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 495.982508][ T19] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 496.086736][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.268128][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 496.705656][ T19] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 496.717111][ T19] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input18 [ 497.001768][ T19] input: failed to attach handler kbd to device input18, error: -5 [ 497.020706][ T19] usb 3-1: USB disconnect, device number 17 [ 497.255744][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 497.255767][ T28] audit: type=1400 audit(1753985159.472:13255): avc: denied { bpf } for pid=7997 comm="syz.1.2340" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 497.287922][ T28] audit: type=1400 audit(1753985159.472:13256): avc: denied { map_create } for pid=7997 comm="syz.1.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 497.321382][ T28] audit: type=1400 audit(1753985159.472:13257): avc: denied { map_read map_write } for pid=7997 comm="syz.1.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 497.338676][ T8013] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2345'. [ 497.341394][ T28] audit: type=1400 audit(1753985159.482:13258): avc: denied { prog_load } for pid=7997 comm="syz.1.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 497.377837][ T28] audit: type=1400 audit(1753985159.482:13259): avc: denied { perfmon } for pid=7997 comm="syz.1.2340" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 497.399896][ T28] audit: type=1400 audit(1753985159.492:13260): avc: denied { create } for pid=7997 comm="syz.1.2340" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 497.421323][ T28] audit: type=1400 audit(1753985159.492:13261): avc: denied { map } for pid=7997 comm="syz.1.2340" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 497.447938][ T28] audit: type=1400 audit(1753985159.492:13262): avc: denied { read write } for pid=7997 comm="syz.1.2340" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 497.473539][ T28] audit: type=1400 audit(1753985159.502:13263): avc: denied { create } for pid=7997 comm="syz.1.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 497.520043][ T28] audit: type=1400 audit(1753985159.502:13264): avc: denied { write } for pid=7997 comm="syz.1.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 497.922634][ T8048] device veth0 entered promiscuous mode [ 497.929885][ T8047] device veth0 left promiscuous mode [ 497.971402][ T8050] serio: Serial port ttyS3 [ 498.497291][ T8063] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 498.865668][ T8079] random: crng reseeded on system resumption [ 499.133461][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 499.356676][ T8101] x_tables: duplicate underflow at hook 1 [ 499.808840][ T291] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 499.923821][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 500.033114][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.072096][ T60] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 500.075184][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.089537][ T291] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 500.098680][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.108278][ T291] usb 2-1: config 0 descriptor?? [ 500.262006][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 500.268619][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.279849][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.289908][ T60] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 500.298984][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.307829][ T60] usb 1-1: config 0 descriptor?? [ 500.313808][ T60] hub 1-1:0.0: USB hub found [ 500.482213][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 500.514839][ T60] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 500.682979][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.694142][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.704086][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 500.710730][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 500.719908][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.719988][ T291] usb 2-1: string descriptor 0 read error: -22 [ 