last executing test programs: 10.874261276s ago: executing program 1 (id=2906): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 7.722190729s ago: executing program 1 (id=2933): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1) 7.363966218s ago: executing program 1 (id=2934): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5.535696915s ago: executing program 1 (id=2946): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x32) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x24040804}, 0x8800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)}, 0x4000080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1}, 0x240448c4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x328000, 0xc00, 0xb, 0x1}, 0x20) write(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.888592147s ago: executing program 1 (id=2955): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "77d0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x10, &(0x7f0000000400)=ANY=[], 0x0, 0x0}) 3.754125028s ago: executing program 0 (id=2958): mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) 3.040510266s ago: executing program 3 (id=2960): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x610, 0x310, 0x0, 0xf8, 0xf8, 0x568, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0xffff, 0xfffe}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@mcast1, @mcast1, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffffff, 0xff, 0xff], 'veth1_to_batadv\x00', 'gretap0\x00', {}, {0xff}, 0x62, 0x80, 0x2, 0x10}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@private, 0x9}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x2f, 0x9, 0x6, 0x9, 0x3, 0x130}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"c6b3"}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2, 0x7}, {0xffffffffffffffff}, {0x4, 0x2, 0x40118d1dff9a1517}, 0xe6b, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r4, &(0x7f0000000180)=""/195, 0xc3, 0x100) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x100010e, &(0x7f0000000540)={[{@errors_remount}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsold}, {@noload}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@jqfmt_vfsv0}, {@nombcache}]}, 0x1, 0x444, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2.910171586s ago: executing program 0 (id=2961): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 2.906878716s ago: executing program 0 (id=2962): r0 = socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 2.771284867s ago: executing program 0 (id=2963): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc52f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000003c0)={0x0, 0x3b, 0x8, {0x8, 0xd, "4d8188f0b148"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 2.289188036s ago: executing program 2 (id=2964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f"]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x8080000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)={0x17}) 2.066730423s ago: executing program 3 (id=2965): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x32) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x24040804}, 0x8800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)}, 0x4000080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1}, 0x240448c4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x328000, 0xc00, 0xb, 0x1}, 0x20) write(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.782141307s ago: executing program 4 (id=2966): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) 1.781969376s ago: executing program 2 (id=2967): socket$inet(0x2, 0x801, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo.', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) close_range(r0, 0xffffffffffffffff, 0x0) 1.743356249s ago: executing program 2 (id=2968): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688f54c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 1.436878004s ago: executing program 2 (id=2969): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_clone(0x21202100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x900, 0x11) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000100), 0x0, 0x0, 0x1) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) r9 = socket$inet6(0xa, 0x80003, 0x6) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x84, r10, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff9}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x10) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x2, 0x5003) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x48}}, 0x4) ptrace(0x10, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 1.160746866s ago: executing program 3 (id=2970): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r6}, 0x18) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r1, 0x0, 0x3a) 831.968293ms ago: executing program 1 (id=2971): mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) 570.880304ms ago: executing program 2 (id=2973): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 383.382988ms ago: executing program 4 (id=2972): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, r1}) 364.92887ms ago: executing program 4 (id=2974): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 266.100798ms ago: executing program 3 (id=2975): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) socket(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000580)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x10000000000, 0x40, 0x8000000000002, 0x1, 0x80, 0x7}, 0x0, &(0x7f0000000240)={0x7ff, 0x4, 0x0, 0x3, 0x4, 0xf9e, 0x80ffffffff, 0x7}, 0x0, 0x0) 259.222458ms ago: executing program 0 (id=2976): socket(0x28, 0x801, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44014, &(0x7f0000000180)={0x11, 0x1, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14) 244.29128ms ago: executing program 4 (id=2977): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010429bdaa623be2b00bc33c0000", @ANYRES32=0x0, @ANYBLOB="9320000010200000280012800b00010067656e65766500001800028014000700ff"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 190.183134ms ago: executing program 3 (id=2978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x3c}}, 0x0) 190.074654ms ago: executing program 4 (id=2979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'vlan0\x00', {0x8}, 0x272}) sendto$inet6(r0, 0x0, 0x0, 0x20000845, 0x0, 0x0) shutdown(r0, 0x1) 189.936124ms ago: executing program 0 (id=2980): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x32) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x24040804}, 0x8800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)}, 0x4000080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1}, 0x240448c4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0xc000) write(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 183.601195ms ago: executing program 3 (id=2981): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000200)={0x40, 0xe, 0x5, {0x5, 0x30, "028cec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 122.72478ms ago: executing program 2 (id=2982): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_clone(0x21202100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x900, 0x11) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000100), 0x0, 0x0, 0x1) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) r9 = socket$inet6(0xa, 0x80003, 0x6) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x84, r10, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff9}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x10) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x2, 0x5003) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x48}}, 0x4) ptrace(0x10, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 0s ago: executing program 4 (id=2983): syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402", @ANYBLOB="94"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb4d, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1 (id=2984): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Product=2, SerialNumber=3 [ 803.947695][ T9007] usb 4-1: Product: syz [ 803.952518][ T9007] usb 4-1: Manufacturer: syz [ 803.957248][ T9007] usb 4-1: SerialNumber: syz [ 803.978091][ T9007] usb 4-1: config 0 descriptor?? [ 804.006716][ T9632] loop2: detected capacity change from 0 to 512 [ 804.013112][ T9613] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 804.034419][ T9007] snd-usb-audio: probe of 4-1:0.16 failed with error -12 [ 804.124504][ T9632] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 804.135612][ T9632] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 804.153368][ T9632] virtiofs: Unknown parameter 'always' [ 804.830199][ T9637] loop4: detected capacity change from 0 to 512 [ 804.870746][ T9637] EXT4-fs (loop4): Ignoring removed oldalloc option [ 804.898885][ T9637] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 804.926427][ T9637] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.143089][ T9641] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.2331: invalid size [ 807.751033][ T348] usb 4-1: USB disconnect, device number 55 [ 807.911312][ T9648] loop4: detected capacity change from 0 to 128 [ 808.839103][ T9648] handle_bad_sector: 5218 callbacks suppressed [ 808.839135][ T9648] attempt to access beyond end of device [ 808.839135][ T9648] loop4: rw=2049, want=1041, limit=128 [ 808.890714][ T9648] attempt to access beyond end of device [ 808.890714][ T9648] loop4: rw=524288, want=1041, limit=128 [ 808.914076][ T9648] attempt to access beyond end of device [ 808.914076][ T9648] loop4: rw=0, want=1033, limit=128 [ 808.925317][ T9648] attempt to access beyond end of device [ 808.925317][ T9648] loop4: rw=0, want=1033, limit=128 [ 808.947549][ T9648] attempt to access beyond end of device [ 808.947549][ T9648] loop4: rw=0, want=1033, limit=128 [ 808.981468][ T9648] attempt to access beyond end of device [ 808.981468][ T9648] loop4: rw=0, want=1033, limit=128 [ 808.991012][ T9652] loop2: detected capacity change from 0 to 2048 [ 808.992574][ T9648] attempt to access beyond end of device [ 808.992574][ T9648] loop4: rw=0, want=1033, limit=128 [ 809.021420][ T9652] Alternate GPT is invalid, using primary GPT. [ 809.027826][ T9652] loop2: p1 p2 p3 [ 809.401445][ T9666] loop1: detected capacity change from 0 to 512 [ 809.511678][ T9668] loop2: detected capacity change from 0 to 512 [ 809.546695][ T9666] EXT4-fs (loop1): Ignoring removed oldalloc option [ 810.323240][ T9668] EXT4-fs (loop2): Ignoring removed oldalloc option [ 810.332131][ T496] udevd[496]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 810.344149][ T9668] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 810.360838][ T2973] udevd[2973]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 810.371764][ T9666] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 810.388221][ T337] udevd[337]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 810.398896][ T9666] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.409935][ T9668] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.456844][ T337] udevd[337]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 810.467822][ T458] udevd[458]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 810.481524][ T496] udevd[496]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 810.528129][ T9677] loop0: detected capacity change from 0 to 512 [ 810.616412][ T9007] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 810.662190][ T9677] EXT4-fs (loop0): Ignoring removed oldalloc option [ 811.596061][ T9678] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.2339: invalid size [ 812.146630][ T9681] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.2340: invalid size [ 812.729887][ T9677] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 812.825882][ T9677] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 813.080674][ T9007] usb 5-1: Using ep0 maxpacket: 32 [ 813.310907][ T9689] loop2: detected capacity change from 0 to 512 [ 813.518351][ T9007] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 813.521439][ T9693] loop1: detected capacity change from 0 to 128 [ 813.564875][ T9689] EXT4-fs (loop2): Ignoring removed oldalloc option [ 813.582129][ T9689] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 813.597543][ T9689] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 813.615521][ T518] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 814.130425][ T9007] usb 5-1: config 0 has no interface number 0 [ 814.136554][ T9007] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 814.159199][ T9007] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 814.191321][ T9007] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 814.208452][ T9702] loop4: detected capacity change from 0 to 512 [ 814.224840][ T9700] attempt to access beyond end of device [ 814.224840][ T9700] loop1: rw=2049, want=905, limit=128 [ 814.260426][ T9007] usb 5-1: string descriptor 0 read error: -71 [ 814.270263][ T9007] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 814.289393][ T9007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.301396][ T9702] EXT4-fs (loop4): Ignoring removed oldalloc option [ 814.320904][ T9007] usb 5-1: config 0 descriptor?? [ 814.329795][ T9702] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 814.345333][ T9007] usb 5-1: can't set config #0, error -71 [ 814.356250][ T9007] usb 5-1: USB disconnect, device number 55 [ 814.365113][ T9702] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.385773][ T518] usb 4-1: Using ep0 maxpacket: 32 [ 814.498766][ T9711] loop2: detected capacity change from 0 to 128 [ 814.641092][ T518] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 815.270274][ T518] usb 4-1: config 0 has no interface number 0 [ 815.279359][ T518] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 815.290976][ T518] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 815.314095][ T518] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 815.390908][ T9711] attempt to access beyond end of device [ 815.390908][ T9711] loop2: rw=2049, want=1041, limit=128 [ 815.415013][ T9711] attempt to access beyond end of device [ 815.415013][ T9711] loop2: rw=524288, want=1041, limit=128 [ 815.426743][ T9711] attempt to access beyond end of device [ 815.426743][ T9711] loop2: rw=0, want=1033, limit=128 [ 815.437848][ T9711] attempt to access beyond end of device [ 815.437848][ T9711] loop2: rw=0, want=1033, limit=128 [ 815.448761][ T9711] attempt to access beyond end of device [ 815.448761][ T9711] loop2: rw=0, want=1033, limit=128 [ 815.460153][ T9711] attempt to access beyond end of device [ 815.460153][ T9711] loop2: rw=0, want=1033, limit=128 [ 815.471515][ T9711] attempt to access beyond end of device [ 815.471515][ T9711] loop2: rw=0, want=1033, limit=128 [ 815.490513][ T9711] attempt to access beyond end of device [ 815.490513][ T9711] loop2: rw=0, want=1033, limit=128 [ 815.501293][ T9711] attempt to access beyond end of device [ 815.501293][ T9711] loop2: rw=0, want=1033, limit=128 [ 815.601646][ T518] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 815.620349][ T518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.630401][ T9007] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 815.638633][ T518] usb 4-1: Product: syz [ 815.642833][ T518] usb 4-1: Manufacturer: syz [ 815.647440][ T518] usb 4-1: SerialNumber: syz [ 815.674848][ T518] usb 4-1: config 0 descriptor?? [ 815.710679][ T9687] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 815.731533][ T518] snd-usb-audio: probe of 4-1:0.16 failed with error -12 [ 815.808898][ T518] usb 4-1: USB disconnect, device number 56 [ 815.902814][ T9007] usb 1-1: device descriptor read/64, error -71 [ 816.247322][ T9735] loop1: detected capacity change from 0 to 512 [ 816.523878][ T9735] EXT4-fs (loop1): Ignoring removed oldalloc option [ 816.552440][ T9738] loop4: