last executing test programs: 7.667739728s ago: executing program 3 (id=448): clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{}, {r0, r1+60000000}}, 0x0) 7.627052628s ago: executing program 3 (id=449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a04010000000a01020000000000000000020000030900010073797a30"], 0x12c}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) 7.53623545s ago: executing program 3 (id=450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000001c0)='@', 0x1) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000004c0)=0x5, 0x4) 7.51148017s ago: executing program 3 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r1, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}}, 0x0) 7.424188512s ago: executing program 3 (id=453): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000007112660000000000bf9b0000000000009500000000000000e8836f0fc77c0d0ceb54e1aa09c43f6c3cad"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c000004001280140001202a0003"], 0x2c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.598591755s ago: executing program 3 (id=457): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000240)={0x20, 0x14, 0x11, "023b48312025c04b028dcb170b2f0547cd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.952427443s ago: executing program 2 (id=482): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000040)="dd60", 0x2}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x10001, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x4, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x0, 0x7], 0xdddd1000, 0x80146}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.792738176s ago: executing program 2 (id=489): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x13, r1, 0x0) 2.773464966s ago: executing program 2 (id=490): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x24, &(0x7f00000019c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.416322122s ago: executing program 4 (id=498): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getuid() 2.416022671s ago: executing program 4 (id=499): ioperm(0x7, 0x449, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) modify_ldt$write(0x1, &(0x7f0000000180)={0x3, 0x1000, 0x4000}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.744401813s ago: executing program 0 (id=506): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000180)={&(0x7f0000000100)="72df1c7a", 0x4}, 0x1, 0x0, 0x0, 0x4008811}, 0x20008800) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001300)) 1.744059183s ago: executing program 0 (id=507): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000180)={0x14, 0x11, 0xc, 0xf, 0x6, 0x9, 0x1, 0xe7, 0xffffffffffffffff}) 1.743849293s ago: executing program 0 (id=508): socket(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8000) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.712505243s ago: executing program 0 (id=509): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 1.505107736s ago: executing program 4 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.444276847s ago: executing program 4 (id=511): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x1f8, 0x110, 0x2e0, 0x1f8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="58607b1c69cb", @mac=@link_local, @loopback}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@random="492f869a9354"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1_virt_wifi\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}], 0x1, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @empty}}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) 1.182150301s ago: executing program 4 (id=512): ioperm(0x284, 0x7f, 0xe3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x198, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 840.709307ms ago: executing program 0 (id=513): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="a980b2a0cb0809541841ee4e1262808a24fc8f1c27d5e4506f13af5c6d63172360b6baad9d0c3df046f4f5f0adc0308e3ef659787d0489cf1b2965169fccccd319634be2722fd699c8ed", 0x4a}, {&(0x7f00000011c0)="31e9729688285f4018ce30dc2d881a1cbeec32df88222624f7e69b5fa07a268bb7e9f55d14f43e3025bdfa4272db1829b42ea3bc327f", 0x36}], 0x2}, 0x40000) 780.295118ms ago: executing program 0 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x88001}, 0x4000) recvmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/136, 0x88}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/230, 0xe6}, {&(0x7f0000002bc0)=""/227, 0xe3}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/191, 0xbf}, {&(0x7f0000000340)=""/81, 0x51}], 0x7}, 0x10010}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x20, 0x0) 588.074361ms ago: executing program 1 (id=515): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 473.837102ms ago: executing program 1 (id=516): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) getrlimit(0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24044045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000200)=""/102392, 0x18ff8) setrlimit(0x1, &(0x7f0000000040)={0xfffeffffffffc, 0x9}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x18b, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, r3, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) close(r5) 380.157064ms ago: executing program 1 (id=517): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r1, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) 200.660717ms ago: executing program 2 (id=518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c0001"], 0x25c}}, 0x0) 190.089187ms ago: executing program 4 (id=519): syz_usb_connect(0x2, 0xb7, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a500018104004f0904870609a97a37020a24010a0b06020102092403050703020496062404029cfe09050b00400080000007250181f7090009050d00000464040507250103"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) 52.095249ms ago: executing program 1 (id=520): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a008313"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) 51.891359ms ago: executing program 2 (id=521): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4004845) rt_sigqueueinfo(0x0, 0x6, &(0x7f0000000080)={0x13, 0x5, 0x28}) 51.814649ms ago: executing program 2 (id=522): openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 31.95336ms ago: executing program 1 (id=523): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 0s ago: executing program 1 (id=524): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffff4f7}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac13000100000000000000000000000000000000000000000a0042"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): ): Mounted with checkpoint version = 48b305e5 [ 27.022465][ T6] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.040522][ T359] attempt to access beyond end of device [ 27.040522][ T359] loop4: rw=2049, want=45104, limit=40427 [ 27.057765][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 27.072722][ T6] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 27.407551][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.417345][ T6] usb 4-1: config 0 descriptor?? [ 27.437123][ T371] loop2: detected capacity change from 0 to 40427 [ 27.449877][ T371] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 27.457670][ T371] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 27.485376][ T371] F2FS-fs (loop2): invalid crc value [ 27.505716][ T375] syz.1.11 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 27.518801][ T375] loop1: detected capacity change from 0 to 256 [ 27.519461][ T359] attempt to access beyond end of device [ 27.519461][ T359] loop4: rw=0, want=45104, limit=40427 [ 27.531496][ T371] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 27.549000][ T371] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 27.568426][ T375] ======================================================= [ 27.568426][ T375] WARNING: The mand mount option has been deprecated and [ 27.568426][ T375] and is ignored by this kernel. Remove the mand [ 27.568426][ T375] option from the mount to silence this warning. [ 27.568426][ T375] ======================================================= [ 27.608546][ T375] exfat: Bad value for 'uid' [ 27.617437][ T371] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 27.624605][ T371] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 27.657529][ T371] attempt to access beyond end of device [ 27.657529][ T371] loop2: rw=2049, want=45104, limit=40427 [ 27.719367][ T371] attempt to access beyond end of device [ 27.719367][ T371] loop2: rw=0, want=45104, limit=40427 [ 27.833644][ T389] device wireguard0 entered promiscuous mode [ 27.890047][ T6] chicony 0003:04F2:1236.0001: item fetching failed at offset 5/7 [ 27.900491][ T6] chicony 0003:04F2:1236.0001: Chicony hid parse failed: -22 [ 27.913378][ T6] chicony: probe of 0003:04F2:1236.0001 failed with error -22 [ 28.038627][ T394] loop1: detected capacity change from 0 to 40427 [ 28.068186][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.101100][ T26] usb 4-1: USB disconnect, device number 2 [ 28.125961][ T394] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 28.133768][ T394] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 28.143439][ T394] F2FS-fs (loop1): invalid crc value [ 28.150755][ T394] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 28.163663][ T394] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 28.184603][ T394] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 28.191667][ T394] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 28.217524][ T394] attempt to access beyond end of device [ 28.217524][ T394] loop1: rw=2049, want=45104, limit=40427 [ 28.238350][ T391] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.262170][ T394] attempt to access beyond end of device [ 28.262170][ T394] loop1: rw=0, want=45104, limit=40427 [ 28.318161][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 28.429951][ T402] loop2: detected capacity change from 0 to 2048 [ 28.438341][ T6] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.449294][ T6] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.470282][ T402] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.498279][ T391] usb 1-1: Using ep0 maxpacket: 32 [ 28.578166][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 28.587051][ T6] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 28.595480][ T6] usb 5-1: Product: syz [ 28.606128][ T6] usb 5-1: Manufacturer: syz [ 28.628178][ T391] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.639643][ T391] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.724568][ T6] hub 5-1:4.0: USB hub found [ 28.979382][ T387] loop4: detected capacity change from 0 to 