500.725349][ T60] hid-generic 0003:046D:C31C.001B: item fetching failed at offset 0/1 [ 500.734700][ T60] hid-generic: probe of 0003:046D:C31C.001B failed with error -22 [ 500.743802][ T24] usb 4-1: config 0 descriptor?? [ 501.076588][ T6112] udevd[6112]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 501.139174][ T291] uclogic 0003:256C:006D.001A: failed retrieving string descriptor #100: -71 [ 501.148307][ T291] uclogic 0003:256C:006D.001A: failed retrieving pen parameters: -71 [ 501.156427][ T291] uclogic 0003:256C:006D.001A: failed probing pen v1 parameters: -71 [ 501.164572][ T291] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 501.172073][ T291] uclogic: probe of 0003:256C:006D.001A failed with error -71 [ 501.183875][ T291] usb 2-1: USB disconnect, device number 25 [ 501.202113][ T418] usb 1-1: USB disconnect, device number 14 [ 501.478086][ T24] usb 4-1: string descriptor 0 read error: -22 [ 501.679400][ T24] uclogic 0003:256C:006D.001C: interface is invalid, ignoring [ 501.906393][ T24] usb 4-1: USB disconnect, device number 17 [ 502.344671][ T28] kauditd_printk_skb: 447 callbacks suppressed [ 502.344688][ T28] audit: type=1400 audit(1753985164.582:13712): avc: denied { connect } for pid=8147 comm="syz.2.2392" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 502.379053][ T28] audit: type=1400 audit(1753985164.582:13713): avc: denied { write } for pid=8147 comm="syz.2.2392" path="socket:[47749]" dev="sockfs" ino=47749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 502.403739][ T28] audit: type=1400 audit(1753985164.592:13714): avc: denied { create } for pid=8149 comm="syz.4.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 502.430869][ T28] audit: type=1400 audit(1753985164.602:13715): avc: denied { write } for pid=8149 comm="syz.4.2391" path="socket:[47765]" dev="sockfs" ino=47765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 502.480970][ T28] audit: type=1400 audit(1753985164.742:13716): avc: denied { read write } for pid=283 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 502.515020][ T28] audit: type=1400 audit(1753985164.742:13717): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 502.539441][ T28] audit: type=1400 audit(1753985164.742:13718): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1274 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 502.691973][ T8164] loop0: detected capacity change from 0 to 2048 [ 502.745936][ T8164] Alternate GPT is invalid, using primary GPT. [ 502.752418][ T8164] loop0: p1 p2 p3 [ 504.419686][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 504.431363][ T5618] udevd[5618]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 504.443518][ T6115] udevd[6115]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 504.477637][ T8186] x_tables: duplicate underflow at hook 1 [ 504.610651][ T28] audit: type=1400 audit(1753985166.872:13719): avc: denied { append } for pid=8191 comm="syz.2.2406" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 504.632036][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 504.672012][ T19] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 504.822000][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 504.828198][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 504.836347][ T24] usb 5-1: config 0 has no interface number 0 [ 504.844320][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 504.853421][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.861418][ T24] usb 5-1: Product: syz [ 504.865628][ T24] usb 5-1: Manufacturer: syz [ 504.870206][ T24] usb 5-1: SerialNumber: syz [ 504.875641][ T24] usb 5-1: config 0 descriptor?? [ 504.881250][ T24] smsc95xx v2.0.0 [ 504.881951][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 504.891186][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.902435][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.915982][ T19] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 504.925217][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.926030][ T28] audit: type=1400 audit(1753985167.192:13720): avc: denied { write } for pid=8196 comm="syz.2.