last executing test programs: 21.964995035s ago: executing program 3 (id=36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x5, 0x1, 0x7, 0x3, 0x471f, 0x800000]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000180)="748466ba4000b0cbee66b88a000f00d0b9120a00000f32660fc7b3910d00000f00550066baf80cb84e898984ef66bafc0c66b8920066ef2e0f083626f30f01350000000066b812018ee0"}], 0x1, 0x6f, 0x0, 0x5e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.910420646s ago: executing program 3 (id=38): socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) listen(0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 21.875512386s ago: executing program 3 (id=39): r0 = socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="03000000", 0x4, 0x20000840, &(0x7f00000002c0)={0x11, 0x88a8, r2}, 0x14) 21.855390716s ago: executing program 3 (id=40): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) 21.731047878s ago: executing program 3 (id=43): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001c00070cfffffffffddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200640b0a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x50}}, 0x40008014) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 21.648598199s ago: executing program 3 (id=45): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x4000) 21.648498839s ago: executing program 32 (id=45): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x4000) 20.045333263s ago: executing program 1 (id=71): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 20.044898733s ago: executing program 1 (id=72): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000240)="1179a786a9c2f1fecbf37079b2e3dc0373dd30a15eb23f5d9e93eb", 0x1b, 0x3b20, 0x0, 0x0) 20.020612694s ago: executing program 1 (id=73): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001800)=0x4101, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)={0x10, 0x2a, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x10}], 0x1}, 0x4000000) 20.020196944s ago: executing program 1 (id=74): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f00000001c0), 0x1, 0x3fb, &(0x7f0000000a80)="$eJzs3E9PHGUYAPBnhn9CC4uJB1M9kGgUo0IXRa0xsXr1z6X6AQjQ2khLUzCxlQMaT548GG8e+gU8+AGaxjQx8Sv4BUyTxlAOesPM7MyywOwKsrCl/f2Syb7vzOw+77MzTN532HkDeGxNRMT5iOiLiJmIqBXr02KJ9caS7fdgY21+c2NtPomtrQt/JZEU68rPSorXU0VlMo1Iv414Zn1v3JUbNz+fW1pavF7Up1evXJteuXHz1ctX5i4tXlq8Wn/zXL0+O/NW/fWu5frj8y+d63v//Jmf/qjdmR0cHM7ae7rY1ppHt0zERPM72W2228F6bLDXDQAAYF/Sou/fn/f/a9GXlxpqMb3W08YBAAAAXbH1bvHazljbLQAAAMCJkbQf+wMAAACPhPJ3AA821ubLpYc/Rzh299+LiPHtZ5s3m/n3xxPFPgNH+HzrRERceyGpZUsc0XPIAACt7mT9n7NV/b80nm7Zbygi7w8Ndzn+xK763v5Peq/LIXfI+n/vRMTmnv5fWu4y3lfURvOu4kBy8fLS4tmIGIuIyRgYyur1DjE++Pvnj9tty/K/m4yOlUsW/26Sf3Qhvdc/tPM9C3Orc4fJudX9ryPO9FflnzT7v0lEjBwiRt9Xt95ut606/9GxQ4Q7kK1bES9WHv/tmXuSzvMTTefnw3R5Vuz1zze/fNQufq/zz47/SOf8x5PW+ZpWDh7j9me/P5sXKrJqHf9U5199/g8mn+Tlclz25dzq6vV6xGDy4d71M9vvLevl/ln+k89V//2X17+kmNPqdHEN6GCrauV33//6Sue3NfLPlix+ORY8Dln+Cwc6/p0KF4arNr1x+7dP28VvHv8kYr0y/+z4N+YAmyzW7Of6918t/f9nMwAAAJw8aX5fI0mnmuU0nZpq3O94KkbSpeWV1ZcvLn9xdaFx/2M8BtLyTlet5X5ovfFv9GZ9Zlf9tYh4MiJ+qA3n9an55aWFXicPAAAAj4lTbcb/mT+P7VcIAAAAwJEb73UDAAAAgCNn/A8AAACPtP3N66ews5B9cw9BM3pRGHo4mqFw1IVeX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtn8DAAD//61VsxM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x77f8) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)={0x7, 0x5, 0x2, 0x401}) 19.811905087s ago: executing program 1 (id=75): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@errors_continue}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x107042, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x3, 0x1, 0x5}) 19.636744639s ago: executing program 1 (id=76): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 19.636585899s ago: executing program 33 (id=76): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 6.032643851s ago: executing program 4 (id=265): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) 5.981000052s ago: executing program 4 (id=269): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6949c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c3522fff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041afc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf2", 0x45}, {&(0x7f0000000f00)="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", 0x147}, {&(0x7f0000000240)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b41722", 0x22}, {&(0x7f0000000440)="e78901b24f3291e9448af6bf802603c0a47d696e45734f3aadb096a0e9d428f71a7365c266b448adc5655f5b5c7574d6691fa86321c8ff9c33e6e68f073f3f5b289e9c2b6466853b8d401f3c95fee163c50a084fe2cd69d28ed65a676f06a572bca4c22a589556fe373c80e16ee81235c845a955ee9e44f3e86de6eda3736d95d636e5135e42aa62a826a860", 0x8c}, {&(0x7f00000002c0)="b6139dc68c219b157760a3cbf255087b81aaba8e246b1d98cac2af5ddb62415a0c56728b0d360ce8a1fa43d6dcba394087c43242b7ff0cec", 0x38}], 0x6}}], 0x1, 0x20008000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 5.926261103s ago: executing program 4 (id=270): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0xc3996000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000380)='./bus\x00', 0x800804, &(0x7f00000007c0)=ANY=[@ANYRES64=r2], 0x1, 0x275, &(0x7f00000003c0)="$eJzs3U9qG1ccB/DfWJIttQtp0VUpeKBddGXsnsCmuFBqKLRo0XbRmNiGYAmDDYL8IYpXOUFOkPNkE3KBHCAhu3hhMkGekayEkY0S2TLJ57PR4733nfd7M4O0mtGtH7r7OwdHe8cPXka9nsTCeqzHSRKtWIihR1HqxevyfgDghjvJsniT5ZZKZ9QmJKsLV1oYAHBlxn//510LAHA9/v7n3z82trY2/0rTekT3ca+dRP6Zj2/sxZ3oxG6sRjNOI7KRvP3b71ubUU0HWvFTt99rD5Ld/58Vx994FXGWX4tmtMrza2luLN/vtWvxzXD9JOLPp9GM78rzv5Tko70YP/84Vv9KNOP57TiITuwUtQ3zD9fS9Nfsydv7/w16B/mk32svjeYVsyvXemEAAAAAAAAAAAAAAAAAAAAAAPiiraQjrQ/fv1M5PRtfmTSe5ye9H6g/9n6e1TRNsySff56vxvfVqM5z7wAAAAAAAAAAAAAAAAAAAHBTHN29t7/d6ewezrQxfKy/ZCjezXKt5WlTUSlK6yQR061VK5KXT65MuYvGoJ7dw6Qas7sEyainMT60HPlag55G3hjr+ezV63HWGN5d+9tJXJKql90kM2hkJbdfZWJq8eOeRrGDksmNC1Zf/PaTas6aE4aSiKiNTubFx6nN9hxe1zcQAAAAAAAAAAAAAAAAAAAwdP7Qb8ng8RwKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA5OP///yka/SI8aU5WGTSqUfTMeYsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Bd4HAAD//4qtaNI=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r7, @ANYBLOB="a18300050000000000000500000008", @ANYRES32=0x0], 0x2ac}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 5.684797026s ago: executing program 6 (id=274): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f205", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 4.841741969s ago: executing program 6 (id=278): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 4.78031818s ago: executing program 6 (id=280): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000340)=""/54, 0x36}], 0x2, 0x5b, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x9, 0x4a, 0xff, 0xff, 0x0, '\x00', 0x6e}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.554905233s ago: executing program 4 (id=287): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x35) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pipe2$9p(&(0x7f0000001900), 0x0) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3.957480442s ago: executing program 6 (id=299): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0xc4, 0x2, r3}) 3.835460324s ago: executing program 6 (id=300): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.681183966s ago: executing program 4 (id=301): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000240)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 3.608861067s ago: executing program 4 (id=302): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x40, 0x19, 0x2, "0e03"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000f40)={0x20, 0x17, 0x3, "08c24f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.416798555s ago: executing program 6 (id=305): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 2.314418686s ago: executing program 0 (id=306): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 2.289179627s ago: executing program 0 (id=307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.229386367s ago: executing program 0 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x15, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0], 0x0, 0x28a, &(0x7f0000000680)="$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") bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 2.218423828s ago: executing program 0 (id=309): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x9}]}}]}, 0x40}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', '', [], 0x8, "2c36ce35fe800000000000009d94165f433d388e6577f86274e326d04670000000002c00"}, 0x5ac) 2.211472628s ago: executing program 0 (id=310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340), 0x0, 0x4c001, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.270616932s ago: executing program 0 (id=318): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000100059ea6400000000000109022400010000300009040000010300010009210000000122450009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0001dc000000dc0ef9d9855d539b05fb0f4526eb9263e5d04046bd6e16e4b2368edc6907000000000000005e877a26d084a161"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.195735103s ago: executing program 2 (id=320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) 1.112711094s ago: executing program 2 (id=321): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0x0, 0x0, 0xc003, 0xc, "fa3d76170000001b"}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff3d) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0xe, 0x8000003, 0x3, 0xa, "a85c45a2c25cc646300200"}) r1 = syz_open_pts(r0, 0x181002) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.084014914s ago: executing program 2 (id=322): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.025065715s ago: executing program 2 (id=323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x6, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x1, 0xe, 0x9, 0xa, 0x2, 0xd, 0x85}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x40, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000010080)=[@textreal={0x8, 0x0}], 0x1, 0x5a, 0x0, 0x0) 922.078917ms ago: executing program 2 (id=326): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000a39000/0x1000)=nil, 0x1000}, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 848.772428ms ago: executing program 2 (id=327): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xc, &(0x7f0000000100)=@generic={0x5, 0x0, 0x4, "801fe2c9", "8a73ee26"}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0301"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 423.524804ms ago: executing program 5 (id=337): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 346.328426ms ago: executing program 5 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f00000006c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070002000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffc, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) 294.345967ms ago: executing program 5 (id=339): sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 228.226677ms ago: executing program 5 (id=340): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) 187.864228ms ago: executing program 5 (id=341): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_open_dev$usbfs(0x0, 