last executing test programs: 5.802979701s ago: executing program 0 (id=224): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, 0x0, 0x0) 5.186948351s ago: executing program 2 (id=229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) syz_emit_ethernet(0xd82, &(0x7f0000000600)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0xd74, 0x65, 0x0, 0x7b, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x4e22, 0x4e22, 0xd60, 0x0, @opaque="b2de21f39df5c327deab80891d7c336d156dad18e305cdd9ecbd72251d89c052c2a2b1f1d30925ecab5f1e6226be51376b0d17d0c7f327ac719df70b8f6ba7cb74475aa085676c1bcdfd93c05b9342d2c016df707e929422b4f032639cdf0d39e3fbc2981b51485723bc874ae13057a1a3cbcf9bc5b6fc02e6d29de0a609d6803211c594565069e65ad8ec86ea9c535f17b0a99ee612b7d139e765e5d85d21d7d9639f8718474da05d9a30d04d6602c590270b692e3dfc57abeaf44b0cd7724e6271017c04c7b8e0f2c4d8045b03fa3bbc2b9fe96d269e4d31d3fb6ff1a6821fe5c0aa67b1b226073e9b66a4404ad56c4f1d106b25018d5a7b697aabebeafa6a3845e042e6ea534c265d378b291d55df97128fa08fb99071be11b4d158027a5f72473a69f6523f818e9c2a2fe61e14a568e0a09d3833972041667c44d4447793abeacb86c1779c38962dfe65a43ef84d6a25884778954060cb2535edf7b4d642e0bdee9c5e68b142d8002b6285b0af9b974d25f80ce0225987e0e588db0bcb37cdb8d656fe5ccfdcd394e06a0dfb182db89077310eb4edad73ea086643b865d4e45faecac228551cc8c7667a199443265178961fe26908dd766f9c6f7aaada6ae574104100b4987a934235c06a3d971a95e8d4d88391e8d70b12d711cc8cfe337d4d4953a79e8a26baa3fbcd424073a6313ccb32829b4e146b98ca4cdfd98ae5a6d5fbaeee369e433242d9cf09e6e0ae6f02fdb92a694eb7757386a810163ccfe1f4a161d0ff6392d6253ae88d310303f37380c2e188c30f572cb6629a7613d1f474763b193d302fb1ad5be9fb14d5218d7791eb1d39bb3b9981af3003f2b9aa2c8c18253c3cbd1f0c4baf52692a22ecb08ed5d1a22b429d004b2549ec4603713e493ff80232cdcdb9a6430b472c433745e5889d492608417acaa06fd5b4c78c741330fc987bcfbbaa07ab63f9858a26ebc4cf2d5d574a0a0dfa2b035927ce27211310b2702bc02b9afeba7e9fd14b7d35b510d6f7fdb67e4d3123dcca40bdc92b5b7d2b29ed7843aff898c2ad1fec16e327ec2f665f70c40e2088d42a63184d0ad0c3e379d03babaf9c6917b2e19f1a0db23e2aebea8d492d278ee5a77c354320717e0280e349417c4e77e1ab0a51f9fb81de0f886e4d9566d1942c8f0f50e9c49eda3175089002aabdd0f6ac6fe262ee04df9c3ca797ab992b5946d4f57e0d676dba77d57085e298d00dd84e59d150bcbc2da8dfcdad7c30c11d0755e48a9534eaf8cb24e1add03a2b7a0b6700eb6c52dfe6772b99520f3436eb1850bebfee21106c4914e55e9f6e783044adcd0131b1fd5ba992d9db9ae0e0f4a218d0c86be3d9602e950e9a230a385cb1b308c36574470c1c939385480b808695896a0919350b0b0e32c7d989132d9b30d7e26d7659a28c8ce0179aeb2db85edb7a13f4d07592f1af57bb7c398c759ba2686e8a69c5a1efa64d81aeb21b4b0be3c28c4c848f1df33ede8365208c63e8f8223f96ca2bf549029369ba5553545f446eaa3dcf4744d585ae12950738619ed76d03b681258fd05cccc31dfc9b7409afcf36558837eab3ced2dbeacaee72fb632cb4a4ee0f6527e5e12428fa561e781def8b29b3455e1dfda8436084a16ba9ab3858e77d08b4adda53e7f104fdf08d15817bd2dfe1c91affb45cc903bd8f20e62c25df4c66b3fb8982d021f8201da9333767782ebeca2398e54ff9e8e690325ecd3bbc78fab8ab0259d7ab9a6e2f8248f7b77a01aeb33f0e4e61603fee4e8bcdc1cda24effbda954343b085454b39c71e59e6ee28a8a9f2507afd244f2d81c58610539df9445bf4e06a2c68933b778f4ca3695ac7dd55360d10dac49b0d5caaab50e0a81399ff4eb3b9502b251af3fb238e009c226a82173ef0cac6a4dec160d635ac020f634743be41fd7a328c135c93b8550c152e9734a2d086fcc98048cbc916f51623a76159fb8602418f27c58a3df61f8c4608e67a8c82b65a449ce00242741842435236ea66cf5d8c655369839ba8941ab1be3e523e3e4ea9bc1cde6398464ddc1e4c06557a64c08622f16d5f5dcab3347ba212ad1fa08b2b9c82ef6f78d09b834eaeb72036593cc2aa90497884257d0f163f383cfe407a8e6c5e93bea48e223cde0952b6ba8a1719475d966dc8b80bcc35f6c06bd3a93da76cc84f84a3fe7d020e0e53331ffe34ab324e77a342829711cb9f573545ca1c6d0c290682cfd8d9c0af389f2e7f35755b8c9366a5315be273f8d44ae26b2151f15dfede01794a6576364b334018a89f7d923acc89121572b36b3e7e3ccf760586319c3649e37c5ee1662418fc0cbdbbb8b18a3e74f49ddf3e0802eb4f4231d80b17bda757be2762c23baaa91fb118380b8f8a9126ece6510cc680aa81cb802fd1028f40d053c710b673bec40b2e700e08510cb7db670daed15ab978f38329117f6d52a7a02a9809a43ace1060bf5220309d7414be582b6bcfd9308e91b46c6176e9553afd0e02ad5d8a511cdd7b7d50ba5d752febd651ac10496fb94e0c771a42e2496c093016bcd23775bf5898e5b8bfb9476b82fb1b7158fea037e1981f8cb31435745476fe5a26bd465f7cd2c083b350044d860e4788f4abe329841485496440755032b21b70d26fd3698e361ba6974c87c5fc5b60389e1ed04d93bb15cceeab13f0529975a37bf7b7236ea6ebdea8c1b91b82ed4cd716cecb6a261cd78246b60e24e9d5d535f2d807419f08925cfd261bb8cae5beb3853ccdb1d8107bdedcea50fb676c98f860600dd468d3c90a525d25dbd488a8c325d50ae366dbb56cd78899d870f26c23c288bc137479857a909732ecd5a64a245fad21489cf365ac74cd7d866732607dbf22001ae55101e8c6da42d8c6a5922d5f0bc8b34b1bba171cd73bd8c832242dba6c5fc533b2cd0d4d445fa8b9c3e35b28844a12cf091411454298a6d46386aec007a5d06e4ac4e227535dbe0889f40d6065e5835dcd4d4ef011e3c2e2142084570dfe99e41e2b9e90c1e6e318facdd7b6c9203f4d3763c3136f9c1c69ead872369c72035d81ffc0ff3d12c742e520877f1b4eec7938b358eac1c83beb6bc70d865f6de9d96b82331eea2cb36645c8493ed722f9bcb06a93aafc041d32154b24e9d0600dca70aff97107b6da0d7cdf4c539eee3a93eee95f3bee936fbf50e79a3949fe06e024976e2e51c71ecd0ec19a3bd5640b55a65190824e3e8a9b0d090c5ffa463109b52b713bff5e94634d836d343fdc91e67570e2fb461b233c8db648911ddfc3d1bb29c268299f074fc5d0f58873e553486cc43c6aafebffc351cd8785f694bad2113944aec967470f0fcf5677f0863784daac4bcb8c8e4abc0b274197c172c30ecb2e079c6541df9933c040ddc6b74c966b286e70da2de0133fb7a00f2c8888d832e0137c5acb2f17856c2160e6c463ab7d0eb2d524b1773e413f4734b56acbbf39cc66a8ef0f5e3a22e4bbb96978e1fe5eb4f673843a5f7571b6aab90230b12fc86701d032b20078a24dd943ba2df3c8e03d9ea49508096373205b440ac24cd18fbd8210e50a165d0c27fe58f4a41423c7a6ee142c86a0f49244c47233170313f8035ec69e06f96049b09e391dac1e417594085b8ceac5f0fc45e3dd32144575af7fd3401121ffabd550ec2dabf1369f8727f14b01f20009abf9a37e349759cccdd764c3ad8cc1960d761d24b73f31ae47cdae121c4fce897f7d7e88880b7b9896b373161e6554f05e38864d5074cddec8d23aeec84e0a11bd618aad2d9bfb0f636875b2d082d7a3f68ae024594f4791ec4435560501af829e243c2916b732ae605f360632d2ba01324eafad1a48b8890c78bc889ca1f1626aa74bb9b8036d0019ed45b85a67535a33597d73e9418de8939b7a716c5f2bfb41148475b5cd7b85b8a12cdbc75c4aee83fa9f6692f73b8594d8a843d920e5721419be4db6de8d8fb5fab5c830efece6bceb739b952cc3b38e8bbe4acabb391ebb7eaa7ea92b768ef17f05100266f832d0489982bb7ca8246efebbc1d380e150836f8a261bb2d15b36f556530220bf1edb462578e24fed002e5e69a3022817ceaf19d6077ae838e6c9b909ad60b0b31c1cdcb1be5529e1e10979aec9313191d2a6a6d9941d145688f88b4a647ddf8ddff2a2f9fe8280d457d39fd3159ed04639718e10d6c9041168cb30e2febd5c00af41f4ac2cbf4e3c0d4aac1ab2847d9ec53873d6712fed4783b7141511ca6c4b3532ab751270f4a9c828886e2fd63a8a8301e36899fc7219b0c8a707d54c8b66b15772857b3a1968e8847b76418d4e9a8c1ddb3f54d15eb66541fb718753276b1866cfc317c6a8ccdc34ac7e4a0290556ead579485dc465c9c2a805be10cdb33db6c94b2649cacf456bc9013aa181bca7b632b8c9445085e27e1e11fa0dbf9ddfd7881b87eda3fe6a8f2150972d9b31551639fb8589fe553d5037d1507ba0b98518f3d52e3b38939be8ad214969826b1bf51f0b9f3c29a9f9160ecb9cffb30dd673382c4859553b3edb0f9d65c568dd939c996213e95ec4da23f38637092607653af8eb2d8060aa2692679430f4e8be5702cc07d24382ae6c2c0cdc22927d97decfdbec126e5fdbc0055f1f2dd6fd47df8a6bd58a2ae6c040d20ae3b4ea2bdee811de217b1e934040604fe0d1cd6ec0df4e593ab9c227cc7d937ca71a924474fccdacd78599d89e7b2edfe841e394499d5bfb2898b2b23a8e6c97a54c8a155fa98b81acb8dc75a2ee02794f1c84028c674ffe10a78320822bd07e96bdaf662fa5e75f2921f9b708de3008a34e8d1b17be20736df7f5d67bf9c93b7dd4a6"}}}}}, 0x0) 5.186790721s ago: executing program 2 (id=230): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 5.170917463s ago: executing program 2 (id=231): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="00114f"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) 4.334783135s ago: executing program 4 (id=236): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='4'], 0x34}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.298403279s ago: executing program 4 (id=237): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 3.879048929s ago: executing program 4 (id=239): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) 3.624538025s ago: executing program 0 (id=240): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001340)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x1, 0x20, 0x66, 0x0, 0xd, 0x11, 0x0, @remote, @broadcast}, {0x4e22, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) 3.592080228s ago: executing program 0 (id=241): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a0300000000000000000002"], 0x34}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.422683304s ago: executing program 0 (id=242): write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414"], 0x1c) 3.422406254s ago: executing program 0 (id=243): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 2.882886877s ago: executing program 2 (id=252): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000088500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0xd, 0xe, 0x3, 0x6, 0xd, 0x0, 0x0, 0x615, 0x3, 0x7, 0x71, 0x2, '\x00', 0x7, 0x3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r8, @ANYRES8=r3, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000500)={0x1, 0x1, 0x1000, 0x4e, &(0x7f00000001c0)="debc52eecb2674e8f138bd7d91f31e6030c369c3a1b038f45800b2c3ba4c3ef14f8a0e113dc39bcc9507f1a5fcbec6c8277ed952bc10ef9cf1c2826ba882d903b284253b46df5be38db405bc6fde", 0x9c, 0x0, &(0x7f0000000280)="6b41ff0495429f7516441f719db6d26f4c15a2833ef6578bd594def8c99a15328fb49933d91b5fb6e91a7026bd9bce67625b04c608016978dd9dd4172953e91a1277432dd9ef243e48d00b47f5e27b63436d83d6b7f5b9c426340beccf06685a80f1f46ba24468919048e9f360a0f000f5a79a27250753c6ca1c970236a06a479138cec87ef25013df4fadaea297253c6bdda271c559dd1b1909a405"}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0xfffffd9d) 2.45124339s ago: executing program 2 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_set$pid(0x3, r0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x2, 0x2001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x70, 0x80}}]}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x2000, 0x4) 1.994680764s ago: executing program 2 (id=257): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bd687540b10e0770100244ab0301090212000100000000090400000055150e00"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x4040140) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x20000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0xdffffffe, 