detected capacity change from 0 to 512 [ 816.560251][ T9735] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 816.585277][ T9735] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.690730][ T9738] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 816.713710][ T9738] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 817.426915][ T9007] usb 1-1: device descriptor read/64, error -71 [ 817.480909][ T9749] loop3: detected capacity change from 0 to 512 [ 817.524211][ T385] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 817.537380][ T9753] loop0: detected capacity change from 0 to 512 [ 817.578268][ T9749] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 817.590564][ T9749] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 817.591815][ T9753] EXT4-fs (loop0): Ignoring removed oldalloc option [ 817.639985][ T9753] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 817.664713][ T9749] virtiofs: Unknown parameter 'always' [ 817.674188][ T9753] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.735152][ T9759] loop1: detected capacity change from 0 to 128 [ 817.862138][ T385] usb 3-1: device descriptor read/64, error -71 [ 818.320536][ T385] usb 3-1: device descriptor read/64, error -71 [ 818.585786][ T9766] loop1: detected capacity change from 0 to 512 [ 818.600401][ T385] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 818.710523][ T9766] EXT4-fs (loop1): Ignoring removed oldalloc option [ 818.757857][ T9766] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 818.813909][ T9766] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 820.050378][ T9007] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 820.559989][ T9782] loop1: detected capacity change from 0 to 2048 [ 820.570367][ T385] usb 3-1: device descriptor read/64, error -71 [ 820.598319][ T337] Alternate GPT is invalid, using primary GPT. [ 820.604673][ T337] loop1: p1 p2 p3 [ 821.667171][ T9782] Alternate GPT is invalid, using primary GPT. [ 821.674295][ T9782] loop1: p1 p2 p3 [ 821.685909][ T9792] loop3: detected capacity change from 0 to 128 [ 821.710429][ T9007] usb 1-1: Using ep0 maxpacket: 32 [ 821.752292][ T9794] loop4: detected capacity change from 0 to 512 [ 821.791042][ T337] udevd[337]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 821.805088][ T496] udevd[496]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 821.815960][ T458] udevd[458]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 821.830413][ T9007] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 821.832900][ T9797] loop0: detected capacity change from 0 to 128 [ 821.847444][ T9794] EXT4-fs (loop4): Ignoring removed oldalloc option [ 821.848560][ T9007] usb 1-1: can't read configurations, error -71 [ 821.863764][ T9792] handle_bad_sector: 6003 callbacks suppressed [ 821.863780][ T9792] attempt to access beyond end of device [ 821.863780][ T9792] loop3: rw=2049, want=1041, limit=128 [ 821.865151][ T2973] udevd[2973]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 821.891825][ T337] udevd[337]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 821.892264][ T496] udevd[496]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 821.952627][ T385] usb 3-1: Using ep0 maxpacket: 32 [ 821.953624][ T9794] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 821.974007][ T337] udevd[337]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 821.974257][ T2973] udevd[2973]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 821.990880][ T496] udevd[496]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 821.993590][ T9794] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.031473][ T9805] loop2: detected capacity change from 0 to 128 [ 822.049683][ T9792] attempt to access beyond end of device [ 822.049683][ T9792] loop3: rw=524288, want=1041, limit=128 [ 822.057249][ T9803] loop1: detected capacity change from 0 to 512 [ 822.061242][ T9792] attempt to access beyond end of device [ 822.061242][ T9792] loop3: rw=0, want=1033, limit=128 [ 822.070541][ T385] usb 3-1: device descriptor read/all, error -71 [ 822.077989][ T9792] attempt to access beyond end of device [ 822.077989][ T9792] loop3: rw=0, want=1033, limit=128 [ 822.095591][ T9792] attempt to access beyond end of device [ 822.095591][ T9792] loop3: rw=0, want=1033, limit=128 [ 822.108319][ T9806] attempt to access beyond end of device [ 822.108319][ T9806] loop0: rw=2049, want=1041, limit=128 [ 822.116356][ T385] usb usb3-port1: attempt power cycle [ 822.119823][ T9792] attempt to access beyond end of device [ 822.119823][ T9792] loop3: rw=0, want=1033, limit=128 [ 822.177716][ T9806] attempt to access beyond end of device [ 822.177716][ T9806] loop0: rw=524288, want=1041, limit=128 [ 822.196978][ T9806] attempt to access beyond end of device [ 822.196978][ T9806] loop0: rw=0, want=1033, limit=128 [ 822.265116][ T9805] attempt to access beyond end of device [ 822.265116][ T9805] loop2: rw=2049, want=1041, limit=128 [ 822.549998][ T9803] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 822.721024][ T9803] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 822.795016][ T9817] loop3: detected capacity change from 0 to 128 [ 822.804904][ T9803] virtiofs: Unknown parameter 'always' [ 824.721227][ T9833] loop4: detected capacity change from 0 to 2048 [ 824.729595][ T9835] loop3: detected capacity change from 0 to 128 [ 824.750373][ T385] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 824.773526][ T9833] Alternate GPT is invalid, using primary GPT. [ 824.790029][ T9833] loop4: p1 p2 p3 [ 824.840401][ T385] usb 3-1: Using ep0 maxpacket: 32 [ 824.912544][ T337] udevd[337]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 824.960422][ T385] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 824.971662][ T385] usb 3-1: config 0 has no interface number 0 [ 824.988973][ T385] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 825.016919][ T385] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 825.027604][ T385] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 825.340452][ T385] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 825.352762][ T385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.361112][ T385] usb 3-1: Product: syz [ 825.365314][ T385] usb 3-1: Manufacturer: syz [ 825.369930][ T385] usb 3-1: SerialNumber: syz [ 825.376022][ T385] usb 3-1: config 0 descriptor?? [ 825.400402][ T9820] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 825.421745][ T385] snd-usb-audio: probe of 3-1:0.16 failed with error -12 [ 825.889504][ T9854] loop4: detected capacity change from 0 to 512 [ 825.922449][ T9854] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 825.933816][ T9854] ext4 filesystem being mounted at /471/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 825.963744][ T9854] virtiofs: Unknown parameter 'always' [ 826.120431][ T9007] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 826.561564][ T9866] loop3: detected capacity change from 0 to 128 [ 826.600396][ T9007] usb 2-1: Using ep0 maxpacket: 32 [ 826.670559][ T385] usb 3-1: USB disconnect, device number 56 [ 826.686490][ T9868] loop2: detected capacity change from 0 to 512 [ 826.736923][ T9868] EXT4-fs (loop2): Ignoring removed oldalloc option [ 826.740428][ T9007] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 826.758887][ T9007] usb 2-1: config 0 has no interface number 0 [ 826.768375][ T9007] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 826.778708][ T9007] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 826.785399][ T9868] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 826.804028][ T9007] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 826.820667][ T9868] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.051063][ T9007] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 827.186373][ T9007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.230035][ T9879] loop0: detected capacity change from 0 to 128 [ 827.274422][ T9007] usb 2-1: Product: syz [ 827.389868][ T9007] usb 2-1: Manufacturer: syz [ 827.462146][ T9007] usb 2-1: SerialNumber: syz [ 827.620759][ T9007] usb 2-1: config 0 descriptor?? [ 827.640418][ T9846] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 827.661445][ T9007] snd-usb-audio: probe of 2-1:0.16 failed with error -12 [ 827.759444][ T9879] handle_bad_sector: 7117 callbacks suppressed [ 827.759467][ T9879] attempt to access beyond end of device [ 827.759467][ T9879] loop0: rw=2049, want=1041, limit=128 [ 827.881723][ T9879] attempt to access beyond end of device [ 827.881723][ T9879] loop0: rw=524288, want=1041, limit=128 [ 827.887111][ T9883] loop2: detected capacity change from 0 to 128 [ 827.905956][ T9879] attempt to access beyond end of device [ 827.905956][ T9879] loop0: rw=0, want=1033, limit=128 [ 827.935265][ T9879] attempt to access beyond end of device [ 827.935265][ T9879] loop0: rw=0, want=1033, limit=128 [ 827.956716][ T9878] attempt to access beyond end of device [ 827.956716][ T9878] loop0: rw=524288, want=177, limit=128 [ 827.979831][ T9879] attempt to access beyond end of device [ 827.979831][ T9879] loop0: rw=0, want=1033, limit=128 [ 828.070401][ T4165] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 828.126558][ T9885] loop0: detected capacity change from 0 to 128 [ 828.135778][ T9886] attempt to access beyond end of device [ 828.135778][ T9886] loop2: rw=2049, want=1041, limit=128 [ 828.268535][ T9883] attempt to access beyond end of device [ 828.268535][ T9883] loop2: rw=524288, want=1041, limit=128 [ 828.295803][ T9885] attempt to access beyond end of device [ 828.295803][ T9885] loop0: rw=2049, want=1041, limit=128 [ 828.300460][ T9883] attempt to access beyond end of device [ 828.300460][ T9883] loop2: rw=0, want=1033, limit=128 [ 828.330343][ T4165] usb 4-1: Using ep0 maxpacket: 32 [ 828.443328][ T9889] loop2: detected capacity change from 0 to 128 [ 828.450623][ T4165] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 828.458955][ T4165] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.472671][ T4165] usb 4-1: config 0 has no interface number 0 [ 828.478960][ T4165] usb 4-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 828.544546][ T9893] loop4: detected capacity change from 0 to 128 [ 828.670427][ T4165] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 828.688699][ T4165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.938908][ T4165] usb 4-1: Product: syz [ 828.944342][ T4165] usb 4-1: Manufacturer: syz [ 828.948958][ T4165] usb 4-1: SerialNumber: syz [ 828.949141][ T9898] loop2: detected capacity change from 0 to 128 [ 828.965179][ T4165] usb 4-1: config 0 descriptor?? [ 828.974501][ T348] usb 2-1: USB disconnect, device number 53 [ 829.011596][ T4165] snd-usb-audio: probe of 4-1:0.16 failed with error -2 [ 829.130383][ T518] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 829.448967][ T9905] loop4: detected capacity change from 0 to 128 [ 829.580394][ T518] usb 1-1: device descriptor read/64, error -71 [ 830.041893][ T348] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 830.290363][ T518] usb 1-1: device descriptor read/64, error -71 [ 830.340387][ T348] usb 2-1: device descriptor read/64, error -71 [ 830.420859][ T9918] loop2: detected capacity change from 0 to 128 [ 830.422519][ T6688] usb 4-1: USB disconnect, device number 57 [ 830.560415][ T518] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 830.574039][ T9922] loop3: detected capacity change from 0 to 512 [ 830.740444][ T348] usb 2-1: device descriptor read/64, error -71 [ 830.870563][ T518] usb 1-1: device descriptor read/64, error -71 [ 831.050433][ T6688] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 831.110561][ T348] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 831.124487][ T9930] loop2: detected capacity change from 0 to 128 [ 831.157163][ T9922] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 831.168524][ T9922] ext4 filesystem being mounted at /475/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 831.253200][ T9922] virtiofs: Unknown parameter 'always' [ 831.290353][ T518] usb 1-1: device descriptor read/64, error -71 [ 831.330404][ T6688] usb 5-1: device descriptor read/64, error -71 [ 831.380378][ T348] usb 2-1: device descriptor read/64, error -71 [ 831.410418][ T518] usb usb1-port1: attempt power cycle [ 831.810363][ T348] usb 2-1: device descriptor read/64, error -71 [ 831.904230][ T9943] loop2: detected capacity change from 0 to 128 [ 831.930989][ T348] usb usb2-port1: attempt power cycle [ 832.032841][ T6688] usb 5-1: device descriptor read/64, error -71 [ 832.054241][ T9946] loop1: detected capacity change from 0 to 128 [ 832.180379][ T518] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 832.768095][ T6688] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 832.840400][ T518] usb 1-1: device descriptor read/8, error -71 [ 833.131332][ T388] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 833.623740][ T9966] loop4: detected capacity change from 0 to 2048 [ 833.630391][ T6688] usb 5-1: device descriptor read/64, error -71 [ 833.640454][ T518] usb 1-1: device descriptor read/8, error -71 [ 833.642224][ T496] Alternate GPT is invalid, using primary GPT. [ 833.652889][ T496] loop4: p1 p2 p3 [ 833.659988][ T9966] Alternate GPT is invalid, using primary GPT. [ 833.666342][ T9966] loop4: p1 p2 p3 [ 833.724481][ T9970] loop1: detected capacity change from 0 to 512 [ 833.907688][ T9970] loop1: detected capacity change from 0 to 4096 [ 833.989317][ T337] udevd[337]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 834.002345][ T496] udevd[496]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 834.046262][ T458] udevd[458]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 834.069614][ T9970] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 834.221748][ T337] udevd[337]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 834.234140][ T458] udevd[458]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 834.699637][ T9976] loop4: detected capacity change from 0 to 512 [ 834.706542][ T388] usb 4-1: device descriptor read/64, error -71 [ 834.714208][ T2973] udevd[2973]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 834.870184][ T9976] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 834.881322][ T9976] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 834.902005][ T9976] virtiofs: Unknown parameter 'always' [ 835.130394][ T790] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 835.201000][ T9987] loop3: detected capacity change from 0 to 512 [ 835.255318][ T9987] EXT4-fs (loop3): Ignoring removed oldalloc option [ 835.286783][ T9987] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 835.309049][ T9993] loop1: detected capacity change from 0 to 512 [ 835.320434][ T9987] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.430388][ T790] usb 3-1: Using ep0 maxpacket: 32 [ 835.620701][ T790] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 835.676870][ T790] usb 3-1: config 0 has no interface number 0 [ 835.844909][ T790] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 835.889828][ T9993] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 835.964843][ T790] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 836.153561][ T790] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 836.202956][ T9993] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 836.387647][ T790] usb 3-1: string descriptor 0 read error: -71 [ 836.402644][ T790] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 836.485075][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.503108][ T9993] virtiofs: Unknown parameter 'always' [ 836.509424][ T790] usb 3-1: config 0 descriptor?? [ 836.530600][ T790] usb 3-1: can't set config #0, error -71 [ 836.635100][ T790] usb 3-1: USB disconnect, device number 57 [ 836.694203][T10012] loop0: detected capacity change from 0 to 512 [ 