0x204, 0x2) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 5 (id=342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000005f304433b3c4d403b4c4ddca0e3cf4"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 12.582732][ T30] audit: type=1400 audit(1751702690.728:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.585391][ T30] audit: type=1400 audit(1751702690.728:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.149398][ T227] sftp-server (227) used greatest stack depth: 21856 bytes left Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 19.234749][ T30] audit: type=1400 audit(1751702697.388:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.235792][ T273] cgroup: Unknown subsys name 'net' [ 19.257374][ T30] audit: type=1400 audit(1751702697.388:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.285182][ T30] audit: type=1400 audit(1751702697.438:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.285301][ T273] cgroup: Unknown subsys name 'devices' [ 19.460363][ T273] cgroup: Unknown subsys name 'hugetlb' [ 19.465938][ T273] cgroup: Unknown subsys name 'rlimit' [ 19.661684][ T30] audit: type=1400 audit(1751702697.818:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.684803][ T30] audit: type=1400 audit(1751702697.818:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.709518][ T30] audit: type=1400 audit(1751702697.818:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.714971][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.741319][ T30] audit: type=1400 audit(1751702697.898:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.766721][ T30] audit: type=1400 audit(1751702697.898:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.794798][ T30] audit: type=1400 audit(1751702697.958:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.820296][ T30] audit: type=1400 audit(1751702697.958:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.820350][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.440438][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.447473][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.454888][ T281] device bridge_slave_0 entered promiscuous mode [ 20.462582][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.469638][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.476853][ T281] device bridge_slave_1 entered promiscuous mode [ 20.483326][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.490362][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.497564][ T282] device bridge_slave_0 entered promiscuous mode [ 20.505267][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.512318][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.519638][ T282] device bridge_slave_1 entered promiscuous mode [ 20.526086][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.533185][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.540501][ T283] device bridge_slave_0 entered promiscuous mode [ 20.560033][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.567048][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.574344][ T283] device bridge_slave_1 entered promiscuous mode [ 20.634942][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.641982][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.649286][ T285] device bridge_slave_0 entered promiscuous mode [ 20.662876][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.669921][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.677143][ T285] device bridge_slave_1 entered promiscuous mode [ 20.717862][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.724907][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.732236][ T284] device bridge_slave_0 entered promiscuous mode [ 20.750585][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.757605][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.764948][ T284] device bridge_slave_1 entered promiscuous mode [ 20.844653][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.851694][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.858956][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.865963][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.893666][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.900700][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.907932][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.914954][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.939518][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.946542][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.953795][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.960831][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.974806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.982407][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.989870][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.997016][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.004314][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.011453][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.018567][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.045750][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.053923][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.060939][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.077680][ T283] device veth0_vlan entered promiscuous mode [ 21.089318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.097547][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.105634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.113153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.120615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.128644][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.135657][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.143163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.151061][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.167061][ T283] device veth1_macvtap entered promiscuous mode [ 21.191998][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.199408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.207454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.214903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.222784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.231171][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.238169][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.277648][ T284] device veth0_vlan entered promiscuous mode [ 21.285048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.294079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.302359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.311824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.320264][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.328087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.335502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.342866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.350237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.358263][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.365271][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.372676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.380935][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.387933][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.395259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.403346][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.410353][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.417647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.425827][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.432843][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.440147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.447965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.455877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.463837][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.471764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.479889][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.486881][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.494264][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.502146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.510309][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.517315][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.524697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.533220][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.540235][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.547499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.555452][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.563681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.571240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.586266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.594609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.611141][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.619926][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.619997][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 21.632325][ T284] device veth1_macvtap entered promiscuous mode [ 21.646870][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.655198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.663413][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.671076][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.679423][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.690849][ T282] device veth0_vlan entered promiscuous mode [ 21.696960][ T285] device veth0_vlan entered promiscuous mode [ 21.713463][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.724050][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.732820][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.740697][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.749071][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.757256][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.765605][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.773908][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.782231][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.790182][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.797978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.806200][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.814940][ T281] device veth0_vlan entered promiscuous mode [ 21.822971][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.830453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.837781][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.845262][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.852729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.860211][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.870955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.879200][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.891270][ T282] device veth1_macvtap entered promiscuous mode [ 21.899209][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.907396][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.915793][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.926630][ T285] device veth1_macvtap entered promiscuous mode [ 