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 504.936745][ T19] usb 4-1: config 0 descriptor?? [ 504.960958][ T19] hub 4-1:0.0: USB hub found [ 505.164799][ T19] hub 4-1:0.0: 6 ports detected [ 505.170006][ T19] hub 4-1:0.0: insufficient power available to use all downstream ports [ 505.186966][ T28] audit: type=1400 audit(1753985167.452:13721): avc: denied { name_bind } for pid=8175 comm="syz.4.2401" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 505.742723][ T19] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 505.763251][ T19] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 505.795425][ T19] usbhid 4-1:0.0: can't add hid device: -71 [ 505.802777][ T19] usbhid: probe of 4-1:0.0 failed with error -71 [ 505.890297][ T19] usb 4-1: USB disconnect, device number 18 [ 507.408787][ T8222] xt_bpf: check failed: parse error [ 507.497073][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 507.507207][ T24] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 507.515321][ T24] usb 5-1: USB disconnect, device number 17 [ 507.601152][ T8237] x_tables: duplicate underflow at hook 1 [ 507.895519][ T28] audit: type=1400 audit(1753985170.162:13722): avc: denied { ioctl } for pid=8241 comm="syz.3.2422" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 507.936994][ T28] audit: type=1400 audit(1753985170.162:13723): avc: denied { set_context_mgr } for pid=8241 comm="syz.3.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 507.957319][ T28] audit: type=1400 audit(1753985170.202:13724): avc: denied { mount } for pid=8245 comm="syz.1.2423" name="/" dev="incremental-fs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 507.998217][ T28] audit: type=1400 audit(1753985170.262:13725): avc: denied { ioctl } for pid=8247 comm="syz.3.2425" path="socket:[49527]" dev="sockfs" ino=49527 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 508.020651][ T7155] Bluetooth: hci0: Frame reassembly failed (-84) [ 508.048122][ T28] audit: type=1400 audit(1753985170.312:13726): avc: denied { remount } for pid=8245 comm="syz.1.2423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 508.060274][ T8246] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 508.094038][ T28] audit: type=1400 audit(1753985170.362:13727): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 508.198317][ T8262] x_tables: duplicate underflow at hook 1 [ 509.102322][ T28] audit: type=1400 audit(1753985171.372:13728): avc: denied { mounton } for pid=8265 comm="syz.4.2432" path="/506/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 509.102461][ T8266] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 509.147864][ T28] audit: type=1400 audit(1753985171.412:13729): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 509.168223][ T28] audit: type=1400 audit(1753985171.422:13730): avc: denied { relabelfrom } for pid=8267 comm="syz.4.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 509.188416][ T28] audit: type=1400 audit(1753985171.422:13731): avc: denied { relabelto } for pid=8267 comm="syz.4.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 509.251969][ T418] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 509.431967][ T418] usb 3-1: Using ep0 maxpacket: 32 [ 509.438110][ T418] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 509.446407][ T418] usb 3-1: config 0 has no interface number 0 [ 509.453803][ T418] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 509.462859][ T418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.470827][ T418] usb 3-1: Product: syz [ 509.475015][ T418] usb 3-1: Manufacturer: syz [ 509.479603][ T418] usb 3-1: SerialNumber: syz [ 509.485007][ T418] usb 3-1: config 0 descriptor?? [ 509.490640][ T418] smsc95xx v2.0.0 [ 510.082090][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 510.083489][ T1029] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 510.094824][ T8248] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 510.750659][ T5672] udevd[5672]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 511.326081][ T418] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 511.343113][ T418] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 511.363290][ T418] usb 3-1: USB disconnect, device number 18 [ 511.395402][ T8299] input: syz0 as /devices/virtual/input/input19 [ 512.161948][ C1] ================================================================== [ 512.170037][ C1] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9a0 [ 512.177080][ C1] Write of size 