512 [ 29.072119][ T391] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 29.081112][ T391] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 29.089368][ T391] usb 1-1: Product: syz [ 29.093291][ T391] usb 1-1: Manufacturer: syz [ 29.122103][ T387] EXT4-fs (loop4): Ignoring removed oldalloc option [ 29.133407][ T387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 29.141802][ T387] System zones: 1-12 [ 29.148697][ T391] hub 1-1:4.0: USB hub found [ 29.170896][ T387] EXT4-fs (loop4): 1 truncate cleaned up [ 29.176543][ T387] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,nouid32,grpid,errors=remount-ro,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 29.202611][ T387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 29.228202][ T6] hub 5-1:4.0: 2 ports detected [ 29.368132][ T391] hub 1-1:4.0: 2 ports detected [ 29.448127][ T6] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 29.464700][ T6] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 29.488730][ T415] loop1: detected capacity change from 0 to 40427 [ 29.531140][ T6] usb 5-1: USB disconnect, device number 2 [ 29.588155][ T391] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 29.599019][ T415] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 29.629128][ T415] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 29.629726][ T391] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 29.652817][ T415] F2FS-fs (loop1): invalid crc value [ 29.670064][ T415] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 29.683396][ T415] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 29.688939][ T391] usb 1-1: USB disconnect, device number 2 [ 29.925950][ T415] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 29.960199][ T415] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 30.089586][ T415] attempt to access beyond end of device [ 30.089586][ T415] loop1: rw=2049, want=45104, limit=40427 [ 30.156473][ T415] attempt to access beyond end of device [ 30.156473][ T415] loop1: rw=0, want=45104, limit=40427 [ 30.224803][ T419] loop2: detected capacity change from 0 to 40427 [ 30.244961][ T419] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 30.252835][ T419] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 30.262097][ T419] F2FS-fs (loop2): invalid crc value [ 30.268990][ T419] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 30.282189][ T419] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 30.366249][ T433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23'. [ 30.690464][ T433] loop4: detected capacity change from 0 to 512 [ 30.741071][ T433] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 30.750649][ T433] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 30.760258][ T433] EXT4-fs (loop4): Mount option "dioread_lock" incompatible with ext3 [ 30.824306][ T436] loop3: detected capacity change from 0 to 2048 [ 30.836021][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 30.836036][ T30] audit: type=1400 audit(1745227808.153:183): avc: denied { name_bind } for pid=437 comm="syz.0.26" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 30.865511][ T419] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 30.874031][ T419] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 30.922451][ T419] attempt to access beyond end of device [ 30.922451][ T419] loop2: rw=2049, want=45104, limit=40427 [ 30.937204][ T30] audit: type=1400 audit(1745227808.253:184): avc: denied { create } for pid=437 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.938297][ T436] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.009435][ T30] audit: type=1326 audit(1745227808.313:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=427 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 31.045668][ T30] audit: type=1400 audit(1745227808.363:186): avc: denied { setopt } for pid=437 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.075525][ T439] loop0: detected capacity change from 0 to 2048 [ 31.209156][ T439] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.235321][ T441] loop1: detected capacity change from 0 to 40427 [ 31.784474][ T454] loop1: detected capacity change from 0 to 16 [ 31.820057][ T454] erofs: (device loop1): z_erofs_load_lz4_config: invalid lz4 cfgs, size=4 [ 32.480004][ T462] loop1: detected capacity change from 0 to 2048 [ 32.569134][ T462] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.574050][ T458] loop4: detected capacity change from 0 to 40427 [ 32.649168][ T458] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 32.659030][ T458] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 32.674695][ T458] F2FS-fs (loop4): invalid crc value [ 32.693502][ T461] loop3: detected capacity change from 0 to 40427 [ 32.703384][ T458] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 32.718721][ T458] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 32.738217][ T26] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 32.738796][ T461] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 32.753406][ T461] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 32.763517][ T461] F2FS-fs (loop3): invalid crc value [ 32.773841][ T461] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 32.774473][ T458] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 32.791776][ T461] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 32.791804][ T458] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 32.801121][ T412] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.854553][ T461] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 32.861654][ T461] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 32.914030][ T461] attempt to access beyond end of device [ 32.914030][ T461] loop3: rw=2049, want=45104, limit=40427 [ 32.996507][ T461] attempt to access beyond end of device [ 32.996507][ T461] loop3: rw=0, want=45104, limit=40427 [ 33.078165][ T412] usb 3-1: Using ep0 maxpacket: 32 [ 33.108103][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.124241][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 33.135584][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.150433][ T26] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 33.161102][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.174667][ T26] usb 1-1: config 0 descriptor?? [ 33.198163][ T464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 33.208190][ T412] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.221504][ T412] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.348160][ T412] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 33.357376][ T412] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 33.365807][ T412] usb 3-1: Product: syz [ 33.370394][ T412] usb 3-1: Manufacturer: syz [ 33.418938][ T412] hub 3-1:4.0: USB hub found [ 33.539036][ T480] loop1: detected capacity change from 0 to 2048 [ 33.609639][ T480] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.620592][ T412] hub 3-1:4.0: 2 ports detected [ 33.659064][ T26] saitek 0003:06A3:0621.0002: unknown main item tag 0x0 [ 33.667992][ T26] saitek 0003:06A3:0621.0002: unknown main item tag 0x0 [ 33.675358][ T26] saitek 0003:06A3:0621.0002: unknown main item tag 0x0 [ 33.683189][ T26] saitek 0003:06A3:0621.0002: unknown main item tag 0x2 [ 33.690318][ T26] saitek 0003:06A3:0621.0002: unknown main item tag 0x0 [ 33.697388][ T26] saitek 0003:06A3:0621.0002: unknown main item tag 0x0 [ 33.705354][ T26] saitek 0003:06A3:0621.0002: unknown main item tag 0x0 [ 33.718553][ T26] saitek 0003:06A3:0621.0002: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.0-1/input0 [ 33.753166][ T485] loop4: detected capacity change from 0 to 2048 [ 33.838139][ T412] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 33.844057][ T30] audit: type=1400 audit(1745227811.163:187): avc: denied { mounton } for pid=487 comm="syz.3.35" path="/proc/24/cgroup" dev="proc" ino=16706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 33.847557][ T412] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 33.878812][ T391] usb 1-1: USB disconnect, device number 3 [ 33.889684][ T485] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.009132][ T412] usb 3-1: USB disconnect, device number 2 [ 35.038018][ C0] sched: RT throttling activated [ 35.221052][ T497] loop0: detected capacity change from 0 to 512 [ 35.794842][ T497] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.36: bg 0: block 248: padding at end of block bitmap is not set [ 35.813297][ T497] Quota error (device loop0): write_blk: dquota write failed [ 35.825164][ T497] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 35.838353][ T497] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.36: Failed to acquire dquot type 1 [ 35.858553][ T497] EXT4-fs (loop0): 1 truncate cleaned up [ 35.865124][ T497] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,noload,,errors=continue. Quota mode: writeback. [ 36.228240][ T497] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.290799][ T30] audit: type=1400 audit(1745227813.613:188): avc: denied { remount } for pid=496 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.324634][ T497] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 36.348761][ T497] syz.0.36 (497) used greatest stack depth: 19824 bytes left [ 36.407065][ T30] audit: type=1400 audit(1745227813.723:189): avc: denied { create } for pid=516 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.459311][ T30] audit: type=1400 audit(1745227813.753:190): avc: denied { write } for pid=516 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.528102][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.782148][ T520] loop0: detected capacity change from 0 to 40427 [ 36.790580][ T515] loop1: detected capacity change from 0 to 40427 [ 36.803316][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 36.818534][ T520] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 36.844008][ T520] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 36.874475][ T520] F2FS-fs (loop0): invalid crc value [ 36.901172][ T522] loop3: detected capacity change from 0 to 40427 [ 36.912366][ T520] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 36.928513][ T515] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 36.948358][ T6] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.948424][ T520] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 36.962881][ T515] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 36.986595][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 37.002465][ T520] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 37.008133][ T6] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 37.013122][ T520] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 