21.936418][ T281] device veth1_macvtap entered promiscuous mode [ 21.953131][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.961159][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.969934][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.978029][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.985630][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.993930][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.002684][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.010939][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.019047][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.034301][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.049204][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.057501][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.079079][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.087352][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.099152][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.121969][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.130526][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.207876][ T349] xt_hashlimit: size too large, truncated to 1048576 [ 22.379020][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.384851][ T354] loop2: detected capacity change from 0 to 512 [ 22.396198][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 22.416193][ T6] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 22.428831][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.448016][ T6] usb 2-1: config 0 descriptor?? [ 22.449682][ T354] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 22.617167][ T373] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.820120][ T376] loop2: detected capacity change from 0 to 40427 [ 22.870451][ T376] F2FS-fs (loop2): Found nat_bits in checkpoint [ 22.888827][ T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 22.892849][ T376] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 22.926711][ T285] attempt to access beyond end of device [ 22.926711][ T285] loop2: rw=2049, want=45104, limit=40427 [ 23.050578][ T391] loop2: detected capacity change from 0 to 256 [ 23.089351][ T391] exfat: Deprecated parameter 'namecase' [ 23.095052][ T391] exfat: Deprecated parameter 'utf8' [ 23.100504][ T391] exfat: Deprecated parameter 'namecase' [ 23.100602][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.106134][ T391] exfat: Deprecated parameter 'utf8' [ 23.138845][ T60] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.181151][ T391] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 23.258868][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.269798][ T20] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 23.438844][ T20] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 23.447883][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.455888][ T20] usb 5-1: Product: syz [ 23.460266][ T20] usb 5-1: Manufacturer: syz [ 23.464851][ T20] usb 5-1: SerialNumber: syz [ 23.498853][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.509439][ T20] cdc_mbim 5-1:1.0: skipping garbage [ 23.509788][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.524726][ T26] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 23.528820][ T380] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.533779][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.549199][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.560319][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.570229][ T26] usb 4-1: config 0 descriptor?? [ 23.575206][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 23.580264][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input4 [ 23.588180][ T60] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 23.601365][ T6] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input5 [ 23.608932][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.621590][ T6] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 23.640093][ T60] usb 1-1: config 0 descriptor?? [ 23.709742][ T371] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 23.798874][ T380] usb 3-1: Using ep0 maxpacket: 8 [ 23.828882][ T383] usb 2-1: USB disconnect, device number 2 [ 23.918901][ T380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.930105][ T380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.939831][ T380] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.953049][ T380] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 23.962102][ T380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.971145][ T380] usb 3-1: config 0 descriptor?? [ 24.069412][ T26] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 24.076862][ T26] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 24.119691][ T60] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 24.128498][ T60] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 24.288867][ T26] cp2112 0003:10C4:EA90.0002: error requesting version [ 24.296336][ T26] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 24.306001][ T26] usb 4-1: USB disconnect, device number 2 [ 24.331111][ T401] fido_id[401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 24.349231][ T371] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 24.368881][ T20] cdc_mbim 5-1:1.0: setting rx_max = 16384 [ 24.375113][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 24.375123][ T30] audit: type=1400 audit(1751702702.528:142): avc: denied { write } for pid=402 comm="syz.1.23" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 24.440240][ T380] logitech 0003:046D:C29C.0004: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 24.452371][ T30] audit: type=1400 audit(1751702702.608:143): avc: denied { write } for pid=410 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 24.588832][ T20] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 24.595164][ T20] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 24.603567][ T20] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, f2:cf:6e:95:1f:ee [ 24.615617][ T20] usb 5-1: USB disconnect, device number 2 [ 24.621621][ T20] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 24.788811][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.868854][ T380] logitech 0003:046D:C29C.0004: no inputs found [ 24.876912][ T380] usb 3-1: USB disconnect, device number 2 [ 24.884882][ T30] audit: type=1400 audit(1751702703.048:144): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 24.910245][ T414] fido_id[414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 25.014435][ T416] SELinux: security policydb version 18 (MLS) not backwards compatible [ 25.014489][ T30] audit: type=1400 audit(1751702703.168:145): avc: denied { load_policy } for pid=415 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 25.022795][ T416] SELinux: failed to load policy [ 25.093954][ T30] audit: type=1400 audit(1751702703.248:146): avc: denied { create } for pid=420 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.113152][ T30] audit: type=1400 audit(1751702703.248:147): avc: denied { read } for pid=420 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.147227][ T30] audit: type=1400 audit(1751702703.298:148): avc: denied { write } for pid=420 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.176009][ T30] audit: type=1400 audit(1751702703.328:149): avc: denied { ioctl } for pid=423 comm="syz.4.31" path="socket:[16596]" dev="sockfs" ino=16596 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 25.204437][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.218603][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.229998][ T6] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 25.241043][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.249283][ T30] audit: type=1400 audit(1751702703.368:150): avc: denied { read } for pid=426 comm="syz.3.32" dev="nsfs" ino=4026532539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.271589][ T6] usb 2-1: config 0 descriptor?? [ 25.276905][ T30] audit: type=1400 audit(1751702703.368:151): avc: denied { open } for pid=426 comm="syz.3.32" path="net:[4026532539]" dev="nsfs" ino=4026532539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.301640][ T434] serio: Serial port ttyS3 [ 25.388818][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 25.397838][ T383] usb 1-1: USB disconnect, device number 2 [ 25.434080][ T441] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 25.443001][ T441] SELinux: failed to load policy [ 25.448441][ T446] loop3: detected capacity change from 0 to 512 [ 25.473529][ T450] loop2: detected capacity change from 0 to 2048 [ 25.489489][ T446] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.502553][ T446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 25.516418][ T446] EXT4-fs (loop3): 1 truncate cleaned up [ 25.522146][ T446] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,minixdf,noblock_validity,,errors=continue. Quota mode: none. [ 25.530295][ T450] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 25.613290][ T284] syz-executor (284) used greatest stack depth: 21760 bytes left [ 25.700639][ T460] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.707669][ T460] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.715247][ T460] device bridge_slave_0 entered promiscuous mode [ 25.722304][ T460] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.729425][ T460] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.736715][ T460] device bridge_slave_1 entered promiscuous mode [ 25.779528][ T460] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.786545][ T460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.793823][ T460] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.800845][ T460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.820695][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.828205][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.835744][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.846055][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.854270][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.861307][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.869622][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.877746][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.884763][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.896691][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.907026][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.920735][ T380] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.939069][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.953653][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.962250][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.969941][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.978057][ T460] device veth0_vlan entered promiscuous mode [ 25.988852][ T6] usb 2-1: language id specifier not provided by device, defaulting to English [ 25.989989][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.007507][ T460] device veth1_macvtap entered promiscuous mode [ 26.022546][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.045544][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.100253][ T10] device