last executing test programs: 7.065068445s ago: executing program 0 (id=65): syz_usb_connect(0x3, 0x24, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf254300000008000300", @ANYRES32=r2, @ANYBLOB="0c005800000000001ee3491f16796d2b128dd6c511585d43a697e94b0704393d102aef37c7e0bd859eee435f61f7cdea203db750e04ea5ca99e30ab1911bc0861269ae828e1143394f096cd45494ed33129e82391c415f43d7e33daef0eeefc7b5b7225e914641bc04121e30a80ae2fa664d008dc12adf459d824c9741af507e587cebb6fa74321ebc1c3a6f"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x400) 6.558714471s ago: executing program 0 (id=67): mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 6.452342494s ago: executing program 0 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) 4.99378801s ago: executing program 0 (id=74): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xcc84}, 0x200088c2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 4.790164817s ago: executing program 2 (id=77): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x80) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) 4.663334551s ago: executing program 2 (id=78): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) lseek(r0, 0x7ff, 0x1) 4.663046121s ago: executing program 2 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0xa) r0 = getpid() madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 3.962267653s ago: executing program 0 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.888796916s ago: executing program 4 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x7f7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r2, 0x0, 0x1000000, 0x3) 3.785847079s ago: executing program 2 (id=83): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000000)=ANY=[]) 3.074240392s ago: executing program 3 (id=90): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@setlink={0x2c, 0x13, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x800, 0x80}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3404c045}, 0x10) 3.061728702s ago: executing program 4 (id=91): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) 2.978432095s ago: executing program 0 (id=92): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f04de"]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.978086515s ago: executing program 4 (id=94): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") (async) chdir(&(0x7f0000000b80)='./file0\x00') (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x2, 0x200002, 0xffffffffffffff2a, 0x0}) 2.975064435s ago: executing program 4 (id=96): pipe2(&(0x7f0000000400), 0x800) syz_open_procfs(0x0, 0x0) epoll_create1(0x80000) socketpair(0x1f, 0x4, 0x1, &(0x7f0000000000)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) read$FUSE(r1, &(0x7f0000004340)={0x2020}, 0x3666) 2.945757826s ago: executing program 4 (id=98): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x156c, &(0x7f000001aa40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x480a8, 0x0, 0x21, 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) syz_io_uring_setup(0x4a7d, &(0x7f0000000280)={0x0, 0x54b7, 0x200, 0x3, 0x33c}, 0x0, 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') syz_emit_ethernet(0x86, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x1, 0x1, 0x0, [{@remote, 0x4e210008}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x6}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '^'}], 0xa, "151de06af9f5dadab7ea51cb3a4da878c6411ec65f4724"}, 0x24) eventfd2(0x6, 0x801) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',debug=C']) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdn`=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',posixacl,k']) 2.153749201s ago: executing program 3 (id=104): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x180) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48) pwritev2(r0, 0x0, 0x0, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 2.028218885s ago: executing program 3 (id=105): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x8) removexattr(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)=@known='trusted.overlay.opaque\x00') 1.89038562s ago: executing program 1 (id=106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x65, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x1, 0x8, 0x0, 0x1000, {[@generic={0x13, 0x12, "08c09758c52aa04f25dfa64378059665"}]}}}}}}}, 0x0) 1.8736469s ago: executing program 1 (id=107): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(0x0, 0x0) close(0x4) 1.87336884s ago: executing program 3 (id=108): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000040007800c00020000000000000000000c0003"], 0x30}}, 0x0) 1.831252251s ago: executing program 1 (id=109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.786394113s ago: executing program 3 (id=110): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363ad", 0x0, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7f, 0x1000000000, 0x5, 0x41, 0x2000000, 0x4, 0x2004cb, 0x0, 0x1ff, 0x4068ff, 0x5, 0x0, 0x3, 0xa], 0xdddd0000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.728677134s ago: executing program 3 (id=111): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000580)=ANY=[], 0x0}, 0x0) 1.667784436s ago: executing program 1 (id=112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='Z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)='x', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)="ac4e3c7c", 0x4}], 0x1}}], 0x4, 0x6085094) 1.613912089s ago: executing program 1 (id=113): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001000000401c1b3e1b000000000001090224000100008001090400000203000100092100000501226b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9, 0x21, 0x0, 0x40}}}, &(0x7f0000000080)={0xfffffffffffffdaa, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.24177338s ago: executing program 4 (id=114): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000140)={0x40, 0x0, 0x4, "84d300a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000580)={0x20, 0xf, 0x4, "929f9b66"}, 0x0, 0x0, 0x0, 0x0}) 603.41263ms ago: executing program 2 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 42.296618ms ago: executing program 2 (id=116): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 0s ago: executing program 1 (id=117): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) execve(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc010) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 21.077039][ T28] audit: type=1400 audit(1781950676.679:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.078128][ T279] cgroup: Unknown subsys name 'net' [ 21.099720][ T28] audit: type=1400 audit(1781950676.679:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.126931][ T28] audit: type=1400 audit(1781950676.709:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.127063][ T279] cgroup: Unknown subsys name 'devices' [ 21.240628][ T279] cgroup: Unknown subsys name 'hugetlb' [ 21.246214][ T279] cgroup: Unknown subsys name 'rlimit' [ 21.347977][ T28] audit: type=1400 audit(1781950676.949:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.371139][ T28] audit: type=1400 audit(1781950676.949:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.395903][ T28] audit: type=1400 audit(1781950676.949:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.404399][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.428145][ T28] audit: type=1400 audit(1781950677.039:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.453548][ T28] audit: type=1400 audit(1781950677.039:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 21.556644][ T28] audit: type=1400 audit(1781950677.159:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.557060][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.582155][ T28] audit: type=1400 audit(1781950677.159:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.677197][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.684379][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.691767][ T287] device bridge_slave_0 entered promiscuous mode [ 22.700599][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.707627][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.715351][ T288] device bridge_slave_0 entered promiscuous mode [ 22.723477][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.730584][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.738035][ T288] device bridge_slave_1 entered promiscuous mode [ 22.744594][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.751635][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.759075][ T287] device bridge_slave_1 entered promiscuous mode [ 22.791876][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.798987][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.806412][ T289] device bridge_slave_0 entered promiscuous mode [ 22.815998][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.823059][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.830551][ T289] device bridge_slave_1 entered promiscuous mode [ 22.899559][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.906601][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.914126][ T291] device bridge_slave_0 entered promiscuous mode [ 22.921131][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.928154][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.935606][ T291] device bridge_slave_1 entered promiscuous mode [ 22.986639][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.993721][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.001175][ T290] device bridge_slave_0 entered promiscuous mode [ 23.008016][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.015184][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.022588][ T290] device bridge_slave_1 entered promiscuous mode [ 23.141437][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.148463][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.155742][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.162775][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.185171][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.192223][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.199491][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.206505][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.219686][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.226722][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.233993][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.241034][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.270772][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.277824][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.285104][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.292141][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.316267][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.323324][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.330589][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.337599][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.354477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.362941][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.370342][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.377495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.385985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.393712][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.401085][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.408214][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.415446][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.422870][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.430077][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.437629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.445106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.470677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.479105][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.487211][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.494242][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.501733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.510159][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.517190][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.525240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.533426][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.540448][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.553034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.560945][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