836.803715][T10012] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 836.836398][T10012] ext4 filesystem being mounted at /488/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 836.897631][T10012] virtiofs: Unknown parameter 'always' [ 836.980339][ T392] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 837.230848][ T392] usb 4-1: Using ep0 maxpacket: 16 [ 837.510401][ T392] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.524680][ T392] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 837.533726][ T392] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 837.550353][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.559931][ T392] usb 4-1: config 0 descriptor?? [ 837.826823][T10020] loop4: detected capacity change from 0 to 512 [ 837.856496][T10020] EXT4-fs (loop4): Ignoring removed oldalloc option [ 837.872205][T10020] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 837.887671][T10020] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 839.970674][ T388] usb 4-1: USB disconnect, device number 59 [ 850.766985][T10048] loop0: detected capacity change from 0 to 512 [ 850.791770][T10052] loop4: detected capacity change from 0 to 128 [ 850.804437][T10053] loop2: detected capacity change from 0 to 512 [ 850.823865][T10048] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 850.834983][T10048] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 850.856322][T10048] virtiofs: Unknown parameter 'always' [ 850.944427][T10060] loop1: detected capacity change from 0 to 512 [ 850.987845][T10053] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 850.998947][T10053] ext4 filesystem being mounted at /488/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 851.015677][T10053] virtiofs: Unknown parameter 'always' [ 851.039840][T10058] handle_bad_sector: 27229 callbacks suppressed [ 851.039860][T10058] attempt to access beyond end of device [ 851.039860][T10058] loop4: rw=2049, want=1041, limit=128 [ 851.094685][T10060] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 851.106811][T10060] ext4 filesystem being mounted at /486/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 851.123077][T10060] virtiofs: Unknown parameter 'always' [ 851.221719][T10052] attempt to access beyond end of device [ 851.221719][T10052] loop4: rw=524288, want=1041, limit=128 [ 851.233264][ T20] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 851.241181][T10052] attempt to access beyond end of device [ 851.241181][T10052] loop4: rw=0, want=1033, limit=128 [ 851.252331][T10052] attempt to access beyond end of device [ 851.252331][T10052] loop4: rw=0, want=1033, limit=128 [ 851.264242][T10052] attempt to access beyond end of device [ 851.264242][T10052] loop4: rw=0, want=1033, limit=128 [ 851.275388][T10052] attempt to access beyond end of device [ 851.275388][T10052] loop4: rw=0, want=1033, limit=128 [ 851.286800][T10052] attempt to access beyond end of device [ 851.286800][T10052] loop4: rw=0, want=1033, limit=128 [ 851.359383][T10073] loop4: detected capacity change from 0 to 128 [ 852.462981][T10086] attempt to access beyond end of device [ 852.462981][T10086] loop4: rw=2049, want=1041, limit=128 [ 852.490385][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 852.550454][ T20] usb 4-1: device descriptor read/all, error -71 [ 852.746672][T10098] loop4: detected capacity change from 0 to 512 [ 852.831212][T10098] EXT4-fs (loop4): Ignoring removed oldalloc option [ 852.859420][T10098] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 852.882653][T10098] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.908380][T10108] loop3: detected capacity change from 0 to 512 [ 853.961995][T10108] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 854.301296][T10108] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 854.521899][T10105] virtiofs: Unknown parameter 'always' [ 855.010870][T10128] loop2: detected capacity change from 0 to 128 [ 855.030384][ T388] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 855.612028][T10128] attempt to access beyond end of device [ 855.612028][T10128] loop2: rw=2049, want=1041, limit=128 [ 855.632278][T10128] attempt to access beyond end of device [ 855.632278][T10128] loop2: rw=524288, want=1041, limit=128 [ 855.710363][ T388] usb 2-1: device descriptor read/64, error -71 [ 856.886539][T10143] loop3: detected capacity change from 0 to 128 [ 856.890407][T10147] loop2: detected capacity change from 0 to 128 [ 857.032424][T10147] handle_bad_sector: 3508 callbacks suppressed [ 857.032445][T10147] attempt to access beyond end of device [ 857.032445][T10147] loop2: rw=2049, want=1041, limit=128 [ 857.060053][T10151] attempt to access beyond end of device [ 857.060053][T10151] loop3: rw=2049, want=1041, limit=128 [ 857.079055][ T30] audit: type=1326 audit(1755710615.081:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10146 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d45c4be9 code=0x7ffc0000 [ 857.107753][ T30] audit: type=1326 audit(1755710615.081:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10146 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f24d45c4be9 code=0x7ffc0000 [ 857.131800][ T30] audit: type=1326 audit(1755710615.081:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10146 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d45c4be9 code=0x7ffc0000 [ 857.156664][ T30] audit: type=1326 audit(1755710615.111:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10146 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d45c4be9 code=0x7ffc0000 [ 857.180346][ T388] usb 2-1: device descriptor read/64, error -71 [ 857.221261][T10143] attempt to access beyond end of device [ 857.221261][T10143] loop3: rw=524288, want=1041, limit=128 [ 857.233471][T10143] attempt to access beyond end of device [ 857.233471][T10143] loop3: rw=0, want=1033, limit=128 [ 857.245917][T10143] attempt to access beyond end of device [ 857.245917][T10143] loop3: rw=0, want=1033, limit=128 [ 857.247947][T10155] loop2: detected capacity change from 0 to 512 [ 857.257091][T10143] attempt to access beyond end of device [ 857.257091][T10143] loop3: rw=0, want=1033, limit=128 [ 857.275462][T10143] attempt to access beyond end of device [ 857.275462][T10143] loop3: rw=0, want=1033, limit=128 [ 857.308255][T10155] EXT4-fs (loop2): Ignoring removed oldalloc option [ 857.336535][T10155] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 857.352058][T10155] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.378496][T10160] loop3: detected capacity change from 0 to 512 [ 857.461613][T10160] EXT4-fs (loop3): Ignoring removed oldalloc option [ 857.481964][T10160] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 857.507598][T10160] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.518660][ T388] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 857.566807][T10165] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.2450: invalid size [ 857.962537][T10167] loop1: detected capacity change from 0 to 512 [ 858.334005][T10169] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.2451: invalid size [ 858.738989][T10167] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 858.750375][T10167] ext4 filesystem being mounted at /490/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 858.767614][T10167] virtiofs: Unknown parameter 'always' [ 858.794625][T10173] loop0: detected capacity change from 0 to 128 [ 859.043930][T10173] attempt to access beyond end of device [ 859.043930][T10173] loop0: rw=2049, want=1041, limit=128 [ 859.064997][T10178] loop2: detected capacity change from 0 to 512 [ 859.317872][T10178] EXT4-fs (loop2): Ignoring removed oldalloc option [ 859.339292][T10173] attempt to access beyond end of device [ 859.339292][T10173] loop0: rw=524288, want=1041, limit=128 [ 859.349830][T10178] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 859.350707][T10173] attempt to access beyond end of device [ 859.350707][T10173] loop0: rw=0, want=1033, limit=128 [ 859.366193][T10178] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.401242][T10185] loop3: detected capacity change from 0 to 128 [ 861.116112][ T6688] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 861.548993][T10198] loop1: detected capacity change from 0 to 128 [ 861.630350][ T6688] usb 5-1: device descriptor read/64, error -71 [ 862.137363][T10198] handle_bad_sector: 3844 callbacks suppressed [ 862.137383][T10198] attempt to access beyond end of device [ 862.137383][T10198] loop1: rw=524288, want=1041, limit=128 [ 862.169101][T10207] loop0: detected capacity change from 0 to 128 [ 862.175204][T10210] loop3: detected capacity change from 0 to 128 [ 862.180813][T10198] attempt to access beyond end of device [ 862.180813][T10198] loop1: rw=0, want=1033, limit=128 [ 862.183821][T10208] loop4: detected capacity change from 0 to 128 [ 862.193156][T10197] attempt to access beyond end of device [ 862.193156][T10197] loop1: rw=524288, want=369, limit=128 [ 862.210912][T10198] attempt to access beyond end of device [ 862.210912][T10198] loop1: rw=0, want=1033, limit=128 [ 862.225154][T10198] attempt to access beyond end of device [ 862.225154][T10198] loop1: rw=0, want=1033, limit=128 [ 862.236219][T10198] attempt to access beyond end of device [ 862.236219][T10198] loop1: rw=0, want=1033, limit=128 [ 862.256156][T10198] attempt to access beyond end of device [ 862.256156][T10198] loop1: rw=0, want=1033, limit=128 [ 862.267858][T10198] attempt to access beyond end of device [ 862.267858][T10198] loop1: rw=0, want=1033, limit=128 [ 862.303935][T10198] attempt to access beyond end of device [ 862.303935][T10198] loop1: rw=0, want=1033, limit=128 [ 862.317011][T10198] attempt to access beyond end of device [ 862.317011][T10198] loop1: rw=0, want=1033, limit=128 [ 863.144827][T10225] loop3: detected capacity change from 0 to 128 [ 863.151500][ T388] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 863.310432][ T1704] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 863.420530][ T388] usb 2-1: device descriptor read/64, error -71 [ 863.610419][ T1704] usb 3-1: Using ep0 maxpacket: 16 [ 863.740592][ T1704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.751170][ T1704] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 863.760216][ T1704] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 863.775526][ T1704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.836966][ T1704] usb 3-1: config 0 descriptor?? [ 863.842102][ T388] usb 2-1: device descriptor read/64, error -71 [ 863.993993][T10230] loop0: detected capacity change from 0 to 2048 [ 864.054127][T10230] Alternate GPT is invalid, using primary GPT. [ 864.060484][T10230] loop0: p1 p2 p3 [ 864.324851][ T388] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 864.579803][T10074] udevd[10074]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 864.580504][T10239] loop0: detected capacity change from 0 to 512 [ 864.597404][T10050] udevd[10050]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 864.599796][T10063] udevd[10063]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 864.608620][T10239] EXT4-fs (loop0): Ignoring removed oldalloc option [ 864.623748][T10074] udevd[10074]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 864.624943][T10063] udevd[10063]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 864.634622][T10050] udevd[10050]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 864.653422][ T388] usb 2-1: device descriptor read/64, error -71 [ 864.662443][T10239] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 864.677726][T10239] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 865.806989][ T388] usb 2-1: device descriptor read/64, error -71 [ 865.863568][T10248] loop4: detected capacity change from 0 to 512 [ 865.882095][ T1704] usb 3-1: USB disconnect, device number 58 [ 865.883626][T10248] EXT4-fs (loop4): Ignoring removed oldalloc option [ 865.926139][T10248] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 866.031501][T10248] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 866.053493][T10262] loop0: detected capacity change from 0 to 512 [ 868.336532][ T388] usb usb2-port1: attempt power cycle [ 868.346997][T10266] loop1: detected capacity change from 0 to 128 [ 868.421595][T10262] EXT4-fs (loop0): Ignoring removed oldalloc option [ 868.512251][T10272] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.2471: invalid size [ 868.610472][ T6688] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 868.729142][T10262] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 868.751991][T10262] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 868.815832][T10266] handle_bad_sector: 6030 callbacks suppressed [ 868.815854][T10266] attempt to access beyond end of device [ 868.815854][T10266] loop1: rw=2049, want=1041, limit=128 [ 868.922321][T10266] attempt to access beyond end of device [ 868.922321][T10266] loop1: rw=524288, want=1041, limit=128 [ 868.951634][T10266] attempt to access beyond end of device [ 868.951634][T10266] loop1: rw=0, want=1033, limit=128 [ 870.446054][ T6688] usb 4-1: Using ep0 maxpacket: 16 [ 870.470093][T10265] attempt to access beyond end of device [ 870.470093][T10265] loop1: rw=524288, want=369, limit=128 [ 870.495862][T10266] attempt to access beyond end of device [ 870.495862][T10266] loop1: rw=0, want=1033, limit=128 [ 870.718302][T10284] loop4: detected capacity change from 0 to 512 [ 870.760696][ T6688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.771087][T10284] EXT4-fs (loop4): Ignoring removed oldalloc option [ 870.814494][T10286] loop0: detected capacity change from 0 to 512 [ 870.821075][ T6688] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 870.845417][ T6688] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 870.885348][T10286] EXT4-fs (loop0): Ignoring removed oldalloc option [ 871.279809][ T6688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.381811][T10284] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 871.439051][T10295] loop3: detected capacity change from 0 to 512 [ 871.449972][T10286] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 871.539543][ T6688] usb 4-1: config 0 descriptor?? [ 871.565378][T10295] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 871.576895][T10295] ext4 filesystem being mounted at /491/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 871.595846][T10284] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.608403][T10286] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.618998][T10295] virtiofs: Unknown parameter 'always' [ 871.640407][ T6688] usb 4-1: can't set config #0, error -71 [ 871.661187][ T6688] usb 4-1: USB disconnect, device number 62 [ 872.840943][T10300] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.2478: invalid size [ 872.960271][T10304] loop3: detected capacity change from 0 to 128 [ 873.182761][ T790] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 873.196198][ T30] audit: type=1400 audit(1755710631.201:270): avc: denied { write } for pid=10308 comm="syz.4.