bridge_slave_1 left promiscuous mode [ 26.106388][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.116464][ T10] device bridge_slave_0 left promiscuous mode [ 26.123009][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.135162][ T10] device veth1_macvtap left promiscuous mode [ 26.141430][ T10] device veth0_vlan left promiscuous mode [ 26.165711][ T492] kvm: emulating exchange as write [ 26.170929][ T380] usb 3-1: Using ep0 maxpacket: 8 [ 26.209305][ T497] loop5: detected capacity change from 0 to 128 [ 26.235625][ T497] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 26.243885][ T497] FAT-fs (loop5): Filesystem has been set read-only [ 26.250637][ T497] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 26.259822][ T497] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 26.328864][ T380] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.366579][ T504] loop5: detected capacity change from 0 to 512 [ 26.388835][ T383] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 26.399831][ T504] EXT4-fs (loop5): Ignoring removed orlov option [ 26.406238][ T504] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.408854][ T380] usb 3-1: config 127 has an invalid interface number: 51 but max is 0 [ 26.419856][ T504] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.61: Attempting to read directory block (0) that is past i_size (256) [ 26.427885][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0005/input/input6 [ 26.441687][ T504] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 26.452597][ T380] usb 3-1: config 127 has no interface number 0 [ 26.461022][ T504] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,orlov,data_err=abort,init_itable,dioread_nolock,grpjquota=.oldalloc,errors=continue,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 26.466608][ T380] usb 3-1: config 127 interface 51 has no altsetting 0 [ 26.495991][ T6] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0005/input/input7 [ 26.508654][ T6] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 26.649275][ T399] usb 2-1: USB disconnect, device number 3 [ 26.679206][ T380] usb 3-1: New USB device found, idVendor=0424, idProduct=9730, bcdDevice=79.7c [ 26.688317][ T380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.696811][ T380] usb 3-1: Product: syz [ 26.701084][ T380] usb 3-1: Manufacturer: syz [ 26.705661][ T380] usb 3-1: SerialNumber: syz [ 26.788875][ T383] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.799056][ T383] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.898912][ T383] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 26.907963][ T383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 26.916366][ T383] usb 5-1: SerialNumber: syz [ 26.999760][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 27.029023][ T380] smsc95xx v2.0.0 [ 27.032677][ T380] smsc95xx 3-1:127.51 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 27.043036][ T380] smsc95xx: probe of 3-1:127.51 failed with error -22 [ 27.054126][ T380] usb 3-1: USB disconnect, device number 3 [ 27.148802][ T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.189586][ T383] usb 5-1: 0:2 : does not exist [ 27.194506][ T383] usb 5-1: unit 48 not found! [ 27.202050][ T383] usb 5-1: USB disconnect, device number 3 [ 27.283103][ T536] loop1: detected capacity change from 0 to 512 [ 27.339114][ T536] ======================================================= [ 27.339114][ T536] WARNING: The mand mount option has been deprecated and [ 27.339114][ T536] and is ignored by this kernel. Remove the mand [ 27.339114][ T536] option from the mount to silence this warning. [ 27.339114][ T536] ======================================================= [ 27.388858][ T26] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 27.398549][ T26] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 27.408383][ T26] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.421566][ T394] udevd[394]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.443607][ T536] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.470728][ T283] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #2: block 6: comm syz-executor: lblock 0 mapped to illegal pblock 6 (length 1) [ 27.486478][ T283] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 27.496126][ T283] EXT4-fs error (device loop1): ext4_dirty_inode:6070: inode #2: comm syz-executor: mark_inode_dirty error [ 27.538890][ T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.550007][ T39] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 27.588874][ T26] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 27.597913][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 27.606255][ T26] usb 6-1: Product: syz [ 27.607415][ T283] syz-executor (283) used greatest stack depth: 21504 bytes left [ 27.618913][ T26] usb 6-1: Manufacturer: syz [ 27.623535][ T26] usb 6-1: SerialNumber: syz [ 27.718478][ T544] loop4: detected capacity change from 0 to 1024 [ 27.719097][ T39] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.737580][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.746436][ T39] usb 1-1: Product: syz [ 27.752082][ T39] usb 1-1: Manufacturer: syz [ 27.756911][ T39] usb 1-1: SerialNumber: syz [ 27.757588][ T544] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.779163][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.786573][ T540] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.799217][ T540] device bridge_slave_0 entered promiscuous mode [ 27.806606][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.813828][ T540] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.821470][ T540] device bridge_slave_1 entered promiscuous mode [ 27.894842][ T26] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 28.055369][ T556] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.78: Allocating blocks 257-513 which overlap fs metadata [ 28.088513][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.095565][ T540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.102846][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.109887][ T540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.134729][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.150267][ T490] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.150409][ T399] usb 6-1: USB disconnect, device number 2 [ 28.163418][ T490] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.165013][ T399] usblp0: removed [ 28.183737][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.194647][ T562] loop2: detected capacity change from 0 to 256 [ 28.199011][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.207925][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.210520][ T562] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 28.224462][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.233010][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.240054][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.248584][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.256894][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.274656][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.287517][ T540] device veth0_vlan entered promiscuous mode [ 28.307298][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.316065][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.324058][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.341552][ T540] device veth1_macvtap entered promiscuous mode [ 28.348345][ T562] netlink: 656 bytes leftover after parsing attributes in process `syz.2.79'. [ 28.357828][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.376405][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.385004][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.448801][ T337] device bridge_slave_1 left promiscuous mode [ 28.454975][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.463304][ T337] device bridge_slave_0 left promiscuous mode [ 28.476692][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.493166][ T337] device veth1_macvtap left promiscuous mode [ 28.501590][ T337] device veth0_vlan left promiscuous mode [ 28.728830][ T380] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 28.788451][ T581] loop5: detected capacity change from 0 to 1024 [ 28.819769][ T581] EXT4-fs (loop5): Ignoring removed orlov option [ 28.830421][ T581] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nouid32,bsddf,barrier,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 28.938852][ T39] cdc_ncm 1-1:1.0: bind() failure [ 28.939106][ T20] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 28.958902][ T39] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 28.978836][ T39] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 28.995007][ T39] usb 1-1: USB disconnect, device number 3 [ 29.128847][ T380] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.138734][ T380] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 29.148020][ T380] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.156963][ T380] usb 7-1: config 0 descriptor?? [ 29.178842][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 29.318879][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.328705][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 29.341871][ T20] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 29.351065][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.360502][ T20] usb 5-1: config 0 descriptor?? [ 29.418886][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 29.538900][ T6] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 29.547694][ T6] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 29.558029][ T6] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.641181][ T380] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 29.648142][ T380] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 29.655668][ T380] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 29.662763][ T380] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 29.669963][ T380] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 29.676935][ T380] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 29.684222][ T380] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 29.692185][ T380] lg-g15 0003:046D:C222.0006: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.6-1/input0 [ 29.728846][ T6] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.737986][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.746646][ T6] usb 6-1: Product: syz [ 29.751348][ T6] usb 6-1: Manufacturer: syz [ 29.755970][ T6] usb 6-1: SerialNumber: syz [ 29.758879][ T39] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.830281][ T20] kovaplus 0003:1E7D:2D50.0007: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 29.862329][ T26] usb 7-1: USB disconnect, device number 2 [ 29.944215][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 29.944228][ T30] audit: type=1400 audit(1751702708.098:248): avc: denied { write } for pid=598 comm="syz.2.95" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.956977][ T599] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 29.980909][ T599] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 30.138881][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.138948][ T6] usb 6-1: 0:2 : does not exist [ 30.149903][ T39] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 30.163947][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.169707][ T6] usb 6-1: USB disconnect, device number 3 [ 30.179114][ T39] usb 1-1: config 0 descriptor?? [ 30.279324][ T313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.661369][ T39] lua 0003:1E7D:2C2E.