last executing test programs: 6.46548358s ago: executing program 0 (id=843): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000c3"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc300) 6.432292743s ago: executing program 0 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESOCT], 0x0, 0x3, 0x0, 0x0, 0x0, 0x34}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) 5.719620286s ago: executing program 2 (id=851): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000c3"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc300) 5.708799467s ago: executing program 2 (id=853): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000500)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@hash}, {@uid_lt}, {@hash}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}, {@fowner_eq}]}, 0xff, 0x494, &(0x7f0000000b00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='i2c_read\x00', r4}, 0x10) 5.52959966s ago: executing program 0 (id=857): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000c3"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc300) 5.505430202s ago: executing program 0 (id=858): bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x63, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4.700672951s ago: executing program 2 (id=860): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(0xffffffffffffffff, 0x0, 0x63, 0x10000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7ffe}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 4.431598502s ago: executing program 0 (id=861): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@ifindex, 0xffffffffffffffff, 0x10, 0x0, 0x0, @prog_id}, 0x20) 4.364076996s ago: executing program 0 (id=862): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x22, 0x6, "5e14071f2620"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000e00)={0x0, 0x31, 0x1, '~'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000280)={0x40, 0x10, 0x3, "d363df"}, 0x0, 0x0, 0x0, 0x0}) 4.074433308s ago: executing program 4 (id=867): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f00"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x0, 0x200}) 3.951883677s ago: executing program 3 (id=870): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000500)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@hash}, {@uid_lt}, {@hash}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}, {@fowner_eq}]}, 0xff, 0x494, &(0x7f0000000b00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='i2c_read\x00', r4}, 0x10) 3.831428366s ago: executing program 2 (id=871): bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x63, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.078075692s ago: executing program 3 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESOCT], 0x0, 0x3, 0x0, 0x0, 0x0, 0x34}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 2.988108129s ago: executing program 2 (id=873): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220700000059b4fafbef"], 0x0}, 0x0) 2.197105717s ago: executing program 3 (id=874): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x400000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.068865037s ago: executing program 4 (id=875): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000c3"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc300) 2.064208747s ago: executing program 4 (id=876): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "fdffffffffffffff"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = syz_open_pts(r0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) 2.009019351s ago: executing program 3 (id=878): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000400), &(0x7f00000004c0)=r4}, 0x20) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1700000055000100000000000000000007"], 0x38}}, 0x0) 1.995441362s ago: executing program 1 (id=879): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x8000, 0x0) 1.961536255s ago: executing program 1 (id=880): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000c3"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc300) 1.920911168s ago: executing program 1 (id=881): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(0xffffffffffffffff, 0x0, 0x63, 0x10000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7ffe}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 1.181961842s ago: executing program 4 (id=882): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000500)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@hash}, {@uid_lt}, {@hash}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}, {@fowner_eq}]}, 0xff, 0x494, &(0x7f0000000b00)="$eJzs3M1rHOUfAPDvTDZ9/zX51frSWjBaxeBL0qat9qAHRcGDgqKHeoxJWmq3rTQRbCmYitSjFLyLR8G/wJMnUU+CFw96l0LRIth6cWV2Z5LddSc2r7txPx/YZp6ZZ+Z5vnnm2X3yPDsNoG+NZP8kEbsi4qeIGGokWzOMNH7cunl56vbNy1NJ1Gqv/5rU8/1x8/JUkbU4b2eeGE0j0g+TvJBWsxcvnZmsVmcu5OnxubPvjM9evPTk6bOTp2ZOzZybOH786JHDTz81cazlvGMrjHN3/vPAvpfevPbK1Ilrb337RVbfNN/fHMdaGckC/61W137skbUurMv+qi3GmVS6XRvu1EBEZM01WO//QzEQi403FC9+0NXKAesqe8/eWn54vlZqS9MVgM0p0YOhTxUf9Nnfv/lrcAOGHT3jxnONP4Cy2G/lr8aRysLcwHr+QkYi4sT8n59mr2ibh6h1mDcAAFitr7LxzxMt4798/JHGPU35dudrQ8MR8f+I2BMRd0XE3oi4O6Ke996IuG+Z5bcvDf1zHSa9vqLA7lA2/nsmX9tqHf8Vo78YHshT/6vHP5icPF2dOZT/TkZjcOvJtOTixf4Xfvi4rPzm8V/2ysovxoL5Ra5X2ibopifnJtdqUHrjSsT+Sqf4k4WVgCQi9kXE/uVdulhyi9OPfX6gLNO/x7+ENVhnqn0W8Wij/eejLf5CsvT65Pi2qM4cGm/cFQMdyvju+6uvlpW/qvjXQNb+O1rv/7YcQ78nzeu1s8sv4+rPH5WurVZWeP9vSd6or1kXs9DvTc7NXTgcsSV5uZ5u2T+xeG6RLvJn8Y8e7Nz/9+TnZPHfHxEHIn4sut0Deds9GBEPRcTBJeL/5vmH3y471gvtP93x/W/h/h9ubf/lbwyc+frLsvLb40/y9GKOrP2P1rdG8z3197/c9pLrlldnW55jpXczAAAAbD5pROyKJB1b2E7TsbHGd/j3xo60en527vGT5989N914RmA4BtNi/nOoaT70cDKfX7GRnsjniovjR/J5408GtidJVGfGps5Xp7scO/S7nSX9P/NLp8nsiHh2Q2sIrCvPa0H/au//Zd9nAP57mvp/0s16ABvP+B/6l/4P/avo/6817Xu/LU/JWgCwyfn8h/6l/0P/Wuj/V7pbD2Dj+fyHvtTpIfni/zhYxSP/q9qoLPH0fo9uFLOjvVKfM0lErG8RkfZGpKUbkX+dpVfqs/yN27UVnl5Zonff6UZ33o8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW2t8BAAD//6JL2cg=") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='i2c_read\x00', r4}, 0x10) 1.055617162s ago: executing program 1 (id=883): bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x63, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.013011975s ago: executing program 3 (id=884): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 1.001364055s ago: executing program 3 (id=885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 690.784299ms ago: executing program 2 (id=886): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000006c0)=':\x00', &(0x7f0000000700)='ext4_mark_inode_dirty\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%\xea\xfbq', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000540)='&+\x00', &(0x7f0000000740)="8f", 0x1) close(r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000100)) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9644", 0x20, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x9}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x6, [0x7]}]}}}}}}}}, 0x0) 168.233388ms ago: executing program 4 (id=887): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000c3"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc300) 159.909898ms ago: executing program 1 (id=888): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x400000, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 151.394699ms ago: executing program 4 (id=889): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc216, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="002205000000ff"], 0x0}, 0x0) 0s ago: executing program 1 (id=890): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000c3"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc300) kernel console output (not intermixed with test programs): d wMaxPacketSize 0 [ 35.977131][ T295] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 35.986757][ T295] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 35.996431][ T295] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 36.006063][ T295] usb 2-1: config 1 interface 0 has no altsetting 0 [ 36.013679][ T295] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 36.067672][ T542] loop2: detected capacity change from 0 to 256 [ 36.076336][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.148930][ T542] exfat: Unknown parameter 'emask' [ 36.161512][ T295] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 36.245997][ T310] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.257167][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 36.264429][ T310] usb 1-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 36.273629][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.302719][ T310] usb 1-1: config 0 descriptor?? [ 36.381776][ T295] scsi host1: usb-storage 2-1:1.0 [ 36.800252][ T295] usb 2-1: USB disconnect, device number 2 [ 36.858955][ T310] logitech 0003:046D:C216.0001: unexpected long global item [ 36.866319][ T310] logitech 0003:046D:C216.0001: parse failed [ 36.872787][ T310] logitech: probe of 0003:046D:C216.0001 failed with error -22 [ 37.077144][ T295] usb 1-1: USB disconnect, device number 3 [ 37.153202][ T556] loop4: detected capacity change from 0 to 40427 [ 37.219566][ T556] F2FS-fs (loop4): invalid crc value [ 37.226746][ T556] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.281669][ T556] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 37.432078][ T572] loop3: detected capacity change from 0 to 256 [ 37.518792][ T572] exfat: Unknown parameter 'emask' [ 37.660083][ T576] loop1: detected capacity change from 0 to 128 [ 37.697752][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.757159][ T30] audit: type=1400 audit(1725113337.960:203): avc: denied { ioctl } for pid=580 comm="syz.0.60" path="socket:[15215]" dev="sockfs" ino=15215 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.801304][ T30] audit: type=1400 audit(1725113338.010:204): avc: denied { ioctl } for pid=583 comm="syz.4.58" path="socket:[15956]" dev="sockfs" ino=15956 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.859562][ T30] audit: type=1400 audit(1725113338.070:205): avc: denied { read write } for pid=590 comm="syz.4.62" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.898805][ T30] audit: type=1400 audit(1725113338.070:206): avc: denied { open } for pid=590 comm="syz.4.62" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.922632][ T30] audit: type=1400 audit(1725113338.110:207): avc: denied { read } for pid=590 comm="syz.4.62" name="rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.087759][ T310] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 38.101418][ T310] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 38.255786][ T596] kvm [595]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000 [ 38.267986][ T310] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 38.278143][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.286998][ T310] usb 3-1: Product: syz [ 38.295532][ T310] usb 3-1: Manufacturer: syz [ 38.302275][ T310] usb 3-1: SerialNumber: syz [ 38.329871][ T310] usb 3-1: config 0 descriptor?? [ 38.357783][ T566] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 38.365401][ T566] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 38.579667][ T566] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 38.586720][ T566] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 38.638522][ T617] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 38.647586][ T617] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 38.735013][ T619] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.742021][ T619] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.756430][ T619] device bridge_slave_0 entered promiscuous mode [ 38.771253][ T619] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.780976][ T619] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.789575][ T619] device bridge_slave_1 entered promiscuous mode [ 38.798864][ T629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.76'. [ 38.808799][ T629] Zero length message leads to an empty skb [ 38.933677][ T619] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.940722][ T619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.947946][ T619] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.955161][ T619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.977678][ T323] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.986805][ T10] device bridge_slave_1 left promiscuous mode [ 38.993661][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.004712][ T10] device bridge_slave_0 left promiscuous mode [ 39.013044][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.024831][ T10] device veth1_macvtap left promiscuous mode [ 39.030958][ T10] device veth0_vlan left promiscuous mode [ 39.169317][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.177180][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.185044][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.196408][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.205134][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.212065][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.228868][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.237219][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.244193][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.260505][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.268599][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.289051][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.299079][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.307130][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.315131][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.323538][ T619] device veth0_vlan entered promiscuous mode [ 39.337119][ T619] device veth1_macvtap entered promiscuous mode [ 39.343328][ T323] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.353942][ T323] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 39.363129][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.387595][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.396046][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.408913][ T323] usb 1-1: config 0 descriptor?? [ 39.420952][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.660481][ T26] usb 1-1: USB disconnect, device number 4 [ 39.677711][ T329] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 39.707293][ T644] loop4: detected capacity change from 0 to 128 [ 39.778238][ T644] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.790442][ T644] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.126085][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 40.247774][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.277786][ T329] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 40.285930][ T329] usb 2-1: config 179 has no interface number 0 [ 40.292166][ T329] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 40.303538][ T329] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 40.314976][ T329] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 40.326013][ T329] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 40.339166][ T329] usb 2-1: config 179 interface 65 has no altsetting 0 [ 40.345782][ T329] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 40.354647][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.387757][ T635] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 40.409827][ T329] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 40.627718][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.646407][ T26] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 40.667988][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.681410][ T26] usb 1-1: config 0 descriptor?? [ 40.800366][ T329] usb 2-1: USB disconnect, device number 3 [ 40.817740][ T329] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 40.924208][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 40.924224][ T30] audit: type=1400 audit(1725113341.130:220): avc: denied { write } for pid=656 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.952605][ T30] audit: type=1400 audit(1725113341.130:221): avc: denied { nlmsg_write } for pid=656 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.959415][ T658] overlayfs: missing 'lowerdir' [ 41.247987][ T295] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 41.377807][ T310] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 41.388533][ T310] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 5e:14:07:1f:26:20 [ 41.402125][ T310] usb 3-1: USB disconnect, device number 4 [ 41.409702][ T310] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 41.421056][ T30] audit: type=1400 audit(1725113341.630:222): avc: denied { watch } for pid=663 comm="syz.3.86" path="/20/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 41.488518][ T295] usb 5-1: Using ep0 maxpacket: 16 [ 41.607746][ T295] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 41.617146][ T295] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 41.627538][ T295] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 41.637256][ T295] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 41.646853][ T295] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 41.657071][ T295] usb 5-1: config 1 interface 0 has no altsetting 0 [ 41.664010][ T295] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 41.675945][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.718590][ T295] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 41.934719][ T329] usb 1-1: USB disconnect, device number 5 [ 41.938527][ T295] scsi host1: usb-storage 5-1:1.0 [ 42.108533][ T707] kvm [706]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000 [ 42.222804][ T713] loop3: detected capacity change from 0 to 128 [ 42.597717][ T295] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 42.637178][ T738] loop2: detected capacity change from 0 to 2048 [ 42.719499][ T738] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.837704][ T295] usb 4-1: Using ep0 maxpacket: 32 [ 42.842718][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 42.843150][ T742] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.865175][ T742] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 42.877422][ T742] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.877422][ T742] [ 42.887092][ T742] EXT4-fs (loop2): Total free blocks count 0 [ 42.893561][ T742] EXT4-fs (loop2): Free/Dirty block details [ 42.899432][ T742] EXT4-fs (loop2): free_blocks=2415919104 [ 42.904912][ T742] EXT4-fs (loop2): dirty_blocks=64 [ 42.909898][ T742] EXT4-fs (loop2): Block reservation details [ 42.915687][ T742] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 42.967793][ T295] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.978962][ T295] usb 4-1: config 0 interface 0 has no altsetting 0 [ 42.985531][ T295] usb 4-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 42.994415][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.002966][ T295] usb 4-1: config 0 descriptor?? [ 43.009307][ T323] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 43.097702][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 43.163420][ T30] audit: type=1400 audit(1725113343.370:223): avc: denied { setopt } for pid=746 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.197024][ T749] loop1: detected capacity change from 0 to 128 [ 43.217906][ T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 43.226920][ T26] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 43.237946][ T26] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 43.247420][ T26] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 43.257106][ T26] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 43.267542][ T26] usb 1-1: config 1 interface 0 has no altsetting 0 [ 43.274498][ T26] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 43.274508][ T329] usb 5-1: USB disconnect, device number 3 [ 43.274527][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.283471][ T703] sddr09: could not read card info [ 43.305529][ T8] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 43.312977][ T8] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 43.320643][ T8] sd 1:0:0:0: [sdb] Write Protect is off [ 43.326364][ T8] sd 1:0:0:0: [sdb] Asking for cache data failed [ 43.332988][ T8] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 43.338324][ T26] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 43.344631][ T8] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 43.369537][ T313] udevd[313]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 43.520966][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 43.533728][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.533728][ T45] [ 43.543296][ T295] usbhid 4-1:0.0: can't add hid device: -71 [ 43.549190][ T295] usbhid: probe of 4-1:0.0 failed with error -71 [ 43.559550][ T295] usb 4-1: USB disconnect, device number 4 [ 43.577570][ T30] audit: type=1400 audit(1725113343.780:224): avc: denied { unmount } for pid=619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 43.602577][ T26] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 43.610521][ T26] usb 1-1: USB disconnect, device number 6 [ 43.625766][ T770] loop1: detected capacity change from 0 to 512 [ 43.637387][ T770] EXT4-fs (loop1): 1 truncate cleaned up [ 43.643215][ T770] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.818149][ T30] audit: type=1400 audit(1725113344.030:225): avc: denied { create } for pid=768 comm="syz.1.115" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.944260][ T30] audit: type=1400 audit(1725113344.150:226): avc: denied { create } for pid=778 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.243379][ T787] loop0: detected capacity change from 0 to 128 [ 44.607287][ T799] loop0: detected capacity change from 0 to 1024 [ 44.764220][ T799] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 44.848309][ T30] audit: type=1400 audit(1725113345.060:227): avc: denied { read write open } for pid=798 comm="syz.0.126" path="/28/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.923232][ T30] audit: type=1400 audit(1725113345.080:228): avc: denied { mounton } for pid=798 comm="syz.0.126" path="/28/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.948922][ T287] EXT4-fs error (device loop0): ext4_map_blocks:602: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 44.984051][ T287] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 44.997839][ T310] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.007771][ T332] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 45.015747][ T287] EXT4-fs error (device loop0): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 45.081584][ T806] loop1: detected capacity change from 0 to 40427 [ 45.122148][ T806] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 45.130342][ T806] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 45.155204][ T806] F2FS-fs (loop1): Found nat_bits in checkpoint [ 45.198337][ T806] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 45.205314][ T806] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 45.222660][ T30] audit: type=1400 audit(1725113345.430:229): avc: denied { ioctl } for pid=805 comm="syz.1.129" path="/17/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=10 ioctlcmd=0x6614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.267732][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 45.272831][ T332] usb 3-1: Using ep0 maxpacket: 32 [ 45.283227][ T824] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.290683][ T824] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.298779][ T824] device bridge_slave_0 entered promiscuous mode [ 45.308306][ T824] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.315295][ T824] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.322981][ T824] device bridge_slave_1 entered promiscuous mode [ 45.397850][ T332] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.409077][ T310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 45.418186][ T310] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 45.428045][ T332] usb 3-1: config 0 interface 0 has no altsetting 0 [ 45.434587][ T332] usb 3-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 45.434616][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.435306][ T332] usb 3-1: config 0 descriptor?? [ 45.435388][ T310] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 45.435417][ T310] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 45.435440][ T310] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 45.435464][ T310] usb 4-1: config 1 interface 0 has no altsetting 0 [ 45.435491][ T310] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 45.435515][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.465499][ T824] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.479153][ T310] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 45.487690][ T824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.487805][ T824] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.487821][ T824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.562729][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.570520][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.578196][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.590399][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.600300][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.607144][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.627769][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.635798][ T836] loop1: detected capacity change from 0 to 128 [ 45.642128][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.649008][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.673426][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.688023][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.707791][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.724191][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.732542][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.740878][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.748917][ T824] device veth0_vlan entered promiscuous mode [ 45.759411][ T310] ums-sddr09: probe of 4-1:1.0 failed with error -22 [ 45.773309][ T310] usb 4-1: USB disconnect, device number 5 [ 45.783855][ T824] device veth1_macvtap entered promiscuous mode [ 45.796196][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.815632][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.839025][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.867512][ T10] device bridge_slave_1 left promiscuous mode [ 45.887759][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.890617][ T840] loop0: detected capacity change from 0 to 2048 [ 45.909434][ T10] device bridge_slave_0 left promiscuous mode [ 45.917128][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.929002][ T10] device veth1_macvtap left promiscuous mode [ 45.935066][ T10] device veth0_vlan left promiscuous mode [ 45.987741][ T332] usbhid 3-1:0.0: can't add hid device: -71 [ 45.995878][ T332] usbhid: probe of 3-1:0.0 failed with error -71 [ 46.010687][ T849] loop4: detected capacity change from 0 to 512 [ 46.015986][ T332] usb 3-1: USB disconnect, device number 5 [ 46.027603][ T840] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.082130][ T849] EXT4-fs (loop4): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 46.173764][ T851] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.190225][ T851] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 46.203674][ T851] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.203674][ T851] [ 46.213518][ T851] EXT4-fs (loop0): Total free blocks count 0 [ 46.219498][ T851] EXT4-fs (loop0): Free/Dirty block details [ 46.225589][ T851] EXT4-fs (loop0): free_blocks=2415919104 [ 46.232071][ T851] EXT4-fs (loop0): dirty_blocks=64 [ 46.236958][ T851] EXT4-fs (loop0): Block reservation details [ 46.242776][ T851] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 46.328848][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 46.328863][ T30] audit: type=1400 audit(1725113346.540:233): avc: denied { unmount } for pid=619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 46.597859][ T337] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 46.749329][ T325] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 46.762950][ T325] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.762950][ T325] [ 46.901452][ T30] audit: type=1400 audit(1725113347.110:234): avc: denied { prog_load } for pid=877 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 46.920164][ T337] usb 4-1: Using ep0 maxpacket: 16 [ 46.961946][ T30] audit: type=1400 audit(1725113347.130:235): avc: denied { bpf } for pid=877 comm="syz.4.154" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.983333][ T30] audit: type=1400 audit(1725113347.130:236): avc: denied { perfmon } for pid=877 comm="syz.4.154" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.011054][ T30] audit: type=1400 audit(1725113347.130:237): avc: denied { read write } for pid=619 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.025269][ T894] loop2: detected capacity change from 0 to 128 [ 47.040308][ T30] audit: type=1400 audit(1725113347.130:238): avc: denied { prog_run } for pid=877 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.060070][ T30] audit: type=1400 audit(1725113347.130:239): avc: denied { open } for pid=619 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.062080][ T337] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 47.086239][ T30] audit: type=1400 audit(1725113347.130:240): avc: denied { ioctl } for pid=619 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.103757][ T337] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 47.128664][ T30] audit: type=1400 audit(1725113347.140:241): avc: denied { read write } for pid=877 comm="syz.4.154" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.131102][ T337] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 47.154740][ T337] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 47.173827][ T30] audit: type=1400 audit(1725113347.140:242): avc: denied { open } for pid=877 comm="syz.4.154" path="/dev/raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.237673][ T332] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 47.239660][ T337] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 47.245408][ T329] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 47.255295][ T337] usb 4-1: config 1 interface 0 has no altsetting 0 [ 47.268722][ T337] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 47.277585][ T337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.321006][ T337] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 47.678715][ T337] scsi host1: usb-storage 4-1:1.0 [ 47.714605][ T909] loop1: detected capacity change from 0 to 512 [ 47.787746][ T329] usb 1-1: Using ep0 maxpacket: 32 [ 47.792723][ T332] usb 5-1: Using ep0 maxpacket: 16 [ 47.798532][ T909] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 47.907759][ T329] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.918909][ T332] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 47.927828][ T332] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 47.937450][ T329] usb 1-1: config 0 interface 0 has no altsetting 0 [ 47.960161][ T329] usb 1-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 47.971705][ T332] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 47.981643][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.989642][ T332] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 47.999640][ T332] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 48.010036][ T329] usb 1-1: config 0 descriptor?? [ 48.014952][ T332] usb 5-1: config 1 interface 0 has no altsetting 0 [ 48.022026][ T332] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 48.319881][ T916] loop2: detected capacity change from 0 to 128 [ 48.335826][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.708376][ T337] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 48.778282][ T332] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 48.814659][ T919] loop1: detected capacity change from 0 to 256 [ 48.856217][ T924] 9p: Unknown uid 18446744073709551615 [ 48.917738][ T926] loop2: detected capacity change from 0 to 128 [ 48.951692][ T329] usbhid 1-1:0.0: can't add hid device: -71 [ 48.957515][ T329] usbhid: probe of 1-1:0.0 failed with error -71 [ 48.965252][ T329] usb 1-1: USB disconnect, device number 7 [ 49.018789][ T332] ums-sddr09: probe of 5-1:1.0 failed with error -22 [ 49.028148][ T332] usb 5-1: USB disconnect, device number 4 [ 49.063367][ T308] usb 4-1: USB disconnect, device number 6 [ 49.077719][ T907] sddr09: could not read card info [ 49.081014][ T937] 9p: Unknown uid 18446744073709551615 [ 49.086037][ T10] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 49.103342][ T10] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 49.122250][ T10] sd 1:0:0:0: [sdb] Write Protect is off [ 49.133925][ T10] sd 1:0:0:0: [sdb] Asking for cache data failed [ 49.147850][ T10] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 49.148795][ T945] loop1: detected capacity change from 0 to 512 [ 49.165499][ T10] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 49.188035][ T945] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 49.215915][ T348] udevd[348]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 49.279248][ T950] 9p: Unknown uid 18446744073709551615 [ 49.750242][ T959] loop3: detected capacity change from 0 to 128 [ 49.767554][ T961] 9p: Unknown uid 18446744073709551615 [ 49.795663][ T963] loop0: detected capacity change from 0 to 2048 [ 49.821625][ T967] 9p: Unknown uid 18446744073709551615 [ 49.882574][ T963] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.196459][ T988] 9p: Unknown uid 18446744073709551615 [ 50.289408][ T989] loop1: detected capacity change from 0 to 512 [ 50.467485][ T989] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.189: iget: bad extended attribute block 1 [ 50.484895][ T989] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.189: couldn't read orphan inode 15 (err -117) [ 50.503324][ T989] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,norecovery,,errors=continue. Quota mode: none. [ 51.056299][ T1000] 9p: Unknown uid 18446744073709551615 [ 51.098034][ T1002] loop3: detected capacity change from 0 to 128 [ 51.136702][ T1004] 9p: Unknown uid 18446744073709551615 [ 51.192765][ T1006] loop4: detected capacity change from 0 to 512 [ 51.247735][ T993] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 51.289119][ T1006] EXT4-fs (loop4): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 51.407792][ T308] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 51.451875][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 51.451893][ T30] audit: type=1400 audit(1725113351.660:290): avc: denied { mount } for pid=1016 comm="syz.0.202" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.555912][ T30] audit: type=1400 audit(1725113351.690:291): avc: denied { confidentiality } for pid=1012 comm="syz.1.201" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 51.592825][ T30] audit: type=1400 audit(1725113351.730:292): avc: denied { unmount } for pid=824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.621782][ T1021] loop0: detected capacity change from 0 to 2048 [ 51.677699][ T308] usb 3-1: Using ep0 maxpacket: 32 [ 51.689417][ T1021] FAT-fs (loop0): Unrecognized mount option "00000000000000000000" or missing value [ 51.711376][ T30] audit: type=1400 audit(1725113351.920:293): avc: denied { mount } for pid=1020 comm="syz.0.204" name="/" dev="configfs" ino=13269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 51.742460][ T30] audit: type=1400 audit(1725113351.920:294): avc: denied { mounton } for pid=1020 comm="syz.0.204" path="/" dev="configfs" ino=13269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.775706][ T30] audit: type=1400 audit(1725113351.920:295): avc: denied { unmount } for pid=824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.804811][ T30] audit: type=1400 audit(1725113351.950:296): avc: denied { unmount } for pid=824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 51.857784][ T308] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.872859][ T308] usb 3-1: config 0 interface 0 has no altsetting 0 [ 51.881542][ T308] usb 3-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 51.893412][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.907823][ T308] usb 3-1: config 0 descriptor?? [ 51.941284][ T30] audit: type=1400 audit(1725113352.150:297): avc: denied { integrity } for pid=1025 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 51.982135][ T30] audit: type=1400 audit(1725113352.190:298): avc: denied { mounton } for pid=1026 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 52.009440][ T30] audit: type=1400 audit(1725113352.190:299): avc: denied { mount } for pid=1026 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 52.070196][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.078941][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.091429][ T1026] device bridge_slave_0 entered promiscuous mode [ 52.103380][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.111332][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.112981][ T1032] 9p: Unknown uid 18446744073709551615 [ 52.120413][ T1026] device bridge_slave_1 entered promiscuous mode [ 52.216256][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.223255][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.230846][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.237924][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.261722][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.270695][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.275961][ T1038] loop4: detected capacity change from 0 to 128 [ 52.283852][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.311726][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.320431][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.329399][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.336276][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.345032][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.353627][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.360517][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.368509][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.390356][ T1040] loop1: detected capacity change from 0 to 128 [ 52.401485][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.658423][ T308] logitech 0003:046D:C216.0002: unexpected long global item [ 52.666736][ T308] logitech 0003:046D:C216.0002: parse failed [ 52.673108][ T308] logitech: probe of 0003:046D:C216.0002 failed with error -22 [ 52.694121][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.703419][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.712130][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.731473][ T1026] device veth0_vlan entered promiscuous mode [ 52.764395][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.769684][ T323] usb 3-1: USB disconnect, device number 6 [ 52.777193][ T1026] device veth1_macvtap entered promiscuous mode [ 52.804636][ T10] device bridge_slave_1 left promiscuous mode [ 52.816456][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.826010][ T10] device bridge_slave_0 left promiscuous mode [ 52.836887][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.847855][ T10] device veth1_macvtap left promiscuous mode [ 52.854595][ T10] device veth0_vlan left promiscuous mode [ 52.891001][ T1051] loop3: detected capacity change from 0 to 128 [ 52.911729][ T1053] loop4: detected capacity change from 0 to 128 [ 52.940942][ T1053] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.954610][ T1053] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.039844][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.055721][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.079343][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.091077][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.145680][ T1061] loop1: detected capacity change from 0 to 512 [ 53.191191][ T1061] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 53.653011][ T1071] loop0: detected capacity change from 0 to 128 [ 53.742973][ T1077] syz.3.225[1077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.743055][ T1077] syz.3.225[1077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.893521][ T1086] futex_wake_op: syz.3.229 tries to shift op by 32; fix this program [ 53.935226][ T1086] loop3: detected capacity change from 0 to 512 [ 53.983467][ T1086] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 54.022162][ T1086] EXT4-fs (loop3): Unrecognized mount option "hash" or missing value [ 54.089586][ T1086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=1086 comm=syz.3.229 [ 54.110583][ T1098] loop0: detected capacity change from 0 to 128 [ 54.207702][ T323] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 54.452712][ T323] usb 5-1: Using ep0 maxpacket: 32 [ 54.598107][ T323] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.677077][ T323] usb 5-1: config 0 interface 0 has no altsetting 0 [ 54.707700][ T323] usb 5-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 54.725472][ T323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.756376][ T323] usb 5-1: config 0 descriptor?? [ 54.794612][ T1123] loop1: detected capacity change from 0 to 512 [ 54.864798][ T1111] loop2: detected capacity change from 0 to 40427 [ 54.908096][ T1123] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 54.954454][ T1111] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 54.964024][ T1111] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 54.983825][ T1111] F2FS-fs (loop2): Found nat_bits in checkpoint [ 55.041399][ T1111] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 55.049436][ T1111] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 55.205246][ T1129] handle_bad_sector: 6041 callbacks suppressed [ 55.205269][ T1129] attempt to access beyond end of device [ 55.205269][ T1129] loop2: rw=2049, want=78288, limit=40427 [ 55.238733][ T323] logitech 0003:046D:C216.0003: unexpected long global item [ 55.246781][ T323] logitech 0003:046D:C216.0003: parse failed [ 55.258477][ T1143] loop0: detected capacity change from 0 to 128 [ 55.266142][ T323] logitech: probe of 0003:046D:C216.0003 failed with error -22 [ 55.309531][ T1111] attempt to access beyond end of device [ 55.309531][ T1111] loop2: rw=2049, want=81920, limit=40427 [ 55.343718][ T1111] attempt to access beyond end of device [ 55.343718][ T1111] loop2: rw=2049, want=50560, limit=40427 [ 55.440067][ T6] usb 5-1: USB disconnect, device number 5 [ 55.877679][ T332] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 55.954989][ T1168] loop4: detected capacity change from 0 to 128 [ 56.035111][ T1177] loop3: detected capacity change from 0 to 512 [ 56.094666][ T1177] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 56.157664][ T332] usb 3-1: Using ep0 maxpacket: 16 [ 56.287945][ T332] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 56.329541][ T332] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 56.346939][ T332] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 56.359240][ T332] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 56.373876][ T332] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 56.387168][ T332] usb 3-1: config 1 interface 0 has no altsetting 0 [ 56.403921][ T332] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 56.431904][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.482991][ T1193] loop0: detected capacity change from 0 to 1024 [ 56.498620][ T332] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 56.949881][ T1193] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 57.028295][ T332] scsi host1: usb-storage 3-1:1.0 [ 57.072135][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 57.072155][ T30] audit: type=1400 audit(1725113357.280:322): avc: denied { mounton } for pid=1192 comm="syz.0.269" path="/13/file1/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.221469][ T6] usb 