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 873.301237][T10304] attempt to access beyond end of device [ 873.301237][T10304] loop3: rw=2049, want=1041, limit=128 [ 873.334568][T10304] attempt to access beyond end of device [ 873.334568][T10304] loop3: rw=524288, want=1041, limit=128 [ 873.348045][T10304] attempt to access beyond end of device [ 873.348045][T10304] loop3: rw=0, want=1033, limit=128 [ 873.361669][ T30] audit: type=1400 audit(1755710631.371:271): avc: denied { execute } for pid=10318 comm="syz.0.2487" path="/501/cpu.stat" dev="tmpfs" ino=2807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 873.384994][T10304] attempt to access beyond end of device [ 873.384994][T10304] loop3: rw=0, want=1033, limit=128 [ 873.398936][T10303] attempt to access beyond end of device [ 873.398936][T10303] loop3: rw=524288, want=177, limit=128 [ 873.460350][ T790] usb 2-1: Using ep0 maxpacket: 16 [ 873.495214][ T30] audit: type=1400 audit(1755710631.501:272): avc: denied { read } for pid=10328 comm="syz.0.2493" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 873.518517][T10329] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 873.540074][ T30] audit: type=1400 audit(1755710631.501:273): avc: denied { open } for pid=10328 comm="syz.0.2493" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 873.563777][ T30] audit: type=1400 audit(1755710631.521:274): avc: denied { ioctl } for pid=10328 comm="syz.0.2493" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 873.683634][ T30] audit: type=1400 audit(1755710631.691:275): avc: denied { read write } for pid=10337 comm="syz.3.2495" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 873.710436][ T790] usb 2-1: unable to read config index 0 descriptor/all [ 873.718986][ T790] usb 2-1: can't read configurations, error -71 [ 873.740388][ T30] audit: type=1400 audit(1755710631.691:276): avc: denied { open } for pid=10337 comm="syz.3.2495" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 873.800369][ T30] audit: type=1400 audit(1755710631.731:277): avc: denied { write } for pid=10330 comm="syz.2.2494" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 873.871049][ T30] audit: type=1400 audit(1755710631.781:278): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 873.902707][ T30] audit: type=1400 audit(1755710631.801:279): avc: denied { read } for pid=10343 comm="syz.3.2498" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 873.990357][ T1024] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 874.360393][ T1024] usb 1-1: config 65 has an invalid interface number: 95 but max is 0 [ 874.371687][ T1024] usb 1-1: config 65 has no interface number 0 [ 874.410352][ T790] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 874.620835][ T1024] usb 1-1: string descriptor 0 read error: -22 [ 874.627359][ T1024] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 874.647295][ T1024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.903118][ T1024] usb 1-1: USB disconnect, device number 61 [ 874.990476][ T790] usb 2-1: New USB device found, idVendor=13d3, idProduct=3206, bcdDevice=69.02 [ 875.009679][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.022202][ T790] usb 2-1: Product: syz [ 875.026376][ T790] usb 2-1: Manufacturer: syz [ 875.039038][ T790] usb 2-1: SerialNumber: syz [ 875.200418][ T9007] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 875.282794][ T6688] usb 2-1: USB disconnect, device number 63 [ 875.450353][ T9007] usb 4-1: Using ep0 maxpacket: 16 [ 875.451869][T10405] pit: kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 875.490423][ T9007] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 875.570352][ T9007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.660376][ T9007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.750394][ T9007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.780363][ T6688] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 875.840463][ T9007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.930428][ T9007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.020372][ T6688] usb 1-1: Using ep0 maxpacket: 32 [ 876.025715][ T9007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.100507][T10424] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2531'. [ 876.110492][ T9007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.140397][ T6688] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 876.152767][ T6688] usb 1-1: config 0 has no interface number 0 [ 876.163477][ T6688] usb 1-1: config 0 interface 89 has no altsetting 0 [ 876.164526][T10434] loop8: detected capacity change from 0 to 8 [ 876.200388][ T9007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.290484][ T9007] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 876.299590][ T9007] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 876.307848][ T9007] usb 4-1: SerialNumber: syz [ 876.313030][ T9007] usb 4-1: config 0 descriptor?? [ 876.330439][ T6688] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 876.339500][ T6688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.340341][ T392] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 876.347543][ T6688] usb 1-1: Product: syz [ 876.359798][ T9007] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 876.367898][ T6688] usb 1-1: Manufacturer: syz [ 876.372536][ T6688] usb 1-1: SerialNumber: syz [ 876.377616][ T6688] usb 1-1: config 0 descriptor?? [ 876.500342][ T1024] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 876.559193][T10387] input: syz1 as /devices/virtual/input/input4 [ 876.569568][ T6688] usb 4-1: USB disconnect, device number 63 [ 876.661004][T10438] tipc: Started in network mode [ 876.666054][T10438] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 876.675111][T10438] tipc: Enabling of bearer rejected, failed to enable media [ 876.710399][ T392] usb 5-1: config 0 has an invalid interface number: 46 but max is 0 [ 876.718612][ T392] usb 5-1: config 0 has no interface number 0 [ 876.725344][ T392] usb 5-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 876.735108][ T392] usb 5-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 876.860408][ T1024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 876.871510][ T1024] usb 3-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 876.880583][ T1024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.889347][ T1024] usb 3-1: config 0 descriptor?? [ 876.910481][ T392] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 876.919550][ T392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.927669][ T392] usb 5-1: Product: syz [ 876.932702][ T392] usb 5-1: Manufacturer: syz [ 876.937284][ T392] usb 5-1: SerialNumber: syz [ 876.942521][ T392] usb 5-1: config 0 descriptor?? [ 876.980803][ T392] ums-karma 5-1:0.46: USB Mass Storage device detected [ 877.041513][ T392] ums-karma: probe of 5-1:0.46 failed with error -5 [ 877.184141][ T392] usb 5-1: USB disconnect, device number 59 [ 877.371354][ T1024] acrux 0003:1A34:F705.0001: unknown main item tag 0x0 [ 877.378275][ T1024] acrux 0003:1A34:F705.0001: unknown main item tag 0x0 [ 877.385181][ T1024] acrux 0003:1A34:F705.0001: unknown main item tag 0x0 [ 877.392212][ T1024] acrux 0003:1A34:F705.0001: unknown main item tag 0x0 [ 877.399071][ T1024] acrux 0003:1A34:F705.0001: unknown main item tag 0x0 [ 877.405967][ T1024] acrux 0003:1A34:F705.0001: unknown main item tag 0x0 [ 877.412991][ T1024] acrux 0003:1A34:F705.0001: unknown main item tag 0x0 [ 877.420405][ T6688] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 877.421207][ T1024] acrux 0003:1A34:F705.0001: hidraw0: USB HID v0.00 Device [HID 1a34:f705] on usb-dummy_hcd.2-1/input0 [ 877.439038][ T1024] acrux 0003:1A34:F705.0001: no inputs found [ 877.445027][ T1024] acrux 0003:1A34:F705.0001: Failed to enable force feedback support, error: -19 [ 877.575478][ T9007] usb 3-1: USB disconnect, device number 59 [ 877.660327][ T6688] usb 4-1: Using ep0 maxpacket: 32 [ 877.700797][ T790] usb 1-1: USB disconnect, device number 62 [ 877.820449][ T6688] usb 4-1: unable to get BOS descriptor or descriptor too short [ 877.910397][ T6688] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 877.919848][ T6688] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 877.936953][ T6688] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 877.946418][ T6688] usb 4-1: config 128 has no interface number 0 [ 877.952987][ T6688] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 170, changing to 11 [ 877.964718][ T6688] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 42744, setting to 1024 [ 877.976835][ T6688] usb 4-1: config 128 interface 127 has no altsetting 0 [ 878.140678][ T6688] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 878.154268][ T6688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.172093][ T6688] usb 4-1: Product: syz [ 878.179554][ T6688] usb 4-1: Manufacturer: syz [ 878.187561][ T6688] usb 4-1: SerialNumber: syz [ 878.210390][T10463] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 878.223233][T10518] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 878.405825][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 878.405840][ T30] audit: type=1400 audit(1755710636.411:310): avc: denied { create } for pid=10523 comm="syz.2.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 878.453468][ T30] audit: type=1400 audit(1755710636.441:311): avc: denied { ioctl } for pid=10523 comm="syz.2.2571" path="socket:[44321]" dev="sockfs" ino=44321 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 878.531429][T10529] syzkaller1: tun_chr_ioctl cmd 35108 [ 878.593444][ T6688] usb 4-1: USB disconnect, device number 64 [ 878.602747][ T30] audit: type=1400 audit(1755710636.611:312): avc: denied { write } for pid=10536 comm="syz.2.2576" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 878.608242][T10535] device syzkaller0 entered promiscuous mode [ 878.792783][ T30] audit: type=1400 audit(1755710636.801:313): avc: denied { ioctl } for pid=10546 comm="syz.2.2581" path="socket:[44371]" dev="sockfs" ino=44371 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 879.018515][ T30] audit: type=1400 audit(1755710637.021:314): avc: denied { read } for pid=10567 comm="syz.0.2590" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 879.052620][ T30] audit: type=1400 audit(1755710637.051:315): avc: denied { open } for pid=10567 comm="syz.0.2590" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 879.153292][ T30] audit: type=1400 audit(1755710637.161:316): avc: denied { append } for pid=10577 comm="syz.4.2592" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 879.183664][T10579] loop6: detected capacity change from 0 to 7 [ 879.279145][ T30] audit: type=1400 audit(1755710637.281:317): avc: denied { create } for pid=10584 comm="syz.2.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 879.316072][ T30] audit: type=1400 audit(1755710637.321:318): avc: denied { connect } for pid=10584 comm="syz.2.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 879.360504][ T30] audit: type=1400 audit(1755710637.321:319): avc: denied { write } for pid=10584 comm="syz.2.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 879.405928][T10586] process 'syz.4.2595' launched './file1' with NULL argv: empty string added [ 879.448764][T10589] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2052513735 (8210054940 ns) > initial count (425259208 ns). Using initial count to start timer. [ 879.500342][ T392] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 879.582377][T10596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2600'. [ 879.750352][ T392] usb 4-1: Using ep0 maxpacket: 32 [ 879.800346][ T9007] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 879.880410][ T392] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 879.888673][ T392] usb 4-1: config 0 has no interface number 0 [ 879.930441][ T6688] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 880.040322][ T9007] usb 3-1: Using ep0 maxpacket: 32 [ 880.060410][ T392] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 880.069536][ T392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.077572][ T392] usb 4-1: Product: syz [ 880.081892][ T392] usb 4-1: Manufacturer: syz [ 880.086494][ T392] usb 4-1: SerialNumber: syz [ 880.092202][ T392] usb 4-1: config 0 descriptor?? [ 880.170402][ T9007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.181380][ T9007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.191138][ T9007] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 880.200231][ T9007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.209526][ T9007] usb 3-1: config 0 descriptor?? [ 880.250829][ T9007] hub 3-1:0.0: USB hub found [ 880.300363][ T6688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.311320][ T6688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.321086][ T6688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 880.334100][ T6688] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 880.343148][ T6688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.351663][ T6688] usb 2-1: config 0 descriptor?? [ 880.470432][ T9007] hub 3-1:0.0: 1 port detected [ 880.570334][ T392] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 880.810358][ T392] usb 5-1: Using ep0 maxpacket: 16 [ 880.841162][ T6688] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 880.848739][ T6688] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 880.856190][ T6688] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 880.863660][ T6688] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 880.871091][ T6688] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 880.878651][ T6688] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 880.888020][ T6688] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 880.930398][ T392] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.941945][ T392] usb 5-1: config 0 interface 0 has no altsetting 0 [ 880.948555][ T392] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 880.957806][ T392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.966296][ T392] usb 5-1: config 0 descriptor?? [ 881.111068][ T9007] usb 2-1: USB disconnect, device number 64 [ 881.120564][ T6688] hub 3-1:0.0: activate --> -90 [ 881.442087][ T392] hid-generic 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 881.541104][ T790] usb 3-1: USB disconnect, device number 60 [ 881.650822][T10614] UDC core: couldn't find an available UDC or it's busy: -16 [ 881.658278][T10614] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 881.850366][ T9007] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 881.910376][ T392] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 882.119417][T10614] UDC core: couldn't find an available UDC or it's busy: -16 [ 882.127044][T10614] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 882.141114][ T790] usb 5-1: USB disconnect, device number 60 [ 882.194488][T10645] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 882.203062][T10645] pit: kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 882.211535][T10645] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 882.219694][T10645] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 882.228253][T10645] pit: kvm: requested 139123 ns i8254 timer period limited to 200000 ns [ 882.236845][T10645] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 882.245917][T10645] pit: kvm: requested 155885 ns i8254 timer period limited to 200000 ns [ 882.249688][ T6688] usb 4-1: USB disconnect, device number 65 [ 882.255442][T10645] pit: kvm: requested 147504 ns i8254 timer period limited to 200000 ns [ 882.270399][ T9007] usb 1-1: unable to get BOS descriptor or descriptor too short [ 882.270406][ T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 882.290146][T10645] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 882.291706][ T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.299976][T10645] pit: kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 882.308199][ T392] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 882.325558][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.325967][ T9007] usb 1-1: not running at top speed; connect to a high speed hub [ 882.343128][ T392] usb 2-1: config 0 descriptor?? [ 882.430391][ T9007] usb 1-1: config 9 has an invalid interface number: 198 but max is 0 [ 882.438661][ T9007] usb 1-1: config 9 has no interface number 0 [ 882.444840][ T9007] usb 1-1: config 9 interface 198 has no altsetting 0 [ 882.610500][ T9007] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 882.620065][ T9007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.628118][ T9007] usb 1-1: Product: syz [ 882.632567][ T9007] usb 1-1: Manufacturer: syz [ 882.637171][ T9007] usb 1-1: SerialNumber: syz [ 882.646926][T10664] netlink: 'syz.3.2626': attribute type 12 has an invalid length. [ 882.654860][T10664] netlink: 'syz.3.2626': attribute type 29 has an invalid length. [ 882.663131][T10664] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2626'. [ 882.821415][ T392] uclogic 0003:2179:0077.0004: No inputs registered, leaving [ 882.829350][ T392] uclogic 0003:2179:0077.0004: hidraw0: USB HID v0.00 Device [HID 2179:0077] on usb-dummy_hcd.1-1/input0 [ 882.951788][ T9007] usb 1-1: USB disconnect, device number 63 [ 882.970335][ T4165] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 882.977975][ T1024] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 883.044265][ T790] usb 2-1: USB disconnect, device number 65 [ 883.220412][ T1024] usb 5-1: Using ep0 maxpacket: 32 [ 883.266862][T10677] kvm: pic: non byte write [ 883.340413][ T4165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 883.350138][ T1024] usb 5-1: config 0 has an invalid interface number: 73 but max is 0 [ 883.358259][ T1024] usb 5-1: config 0 has no interface number 0 [ 883.364351][ T4165] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 883.374028][ T1024] usb 5-1: too many endpoints for config 0 interface 73 altsetting 118: 194, using maximum allowed: 30 [ 883.385074][ T4165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 883.394918][ T1024] usb 5-1: config 0 interface 73 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 883.408322][ T4165] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 883.418321][ T1024] usb 5-1: config 0 interface 73 has no altsetting 0 [ 883.423163][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 883.423178][ T30] audit: type=1400 audit(1755710641.431:325): avc: denied { create } for pid=10681 comm="syz.0.