37.035784][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.046458][ T522] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 37.057846][ T515] F2FS-fs (loop1): invalid crc value [ 37.064790][ T522] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.079198][ T6] usb 3-1: config 0 descriptor?? [ 37.098788][ T522] F2FS-fs (loop3): invalid crc value [ 37.107703][ T515] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 37.131281][ T520] attempt to access beyond end of device [ 37.131281][ T520] loop0: rw=2049, want=45104, limit=40427 [ 37.139092][ T515] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 37.163898][ T522] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 37.198991][ T522] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 37.213861][ T515] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 37.228070][ T515] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.287174][ T522] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.296453][ T515] attempt to access beyond end of device [ 37.296453][ T515] loop1: rw=2049, want=45104, limit=40427 [ 37.308669][ T522] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.344171][ T520] attempt to access beyond end of device [ 37.344171][ T520] loop0: rw=0, want=45104, limit=40427 [ 37.395711][ T522] attempt to access beyond end of device [ 37.395711][ T522] loop3: rw=2049, want=45104, limit=40427 [ 37.435224][ T515] attempt to access beyond end of device [ 37.435224][ T515] loop1: rw=0, want=45104, limit=40427 [ 37.498690][ T522] attempt to access beyond end of device [ 37.498690][ T522] loop3: rw=0, want=45104, limit=40427 [ 37.599391][ T6] chicony 0003:04F2:1236.0003: item fetching failed at offset 5/7 [ 37.610814][ T6] chicony 0003:04F2:1236.0003: Chicony hid parse failed: -22 [ 37.625422][ T6] chicony: probe of 0003:04F2:1236.0003 failed with error -22 [ 37.787855][ T542] loop1: detected capacity change from 0 to 2048 [ 37.918552][ T495] usb 3-1: USB disconnect, device number 3 [ 38.133068][ T542] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.653079][ T30] audit: type=1400 audit(1745227815.933:191): avc: denied { nlmsg_read } for pid=548 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.458538][ T554] loop4: detected capacity change from 0 to 40427 [ 39.502628][ T551] loop0: detected capacity change from 0 to 40427 [ 39.523954][ T554] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 39.535421][ T567] loop2: detected capacity change from 0 to 256 [ 39.537097][ T554] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 39.543544][ T551] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 39.583816][ T551] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 39.590556][ T554] F2FS-fs (loop4): invalid crc value [ 39.600674][ T551] F2FS-fs (loop0): invalid crc value [ 39.609304][ T554] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 39.618415][ T567] exfat: Bad value for 'uid' [ 39.626230][ T554] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 39.648052][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 39.663192][ T554] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 39.672141][ T551] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 39.686158][ T554] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 39.696674][ T551] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 39.764643][ T554] attempt to access beyond end of device [ 39.764643][ T554] loop4: rw=2049, want=45104, limit=40427 [ 39.780868][ T551] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 39.788642][ T551] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 39.873347][ T551] attempt to access beyond end of device [ 39.873347][ T551] loop0: rw=2049, want=45104, limit=40427 [ 39.894609][ T554] attempt to access beyond end of device [ 39.894609][ T554] loop4: rw=0, want=45104, limit=40427 [ 39.898156][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 39.952224][ T570] loop1: detected capacity change from 0 to 40427 [ 39.986494][ T551] attempt to access beyond end of device [ 39.986494][ T551] loop0: rw=0, want=45104, limit=40427 [ 40.028960][ T570] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 40.039245][ T570] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 40.048228][ T6] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.062077][ T6] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.078565][ T570] F2FS-fs (loop1): invalid crc value [ 40.086495][ T570] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 40.104476][ T570] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 40.135999][ T570] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 40.144715][ T570] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 40.208174][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 40.228199][ T6] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 40.248062][ T6] usb 4-1: Product: syz [ 40.252778][ T6] usb 4-1: Manufacturer: syz [ 40.280460][ T585] loop2: detected capacity change from 0 to 40427 [ 40.308823][ T6] hub 4-1:4.0: USB hub found [ 40.359141][ T585] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 40.367399][ T585] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 40.379057][ T585] F2FS-fs (loop2): invalid crc value [ 40.390113][ T585] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 40.405164][ T585] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 40.433665][ T585] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 40.442931][ T585] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.462101][ T30] audit: type=1400 audit(1745227817.783:192): avc: denied { create } for pid=584 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.464101][ T585] syz.2.56[585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.484643][ T585] syz.2.56[585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.492619][ T30] audit: type=1400 audit(1745227817.783:193): avc: denied { setopt } for pid=584 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.537131][ T30] audit: type=1400 audit(1745227817.783:194): avc: denied { write } for pid=584 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.558684][ T6] hub 4-1:4.0: 2 ports detected [ 40.572540][ T30] audit: type=1400 audit(1745227817.783:195): avc: denied { read } for pid=584 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.607880][ T30] audit: type=1400 audit(1745227817.863:196): avc: denied { map } for pid=584 comm="syz.2.56" path="/11/bus/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.665089][ T30] audit: type=1400 audit(1745227817.983:197): avc: denied { ioctl } for pid=584 comm="syz.2.56" path="/11/bus/file1" dev="loop2" ino=10 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.778530][ T6] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 40.808096][ T6] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 40.868927][ T6] usb 4-1: USB disconnect, device number 3 [ 41.484343][ T605] loop1: detected capacity change from 0 to 1024 [ 41.508343][ T60] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 41.553186][ T601] loop2: detected capacity change from 0 to 40427 [ 41.588770][ T601] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 41.611392][ T601] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 41.638686][ T601] F2FS-fs (loop2): invalid crc value [ 41.653851][ T601] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 41.670708][ T601] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 41.676687][ T610] loop3: detected capacity change from 0 to 40427 [ 41.702223][ T601] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 41.716478][ T601] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.758100][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 41.821503][ T610] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 41.844014][ T610] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 41.858881][ T610] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.878182][ T60] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.889267][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 41.896893][ T60] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 41.909035][ T610] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 41.910151][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.928993][ T6] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 41.937331][ T610] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 41.945277][ T60] usb 5-1: config 0 descriptor?? [ 42.098114][ T391] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 42.149617][ T30] audit: type=1400 audit(1745227819.473:198): avc: denied { connect } for pid=624 comm="syz.3.64" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.178894][ T625] loop3: detected capacity change from 0 to 512 [ 42.288227][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.303637][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 42.318630][ T6] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 42.329004][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.338467][ T6] usb 2-1: config 0 descriptor?? [ 42.358296][ T612] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 42.375715][ T625] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.390616][ T625] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.402127][ T60] chicony 0003:04F2:1236.0004: item fetching failed at offset 5/7 [ 42.412207][ T60] chicony 0003:04F2:1236.0004: Chicony hid parse failed: -22 [ 42.420629][ T60] chicony: probe of 0003:04F2:1236.0004 failed with error -22 [ 42.441559][ T625] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 42.457274][ T625] Quota error (device loop3): write_blk: dquota write failed [ 42.465981][ T625] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 42.476892][ T391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.477105][ T625] Quota error (device loop3): write_blk: dquota write failed [ 42.489575][ T391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 42.498298][ T625] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 42.512272][ T391] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.525239][ T625] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.64: Failed to acquire dquot type 1 [ 42.537794][ T391] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 42.551080][ T625] EXT4-fs (loop3): 1 truncate cleaned up [ 42.560003][ T391] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.567030][ T625] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,noblock_validity,max_dir_size_kb=0x000000000181fffc,inlinecrypt,journal_ioprio=0x0000000000000007,discard,nobarrier,dioread_nolock,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 42.580456][ T391] usb 1-1: config 0 