3-1: USB disconnect, device number 7 [ 57.327946][ T332] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 57.347296][ T1215] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 57.378965][ T1215] EXT4-fs error (device loop0): ext4_dirty_inode:6024: inode #12: comm syz.0.269: mark_inode_dirty error [ 57.414708][ T30] audit: type=1400 audit(1725113357.620:323): avc: denied { read } for pid=1214 comm="syz.4.274" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.444821][ T30] audit: type=1400 audit(1725113357.620:324): avc: denied { open } for pid=1214 comm="syz.4.274" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.483844][ T30] audit: type=1400 audit(1725113357.680:325): avc: denied { create } for pid=1214 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.607697][ T332] usb 2-1: Using ep0 maxpacket: 32 [ 57.704980][ T1026] EXT4-fs error (device loop0): ext4_map_blocks:602: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 57.721945][ T1026] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 57.737856][ T332] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.749738][ T1026] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 57.759756][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 57.766922][ T1026] EXT4-fs error (device loop0): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 57.778866][ T332] usb 2-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 57.788886][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.806410][ T332] usb 2-1: config 0 descriptor?? [ 58.329041][ T332] logitech 0003:046D:C216.0004: unexpected long global item [ 58.336957][ T332] logitech 0003:046D:C216.0004: parse failed [ 58.357715][ T332] logitech: probe of 0003:046D:C216.0004 failed with error -22 [ 58.369132][ T30] audit: type=1400 audit(1725113358.580:326): avc: denied { watch } for pid=1228 comm="syz.2.279" path="pipe:[19252]" dev="pipefs" ino=19252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 58.531089][ T323] usb 2-1: USB disconnect, device number 4 [ 58.585468][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.592931][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.600774][ T1233] device bridge_slave_0 entered promiscuous mode [ 58.610702][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.617855][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.626822][ T1233] device bridge_slave_1 entered promiscuous mode [ 58.784995][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.792270][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.799596][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.806990][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.844172][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.851785][ T332] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 58.861535][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.870442][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.901058][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.909987][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.953069][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.960119][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.967861][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.979293][ T1252] loop4: detected capacity change from 0 to 128 [ 58.991343][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.998676][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.006760][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.015954][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.028382][ T1252] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.048773][ T1252] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.051992][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.073937][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.084413][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.098089][ T332] usb 3-1: Using ep0 maxpacket: 16 [ 59.115406][ T917] device bridge_slave_1 left promiscuous mode [ 59.122404][ T917] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.124797][ T1258] loop1: detected capacity change from 0 to 1024 [ 59.139110][ T917] device bridge_slave_0 left promiscuous mode [ 59.155490][ T917] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.161667][ T1260] loop3: detected capacity change from 0 to 512 [ 59.173170][ T917] device veth1_macvtap left promiscuous mode [ 59.181349][ T1258] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.188031][ T917] device veth0_vlan left promiscuous mode [ 59.227863][ T332] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 59.232711][ T1260] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 59.247153][ T332] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 59.261575][ T332] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 59.289877][ T332] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 59.301389][ T332] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 59.314041][ T332] usb 3-1: config 1 interface 0 has no altsetting 0 [ 59.324047][ T332] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 59.347407][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.418282][ T332] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 59.473211][ T1233] device veth0_vlan entered promiscuous mode [ 59.496793][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.509897][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.523778][ T1233] device veth1_macvtap entered promiscuous mode [ 59.550510][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.565033][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.580233][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.593345][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.602312][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.640431][ T332] scsi host1: usb-storage 3-1:1.0 [ 59.840882][ T310] usb 3-1: USB disconnect, device number 8 [ 60.076066][ T30] audit: type=1400 audit(1725113360.280:327): avc: denied { create } for pid=1286 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.108550][ T1287] netlink: 68 bytes leftover after parsing attributes in process `syz.3.297'. [ 60.119886][ T30] audit: type=1400 audit(1725113360.310:328): avc: denied { setopt } for pid=1286 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.159509][ T30] audit: type=1400 audit(1725113360.310:329): avc: denied { write } for pid=1286 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.778008][ T1298] 9pnet: Insufficient options for proto=fd [ 60.919572][ T332] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 60.972698][ T30] audit: type=1400 audit(1725113361.180:330): avc: denied { map } for pid=1311 comm="syz.0.306" path="socket:[20671]" dev="sockfs" ino=20671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.977226][ T1313] loop3: detected capacity change from 0 to 512 [ 61.015680][ T30] audit: type=1400 audit(1725113361.220:331): avc: denied { read write } for pid=1311 comm="syz.0.306" path="socket:[20671]" dev="sockfs" ino=20671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.073447][ T1313] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 61.094860][ T1308] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 61.106273][ T1317] loop1: detected capacity change from 0 to 1024 [ 61.113934][ T1308] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 61.230689][ T332] usb 3-1: Using ep0 maxpacket: 32 [ 61.248453][ T1317] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 61.557696][ T1328] netlink: 'syz.0.310': attribute type 16 has an invalid length. [ 61.565942][ T1328] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.310'. [ 61.888098][ T332] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.251234][ T1333] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 62.412301][ T1333] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #12: comm syz.1.308: mark_inode_dirty error [ 62.427912][ T332] usb 3-1: config 0 interface 0 has no altsetting 0 [ 62.435378][ T332] usb 3-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 62.471058][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.521589][ T332] usb 3-1: config 0 descriptor?? [ 62.679836][ T619] EXT4-fs error (device loop1): ext4_map_blocks:602: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 62.730768][ T1343] 9pnet: Insufficient options for proto=fd [ 62.743884][ T619] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 62.757547][ T619] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 62.794462][ T1349] 9pnet: Insufficient options for proto=fd [ 62.863205][ T1355] loop4: detected capacity change from 0 to 16 [ 62.877750][ T329] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 62.895846][ T1355] erofs: (device loop4): mounted with root inode @ nid 36. [ 62.906062][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 62.906078][ T30] audit: type=1400 audit(1725113363.110:336): avc: denied { mounton } for pid=1354 comm="syz.4.319" path="/" dev="loop4" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.906152][ T1355] overlayfs: missing 'lowerdir' [ 62.980121][ T30] audit: type=1400 audit(1725113363.190:337): avc: denied { map } for pid=1358 comm="syz.4.322" path="/proc/183/net/snmp" dev="proc" ino=4026532611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 63.019336][ T332] logitech 0003:046D:C216.0005: unexpected long global item [ 63.039126][ T332] logitech 0003:046D:C216.0005: parse failed [ 63.051641][ T332] logitech: probe of 0003:046D:C216.0005 failed with error -22 [ 63.054715][ T1361] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.323' sets config #536871169 [ 63.063144][ T30] audit: type=1400 audit(1725113363.260:338): avc: denied { write } for pid=1360 comm="syz.4.323" name="001" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.128238][ T1366] 9pnet: Insufficient options for proto=fd [ 63.163886][ T1362] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.167672][ T329] usb 1-1: Using ep0 maxpacket: 16 [ 63.172770][ T1362] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.186903][ T1362] device bridge_slave_0 entered promiscuous mode [ 63.197142][ T1362] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.205182][ T1362] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.213094][ T1362] device bridge_slave_1 entered promiscuous mode [ 63.220988][ T332] usb 3-1: USB disconnect, device number 9 [ 63.319680][ T1362] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.326589][ T1362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.333818][ T1362] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.341052][ T1362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.350862][ T329] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 63.365556][ T1377] 9pnet: Insufficient options for proto=fd [ 63.367340][ T329] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 63.382575][ T329] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 63.408434][ T1379] 9pnet: Insufficient options for proto=fd [ 63.418203][ T329] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 63.437206][ T329] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 63.449898][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.457355][ T329] usb 1-1: config 1 interface 0 has no altsetting 0 [ 63.464607][ T329] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 63.468003][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.474689][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.490125][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.516589][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.525655][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.532820][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.538334][ T329] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 63.540514][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.555383][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.562423][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.572451][ T917] device bridge_slave_1 left promiscuous mode [ 63.579499][ T917] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.588473][ T917] device bridge_slave_0 left promiscuous mode [ 63.594920][ T917] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.604698][ T917] device veth1_macvtap left promiscuous mode [ 63.611081][ T917] device veth0_vlan left promiscuous mode [ 63.759688][ T1362] device veth0_vlan entered promiscuous mode [ 63.809437][ T329] scsi host1: usb-storage 1-1:1.0 [ 63.893297][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.905445][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.914268][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.931462][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.951589][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.968110][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.993347][ T1362] device veth1_macvtap entered promiscuous mode [ 64.005604][ T308] usb 1-1: USB disconnect, device number 8 [ 64.018193][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.029836][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.038742][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.056477][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.066442][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.075522][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.089456][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.140887][ T1408] loop1: detected capacity change from 0 to 512 [ 64.187326][ T1412] 9pnet: Insufficient options for proto=fd [ 64.201276][ T1408] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 64.261807][ T1420] 9pnet: Insufficient options for proto=fd [ 64.578403][ T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 64.734761][ T30] audit: type=1400 audit(1725113364.940:339): avc: denied { mount } for pid=1437 comm="syz.3.347" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.789222][ T30] audit: type=1400 audit(1725113365.000:340): avc: denied { block_suspend } for pid=1439 comm="syz.3.348" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.867725][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 65.008043][ T6] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.021761][ T1452] 9pnet: Insufficient options for proto=fd [ 65.035749][ T30] audit: type=1400 audit(1725113365.240:341): avc: denied { read write } for pid=1454 comm="syz.0.354" name="uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.061891][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.069448][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 65.084210][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.092192][ T30] audit: type=1400 audit(1725113365.270:342): avc: denied { open } for pid=1454 