.569077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.580034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.602266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.610102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.617978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.626265][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.633304][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.641609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.649770][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.656768][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.664111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.672324][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.679352][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.696834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.704979][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.713039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.721353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.729431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.737655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.746117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.754685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.768337][ T289] device veth0_vlan entered promiscuous mode [ 23.780181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.788677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.796825][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.803852][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.811326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.819868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.827939][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.834964][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.842305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.850352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.858338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.865845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.877378][ T287] device veth0_vlan entered promiscuous mode [ 23.887627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.895761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.903851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.911894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.920047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.928006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.936056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.944237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.952417][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.959920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.974117][ T288] device veth0_vlan entered promiscuous mode [ 23.982994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.991314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.999696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.007484][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.015874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.023866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.039511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.047581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.055613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.063721][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.071776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.080291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.091628][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.099881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.109054][ T289] device veth1_macvtap entered promiscuous mode [ 24.120683][ T290] device veth0_vlan entered promiscuous mode [ 24.130199][ T288] device veth1_macvtap entered promiscuous mode [ 24.141008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.148869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.156420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.164857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.173312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.181215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.189196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.197666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.206443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.214185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.228459][ T290] device veth1_macvtap entered promiscuous mode [ 24.238318][ T287] device veth1_macvtap entered promiscuous mode [ 24.245281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.253864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.262905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.271130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.278690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.286838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.296494][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.304797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.325854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.334501][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 24.334947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.350794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.359185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.367427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.375865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.387182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.395735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.404107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.412491][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.421419][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.429623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.445309][ T291] device veth0_vlan entered promiscuous mode [ 24.454611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.462778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.469339][ T312] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 24.508400][ T291] device veth1_macvtap entered promiscuous mode [ 