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 883.590389][ T4165] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 883.599507][ T1024] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 883.609098][ T4165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.617369][ T1024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.625517][ T4165] usb 4-1: Product: syz [ 883.629676][ T4165] usb 4-1: Manufacturer: syz [ 883.634300][ T1024] usb 5-1: Product: syz [ 883.638473][ T1024] usb 5-1: Manufacturer: syz [ 883.643241][ T4165] usb 4-1: SerialNumber: syz [ 883.648294][ T1024] usb 5-1: SerialNumber: syz [ 883.653467][ T4165] usb 4-1: config 0 descriptor?? [ 883.658680][ T1024] usb 5-1: config 0 descriptor?? [ 883.735128][ T790] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 883.892320][ T392] usb 4-1: USB disconnect, device number 66 [ 883.990350][ T790] usb 1-1: Using ep0 maxpacket: 16 [ 884.000535][ T4165] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 884.041326][ T1024] usb 5-1: USB disconnect, device number 61 [ 884.130465][ T790] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.141554][ T790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 884.148163][ T790] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 884.157291][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.166345][ T790] usb 1-1: config 0 descriptor?? [ 884.390415][ T4165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.401807][ T30] audit: type=1400 audit(1755710642.411:326): avc: denied { write } for pid=10704 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 884.406372][ T4165] usb 2-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 884.430650][ T4165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.445846][ T4165] usb 2-1: config 0 descriptor?? [ 884.497920][ T30] audit: type=1400 audit(1755710642.501:327): avc: denied { mount } for pid=10714 comm="syz.2.2648" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 884.579757][T10719] APIC base relocation is unsupported by KVM [ 884.652199][ T790] hid-generic 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 884.669819][ T30] audit: type=1400 audit(1755710642.661:328): avc: denied { ioctl } for pid=10733 comm="syz.2.2656" path="socket:[45294]" dev="sockfs" ino=45294 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 884.922249][ T4165] lenovo 0003:04B3:3100.0006: hidraw1: USB HID v0.00 Device [HID 04b3:3100] on usb-dummy_hcd.1-1/input0 [ 885.126806][ T4165] usb 2-1: USB disconnect, device number 66 [ 885.133621][ T1844] usb 1-1: USB disconnect, device number 64 [ 885.490359][ T790] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 885.546081][ T30] audit: type=1400 audit(1755710643.551:329): avc: denied { name_bind } for pid=10758 comm="syz.4.2664" src=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 885.656696][T10768] tipc: Started in network mode [ 885.662862][T10768] tipc: Node identity 22890f76e76b, cluster identity 4711 [ 885.671441][T10768] tipc: Enabled bearer , priority 0 [ 885.680857][T10768] device syzkaller0 entered promiscuous mode [ 885.681544][T10772] user requested TSC rate below hardware speed [ 885.700246][T10772] kvm: vcpu 0: requested 40 ns lapic timer period limited to 200000 ns [ 885.708839][T10772] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (200000 ns). Using initial count to start timer. [ 885.711759][T10768] tipc: Resetting bearer [ 885.750479][ T790] usb 4-1: Using ep0 maxpacket: 8 [ 885.762608][T10771] kvm: pic: non byte write [ 885.762806][T10767] tipc: Resetting bearer [ 885.775363][T10767] tipc: Disabling bearer [ 885.807545][ T30] audit: type=1400 audit(1755710643.811:330): avc: denied { nlmsg_read } for pid=10778 comm="syz.1.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 885.812439][T10780] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2673'. [ 885.889755][ T30] audit: type=1400 audit(1755710643.891:331): avc: denied { nlmsg_tty_audit } for pid=10790 comm="syz.1.2677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 885.896251][T10793] tipc: Enabling of bearer rejected, failed to enable media [ 885.958115][ T30] audit: type=1400 audit(1755710643.961:332): avc: denied { mount } for pid=10802 comm="syz.2.2684" name="/" dev="ramfs" ino=45712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 886.070381][ T790] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 886.079543][ T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.088460][ T790] usb 4-1: Product: syz [ 886.092848][ T6688] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 886.100524][ T790] usb 4-1: Manufacturer: syz [ 886.105182][ T790] usb 4-1: SerialNumber: syz [ 886.110984][ T790] usb 4-1: config 0 descriptor?? [ 886.260339][ T9007] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 886.340405][ T6688] usb 1-1: Using ep0 maxpacket: 8 [ 886.420348][ T4165] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 886.470384][ T6688] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 886.479442][ T6688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.485931][T10826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2694'. [ 886.499161][ T6688] usb 1-1: config 0 descriptor?? [ 886.566274][T10832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2697'. [ 886.581994][T10832] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10832 comm=syz.4.2697 [ 886.606422][T10834] tipc: Started in network mode [ 886.611644][T10834] tipc: Node identity 82eec593ca49, cluster identity 4711 [ 886.619001][T10834] tipc: Enabled bearer , priority 0 [ 886.627232][T10834] device syzkaller0 entered promiscuous mode [ 886.630425][ T9007] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 886.642084][ T9007] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 886.643514][ T30] audit: type=1400 audit(1755710644.651:333): avc: denied { create } for pid=10833 comm="syz.4.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 886.652662][ T9007] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 886.676945][ T1844] usb 4-1: USB disconnect, device number 67 [ 886.681231][ T9007] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 886.688245][T10834] tipc: Resetting bearer [ 886.698264][ T9007] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 886.719777][T10833] tipc: Resetting bearer [ 886.726105][T10833] tipc: Disabling bearer [ 886.820504][ T4165] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 886.840456][ T9007] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 886.849854][ T9007] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 886.858158][ T9007] usb 2-1: Product: syz [ 886.862519][ T9007] usb 2-1: Manufacturer: syz [ 886.920716][ T9007] cdc_wdm 2-1:1.0: skipping garbage [ 886.926103][ T9007] cdc_wdm 2-1:1.0: skipping garbage [ 886.940453][ T9007] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 886.990411][ T4165] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 887.006236][ T4165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 887.014630][ T4165] usb 3-1: Product: syz [ 887.018897][ T4165] usb 3-1: Manufacturer: syz [ 887.023727][ T4165] usb 3-1: SerialNumber: syz [ 887.270892][ T4165] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 887.346971][ T4165] usb 2-1: USB disconnect, device number 67 [ 887.471701][ T30] audit: type=1400 audit(1755710645.481:334): avc: denied { read write } for pid=10821 comm="syz.2.2692" name="lp0" dev="devtmpfs" ino=4783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 887.590666][ T9007] usb 3-1: USB disconnect, device number 61 [ 887.597897][ T9007] usblp0: removed [ 887.820353][ T6688] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 887.830493][ T6688] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 887.841296][ T6688] asix: probe of 1-1:0.0 failed with error -71 [ 887.861918][ T6688] usb 1-1: USB disconnect, device number 65 [ 887.880594][T10857] loop6: detected capacity change from 0 to 7 [ 887.937635][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2710'. [ 887.991633][T10875] tipc: New replicast peer: 255.255.255.255 [ 887.997770][T10875] tipc: Enabled bearer , priority 10 [ 888.132165][T10882] kvm: pic: non byte write [ 888.618150][T10895] loop0: detected capacity change from 0 to 131072 [ 888.721366][T10895] F2FS-fs (loop0): fault_injection options not supported [ 888.728571][T10895] F2FS-fs (loop0): fault_type options not supported [ 888.735785][T10895] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 888.744566][T10895] F2FS-fs (loop0): invalid crc value [ 888.752742][T10895] F2FS-fs (loop0): Found nat_bits in checkpoint [ 888.773954][T10895] F2FS-fs (loop0): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 888.787726][T10895] F2FS-fs (loop0): Failed to read root inode [ 888.831290][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 888.831304][ T30] audit: type=1400 audit(1755710646.841:339): avc: denied { ioctl } for pid=10899 comm="syz.1.2720" path="socket:[46377]" dev="sockfs" ino=46377 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 888.956477][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2723'. [ 888.993354][T10911] loop2: detected capacity change from 0 to 512 [ 889.030615][T10911] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.2725: casefold flag without casefold feature [ 889.043971][T10911] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2725: couldn't read orphan inode 15 (err -117) [ 889.056080][T10911] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 889.067685][ T30] audit: type=1400 audit(1755710647.071:340): avc: denied { mount } for pid=10910 comm="syz.2.2725" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 889.120490][ T6688] tipc: Node number set to 1218954643 [ 889.141404][T10911] syz.2.2725 (pid 10911) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 889.157149][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2727'. [ 889.169836][ T30] audit: type=1400 audit(1755710647.181:341): avc: denied { mounton } for pid=10910 comm="syz.2.2725" path="/573/file1/bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 889.193676][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2727'. [ 889.212176][ T30] audit: type=1400 audit(1755710647.201:342): avc: denied { write } for pid=10910 comm="syz.2.2725" name="bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 889.236747][ T30] audit: type=1400 audit(1755710647.201:343): avc: denied { add_name } for pid=10910 comm="syz.2.2725" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 889.258228][ T30] audit: type=1400 audit(1755710647.201:344): avc: denied { setattr } for pid=10910 comm="syz.2.2725" name="work" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 889.281799][ T30] audit: type=1400 audit(1755710647.201:345): avc: denied { remove_name } for pid=10910 comm="syz.2.2725" name="#1" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 889.311008][T10929] loop3: detected capacity change from 0 to 512 [ 889.337259][ T30] audit: type=1400 audit(1755710647.211:346): avc: denied { rename } for pid=10910 comm="syz.2.2725" name="#1" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 889.360612][T10929] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 889.380190][T10929] EXT4-fs (loop3): orphan cleanup on readonly fs [ 889.388020][T10929] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2728: bg 0: block 248: padding at end of block bitmap is not set [ 889.404370][T10929] Quota error (device loop3): write_blk: dquota write failed [ 889.412053][T10929] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 889.422186][T10929] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.2728: Failed to acquire dquot type 1 [ 889.435946][T10929] EXT4-fs (loop3): 1 truncate cleaned up [ 889.442507][T10929] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 889.507716][T10936] loop2: detected capacity change from 0 to 512 [ 889.895071][T10946] tipc: Enabled bearer , priority 0 [ 889.923729][T10946] +: renamed from syzkaller0 [ 889.954057][T10946] tipc: Disabling bearer [ 890.384978][T10960] loop1: detected capacity change from 0 to 512 [ 890.519995][T10944] loop0: detected capacity change from 0 to 40427 [ 890.544276][T10944] F2FS-fs (loop0): fault_injection options not supported [ 890.556803][T10944] F2FS-fs (loop0): fault_type options not supported [ 890.564957][T10944] F2FS-fs (loop0): invalid crc value [ 890.571147][T10960] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 890.575701][T10944] F2FS-fs (loop0): Found nat_bits in checkpoint [ 890.582760][T10960] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 890.614387][T10960] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2742: bg 0: block 18: invalid block bitmap [ 890.630064][T10960] EXT4-fs error (device loop1): ext4_acquire_dquot:6198: comm syz.1.2742: Failed to acquire dquot type 1 [ 890.707617][T10944] F2FS-fs (loop0): Start checkpoint disabled! [ 890.731281][T10944] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 890.782654][T10944] handle_bad_sector: 341 callbacks suppressed [ 890.782731][T10944] attempt to access beyond end of device [ 890.782731][T10944] loop0: rw=2049, want=77960, limit=40427 [ 890.858883][ T9003] attempt to access beyond end of device [ 890.858883][ T9003] loop0: rw=2049, want=40976, limit=40427 [ 890.913720][T10972] loop3: detected capacity change from 0 to 40427 [ 890.930996][T10972] F2FS-fs (loop3): fault_injection options not supported [ 890.943909][T10972] F2FS-fs (loop3): fault_type options not supported [ 890.950345][ T291] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 890.959795][T10972] F2FS-fs (loop3): invalid crc value [ 890.966771][T10972] F2FS-fs (loop3): Found nat_bits in checkpoint [ 891.016144][T10972] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 891.016501][T10983] loop2: detected capacity change from 0 to 16 [ 891.046246][T10976] attempt to access beyond end of device [ 891.046246][T10976] loop3: rw=2049, want=45104, limit=40427 [ 891.111744][T10983] erofs: (device loop2): mounted with root inode @ nid 36. [ 891.121497][T10983] erofs: (device loop2): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 