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 30.712060][ T609] loop6: detected capacity change from 0 to 131072 [ 30.719393][ T20] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device [ 30.727470][ T20] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse [ 30.740532][ T20] kovaplus: probe of 0003:1E7D:2D50.0007 failed with error -71 [ 30.750554][ T20] usb 5-1: USB disconnect, device number 4 [ 30.808665][ T618] fido_id[618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 30.833272][ T617] loop5: detected capacity change from 0 to 40427 [ 30.835613][ T609] F2FS-fs (loop6): Found nat_bits in checkpoint [ 30.859576][ T609] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 30.880843][ T617] F2FS-fs (loop5): invalid crc value [ 30.889637][ T617] F2FS-fs (loop5): Found nat_bits in checkpoint [ 30.898930][ T313] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.908576][ T313] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 30.918307][ T609] F2FS-fs (loop6): lookup inode (7) has corrupted xattr [ 30.920106][ T617] F2FS-fs (loop5): Start checkpoint disabled! [ 30.932858][ T609] F2FS-fs (loop6): lookup inode (7) has corrupted xattr [ 30.933228][ T617] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 30.960319][ T313] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.971952][ T30] audit: type=1400 audit(1751702709.118:249): avc: denied { read write open } for pid=616 comm="syz.5.102" path="/21/file0/file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.013901][ T30] audit: type=1400 audit(1751702709.148:250): avc: denied { ioctl } for pid=616 comm="syz.5.102" path="/21/file0/file1" dev="loop5" ino=10 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.039985][ T490] attempt to access beyond end of device [ 31.039985][ T490] loop5: rw=2049, want=40976, limit=40427 [ 31.068107][ T30] audit: type=1400 audit(1751702709.218:251): avc: denied { write } for pid=625 comm="syz.4.105" name="001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.091980][ T30] audit: type=1400 audit(1751702709.218:252): avc: denied { map } for pid=625 comm="syz.4.105" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.128871][ T313] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 31.157419][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 31.188825][ T313] usb 3-1: Product: syz [ 31.199163][ T313] usb 3-1: Manufacturer: syz [ 31.213966][ T313] usb 3-1: SerialNumber: syz [ 31.215214][ T628] loop4: detected capacity change from 0 to 40427 [ 31.225220][ T39] usb 1-1: USB disconnect, device number 4 [ 31.242909][ T30] audit: type=1400 audit(1751702709.398:253): avc: denied { write } for pid=629 comm="syz.5.104" name="netstat" dev="proc" ino=4026532963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 31.306500][ T628] F2FS-fs (loop4): invalid crc value [ 31.324173][ T628] F2FS-fs (loop4): Found nat_bits in checkpoint [ 31.348282][ T628] F2FS-fs (loop4): Start checkpoint disabled! [ 31.354849][ T628] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 31.421711][ T337] attempt to access beyond end of device [ 31.421711][ T337] loop4: rw=2049, want=45104, limit=40427 [ 31.499487][ T313] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 31.528816][ T379] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 31.578821][ T6] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 31.681545][ T30] audit: type=1400 audit(1751702709.838:254): avc: denied { name_bind } for pid=655 comm="syz.0.116" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.709270][ T39] usb 3-1: USB disconnect, device number 4 [ 31.710155][ T30] audit: type=1400 audit(1751702709.868:255): avc: denied { node_bind } for pid=655 comm="syz.0.116" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 31.722432][ T39] usblp0: removed [ 31.752159][ T30] audit: type=1400 audit(1751702709.898:256): avc: denied { read write } for pid=659 comm="syz.0.117" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.776206][ T30] audit: type=1400 audit(1751702709.898:257): avc: denied { open } for pid=659 comm="syz.0.117" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.799958][ T379] usb 6-1: Using ep0 maxpacket: 16 [ 31.918830][ T379] usb 6-1: config 153 has an invalid interface number: 4 but max is 2 [ 31.927081][ T379] usb 6-1: config 153 has an invalid interface number: 4 but max is 2 [ 31.935441][ T379] usb 6-1: config 153 has an invalid interface number: 35 but max is 2 [ 31.943714][ T379] usb 6-1: config 153 has 2 interfaces, different from the descriptor's value: 3 [ 31.952881][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.963950][ T379] usb 6-1: config 153 has no interface number 0 [ 31.970252][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.980007][ T379] usb 6-1: config 153 has no interface number 1 [ 31.986231][ T379] usb 6-1: config 153 interface 4 altsetting 72 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 31.997180][ T6] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 32.006220][ T379] usb 6-1: config 153 interface 35 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 32.017294][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.025483][ T379] usb 6-1: config 153 interface 4 has no altsetting 1 [ 32.035291][ T6] usb 7-1: config 0 descriptor?? [ 32.040333][ T379] usb 6-1: config 153 interface 35 has no altsetting 0 [ 32.188798][ T20] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.198994][ T379] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0296, bcdDevice=39.3c [ 32.208162][ T379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.216241][ T379] usb 6-1: Product: syz [ 32.220415][ T379] usb 6-1: Manufacturer: syz [ 32.224992][ T379] usb 6-1: SerialNumber: syz [ 32.263532][ T667] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.328516][ T676] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 32.337084][ T676] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 32.355584][ T676] ------------[ cut here ]------------ [ 32.361151][ T676] WARNING: CPU: 0 PID: 676 at arch/x86/kvm/x86.c:10351 kvm_arch_vcpu_ioctl_run+0x1c82/0x2010 [ 32.371393][ T676] Modules linked in: [ 32.375316][ T676] CPU: 0 PID: 676 Comm: syz.2.123 Not tainted 5.15.185-syzkaller-00178-g5cf73bface18 #0 [ 32.385111][ T676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.395252][ T676] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1c82/0x2010 [ 32.401741][ T676] Code: e8 13 33 98 00 e9 81 ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c da e6 ff ff 4c 89 ff e8 f8 32 98 00 e9 cd e6 ff ff e8 1e bd 59 00 <0f> 0b e9 2b fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c de e6 ff ff 4c [ 32.421361][ T676] RSP: 0018:ffffc90001147bb8 EFLAGS: 00010283 [ 32.427405][ T676] RAX: ffffffff810eeac2 RBX: dffffc0000000000 RCX: 0000000000080000 [ 32.435432][ T676] RDX: ffffc90002b91000 RSI: 000000000000003d RDI: 000000000000003e [ 32.443527][ T676] RBP: ffffc90001147cb0 R08: dffffc0000000000 R09: ffffed1021b1c279 [ 32.451584][ T676] R10: ffffed1021b1c279 R11: 1ffff11021b1c278 R12: ffff88810b91c000 [ 32.459582][ T676] R13: dffffc0000000000 R14: ffff88810b91c090 R15: ffff88810d1e5000 [ 32.467543][ T676] FS: 00007fd1b26c66c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.478487][ T676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.485164][ T676] CR2: 0000200000fe2008 CR3: 000000010c4dc000 CR4: 00000000003526b0 [ 32.493211][ T676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.501448][ T676] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.509509][ T676] Call Trace: [ 32.512801][ T676] [ 32.515733][ T676] ? memcpy+0x56/0x70 [ 32.519916][ T676] ? __kasan_check_write+0x14/0x20 [ 32.525012][ T676] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 32.531743][ T676] ? kvm_vcpu_ioctl+0x6ea/0xb80 [ 32.536582][ T676] kvm_vcpu_ioctl+0x882/0xb80 [ 32.541670][ T676] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 32.547357][ T676] ? selinux_file_ioctl+0x377/0x480 [ 32.548864][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.552830][ T676] ? selinux_file_alloc_security+0x120/0x120 [ 32.563555][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.569641][ T676] ? __fget_files+0x2c4/0x320 [ 32.583042][ T379] usb 6-1: USB disconnect, device number 4 [ 32.584332][ T676] ? security_file_ioctl+0x84/0xa0 [ 32.594925][ T676] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 32.596657][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.601444][ T676] __se_sys_ioctl+0x121/0x1a0 [ 32.616303][ T20] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.618558][ T676] __x64_sys_ioctl+0x7b/0x90 [ 32.627404][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.632182][ T676] x64_sys_call+0x2f/0x9a0 [ 32.644614][ T676] do_syscall_64+0x4c/0xa0 [ 32.649296][ T676] ? clear_bhb_loop+0x50/0xa0 [ 32.649627][ T6] cp2112 0003:10C4:EA90.0009: report_id 0 is invalid [ 32.654031][ T676] ? clear_bhb_loop+0x50/0xa0 [ 32.663940][ T6] cp2112 0003:10C4:EA90.0009: item 0 0 1 8 parsing failed [ 32.666852][ T676] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.672690][ T20] usb 1-1: config 0 descriptor?? [ 32.678559][ T676] RIP: 0033:0x7fd1b405d929 [ 32.683850][ T6] cp2112 0003:10C4:EA90.0009: parse failed [ 32.693806][ T6] cp2112: probe of 0003:10C4:EA90.0009 failed with error -22 [ 32.703485][ T676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.723406][ T676] RSP: 002b:00007fd1b26c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.731878][ T676] RAX: ffffffffffffffda RBX: 00007fd1b4284fa0 RCX: 00007fd1b405d929 [ 32.740509][ T676] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 32.748485][ T676] RBP: 00007fd1b40dfb39 R08: 0000000000000000 R09: 0000000000000000 [ 32.756493][ T676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.764545][ T676] R13: 0000000000000000 R14: 00007fd1b4284fa0 R15: 00007fff1250a8e8 [ 32.772612][ T676] [ 32.775627][ T676] ---[ end trace adc935d6514bc849 ]--- [ 32.779038][ T679] loop4: detected capacity change from 0 to 256 [ 32.811686][ T679] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.822340][ T679] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 32.832040][ T679] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 32.863941][ T39] usb 7-1: USB disconnect, device number 3 [ 33.169929][ T20] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 33.186414][ T20] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 33.262259][ T706] loop2: detected capacity change from 0 to 1024 [ 33.316744][ T706] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nogrpid,noinit_itable,nogrpid,block_validity,max_dir_size_kb=0x00000000000007b1,nojournal_checksum,errors=remount-ro,jqfmt=vfsold,jqfmt=vfsv0,data_err=ignore,. Quota mode: none. [ 33.318476][ T716] loop4: detected capacity change from 