24.524635][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.549731][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.578390][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.598185][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.619087][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.910540][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.099739][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.120375][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.145790][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 25.169551][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.194401][ T24] usb 2-1: config 0 descriptor?? [ 25.821935][ T321] loop1: detected capacity change from 0 to 40427 [ 25.829645][ T321] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 25.838553][ T321] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 25.850753][ T321] F2FS-fs (loop1): invalid crc value [ 25.876718][ T321] F2FS-fs (loop1): Found nat_bits in checkpoint [ 25.959183][ T321] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 25.968811][ T321] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 26.028743][ T60] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.218650][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 26.224858][ T60] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 26.274296][ T60] usb 4-1: config 0 interface 0 has no altsetting 0 [ 26.291188][ T60] usb 4-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.00 [ 26.291307][ T342] loop0: detected capacity change from 0 to 1024 [ 26.311262][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.333988][ T60] usb 4-1: config 0 descriptor?? [ 26.357577][ T342] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.439043][ T342] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.467876][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 26.467889][ T28] audit: type=1400 audit(1781950682.069:124): avc: denied { read write } for pid=341 comm="syz.0.8" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.469226][ T342] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, [ 26.474388][ T28] audit: type=1400 audit(1781950682.069:125): avc: denied { open } for pid=341 comm="syz.0.8" path="/2/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.496144][ T342] block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 26.535847][ T28] audit: type=1400 audit(1781950682.099:126): avc: denied { write } for pid=320 comm="syz.1.2" name="ptype" dev="proc" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 26.550730][ T342] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 26.571238][ T24] usbhid 2-1:0.0: can't add hid device: -32 [ 26.581478][ T24] usbhid: probe of 2-1:0.0 failed with error -32 [ 26.589123][ T24] usb 2-1: USB disconnect, device number 2 [ 26.628726][ T342] EXT4-fs (loop0): This should not happen!! Data will be lost [ 26.628726][ T342] [ 26.629272][ T28] audit: type=1400 audit(1781950682.239:127): avc: denied { ioctl } for pid=341 comm="syz.0.8" path="/2/file1/file1" dev="loop0" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.639049][ T342] EXT4-fs (loop0): Total free blocks count 0 [ 26.682210][ T342] EXT4-fs (loop0): Free/Dirty block details [ 26.688157][ T342] EXT4-fs (loop0): free_blocks=20480 [ 26.701225][ T342] EXT4-fs (loop0): dirty_blocks=32 [ 26.712318][ T342] EXT4-fs (loop0): Block reservation details [ 26.727690][ T342] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 26.754739][ T347] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28 [ 26.770892][ T28] audit: type=1400 audit(1781950682.379:128): avc: denied { write } for pid=351 comm="syz.2.10" name="event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.814512][ T28] audit: type=1400 audit(1781950682.379:129): avc: denied { open } for pid=351 comm="syz.2.10" path="/dev/input/event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.847563][ T60] usbhid 4-1:0.0: can't add hid device: -71 [ 26.856598][ T342] syz.0.8 (342) used greatest stack depth: 22152 bytes left [ 26.864050][ T60] usbhid: probe of 4-1:0.0 failed with error -71 [ 26.876160][ T60] usb 4-1: USB disconnect, device number 2 [ 26.898522][ T28] audit: type=1400 audit(1781950682.499:130): avc: denied { create } for pid=353 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.919447][ T354] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11'. [ 27.154777][ T28] audit: type=1400 audit(1781950682.499:131): avc: denied { write } for pid=353 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.903016][ T354] syz.0.11 (354) used greatest stack depth: 21152 bytes left [ 27.958575][ T28] audit: type=1400 audit(1781950682.499:132): avc: denied { read } for pid=353 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.961932][ T287] syz-executor: attempt to access beyond end of device [ 27.961932][ T287] loop1: rw=2051, sector=77824, nr_sectors = 8 limit=40427 [ 27.978644][ T28] audit: type=1400 audit(1781950682.499:133): avc: denied { create } for pid=353 comm="syz.0.11" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.013930][ T287] F2FS-fs (loop1): Issue discard(9728, 9728, 1) failed, ret: -5 [ 28.069432][ T371] can0: slcan on ptm0. [ 28.108205][ T371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 28.119722][ T371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 28.128813][ T371] netlink: 'syz.2.15': attribute type 1 has an invalid length. [ 28.136992][ T371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 28.193454][ T383] loop3: detected capacity change from 0 to 4096 [ 28.214951][ T383] EXT4-fs: Ignoring removed orlov option [ 28.223906][ T383] EXT4-fs (loop3): Test dummy encryption mode enabled [ 28.228958][ T370] can0 (unregistered): slcan off ptm0. [ 28.244644][ T383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.468404][ T407] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.489057][ T309] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.698650][ T309] usb 2-1: Using ep0 maxpacket: 16 [ 28.707096][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.749198][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.761204][ T309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.775570][ T309] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 28.784694][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.811203][ T309] usb 2-1: config 0 