descriptor?? [ 42.614782][ T295] usb 5-1: USB disconnect, device number 3 [ 42.624206][ T30] audit: type=1400 audit(1745227819.943:199): avc: denied { write } for pid=624 comm="syz.3.64" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.656533][ T618] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 42.772493][ T30] audit: type=1400 audit(1745227820.093:200): avc: denied { ioctl } for pid=630 comm="syz.2.65" path="socket:[16850]" dev="sockfs" ino=16850 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.823676][ T30] audit: type=1400 audit(1745227820.123:201): avc: denied { write } for pid=630 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.848562][ T30] audit: type=1400 audit(1745227820.123:202): avc: denied { name_bind } for pid=630 comm="syz.2.65" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.873127][ T30] audit: type=1400 audit(1745227820.123:203): avc: denied { node_bind } for pid=630 comm="syz.2.65" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 42.918384][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 42.928475][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 42.938614][ T6] usb 2-1: USB disconnect, device number 2 [ 43.119142][ T391] saitek 0003:06A3:0621.0005: unknown main item tag 0x0 [ 43.134290][ T391] saitek 0003:06A3:0621.0005: unknown main item tag 0x0 [ 43.146667][ T391] saitek 0003:06A3:0621.0005: unbalanced collection at end of report description [ 43.161219][ T391] saitek 0003:06A3:0621.0005: parse failed [ 43.167955][ T391] saitek: probe of 0003:06A3:0621.0005 failed with error -22 [ 43.238075][ T39] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 43.293282][ T637] loop4: detected capacity change from 0 to 40427 [ 43.356119][ T6] usb 1-1: USB disconnect, device number 4 [ 43.380552][ T637] F2FS-fs (loop4): invalid crc value [ 43.389729][ T637] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.430185][ T637] F2FS-fs (loop4): Start checkpoint disabled! [ 43.442000][ T637] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 43.488094][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 43.530204][ T321] handle_bad_sector: 6 callbacks suppressed [ 43.530224][ T321] attempt to access beyond end of device [ 43.530224][ T321] loop4: rw=2049, want=45104, limit=40427 [ 43.608224][ T39] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.638178][ T39] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.702222][ T641] loop1: detected capacity change from 0 to 40427 [ 43.739079][ T641] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 43.755707][ T641] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 43.776778][ T641] F2FS-fs (loop1): invalid crc value [ 43.778236][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 43.803228][ T39] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 43.818163][ T641] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 43.832487][ T39] usb 4-1: Product: syz [ 43.836879][ T39] usb 4-1: Manufacturer: syz [ 43.840194][ T641] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 43.888697][ T39] hub 4-1:4.0: USB hub found [ 43.913101][ T641] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 43.921406][ T641] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 43.968921][ T641] attempt to access beyond end of device [ 43.968921][ T641] loop1: rw=2049, want=45104, limit=40427 [ 44.096005][ T641] attempt to access beyond end of device [ 44.096005][ T641] loop1: rw=0, want=45104, limit=40427 [ 44.108225][ T39] hub 4-1:4.0: 2 ports detected [ 44.134542][ T646] loop4: detected capacity change from 0 to 40427 [ 44.198079][ T295] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 44.207012][ T646] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 44.216279][ T646] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 44.228382][ T646] F2FS-fs (loop4): invalid crc value [ 44.259161][ T646] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 44.277329][ T646] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 44.312978][ T646] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 44.321919][ T646] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.328594][ T39] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 44.341177][ T39] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 44.343297][ T646] attempt to access beyond end of device [ 44.343297][ T646] loop4: rw=2049, want=45104, limit=40427 [ 44.378552][ T39] usb 4-1: USB disconnect, device number 4 [ 44.404740][ T646] attempt to access beyond end of device [ 44.404740][ T646] loop4: rw=0, want=45104, limit=40427 [ 44.448210][ T295] usb 1-1: Using ep0 maxpacket: 32 [ 44.568197][ T295] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.588285][ T295] usb 1-1: config 0 interface 0 has no altsetting 0 [ 44.598340][ T295] usb 1-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 44.617606][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.628648][ T295] usb 1-1: config 0 descriptor?? [ 45.141323][ T295] chicony 0003:04F2:1236.0006: item fetching failed at offset 5/7 [ 45.164108][ T295] chicony 0003:04F2:1236.0006: Chicony hid parse failed: -22 [ 45.270563][ T295] chicony: probe of 0003:04F2:1236.0006 failed with error -22 [ 45.353146][ T295] usb 1-1: USB disconnect, device number 5 [ 45.729285][ T683] loop4: detected capacity change from 0 to 2048 [ 45.818774][ T683] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.825185][ T688] loop1: detected capacity change from 0 to 128 [ 46.188391][ T707] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 46.458117][ T504] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 46.475983][ T712] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 46.848176][ T504] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 46.868838][ T504] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 46.896098][ T504] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.937463][ T504] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 46.971767][ T504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.063057][ T504] usb 1-1: config 0 descriptor?? [ 47.088190][ T702] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 47.635322][ T504] saitek 0003:06A3:0621.0007: unknown main item tag 0x0 [ 47.674985][ T504] saitek 0003:06A3:0621.0007: unknown main item tag 0x0 [ 47.714464][ T504] saitek 0003:06A3:0621.0007: unbalanced collection at end of report description [ 47.744571][ T504] saitek 0003:06A3:0621.0007: parse failed [ 47.759881][ T504] saitek: probe of 0003:06A3:0621.0007 failed with error -22 [ 47.836182][ T504] usb 1-1: USB disconnect, device number 6 [ 47.854213][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 47.854229][ T30] audit: type=1400 audit(1745227825.173:219): avc: denied { read write } for pid=734 comm="syz.3.90" name="uhid" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.855242][ T736] netlink: 'syz.3.90': attribute type 5 has an invalid length. [ 47.862287][ T30] audit: type=1400 audit(1745227825.183:220): avc: denied { open } for pid=734 comm="syz.3.90" path="/dev/uhid" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.996586][ T30] audit: type=1400 audit(1745227825.313:221): avc: denied { ioctl } for pid=739 comm="syz.1.91" path="socket:[16238]" dev="sockfs" ino=16238 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.064244][ T30] audit: type=1400 audit(1745227825.383:222): avc: denied { create } for pid=746 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.091912][ T30] audit: type=1400 audit(1745227825.413:223): avc: denied { connect } for pid=746 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.113994][ T30] audit: type=1400 audit(1745227825.413:224): avc: denied { getopt } for pid=746 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.216877][ T30] audit: type=1400 audit(1745227825.533:225): avc: denied { watch watch_reads } for pid=751 comm="syz.1.95" path="/21" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.338390][ T295] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 48.354712][ T30] audit: type=1400 audit(1745227825.673:226): avc: denied { write } for pid=761 comm="syz.1.98" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 48.394910][ T30] audit: type=1400 audit(1745227825.703:227): avc: denied { validate_trans } for pid=761 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 48.416973][ T30] audit: type=1400 audit(1745227825.723:228): avc: denied { create } for pid=763 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.478127][ T391] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 48.528172][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 48.638129][ T295] usb 4-1: Using ep0 maxpacket: 32 [ 48.668170][ T60] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 48.708315][ T504] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 48.728145][ T391] usb 3-1: Using ep0 maxpacket: 16 [ 48.758218][ T295] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.769989][ T295] usb 4-1: config 0 interface 0 has no altsetting 0 [ 48.777740][ T295] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 48.791270][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.801960][ T295] usb 4-1: config 0 descriptor?? [ 48.808114][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 48.868233][ T391] usb 3-1: config index 0 descriptor too short (expected 36, got 30) [ 48.876953][ T391] usb 3-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 48.889363][ T391] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 48.905558][ T391] usb 3-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 48.918930][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 48.927910][ T391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.938165][ T6] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.951824][ T6] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.958093][ T504] usb 2-1: Using ep0 maxpacket: 32 [ 48.964520][ T391] usb 3-1: config 0 descriptor?? [ 49.008822][ T391] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 49.048264][ T60] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.060892][ T60] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.098209][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 49.098252][ T504] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.108958][ T6] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 49.120465][ T504] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.130722][ T6] usb 5-1: Product: syz [ 49.147149][ T6] usb 5-1: Manufacturer: syz [ 49.188264][ T60] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 49.199820][ T6] hub 5-1:4.0: USB hub found [ 49.205556][ T60] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 49.216414][ T60] usb 1-1: Product: syz [ 49.221003][ T60] usb 1-1: Manufacturer: syz [ 49.258226][ T504] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 49.269541][ T60] hub 1-1:4.0: USB hub found [ 49.270022][ T504] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 49.283871][ T504] usb 2-1: Product: syz [ 49.292317][ T504] usb 2-1: Manufacturer: syz [ 49.309190][ T295] chicony 0003:04F2:1236.0008: item fetching failed at offset 5/7 [ 49.319577][ T295] chicony 0003:04F2:1236.0008: Chicony hid parse failed: -22 [ 49.330694][ T295] chicony: probe of 0003:04F2:1236.0008 failed with error -22 [ 49.343297][ T504] hub 2-1:4.0: USB hub found [ 49.390778][ T759] loop4: detected capacity change from 0 to 512 [ 49.471131][ T764] loop0: detected capacity change from 0 to 512 [ 49.481162][ T759] EXT4-fs (loop4): Ignoring removed oldalloc option [ 49.488589][ T759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 49.497619][ T759] System zones: 1-12 [ 49.504835][ T759] EXT4-fs (loop4): 1 truncate cleaned up [ 49.511337][ T759] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,nouid32,grpid,errors=remount-ro,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 49.511355][ T391] usb 4-1: USB disconnect, device number 5 [ 49.512950][ T764] EXT4-fs (loop0): Ignoring removed oldalloc option [ 49.533093][ T759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 49.546363][ T766] loop1: detected capacity change from 0 to 512 [ 49.561565][ T764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 49.571002][ T6] hub 5-1:4.0: 2 ports detected [ 49.571087][ T764] System zones: 1-12 [ 49.583063][ T764] EXT4-fs (loop0): 1 truncate cleaned up [ 49.589760][ T764] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,debug,nouid32,grpid,errors=remount-ro,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 49.605347][ T766] EXT4-fs (loop1): Ignoring removed oldalloc option [ 49.613571][ T764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 49.628172][ T60] hub 1-1:4.0: 2 ports detected [ 49.633780][ T766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 49.643470][ T766] System zones: 1-12 [ 49.649860][ T766] EXT4-fs (loop1): 1 truncate cleaned up [ 49.655723][ T766] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,debug,nouid32,grpid,errors=remount-ro,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 49.681714][ T766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 49.708221][ T504] hub 2-1:4.0: 2 ports detected [ 49.778160][ T6] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 49.787672][ T6] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 49.828932][ T6] usb 5-1: USB disconnect, device number 4 [ 49.838110][ T60] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 49.845772][ T60] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 49.888663][ T60] usb 1-1: USB disconnect, device number 7 [ 49.915607][ T391] usb 3-1: USB disconnect, device number 4 [ 49.918118][ T504] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 49.934731][ T504] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 50.029169][ T504] usb 2-1: USB disconnect, device number 3 [ 50.238931][ T781] loop3: detected capacity change from 0 to 40427 [ 50.268033][ T781] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 50.279085][ T781] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 50.300975][ T781] F2FS-fs (loop3): invalid crc value [ 50.316646][ T781] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 50.344620][ T781] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 50.498879][ T781] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 50.507987][ T781] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 50.909332][ T781] attempt to access beyond end of device [ 50.909332][ T781] loop3: rw=2049, want=45104, limit=40427 [ 50.924624][ T781] syz.3.102[781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.924707][ T781] syz.3.102[781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.968065][ T60] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 51.386519][ T781] attempt to access beyond end of device [ 51.386519][ T781] loop3: rw=0, want=45104, limit=40427 [ 51.420986][ T803] netlink: 76 bytes leftover after parsing attributes in process `syz.0.107'. [ 51.644690][ T798] overlayfs: failed to get inode (-116) [ 51.670786][ T798] overlayfs: failed to get inode (-116) [ 51.718281][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.747796][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.748493][ T798] overlayfs: failed to get inode (-116) [ 51.765554][ T818] loop1: detected capacity change from 0 to 512 [ 51.813112][ T818] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.819847][ T798] overlayfs: failed to get inode (-116) [ 51.852975][ T825] loop0: detected capacity change from 0 to 256 [ 51.868147][ T60] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 51.882098][ T818] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 51.888111][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 51.902823][ T818] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.111: path /25/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 51.937280][ T818] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 12: comm syz.1.111: path /25/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 51.937683][ T60] usb 5-1: SerialNumber: syz [ 51.958891][ T818] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.111: path /25/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 51.991312][ T825] FAT-fs (loop0): Directory bread(block 64) failed [ 51.998192][ T825] FAT-fs (loop0): Directory bread(block 65) failed [ 52.004672][ T825] FAT-fs (loop0): Directory bread(block 66) failed [ 52.012692][ T825] FAT-fs (loop0): Directory bread(block 67) failed [ 52.028248][ T825] FAT-fs (loop0): Directory bread(block 68) failed [ 52.035193][ T818] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 14: comm syz.1.111: path /25/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 52.059539][ T825] FAT-fs (loop0): Directory bread(block 69) failed [ 52.067429][ T825] FAT-fs (loop0): Directory bread(block 70) failed [ 52.074549][ T825] FAT-fs (loop0): Directory bread(block 71) failed [ 52.082925][ T825] FAT-fs (loop0): Directory bread(block 72) failed [ 52.093696][ T818] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 15: comm syz.1.111: path /25/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 52.101567][ T825] FAT-fs (loop0): Directory bread(block 73) failed [ 52.117688][ T818] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.111: path /25/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 52.154019][ T818] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 17: comm syz.1.111: path /25/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 52.170612][ T825] input: syz0 as /devices/virtual/input/input4 [ 52.180896][ T818] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 18: comm syz.1.111: lblock 23 mapped to illegal pblock 18 (length 1) [ 52.248350][ T818] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 19: comm syz.1.111: path /25/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 52.276408][ T818] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 20: comm syz.1.111: path /25/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 52.318971][ T60] usb 5-1: 0:2 : does not exist [ 52.324856][ T60] usb 5-1: unit 5: unexpected type 0x0a [ 52.358221][ T60] usb 5-1: USB disconnect, device number 5 [ 52.594301][ T291] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 52.724881][ T850] loop0: detected capacity change from 0 to 2048 [ 52.772658][ T842] loop3: detected capacity change from 0 to 40427 [ 52.835523][ T850] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.968384][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 52.968468][ T30] audit: type=1400 audit(1745227830.233:263): avc: denied { write } for pid=854 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 53.010721][ T842] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 53.092777][ T842] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 53.160190][ T842] F2FS-fs (loop3): invalid crc value [ 53.180192][ T842] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 53.202982][ T842] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 53.300195][ T842] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 53.317698][ T842] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 53.405826][ T842] attempt to access beyond end of device [ 53.405826][ T842] loop3: rw=2049, want=45104, limit=40427 [ 53.429723][ T865] loop4: detected capacity change from 0 to 40427 [ 53.454732][ T842] syz.3.116[842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.454826][ T842] syz.3.116[842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.472025][ T842] tap0: tun_chr_ioctl cmd 1074025677 [ 53.488554][ T842] tap0: linktype set to 825 [ 53.493452][ T842] tap0: tun_chr_ioctl cmd 2147767519 [ 53.543391][ T865] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 53.578436][ T865] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 53.610793][ T842] attempt to access beyond end of device [ 53.610793][ T842] loop3: rw=0, want=45104, limit=40427 [ 53.622757][ T865] F2FS-fs (loop4): invalid crc value [ 53.665527][ T877] loop1: detected capacity change from 0 to 128 [ 53.677880][ T865] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 53.713092][ T865] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 53.776638][ T865] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 53.784058][ T865] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 53.838176][ T60] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 53.850362][ T865] attempt to access beyond end of device [ 53.850362][ T865] loop4: rw=2049, want=45104, limit=40427 [ 53.862039][ T865] syz.4.120[865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.862099][ T865] syz.4.120[865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.952380][ T865] attempt to access beyond end of device [ 53.952380][ T865] loop4: rw=0, want=45104, limit=40427 [ 53.988144][ T30] audit: type=1400 audit(1745227831.303:264): avc: denied { create } for pid=888 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.009688][ T889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'. [ 54.089087][ T893] loop0: detected capacity change from 0 to 256 [ 54.268190][ T30] audit: type=1400 audit(1745227831.523:265): avc: denied { ioctl } for pid=888 comm="syz.0.125" path="socket:[17408]" dev="sockfs" ino=17408 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.398917][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 54.518184][ T60] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.536861][ T902] 9pnet: Insufficient options for proto=fd [ 54.542934][ T60] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.555352][ T902] 9pnet: Insufficient options for proto=fd [ 54.580537][ T904] loop4: detected capacity change from 0 to 512 [ 54.678197][ T60] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 54.693395][ T60] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 54.703247][ T60] usb 3-1: Product: syz [ 54.711185][ T60] usb 3-1: Manufacturer: syz [ 54.768673][ T60] hub 3-1:4.0: USB hub found [ 54.795916][ T908] loop1: detected capacity change from 0 to 1024 [ 54.805309][ T904] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 54.844450][ T904] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.915072][ T892] loop3: detected capacity change from 0 to 131072 [ 54.939329][ T911] loop0: detected capacity change from 0 to 128 [ 54.954651][ T892] F2FS-fs (loop3): invalid crc value [ 54.967255][ T908] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.970385][ T892] F2FS-fs (loop3): Found nat_bits in checkpoint [ 54.978663][ T908] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.984965][ T60] hub 3-1:4.0: 2 ports detected [ 55.004727][ T30] audit: type=1326 audit(1745227832.323:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=906 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163e471169 code=0x7ffc0000 [ 55.015286][ T908] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 55.031860][ T30] audit: type=1326 audit(1745227832.323:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=906 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f163e471169 code=0x7ffc0000 [ 55.098984][ T30] audit: type=1326 audit(1745227832.323:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=906 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163e471169 code=0x7ffc0000 [ 55.132454][ T30] audit: type=1326 audit(1745227832.333:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=906 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f163e471169 code=0x7ffc0000 [ 55.175458][ T30] audit: type=1400 audit(1745227832.483:270): avc: denied { create } for pid=903 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 55.185533][ T911] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.186115][ T911] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.263267][ T908] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 55.263420][ T908] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.263420][ T908] [ 55.263457][ T908] EXT4-fs (loop1): Total free blocks count 0 [ 55.263494][ T908] EXT4-fs (loop1): Free/Dirty block details [ 55.263550][ T908] EXT4-fs (loop1): free_blocks=4293918720 [ 55.263655][ T908] EXT4-fs (loop1): dirty_blocks=16 [ 55.263694][ T908] EXT4-fs (loop1): Block reservation details [ 55.263727][ T908] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 55.302580][ T30] audit: type=1326 audit(1745227832.583:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=906 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163e471169 code=0x7ffc0000 [ 55.361133][ T60] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 55.361162][ T60] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 55.542055][ T60] usb 3-1: USB disconnect, device number 5 [ 55.580464][ T892] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 55.630106][ T892] F2FS-fs (loop3): Corrupted max_depth of 3: 16842753 [ 55.659069][ T30] audit: type=1400 audit(1745227832.983:272): avc: denied { map } for pid=891 comm="syz.3.124" path="/26/file1/file1" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.704125][ T892] fscrypt (loop3, inode 8): Error -61 getting encryption context [ 56.018152][ T316] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 56.038183][ T504] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 56.064925][ T930] xt_CONNSECMARK: invalid mode: 0 [ 56.074397][ T930] loop3: detected capacity change from 0 to 256 [ 56.088073][ T60] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 56.111342][ T930] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 56.268063][ T316] usb 2-1: Using ep0 maxpacket: 32 [ 56.308129][ T504] usb 5-1: Using ep0 maxpacket: 32 [ 56.347391][ T941] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=64 (128 ns) > initial count (34 ns). Using initial count to start timer. [ 56.398767][ T316] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.417421][ T316] usb 2-1: config 0 interface 0 has no altsetting 0 [ 56.430033][ T316] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 56.440952][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.453601][ T316] usb 2-1: config 0 descriptor?? [ 56.458219][ T504] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.468357][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 56.480005][ T504] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.480547][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 56.487285][ T504] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 56.500690][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 56.510026][ T504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.533942][ T504] usb 5-1: config 0 descriptor?? [ 56.708378][ T60] usb 3-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 56.719517][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.729637][ T60] usb 3-1: Product: syz [ 56.735551][ T60] usb 3-1: Manufacturer: syz [ 56.740905][ T60] usb 3-1: SerialNumber: syz [ 56.747123][ T60] usb 3-1: config 0 descriptor?? [ 56.919276][ T316] chicony 0003:04F2:1236.0009: item fetching failed at offset 5/7 [ 56.929044][ T20] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 56.937096][ T316] chicony 0003:04F2:1236.0009: Chicony hid parse failed: -22 [ 56.948100][ T316] chicony: probe of 0003:04F2:1236.0009 failed with error -22 [ 57.012250][ T928] incfs: Error accessing: ./bus. [ 57.017975][ T928] incfs: mount failed -2 [ 57.019502][ T504] chicony 0003:04F2:1236.000A: item fetching failed at offset 5/7 [ 57.039910][ T504] chicony 0003:04F2:1236.000A: Chicony hid parse failed: -22 [ 57.056702][ T504] chicony: probe of 0003:04F2:1236.000A failed with error -22 [ 57.074195][ T504] usb 3-1: USB disconnect, device number 6 [ 57.120639][ T316] usb 2-1: USB disconnect, device number 4 [ 57.234376][ T60] usb 5-1: USB disconnect, device number 6 [ 57.317066][ T20] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 57.325994][ T20] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 57.335254][ T20] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 57.345155][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 57.588145][ T20] usb 4-1: string descriptor 0 read error: -22 [ 57.594939][ T20] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=ff.ff [ 57.606253][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.619446][ T20] usb 4-1: config 0 descriptor?? [ 57.648163][ T957] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 57.668692][ T20] hub 4-1:0.0: bad descriptor, ignoring hub [ 57.675667][ T20] hub: probe of 4-1:0.0 failed with error -5 [ 57.685076][ T20] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 57.699378][ T981] loop1: detected capacity change from 0 to 128 [ 57.729949][ T981] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 57.747685][ T982] loop2: detected capacity change from 0 to 512 [ 57.838849][ T982] EXT4-fs (loop2): Test dummy encryption mode enabled [ 57.869902][ T26] usb 4-1: USB disconnect, device number 6 [ 57.876603][ T982] EXT4-fs error (device loop2): __ext4_iget:4903: inode #11: block 1: comm syz.2.145: invalid block [ 57.935869][ T982] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.145: couldn't read orphan inode 11 (err -117) [ 57.959361][ T982] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none. [ 58.424245][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 58.424947][ T30] audit: type=1400 audit(1745227835.383:285): avc: denied { accept } for pid=993 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 61.213222][ T1031] loop1: detected capacity change from 0 to 512 [ 61.323045][ T30] audit: type=1326 audit(1745227838.643:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1033 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 61.580563][ T1031] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.640525][ T1031] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.159: bad orphan inode 13 [ 61.717559][ T30] audit: type=1326 audit(1745227838.743:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1033 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 61.748704][ T1031] ext4_test_bit(bit=12, block=18) = 1 [ 61.752590][ T30] audit: type=1326 audit(1745227838.773:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1033 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 61.761075][ T1031] is_bad_inode(inode)=0 [ 61.781354][ T30] audit: type=1326 audit(1745227838.773:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1033 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 61.810770][ T30] audit: type=1326 audit(1745227838.783:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1033 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 61.837297][ T30] audit: type=1326 audit(1745227838.793:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1033 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 61.846857][ T1031] NEXT_ORPHAN(inode)=2130706432 [ 61.902618][ T30] audit: type=1326 audit(1745227838.793:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1033 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 61.935032][ T1031] max_ino=32 [ 61.945267][ T1031] i_nlink=1 [ 61.947897][ T30] audit: type=1326 audit(1745227838.843:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1033 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 62.005096][ T30] audit: type=1326 audit(1745227838.853:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1033 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 62.050343][ T1031] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 62.216215][ T1044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.162'. [ 62.667377][ T504] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 62.870412][ T1031] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.159: deleted inode referenced: 12 [ 62.914006][ T1031] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.159: deleted inode referenced: 12 [ 62.958162][ T504] usb 5-1: Using ep0 maxpacket: 32 [ 62.988244][ T1066] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 63.134148][ T1066] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.159: bg 0: block 248: padding at end of block bitmap is not set [ 63.148721][ T504] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.178081][ T504] usb 