0 to 128 [ 33.477548][ T716] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 33.494579][ T730] netlink: 96 bytes leftover after parsing attributes in process `syz.5.142'. [ 33.500035][ T716] FAT-fs (loop4): FAT read failed (blocknr 128) [ 33.546395][ T732] loop5: detected capacity change from 0 to 512 [ 33.620867][ T732] EXT4-fs (loop5): Ignoring removed orlov option [ 33.627318][ T732] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 33.635111][ T736] loop4: detected capacity change from 0 to 1024 [ 33.645638][ T732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 33.654575][ T732] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.144: corrupted in-inode xattr [ 33.666865][ T732] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.144: couldn't read orphan inode 15 (err -117) [ 33.699041][ T732] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 33.718086][ T736] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.099707][ T20] usb 1-1: USB disconnect, device number 5 [ 34.148443][ T767] loop6: detected capacity change from 0 to 256 [ 34.179427][ T767] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.190085][ T767] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 34.202503][ T767] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 34.362272][ T784] SELinux: failed to load policy [ 34.519577][ T796] loop4: detected capacity change from 0 to 128 [ 34.544547][ T796] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.555217][ T796] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.568884][ T6] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 34.701587][ T817] loop4: detected capacity change from 0 to 1024 [ 34.840140][ T817] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.928914][ T6] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 34.938818][ T6] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 35.188847][ T6] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60 [ 35.197928][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 35.206049][ T6] usb 7-1: SerialNumber: syz [ 35.228919][ T779] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 35.249206][ T6] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 35.257212][ T6] cdc_acm: probe of 7-1:1.0 failed with error -12 [ 35.279406][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 35.279417][ T30] audit: type=1400 audit(1751702713.438:334): avc: denied { create } for pid=824 comm="syz.5.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.279589][ T825] netlink: 96 bytes leftover after parsing attributes in process `syz.5.179'. [ 35.329251][ T30] audit: type=1400 audit(1751702713.488:335): avc: denied { write } for pid=826 comm="syz.5.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.388837][ T60] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.454932][ T26] usb 7-1: USB disconnect, device number 4 [ 35.586394][ T30] audit: type=1400 audit(1751702713.738:336): avc: denied { ioctl } for pid=834 comm="syz.4.183" path="socket:[18278]" dev="sockfs" ino=18278 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.638866][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 35.762223][ T839] loop4: detected capacity change from 0 to 256 [ 35.800163][ T839] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 35.882126][ T839] netlink: 656 bytes leftover after parsing attributes in process `syz.4.184'. [ 35.993860][ T841] loop6: detected capacity change from 0 to 16 [ 36.028864][ T60] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 36.037120][ T60] usb 1-1: config 0 has no interface number 0 [ 36.044666][ T841] erofs: (device loop6): mounted with root inode @ nid 36. [ 36.051965][ T60] usb 1-1: config 0 interface 225 has no altsetting 0 [ 36.061239][ T841] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 36.204480][ T850] loop5: detected capacity change from 0 to 512 [ 36.208853][ T60] usb 1-1: New USB device found, idVendor=0b95, idProduct=1720, bcdDevice=23.b4 [ 36.222927][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.229512][ T850] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 36.231935][ T60] usb 1-1: Product: syz [ 36.245095][ T60] usb 1-1: Manufacturer: syz [ 36.246348][ T850] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.250197][ T60] usb 1-1: SerialNumber: syz [ 36.263208][ T850] EXT4-fs (loop5): 1 truncate cleaned up [ 36.268092][ T60] usb 1-1: config 0 descriptor?? [ 36.274168][ T850] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000001,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 36.313365][ T30] audit: type=1400 audit(1751702714.468:337): avc: denied { append } for pid=849 comm="syz.5.189" path="/43/file2/blkio.bfq.idle_time" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.337943][ T850] EXT4-fs (loop5): shut down requested (0) [ 36.356267][ T30] audit: type=1400 audit(1751702714.508:338): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 36.379138][ T30] audit: type=1400 audit(1751702714.508:339): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.401080][ T30] audit: type=1400 audit(1751702714.508:340): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.422523][ T30] audit: type=1400 audit(1751702714.508:341): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.444544][ T30] audit: type=1400 audit(1751702714.508:342): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.465776][ T30] audit: type=1400 audit(1751702714.508:343): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.504154][ T6] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 36.519269][ T6] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.558804][ T26] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 36.585018][ T867] input: syz1 as /devices/virtual/input/input8 [ 36.818806][ T26] usb 7-1: Using ep0 maxpacket: 16 [ 36.878814][ T6] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 36.938863][ T26] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 36.949709][ T26] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.959447][ T26] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 37.058822][ T20] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.128852][ T26] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.137921][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.146042][ T26] usb 7-1: Product: syz [ 37.150249][ T26] usb 7-1: Manufacturer: syz [ 37.154824][ T26] usb 7-1: SerialNumber: syz [ 37.278837][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.289770][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.299493][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.312477][ T6] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.321548][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 37.326675][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.335246][ T6] usb 6-1: config 0 descriptor?? [ 37.448856][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.459786][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.469523][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.482574][ T20] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 37.491841][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.500812][ T20] usb 3-1: config 0 descriptor?? [ 37.608846][ T60] asix 1-1:0.225 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 37.619365][ T60] asix 1-1:0.225 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 37.630076][ T60] asix: probe of 1-1:0.225 failed with error -71 [ 37.639095][ T60] usb 1-1: USB disconnect, device number 6 [ 37.809714][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 37.818146][ T6] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 37.818889][ T26] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 37.834974][ T26] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 37.842695][ T6] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 37.926569][ T26] usb 7-1: USB disconnect, device number 5 [ 37.979994][ T20] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 37.987221][ T20] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 37.994471][ T20] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.001770][ T20] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.009008][ T20] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.016269][ T20] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.028477][ T20] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.035738][ T20] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.043011][ T20] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.050261][ T20] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.060736][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000D/input/input10 [ 38.089491][ T60] usb 6-1: USB disconnect, device number 5 [ 38.139894][ T20] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 38.183644][ T26] usb 3-1: USB disconnect, device number 5 [ 38.392353][ T901] netlink: 656 bytes leftover after parsing attributes in process `syz.0.207'. [ 38.408079][ T902] serio: Serial port ptm0 [ 39.168829][ T910] loop4: detected capacity change from 0 to 40427 [ 39.198815][ T910] F2FS-fs (loop4): invalid crc value [ 39.211613][ T910] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.233402][ T910] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 39.254581][ T282] attempt to access beyond end of device [ 39.254581][ T282] loop4: rw=2049, want=45104, limit=40427 [ 39.308836][ T60] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 39.549169][ T950] netlink: 96 bytes leftover after parsing attributes in process `syz.6.225'. [ 39.569216][ T952] netlink: 96 bytes leftover after parsing attributes in process `syz.6.226'. [ 39.725315][ T956] loop6: detected capacity change from 0 to 256 [ 39.779079][ T956] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 39.871983][ T956] netlink: 656 bytes leftover after parsing attributes in process `syz.6.227'. [ 39.969166][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.980095][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.990761][ T60] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 39.999831][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.008422][ T60] usb 6-1: config 0 descriptor?? [ 40.057173][ T967] netlink: 76 bytes leftover after parsing attributes in process `syz.2.232'. [ 40.077873][ T971] loop2: detected capacity change from 0 to 512 [ 40.139868][ T971] EXT4-fs (loop2): 1 orphan inode deleted [ 40.146096][ T971] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.157638][ T971] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.266097][ T20] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 40.274149][ T20] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 40.301275][ T993] netlink: 'syz.4.242': attribute type 3 has an invalid length. [ 40.339082][ T60] usbhid 6-1:0.0: can't add hid device: -71 [ 40.345323][ T60] usbhid: probe of 6-1:0.0 failed with error -71 [ 40.352815][ T60] usb 6-1: USB disconnect, device number 6 [ 40.399007][ T998] loop4: detected capacity change from 0 to 1024 [ 40.448819][ T6] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.468648][ T998] EXT4-fs (loop4): Ignoring removed nobh option [ 40.475033][ T998] EXT4-fs (loop4): Ignoring removed bh option [ 40.481200][ T998] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.500734][ T998] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,data_err=abort,barrier=0x0000000000000002,sb=0x0000000000000004,data_err=ignore,max_dir_size_kb=0x00000000004007b1,delalloc,grpquota,nobh,user_xattr,bh,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 40.536785][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 40.536796][ T30] audit: type=1400 audit(1751702718.688:402): avc: denied { append } for pid=997 comm="syz.4.244" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.546515][ T998] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.244: Allocating blocks 257-513 which overlap fs metadata [ 40.601180][ T998] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 40.615702][ T998] EXT4-fs (loop4): pa ffff8881119bca80: logic 16, phys. 129, len 3 [ 40.623743][ T998] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 3, pa_free 2 [ 40.698986][ T30] audit: type=1400 audit(1751702718.858:403): avc: denied { sys_module } for pid=1013 comm="syz.6.250" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 40.720100][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 40.832914][ T1027] loop5: detected capacity change from 0 to 8192 [ 40.848923][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.860079][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.870186][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 40.888290][ T1027] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.897395][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.937108][ T6] usb 1-1: config 0 descriptor?? [ 40.980029][ T6] hub 1-1:0.0: USB hub found [ 40.993741][ T1034] loop6: detected capacity change from 0 to 128 [ 41.161371][ T30] audit: type=1400 audit(1751702719.318:404): avc: denied { mounton } for pid=1040 comm="syz.2.261" path="/50/file0" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.198830][ T6] hub 1-1:0.0: 1 port detected [ 41.272757][ T30] audit: type=1400 audit(1751702719.428:405): avc: denied { write } for pid=1052 comm="syz.5.266" path="socket:[20442]" dev="sockfs" ino=20442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.558487][ T1074] loop4: detected capacity change from 0 to 256 [ 41.654352][ T1074] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 41.655387][ T1074] netlink: 656 bytes leftover after parsing attributes in process `syz.4.270'. [ 41.838849][ T6] hub 1-1:0.0: activate --> -90 [ 42.058852][ T6] usb 1-1-port1: config error [ 42.260454][ T383] usb 1-1: USB disconnect, device number 7 [ 42.390595][ T30] audit: type=1400 audit(1751702720.548:406): avc: denied { ioctl } for pid=1082 comm="syz.5.276" path="socket:[21555]" dev="sockfs" ino=21555 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.534061][ T30] audit: type=1400 audit(1751702720.688:407): avc: denied { mount } for pid=1095 comm="syz.5.281" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.615766][ T1102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.283'. [ 42.801429][ T30] audit: type=1400 audit(1751702720.958:408): avc: denied { name_bind } for pid=1116 comm="syz.0.290" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 42.978837][ T6] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 43.008808][ T383] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 43.060917][ T1137] netlink: 656 bytes leftover after parsing attributes in process `syz.0.298'. [ 43.228793][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 43.268790][ T383] usb 3-1: Using ep0 maxpacket: 32 [ 43.348862][ T6] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 43.358684][ T6] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 43.378789][ T6] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.398821][ T383] usb 3-1: config 0 interface 0 has no altsetting 0 [ 43.398833][ T6] usb 6-1: config 1 interface 0 has no altsetting 0 [ 43.405608][ T383] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 43.428800][ T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.442372][ T383] usb 3-1: config 0 descriptor?? [ 43.578834][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 43.588137][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.596134][ T6] usb 6-1: Product: syz [ 43.600296][ T6] usb 6-1: Manufacturer: syz [ 43.604875][ T6] usb 6-1: SerialNumber: syz [ 43.901445][ T30] audit: type=1400 audit(1751702722.058:409): avc: denied { create } for pid=1107 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.498947][ T1153] netlink: 656 bytes leftover after parsing attributes in process `syz.0.304'. [ 44.689925][ T383] hid-generic 0003:1B1C:0C10.000F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 44.973521][ T313] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 44.981462][ T6] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 45.104506][ T26] usb 3-1: USB disconnect, device number 6 [ 45.138843][ T60] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 45.228798][ T313] usb 5-1: Using ep0 maxpacket: 8 [ 45.349581][ T313] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 45.358779][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.368295][ T313] usb 5-1: config 0 descriptor?? [ 45.498883][ T60] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.669159][ T60] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.678189][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.686624][ T60] usb 7-1: Product: syz [ 45.690928][ T60] usb 7-1: Manufacturer: syz [ 45.695520][ T60] usb 7-1: SerialNumber: syz [ 45.930028][ T1183] loop2: detected capacity change from 0 to 128 [ 45.960826][ T1183] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.977969][ T1183] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.221129][ T30] audit: type=1400 audit(1751702724.378:410): avc: denied { create } for pid=1198 comm="syz.2.322" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.241846][ T30] audit: type=1400 audit(1751702724.378:411): avc: denied { rename } for pid=1198 comm="syz.2.322" name="file0" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.280429][ T6] usb 6-1: USB disconnect, device number 7 [ 46.297368][ T1201] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 46.297469][ T6] usblp0: removed [ 46.305335][ T1201] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 46.318852][ T383] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 46.337977][ T30] audit: type=1400 audit(1751702724.488:412): avc: denied { map } for pid=1203 comm="syz.5.324" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.384903][ T1206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 46.392117][ T1206] IPv6: NLM_F_CREATE should be set when creating new route [ 46.494766][ T30] audit: type=1400 audit(1751702724.648:413): avc: denied { create } for pid=1213 comm="syz.5.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.500769][ T1214] tipc: Started in network mode [ 46.514883][ T30] audit: type=1400 audit(1751702724.658:414): avc: denied { write } for pid=1213 comm="syz.5.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.519897][ T1214] tipc: Node identity ac14140f, cluster identity 4711 [ 46.540550][ T30] audit: type=1400 audit(1751702724.658:415): avc: denied { nlmsg_write } for pid=1213 comm="syz.5.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.546935][ T1214] tipc: Enabled bearer , priority 10 [ 46.599168][ T383] usb 1-1: Using ep0 maxpacket: 16 [ 46.665734][ T1222] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 46.688931][ T20] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 46.719033][ T383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.729971][ T383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.739714][ T383] usb 1-1: New USB device found, idVendor=5900, idProduct=64ea, bcdDevice= 0.00 [ 46.748800][ T383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.757376][ T383] usb 1-1: config 0 descriptor?? [ 46.838877][ T60] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 46.845376][ T60] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 46.852882][ T60] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 46.879145][ T1235] loop5: detected capacity change from 0 to 1024 [ 46.901858][ T1235] EXT4-fs (loop5): Ignoring removed orlov option [ 46.909722][ T1235] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 46.933797][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 47.058869][ T20] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 47.067306][ T20] usb 3-1: config 179 has no interface number 0 [ 47.074021][ T20] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 47.085118][ T20] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 47.096358][ T20] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 47.107617][ T20] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 47.119254][ T20] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 47.122869][ T1248] loop5: detected capacity change from 0 to 512 [ 47.132482][ T20] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 47.132505][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.148872][ T1211] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 47.162789][ T313] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 47.175146][ T313] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 47.186503][ T313] asix: probe of 5-1:0.0 failed with error -71 [ 47.193550][ T313] usb 5-1: USB disconnect, device number 5 [ 47.210905][ T1248] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.341: iget: bad extended attribute block 1 [ 47.223512][ T1248] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.341: couldn't read orphan inode 15 (err -117) [ 47.230069][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x5 [ 47.235647][ T1248] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 47.242797][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x4 [ 47.269009][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.276381][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.283841][ T60] cdc_ncm 7-1:1.0: setting tx_max = 88 [ 47.291036][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.298473][ T60] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM, 42:42:42:42:42:42 [ 47.308587][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.320616][ T60] usb 7-1: USB disconnect, device number 6 [ 47.324572][ T30] audit: type=1400 audit(1751702725.478:416): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 47.331167][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.357425][ T30] audit: type=1400 audit(1751702725.478:417): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.363962][ T60] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM [ 47.387054][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.395280][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.407923][ T30] audit: type=1400 audit(1751702725.478:418): avc: denied { read } for pid=140 comm="dhcpcd" name="n16" dev="tmpfs" ino=2649 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.410493][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.430304][ T6] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 