8 at addr ffff88811bb14a00 by task syz.0.2448/8314 [ 512.184966][ C1] [ 512.187290][ C1] CPU: 1 PID: 8314 Comm: syz.0.2448 Not tainted 6.1.145-syzkaller-00027-g42472e1a4913 #0 [ 512.197084][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.207143][ C1] Call Trace: [ 512.210415][ C1] [ 512.213257][ C1] __dump_stack+0x21/0x24 [ 512.217601][ C1] dump_stack_lvl+0xee/0x150 [ 512.222195][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 512.227222][ C1] ? __run_timers+0x32b/0x9a0 [ 512.231897][ C1] print_address_description+0x71/0x210 [ 512.237440][ C1] print_report+0x4a/0x60 [ 512.241768][ C1] kasan_report+0x122/0x150 [ 512.246272][ C1] ? __run_timers+0x32b/0x9a0 [ 512.250954][ C1] __asan_report_store8_noabort+0x17/0x20 [ 512.256715][ C1] __run_timers+0x32b/0x9a0 [ 512.261225][ C1] ? sched_clock+0x9/0x10 [ 512.265558][ C1] ? sched_clock_cpu+0x6e/0x250 [ 512.270408][ C1] ? calc_index+0x200/0x200 [ 512.274910][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 512.280112][ C1] run_timer_softirq+0x6a/0xf0 [ 512.284872][ C1] handle_softirqs+0x1d7/0x600 [ 512.289628][ C1] ? irqtime_account_irq+0xc4/0x240 [ 512.294826][ C1] __irq_exit_rcu+0x52/0xf0 [ 512.299353][ C1] irq_exit_rcu+0x9/0x10 [ 512.303591][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 512.309220][ C1] [ 512.312137][ C1] [ 512.315056][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 512.321043][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 512.327462][ C1] Code: 00 d5 ed 86 e8 fc f6 c3 fc 4c 89 f7 48 83 3d 71 6f fd 01 00 74 30 e8 1e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b6 37 5b fc 65 8b 05 17 08 12 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 512.347075][ C1] RSP: 0018:ffffc9001169f5a0 EFLAGS: 00000206 [ 512.353135][ C1] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 512.361093][ C1] RDX: ffffc900116af698 RSI: 0000000000000a06 RDI: 0000000000000001 [ 512.369039][ C1] RBP: ffffc9001169f5b0 R08: dffffc0000000000 R09: ffffed1023350799 [ 512.376997][ C1] R10: ffffed1023350799 R11: 1ffff11023350798 R12: ffff888140efd300 [ 512.384962][ C1] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000 [ 512.392933][ C1] __wake_up_sync_key+0x166/0x280 [ 512.397960][ C1] ? __cfi___wake_up_sync_key+0x10/0x10 [ 512.403503][ C1] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 512.409154][ C1] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 512.414535][ C1] __unix_dgram_recvmsg+0x496/0xd70 [ 512.419729][ C1] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 512.425439][ C1] ? __kasan_check_read+0x11/0x20 [ 512.430454][ C1] ? preempt_schedule_irq+0xbb/0x110 [ 512.435724][ C1] unix_dgram_recvmsg+0xc7/0xe0 [ 512.440563][ C1] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 512.446092][ C1] ____sys_recvmsg+0x2a0/0x590 [ 512.450868][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 512.456486][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 512.461495][ C1] ? import_iovec+0x7c/0xb0 [ 512.465981][ C1] ___sys_recvmsg+0x1b2/0x510 [ 512.470637][ C1] ? __sys_recvmsg+0x270/0x270 [ 512.475381][ C1] ? cgroup_rstat_updated+0xf5/0x370 [ 512.480647][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 512.486288][ C1] do_recvmmsg+0x359/0x7a0 [ 512.490692][ C1] ? __sys_recvmmsg+0x280/0x280 [ 512.495576][ C1] ? __cfi_bpf_trace_run2+0x10/0x10 [ 512.500787][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 512.505809][ C1] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 512.511356][ C1] ? trace_sys_enter+0x3d/0x50 [ 512.516130][ C1] x64_sys_call+0x3e7/0x9a0 [ 512.520621][ C1] do_syscall_64+0x4c/0xa0 [ 512.525024][ C1] ? clear_bhb_loop+0x30/0x80 [ 512.529694][ C1] ? clear_bhb_loop+0x30/0x80 [ 512.534355][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.540233][ C1] RIP: 0033:0x7f926d18eb69 [ 512.544722][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.564311][ C1] RSP: 002b:00007f926e015038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 512.572710][ C1] RAX: ffffffffffffffda RBX: 00007f926d3b6080 RCX: 00007f926d18eb69 [ 512.580661][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 512.588610][ C1] RBP: 00007f926d211df1 R08: 0000000000000000 R09: 0000000000000000 [ 512.596561][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 512.604508][ C1] R13: 0000000000000001 R14: 00007f926d3b6080 