descriptor?? [ 28.828336][ T383] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 28.872147][ T414] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.23'. [ 29.023534][ T387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.031504][ T288] EXT4-fs (loop3): unmounting filesystem. [ 29.032793][ T387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.098730][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.298743][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 29.312078][ T6] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 29.345491][ T6] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 29.363491][ T6] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 29.373009][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.386260][ T309] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 29.395401][ T6] usb 1-1: Product: syz [ 29.404261][ T6] usb 1-1: Manufacturer: syz [ 29.415151][ T6] usb 1-1: SerialNumber: syz [ 29.420066][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.442033][ T6] usb 1-1: config 0 descriptor?? [ 29.450893][ T309] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input4 [ 29.462873][ T6] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 29.540051][ T309] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 29.610001][ T453] xt_hashlimit: size too large, truncated to 1048576 [ 29.873510][ T19] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 29.887807][ T309] usb 2-1: USB disconnect, device number 3 [ 29.893791][ T19] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 29.950064][ T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 29.968487][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 30.011168][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 30.042983][ T19] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 30.061270][ T19] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 30.078587][ T19] usb 4-1: Product: syz [ 30.087050][ T19] usb 4-1: Manufacturer: syz [ 30.107246][ T19] cdc_wdm 4-1:1.0: skipping garbage [ 30.117773][ T19] cdc_wdm 4-1:1.0: skipping garbage [ 30.133080][ T19] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 30.443905][ T457] fido_id[457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 30.838665][ T333] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.019761][ T333] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7F, skipping [ 31.032120][ T333] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.041260][ T333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.049424][ T333] usb 5-1: Product: syz [ 31.053657][ T333] usb 5-1: Manufacturer: syz [ 31.058312][ T333] usb 5-1: SerialNumber: syz [ 31.695851][ T309] usb 1-1: USB disconnect, device number 2 [ 31.715393][ T503] usb usb8: usbfs: process 503 (syz.1.51) did not claim interface 0 before use [ 31.725292][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 31.725304][ T28] audit: type=1400 audit(1781950687.329:202): avc: denied { create } for pid=504 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.757546][ T28] audit: type=1400 audit(1781950687.339:203): avc: denied { ioctl } for pid=504 comm="syz.0.52" path="socket:[16163]" dev="sockfs" ino=16163 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.806659][ T28] audit: type=1400 audit(1781950687.399:204): avc: denied { bind } for pid=510 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.826381][ T28] audit: type=1400 audit(1781950687.399:205): avc: denied { write } for pid=510 comm="syz.0.55" path="socket:[16912]" dev="sockfs" ino=16912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.901545][ T28] audit: type=1400 audit(1781950687.509:206): avc: denied { mounton } for pid=517 comm="syz.2.57" path="/proc/45/task" dev="proc" ino=16174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 31.935578][ T28] audit: type=1400 audit(1781950687.539:207): avc: denied { write } for pid=521 comm="syz.0.59" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 31.959554][ T28] audit: type=1400 audit(1781950687.569:208): avc: denied { open } for pid=521 comm="syz.0.59" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 32.066676][ T333] cdc_ncm 5-1:1.0: bind() failure [ 32.072732][ T333] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 32.079243][ T322] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.093920][ T364] usb 4-1: USB disconnect, device number 3 [ 32.099852][ T28] audit: type=1400 audit(1781950687.699:209): avc: denied { read append } for pid=537 comm="syz.3.66" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.100211][ T333] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 32.137324][ T333] usb 5-1: USB disconnect, device number 2 [ 32.149915][ T28] audit: type=1400 audit(1781950687.699:210): avc: denied { open } for pid=537 comm="syz.3.66" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.298683][ T309] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.309920][ T322] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.320076][ T322] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 32.329513][ T322] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.344848][ T322] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.353960][ T322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.362012][ T322] usb 2-1: Product: syz [ 32.366203][ T322] usb 2-1: Manufacturer: syz [ 32.370850][ T322] usb 2-1: SerialNumber: syz [ 32.382205][ T322] cdc_mbim 2-1:1.0: skipping garbage [ 32.387553][ T322] cdc_mbim 2-1:1.0: skipping garbage [ 32.392998][ T322] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 32.399938][ T322] cdc_mbim 2-1:1.0: bind() failure [ 32.488657][ T309] usb 3-1: Using ep0 maxpacket: 32 [ 32.494893][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.506098][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.516027][ T309] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 32.525209][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.534354][ T309] usb 3-1: config 0 descriptor?? [ 32.574045][ T28] audit: type=1400 audit(1781950688.179:211): avc: denied { execstack } for pid=541 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.970776][ T309] nintendo 0003:057E:200E.0002: unknown main item tag 0x0 [ 32.984272][ T309] nintendo 0003:057E:200E.0002: unknown