891.140335][T10983] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=loop2 ino=46 [ 891.214387][T10987] loop0: detected capacity change from 0 to 40427 [ 891.229612][T10995] loop2: detected capacity change from 0 to 128 [ 891.245337][T10987] F2FS-fs (loop0): invalid crc value [ 891.277081][T10995] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 891.291333][T10995] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 891.308284][T10987] F2FS-fs (loop0): Found nat_bits in checkpoint [ 891.320423][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 891.337995][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.352902][ T291] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 891.362277][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.363064][T10987] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 891.374333][ T291] usb 2-1: config 0 descriptor?? [ 891.383072][T10987] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 891.906524][ T280] attempt to access beyond end of device [ 891.906524][ T280] loop0: rw=2049, want=45104, limit=40427 [ 891.932419][ T291] savu 0003:1E7D:2D5A.0007: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 892.075665][T11015] device syzkaller0 entered promiscuous mode [ 892.082460][ T518] syzkaller0: tun_net_xmit 48 [ 892.094024][T11015] syzkaller0: create flow: hash 2460839267 index 1 [ 892.116038][T11014] syzkaller0: delete flow: hash 2460839267 index 1 [ 892.232056][ T518] usb 2-1: USB disconnect, device number 68 [ 892.779948][T11029] loop1: detected capacity change from 0 to 512 [ 892.793652][T11029] EXT4-fs (loop1): Ignoring removed nobh option [ 892.801069][T11029] EXT4-fs (loop1): Test dummy encryption mode enabled [ 892.810205][T11029] EXT4-fs error (device loop1): __ext4_iget:4925: inode #11: block 1: comm syz.1.2762: invalid block [ 892.821790][T11029] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2762: couldn't read orphan inode 11 (err -117) [ 892.834039][T11029] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,jqfmt=vfsold,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 893.017093][T11041] loop0: detected capacity change from 0 to 1024 [ 893.049076][T11041] EXT4-fs (loop0): Ignoring removed bh option [ 893.063480][T11041] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 893.106441][T11041] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000040,dioread_lock,data_err=ignore,resgid=0x0000000000000000,init_itable=0x0000000003209ddb,grpquota,delalloc,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 893.235912][T11043] loop1: detected capacity change from 0 to 40427 [ 893.304005][T11043] F2FS-fs (loop1): invalid crc value [ 893.388480][T11043] F2FS-fs (loop1): Found nat_bits in checkpoint [ 893.394567][T11057] loop4: detected capacity change from 0 to 128 [ 893.442210][T11057] EXT4-fs (loop4): Test dummy encryption mode enabled [ 893.446636][T11043] F2FS-fs (loop1): Start checkpoint disabled! [ 893.459476][T11043] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 893.461389][T11057] EXT4-fs (loop4): Test dummy encryption mode enabled [ 893.480414][T11057] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 893.499192][T11057] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 893.508124][T11057] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 893.570067][T11057] ext4 filesystem being mounted at /558/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 893.618396][T11060] attempt to access beyond end of device [ 893.618396][T11060] loop1: rw=2049, want=45104, limit=40427 [ 893.650586][T11053] loop2: detected capacity change from 0 to 40427 [ 893.671796][T11053] F2FS-fs (loop2): invalid crc value [ 893.700246][T11053] F2FS-fs (loop2): Found nat_bits in checkpoint [ 893.714031][T11065] loop4: detected capacity change from 0 to 1024 [ 893.740619][ T10] attempt to access beyond end of device [ 893.740619][ T10] loop1: rw=2049, want=45112, limit=40427 [ 893.764364][T11053] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 893.768172][T11065] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,resuid=0x0000000000000000,dioread_lock,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 893.822454][ T4532] attempt to access beyond end of device [ 893.822454][ T4532] loop2: rw=2049, want=40976, limit=40427 [ 893.835222][T11053] VFS:Filesystem freeze failed [ 893.992920][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 893.992936][ T30] audit: type=1400 audit(1755710652.001:367): avc: denied { create } for pid=11074 comm="syz.3.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 894.057220][ T30] audit: type=1400 audit(1755710652.031:368): avc: denied { bind } for pid=11074 comm="syz.3.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 894.104197][ T30] audit: type=1400 audit(1755710652.051:369): avc: denied { create } for pid=11076 comm="syz.2.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 894.161418][ T30] audit: type=1400 audit(1755710652.051:370): avc: denied { bind } for pid=11076 comm="syz.2.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 894.188231][T11088] loop3: detected capacity change from 0 to 128 [ 894.194446][ T30] audit: type=1400 audit(1755710652.051:371): avc: denied { listen } for pid=11076 comm="syz.2.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 894.211285][T11073] loop1: detected capacity change from 0 to 40427 [ 894.233485][ T30] audit: type=1400 audit(1755710652.051:372): avc: denied { connect } for pid=11076 comm="syz.2.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 894.257523][T11073] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 894.273907][T11071] loop0: detected capacity change from 0 to 40427 [ 894.280950][T11073] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 894.287612][ T30] audit: type=1400 audit(1755710652.051:373): avc: denied { write } for pid=11076 comm="syz.2.2773" path="socket:[47455]" dev="sockfs" ino=47455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 894.301268][T11073] F2FS-fs (loop1): invalid crc value [ 894.313432][ T30] audit: type=1400 audit(1755710652.101:374): avc: denied { unlink } for pid=11080 comm="syz.3.2778" name="#3" dev="tmpfs" ino=3004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 894.397031][T11071] F2FS-fs (loop0): fault_injection options not supported [ 894.407744][ T30] audit: type=1400 audit(1755710652.321:375): avc: denied { read } for pid=11089 comm="syz.3.2781" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 894.421674][T11071] F2FS-fs (loop0): Unrecognized mount option "barrier" or missing value [ 894.439732][T11073] F2FS-fs (loop1): Found nat_bits in checkpoint [ 894.447701][ T30] audit: type=1400 audit(1755710652.321:376): avc: denied { open } for pid=11089 comm="syz.3.2781" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 894.481112][T11084] loop4: detected capacity change from 0 to 40427 [ 894.489115][T11073] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 894.496211][T11073] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 894.547807][T11084] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 894.559329][T11084] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 894.591556][T11084] F2FS-fs (loop4): Found nat_bits in checkpoint [ 894.623806][T11084] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 894.627225][T11101] loop0: detected capacity change from 0 to 128 [ 894.630900][T11084] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 894.686588][T11101] attempt to access beyond end of device [ 894.686588][T11101] loop0: rw=2051, want=1041, limit=128 [ 894.738816][T11108] loop0: detected capacity change from 0 to 2048 [ 894.815330][T11108] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,. Quota mode: none. [ 895.472128][T11134] loop3: detected capacity change from 0 to 40427 [ 895.671468][T11134] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 895.729537][T11149] loop3: detected capacity change from 0 to 512 [ 895.802591][T11149] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 895.824199][T11149] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2797: invalid indirect mapped block 8 (level 2) [ 895.857824][T11149] EXT4-fs (loop3): Remounting filesystem read-only [ 895.870480][T11149] EXT4-fs (loop3): 1 truncate cleaned up [ 895.881471][T11149] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,journal_dev=0x0000000000009676,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 895.908106][T11153] loop0: detected capacity change from 0 to 32768 [ 895.951606][T11149] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 895.963061][T11153] loop0: p2 p3 [ 895.971027][T11153] loop0: p3 size 196608 extends beyond EOD, truncated [ 895.990644][T11149] EXT4-fs (loop3): re-mounted. Opts: usrjquota=,journal_ioprio=0x0000000000000006,journal_checksum,minixdf,grpjquota=,noinit_itable,. Quota mode: writeback. [ 896.007909][T11160] loop1: detected capacity change from 0 to 4096 [ 896.015381][ T291] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 896.030141][ T291] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 896.069071][T11160] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 896.132899][T10729] udevd[10729]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 896.132918][T10063] udevd[10063]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 896.341863][T11186] overlayfs: missing 'workdir' [ 896.782445][T11191] loop4: detected capacity change from 0 to 40427 [ 896.793851][T11191] F2FS-fs (loop4): fault_injection options not supported [ 896.801381][T11191] F2FS-fs (loop4): Unrecognized mount option "compre˙˙_cache" or missing value [ 897.167687][T11204] loop1: detected capacity change from 0 to 512 [ 897.214786][T11204] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 897.227926][T11204] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 897.381415][T11204] EXT4-fs (loop1): 1 orphan inode deleted [ 897.387193][T11204] EXT4-fs (loop1): 1 truncate cleaned up [ 897.392972][T11204] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,init_itable=0x0000000000000002,jqfmt=vfsv0,nombcache,. Quota mode: none. [ 897.494556][T11204] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 897.510844][T11204] EXT4-fs (loop1): Remounting filesystem read-only [ 898.795652][T11213] loop1: detected capacity change from 0 to 40427 [ 898.905345][T11213] F2FS-fs (loop1): invalid crc value [ 898.956567][T11213] F2FS-fs (loop1): Found nat_bits in checkpoint [ 899.013841][T11218] loop3: detected capacity change from 0 to 40427 [ 899.023666][T11213] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 899.033490][T11218] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 899.040107][T11218] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 899.105459][T11218] F2FS-fs (loop3): Found nat_bits in checkpoint [ 899.153008][T11218] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 899.160173][T11218] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 899.315606][T11199] loop2: detected capacity change from 0 to 131072 [ 899.327878][T11236] tipc: Enabled bearer , priority 0 [ 899.334917][T11236] device syzkaller0 entered promiscuous mode [ 899.342859][T11199] F2FS-fs (loop2): invalid crc value [ 899.351050][T11236] tipc: Resetting bearer [ 899.357583][T11235] tipc: Resetting bearer [ 899.364874][T11235] tipc: Disabling bearer [ 899.394084][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 899.394100][ T30] audit: type=1400 audit(1755710657.401:399): avc: denied { setopt } for pid=11230 comm="syz.0.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 899.490130][ T30] audit: type=1400 audit(1755710657.471:400): avc: denied { ioctl } for pid=11241 comm="syz.1.2829" path="socket:[47659]" dev="sockfs" ino=47659 ioctlcmd=0x8b30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 899.519138][T11199] F2FS-fs (loop2): Found nat_bits in checkpoint [ 899.592132][T11199] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 899.609359][T11199] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 899.951194][T11269] create_pit_timer: 2 callbacks suppressed [ 899.951214][T11269] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 900.000466][T11269] pit: kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 900.013390][T11269] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 900.032465][T11269] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 900.039755][T11259] loop3: detected capacity change from 0 to 32768 [ 900.040986][T11269] pit: kvm: requested 139123 ns i8254 timer period limited to 200000 ns [ 900.055871][T11269] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 900.065336][T11269] pit: kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 900.100872][T11259] loop3: p1 p3 < > [ 900.398606][T11248] loop4: detected capacity change from 0 to 131072 [ 900.550916][T11248] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 900.560066][T10063] udevd[10063]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 900.571854][T10074] udevd[10074]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 900.580373][T11248] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 900.672743][T11248] F2FS-fs (loop4): invalid crc value [ 900.691699][T11248] F2FS-fs (loop4): Found nat_bits in checkpoint [ 900.727705][T11248] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 900.734808][T11248] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 900.755379][ T30] audit: type=1400 audit(1755710658.761:401): avc: denied { rename } for pid=11247 comm="syz.4.2832" name="file0" dev="loop4" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 900.778080][ T30] audit: type=1400 audit(1755710658.761:402): avc: denied { reparent } for pid=11247 comm="syz.4.2832" name="file0" dev="loop4" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 900.800663][ T30] audit: type=1400 audit(1755710658.761:403): avc: denied { reparent } for pid=11247 comm="syz.4.2832" name="file0" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 901.118479][ T30] audit: type=1400 audit(1755710659.121:404): avc: denied { mounton } for pid=11316 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 901.214709][T11322] loop4: detected capacity change from 0 to 512 [ 901.248148][T11316] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.255332][T11316] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.263101][T11316] device bridge_slave_0 entered promiscuous mode [ 901.271848][T11322] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 901.279539][T11316] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.286891][T11316] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.294962][T11316] device bridge_slave_1 entered promiscuous mode [ 901.335351][T11322] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 901.367454][T11322] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 901.419453][T11322] EXT4-fs (loop4): orphan cleanup on readonly fs [ 901.467169][T11322] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 901.483500][T11322] EXT4-fs warning (device loop4): ext4_enable_quotas:6450: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 901.499310][T11322] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 901.507125][T11322] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2855: bg 0: block 40: padding at end of block bitmap is not set [ 901.522509][T11322] EXT4-fs (loop4): Remounting filesystem read-only [ 901.529184][T11322] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 901.602654][T11322] EXT4-fs (loop4): Remounting filesystem read-only [ 901.635531][T11322] EXT4-fs (loop4): 1 truncate cleaned up [ 901.684368][T11322] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,nomblk_io_submit,. Quota mode: writeback. [ 901.770638][T11316] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.777721][T11316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.785048][T11316] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.792078][T11316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.984487][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.006324][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.326616][T11322] EXT4-fs (loop4): shut down requested (2) [ 902.336992][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 902.351065][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 902.359429][T11322] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 902.369738][ T30] audit: type=1400 audit(1755710660.381:405): avc: denied { read } for pid=82 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 902.396633][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 902.404979][T11322] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 902.414189][T11322] fscrypt (loop4, inode 16): Error -5 getting encryption context [ 902.420743][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 902.430670][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.437706][ T4532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.440481][ T30] audit: type=1400 audit(1755710660.381:406): avc: denied { search } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 902.458786][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 902.483670][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 902.496207][ T4532] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.503288][ T4532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.511909][ T30] audit: type=1400 audit(1755710660.381:407): avc: denied { write } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 902.519096][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 902.553310][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 902.564535][T11351] loop4: detected capacity change from 0 to 256 [ 902.580805][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 902.593457][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 902.614870][T11316] device veth0_vlan entered promiscuous mode [ 902.625663][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 902.634558][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 902.644521][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 902.653870][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 902.668686][T11316] device veth1_macvtap entered promiscuous mode [ 902.675730][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 902.683574][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 902.691812][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 902.700086][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 902.721590][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 902.749479][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 902.773821][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 902.796307][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 902.812669][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 903.070349][ T1024] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 903.310335][ T1024] usb 5-1: Using ep0 maxpacket: 16 [ 903.340980][ T385] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 903.430391][ T1024] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.441394][ T1024] usb 5-1: config 0 interface 0 has no altsetting 0 [ 903.448062][ T1024] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 903.457399][ T348] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 903.469295][ T1024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.488615][ T1024] usb 5-1: config 0 descriptor?? [ 903.590322][ T385] usb 3-1: Using ep0 maxpacket: 16 [ 903.710377][ T385] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.721460][ T385] usb 3-1: config 0 interface 0 has no altsetting 0 [ 903.728058][ T385] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 903.737092][ T385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.745849][ T385] usb 3-1: config 0 descriptor?? [ 903.900861][ T348] usb 4-1: unable to get BOS descriptor or descriptor too short [ 903.961743][ T1024] hid-generic 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 903.990396][ T348] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 904.232723][ T385] hid-generic 0003:1E71:2009.000A: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 904.431378][ T385] usb 5-1: USB disconnect, device number 62 [ 904.571293][T11360] UDC core: couldn't find an available UDC or it's busy: -16 [ 904.606867][T11360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 904.780399][ T348] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 904.789488][ T348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.797678][ T348] usb 4-1: SerialNumber: á´‹ [ 904.828086][T11360] UDC core: couldn't find an available UDC or it's busy: -16 [ 904.835763][T11360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 904.844040][T11360] UDC core: couldn't find an available UDC or it's busy: -16 [ 904.851871][T11360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 905.034169][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2877'. [ 905.060215][T11360] UDC core: couldn't find an available UDC or it's busy: -16 [ 905.076986][T11360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 905.085764][ T1704] usb 3-1: USB disconnect, device number 62 [ 905.091498][ T348] usb 4-1: USB disconnect, device number 68 [ 905.177788][T11404] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.186025][T11404] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.189337][T11396] loop1: detected capacity change from 0 to 40427 [ 905.205434][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 905.210145][T11396] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 905.220722][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 905.223970][T11396] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 905.239535][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 905.249623][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 905.256121][T11396] F2FS-fs (loop1): invalid crc value [ 905.269757][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 905.287268][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 905.304473][T11396] F2FS-fs (loop1): Found nat_bits in checkpoint [ 905.308304][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 905.329303][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 905.347339][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 905.347564][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 905.388628][T11396] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 905.395983][T11396] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 905.437982][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 905.437997][ T30] audit: type=1400 audit(1755710663.441:415): avc: denied { read } for pid=11417 comm="syz.4.2884" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=48090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 905.650355][ T348] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 905.680256][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 905.694734][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 905.704688][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 906.290375][ T348] usb 4-1: unable to get BOS descriptor or descriptor too short [ 906.379957][ T348] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 906.471911][ T30] audit: type=1400 audit(1755710664.471:416): avc: denied { bind } for pid=11449 comm="syz.3.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 906.522023][ T348] usb 4-1: can't read configurations, error -71 [ 906.574060][ T30] audit: type=1400 audit(1755710664.511:417): avc: denied { write } for pid=11449 comm="syz.3.2896" name="ptype" dev="proc" ino=4026532572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 906.805678][T11470] tipc: Enabled bearer , priority 0 [ 906.820973][T11470] device syzkaller0 entered promiscuous mode [ 906.830920][T11470] tipc: Resetting bearer [ 906.851002][T11469] tipc: Resetting bearer [ 906.859558][T11469] tipc: Disabling bearer [ 906.938060][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 906.958420][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2905'. [ 907.140319][ T1704] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 907.261011][ T385] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 907.420379][ T1704] usb 1-1: Using ep0 maxpacket: 16 [ 907.530336][ T385] usb 2-1: Using ep0 maxpacket: 8 [ 907.622337][ T1704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.632776][ T1704] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 907.702129][T11497] tipc: Started in network mode [ 907.707303][T11497] tipc: Node identity 9603838e9ccc, cluster identity 4711 [ 907.716195][T11497] tipc: Enabled bearer , priority 0 [ 907.727906][T11497] device syzkaller0 entered promiscuous mode [ 907.751075][T11496] tipc: Resetting bearer [ 907.763009][T11496] tipc: Disabling bearer [ 907.810967][ T1704] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 907.854004][ T1704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.872009][ T385] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 907.885374][ T385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.904581][ T1704] usb 1-1: Product: syz [ 907.911901][ T385] usb 2-1: Product: syz [ 907.916246][ T1704] usb 1-1: Manufacturer: syz [ 907.924061][ T385] usb 2-1: Manufacturer: syz [ 907.929903][ T1704] usb 1-1: SerialNumber: syz [ 907.934778][ T385] usb 2-1: SerialNumber: syz [ 907.952646][ T385] usb 2-1: config 0 descriptor?? [ 908.270702][ T1704] usb 1-1: 0:2 : does not exist [ 908.314453][ T1704] usb 1-1: USB disconnect, device number 66 [ 908.427250][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2915'. [ 908.456201][T11515] tipc: Enabled bearer , priority 0 [ 908.463334][T11515] device syzkaller0 entered promiscuous mode [ 908.472413][T11515] tipc: Resetting bearer [ 908.478770][T11514] tipc: Resetting bearer [ 908.485199][T11514] tipc: Disabling bearer [ 908.721047][ T30] audit: type=1400 audit(1755710666.731:418): avc: denied { setopt } for pid=11527 comm="syz.0.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 909.240369][ T1024] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 909.610375][ T1024] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 909.618611][ T1024] usb 4-1: config 0 has no interface number 0 [ 909.659466][T11552] device syzkaller0 entered promiscuous mode [ 909.800473][ T1024] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 909.809559][ T1024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.817825][ T1024] usb 4-1: Product: syz [ 909.896878][T11562] loop2: detected capacity change from 0 to 512 [ 909.951206][T11562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 910.089483][ T385] usb 2-1: USB disconnect, device number 69 [ 910.180676][T11562] EXT4-fs (loop2): 1 orphan inode deleted [ 910.186482][T11562] EXT4-fs (loop2): 1 truncate cleaned up [ 910.192190][T11562] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,init_itable=0x0000000000000002,jqfmt=vfsv0,nombcache,. Quota mode: none. [ 910.701519][ T1024] usb 4-1: Manufacturer: syz [ 910.706394][ T1024] usb 4-1: SerialNumber: syz [ 910.713467][ T1024] usb 4-1: config 0 descriptor?? [ 911.400382][ T385] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 911.411901][ T30] audit: type=1400 audit(1755710669.421:419): avc: denied { mounton } for pid=11603 comm="syz.0.2944" path="/574/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 911.660311][ T385] usb 5-1: Using ep0 maxpacket: 16 [ 911.780383][ T385] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 911.790725][ T385] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 911.801115][ T385] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 911.814902][ T385] usb 5-1: config 1 interface 0 has no altsetting 0 [ 911.980400][ T385] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 911.989622][ T385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.997913][ T385] usb 5-1: Product: syz [ 912.002331][ T385] usb 5-1: Manufacturer: syz [ 912.006967][ T385] usb 5-1: SerialNumber: syz [ 912.220332][ T9007] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 912.274473][ T385] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 912.461520][ T9007] usb 3-1: Using ep0 maxpacket: 16 [ 912.490842][ T30] audit: type=1400 audit(1755710670.491:420): avc: denied { ioctl } for pid=11599 comm="syz.4.2942" path="/dev/usb/lp0" dev="devtmpfs" ino=4937 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 912.600376][ T9007] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 912.612250][ T9007] usb 3-1: config 0 has no interface number 0 [ 912.640347][T11600] usblp0:failed reading printer status (-32) [ 912.647275][ T385] usb 5-1: USB disconnect, device number 63 [ 912.654020][ T385] usblp0: removed [ 912.770364][ T9007] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 912.779623][ T9007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.787814][ T9007] usb 3-1: Product: syz [ 912.792033][ T9007] usb 3-1: Manufacturer: syz [ 912.796653][ T9007] usb 3-1: SerialNumber: syz [ 912.802112][ T9007] usb 3-1: config 0 descriptor?? [ 912.820770][ T4069] usb 4-1: USB disconnect, device number 71 [ 912.994098][T11627] loop3: detected capacity change from 0 to 512 [ 913.072384][T11627] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 913.158656][T11609] UDC core: couldn't find an available UDC or it's busy: -16 [ 913.439973][T11627] EXT4-fs (loop3): 1 orphan inode deleted [ 913.445880][T11627] EXT4-fs (loop3): 1 truncate cleaned up [ 913.451724][T11627] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,init_itable=0x0000000000000002,jqfmt=vfsv0,nombcache,. Quota mode: none. [ 913.901029][ T30] audit: type=1400 audit(1755710671.911:421): avc: denied { getopt } for pid=11634 comm="syz.3.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 913.940432][T11609] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 913.997205][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 914.005646][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 914.014975][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 914.023538][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 914.031975][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 914.040255][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 914.048985][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 914.058721][T11648] syz.0.2957 (11648) used greatest stack depth: 20384 bytes left [ 914.230313][ T388] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 914.250322][ T4165] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 914.470308][ T388] usb 5-1: Using ep0 maxpacket: 16 [ 914.500336][ T4165] usb 2-1: Using ep0 maxpacket: 8 [ 914.590427][ T388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.601364][ T388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.611141][ T388] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 914.620179][ T388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.629175][ T388] usb 5-1: config 0 descriptor?? [ 914.640463][ T4165] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 914.649602][ T4165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.658470][ T4165] usb 2-1: config 0 descriptor?? [ 914.988407][T11662] loop3: detected capacity change from 0 to 512 [ 915.110558][ T30] audit: type=1400 audit(1755710673.031:422): avc: denied { setopt } for pid=11663 comm="syz.0.