R15: 00007ffd0f645b88 [ 512.612462][ C1] [ 512.615459][ C1] [ 512.617773][ C1] Allocated by task 8248: [ 512.622074][ C1] kasan_set_track+0x4b/0x70 [ 512.626646][ C1] kasan_save_alloc_info+0x25/0x30 [ 512.631737][ C1] __kasan_kmalloc+0x95/0xb0 [ 512.636308][ C1] __kmalloc+0xb1/0x1e0 [ 512.640449][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 512.645449][ C1] hci_uart_tty_ioctl+0x3d6/0xa20 [ 512.650453][ C1] tty_ioctl+0x8ef/0xc60 [ 512.654670][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 512.659327][ C1] __x64_sys_ioctl+0x7b/0x90 [ 512.663899][ C1] x64_sys_call+0x58b/0x9a0 [ 512.668381][ C1] do_syscall_64+0x4c/0xa0 [ 512.672772][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.678645][ C1] [ 512.680949][ C1] Freed by task 8248: [ 512.684902][ C1] kasan_set_track+0x4b/0x70 [ 512.689475][ C1] kasan_save_free_info+0x31/0x50 [ 512.694483][ C1] ____kasan_slab_free+0x132/0x180 [ 512.700004][ C1] __kasan_slab_free+0x11/0x20 [ 512.704745][ C1] slab_free_freelist_hook+0xc2/0x190 [ 512.710099][ C1] __kmem_cache_free+0xb7/0x1b0 [ 512.714926][ C1] kfree+0x6f/0xf0 [ 512.718626][ C1] hci_release_dev+0x12a3/0x13b0 [ 512.723542][ C1] bt_host_release+0x82/0x90 [ 512.728112][ C1] device_release+0xa4/0x1d0 [ 512.732679][ C1] kobject_put+0x19d/0x280 [ 512.737071][ C1] put_device+0x1f/0x30 [ 512.741208][ C1] hci_dev_cmd+0x265/0x720 [ 512.745605][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 512.750261][ C1] sock_do_ioctl+0x101/0x310 [ 512.754832][ C1] sock_ioctl+0x4d8/0x6e0 [ 512.759139][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 512.763796][ C1] __x64_sys_ioctl+0x7b/0x90 [ 512.768367][ C1] x64_sys_call+0x58b/0x9a0 [ 512.772846][ C1] do_syscall_64+0x4c/0xa0 [ 512.777238][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.783109][ C1] [ 512.785408][ C1] Last potentially related work creation: [ 512.791093][ C1] kasan_save_stack+0x3a/0x60 [ 512.795751][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 512.801105][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 512.806891][ C1] insert_work+0x51/0x300 [ 512.811203][ C1] __queue_work+0x9b1/0xd30 [ 512.815686][ C1] queue_work_on+0xd2/0x140 [ 512.820168][ C1] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 512.825089][ C1] hci_cmd_sync_status+0x53/0x120 [ 512.830106][ C1] hci_dev_cmd+0x628/0x720 [ 512.834502][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 512.839158][ C1] sock_do_ioctl+0x101/0x310 [ 512.843727][ C1] sock_ioctl+0x4d8/0x6e0 [ 512.848033][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 512.852694][ C1] __x64_sys_ioctl+0x7b/0x90 [ 512.857266][ C1] x64_sys_call+0x58b/0x9a0 [ 512.861751][ C1] do_syscall_64+0x4c/0xa0 [ 512.866147][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.872015][ C1] [ 512.874313][ C1] Second to last potentially related work creation: [ 512.880867][ C1] kasan_save_stack+0x3a/0x60 [ 512.885518][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 512.890880][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 512.896687][ C1] insert_work+0x51/0x300 [ 512.901012][ C1] __queue_work+0x9b1/0xd30 [ 512.905505][ C1] queue_work_on+0xd2/0x140 [ 512.909995][ C1] hci_cmd_timeout+0x191/0x200 [ 512.914747][ C1] process_one_work+0x71f/0xc40 [ 512.919590][ C1] worker_thread+0xa29/0x11f0 [ 512.924270][ C1] kthread+0x281/0x320 [ 512.928321][ C1] ret_from_fork+0x1f/0x30 [ 512.932722][ C1] [ 512.935025][ C1] The buggy address belongs to the object at ffff88811bb14000 [ 512.935025][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 512.949057][ C1] The buggy address is located 2560 bytes inside of [ 512.949057][ C1] 8192-byte region [ffff88811bb14000, ffff88811bb16000) [ 512.962494][ C1] [ 512.964801][ C1] The buggy address belongs to the physical page: [ 512.971198][ C1] page:ffffea00046ec400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11bb10 [ 512.981428][ C1] head:ffffea00046ec400 order:3 compound_mapcount:0 compound_pincount:0 [ 512.989735][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 512.995799][ C1] raw: 4000000000010200 ffffea00046eaa00 dead000000000006 ffff888100043500 [ 513.004361][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 513.012917][ C1] page dumped because: kasan: bad access detected [ 513.019309][ C1] page_owner tracks the page as allocated [ 