comm="syz.0.354" path="/dev/uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.125242][ T1458] loop0: detected capacity change from 0 to 128 [ 65.132444][ T6] usb 5-1: config 0 descriptor?? [ 65.160194][ T30] audit: type=1400 audit(1725113365.370:343): avc: denied { create } for pid=1464 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.180406][ T30] audit: type=1400 audit(1725113365.370:344): avc: denied { read } for pid=1466 comm="syz.2.360" path="socket:[20322]" dev="sockfs" ino=20322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.208524][ T1458] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.222659][ T1458] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.228009][ T30] audit: type=1400 audit(1725113365.370:345): avc: denied { setopt } for pid=1464 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.734013][ T308] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 65.768957][ T6] logitech 0003:046D:C216.0006: unexpected long global item [ 65.777368][ T6] logitech 0003:046D:C216.0006: parse failed [ 65.784491][ T6] logitech: probe of 0003:046D:C216.0006 failed with error -22 [ 65.906563][ T1485] loop3: detected capacity change from 0 to 512 [ 65.969737][ T6] usb 5-1: USB disconnect, device number 6 [ 65.988194][ T1485] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 66.007759][ T308] usb 2-1: Using ep0 maxpacket: 16 [ 66.176605][ T308] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 66.187000][ T308] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 66.197989][ T308] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 66.214610][ T308] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 66.315620][ T308] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 66.327317][ T308] usb 2-1: config 1 interface 0 has no altsetting 0 [ 66.334339][ T308] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 66.346411][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.410885][ T308] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 66.615865][ T1501] loop4: detected capacity change from 0 to 512 [ 66.652944][ T308] scsi host1: usb-storage 2-1:1.0 [ 66.702338][ T1501] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.717346][ T1501] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038 (0x7fffffff) [ 66.834629][ T26] usb 2-1: USB disconnect, device number 5 [ 67.117330][ T1523] netlink: 300 bytes leftover after parsing attributes in process `syz.4.376'. [ 67.217808][ T1534] loop2: detected capacity change from 0 to 512 [ 67.252584][ T1534] EXT4-fs (loop2): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 67.316188][ T1544] loop3: detected capacity change from 0 to 512 [ 67.405213][ T1544] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.421072][ T1544] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038 (0x7fffffff) [ 67.488179][ T26] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 67.612006][ T1565] loop1: detected capacity change from 0 to 512 [ 67.670011][ T1573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'. [ 67.688177][ T1565] devtmpfs: Unknown parameter 'errors' [ 67.747819][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 67.772276][ T1583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.403'. [ 67.853008][ T1591] loop3: detected capacity change from 0 to 512 [ 67.867954][ T26] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.877277][ T1593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 67.883480][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.899934][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 67.910793][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.920885][ T26] usb 5-1: config 0 descriptor?? [ 67.951706][ T1591] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 67.991117][ T1600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'. [ 68.007747][ T332] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 68.267700][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 68.281255][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 68.281273][ T30] audit: type=1400 audit(1725113368.490:371): avc: denied { setopt } for pid=1616 comm="syz.2.416" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.330422][ T30] audit: type=1400 audit(1725113368.520:372): avc: denied { connect } for pid=1616 comm="syz.2.416" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.388864][ T26] logitech 0003:046D:C216.0007: unexpected long global item [ 68.410055][ T26] logitech 0003:046D:C216.0007: parse failed [ 68.417471][ T26] logitech: probe of 0003:046D:C216.0007 failed with error -22 [ 68.427799][ T332] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 68.455046][ T332] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 68.483265][ T1632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 68.505363][ T332] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 68.534866][ T332] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 68.545280][ T332] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 68.548650][ T1638] loop2: detected capacity change from 0 to 512 [ 68.561847][ T332] usb 1-1: config 1 interface 0 has no altsetting 0 [ 68.568818][ T332] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 68.582218][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.598286][ T26] usb 5-1: USB disconnect, device number 7 [ 68.638271][ T332] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 68.647866][ T1638] EXT4-fs (loop2): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 68.727166][ T1650] loop1: detected capacity change from 0 to 512 [ 68.748636][ T1650] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 68.834588][ T1650] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 68.897829][ T1650] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 68.911371][ T332] scsi host1: usb-storage 1-1:1.0 [ 68.944326][ T30] audit: type=1326 audit(1725113369.150:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a9594eb9 code=0x7ffc0000 [ 68.987943][ T30] audit: type=1326 audit(1725113369.190:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a9594eb9 code=0x7ffc0000 [ 69.016627][ T30] audit: type=1326 audit(1725113369.190:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a9594eb9 code=0x7ffc0000 [ 69.044458][ T30] audit: type=1326 audit(1725113369.190:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a9594eb9 code=0x7ffc0000 [ 69.072713][ T30] audit: type=1326 audit(1725113369.190:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a9594eb9 code=0x7ffc0000 [ 69.104285][ T332] usb 1-1: USB disconnect, device number 9 [ 69.113370][ T30] audit: type=1326 audit(1725113369.190:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a9594eb9 code=0x7ffc0000 [ 69.140755][ T30] audit: type=1326 audit(1725113369.190:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a9594eb9 code=0x7ffc0000 [ 69.167293][ T30] audit: type=1326 audit(1725113369.190:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.2.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a9594eb9 code=0x7ffc0000 [ 69.184822][ T1674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.440'. [ 69.350005][ T1686] loop1: detected capacity change from 0 to 512 [ 69.394321][ T1686] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 69.471624][ T1697] loop4: detected capacity change from 0 to 512 [ 69.485402][ T1699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.451'. [ 69.568365][ T1697] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.593796][ T1697] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.621321][ T1711] device bridge_slave_0 left promiscuous mode [ 69.636894][ T1697] EXT4-fs (loop4): 1 orphan inode deleted [ 69.645063][ T1711] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.654279][ T1697] EXT4-fs (loop4): 1 truncate cleaned up [ 69.661306][ T1697] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,data_err=ignore,inode_readahead_blks=0x0000000000000020,resuid=0x0000000000000000,block_validity,. Quota mode: none. [ 69.769366][ T1725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.464'. [ 69.774441][ T1728] loop1: detected capacity change from 0 to 512 [ 69.790791][ T26] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 69.885645][ T1728] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 69.909676][ T1728] ext4 filesystem being mounted at /23/bus supports timestamps until 2038 (0x7fffffff) [ 69.932998][ T1728] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.466: bg 0: block 264: padding at end of block bitmap is not set [ 70.037503][ T1754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 70.037730][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 70.116974][ T1762] loop3: detected capacity change from 0 to 512 [ 70.167885][ T26] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.185863][ T1762] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 70.197727][ T26] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.204637][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 70.214282][ T308] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 70.217066][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.234991][ T26] usb 3-1: config 0 descriptor?? [ 70.405405][ T1785] loop3: detected capacity change from 0 to 512 [ 70.419999][ T1790] loop1: detected capacity change from 0 to 128 [ 70.446191][ T1785] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 70.477777][ T308] usb 1-1: Using ep0 maxpacket: 16 [ 70.520733][ T1801] loop4: detected capacity change from 0 to 512 [ 70.587480][ T1801] EXT4-fs (loop4): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 70.657891][ T308] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 70.687938][ T308] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 70.699532][ T308] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 70.712041][ T308] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 70.733279][ T308] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 70.750381][ T308] usb 1-1: config 1 interface 0 has no altsetting 0 [ 70.777274][ T308] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 70.778913][ T26] logitech 0003:046D:C216.0008: unexpected long global item [ 70.802684][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.808286][ T26] logitech 0003:046D:C216.0008: parse failed [ 70.817953][ T26] logitech: probe of 0003:046D:C216.0008 failed with error -22 [ 70.862448][ T1814] loop1: detected capacity change from 0 to 128 [ 70.878752][ T308] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 71.029397][ T26] usb 3-1: USB disconnect, device number 10 [ 71.068883][ T1824] loop3: detected capacity change from 0 to 256 [ 71.138811][ T308] scsi host1: usb-storage 1-1:1.0 [ 71.152249][ T1826] device vlan2 entered promiscuous mode [ 71.168204][ T1824] FAT-fs (loop3): Unrecognized mount option "smackfsflo" or missing value [ 71.299449][ T308] usb 1-1: USB disconnect, device number 10 [ 71.397370][ T1831] loop1: detected capacity change from 0 to 2048 [ 71.428527][ T1831] EXT4-fs (loop1): Ignoring removed orlov option [ 71.498161][ T1831] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 71.538750][ T1831] device ip6gretap0 entered promiscuous mode [ 71.549583][ T1831] device ip6gretap0 left promiscuous mode [ 71.752172][ T1859] loop1: detected capacity change from 0 to 512 [ 71.783073][ T1859] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 72.003320][ T1879] syz.0.529[1879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.003399][ T1879] syz.0.529[1879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.217679][ T295] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 72.487737][ T295] usb 4-1: Using ep0 maxpacket: 32 [ 72.587793][ T329] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 72.608748][ T295] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.628581][ T295] usb 4-1: config 0 interface 0 has no altsetting 0 [ 72.658874][ T295] usb 4-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 72.678519][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.696230][ T295] usb 4-1: config 0 descriptor?? [ 72.738230][ T1914] __nla_validate_parse: 5 callbacks suppressed [ 72.738249][ T1914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 72.867767][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 72.997782][ T329] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 73.008057][ T329] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 73.018643][ T329] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 73.029403][ T329] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 73.041506][ T329] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 73.054303][ T329] usb 3-1: config 1 interface 0 has no altsetting 0 [ 73.061786][ T329] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 73.072694][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.118262][ T329] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 73.126043][ T1932] loop0: detected capacity change from 0 to 2048 [ 73.182406][ T295] logitech 0003:046D:C216.0009: unexpected long global item [ 73.190543][ T1932] EXT4-fs (loop0): Ignoring removed orlov option [ 73.197231][ T295] logitech 0003:046D:C216.0009: parse failed [ 73.208178][ T295] logitech: probe of 0003:046D:C216.0009 failed with error -22 [ 73.212250][ T1932] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 73.234819][ T1944] loop4: detected capacity change from 0 to 512 [ 73.242346][ T1944] EXT4-fs (loop4): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 73.256689][ T1932] device ip6gretap0 entered promiscuous mode [ 73.264588][ T1932] device ip6gretap0 left promiscuous mode [ 73.338773][ T329] scsi host1: usb-storage 3-1:1.0 [ 73.360981][ T1947] loop0: detected capacity change from 0 to 1024 [ 73.392807][ T337] usb 4-1: USB disconnect, device number 7 [ 73.466703][ T1947] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 73.507780][ T1947] EXT4-fs (loop0): group descriptors corrupted! [ 73.550151][ T295] usb 3-1: USB disconnect, device number 11 [ 73.775408][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 73.775426][ T30] audit: type=1326 audit(1725113373.980:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1958 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc88f3deb9 code=0x7ffc0000 [ 73.860861][ T30] audit: type=1326 audit(1725113373.980:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1958 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbc88f3deb9 code=0x7ffc0000 [ 73.899633][ T30] audit: type=1326 audit(1725113373.980:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1958 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc88f3deb9 code=0x7ffc0000 [ 73.977800][ T30] audit: type=1326 audit(1725113374.020:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1958 