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 915.131623][T11662] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 915.166560][T11638] input: syz0 as /devices/virtual/input/input6 [ 915.270057][T11662] EXT4-fs (loop3): 1 orphan inode deleted [ 915.275985][T11662] EXT4-fs (loop3): 1 truncate cleaned up [ 915.281787][T11662] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,init_itable=0x0000000000000002,jqfmt=vfsv0,nombcache,. Quota mode: none. [ 915.440593][ T388] usbhid 5-1:0.0: can't add hid device: -71 [ 915.446982][ T388] usbhid: probe of 5-1:0.0 failed with error -71 [ 915.480408][ T6688] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 915.495629][ T388] usb 5-1: USB disconnect, device number 64 [ 915.624527][ T1704] usb 3-1: USB disconnect, device number 63 [ 915.786843][ T4165] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 915.930703][ T6688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 916.007286][ T6688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.017428][ T6688] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 916.026759][ T6688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.043624][ T6688] usb 1-1: config 0 descriptor?? [ 916.405605][ T4165] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 916.415669][ T4165] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 916.450340][ T4165] asix: probe of 2-1:0.0 failed with error -71 [ 916.457441][ T4165] usb 2-1: USB disconnect, device number 70 [ 916.611851][ T6688] logitech-djreceiver 0003:046D:C52F.000B: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.0-1/input0 [ 917.050449][ T348] usb 1-1: USB disconnect, device number 67 [ 917.133739][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.140882][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.148408][T11705] device bridge_slave_0 entered promiscuous mode [ 917.155751][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.162965][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.170528][T11705] device bridge_slave_1 entered promiscuous mode [ 917.180680][ T4532] tipc: Disabling bearer [ 917.186244][ T4532] tipc: Left network mode [ 917.226153][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.233211][T11705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.240500][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.247524][T11705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.267428][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 917.276278][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.284100][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.300629][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 917.308827][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.315884][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.323520][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 917.331939][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.339049][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.353716][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 917.363204][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 917.377805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 917.391734][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 917.399785][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 917.407570][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 917.415911][T11705] device veth0_vlan entered promiscuous mode [ 917.426436][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 917.437662][T11705] device veth1_macvtap entered promiscuous mode [ 917.447301][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 917.460702][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 917.513190][ T30] audit: type=1400 audit(1755710675.521:423): avc: denied { bind } for pid=11721 comm="syz.4.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 917.535660][ T30] audit: type=1400 audit(1755710675.541:424): avc: denied { setopt } for pid=11721 comm="syz.4.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 917.641384][ T4532] device bridge_slave_1 left promiscuous mode [ 917.647543][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.663928][ T4532] device bridge_slave_0 left promiscuous mode [ 917.688053][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.701666][ T4532] device veth1_macvtap left promiscuous mode [ 917.921081][ T30] audit: type=1400 audit(1755710675.931:425): avc: denied { setopt } for pid=11750 comm="syz.1.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 917.921952][T11751] ================================================================== [ 917.948591][T11751] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 917.957801][T11751] Read of size 1 at addr ffff88810b5663f8 by task syz.1.2984/11751 [ 917.965691][T11751] [ 917.968082][T11751] CPU: 0 PID: 11751 Comm: syz.1.2984 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 917.978320][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 917.988441][T11751] Call Trace: [ 917.991721][T11751] [ 917.994697][T11751] __dump_stack+0x21/0x30 [ 917.999034][T11751] dump_stack_lvl+0xee/0x150 [ 918.003625][T11751] ? show_regs_print_info+0x20/0x20 [ 918.008823][T11751] ? load_image+0x3a0/0x3a0 [ 918.013322][T11751] ? unwind_get_return_address+0x4d/0x90 [ 918.018955][T11751] print_address_description+0x7f/0x2c0 [ 918.024499][T11751] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 918.031000][T11751] kasan_report+0xf1/0x140 [ 918.035416][T11751] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 918.041919][T11751] __asan_report_load1_noabort+0x14/0x20 [ 918.047555][T11751] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 918.053885][T11751] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 918.060045][T11751] ? xfrm_netlink_rcv+0x72/0x90 [ 918.064895][T11751] ? netlink_unicast+0x876/0xa40 [ 918.069828][T11751] ? netlink_sendmsg+0x86a/0xb70 [ 918.074757][T11751] ? ____sys_sendmsg+0x5a2/0x8c0 [ 918.079694][T11751] ? ___sys_sendmsg+0x1f0/0x260 [ 918.084900][T11751] ? x64_sys_call+0x4b/0x9a0 [ 918.089601][T11751] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 918.095675][T11751] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 918.101838][T11751] xfrm_policy_inexact_insert+0x70/0x1130 [ 918.107563][T11751] ? __get_hash_thresh+0x10c/0x420 [ 918.112676][T11751] ? policy_hash_bysel+0x110/0x4f0 [ 918.117792][T11751] xfrm_policy_insert+0x126/0x9a0 [ 918.122812][T11751] ? xfrm_policy_construct+0x54f/0x1f00 [ 918.128448][T11751] xfrm_add_policy+0x4d1/0x830 [ 918.133212][T11751] ? xfrm_dump_sa_done+0xc0/0xc0 [ 918.138154][T11751] xfrm_user_rcv_msg+0x45c/0x6e0 [ 918.143092][T11751] ? xfrm_netlink_rcv+0x90/0x90 [ 918.147955][T11751] ? avc_has_perm_noaudit+0x460/0x460 [ 918.153328][T11751] ? x64_sys_call+0x4b/0x9a0 [ 918.157951][T11751] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 918.163320][T11751] netlink_rcv_skb+0x1e0/0x430 [ 918.168085][T11751] ? xfrm_netlink_rcv+0x90/0x90 [ 918.172938][T11751] ? netlink_ack+0xb60/0xb60 [ 918.177525][T11751] ? wait_for_completion_killable_timeout+0x10/0x10 [ 918.184108][T11751] ? __netlink_lookup+0x387/0x3b0 [ 918.189129][T11751] xfrm_netlink_rcv+0x72/0x90 [ 918.193806][T11751] netlink_unicast+0x876/0xa40 [ 918.198568][T11751] netlink_sendmsg+0x86a/0xb70 [ 918.203328][T11751] ? netlink_getsockopt+0x530/0x530 [ 918.208525][T11751] ? sock_alloc_file+0xba/0x260 [ 918.213375][T11751] ? security_socket_sendmsg+0x82/0xa0 [ 918.218846][T11751] ? netlink_getsockopt+0x530/0x530 [ 918.224180][T11751] ____sys_sendmsg+0x5a2/0x8c0 [ 918.228989][T11751] ? __sys_sendmsg_sock+0x40/0x40 [ 918.234109][T11751] ? import_iovec+0x7c/0xb0 [ 918.238701][T11751] ___sys_sendmsg+0x1f0/0x260 [ 918.243383][T11751] ? __sys_sendmsg+0x250/0x250 [ 918.248169][T11751] ? __fdget+0x1a1/0x230 [ 918.252417][T11751] __x64_sys_sendmsg+0x1e2/0x2a0 [ 918.257362][T11751] ? ___sys_sendmsg+0x260/0x260 [ 918.262225][T11751] ? __kasan_check_write+0x14/0x20 [ 918.268131][T11751] ? switch_fpu_return+0x15d/0x2c0 [ 918.273394][T11751] x64_sys_call+0x4b/0x9a0 [ 918.277830][T11751] do_syscall_64+0x4c/0xa0 [ 918.282258][T11751] ? clear_bhb_loop+0x50/0xa0 [ 918.286937][T11751] ? clear_bhb_loop+0x50/0xa0 [ 918.291616][T11751] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 918.297528][T11751] RIP: 0033:0x7f4507ac7be9 [ 918.301946][T11751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.321554][T11751] RSP: 002b:00007f4506530038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.329975][T11751] RAX: ffffffffffffffda RBX: 00007f4507ceefa0 RCX: 00007f4507ac7be9 [ 918.337957][T11751] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 918.345929][T11751] RBP: 00007f4507b4ae19 R08: 0000000000000000 R09: 0000000000000000 [ 918.353898][T11751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.361866][T11751] R13: 00007f4507cef038 R14: 00007f4507ceefa0 R15: 00007ffd15e3bd58 [ 918.369841][T11751] [ 918.372863][T11751] [ 918.375174][T11751] Allocated by task 11751: [ 918.379576][T11751] __kasan_kmalloc+0xda/0x110 [ 918.384341][T11751] __kmalloc+0x13d/0x2c0 [ 918.388925][T11751] sk_prot_alloc+0xed/0x320 [ 918.393443][T11751] sk_alloc+0x38/0x430 [ 918.397503][T11751] pfkey_create+0x12a/0x660 [ 918.401994][T11751] __sock_create+0x38d/0x7a0 [ 918.406572][T11751] __sys_socket+0xec/0x190 [ 918.410971][T11751] __x64_sys_socket+0x7a/0x90 [ 918.415638][T11751] x64_sys_call+0x8c5/0x9a0 [ 918.420123][T11751] do_syscall_64+0x4c/0xa0 [ 918.424523][T11751] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 918.430408][T11751] [ 918.432720][T11751] Last potentially related work creation: [ 918.438408][T11751] kasan_save_stack+0x3a/0x60 [ 918.443091][T11751] __kasan_record_aux_stack+0xd2/0x100 [ 918.448538][T11751] kasan_record_aux_stack_noalloc+0xb/0x10 [ 918.454423][T11751] call_rcu+0x105/0xfe0 [ 918.458560][T11751] qdisc_destroy+0x166/0x270 [ 918.463140][T11751] dev_shutdown+0x198/0x580 [ 918.467626][T11751] unregister_netdevice_many+0x95d/0x1990 [ 918.473347][T11751] unregister_netdevice_queue+0x31c/0x360 [ 918.479050][T11751] __tun_detach+0xca6/0x1450 [ 918.483620][T11751] tun_chr_close+0x92/0x140 [ 918.488109][T11751] __fput+0x20b/0x8b0 [ 918.492070][T11751] ____fput+0x15/0x20 [ 918.496029][T11751] task_work_run+0x127/0x190 [ 918.500597][T11751] exit_to_user_mode_loop+0xd0/0xe0 [ 918.505775][T11751] exit_to_user_mode_prepare+0x5a/0xa0 [ 918.511215][T11751] syscall_exit_to_user_mode+0x1a/0x30 [ 918.516665][T11751] do_syscall_64+0x58/0xa0 [ 918.521061][T11751] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 918.526939][T11751] [ 918.529241][T11751] The buggy address belongs to the object at ffff88810b566000 [ 918.529241][T11751] which belongs to the cache kmalloc-1k of size 1024 [ 918.543360][T11751] The buggy address is located 1016 bytes inside of [ 918.543360][T11751] 1024-byte region [ffff88810b566000, ffff88810b566400) [ 918.556791][T11751] The buggy address belongs to the page: [ 918.562398][T11751] page:ffffea00042d5800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b560 [ 918.573002][T11751] head:ffffea00042d5800 order:3 compound_mapcount:0 compound_pincount:0 [ 918.581323][T11751] flags: 0x4000000000010200(slab|head|zone=1) [ 918.587391][T11751] raw: 4000000000010200 ffffea00042ade00 0000000600000006 ffff888100043080 [ 918.595967][T11751] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 918.604527][T11751] page dumped because: kasan: bad access detected [ 918.610916][T11751] page_owner tracks the page as allocated [ 918.616607][T11751] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 283, ts 29257252385, free_ts 29221043521 [ 918.635006][T11751] post_alloc_hook+0x192/0x1b0 [ 918.639773][T11751] prep_new_page+0x1c/0x110 [ 918.644277][T11751] get_page_from_freelist+0x2cc5/0x2d50 [ 918.649810][T11751] __alloc_pages+0x18f/0x440 [ 918.654394][T11751] new_slab+0xa1/0x4d0 [ 918.658464][T11751] ___slab_alloc+0x381/0x810 [ 918.663043][T11751] __slab_alloc+0x49/0x90 [ 918.667374][T11751] __kmalloc_track_caller+0x169/0x2c0 [ 918.672742][T11751] __alloc_skb+0x21a/0x740 [ 918.677149][T11751] inet6_rt_notify+0x287/0x470 [ 918.681909][T11751] fib6_add+0x2279/0x3d10 [ 918.686236][T11751] ip6_route_add+0x89/0x130 [ 918.690721][T11751] addrconf_add_linklocal+0x3cf/0x620 [ 918.696081][T11751] addrconf_addr_gen+0x48b/0x5b0 [ 918.701001][T11751] addrconf_init_auto_addrs+0x842/0xb90 [ 918.706540][T11751] addrconf_notify+0x95d/0xde0 [ 918.711290][T11751] page last free stack trace: [ 918.715948][T11751] free_unref_page_prepare+0x542/0x550 [ 918.721396][T11751] free_unref_page+0xa2/0x550 [ 918.726060][T11751] __free_pages+0x6c/0x100 [ 918.730548][T11751] __free_slab+0xe8/0x1e0 [ 918.734862][T11751] __unfreeze_partials+0x160/0x190 [ 918.739958][T11751] put_cpu_partial+0xc6/0x120 [ 918.744798][T11751] __slab_free+0x1d4/0x290 [ 918.749200][T11751] ___cache_free+0x104/0x120 [ 918.753773][T11751] qlink_free+0x4d/0x90 [ 918.757916][T11751] qlist_free_all+0x5f/0xb0 [ 918.762403][T11751] kasan_quarantine_reduce+0x14a/0x170 [ 918.767859][T11751] __kasan_slab_alloc+0x2f/0xf0 [ 918.772696][T11751] slab_post_alloc_hook+0x4f/0x2b0 [ 918.777796][T11751] kmem_cache_alloc+0xf7/0x260 [ 918.782543][T11751] __alloc_skb+0xe0/0x740 [ 918.786855][T11751] alloc_skb_with_frags+0xa8/0x620 [ 918.791950][T11751] [ 918.794256][T11751] Memory state around the buggy address: [ 918.799864][T11751] ffff88810b566280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.807908][T11751] ffff88810b566300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.815948][T11751] >ffff88810b566380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 918.823988][T11751] ^ [ 918.831948][T11751] ffff88810b566400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 918.839988][T11751] ffff88810b566480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 918.848061][T11751] ================================================================== [ 918.856110][T11751] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 918.870658][ T4165] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 918.879445][ T30] audit: type=1400 audit(1755710676.881:426): avc: denied { write } for pid=272 comm="syz-executor" path="pipe:[470]" dev="pipefs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 919.040460][ T348] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 919.140546][ T4532] tipc: Left network mode [ 919.200393][ T4165] usb 4-1: device descriptor read/all, error -71 [ 920.071272][ T4532] device bridge_slave_1 left promiscuous mode [ 920.077389][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.084840][ T4532] device bridge_slave_0 left promiscuous mode [ 920.091088][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.098869][ T4532] device bridge_slave_1 left promiscuous mode [ 920.105031][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.112541][ T4532] device bridge_slave_0 left promiscuous mode [ 920.118630][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.126836][ T4532] device veth1_macvtap left promiscuous mode [ 920.132861][ T4532] device veth0_vlan left promiscuous mode [ 920.138788][ T4532] device veth1_macvtap left promiscuous mode [ 920.144901][ T4532] device veth0_vlan left promiscuous mode [ 921.133835][ T4532] tipc: Left network mode [ 922.061506][ T4532] device bridge_slave_1 left promiscuous mode [ 922.067654][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.075243][ T4532] device bridge_slave_0 left promiscuous mode [ 922.081444][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.089395][ T4532] device bridge_slave_1 left promiscuous mode [ 922.095603][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.103256][ T4532] device bridge_slave_0 left promiscuous mode [ 922.109360][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.117285][ T4532] device bridge_slave_1 left promiscuous mode [ 922.123547][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.131212][ T4532] device bridge_slave_0 left promiscuous mode [ 922.137319][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.156728][ T4532] device veth1_macvtap left promiscuous mode [ 922.162793][ T4532] device veth0_vlan left promiscuous mode [ 922.168758][ T4532] device veth1_macvtap left promiscuous mode [ 922.175016][ T4532] device veth0_vlan left promiscuous mode [ 922.180932][ T4532] device veth1_macvtap left promiscuous mode [ 922.186948][ T4532] device veth0_vlan left promiscuous mode