513.024998][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7346, tgid 7345 (syz.3.2100), ts 472109296543, free_ts 472019326491 [ 513.047719][ C1] post_alloc_hook+0x1f5/0x210 [ 513.052476][ C1] prep_new_page+0x1c/0x110 [ 513.056959][ C1] get_page_from_freelist+0x2c7b/0x2cf0 [ 513.062489][ C1] __alloc_pages+0x1c3/0x450 [ 513.067056][ C1] alloc_slab_page+0x6e/0xf0 [ 513.071627][ C1] new_slab+0x98/0x3d0 [ 513.075677][ C1] ___slab_alloc+0x6f6/0xb50 [ 513.080266][ C1] __slab_alloc+0x5e/0xa0 [ 513.084574][ C1] __kmem_cache_alloc_node+0x203/0x2c0 [ 513.090009][ C1] kmalloc_trace+0x29/0xb0 [ 513.094407][ C1] audit_log_d_path+0xc6/0x240 [ 513.099500][ C1] audit_log_d_path_exe+0x42/0x70 [ 513.104506][ C1] audit_log_task+0x205/0x2e0 [ 513.109160][ C1] audit_seccomp+0x7f/0x160 [ 513.113642][ C1] __seccomp_filter+0xacd/0x19d0 [ 513.118558][ C1] __secure_computing+0xea/0x290 [ 513.123471][ C1] page last free stack trace: [ 513.128117][ C1] free_unref_page_prepare+0x742/0x750 [ 513.133553][ C1] free_unref_page+0x8f/0x530 [ 513.138208][ C1] __free_pages+0x67/0x100 [ 513.142603][ C1] __free_slab+0xca/0x1a0 [ 513.146921][ C1] __unfreeze_partials+0x160/0x190 [ 513.152028][ C1] put_cpu_partial+0xa9/0x100 [ 513.156689][ C1] __slab_free+0x1c4/0x280 [ 513.161092][ C1] ___cache_free+0xbf/0xd0 [ 513.165494][ C1] qlist_free_all+0xc6/0x140 [ 513.170074][ C1] kasan_quarantine_reduce+0x14a/0x170 [ 513.175520][ C1] __kasan_slab_alloc+0x24/0x80 [ 513.180347][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 513.185442][ C1] kmem_cache_alloc+0x16e/0x330 [ 513.190272][ C1] audit_log_start+0x3a4/0x8b0 [ 513.195017][ C1] audit_seccomp+0x62/0x160 [ 513.199499][ C1] __seccomp_filter+0xacd/0x19d0 [ 513.206655][ C1] [ 513.208971][ C1] Memory state around the buggy address: [ 513.214594][ C1] ffff88811bb14900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 513.222647][ C1] ffff88811bb14980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 513.230703][ C1] >ffff88811bb14a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 513.238748][ C1] ^ [ 513.242796][ C1] ffff88811bb14a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 513.250840][ C1] ffff88811bb14b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 513.258879][ C1] ================================================================== [ 513.266915][ C1] Disabling lock debugging due to kernel taint [ 513.273089][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 513.284780][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 513.293168][ C1] CPU: 1 PID: 8314 Comm: syz.0.2448 Tainted: G B 6.1.145-syzkaller-00027-g42472e1a4913 #0 [ 513.304425][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.314460][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 513.319734][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 98 d4 28 00 4c 89 ff e8 d0 39 a9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5c 31 6d 00 49 8b 7d 00 e8 b3 35 [ 513.339321][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 513.345367][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888119a83cc0 [ 513.353321][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 513.361272][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 513.369224][ C1] R10: ffffed1023762939 R11: 1ffff11023762939 R12: dffffc0000000000 [ 513.377176][ C1] R13: 0000000000000000 R14: ffff88811bb149c8 R15: 0000000000000008 [ 513.385134][ C1] FS: 00007f926e0156c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 513.394055][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.400625][ C1] CR2: 00002000006ca030 CR3: 000000011ea9e000 CR4: 00000000003506a0 [ 513.408587][ C1] Call Trace: [ 513.411850][ C1] [ 513.414683][ C1] delayed_work_timer_fn+0x61/0x80 [ 513.419783][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 513.425576][ C1] call_timer_fn+0x46/0x2a0 [ 513.430062][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 513.435849][ C1] __run_timers+0x667/0x9a0 [ 513.440339][ C1] ? calc_index+0x200/0x200 [ 513.444825][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 513.450011][ C1] run_timer_softirq+0x6a/0xf0 [ 513.454755][ C1] handle_softirqs+0x1d7/0x600 [ 513.459499][ C1] ? irqtime_account_irq+0xc4/0x240 [ 513.464684][ C1] __irq_exit_rcu+0x52/0xf0 [ 513.469171][ C1] irq_exit_rcu+0x9/0x10 [ 