main item tag 0x0 [ 32.994220][ T309] nintendo 0003:057E:200E.0002: unknown main item tag 0x0 [ 33.001751][ T309] nintendo 0003:057E:200E.0002: unknown main item tag 0x0 [ 33.009369][ T309] nintendo 0003:057E:200E.0002: unknown main item tag 0x0 [ 33.051386][ T309] nintendo 0003:057E:200E.0002: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 33.128786][ T309] nintendo 0003:057E:200E.0002: Failed charging grip handshake [ 33.138928][ T309] nintendo 0003:057E:200E.0002: Failed to initialize controller; ret=-110 [ 33.199099][ T309] nintendo 0003:057E:200E.0002: probe - fail = -110 [ 33.214988][ T309] nintendo: probe of 0003:057E:200E.0002 failed with error -110 [ 33.237661][ T309] usb 3-1: USB disconnect, device number 2 [ 33.349287][ T557] fido_id[557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 35.345513][ T60] usb 2-1: USB disconnect, device number 4 [ 35.649277][ T307] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.774910][ T600] Zero length message leads to an empty skb [ 35.838701][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 35.845550][ T307] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 35.976195][ T307] usb 3-1: config 0 interface 0 has no altsetting 0 [ 36.014387][ T307] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 36.029370][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.039542][ T307] usb 3-1: Product: syz [ 36.040364][ T609] netlink: 64 bytes leftover after parsing attributes in process `syz.1.87'. [ 36.043759][ T307] usb 3-1: Manufacturer: syz [ 36.057741][ T307] usb 3-1: SerialNumber: syz [ 36.071989][ T307] usb 3-1: config 0 descriptor?? [ 36.206210][ T631] loop4: detected capacity change from 0 to 256 [ 36.238318][ T631] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xa7bc3a1f, utbl_chksum : 0xe619d30d) [ 36.261923][ T631] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 2199023255554) [ 36.283720][ T632] loop1: detected capacity change from 0 to 256 [ 36.290330][ T632] ======================================================= [ 36.290330][ T632] WARNING: The mand mount option has been deprecated and [ 36.290330][ T632] and is ignored by this kernel. Remove the mand [ 36.290330][ T632] option from the mount to silence this warning. [ 36.290330][ T632] ======================================================= [ 36.328441][ T632] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.339115][ T632] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 36.350455][ T632] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 36.668657][ T307] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 36.792831][ T647] loop1: detected capacity change from 0 to 1024 [ 36.801897][ T647] EXT4-fs warning (device loop1): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 36.828680][ T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.851868][ T649] loop1: detected capacity change from 0 to 128 [ 36.867750][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 36.867763][ T28] audit: type=1400 audit(1781950692.469:227): avc: denied { mount } for pid=648 comm="syz.1.103" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.918710][ T307] usb 5-1: Using ep0 maxpacket: 16 [ 36.928695][ T307] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 36.950256][ T307] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 36.958493][ T307] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 36.987020][ T307] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 36.995504][ T307] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 37.004480][ T307] usb 5-1: config 0 has no interface number 0 [ 37.010775][ T307] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 37.031015][ T653] loop3: detected capacity change from 0 to 2048 [ 37.053831][ T307] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 37.065278][ T307] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 37.077355][ T653] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.104260][ T288] EXT4-fs (loop3): unmounting filesystem. [ 37.110167][ T307] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.124184][ T307] usb 5-1: config 0 interface 125 has no altsetting 2 [ 37.133579][ T307] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 37.143380][ T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.151651][ T307] usb 5-1: Product: syz [ 37.155813][ T307] usb 5-1: Manufacturer: syz [ 37.160818][ T307] usb 5-1: SerialNumber: syz [ 37.169437][ T307] usb 5-1: config 0 descriptor?? [ 37.199631][ T28] audit: type=1400 audit(1781950692.809:228): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.216917][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.252617][ T60] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 37.265729][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.274598][ T60] usb 1-1: config 0 descriptor?? [ 37.280535][ T28] audit: type=1400 audit(1781950692.889:229): avc: denied { create } for pid=663 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.309393][ T28] audit: type=1400 audit(1781950692.909:230): avc: denied { append } for pid=665 comm="syz.1.109" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.378099][ T309] usb 5-1: USB disconnect, device number 3 [ 37.487784][ T60] usbhid 1-1:0.0: can't add hid device: -71 [ 37.493823][ T60] usbhid: probe of 1-1:0.0 failed with error -71 [ 37.501403][ T60] usb 1-1: USB disconnect, device number 3 [ 37.668683][ T307] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.758656][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.848666][ T307] usb 4-1: Using ep0 maxpacket: 8 [ 37.856053][ T307] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 37.865270][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.873300][ T307] usb 4-1: Product: syz [ 37.877498][ T307] usb 4-1: Manufacturer: syz [ 37.884731][ T307] usb 4-1: SerialNumber: syz [ 37.890530][ T307] usb 4-1: config 0 descriptor?? [ 37.950704][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.961647][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.971409][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.984309][ T24] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 37.993385][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.001869][ T24] usb 2-1: config 0 descriptor?? [ 38.048657][ T60] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.178649][ T602] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 38.229592][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.240548][ T60] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 38.249600][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.258203][ T60] usb 1-1: config 0 descriptor?? [ 38.358662][ T602] usb 5-1: Using ep0 maxpacket: 32 [ 38.364775][ T602] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 38.373024][ T602] usb 5-1: config 0 has no interface number 0 [ 38.379155][ T602] usb 5-1: config 0 interface 184 has no altsetting 0 [ 38.387200][ T602] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 38.396461][ T602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.404477][ T602] usb 5-1: Product: syz [ 38.408701][ T602] usb 5-1: Manufacturer: syz [ 38.414757][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.422207][ T602] usb 5-1: SerialNumber: syz [ 38.427083][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.434730][ T602] usb 5-1: config 0 descriptor?? [ 38.439790][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x4 [ 38.447201][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.455066][ T602] smsc75xx v1.0.0 [ 38.458788][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.466199][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.473722][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.481183][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.488558][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.495980][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.503388][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.510804][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.514858][ T307] usb 3-1: USB disconnect, device number 3 [ 38.518207][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.531987][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.542458][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.550002][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.557490][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.565032][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.572568][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.580155][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.587629][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.596868][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.599841][ T28] audit: type=1400 audit(1781950694.199:231): avc: denied { write } for pid=682 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.604500][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.631021][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.638510][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.646008][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.653489][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.662948][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.670476][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.678041][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.685554][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.693035][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.700576][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.708019][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.715566][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.723044][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.730531][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.737967][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.745478][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.752973][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.760488][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.767931][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.775428][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.782947][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.790475][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.797926][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.805432][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.812900][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.820415][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.827915][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.835427][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.842934][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.850458][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.857942][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.865609][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.873438][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.880962][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.888426][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.895939][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.903443][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.910910][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.918387][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.925940][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.933450][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.941010][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.948476][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.955992][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.963505][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.971035][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.978514][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.986015][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 38.994284][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.001934][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.009375][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.016777][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.024601][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.032176][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.039711][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.047174][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.057017][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.064488][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.071969][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.079436][ T602] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 39.090380][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.097782][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.105213][ T60] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 39.112194][ T602] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 39.122000][ T60] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 39.131062][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.138494][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.148358][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.157491][ C1] ================================================================================ [ 39.166956][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:724:31 [ 39.175590][ C1] index 111 is out of range for type 'const int[34]' [ 39.176395][ T28] audit: type=1400 audit(1781950694.759:232): avc: denied { name_bind } for pid=685 comm="syz.2.116" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 39.182261][ C1] CPU: 1 PID: 688 Comm: syz.1.117 Not tainted syzkaller #0 [ 39.182280][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.182305][ C1] Call Trace: [ 39.224138][ C1] [ 39.226995][ C1] __dump_stack+0x21/0x24 [ 39.231340][ C1] dump_stack_lvl+0x110/0x170 [ 39.236029][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.241066][ C1] dump_stack+0x15/0x24 [ 39.245234][ C1] ubsan_epilogue+0xe/0x40 [ 39.249663][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 39.255393][ C1] aiptek_irq+0x210e/0x29b0 [ 39.259901][ C1] ? kcov_remote_start+0x2c4/0x370 [ 39.265034][ C1] __usb_hcd_giveback_urb+0x360/0x520 [ 39.270425][ C1] usb_hcd_giveback_urb+0x11f/0x3e0 [ 39.275645][ C1] dummy_timer+0xa25/0x3270 [ 39.280170][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 39.285729][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 39.290678][ C1] ? blk_mq_free_request+0x259/0x380 [ 39.295977][ C1] ? timerqueue_del+0xd3/0x120 [ 39.300765][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 39.305711][ C1] __hrtimer_run_queues+0x398/0x890 [ 39.310926][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 39.316055][ C1] hrtimer_run_softirq+0x19b/0x260 [ 39.321173][ C1] handle_softirqs+0x1d7/0x600 [ 39.325950][ C1] __irq_exit_rcu+0x52/0xf0 [ 39.330459][ C1] irq_exit_rcu+0x9/0x10 [ 39.334706][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 39.340352][ C1] [ 39.343284][ C1] [ 39.346209][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 39.352205][ C1] RIP: 0010:x64_sys_call+0x7e7/0x9a0 [ 39.357507][ C1] Code: e8 9e 4e 46 00 5d c3 e8 d7 d3 46 00 5d c3 e8 e0 19 c7 00 5d c3 e8 69 8e c2 00 5d c3 e8 e2 b3 cc 00 5d c3 e8 db 19 4a 00 5d c3 f4 dc 66 00 5d c3 e8 dd 9a d1 00 5d c3 e8 c6 28 be 00 5d c3 e8 [ 39.377120][ C1] RSP: 0018:ffffc900113bff10 EFLAGS: 00000283 [ 39.383200][ C1] RAX: 00000000000000ca RBX: ffffc900113bff20 RCX: ffff888108dd9440 [ 39.391178][ C1] RDX: 0000000000000000 RSI: 00000000000000ca RDI: ffffc900113bff58 [ 39.399156][ C1] RBP: ffffc900113bff10 R08: 0000000000000000 R09: 0000000000000000 [ 39.407133][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 39.415106][ C1] R13: 0000000000000000 R14: ffffc900113bff58 R15: 00000000000000ca [ 39.423085][ C1] do_syscall_64+0x4c/0xa0 [ 39.427505][ C1] ? clear_bhb_loop+0x30/0x80 [ 39.432164][ C1] ? clear_bhb_loop+0x30/0x80 [ 39.436823][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.442711][ C1] RIP: 0033:0x7f44f899ce59 [ 39.447123][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.466712][ C1] RSP: 002b:00007ffd091a7cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 39.475108][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f44f899ce59 [ 39.483065][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f44f8c15fa8 [ 39.491020][ C1] RBP: 00000000000010f9 R08: 00007ffd091a7b77 R09: 0000000000000000 [ 39.498973][ C1] R10: 00007f44f8c15fa0 R11: 0000000000000246 R12: 0000000000000000 [ 39.506925][ C1] R13: 00007f44f8c15fac R14: 00007f44f8c15fa8 R15: 00007f44f8c15fa0 [ 39.514890][ C1] [ 39.517892][ C1] ================================================================================ [ 39.528331][ T602] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 39.535906][ T28] audit: type=1400 audit(1781950695.129:233): avc: denied { mounton } for pid=688 comm="syz.1.117" path="/33/file0" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.588854][ T602] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 39.598478][ T602] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 39.712367][ T602] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 39.726285][ T602] usb 5-1: USB disconnect, device number 4 [ 39.733615][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.741099][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.748520][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.755980][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.763415][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.771045][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.778481][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.786039][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.793495][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.800932][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.808349][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.815784][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.823220][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.830724][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.834335][ T307] usb 1-1: USB disconnect, device number 4 [ 39.838137][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 39.852467][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.859939][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.867383][ T24] hid-generic 0003:1B1C:1B3E.0003: unknown main item tag 0x0 [ 39.875051][ T24] hid-generic 0003:1B1C:1B3E.0003: failed to start in urb: -90 [ 39.884886][ T24] hid-generic 0003:1B1C:1B3E.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 39.912091][ T24] usb 2-1: USB disconnect, device number 5 [ 39.953928][ T692] fido_id[692]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 40.414801][ T19] usb 4-1: USB disconnect, device number 4