0x0, 0xffff8000}) 1.678349275s ago: executing program 4 (id=267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 1.666399936s ago: executing program 4 (id=268): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @beacon={{{}, {0x99f}, @device_a, @device_a, @random="aa05d423b2e9"}, 0x3, @random=0x1, 0x1, @void, @val, @val={0x3, 0x1, 0x8}, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x1}}, @void, @void, @val={0x25, 0x3, {0x1, 0xa, 0x1}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x21, 0x2, 0x34, 0x7}}, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x12, 0xf6, 0x40}}, @val={0x76, 0x6, {0x5, 0x10, 0x2a, 0x402}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) 1.607067502s ago: executing program 4 (id=269): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}, {0x0}], 0x2, 0x0, 0x0, 0xe0000000}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00"], 0x0) 1.577774725s ago: executing program 0 (id=270): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x92, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xc, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xc, '='}, @main=@item_012={0x1, 0x0, 0xc, 'O'}, @global=@item_012={0x0, 0x1, 0x5}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0xd, 0x1, {0x22, 0xe42}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x20, 0x15, 0x73, "bdbdf81216028b6a16fc138662e20b0c0a34c6d545db1c7c2fa5a85bbcdadc6e580c7502fe5ec5f382e77c9a9348cbf911383a40c42cd1c8cd96eef826f2bcac9840b5e57b8c70ce6f4f5de8ea9926e32b5baa61cd013904ec260c19bb414fd5e1d7f097456285dd68b1f667a75cfbacd6d350"}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000003c0), &(0x7f0000000440)={0x20, 0x3, 0x1, 0x80}}) 902.445712ms ago: executing program 1 (id=273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, r0, 0xfffff000) 902.265882ms ago: executing program 1 (id=274): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) close(r1) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) 875.971384ms ago: executing program 3 (id=275): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xb) 850.344236ms ago: executing program 3 (id=276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xfa, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x36, 0x2, 0xfffe, 0x0, 0x0, {[@md5sig={0x13, 0x12, "84708bdbb98a3962d1c1185f013febdc"}, @exp_smc={0xfe, 0x6}, @mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0x8, 0x1f940000000, 0x401}, @mss={0x2, 0x4, 0x4}, @sack={0x5, 0x12, [0xd23, 0xffffdfcb, 0x6, 0x7e]}, @sack={0x5, 0x26, [0x8001, 0x66756341, 0x3, 0x2, 0x367, 0x1000, 0x9, 0x5, 0xa]}, @mptcp=@remove_addr={0x1e, 0x5d, 0x8, 0x0, "3bba3e73424480ecd9f0bd1f607077411b6d6cd2a437fb5d006b0712d8cb2a8a3d85db161c3a271a9be3a7e9423870f93daaf20a729dc5985eb3d2d2eac4909fce06d49a878a1c33532cd421aa3836881681cccd1685f9ccaca5"}]}}}}}}}, 0x0) 782.893843ms ago: executing program 3 (id=277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 782.812783ms ago: executing program 3 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000076000d0b000000000000000003000014"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) 767.454495ms ago: executing program 3 (id=279): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff140012"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 732.700098ms ago: executing program 3 (id=280): sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)='X', 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f01040000"], 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x2, 0x100000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39.042046ms ago: executing program 1 (id=281): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)='YI', 0x2}], 0x1}}], 0x1, 0x48810) 38.951176ms ago: executing program 1 (id=282): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7fffffffffffffff) 30.606027ms ago: executing program 1 (id=283): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000072c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000340)=""/101, 0x65}], 0x1}, 0x5}], 0x1, 0x0, 0x0) 0s ago: executing program 1 (id=284): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 21.696002][ T24] audit: type=1400 audit(1761488860.600:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.697365][ T267] cgroup: Unknown subsys name 'net' [ 21.718689][ T24] audit: type=1400 audit(1761488860.600:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.746121][ T24] audit: type=1400 audit(1761488860.640:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.746364][ T267] cgroup: Unknown subsys name 'devices' [ 21.952103][ T267] cgroup: Unknown subsys name 'hugetlb' [ 21.957747][ T267] cgroup: Unknown subsys name 'rlimit' [ 22.128484][ T24] audit: type=1400 audit(1761488861.030:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.151699][ T24] audit: type=1400 audit(1761488861.030:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.176572][ T24] audit: type=1400 audit(1761488861.030:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.184452][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.208648][ T24] audit: type=1400 audit(1761488861.110:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.234091][ T24] audit: type=1400 audit(1761488861.110:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.234117][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.259889][ T24] audit: type=1400 audit(1761488861.140:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.293904][ T24] audit: type=1400 audit(1761488861.140:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.811533][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.818620][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.826187][ T276] device bridge_slave_0 entered promiscuous mode [ 23.834204][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.841269][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.848697][ T276] device bridge_slave_1 entered promiscuous mode [ 23.913730][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.920903][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.928713][ T275] device bridge_slave_0 entered promiscuous mode [ 23.936349][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.943484][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.950927][ T275] device bridge_slave_1 entered promiscuous mode [ 23.996792][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.004346][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.011851][ T279] device bridge_slave_0 entered promiscuous mode [ 24.019810][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.026917][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.034287][ T279] device bridge_slave_1 entered promiscuous mode [ 24.062670][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.069722][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.077149][ T278] device bridge_slave_0 entered promiscuous mode [ 24.086514][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.093594][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.100998][ T278] device bridge_slave_1 entered promiscuous mode [ 24.158013][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.165281][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.172773][ T277] device bridge_slave_0 entered promiscuous mode [ 24.194225][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.201302][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.208692][ T277] device bridge_slave_1 entered promiscuous mode [ 24.247086][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.254155][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.261440][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.268463][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.294487][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.301686][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.308939][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.316174][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.342749][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.349833][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.357200][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.364235][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.373271][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.380331][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.387578][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.394638][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.407624][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.415180][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.422410][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.429558][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.437032][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.444190][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.451785][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.458902][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.467151][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.474683][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.512602][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.520804][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.528993][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.536075][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.544070][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.552632][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.559666][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.567324][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.584689][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.592614][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.601051][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.608159][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.616019][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.624071][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.632260][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.639283][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.657704][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.665570][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.673921][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.681049][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.688713][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.697068][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.704117][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.715874][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.736456][ T276] device veth0_vlan entered promiscuous mode [ 24.752055][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.760919][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.768279][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.776049][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.784447][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.792656][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.801271][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.809390][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.816622][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.824261][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.832595][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.839613][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.848123][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.856231][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.872218][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.880503][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.888411][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.896541][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.904598][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.912933][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.921397][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.930081][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.938644][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.945892][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.953299][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.961395][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.969359][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.978253][ T276] device veth1_macvtap entered promiscuous mode [ 24.993859][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.001653][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.009966][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.018622][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.025681][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.041756][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.049905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.058070][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.066813][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.075422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.083596][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.097211][ T279] device veth0_vlan entered promiscuous mode [ 25.108933][ T278] device veth0_vlan entered promiscuous mode [ 25.116902][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.124938][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.133781][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.142284][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.150881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.159145][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.167656][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.175701][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.183736][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.192153][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.200569][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.208746][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.218750][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.226467][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.234113][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.242161][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.258567][ T275] device veth0_vlan entered promiscuous mode [ 25.264887][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.273335][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.281908][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.289332][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.306058][ T276] request_module fs-gadgetfs succeeded, but still no fs? [ 25.308995][ T275] device veth1_macvtap entered promiscuous mode [ 25.323254][ T279] device veth1_macvtap entered promiscuous mode [ 25.330037][ T276] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.331274][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.351527][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.359950][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.368540][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.377055][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.384951][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.393242][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.401595][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.413842][ T277] device veth0_vlan entered promiscuous mode [ 25.427247][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.430410][ T299] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.435543][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.460669][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.469048][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.477983][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.486686][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.495712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.504125][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.548289][ T277] device veth1_macvtap entered promiscuous mode [ 25.571104][ T278] device veth1_macvtap entered promiscuous mode [ 25.586187][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.593854][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.602757][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.611420][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.619601][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.907962][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.915724][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.924068][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.932831][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.950666][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.959340][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.967911][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.976907][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.985808][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.008298][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.017081][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.025746][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.034653][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.770318][ T24] kauditd_printk_skb: 53 callbacks suppressed [ 26.770378][ T24] audit: type=1400 audit(1761488865.640:127): avc: denied { connect } for pid=347 comm="syz.4.14" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.833697][ T292] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.923178][ T24] audit: type=1400 audit(1761488865.650:128): avc: denied { create } for pid=347 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.017922][ T24] audit: type=1400 audit(1761488865.920:129): avc: denied { mount } for pid=347 comm="syz.4.14" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.069005][ T24] audit: type=1400 audit(1761488865.970:130): avc: denied { write } for pid=347 comm="syz.4.14" laddr=::1 lport=60 faddr=::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.094281][ T24] audit: type=1400 audit(1761488866.000:131): avc: denied { create } for pid=356 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.114873][ T24] audit: type=1400 audit(1761488866.000:132): avc: denied { name_bind } for pid=356 comm="syz.1.15" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 27.160295][ T292] usb 4-1: device descriptor read/64, error -71 [ 27.174732][ T346] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 27.192787][ T346] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 27.203661][ T346] F2FS-fs (loop0): invalid crc value [ 27.207839][ T360] EXT4-fs (loop2): Test dummy encryption mode enabled [ 27.211470][ T346] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.237446][ T360] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 27.248187][ T360] System zones: 0-5 [ 27.260499][ T360] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,data_err=ignore,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 27.286498][ T24] audit: type=1400 audit(1761488866.200:133): avc: denied { mount } for pid=359 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.308181][ T346] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 27.315448][ T346] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.324744][ T24] audit: type=1400 audit(1761488866.210:134): avc: denied { write } for pid=359 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.346753][ T360] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 27.366246][ T24] audit: type=1400 audit(1761488866.210:135): avc: denied { add_name } for pid=359 comm="syz.2.16" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.389240][ T24] audit: type=1400 audit(1761488866.210:136): avc: denied { create } for pid=359 comm="syz.2.16" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.435827][ T346] bridge: RTM_NEWNEIGH with invalid ether address [ 27.522472][ T378] EXT4-fs (loop4): orphan cleanup on readonly fs [ 27.529304][ T378] EXT4-fs warning (device loop4): ext4_xattr_inode_get:509: inode #11: comm syz.4.17: EA inode hash validation failed [ 27.543171][ T378] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 27.556705][ T378] EXT4-fs (loop4): 1 orphan inode deleted [ 27.558002][ T381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 27.562747][ T378] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,grpquota,resgid=0x0000000000000000,acl,delalloc,,errors=continue [ 27.590409][ T292] usb 4-1: device descriptor read/64, error -71 [ 27.703643][ T387] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 27.713167][ T387] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.017345][ T292] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.063163][ T407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25'. [ 28.130836][ T409] ====================================================== [ 28.130836][ T409] WARNING: the mand mount option is being deprecated and [ 28.130836][ T409] will be removed in v5.15! [ 28.130836][ T409] ====================================================== [ 28.179260][ T409] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 28.278769][ T424] capability: warning: `syz.4.28' uses deprecated v2 capabilities in a way that may be insecure [ 28.510248][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.580208][ T301] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 28.687967][ T429] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.701965][ T429] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 28.710908][ T429] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.29: invalid indirect mapped block 2683928664 (level 1) [ 28.730019][ T429] EXT4-fs (loop2): Remounting filesystem read-only [ 28.737149][ T429] EXT4-fs (loop2): 1 truncate cleaned up [ 28.743260][ T429] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=." [ 28.790251][ T292] usb 4-1: device descriptor read/64, error -71 [ 28.800235][ T5] usb 2-1: device descriptor read/64, error -71 [ 28.827736][ T434] tipc: Started in network mode [ 28.830203][ T301] usb 5-1: Invalid ep0 maxpacket: 16 [ 28.832719][ T434] tipc: Own node identity ac1414aa, cluster identity 4711 [ 28.845272][ T434] tipc: Enabled bearer , priority 10 [ 28.990242][ T301] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 29.190211][ T5] usb 2-1: device descriptor read/64, error -71 [ 29.311295][ T433] F2FS-fs (loop0): invalid crc value [ 29.464831][ T433] F2FS-fs (loop0): Found nat_bits in checkpoint [ 29.470577][ T301] usb 5-1: Invalid ep0 maxpacket: 16 [ 29.483106][ T301] usb usb5-port1: attempt power cycle [ 29.508936][ T433] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 29.516052][ T433] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 29.630267][ T5] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.800924][ T445] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.809777][ T445] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 29.900393][ T301] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 29.907862][ T5] usb 2-1: device descriptor read/64, error -71 [ 29.970204][ T25] tipc: 32-bit node address hash set to aa1414ac [ 29.998453][ T451] incfs_lookup_dentry err:-14 [ 30.000305][ T301] usb 5-1: Invalid ep0 maxpacket: 16 [ 30.003316][ T451] incfs: Can't find or create .incomplete dir in ./file0 [ 30.016232][ T451] incfs: mount failed -14 [ 30.150214][ T301] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 30.235378][ T458] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 30.245629][ T458] SELinux: failed to load policy [ 30.245656][ T301] usb 5-1: Invalid ep0 maxpacket: 16 [ 30.256506][ T301] usb usb5-port1: unable to enumerate USB device [ 30.320234][ T5] usb 2-1: device descriptor read/64, error -71 [ 30.360853][ T465] process 'syz.3.37' launched '/dev/fd/-1' with NULL argv: empty string added [ 30.440358][ T5] usb usb2-port1: attempt power cycle [ 30.850235][ T5] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.892157][ T473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.39'. [ 31.020255][ T5] usb 2-1: device descriptor read/8, error -71 [ 31.213166][ T479] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.240474][ T5] usb 2-1: device descriptor read/8, error -71 [ 31.271174][ T479] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #4: comm syz.0.40: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 4095(4095) [ 31.290779][ T479] EXT4-fs error (device loop0): ext4_quota_enable:6450: comm syz.0.40: Bad quota inode: 4, type: 1 [ 31.302240][ T479] EXT4-fs warning (device loop0): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 31.317503][ T479] EXT4-fs (loop0): mount failed [ 31.327996][ T483] EXT4-fs (loop1): Test dummy encryption mode enabled [ 31.354155][ T483] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 31.362860][ T483] System zones: 0-5 [ 31.372329][ T483] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 31.438777][ T488] incfs_lookup_dentry err:-5 [ 31.487390][ T488] incfs: Can't find or create .index dir in ./file0 [ 31.490987][ T483] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 31.521987][ T488] incfs: mount failed -5 [ 31.539719][ T493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 31.546981][ T493] IPv6: NLM_F_CREATE should be set when creating new route [ 31.850299][ T5] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.882673][ T24] kauditd_printk_skb: 199 callbacks suppressed [ 31.882684][ T24] audit: type=1400 audit(1761488870.790:336): avc: denied { setopt } for pid=505 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.264076][ T506] FAT-fs (loop2): Directory bread(block 64) failed [ 32.270857][ T506] FAT-fs (loop2): Directory bread(block 65) failed [ 32.277524][ T506] FAT-fs (loop2): Directory bread(block 66) failed [ 32.284381][ T506] FAT-fs (loop2): Directory bread(block 67) failed [ 32.291146][ T506] FAT-fs (loop2): Directory bread(block 68) failed [ 32.297756][ T506] FAT-fs (loop2): Directory bread(block 69) failed [ 32.300383][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 32.304531][ T506] FAT-fs (loop2): Directory bread(block 70) failed [ 32.316334][ T506] FAT-fs (loop2): Directory bread(block 71) failed [ 32.323052][ T506] FAT-fs (loop2): Directory bread(block 72) failed [ 32.329617][ T506] FAT-fs (loop2): Directory bread(block 73) failed [ 32.410204][ T301] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.420280][ T5] usb 2-1: config 0 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 32.440943][ T5] usb 2-1: config 0 interface 0 has no altsetting 0 [ 32.457788][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 32.477015][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.496539][ T5] usb 2-1: config 0 descriptor?? [ 32.541974][ T24] audit: type=1400 audit(1761488871.450:337): avc: denied { create } for pid=519 comm="syz.2.51" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.563483][ T24] audit: type=1400 audit(1761488871.470:338): avc: denied { write } for pid=519 comm="syz.2.51" name="file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.585675][ T24] audit: type=1400 audit(1761488871.470:339): avc: denied { open } for pid=519 comm="syz.2.51" path="/11/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.741988][ T524] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 32.751258][ T24] audit: type=1400 audit(1761488871.660:340): avc: denied { mount } for pid=519 comm="syz.2.51" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.772784][ T524] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.789449][ T528] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 32.800666][ T528] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 32.811135][ T528] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 32.816504][ T24] audit: type=1400 audit(1761488871.730:341): avc: denied { mounton } for pid=519 comm="syz.2.51" path="/11/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.821458][ T528] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 32.844637][ T301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.854600][ T528] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 32.865863][ T524] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 32.876774][ T528] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 32.885687][ T301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.895606][ T528] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 32.905987][ T524] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 32.924292][ T301] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 32.930272][ T528] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 32.933360][ T24] audit: type=1400 audit(1761488871.830:342): avc: denied { read } for pid=519 comm="syz.2.51" name="file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.943457][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 32.965987][ T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.981455][ T5] hid (null): unknown global tag 0xd [ 32.987326][ T526] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 32.998596][ T5] logitech-djreceiver 0003:046D:C52B.0001: unknown global tag 0xd [ 33.006816][ T5] logitech-djreceiver 0003:046D:C52B.0001: item 0 1 1 13 parsing failed [ 33.018120][ T301] usb 4-1: config 0 descriptor?? [ 33.023185][ T526] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 33.023700][ T5] logitech-djreceiver 0003:046D:C52B.0001: logi_dj_probe: parse failed [ 33.042202][ T5] logitech-djreceiver: probe of 0003:046D:C52B.0001 failed with error -22 [ 33.230189][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 33.348270][ T24] audit: type=1326 audit(1761488872.250:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=534 comm="syz.0.54" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4251373fc9 code=0x0 [ 33.350317][ T25] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 33.379127][ T25] usb 5-1: config 0 has no interface number 0 [ 33.500925][ T301] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 33.512000][ T301] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input4 [ 33.538454][ T24] audit: type=1400 audit(1761488872.440:344): avc: denied { mounton } for pid=482 comm="syz.1.41" path="/7/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.540273][ T25] usb 5-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=c4.04 [ 33.570533][ T24] audit: type=1400 audit(1761488872.440:345): avc: denied { write } for pid=482 comm="syz.1.41" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 33.593978][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.595444][ T537] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 33.608549][ T25] usb 5-1: Product: syz [ 33.613845][ T301] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 