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc88f3deb9 code=0x7ffc0000 [ 74.129594][ T30] audit: type=1400 audit(1725113374.340:500): avc: denied { append } for pid=1977 comm="syz.0.568" name="001" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.276157][ T30] audit: type=1326 audit(1725113374.480:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a9594eb9 code=0x7ffc0000 [ 74.325680][ T30] audit: type=1326 audit(1725113374.520:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a9594eb9 code=0x7ffc0000 [ 74.352455][ T30] audit: type=1326 audit(1725113374.520:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a9594eb9 code=0x7ffc0000 [ 74.401020][ T30] audit: type=1326 audit(1725113374.520:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a9594eb9 code=0x7ffc0000 [ 74.430858][ T30] audit: type=1326 audit(1725113374.520:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1990 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a9594eb9 code=0x7ffc0000 [ 74.542398][ T2014] loop2: detected capacity change from 0 to 512 [ 74.618260][ T2014] EXT4-fs (loop2): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 74.637713][ T337] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 74.767933][ T332] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 74.877788][ T337] usb 5-1: Using ep0 maxpacket: 32 [ 74.998132][ T337] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.017690][ T332] usb 2-1: Using ep0 maxpacket: 16 [ 75.024097][ T337] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.031923][ T337] usb 5-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 75.066440][ T337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.089527][ T337] usb 5-1: config 0 descriptor?? [ 75.157738][ T332] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 75.168380][ T332] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 75.179830][ T332] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 75.192923][ T332] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 75.203482][ T332] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 75.213674][ T332] usb 2-1: config 1 interface 0 has no altsetting 0 [ 75.220590][ T332] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 75.230123][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.312526][ T332] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 75.579096][ T337] logitech 0003:046D:C216.000A: unexpected long global item [ 75.596985][ T337] logitech 0003:046D:C216.000A: parse failed [ 75.603602][ T332] scsi host1: usb-storage 2-1:1.0 [ 75.619296][ T337] logitech: probe of 0003:046D:C216.000A failed with error -22 [ 75.698928][ T2084] loop2: detected capacity change from 0 to 4096 [ 75.760542][ T2084] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.779603][ T295] usb 5-1: USB disconnect, device number 8 [ 75.780649][ T2084] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 75.790001][ T337] usb 2-1: USB disconnect, device number 6 [ 75.800961][ T2084] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 75.809796][ T2084] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option [ 75.822130][ T2084] EXT4-fs (loop2): re-mounted. Opts: noblock_validity,mblk_io_submit,nomblk_io_submit,init_itable=0x0000000000000000,discard,journal_ioprio=0x0000000000000003,nodiscard,data=writeback,. Quota mode: writeback. [ 75.877773][ T332] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 76.187888][ T308] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 76.247789][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 76.259105][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 76.270652][ T332] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.284135][ T332] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.294105][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.305037][ T2091] 9pnet: Insufficient options for proto=fd [ 76.310197][ T332] usb 1-1: config 0 descriptor?? [ 76.347901][ T2078] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 76.367359][ T2098] loop1: detected capacity change from 0 to 512 [ 76.409395][ T2098] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 76.437805][ T308] usb 3-1: Using ep0 maxpacket: 16 [ 76.609372][ T2106] device bridge0 entered promiscuous mode [ 76.615714][ T308] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 76.624535][ T308] usb 3-1: config 0 has no interface number 0 [ 76.631116][ T308] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 76.757942][ T308] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 76.768520][ T308] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 76.777277][ T308] usb 3-1: Manufacturer: syz [ 76.785356][ T308] usb 3-1: SerialNumber: syz [ 76.795355][ T308] usb 3-1: config 0 descriptor?? [ 76.805324][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.814488][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.824956][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.834992][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.845051][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.859948][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.870638][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.881214][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.892457][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.903708][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.912537][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.922516][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.930477][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.938769][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.946930][ T332] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 76.956090][ T332] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 76.976244][ T332] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 77.063581][ T295] usb 3-1: USB disconnect, device number 12 [ 77.083683][ T337] usb 1-1: USB disconnect, device number 11 [ 77.365009][ T2125] 9pnet: Insufficient options for proto=fd [ 77.537753][ T42] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 77.707665][ T329] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 77.813350][ T2151] loop0: detected capacity change from 0 to 512 [ 77.823246][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 77.830015][ T2151] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 78.104629][ T42] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.150281][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.702051][ T2158] 9pnet: Insufficient options for proto=fd [ 78.777718][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 78.777739][ T30] audit: type=1400 audit(1725113378.980:530): avc: denied { read } for pid=2161 comm="syz.3.641" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.809228][ T329] usb 2-1: Using ep0 maxpacket: 16 [ 78.849149][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 78.858344][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.871235][ T42] usb 5-1: config 0 descriptor?? [ 78.881587][ T30] audit: type=1400 audit(1725113379.030:531): avc: denied { open } for pid=2161 comm="syz.3.641" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.013346][ T30] audit: type=1400 audit(1725113379.160:532): avc: denied { read } for pid=2161 comm="syz.3.641" name="ptp0" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.042073][ T30] audit: type=1400 audit(1725113379.160:533): avc: denied { open } for pid=2161 comm="syz.3.641" path="/dev/ptp0" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.068124][ T329] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 79.083196][ T329] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 79.093053][ T329] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 79.103056][ T30] audit: type=1400 audit(1725113379.170:534): avc: denied { ioctl } for pid=2161 comm="syz.3.641" path="/dev/ptp0" dev="devtmpfs" ino=168 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.128309][ T329] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 79.138486][ T329] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 79.158706][ T329] usb 2-1: config 1 interface 0 has no altsetting 0 [ 79.165889][ T329] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 79.175803][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.239383][ T329] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 79.472111][ T329] scsi host1: usb-storage 2-1:1.0 [ 79.545816][ T2201] loop2: detected capacity change from 0 to 512 [ 79.628683][ T2201] EXT4-fs (loop2): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 79.659435][ T337] usb 2-1: USB disconnect, device number 7 [ 79.667791][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 79.673872][ T42] usbhid: probe of 5-1:0.0 failed with error -71 [ 79.681210][ T42] usb 5-1: USB disconnect, device number 9 [ 80.217698][ T2217] device pim6reg1 entered promiscuous mode [ 80.378786][ T2229] device sit0 entered promiscuous mode [ 80.430368][ T42] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 80.447852][ T329] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 81.394804][ T2236] 9pnet: Insufficient options for proto=fd [ 81.447921][ T42] usb 5-1: config index 0 descriptor too short (expected 25183, got 36) [ 81.456933][ T42] usb 5-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 81.466272][ T42] usb 5-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 81.477688][ T42] usb 5-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 81.488017][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 81.497264][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.507677][ T329] usb 4-1: Using ep0 maxpacket: 16 [ 81.687723][ T60] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 81.717709][ T337] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 81.787856][ T42] usb 5-1: string descriptor 0 read error: -71 [ 81.795197][ T42] usb 5-1: USB disconnect, device number 10 [ 81.807788][ T329] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 81.817072][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.825276][ T329] usb 4-1: Product: syz [ 81.829409][ T329] usb 4-1: Manufacturer: syz [ 81.833861][ T329] usb 4-1: SerialNumber: syz [ 81.839686][ T329] r8152-cfgselector 4-1: config 0 descriptor?? [ 81.927741][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 81.957705][ T337] usb 2-1: Using ep0 maxpacket: 16 [ 82.047746][ T60] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.058852][ T60] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.065282][ T60] usb 3-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 82.074694][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.084238][ T337] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 82.095193][ T337] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 82.097981][ T329] r8152-cfgselector 4-1: Unknown version 0x0000 [ 82.105435][ T60] usb 3-1: config 0 descriptor?? [ 82.118031][ T337] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 82.128805][ T337] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 82.138640][ T337] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 82.148584][ T337] usb 2-1: config 1 interface 0 has no altsetting 0 [ 82.155069][ T337] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 82.157734][ T329] r8152-cfgselector 4-1: Unknown version 0x0000 [ 82.165772][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.172957][ T329] r8152-cfgselector 4-1: bad CDC descriptors [ 82.219101][ T337] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 82.227992][ T329] r8152-cfgselector 4-1: Unknown version 0x0000 [ 82.420013][ T2255] 9pnet: Insufficient options for proto=fd [ 82.432387][ T329] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 82.441807][ T337] scsi host1: usb-storage 2-1:1.0 [ 82.477138][ T2261] loop0: detected capacity change from 0 to 512 [ 82.558155][ T2261] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 82.643607][ T332] usb 2-1: USB disconnect, device number 8 [ 82.707816][ T60] usbhid 3-1:0.0: can't add hid device: -71 [ 82.713622][ T60] usbhid: probe of 3-1:0.0 failed with error -71 [ 82.724069][ T60] usb 3-1: USB disconnect, device number 13 [ 83.164402][ T2271] 9pnet: Insufficient options for proto=fd [ 83.273023][ T30] audit: type=1400 audit(1725113383.480:535): avc: denied { write } for pid=2272 comm="syz.1.681" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.381946][ T2288] 9pnet: Insufficient options for proto=fd [ 83.687705][ T332] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 83.817705][ T60] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 83.870650][ T2302] 9pnet: Insufficient options for proto=fd [ 83.957749][ T332] usb 3-1: Using ep0 maxpacket: 32 [ 84.057664][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 84.077773][ T332] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.092771][ T332] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.099696][ T332] usb 3-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 84.108670][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.120830][ T332] usb 3-1: config 0 descriptor?? [ 84.160866][ T2316] 9pnet: Insufficient options for proto=fd [ 84.177734][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 84.190226][ T30] audit: type=1400 audit(1725113384.400:536): avc: denied { create } for pid=2317 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 84.191015][ T60] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 84.225811][ T2320] loop1: detected capacity change from 0 to 512 [ 84.234406][ T30] audit: type=1400 audit(1725113384.400:537): avc: denied { bind } for pid=2317 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 84.235861][ T60] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 84.264957][ T60] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 84.274604][ T60] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 84.278493][ T2320] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 84.293144][ T60] usb 1-1: config 1 interface 0 has no altsetting 0 [ 84.301474][ T60] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 84.311047][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.358629][ T60] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 84.612488][ T60] scsi host1: usb-storage 1-1:1.0 [ 84.836973][ T42] usb 1-1: USB disconnect, device number 12 [ 84.887731][ T332] usbhid 3-1:0.0: can't add hid device: -71 [ 84.893518][ T332] usbhid: probe of 3-1:0.0 failed with error -71 [ 84.900968][ T332] usb 3-1: USB disconnect, device number 14 [ 85.148487][ T30] audit: type=1400 audit(1725113385.360:538): avc: denied { ioctl } for pid=2343 comm="syz.4.708" path="socket:[24504]" dev="sockfs" ino=24504 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.215466][ T2353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 85.332586][ T2372] loop4: detected capacity change from 0 to 512 [ 85.368904][ T30] audit: type=1400 audit(1725113385.580:539): avc: denied { name_bind } for pid=2376 comm="syz.0.723" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 85.408468][ T2372] EXT4-fs (loop4): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 85.442355][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 85.533326][ T30] audit: type=1400 audit(1725113385.740:540): avc: denied { write } for pid=2380 comm="syz.0.