513.473489][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 513.479104][ C1] [ 513.482012][ C1] [ 513.484927][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 513.490887][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 513.497288][ C1] Code: 00 d5 ed 86 e8 fc f6 c3 fc 4c 89 f7 48 83 3d 71 6f fd 01 00 74 30 e8 1e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b6 37 5b fc 65 8b 05 17 08 12 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 513.516873][ C1] RSP: 0018:ffffc9001169f5a0 EFLAGS: 00000206 [ 513.522920][ C1] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 513.530869][ C1] RDX: ffffc900116af698 RSI: 0000000000000a06 RDI: 0000000000000001 [ 513.538837][ C1] RBP: ffffc9001169f5b0 R08: dffffc0000000000 R09: ffffed1023350799 [ 513.546789][ C1] R10: ffffed1023350799 R11: 1ffff11023350798 R12: ffff888140efd300 [ 513.554743][ C1] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000 [ 513.562701][ C1] __wake_up_sync_key+0x166/0x280 [ 513.567718][ C1] ? __cfi___wake_up_sync_key+0x10/0x10 [ 513.573252][ C1] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 513.578882][ C1] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 513.584262][ C1] __unix_dgram_recvmsg+0x496/0xd70 [ 513.589457][ C1] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 513.595168][ C1] ? __kasan_check_read+0x11/0x20 [ 513.600191][ C1] ? preempt_schedule_irq+0xbb/0x110 [ 513.605470][ C1] unix_dgram_recvmsg+0xc7/0xe0 [ 513.610313][ C1] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 513.615847][ C1] ____sys_recvmsg+0x2a0/0x590 [ 513.620604][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 513.626244][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 513.631273][ C1] ? import_iovec+0x7c/0xb0 [ 513.635773][ C1] ___sys_recvmsg+0x1b2/0x510 [ 513.640445][ C1] ? __sys_recvmsg+0x270/0x270 [ 513.645215][ C1] ? cgroup_rstat_updated+0xf5/0x370 [ 513.650583][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 513.656217][ C1] do_recvmmsg+0x359/0x7a0 [ 513.660622][ C1] ? __sys_recvmmsg+0x280/0x280 [ 513.665464][ C1] ? __cfi_bpf_trace_run2+0x10/0x10 [ 513.670655][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 513.675667][ C1] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 513.681203][ C1] ? trace_sys_enter+0x3d/0x50 [ 513.685948][ C1] x64_sys_call+0x3e7/0x9a0 [ 513.690441][ C1] do_syscall_64+0x4c/0xa0 [ 513.694848][ C1] ? clear_bhb_loop+0x30/0x80 [ 513.699508][ C1] ? clear_bhb_loop+0x30/0x80 [ 513.704173][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.710048][ C1] RIP: 0033:0x7f926d18eb69 [ 513.714443][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.734031][ C1] RSP: 002b:00007f926e015038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 513.742462][ C1] RAX: ffffffffffffffda RBX: 00007f926d3b6080 RCX: 00007f926d18eb69 [ 513.750428][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 513.758387][ C1] RBP: 00007f926d211df1 R08: 0000000000000000 R09: 0000000000000000 [ 513.766339][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 513.774290][ C1] R13: 0000000000000001 R14: 00007f926d3b6080 R15: 00007ffd0f645b88 [ 513.782247][ C1] [ 513.785255][ C1] Modules linked in: [ 513.789137][ C1] ---[ end trace 0000000000000000 ]--- [ 513.794568][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 513.799844][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 98 d4 28 00 4c 89 ff e8 d0 39 a9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5c 31 6d 00 49 8b 7d 00 e8 b3 35 [ 513.819435][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 513.825484][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888119a83cc0 [ 513.833434][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 513.841384][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 513.849342][ C1] R10: ffffed1023762939 R11: 1ffff11023762939 R12: dffffc0000000000 [ 513.857305][ C1] R13: 0000000000000000 R14: ffff88811bb149c8 R15: 0000000000000008 [ 513.865268][ C1] FS: 00007f926e0156c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 513.874201][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.880777][ C1] CR2: 00002000006ca030 CR3: 000000011ea9e000 CR4: 00000000003506a0 [ 513.888738][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 513.896788][ C1] Kernel Offset: disabled [ 513.901119][ C1] Rebooting in 86400 seconds..