47.440878][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.448546][ T30] audit: type=1400 audit(1751702725.478:419): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=2649 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.459053][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.499943][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.507376][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.514886][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.522486][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.529959][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.537366][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.545488][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.552985][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.560460][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.567867][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.575364][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.582861][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.590579][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.597997][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.605495][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.612997][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.620474][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.627899][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.635286][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.642708][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.650092][ T383] hid-generic 0003:5900:64EA.0010: unknown main item tag 0x0 [ 47.657461][ T383] hid-generic 0003:5900:64EA.0010: unbalanced collection at end of report description [ 47.667135][ T383] hid-generic: probe of 0003:5900:64EA.0010 failed with error -22 [ 47.677535][ T383] usb 1-1: USB disconnect, device number 8 [ 47.683659][ T399] ================================================================== [ 47.691719][ T399] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 47.699524][ T399] Read of size 8 at addr ffff888127094c70 by task kworker/1:5/399 [ 47.707318][ T399] [ 47.709646][ T399] CPU: 1 PID: 399 Comm: kworker/1:5 Tainted: G W 5.15.185-syzkaller-00178-g5cf73bface18 #0 [ 47.720927][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.730979][ T399] Workqueue: 0x0 (rcu_gp) [ 47.735612][ T399] Call Trace: [ 47.738884][ T399] [ 47.741907][ T399] __dump_stack+0x21/0x30 [ 47.744333][ T1278] capability: warning: `syz.4.343' uses deprecated v2 capabilities in a way that may be insecure [ 47.746241][ T399] dump_stack_lvl+0xee/0x150 [ 47.761286][ T399] ? show_regs_print_info+0x20/0x20 [ 47.766478][ T399] ? load_image+0x3a0/0x3a0 [ 47.770962][ T399] ? __schedule+0xb76/0x14c0 [ 47.775542][ T399] print_address_description+0x7f/0x2c0 [ 47.781063][ T399] ? __list_del_entry_valid+0xa6/0x120 [ 47.786496][ T399] kasan_report+0xf1/0x140 [ 47.790886][ T399] ? __kasan_check_write+0x14/0x20 [ 47.795974][ T399] ? __list_del_entry_valid+0xa6/0x120 [ 47.801409][ T399] __asan_report_load8_noabort+0x14/0x20 [ 47.807037][ T399] __list_del_entry_valid+0xa6/0x120 [ 47.812321][ T399] worker_thread+0xb0a/0x1200 [ 47.816991][ T399] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 47.817812][ T1211] UDC core: couldn't find an available UDC or it's busy: -16 [ 47.822461][ T399] kthread+0x411/0x500 [ 47.822483][ T399] ? worker_clr_flags+0x190/0x190 [ 47.831852][ T1211] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 47.833867][ T399] ? kthread_blkcg+0xd0/0xd0 [ 47.850859][ T399] ret_from_fork+0x1f/0x30 [ 47.855253][ T399] [ 47.858245][ T399] [ 47.860553][ T399] Allocated by task 60: [ 47.864687][ T399] __kasan_kmalloc+0xda/0x110 [ 47.869346][ T399] __kmalloc+0x13d/0x2c0 [ 47.873570][ T399] kvmalloc_node+0x242/0x330 [ 47.878132][ T399] alloc_netdev_mqs+0x8d/0xc90 [ 47.882875][ T399] alloc_etherdev_mqs+0x34/0x40 [ 47.887696][ T399] usbnet_probe+0x219/0x2860 [ 47.892261][ T399] usb_probe_interface+0x5ff/0xae0 [ 47.897351][ T399] really_probe+0x285/0x970 [ 47.901826][ T399] __driver_probe_device+0x198/0x280 [ 47.907081][ T399] driver_probe_device+0x54/0x3e0 [ 47.912074][ T399] __device_attach_driver+0x2a6/0x460 [ 47.917413][ T399] bus_for_each_drv+0x175/0x200 [ 47.922235][ T399] __device_attach+0x2a2/0x400 [ 47.926967][ T399] device_initial_probe+0x1a/0x20 [ 47.932018][ T399] bus_probe_device+0xc0/0x1e0 [ 47.936766][ T399] device_add+0xb31/0xed0 [ 47.941069][ T399] usb_set_configuration+0x19c2/0x1f10 [ 47.946500][ T399] usb_generic_driver_probe+0x91/0x150 [ 47.951932][ T399] usb_probe_device+0x148/0x260 [ 47.956751][ T399] really_probe+0x285/0x970 [ 47.961232][ T399] __driver_probe_device+0x198/0x280 [ 47.966493][ T399] driver_probe_device+0x54/0x3e0 [ 47.971483][ T399] __device_attach_driver+0x2a6/0x460 [ 47.976820][ T399] bus_for_each_drv+0x175/0x200 [ 47.981640][ T399] __device_attach+0x2a2/0x400 [ 47.986374][ T399] device_initial_probe+0x1a/0x20 [ 47.991366][ T399] bus_probe_device+0xc0/0x1e0 [ 47.996100][ T399] device_add+0xb31/0xed0 [ 48.000412][ T399] usb_new_device+0xd06/0x1620 [ 48.005148][ T399] hub_event+0x27d8/0x42c0 [ 48.009534][ T399] process_one_work+0x6be/0xba0 [ 48.014363][ T399] worker_thread+0xa59/0x1200 [ 48.019014][ T399] kthread+0x411/0x500 [ 48.023049][ T399] ret_from_fork+0x1f/0x30 [ 48.027432][ T399] [ 48.029734][ T399] Freed by task 60: [ 48.033514][ T399] kasan_set_track+0x4a/0x70 [ 48.038076][ T399] kasan_set_free_info+0x23/0x40 [ 48.042980][ T399] ____kasan_slab_free+0x125/0x160 [ 48.048059][ T399] __kasan_slab_free+0x11/0x20 [ 48.052788][ T399] slab_free_freelist_hook+0xc2/0x190 [ 48.058130][ T399] kfree+0xc4/0x270 [ 48.061905][ T399] kvfree+0x35/0x40 [ 48.065688][ T399] netdev_freemem+0x3f/0x60 [ 48.070165][ T399] netdev_release+0x7f/0xb0 [ 48.074637][ T399] device_release+0x96/0x1c0 [ 48.079199][ T399] kobject_put+0x18a/0x270 [ 48.083592][ T399] put_device+0x1f/0x30 [ 48.087714][ T399] free_netdev+0x34b/0x450 [ 48.092097][ T399] usbnet_disconnect+0x24b/0x3a0 [ 48.097001][ T399] usb_unbind_interface+0x212/0x8c0 [ 48.102168][ T399] device_release_driver_internal+0x4c1/0x760 [ 48.108233][ T399] device_release_driver+0x19/0x20 [ 48.113310][ T399] bus_remove_device+0x2dd/0x340 [ 48.118214][ T399] device_del+0x696/0xe90 [ 48.122511][ T399] usb_disable_device+0x3a8/0x750 [ 48.127502][ T399] usb_disconnect+0x31e/0x850 [ 48.132147][ T399] hub_event+0x190c/0x42c0 [ 48.136527][ T399] process_one_work+0x6be/0xba0 [ 48.141346][ T399] worker_thread+0xd7b/0x1200 [ 48.146011][ T399] kthread+0x411/0x500 [ 48.150055][ T399] ret_from_fork+0x1f/0x30 [ 48.154441][ T399] [ 48.156735][ T399] Last potentially related work creation: [ 48.162413][ T399] kasan_save_stack+0x3a/0x60 [ 48.167065][ T399] __kasan_record_aux_stack+0xd2/0x100 [ 48.172490][ T399] kasan_record_aux_stack_noalloc+0xb/0x10 [ 48.178272][ T399] insert_work+0x51/0x310 [ 48.182568][ T399] __queue_work+0x8e5/0xc60 [ 48.187062][ T399] queue_work_on+0xd2/0x140 [ 48.191549][ T399] usbnet_link_change+0x176/0x1a0 [ 48.196538][ T399] usbnet_probe+0x1dfd/0x2860 [ 48.201180][ T399] usb_probe_interface+0x5ff/0xae0 [ 48.206258][ T399] really_probe+0x285/0x970 [ 48.210728][ T399] __driver_probe_device+0x198/0x280 [ 48.215978][ T399] driver_probe_device+0x54/0x3e0 [ 48.220969][ T399] __device_attach_driver+0x2a6/0x460 [ 48.226337][ T399] bus_for_each_drv+0x175/0x200 [ 48.231156][ T399] __device_attach+0x2a2/0x400 [ 48.235885][ T399] device_initial_probe+0x1a/0x20 [ 48.240875][ T399] bus_probe_device+0xc0/0x1e0 [ 48.245604][ T399] device_add+0xb31/0xed0 [ 48.249899][ T399] usb_set_configuration+0x19c2/0x1f10 [ 48.255345][ T399] usb_generic_driver_probe+0x91/0x150 [ 48.260773][ T399] usb_probe_device+0x148/0x260 [ 48.265590][ T399] really_probe+0x285/0x970 [ 48.270061][ T399] __driver_probe_device+0x198/0x280 [ 48.275312][ T399] driver_probe_device+0x54/0x3e0 [ 48.280300][ T399] __device_attach_driver+0x2a6/0x460 [ 48.285640][ T399] bus_for_each_drv+0x175/0x200 [ 48.290456][ T399] __device_attach+0x2a2/0x400 [ 48.295184][ T399] device_initial_probe+0x1a/0x20 [ 48.300173][ T399] bus_probe_device+0xc0/0x1e0 [ 48.304904][ T399] device_add+0xb31/0xed0 [ 48.309197][ T399] usb_new_device+0xd06/0x1620 [ 48.313927][ T399] hub_event+0x27d8/0x42c0 [ 48.318308][ T399] process_one_work+0x6be/0xba0 [ 48.323126][ T399] worker_thread+0xa59/0x1200 [ 48.327768][ T399] kthread+0x411/0x500 [ 48.331805][ T399] ret_from_fork+0x1f/0x30 [ 48.336187][ T399] [ 48.338480][ T399] The buggy address belongs to the object at ffff888127094000 [ 48.338480][ T399] which belongs to the cache kmalloc-4k of size 4096 [ 48.352530][ T399] The buggy address is located 3184 bytes inside of [ 48.352530][ T399] 4096-byte region [ffff888127094000, ffff888127095000) [ 48.365943][ T399] The buggy address belongs to the page: [ 48.371550][ T399] page:ffffea00049c2400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x127090 [ 48.381752][ T399] head:ffffea00049c2400 order:3 compound_mapcount:0 compound_pincount:0 [ 48.390078][ T399] flags: 0x4000000000010200(slab|head|zone=1) [ 48.396121][ T399] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 48.404672][ T399] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 48.413428][ T399] page dumped because: kasan: bad access detected [ 48.419804][ T399] page_owner tracks the page as allocated [ 48.425485][ T399] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 283, ts 20346704585, free_ts 0 [ 48.443592][ T399] post_alloc_hook+0x192/0x1b0 [ 48.448329][ T399] prep_new_page+0x1c/0x110 [ 48.452797][ T399] get_page_from_freelist+0x2cc5/0x2d50 [ 48.458317][ T399] __alloc_pages+0x18f/0x440 [ 48.462872][ T399] new_slab+0xa1/0x4d0 [ 48.466909][ T399] ___slab_alloc+0x381/0x810 [ 48.471465][ T399] __slab_alloc+0x49/0x90 [ 48.475765][ T399] kmem_cache_alloc_trace+0x146/0x270 [ 48.481103][ T399] ipv6_add_dev+0x5e5/0x1150 [ 48.485672][ T399] addrconf_notify+0x582/0xde0 [ 48.490416][ T399] raw_notifier_call_chain+0x90/0x100 [ 48.495782][ T399] call_netdevice_notifiers+0x111/0x190 [ 48.501304][ T399] register_netdevice+0x1039/0x13a0 [ 48.506467][ T399] register_netdev+0x3e/0x50 [ 48.511022][ T399] ip6gre_init_net+0x26d/0x340 [ 48.515754][ T399] ops_init+0x1ba/0x4a0 [ 48.519873][ T399] page_owner free stack trace missing [ 48.525205][ T399] [ 48.527500][ T399] Memory state around the buggy address: [ 48.533102][ T399] ffff888127094b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.541162][ T399] ffff888127094b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.549187][ T399] >ffff888127094c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.557212][ T399] ^ [ 48.564892][ T399] ffff888127094c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.572917][ T399] ffff888127094d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.580941][ T399] ================================================================== [ 48.588978][ T399] Disabling lock debugging due to kernel taint [ 48.597579][ T26] tipc: Node number set to 2886997007 [ 48.605215][ T399] usb 3-1: USB disconnect, device number 7 [ 48.618802][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 48.627129][ T399] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19