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 85.553512][ T30] audit: type=1400 audit(1725113385.740:541): avc: denied { nlmsg_read } for pid=2380 comm="syz.0.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 85.892980][ T2390] 9pnet: Insufficient options for proto=fd [ 86.163396][ T2417] 9pnet: Insufficient options for proto=fd [ 86.208020][ T2423] netlink: 'syz.2.741': attribute type 4 has an invalid length. [ 86.225083][ T2423] netlink: 'syz.2.741': attribute type 4 has an invalid length. [ 86.257651][ T329] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 86.297717][ T337] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 86.424166][ T2442] 9pnet: Insufficient options for proto=fd [ 86.537792][ T337] usb 2-1: Using ep0 maxpacket: 16 [ 86.590825][ T30] audit: type=1400 audit(1725113386.800:542): avc: denied { create } for pid=2448 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 86.619999][ T2451] loop3: detected capacity change from 0 to 512 [ 86.637832][ T329] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 86.647526][ T329] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 86.657723][ T337] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 86.666635][ T337] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 86.676561][ T337] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 86.686261][ T337] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 86.696254][ T337] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 86.704375][ T2451] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 86.706086][ T337] usb 2-1: config 1 interface 0 has no altsetting 0 [ 86.722090][ T1899] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 86.729652][ T337] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 86.738561][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.778188][ T337] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 86.817776][ T329] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 86.826995][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.841037][ T329] usb 1-1: Product: syz [ 86.845333][ T329] usb 1-1: Manufacturer: syz [ 86.850207][ T329] usb 1-1: SerialNumber: syz [ 86.859786][ T329] usb 1-1: config 0 descriptor?? [ 86.877720][ T2402] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.884720][ T2402] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.003387][ T1899] usb 3-1: Using ep0 maxpacket: 8 [ 87.104048][ T2402] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.113519][ T2402] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.122737][ T337] scsi host1: usb-storage 2-1:1.0 [ 87.128397][ T1899] usb 3-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 87.170409][ T1899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.191659][ T1899] usb 3-1: config 0 descriptor?? [ 87.215561][ T42] usb 2-1: USB disconnect, device number 9 [ 87.541312][ T42] usb 3-1: USB disconnect, device number 15 [ 87.824962][ T2493] netlink: 56 bytes leftover after parsing attributes in process `syz.1.768'. [ 88.099792][ T2505] loop2: detected capacity change from 0 to 512 [ 88.130319][ T2505] EXT4-fs (loop2): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 88.154478][ T2507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 88.177693][ T329] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 88.201827][ T329] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 5e:14:07:1f:26:20 [ 88.216271][ T329] usb 1-1: USB disconnect, device number 13 [ 88.222881][ T329] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 88.237462][ T30] audit: type=1400 audit(1725113388.440:543): avc: denied { read } for pid=138 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 88.274664][ T30] audit: type=1400 audit(1725113388.470:544): avc: denied { search } for pid=138 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.296351][ T30] audit: type=1400 audit(1725113388.470:545): avc: denied { read } for pid=138 comm="dhcpcd" name="n17" dev="tmpfs" ino=5121 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.386508][ T2511] 9pnet: Insufficient options for proto=fd [ 88.678821][ T2524] 9pnet: Insufficient options for proto=fd [ 88.766250][ T2536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 88.986839][ T42] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 89.067754][ T329] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 89.110229][ T2566] 9pnet: Insufficient options for proto=fd [ 89.203921][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 89.203939][ T30] audit: type=1400 audit(1725113389.410:558): avc: denied { bind } for pid=2575 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.240689][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 89.260387][ T2580] 9pnet: Insufficient options for proto=fd [ 89.267041][ T30] audit: type=1400 audit(1725113389.410:559): avc: denied { setopt } for pid=2575 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.296247][ T30] audit: type=1400 audit(1725113389.500:560): avc: denied { create } for pid=2582 comm="syz.1.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.319533][ T329] usb 1-1: Using ep0 maxpacket: 32 [ 89.356385][ T2591] loop1: detected capacity change from 0 to 512 [ 89.362788][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 89.372666][ T42] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 89.383274][ T42] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 89.394110][ T42] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 89.398481][ T2591] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 89.409062][ T42] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 89.426702][ T42] usb 5-1: config 1 interface 0 has no altsetting 0 [ 89.433312][ T42] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 89.442758][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.457811][ T329] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.469002][ T329] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.475425][ T329] usb 1-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 89.484567][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.491862][ T42] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 89.493382][ T329] usb 1-1: config 0 descriptor?? [ 89.606644][ T2598] 9pnet: Insufficient options for proto=fd [ 89.780703][ T42] scsi host1: usb-storage 5-1:1.0 [ 89.929089][ T42] usb 5-1: USB disconnect, device number 11 [ 89.957770][ T30] audit: type=1400 audit(1725113390.170:561): avc: denied { wake_alarm } for pid=2605 comm="syz.2.802" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.989780][ T329] logitech 0003:046D:C216.000C: unexpected long global item [ 89.999569][ T329] logitech 0003:046D:C216.000C: parse failed [ 90.006614][ T329] logitech: probe of 0003:046D:C216.000C failed with error -22 [ 90.019262][ T2614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 90.032001][ T2613] 9pnet: Insufficient options for proto=fd [ 90.196117][ T308] usb 1-1: USB disconnect, device number 14 [ 90.317757][ T329] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 90.368060][ T332] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 90.747855][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 90.759415][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 90.770724][ T329] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.783810][ T329] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.792907][ T332] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 90.802512][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.810333][ T332] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 90.820822][ T329] usb 3-1: config 0 descriptor?? [ 90.848043][ T2616] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 90.987690][ T337] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 90.992111][ T2649] loop1: detected capacity change from 0 to 512 [ 91.001966][ T332] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 91.011474][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.019379][ T332] usb 4-1: Product: syz [ 91.023367][ T332] usb 4-1: Manufacturer: syz [ 91.028063][ T332] usb 4-1: SerialNumber: syz [ 91.034304][ T332] usb 4-1: config 0 descriptor?? [ 91.038485][ T2649] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 91.057816][ T2622] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 91.064909][ T2622] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 91.187911][ T329] usbhid 3-1:0.0: can't add hid device: -71 [ 91.193721][ T329] usbhid: probe of 3-1:0.0 failed with error -71 [ 91.200993][ T329] usb 3-1: USB disconnect, device number 16 [ 91.227717][ T337] usb 1-1: Using ep0 maxpacket: 8 [ 91.321208][ T2622] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 91.348063][ T337] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 91.371382][ T2622] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 91.567777][ T337] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 91.576832][ T337] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 91.585022][ T337] usb 1-1: Product: syz [ 91.589367][ T337] usb 1-1: Manufacturer: syz [ 91.593813][ T337] usb 1-1: SerialNumber: syz [ 91.747733][ T42] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 92.027861][ T42] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 92.067751][ T329] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 92.107801][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.118548][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.131352][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.217778][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.226667][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.237442][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.317773][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.326675][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.337418][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.337923][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 92.417795][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.426899][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.437865][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.487790][ T329] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 92.497550][ T329] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 92.507869][ T329] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 92.517968][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.518915][ T329] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 92.529462][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.540598][ T329] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 92.552545][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.562272][ T329] usb 3-1: config 1 interface 0 has no altsetting 0 [ 92.574896][ T329] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 92.583919][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.638491][ T329] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 92.648043][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.657081][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.668219][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.747804][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.756718][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.767843][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.848023][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.856877][ T42] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.858640][ T329] scsi host1: usb-storage 3-1:1.0 [ 92.868143][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.037815][ T42] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 93.047365][ T42] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 93.056000][ T42] usb 5-1: Product: syz [ 93.060387][ T42] usb 5-1: Manufacturer: syz [ 93.065000][ T42] usb 5-1: SerialNumber: syz [ 93.067017][ T329] usb 3-1: USB disconnect, device number 17 [ 93.074600][ T42] usb 5-1: config 0 descriptor?? [ 93.379448][ T42] usb 5-1: USB disconnect, device number 12 [ 93.524993][ T2686] loop1: detected capacity change from 0 to 256 [ 93.589172][ T2686] exfat: Unknown parameter 'emask' [ 93.733689][ T337] usb 1-1: USB disconnect, device number 15 [ 93.785558][ T2695] loop0: detected capacity change from 0 to 512 [ 93.838284][ T2695] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 94.353760][ T2707] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.361578][ T2707] device bridge_slave_0 left promiscuous mode [ 94.367812][ T2707] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.375580][ T2707] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 94.392421][ T332] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 94.406034][ T332] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 5e:14:07:1f:26:20 [ 94.436159][ T332] usb 4-1: USB disconnect, device number 9 [ 94.467470][ T332] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 95.327782][ T332] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 95.451812][ T2768] loop2: detected capacity change from 0 to 512 [ 95.475789][ T2770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 95.560205][ T2768] EXT4-fs (loop2): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 95.569907][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 95.707701][ T332] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 95.726850][ T332] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 96.021842][ T332] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 96.034734][ T332] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 96.044489][ T332] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 96.054272][ T332] usb 4-1: config 1 interface 0 has no altsetting 0 [ 96.060816][ T332] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 96.069762][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.118271][ T332] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 96.378464][ T2790] netlink: 'syz.4.859': attribute type 4 has an invalid length. [ 96.388462][ T2790] netlink: 'syz.4.859': attribute type 4 has an invalid length. [ 96.408336][ T2790] loop4: detected capacity change from 0 to 256 [ 96.497306][ T2790] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.710978][ T332] scsi host1: usb-storage 4-1:1.0 [ 96.717556][ T332] usb 4-1: USB disconnect, device number 10 [ 97.017919][ T60] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 97.189925][ T2817] loop3: detected capacity change from 0 to 512 [ 97.278132][ T2817] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 97.357716][ T332] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 97.457793][ T337] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 97.465454][ T60] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 97.476292][ T60] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 97.677761][ T60] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 97.686723][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.694563][ T60] usb 1-1: Product: syz [ 97.698748][ T60] usb 1-1: Manufacturer: syz [ 97.703111][ T60] usb 1-1: SerialNumber: syz [ 97.708337][ T60] usb 1-1: config 0 descriptor?? [ 97.717663][ T337] usb 2-1: Using ep0 maxpacket: 32 [ 97.727804][ T2797] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.734775][ T2797] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.837891][ T337] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.848915][ T337] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.855469][ T337] usb 2-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 97.864462][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.872931][ T337] usb 2-1: config 0 descriptor?? [ 97.888388][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.899236][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.908897][ T332] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.921883][ T332] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.930736][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.939363][ T332] usb 5-1: config 0 descriptor?? [ 97.948728][ T2797] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.955534][ T2797] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.383472][ T337] logitech 0003:046D:C216.000D: unexpected long global item [ 98.407146][ T337] logitech 0003:046D:C216.000D: parse failed [ 98.414990][ T337] logitech: probe of 0003:046D:C216.000D failed with error -22 [ 98.583695][ T310] usb 2-1: USB disconnect, device number 10 [ 98.607766][ T332] usbhid 5-1:0.0: can't add hid device: -71 [ 98.613560][ T332] usbhid: probe of 5-1:0.0 failed with error -71 [ 98.620616][ T332] usb 5-1: USB disconnect, device number 13 [ 98.657759][ T329] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 99.047735][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.059049][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.069469][ T329] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 99.078840][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.100353][ T329] usb 3-1: config 0 descriptor?? [ 99.321096][ T30] audit: type=1400 audit(1725113399.530:562): avc: denied { execute_no_trans } for pid=2837 comm="syz.4.876" path="/167/file0" dev="tmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.420902][ T2852] netlink: 'syz.3.878': attribute type 4 has an invalid length. [ 99.449514][ T2852] netlink: 'syz.3.878': attribute type 4 has an invalid length. [ 99.751697][ T329] arvo 0003:1E7D:30D4.000E: item fetching failed at offset 2/7 [ 99.760934][ T329] arvo 0003:1E7D:30D4.000E: parse failed [ 99.766622][ T329] arvo: probe of 0003:1E7D:30D4.000E failed with error -22 [ 99.827198][ T1899] usb 3-1: USB disconnect, device number 18 [ 99.961626][ T2854] loop4: detected capacity change from 0 to 512 [ 100.048181][ T2854] EXT4-fs (loop4): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 100.407720][ T42] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 100.738632][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 100.767725][ T30] audit: type=1400 audit(1725113400.940:563): avc: denied { ioctl } for pid=2865 comm="syz.2.886" path="socket:[27664]" dev="sockfs" ino=27664 ioctlcmd=0x52c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.047747][ T60] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 101.056477][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 101.072170][ T42] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 101.083185][ T60] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 5e:14:07:1f:26:20 [ 101.095530][ T42] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 101.106492][ T60] usb 1-1: USB disconnect, device number 16 [ 101.112492][ T42] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 101.122596][ T60] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 101.134627][ T42] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 101.146711][ T42] usb 4-1: config 1 interface 0 has no altsetting 0 [ 101.153250][ T42] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 101.167844][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.188023][ T295] ================================================================== [ 101.195925][ T295] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 101.203560][ T295] Read of size 8 at addr ffff888114b56c70 by task kworker/1:3/295 [ 101.211191][ T295] [ 101.213379][ T295] CPU: 1 PID: 295 Comm: kworker/1:3 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 101.223083][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 101.232986][ T295] Workqueue: events linkwatch_event [ 101.238018][ T295] Call Trace: [ 101.241223][ T295] [ 101.244002][ T295] dump_stack_lvl+0x151/0x1c0 [ 101.248523][ T295] ? io_uring_drop_tctx_refs+0x190/0x190 [ 101.253979][ T295] ? panic+0x760/0x760 [ 101.257979][ T295] print_address_description+0x87/0x3b0 [ 101.263360][ T295] ? _raw_spin_unlock+0x4d/0x70 [ 101.268135][ T295] kasan_report+0x179/0x1c0 [ 101.272586][ T295] ? __list_del_entry_valid+0xa6/0x120 [ 101.278670][ T295] ? __list_del_entry_valid+0xa6/0x120 [ 101.284750][ T295] __asan_report_load8_noabort+0x14/0x20 [ 101.290329][ T295] __list_del_entry_valid+0xa6/0x120 [ 101.295421][ T295] process_one_work+0x458/0xc10 [ 101.300284][ T295] worker_thread+0xad5/0x12a0 [ 101.304795][ T295] ? _raw_spin_lock+0x1b0/0x1b0 [ 101.309487][ T295] kthread+0x421/0x510 [ 101.313384][ T295] ? worker_clr_flags+0x180/0x180 [ 101.318247][ T295] ? kthread_blkcg+0xd0/0xd0 [ 101.322671][ T295] ret_from_fork+0x1f/0x30 [ 101.326927][ T295] [ 101.329787][ T295] [ 101.331959][ T295] Allocated by task 60: [ 101.336048][ T295] ____kasan_kmalloc+0xdb/0x110 [ 101.340745][ T295] __kasan_kmalloc+0x9/0x10 [ 101.345234][ T295] __kmalloc+0x13a/0x270 [ 101.349324][ T295] kvmalloc_node+0x1f0/0x4d0 [ 101.353752][ T295] alloc_netdev_mqs+0x8c/0xc90 [ 101.358349][ T295] alloc_etherdev_mqs+0x33/0x40 [ 101.363032][ T295] usbnet_probe+0x1ff/0x2830 [ 101.367466][ T295] usb_probe_interface+0x5b6/0xa90 [ 101.372496][ T295] really_probe+0x28d/0x970 [ 101.377011][ T295] __driver_probe_device+0x1a0/0x310 [ 101.382211][ T295] driver_probe_device+0x54/0x3d0 [ 101.387070][ T295] __device_attach_driver+0x2c5/0x470 [ 101.392279][ T295] bus_for_each_drv+0x183/0x200 [ 101.396964][ T295] __device_attach+0x312/0x510 [ 101.401567][ T295] device_initial_probe+0x1a/0x20 [ 101.406427][ T295] bus_probe_device+0xbe/0x1e0 [ 101.411026][ T295] device_add+0xb60/0xf10 [ 101.415480][ T295] usb_set_configuration+0x190f/0x1e80 [ 101.420758][ T295] usb_generic_driver_probe+0x8b/0x150 [ 101.426051][ T295] usb_probe_device+0x144/0x260 [ 101.430882][ T295] really_probe+0x28d/0x970 [ 101.435226][ T295] __driver_probe_device+0x1a0/0x310 [ 101.440347][ T295] driver_probe_device+0x54/0x3d0 [ 101.445197][ T295] __device_attach_driver+0x2c5/0x470 [ 101.450415][ T295] bus_for_each_drv+0x183/0x200 [ 101.455139][ T295] __device_attach+0x312/0x510 [ 101.459892][ T295] device_initial_probe+0x1a/0x20 [ 101.464743][ T295] bus_probe_device+0xbe/0x1e0 [ 101.469631][ T295] device_add+0xb60/0xf10 [ 101.473796][ T295] usb_new_device+0x1038/0x1c00 [ 101.478480][ T295] hub_event+0x2def/0x4770 [ 101.482745][ T295] process_one_work+0x6bb/0xc10 [ 101.487513][ T295] worker_thread+0xad5/0x12a0 [ 101.492021][ T295] kthread+0x421/0x510 [ 101.495929][ T295] ret_from_fork+0x1f/0x30 [ 101.500180][ T295] [ 101.502350][ T295] Freed by task 60: [ 101.505992][ T295] kasan_set_track+0x4b/0x70 [ 101.510419][ T295] kasan_set_free_info+0x23/0x40 [ 101.515301][ T295] ____kasan_slab_free+0x126/0x160 [ 101.520236][ T295] __kasan_slab_free+0x11/0x20 [ 101.524836][ T295] slab_free_freelist_hook+0xbd/0x190 [ 101.530042][ T295] kfree+0xc8/0x220 [ 101.533863][ T295] kvfree+0x35/0x40 [ 101.537507][ T295] netdev_freemem+0x3f/0x60 [ 101.541847][ T295] netdev_release+0x7f/0xb0 [ 101.546308][ T295] device_release+0x95/0x1c0 [ 101.550817][ T295] kobject_put+0x178/0x260 [ 101.555082][ T295] put_device+0x1f/0x30 [ 101.559084][ T295] free_netdev+0x34f/0x440 [ 101.563446][ T295] usbnet_disconnect+0x245/0x390 [ 101.568220][ T295] usb_unbind_interface+0x1fa/0x8c0 [ 101.573247][ T295] device_release_driver_internal+0x50b/0x7d0 [ 101.579161][ T295] device_release_driver+0x19/0x20 [ 101.584183][ T295] bus_remove_device+0x2f8/0x360 [ 101.588953][ T295] device_del+0x663/0xe90 [ 101.593120][ T295] usb_disable_device+0x380/0x720 [ 101.597992][ T295] usb_disconnect+0x32a/0x890 [ 101.602538][ T295] hub_event+0x1d42/0x4770 [ 101.606748][ T295] process_one_work+0x6bb/0xc10 [ 101.611439][ T295] worker_thread+0xe02/0x12a0 [ 101.615948][ T295] kthread+0x421/0x510 [ 101.619855][ T295] ret_from_fork+0x1f/0x30 [ 101.624115][ T295] [ 101.626275][ T295] Last potentially related work creation: [ 101.631838][ T295] kasan_save_stack+0x3b/0x60 [ 101.636345][ T295] __kasan_record_aux_stack+0xd3/0xf0 [ 101.641551][ T295] kasan_record_aux_stack_noalloc+0xb/0x10 [ 101.647280][ T295] insert_work+0x56/0x320 [ 101.651569][ T295] __queue_work+0x92a/0xcd0 [ 101.655901][ T295] queue_work_on+0x105/0x170 [ 101.660414][ T295] usbnet_link_change+0xeb/0x100 [ 101.665189][ T295] usbnet_probe+0x1dd3/0x2830 [ 101.669704][ T295] usb_probe_interface+0x5b6/0xa90 [ 101.674646][ T295] really_probe+0x28d/0x970 [ 101.678984][ T295] __driver_probe_device+0x1a0/0x310 [ 101.684107][ T295] driver_probe_device+0x54/0x3d0 [ 101.688984][ T295] __device_attach_driver+0x2c5/0x470 [ 101.694177][ T295] bus_for_each_drv+0x183/0x200 [ 101.698950][ T295] __device_attach+0x312/0x510 [ 101.703553][ T295] device_initial_probe+0x1a/0x20 [ 101.708509][ T295] bus_probe_device+0xbe/0x1e0 [ 101.713377][ T295] device_add+0xb60/0xf10 [ 101.717939][ T295] usb_set_configuration+0x190f/0x1e80 [ 101.723557][ T295] usb_generic_driver_probe+0x8b/0x150 [ 101.728862][ T295] usb_probe_device+0x144/0x260 [ 101.733614][ T295] really_probe+0x28d/0x970 [ 101.738206][ T295] __driver_probe_device+0x1a0/0x310 [ 101.743299][ T295] driver_probe_device+0x54/0x3d0 [ 101.748628][ T295] __device_attach_driver+0x2c5/0x470 [ 101.753898][ T295] bus_for_each_drv+0x183/0x200 [ 101.759105][ T295] __device_attach+0x312/0x510 [ 101.763725][ T295] device_initial_probe+0x1a/0x20 [ 101.768675][ T295] bus_probe_device+0xbe/0x1e0 [ 101.773262][ T295] device_add+0xb60/0xf10 [ 101.777626][ T295] usb_new_device+0x1038/0x1c00 [ 101.782306][ T295] hub_event+0x2def/0x4770 [ 101.786559][ T295] process_one_work+0x6bb/0xc10 [ 101.791332][ T295] worker_thread+0xad5/0x12a0 [ 101.795860][ T295] kthread+0x421/0x510 [ 101.799784][ T295] ret_from_fork+0x1f/0x30 [ 101.804008][ T295] [ 101.806181][ T295] The buggy address belongs to the object at ffff888114b56000 [ 101.806181][ T295] which belongs to the cache kmalloc-4k of size 4096 [ 101.820242][ T295] The buggy address is located 3184 bytes inside of [ 101.820242][ T295] 4096-byte region [ffff888114b56000, ffff888114b57000) [ 101.833519][ T295] The buggy address belongs to the page: [ 101.838998][ T295] page:ffffea000452d400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114b50 [ 101.849053][ T295] head:ffffea000452d400 order:3 compound_mapcount:0 compound_pincount:0 [ 101.857209][ T295] flags: 0x4000000000010200(slab|head|zone=1) [ 101.863117][ T295] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 101.871623][ T295] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 101.880043][ T295] page dumped because: kasan: bad access detected [ 101.886300][ T295] page_owner tracks the page as allocated [ 101.891837][ T295] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 112, ts 4929411128, free_ts 0 [ 101.909893][ T295] post_alloc_hook+0x1a3/0x1b0 [ 101.914490][ T295] prep_new_page+0x1b/0x110 [ 101.918830][ T295] get_page_from_freelist+0x3550/0x35d0 [ 101.924297][ T295] __alloc_pages+0x27e/0x8f0 [ 101.928732][ T295] new_slab+0x9a/0x4e0 [ 101.933262][ T295] ___slab_alloc+0x39e/0x830 [ 101.937768][ T295] __slab_alloc+0x4a/0x90 [ 101.941941][ T295] __kmalloc+0x16d/0x270 [ 101.946104][ T295] kvmalloc_node+0x1f0/0x4d0 [ 101.950584][ T295] seq_read_iter+0x1ff/0xd00 [ 101.954960][ T295] kernfs_fop_read_iter+0x145/0x470 [ 101.959999][ T295] vfs_read+0xa7e/0xd40 [ 101.963997][ T295] ksys_read+0x199/0x2c0 [ 101.968064][ T295] __x64_sys_read+0x7b/0x90 [ 101.972420][ T295] x64_sys_call+0x28/0x9a0 [ 101.976664][ T295] do_syscall_64+0x3b/0xb0 [ 101.980911][ T295] page_owner free stack trace missing [ 101.986219][ T295] [ 101.988466][ T295] Memory state around the buggy address: [ 101.993935][ T295] ffff888114b56b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.001917][ T295] ffff888114b56b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.009814][ T295] >ffff888114b56c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.017706][ T295] ^ [ 102.025350][ T295] ffff888114b56c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.033271][ T295] ffff888114b56d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.041143][ T295] ================================================================== [ 102.049042][ T295] Disabling lock debugging due to kernel taint [ 102.098172][ T42] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 102.197720][ T1899] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 102.318339][ T42] scsi host1: usb-storage 4-1:1.0 [ 102.437697][ T1899] usb 5-1: Using ep0 maxpacket: 32 [ 102.519512][ T332] usb 4-1: USB disconnect, device number 11 [ 102.558154][ T1899] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.569228][ T1899] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.575725][ T1899] usb 5-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 102.584616][ T1899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.593122][ T1899] usb 5-1: config 0 descriptor?? [ 103.069526][ T1899] logitech 0003:046D:C216.000F: unexpected long global item [ 103.076803][ T1899] logitech 0003:046D:C216.000F: parse failed [ 103.082697][ T1899] logitech: probe of 0003:046D:C216.000F failed with error -22 [ 103.269203][ T1899] usb 5-1: USB disconnect, device number 14