33.617993][ T25] usb 5-1: Manufacturer: syz [ 33.643563][ T25] usb 5-1: SerialNumber: syz [ 33.677956][ T25] usb 5-1: config 0 descriptor?? [ 33.735455][ T508] mip6: mip6_rthdr_init_state: state's mode is not 2: 1 [ 33.750993][ T377] usb 4-1: USB disconnect, device number 4 [ 34.266729][ T554] SELinux: policydb version 1197550181 does not match my version range 15-33 [ 34.355106][ T554] SELinux: failed to load policy [ 34.899276][ T20] usb 2-1: USB disconnect, device number 5 [ 35.103434][ T578] EXT4-fs (loop1): Ignoring removed bh option [ 35.109767][ T578] EXT4-fs (loop1): Invalid want_extra_isize 3 [ 35.140282][ T25] asix 5-1:0.154 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 35.160313][ T25] asix 5-1:0.154 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 35.348109][ T25] asix 5-1:0.154 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 35.430620][ T25] asix 5-1:0.154 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 35.465460][ T25] asix 5-1:0.154 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 35.530674][ T25] asix: probe of 5-1:0.154 failed with error -71 [ 35.540188][ T582] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 35.547949][ T582] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 35.557385][ T582] F2FS-fs (loop3): invalid crc value [ 35.569989][ T585] kernel read not supported for file /policy (pid: 585 comm: syz.0.62) [ 35.595643][ T25] usb 5-1: USB disconnect, device number 6 [ 35.611286][ T582] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.652827][ T582] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 35.659929][ T582] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.752933][ T599] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 36.564307][ T617] loop4: p4 < > [ 36.684880][ T634] fuse: Invalid rootmode [ 36.697281][ T298] udevd[298]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 36.892373][ T24] kauditd_printk_skb: 157 callbacks suppressed [ 36.892592][ T24] audit: type=1326 audit(1761488875.800:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=635 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a96b9fc9 code=0x7ffc0000 [ 36.923324][ T24] audit: type=1326 audit(1761488875.800:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=635 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9a96b9fc9 code=0x7ffc0000 [ 37.090452][ T24] audit: type=1326 audit(1761488875.800:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=635 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a96b9fc9 code=0x7ffc0000 [ 37.115143][ T24] audit: type=1326 audit(1761488875.800:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=635 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc9a96b9fc9 code=0x7ffc0000 [ 37.163759][ T24] audit: type=1326 audit(1761488875.800:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=635 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc9a96b9fc9 code=0x7ffc0000 [ 37.211769][ T24] audit: type=1326 audit(1761488875.810:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=635 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a96b9fc9 code=0x7ffc0000 [ 37.235244][ T24] audit: type=1326 audit(1761488875.810:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=635 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a96b9fc9 code=0x7ffc0000 [ 37.258583][ T24] audit: type=1326 audit(1761488875.810:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=635 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a96b9fc9 code=0x7ffc0000 [ 37.282205][ T24] audit: type=1326 audit(1761488875.810:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=635 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9a96b9fc9 code=0x7ffc0000 [ 37.313306][ T24] audit: type=1326 audit(1761488875.810:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=635 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a96b9fc9 code=0x7ffc0000 [ 37.345264][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 37.755917][ T292] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.892285][ T666] xt_hashlimit: max too large, truncated to 1048576 [ 38.150333][ T292] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 38.160695][ T292] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 38.172286][ T292] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 38.477124][ T682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 38.486189][ T682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 38.693637][ T292] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.703317][ T292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.721615][ T292] usb 2-1: Product: syz [ 38.726109][ T292] usb 2-1: Manufacturer: syz [ 38.731030][ T292] usb 2-1: SerialNumber: syz [ 38.814591][ T719] device batadv_slave_1 entered promiscuous mode [ 38.823954][ T719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 38.996915][ T656] udc-core: couldn't find an available UDC or it's busy [ 39.017552][ T656] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.033734][ T731] netlink: 'syz.0.99': attribute type 12 has an invalid length. [ 39.107380][ T737] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.101: Invalid block bitmap block 0 in block_group 0 [ 39.125370][ T737] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.101: Failed to acquire dquot type 0 [ 39.137383][ T737] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.101: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.151868][ T737] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.101: Invalid inode bitmap blk 0 in block_group 0 [ 39.153315][ T292] usb 2-1: USB disconnect, device number 6 [ 39.180262][ T306] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 39.196240][ T737] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 39.205763][ T737] EXT4-fs (loop0): 1 orphan inode deleted [ 39.212302][ T737] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 39.291608][ T742] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 39.388671][ T707] device batadv_slave_1 left promiscuous mode [ 39.603930][ T751] input: syz1 as /devices/virtual/input/input5 [ 39.641120][ T751] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.680220][ T680] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 39.920379][ T680] usb 5-1: Using ep0 maxpacket: 16 [ 40.040335][ T680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.084795][ T680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.094766][ T680] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.107704][ T680] usb 5-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 40.116790][ T680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.125350][ T680] usb 5-1: config 0 descriptor?? [ 40.230242][ T292] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.470281][ T680] usbhid 5-1:0.0: can't add hid device: -71 [ 40.477936][ T680] usbhid: probe of 5-1:0.0 failed with error -71 [ 40.495005][ T680] usb 5-1: USB disconnect, device number 7 [ 40.560501][ T292] usb 1-1: Using ep0 maxpacket: 8 [ 41.191644][ T782] device syz_tun entered promiscuous mode [ 41.197443][ T782] device vlan2 entered promiscuous mode [ 41.320232][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.323808][ T787] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 41.344690][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.355258][ T292] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 41.395846][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.407532][ T292] usb 1-1: config 0 descriptor?? [ 41.448246][ T784] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.113: bg 0: block 393: padding at end of block bitmap is not set [ 41.463120][ T784] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 41.472599][ T784] EXT4-fs (loop1): 2 truncates cleaned up [ 41.478381][ T784] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 41.917550][ T24] kauditd_printk_skb: 85 callbacks suppressed [ 41.917564][ T24] audit: type=1326 audit(1761488880.820:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 41.955767][ T292] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 41.974403][ T292] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 41.991410][ T292] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 41.999512][ T292] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 42.007524][ T24] audit: type=1326 audit(1761488880.860:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 42.031765][ T292] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 42.044263][ T292] hid-multitouch 0003:0EEF:72C4.0003: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 42.050371][ T24] audit: type=1326 audit(1761488880.860:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 42.162214][ T292] usb 1-1: USB disconnect, device number 2 [ 42.222151][ T819] audit: audit_backlog=65 > audit_backlog_limit=64 [ 42.229010][ T24] audit: type=1326 audit(1761488880.860:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 42.257291][ T819] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 42.264144][ T816] fido_id[816]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 42.293699][ T820] EXT4-fs (loop3): Unrecognized mount option "g" or missing value [ 42.294059][ T24] audit: type=1326 audit(1761488880.870:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 42.325668][ T24] audit: type=1326 audit(1761488880.880:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 42.334128][ T819] audit: backlog limit exceeded [ 42.355555][ T24] audit: type=1326 audit(1761488880.880:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 42.585050][ T838] exfat: Unknown parameter '' [ 42.712897][ T847] blk_update_request: I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 42.724743][ T847] EXT4-fs (loop2): unable to read superblock [ 42.788500][ T845] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 43.158165][ T845] xt_hashlimit: max too large, truncated to 1048576 [ 43.514493][ T845] netlink: 96 bytes leftover after parsing attributes in process `syz.3.128'. [ 44.102055][ T859] attempt to access beyond end of device [ 44.102055][ T859] loop4: rw=2049, want=234, limit=128 [ 44.132584][ T866] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.145564][ T9] attempt to access beyond end of device [ 44.145564][ T9] loop4: rw=1, want=1041, limit=128 [ 44.145880][ T866] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 44.164923][ T866] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.135: invalid indirect mapped block 2683928664 (level 1) [ 44.180428][ T866] EXT4-fs (loop3): Remounting filesystem read-only [ 44.186975][ T855] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 44.187120][ T866] EXT4-fs (loop3): 1 truncate cleaned up [ 44.203136][ T855] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 44.211584][ T866] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=." [ 44.211835][ T855] F2FS-fs (loop0): Unrecognized mount option "noeoinline_xattr" or missing value [ 44.280267][ T292] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 44.371085][ T883] netlink: 64 bytes leftover after parsing attributes in process `syz.0.140'. [ 44.416649][ T887] Zero length message leads to an empty skb [ 44.500203][ T680] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 44.555496][ T897] EXT4-fs warning (device loop0): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 44.570829][ T897] EXT4-fs (loop0): mount failed [ 44.690282][ T292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.706359][ T292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.726494][ T292] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 44.744899][ T292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.765656][ T292] usb 3-1: config 0 descriptor?? [ 44.880271][ T680] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 45.050281][ T680] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.059573][ T680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.067724][ T680] usb 5-1: Product: syz [ 45.072100][ T680] usb 5-1: Manufacturer: syz [ 45.076726][ T680] usb 5-1: SerialNumber: syz [ 45.252533][ T292] steelseries_srws1 0003:1038:1410.0004: unknown global tag 0xd [ 45.266948][ T292] steelseries_srws1 0003:1038:1410.0004: item 0 4 1 13 parsing failed [ 45.275532][ T292] steelseries_srws1 0003:1038:1410.0004: parse failed [ 45.282433][ T292] steelseries_srws1: probe of 0003:1038:1410.0004 failed with error -22 [ 45.320629][ T872] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 45.360302][ T680] cdc_ncm 5-1:1.0: bind() failure [ 45.366618][ T680] usb 5-1: bad CDC descriptors [ 45.383732][ T680] usb 5-1: USB disconnect, device number 8 [ 45.458658][ T861] udc-core: couldn't find an available UDC or it's busy [ 45.470238][ T861] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 45.479597][ T374] usb 3-1: USB disconnect, device number 2 [ 45.508096][ T923] EXT4-fs (loop0): Unrecognized mount option "hash" or missing value [ 45.533960][ T917] F2FS-fs (loop4): fault_injection options not supported [ 45.550238][ T15] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 45.559912][ T917] F2FS-fs (loop4): invalid crc value [ 45.566981][ T917] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 45.596794][ T917] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 45.920271][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.938764][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.960232][ T15] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.977749][ T15] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.994661][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.018405][ T15] usb 2-1: config 0 descriptor?? [ 46.104211][ T943] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.140488][ T943] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 46.155353][ T943] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.168838][ T943] EXT4-fs (loop2): 1 truncate cleaned up [ 46.174831][ T943] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue [ 46.282557][ T279] attempt to access beyond end of device [ 46.282557][ T279] loop4: rw=2049, want=40968, limit=40427 [ 46.430821][ T923] F2FS-fs (loop0): fault_injection options not supported [ 46.442335][ T923] F2FS-fs (loop0): invalid crc value [ 46.491383][ T15] plantronics 0003:047F:FFFF.0005: global environment stack underflow [ 46.503767][ T15] plantronics 0003:047F:FFFF.0005: item 0 4 1 11 parsing failed [ 46.530503][ T15] plantronics 0003:047F:FFFF.0005: parse failed [ 46.537024][ T15] plantronics: probe of 0003:047F:FFFF.0005 failed with error -22 [ 46.546178][ T923] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.602061][ T923] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 46.941524][ T24] kauditd_printk_skb: 246 callbacks suppressed [ 46.941538][ T24] audit: type=1326 audit(1761488885.850:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 47.037466][ T24] audit: type=1326 audit(1761488885.890:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 47.113722][ T969] cgroup: syz.0.156 (969) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 47.126388][ T24] audit: type=1326 audit(1761488885.890:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 47.155926][ T969] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 47.192796][ T969] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.211094][ T969] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 47.220928][ T24] audit: type=1326 audit(1761488885.890:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 47.231135][ T969] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 47.279233][ T24] audit: type=1326 audit(1761488885.890:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 47.302770][ T24] audit: type=1326 audit(1761488885.890:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2e4ff6810 code=0x7ffc0000 [ 47.326544][ T24] audit: type=1326 audit(1761488885.890:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 47.349986][ T24] audit: type=1326 audit(1761488885.890:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 47.373592][ T24] audit: type=1326 audit(1761488885.890:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 47.404795][ T24] audit: type=1326 audit(1761488885.890:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4ff7fc9 code=0x7ffc0000 [ 47.555385][ T975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 47.653839][ T982] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 47.973019][ T989] bridge0: port 3(syz_tun) entered blocking state [ 47.979621][ T989] bridge0: port 3(syz_tun) entered disabled state [ 47.988119][ T989] device syz_tun entered promiscuous mode [ 47.994295][ T989] bridge0: port 3(syz_tun) entered blocking state [ 48.000742][ T989] bridge0: port 3(syz_tun) entered forwarding state [ 48.277165][ T826] usb 2-1: USB disconnect, device number 7 [ 48.405628][ T991] EXT4-fs (loop4): Test dummy encryption mode enabled [ 48.412567][ T991] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.424054][ T991] EXT4-fs (loop4): 1 truncate cleaned up [ 48.429786][ T991] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 48.516473][ T999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 48.716810][ T1005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24420 sclass=netlink_route_socket pid=1005 comm=syz.4.162 [ 49.235348][ T995] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 49.412151][ T997] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 49.460151][ C1] sched: RT throttling activated [ 49.460645][ T997] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 49.734731][ T997] F2FS-fs (loop3): Found nat_bits in checkpoint [ 49.777197][ T997] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 49.784522][ T997] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 49.864702][ T997] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 49.917977][ T275] attempt to access beyond end of device [ 49.917977][ T275] loop3: rw=2049, want=45112, limit=40427 [ 49.946328][ T1035] device wg2 entered promiscuous mode [ 50.444404][ T1056] xt_hashlimit: size too large, truncated to 1048576 [ 50.790581][ T1054] F2FS-fs (loop3): invalid crc value [ 50.811803][ T1054] F2FS-fs (loop3): Found nat_bits in checkpoint [ 50.855425][ T1054] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 50.877736][ T1068] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.940787][ T1068] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 50.970868][ T1068] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 51.188941][ T1054] F2FS-fs (loop3): Start checkpoint disabled! [ 51.486538][ T1089] EXT4-fs (loop2): Ignoring removed oldalloc option [ 51.684700][ T1054] SELinux: policydb version 1609840920 does not match my version range 15-33 [ 51.701687][ T1054] SELinux: failed to load policy [ 51.751841][ T1089] EXT4-fs (loop2): 1 truncate cleaned up [ 51.762880][ T1089] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005, [ 52.027112][ T24] kauditd_printk_skb: 224 callbacks suppressed [ 52.027125][ T24] audit: type=1400 audit(1761488890.940:1082): avc: denied { setattr } for pid=1088 comm="syz.2.187" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.064825][ T24] audit: type=1400 audit(1761488890.960:1083): avc: denied { append } for pid=1088 comm="syz.2.187" path="/39/file1/file0/cpu.stat" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.091098][ T24] audit: type=1400 audit(1761488890.960:1084): avc: denied { ioctl } for pid=1088 comm="syz.2.187" path="/39/file1/file0/cpu.stat" dev="loop2" ino=19 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.302301][ T24] audit: type=1400 audit(1761488891.210:1085): avc: denied { write } for pid=1126 comm="syz.0.195" path="socket:[17266]" dev="sockfs" ino=17266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.409103][ T1143] netlink: 'syz.1.196': attribute type 3 has an invalid length. [ 52.470251][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 52.683349][ T1141] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 52.692516][ T1141] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.719535][ T24] audit: type=1400 audit(1761488891.620:1086): avc: denied { rename } for pid=1140 comm="syz.2.199" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.742103][ T1141] EXT4-fs error (device loop2): ext4_get_first_dir_block:3730: inode #12: comm syz.2.199: directory missing '..' [ 52.770208][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 52.920229][ T24] audit: type=1400 audit(1761488891.790:1087): avc: denied { write } for pid=1151 comm="syz.0.201" path="socket:[17405]" dev="sockfs" ino=17405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.410563][ T25] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 53.445163][ T25] usb 4-1: config 0 has no interface number 0 [ 53.451349][ T25] usb 4-1: config 0 interface 184 has no altsetting 0 [ 53.489041][ T24] audit: type=1326 audit(1761488892.390:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1161 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7d8bffc9 code=0x7ffc0000 [ 53.489266][ T1162] syz.1.203 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.512752][ T24] audit: type=1326 audit(1761488892.390:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1161 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7d8bffc9 code=0x7ffc0000 [ 53.560389][ T24] audit: type=1326 audit(1761488892.390:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1161 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7efd7d8bffc9 code=0x7ffc0000 [ 53.584063][ T24] audit: type=1326 audit(1761488892.440:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1161 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7d8bffc9 code=0x7ffc0000 [ 53.650299][ T25] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 53.971622][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.042967][ T25] usb 4-1: Product: syz [ 54.110080][ T25] usb 4-1: Manufacturer: syz [ 54.117711][ T25] usb 4-1: SerialNumber: syz [ 54.978244][ T25] usb 4-1: config 0 descriptor?? [ 55.014788][ T1173] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 55.022294][ T1173] EXT4-fs (loop0): Test dummy encryption mode enabled [ 55.029085][ T1173] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 55.036237][ T1173] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.047014][ T25] smsc75xx v1.0.0 [ 55.053766][ T1173] EXT4-fs (loop0): 1 truncate cleaned up [ 55.059445][ T1173] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,max_dir_size_kb=0x0000000000000006,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 55.102921][ T1172] xt_NFQUEUE: number of total queues is 0 [ 55.260719][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 55.271285][ T25] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 55.282468][ T25] usb 4-1: USB disconnect, device number 5 [ 55.710357][ T1190] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.861064][ T1190] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 55.985326][ T1190] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 56.039833][ T1193] IPv6: sit1: Disabled Multicast RS [ 56.318620][ T1203] FAT-fs (loop0): Unrecognized mount option "codepage=" or missing value [ 56.631626][ T1211] netlink: 388 bytes leftover after parsing attributes in process `syz.3.216'. [ 56.641813][ T1209] EXT4-fs (loop2): quotafile must be on filesystem root [ 56.659433][ T1217] 9pnet: Insufficient options for proto=fd [ 56.772431][ T1231] kvm: pic: non byte read [ 56.777542][ T1231] kvm: pic: non byte read [ 57.080238][ T678] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 57.120243][ T680] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 57.320260][ T678] usb 1-1: Using ep0 maxpacket: 32 [ 57.441222][ T678] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 57.451799][ T24] kauditd_printk_skb: 33 callbacks suppressed [ 57.451810][ T24] audit: type=1400 audit(1761488896.350:1125): avc: denied { ioctl } for pid=1247 comm="syz.2.230" path="/dev/fuse" dev="devtmpfs" ino=90 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.483176][ T678] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 57.494180][ T678] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 57.507401][ T680] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.517932][ T680] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 57.527080][ T680] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 57.536201][ T680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.545287][ T680] usb 2-1: config 0 descriptor?? [ 57.670323][ T678] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 57.679634][ T678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.687931][ T678] usb 1-1: Product: syz [ 57.692399][ T678] usb 1-1: Manufacturer: syz [ 57.697273][ T678] usb 1-1: SerialNumber: syz [ 57.750245][ T377] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 57.792005][ T678] usb 2-1: USB disconnect, device number 8 [ 57.990222][ T377] usb 3-1: Using ep0 maxpacket: 32 [ 58.110293][ T377] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 58.118631][ T377] usb 3-1: config 0 has no interface number 0 [ 58.260236][ T678] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 58.280256][ T377] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 58.289497][ T377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.298536][ T377] usb 3-1: Product: syz [ 58.302994][ T377] usb 3-1: Manufacturer: syz [ 58.307677][ T377] usb 3-1: SerialNumber: syz [ 58.313247][ T377] usb 3-1: config 0 descriptor?? [ 58.350647][ T377] smsc95xx v2.0.0 [ 58.362485][ T24] audit: type=1400 audit(1761488897.270:1126): avc: denied { read } for pid=1265 comm="syz.4.237" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.385427][ T24] audit: type=1400 audit(1761488897.270:1127): avc: denied { open } for pid=1265 comm="syz.4.237" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.530236][ T678] usb 2-1: Using ep0 maxpacket: 32 [ 58.650292][ T678] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.660688][ T678] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 58.669812][ T678] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 58.679528][ T678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.700880][ T678] usb 2-1: config 0 descriptor?? [ 58.948515][ T25] usb 2-1: USB disconnect, device number 9 [ 59.020219][ T292] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 59.047710][ T1008] usb 1-1: USB disconnect, device number 3 [ 59.220269][ T377] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 59.232307][ T377] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 59.260418][ T377] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 59.271587][ T377] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 59.279488][ T377] usb 3-1: USB disconnect, device number 3 [ 59.400258][ T292] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 59.409445][ T292] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 59.420699][ T292] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 59.429916][ T292] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 59.450982][ T1299] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.570281][ T292] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 59.579385][ T292] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 59.587501][ T1008] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 59.595569][ T292] usb 5-1: Product: syz [ 59.600031][ T292] usb 5-1: Manufacturer: syz [ 59.630424][ T1274] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 59.652443][ T292] cdc_wdm 5-1:1.0: skipping garbage [ 59.658028][ T292] cdc_wdm 5-1:1.0: skipping garbage [ 59.663641][ T292] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 59.814176][ T24] audit: type=1400 audit(1761488898.720:1128): avc: denied { setopt } for pid=1310 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.840326][ T1008] usb 1-1: Using ep0 maxpacket: 16 [ 59.848031][ T24] audit: type=1400 audit(1761488898.750:1129): avc: denied { bind } for pid=1310 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.980387][ T1008] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.991106][ T1008] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.080435][ T679] usb 5-1: USB disconnect, device number 9 [ 60.180460][ T1008] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.189896][ T1008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.198135][ T1008] usb 1-1: Product: syz [ 60.203676][ T1008] usb 1-1: Manufacturer: syz [ 60.208441][ T1008] usb 1-1: SerialNumber: syz [ 60.630254][ T1008] usb 1-1: 0:2 : does not exist [ 60.649731][ T1008] usb 1-1: USB disconnect, device number 4 [ 60.760406][ T1338] netlink: 80 bytes leftover after parsing attributes in process `syz.3.263'. [ 60.990194][ T292] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 61.280234][ T1008] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 61.350364][ T20] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 61.510272][ T292] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 61.519393][ T292] usb 3-1: New USB device strings: Mfr=68, Product=171, SerialNumber=3 [ 61.527760][ T292] usb 3-1: Product: syz [ 61.531954][ T292] usb 3-1: Manufacturer: syz [ 61.536539][ T292] usb 3-1: SerialNumber: syz [ 61.541856][ T292] usb 3-1: config 0 descriptor?? [ 61.560349][ T1008] usb 5-1: no configurations [ 61.565124][ T1008] usb 5-1: can't read configurations, error -22 [ 61.626074][ T1356] tipc: Started in network mode [ 61.631175][ T1356] tipc: Own node identity be6c63ebb8c8, cluster identity 4711 [ 61.638717][ T1356] tipc: Enabled bearer , priority 0 [ 61.649247][ T1356] device syzkaller0 entered promiscuous mode [ 61.660005][ T1356] tipc: Resetting bearer [ 61.666517][ T1355] tipc: Resetting bearer [ 61.675435][ T1355] tipc: Disabling bearer [ 61.710263][ T20] usb 1-1: config 0 interface 0 altsetting 146 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.720437][ T24] audit: type=1400 audit(1761488900.620:1130): avc: denied { map } for pid=1359 comm="syz.1.273" path="socket:[19569]" dev="sockfs" ino=19569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 61.743475][ T1008] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 61.751349][ T20] usb 1-1: config 0 interface 0 altsetting 146 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 61.770349][ T20] usb 1-1: config 0 interface 0 has no altsetting 0 [ 61.778183][ T20] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 61.791415][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.804902][ T20] usb 1-1: config 0 descriptor?? [ 61.812674][ T1366] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 61.842595][ T24] audit: type=1400 audit(1761488900.750:1131): avc: denied { block_suspend } for pid=1361 comm="syz.1.274" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.856525][ T1371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=1371 comm=syz.3.278 [ 61.897161][ T1374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 61.906176][ T1374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.279'. [ 62.030257][ T1008] usb 5-1: no configurations [ 62.035104][ T1008] usb 5-1: can't read configurations, error -22 [ 62.041727][ T1008] usb usb5-port1: attempt power cycle [ 62.200210][ T679] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 62.301336][ T20] saitek 0003:06A3:0CCD.0006: collection stack underflow [ 62.308609][ T20] saitek 0003:06A3:0CCD.0006: item 0 1 0 12 parsing failed [ 62.316159][ T20] saitek 0003:06A3:0CCD.0006: parse failed [ 62.322194][ T20] saitek: probe of 0003:06A3:0CCD.0006 failed with error -22 [ 62.450223][ T1008] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 62.502069][ T20] usb 1-1: USB disconnect, device number 5 [ 62.580232][ T679] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 62.580269][ T1008] usb 5-1: no configurations [ 62.595290][ T1008] usb 5-1: can't read configurations, error -22 [ 62.595951][ T679] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 62.615232][ T679] usb 4-1: config 220 interface 0 has no altsetting 0 [ 62.629595][ T24] audit: type=1400 audit(1761488901.540:1132): avc: denied { read } for pid=1381 comm="syz.1.283" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.658255][ T24] audit: type=1400 audit(1761488901.560:1133): avc: denied { setopt } for pid=1383 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.671986][ T1384] ================================================================== [ 62.685847][ T1384] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 62.695154][ T1384] Read of size 1 at addr ffff88810f6aabd8 by task syz.1.284/1384 [ 62.702865][ T1384] [ 62.705218][ T1384] CPU: 1 PID: 1384 Comm: syz.1.284 Not tainted syzkaller #0 [ 62.712503][ T1384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 62.722682][ T1384] Call Trace: [ 62.725974][ T1384] __dump_stack+0x21/0x24 [ 62.730324][ T1384] dump_stack_lvl+0x169/0x1d8 [ 62.735006][ T1384] ? show_regs_print_info+0x18/0x18 [ 62.740202][ T1384] ? thaw_kernel_threads+0x220/0x220 [ 62.745577][ T1384] ? unwind_get_return_address+0x4d/0x90 [ 62.751221][ T1384] print_address_description+0x7f/0x2c0 [ 62.756761][ T1384] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 62.763264][ T1384] kasan_report+0xe2/0x130 [ 62.767696][ T1384] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 62.774194][ T1384] __asan_report_load1_noabort+0x14/0x20 [ 62.779819][ T1384] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 62.786440][ T1384] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 62.790332][ T679] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 62.792612][ T1384] ? xfrm_netlink_rcv+0x72/0x90 [ 62.801865][ T679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.806556][ T1384] ? netlink_unicast+0x876/0xa40 [ 62.806578][ T1384] ? netlink_sendmsg+0x88d/0xb30 [ 62.815806][ T679] usb 4-1: Product: syz [ 62.819498][ T1384] ? ____sys_sendmsg+0x5a2/0x8c0 [ 62.819516][ T1384] ? ___sys_sendmsg+0x1f0/0x260 [ 62.824780][ T679] usb 4-1: Manufacturer: syz [ 62.828599][ T1384] ? do_syscall_64+0x31/0x40 [ 62.828624][ T1384] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 62.833954][ T679] usb 4-1: SerialNumber: syz [ 62.838442][ T1384] xfrm_policy_inexact_insert+0x70/0x1130 [ 62.838462][ T1384] ? __get_hash_thresh+0x10c/0x420 [ 62.869132][ T1384] ? policy_hash_bysel+0x110/0x4f0 [ 62.874333][ T1384] xfrm_policy_insert+0x126/0x9a0 [ 62.879377][ T1384] ? xfrm_policy_construct+0x54f/0x1f00 [ 62.885387][ T1384] xfrm_add_policy+0x4d1/0x830 [ 62.890401][ T1384] ? xfrm_dump_sa_done+0xc0/0xc0 [ 62.895545][ T1384] xfrm_user_rcv_msg+0x450/0x6d0 [ 62.900564][ T1384] ? xfrm_netlink_rcv+0x90/0x90 [ 62.905417][ T1384] ? selinux_nlmsg_lookup+0x219/0x4a0 [ 62.910878][ T1384] netlink_rcv_skb+0x1e0/0x430 [ 62.915741][ T1384] ? xfrm_netlink_rcv+0x90/0x90 [ 62.920601][ T1384] ? netlink_ack+0xb80/0xb80 [ 62.925200][ T1384] ? mutex_trylock+0xa0/0xa0 [ 62.929799][ T1384] ? __netlink_lookup+0x387/0x3b0 [ 62.934845][ T1384] xfrm_netlink_rcv+0x72/0x90 [ 62.939523][ T1384] netlink_unicast+0x876/0xa40 [ 62.944286][ T1384] netlink_sendmsg+0x88d/0xb30 [ 62.949157][ T1384] ? netlink_getsockopt+0x530/0x530 [ 62.954438][ T1384] ? security_socket_sendmsg+0x82/0xa0 [ 62.959899][ T1384] ? netlink_getsockopt+0x530/0x530 [ 62.965096][ T1384] ____sys_sendmsg+0x5a2/0x8c0 [ 62.969853][ T1384] ? __sys_sendmsg_sock+0x40/0x40 [ 62.974875][ T1384] ? import_iovec+0x7c/0xb0 [ 62.979486][ T1384] ___sys_sendmsg+0x1f0/0x260 [ 62.984165][ T1384] ? __sys_sendmsg+0x250/0x250 [ 62.988927][ T1384] ? __fdget+0x1a1/0x230 [ 62.993161][ T1384] __x64_sys_sendmsg+0x1e2/0x2a0 [ 62.998092][ T1384] ? __kasan_check_write+0x14/0x20 [ 63.003197][ T1384] ? ___sys_sendmsg+0x260/0x260 [ 63.008042][ T1384] ? __kasan_check_read+0x11/0x20 [ 63.013065][ T1384] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 63.018692][ T1384] do_syscall_64+0x31/0x40 [ 63.023193][ T1384] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 63.029079][ T1384] RIP: 0033:0x7efd7d8bffc9 [ 63.033505][ T1384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.053116][ T1384] RSP: 002b:00007efd7c328038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.061559][ T1384] RAX: ffffffffffffffda RBX: 00007efd7db16fa0 RCX: 00007efd7d8bffc9 [ 63.069613][ T1384] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 63.077706][ T1384] RBP: 00007efd7d942f91 R08: 0000000000000000 R09: 0000000000000000 [ 63.085705][ T1384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.093674][ T1384] R13: 00007efd7db17038 R14: 00007efd7db16fa0 R15: 00007ffe984bb8d8 [ 63.101659][ T1384] [ 63.104157][ T1384] Allocated by task 1384: [ 63.108504][ T1384] __kasan_kmalloc+0xda/0x110 [ 63.113192][ T1384] __kmalloc+0x1a7/0x330 [ 63.117493][ T1384] sk_prot_alloc+0xb2/0x340 [ 63.122100][ T1384] sk_alloc+0x38/0x4e0 [ 63.126316][ T1384] pfkey_create+0x12a/0x660 [ 63.130868][ T1384] __sock_create+0x38d/0x770 [ 63.135459][ T1384] __sys_socket+0xec/0x190 [ 63.139894][ T1384] __x64_sys_socket+0x7a/0x90 [ 63.144571][ T1384] do_syscall_64+0x31/0x40 [ 63.148982][ T1384] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 63.154874][ T1384] [ 63.157207][ T1384] The buggy address belongs to the object at ffff88810f6aa800 [ 63.157207][ T1384] which belongs to the cache kmalloc-1k of size 1024 [ 63.171257][ T1384] The buggy address is located 984 bytes inside of [ 63.171257][ T1384] 1024-byte region [ffff88810f6aa800, ffff88810f6aac00) [ 63.184606][ T1384] The buggy address belongs to the page: [ 63.190263][ T1384] page:ffffea00043daa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f6a8 [ 63.200514][ T1384] head:ffffea00043daa00 order:3 compound_mapcount:0 compound_pincount:0 [ 63.208844][ T1384] flags: 0x4000000000010200(slab|head) [ 63.214305][ T1384] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100042f00 [ 63.222989][ T1384] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 63.231571][ T1384] page dumped because: kasan: bad access detected [ 63.237978][ T1384] page_owner tracks the page as allocated [ 63.243707][ T1384] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 95, ts 5229427874, free_ts 0 [ 63.261677][ T1384] prep_new_page+0x179/0x180 [ 63.266280][ T1384] get_page_from_freelist+0x2235/0x23d0 [ 63.271820][ T1384] __alloc_pages_nodemask+0x268/0x5f0 [ 63.277281][ T1384] new_slab+0x84/0x3f0 [ 63.281355][ T1384] ___slab_alloc+0x2a6/0x450 [ 63.285939][ T1384] __slab_alloc+0x63/0xa0 [ 63.290265][ T1384] __kmalloc_track_caller+0x1ef/0x320 [ 63.295631][ T1384] __alloc_skb+0xdc/0x520 [ 63.299957][ T1384] netlink_sendmsg+0x5f6/0xb30 [ 63.304713][ T1384] ____sys_sendmsg+0x5a2/0x8c0 [ 63.309467][ T1384] ___sys_sendmsg+0x1f0/0x260 [ 63.314323][ T1384] __x64_sys_sendmsg+0x1e2/0x2a0 [ 63.319258][ T1384] do_syscall_64+0x31/0x40 [ 63.323670][ T1384] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 63.329576][ T1384] page_owner free stack trace missing [ 63.334965][ T1384] [ 63.337287][ T1384] Memory state around the buggy address: [ 63.342918][ T1384] ffff88810f6aaa80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 63.350976][ T1384] ffff88810f6aab00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 63.359063][ T1384] >ffff88810f6aab80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 63.367146][ T1384] ^ [ 63.374095][ T1384] ffff88810f6aac00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.382152][ T1384] ffff88810f6aac80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.390201][ T1384] ================================================================== [ 63.398337][ T1384] Disabling lock debugging due to kernel taint [ 63.409332][ T24] audit: type=1400 audit(1761488902.310:1134): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 63.431767][ T24] audit: type=1400 audit(1761488902.310:1135): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.453563][ T24] audit: type=1400 audit(1761488902.310:1136): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.478225][ T1008] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 63.478754][ T24] audit: type=1400 audit(1761488902.310:1137): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.506783][ T24] audit: type=1400 audit(1761488902.310:1138): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.527466][ T24] audit: type=1400 audit(1761488902.310:1139): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.550805][ T24] audit: type=1400 audit(1761488902.310:1140): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.660290][ T1008] usb 5-1: no configurations [ 63.665000][ T1008] usb 5-1: can't read configurations, error -22 [ 63.671913][ T1008] usb usb5-port1: unable to enumerate USB device [ 63.678605][ T15] usb 3-1: USB disconnect, device number 4 [ 63.700293][ T679] uvcvideo: Found UVC 0.00 device syz (8086:0b07) [ 63.706819][ T679] uvcvideo: No valid video chain found. [ 63.720978][ T679] usb 4-1: USB disconnect, device number 6