5-1: config 0 interface 0 has no altsetting 0 [ 63.369433][ T1066] EXT4-fs error (device loop1): ext4_acquire_dquot:6195: comm syz.1.159: Failed to acquire dquot type 1 [ 63.388107][ T504] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 63.415681][ T504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.443042][ T504] usb 5-1: config 0 descriptor?? [ 63.454959][ T1066] EXT4-fs warning (device loop1): ext4_enable_quotas:6430: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.588864][ T1066] syz.1.159 (1066) used greatest stack depth: 18912 bytes left [ 63.669366][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 63.669386][ T30] audit: type=1326 audit(1745227840.993:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1082 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163e471169 code=0x7ffc0000 [ 63.703205][ T30] audit: type=1326 audit(1745227840.993:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1082 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f163e471169 code=0x7ffc0000 [ 63.745547][ T30] audit: type=1326 audit(1745227840.993:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1082 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163e471169 code=0x7ffc0000 [ 63.782871][ T30] audit: type=1326 audit(1745227840.993:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1082 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f163e471169 code=0x7ffc0000 [ 63.841641][ T30] audit: type=1326 audit(1745227840.993:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1082 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163e471169 code=0x7ffc0000 [ 63.869578][ T30] audit: type=1326 audit(1745227841.023:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1082 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163e471169 code=0x7ffc0000 [ 63.902130][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 63.962941][ T30] audit: type=1400 audit(1745227841.103:324): avc: denied { ioctl } for pid=1084 comm="syz.1.173" path="socket:[17997]" dev="sockfs" ino=17997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.994060][ T504] chicony 0003:04F2:1236.000B: item fetching failed at offset 5/7 [ 64.006415][ T504] chicony 0003:04F2:1236.000B: Chicony hid parse failed: -22 [ 64.020903][ T504] chicony: probe of 0003:04F2:1236.000B failed with error -22 [ 64.042857][ T1088] loop1: detected capacity change from 0 to 2048 [ 64.155498][ T1088] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.194798][ T504] usb 5-1: USB disconnect, device number 7 [ 64.398559][ T26] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 64.486339][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.546038][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.560227][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 64.596128][ T1094] loop3: detected capacity change from 0 to 40427 [ 64.612250][ T1094] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 64.620404][ T1094] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 64.641384][ T1094] F2FS-fs (loop3): invalid crc value [ 64.650083][ T1094] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 64.663613][ T26] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 64.676275][ T26] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 64.689432][ T1094] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 64.697976][ T26] usb 1-1: Manufacturer: syz [ 64.718420][ T26] usb 1-1: config 0 descriptor?? [ 64.737594][ T1094] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 64.748892][ T1094] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.793878][ T1094] attempt to access beyond end of device [ 64.793878][ T1094] loop3: rw=2049, want=45104, limit=40427 [ 64.867851][ T1094] attempt to access beyond end of device [ 64.867851][ T1094] loop3: rw=0, want=45104, limit=40427 [ 64.894556][ T1114] loop1: detected capacity change from 0 to 128 [ 64.941103][ T1114] attempt to access beyond end of device [ 64.941103][ T1114] loop1: rw=2049, want=1041, limit=128 [ 64.957724][ T1114] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 65.257740][ T26] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 65.400375][ T26] appleir 0003:05AC:8243.000C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 65.421358][ T1112] loop4: detected capacity change from 0 to 40427 [ 65.436507][ T30] audit: type=1400 audit(1745227842.753:325): avc: denied { ioctl } for pid=1121 comm="syz.1.183" path="/dev/ppp" dev="devtmpfs" ino=150 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.492937][ T1112] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 65.510171][ T1112] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 65.541267][ T295] usb 1-1: USB disconnect, device number 8 [ 65.636638][ T1112] F2FS-fs (loop4): invalid crc value [ 65.649192][ T1112] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 65.662875][ T1112] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 66.050820][ T1112] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 66.060301][ T1112] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 66.092406][ T1112] attempt to access beyond end of device [ 66.092406][ T1112] loop4: rw=2049, want=45104, limit=40427 [ 66.117912][ T1112] syz.4.180[1112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.118611][ T1112] syz.4.180[1112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.121478][ T1137] loop2: detected capacity change from 0 to 512 [ 66.230283][ T1137] EXT4-fs (loop2): 1 orphan inode deleted [ 66.238809][ T1137] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 66.264404][ T1137] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.278119][ T30] audit: type=1400 audit(1745227843.593:326): avc: denied { append } for pid=1132 comm="syz.2.186" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.307722][ T1137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 66.345420][ T30] audit: type=1400 audit(1745227843.663:327): avc: denied { setopt } for pid=1143 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.665877][ T1147] loop4: detected capacity change from 0 to 40427 [ 66.752386][ T1147] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 66.764016][ T1147] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 66.788076][ T295] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 66.798511][ T1147] F2FS-fs (loop4): invalid crc value [ 66.827028][ T1147] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 66.849043][ T1147] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 66.919768][ T1147] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 66.949230][ T1147] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 67.030619][ T1147] attempt to access beyond end of device [ 67.030619][ T1147] loop4: rw=2049, want=45104, limit=40427 [ 67.048130][ T295] usb 2-1: Using ep0 maxpacket: 32 [ 67.094586][ T1147] syz.4.188[1147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.094677][ T1147] syz.4.188[1147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.188181][ T295] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.207059][ T1147] attempt to access beyond end of device [ 67.207059][ T1147] loop4: rw=0, want=45104, limit=40427 [ 67.233143][ T295] usb 2-1: config 0 interface 0 has no altsetting 0 [ 67.252344][ T295] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 67.272876][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.282531][ T295] usb 2-1: config 0 descriptor?? [ 67.328166][ T316] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 67.548713][ T1163] loop0: detected capacity change from 0 to 40427 [ 67.574363][ T1163] F2FS-fs (loop0): invalid crc value [ 67.583485][ T1163] F2FS-fs (loop0): Found nat_bits in checkpoint [ 67.650515][ T1163] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 67.714141][ T1173] loop4: detected capacity change from 0 to 2048 [ 67.728302][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.880010][ T1173] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.909601][ T1173] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.194: bg 0: block 234: padding at end of block bitmap is not set [ 67.950700][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.084819][ T316] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 68.159456][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.303804][ T316] usb 4-1: config 0 descriptor?? [ 68.480320][ T295] chicony 0003:04F2:1236.000D: item fetching failed at offset 5/7 [ 68.489371][ T295] chicony 0003:04F2:1236.000D: Chicony hid parse failed: -22 [ 68.497026][ T295] chicony: probe of 0003:04F2:1236.000D failed with error -22 [ 68.506592][ T295] usb 2-1: USB disconnect, device number 5 [ 68.864855][ T1185] loop4: detected capacity change from 0 to 128 [ 68.917839][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 68.917859][ T30] audit: type=1400 audit(1745227846.233:329): avc: denied { ioctl } for pid=1184 comm="syz.4.197" path="socket:[18175]" dev="sockfs" ino=18175 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.964980][ T1188] syz.0.195 uses obsolete (PF_INET,SOCK_PACKET) [ 68.988066][ T30] audit: type=1400 audit(1745227846.283:330): avc: denied { create } for pid=1180 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.027637][ T30] audit: type=1400 audit(1745227846.333:331): avc: denied { bind } for pid=1189 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.058238][ T295] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 69.110477][ T30] audit: type=1326 audit(1745227846.343:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1189 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 69.141477][ T316] usbhid 4-1:0.0: can't add hid device: -71 [ 69.156473][ T316] usbhid: probe of 4-1:0.0 failed with error -71 [ 69.171092][ T316] usb 4-1: USB disconnect, device number 7 [ 69.208126][ T30] audit: type=1326 audit(1745227846.343:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1189 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 69.247737][ T1187] loop2: detected capacity change from 0 to 40427 [ 69.264998][ T1187] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 69.273288][ T30] audit: type=1326 audit(1745227846.343:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1189 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 69.299120][ T1187] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 69.326454][ T30] audit: type=1326 audit(1745227846.343:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1189 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 69.353679][ T1187] F2FS-fs (loop2): invalid crc value [ 69.358200][ T295] usb 2-1: Using ep0 maxpacket: 32 [ 69.372941][ T1187] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 69.393141][ T30] audit: type=1326 audit(1745227846.343:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1189 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 69.418694][ T1187] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 69.435451][ T1203] device veth1_macvtap left promiscuous mode [ 69.447951][ T1203] device macsec0 entered promiscuous mode [ 69.471137][ T30] audit: type=1326 audit(1745227846.343:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1189 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 69.496196][ T1187] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 69.508157][ T295] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.526083][ T295] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.540433][ T1187] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 69.543883][ T1209] capability: warning: `syz.4.203' uses 32-bit capabilities (legacy support in use) [ 69.586860][ T1187] attempt to access beyond end of device [ 69.586860][ T1187] loop2: rw=2049, want=45104, limit=40427 [ 69.606576][ T30] audit: type=1326 audit(1745227846.343:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1189 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d8f6d169 code=0x7ffc0000 [ 69.638740][ T1187] syz.2.198[1187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.638827][ T1187] syz.2.198[1187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.738100][ T295] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 69.761192][ T295] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 69.775131][ T295] usb 2-1: Product: syz [ 69.780141][ T295] usb 2-1: Manufacturer: syz [ 69.819219][ T295] hub 2-1:4.0: USB hub found [ 69.888098][ T559] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 69.966338][ T1218] loop2: detected capacity change from 0 to 2048 [ 70.028072][ T20] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 70.038151][ T295] hub 2-1:4.0: 2 ports detected [ 70.050480][ T1218] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.218185][ T559] usb 5-1: too many configurations: 26, using maximum allowed: 8 [ 70.248120][ T295] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 70.254692][ T295] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 70.288556][ T295] usb 2-1: USB disconnect, device number 6 [ 70.308310][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.319573][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.388160][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.398828][ T20] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 70.407775][ T20] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 70.408147][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.417362][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.440601][ T20] usb 1-1: config 0 descriptor?? [ 70.442691][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.528144][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.548188][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.648193][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.660238][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.697676][ T1232] loop3: detected capacity change from 0 to 512 [ 70.706326][ T1214] loop0: detected capacity change from 0 to 256 [ 70.748833][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.759402][ T1234] loop1: detected capacity change from 0 to 512 [ 70.769118][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.786716][ T1232] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 70.800097][ T1232] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.801071][ T1234] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.210: Invalid inode bitmap blk 4 in block_group 0 [ 70.834482][ T1214] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 70.838391][ T1234] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,grpjquota=,,errors=continue. Quota mode: none. [ 70.908086][ T20] usb 1-1: string descriptor 0 read error: -71 [ 70.924688][ T20] usb 1-1: USB disconnect, device number 9 [ 70.981606][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.992784][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.088493][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.125485][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.404610][ T1243] loop1: detected capacity change from 0 to 1024 [ 71.432247][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.443989][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.459107][ T1243] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 71.461585][ T559] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 71.474151][ T1243] EXT4-fs (loop1): Ignoring removed bh option [ 71.486836][ T559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.488662][ T1243] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 71.507738][ T1243] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.511693][ T559] usb 5-1: config 0 descriptor?? [ 71.516195][ T1243] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 71.534377][ T1243] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #3: comm syz.1.213: mark_inode_dirty error [ 71.558873][ T1243] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.213: Invalid block bitmap block 3 in block_group 0 [ 71.576997][ T1243] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 71.588596][ T1243] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #3: comm syz.1.213: mark_inode_dirty error [ 71.600906][ T1243] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm syz.1.213: lblock 6 mapped to illegal pblock 1 (length 1) [ 71.615778][ T1243] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.213: lblock 0 mapped to illegal pblock 48 (length 1) [ 71.630710][ T1243] EXT4-fs error (device loop1): ext4_acquire_dquot:6195: comm syz.1.213: Failed to acquire dquot type 0 [ 71.643610][ T1243] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 49: comm syz.1.213: lblock 1 mapped to illegal pblock 49 (length 1) [ 71.661609][ T1243] EXT4-fs error (device loop1): ext4_acquire_dquot:6195: comm syz.1.213: Failed to acquire dquot type 0 [ 71.677424][ T1243] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 71.721358][ T1255] veth0_to_hsr: mtu greater than device maximum [ 71.728740][ T1243] EXT4-fs error (device loop1): ext4_evict_inode:283: inode #15: comm syz.1.213: mark_inode_dirty error [ 71.748685][ T1243] EXT4-fs warning (device loop1): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 71.760112][ T1243] EXT4-fs (loop1): 1 orphan inode deleted [ 71.765934][ T1243] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,jqfmt=vfsold,minixdf,bh,abort,noblock_validity,barrier,journal_dev=0x0000000000000f35,,errors=continue. Quota mode: none. [ 71.799183][ T1252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 71.809654][ T1252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 71.822081][ T1252] loop0: detected capacity change from 0 to 256 [ 71.867335][ T1260] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 16: comm syz.1.213: lblock 0 mapped to illegal pblock 16 (length 1) [ 71.869889][ T1252] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 71.914069][ T1250] xt_TCPMSS: Only works on TCP SYN packets [ 72.003159][ T1209] syz.4.203[1209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.003248][ T1209] syz.4.203[1209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.048041][ T20] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 72.103227][ T1209] mmap: syz.4.203 (1209) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 72.110555][ T1259] loop3: detected capacity change from 0 to 40427 [ 72.124407][ T559] hid-led 0003:04D8:F372.000E: unexpected long global item [ 72.132159][ T559] hid-led: probe of 0003:04D8:F372.000E failed with error -22 [ 72.193113][ T1259] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 72.222000][ T1259] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 72.292345][ T1259] F2FS-fs (loop3): invalid crc value [ 72.358101][ T20] usb 3-1: Invalid ep0 maxpacket: 32 [ 72.382796][ T1259] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 72.470404][ T1259] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 72.508158][ T20] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 72.588975][ T1259] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 72.596539][ T1259] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.665303][ T1259] attempt to access beyond end of device [ 72.665303][ T1259] loop3: rw=2049, want=45104, limit=40427 [ 72.680309][ T1259] syz.3.216[1259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.680579][ T1259] syz.3.216[1259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.768066][ T20] usb 3-1: Invalid ep0 maxpacket: 32 [ 72.816660][ T20] usb usb3-port1: attempt power cycle [ 73.062939][ T1292] tipc: Started in network mode [ 73.068486][ T1292] tipc: Node identity 6, cluster identity 4711 [ 73.075409][ T1292] tipc: Node number set to 6 [ 74.428459][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 74.428538][ T30] audit: type=1400 audit(1745227851.653:451): avc: denied { connect } for pid=1298 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.638041][ T20] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 74.645176][ T30] audit: type=1400 audit(1745227851.963:452): avc: denied { write } for pid=1310 comm="syz.1.231" name="raw" dev="proc" ino=4026532318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 74.684104][ T1314] device wg1 entered promiscuous mode [ 74.710834][ T30] audit: type=1400 audit(1745227852.033:453): avc: denied { bind } for pid=1317 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.733131][ T30] audit: type=1400 audit(1745227852.043:454): avc: denied { setopt } for pid=1317 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.816246][ T30] audit: type=1400 audit(1745227852.133:455): avc: denied { block_suspend } for pid=1332 comm="syz.1.242" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.839796][ T20] usb 3-1: device descriptor read/8, error -71 [ 74.847106][ T1336] netlink: 116 bytes leftover after parsing attributes in process `syz.4.240'. [ 74.893700][ T30] audit: type=1400 audit(1745227852.213:456): avc: denied { create } for pid=1342 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.918201][ T295] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 75.010056][ T30] audit: type=1400 audit(1745227852.333:457): avc: denied { create } for pid=1351 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 75.011422][ T1352] Zero length message leads to an empty skb [ 75.078134][ T20] usb 3-1: device descriptor read/8, error -71 [ 75.098332][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 75.168535][ T295] usb 4-1: Using ep0 maxpacket: 16 [ 75.298889][ T295] usb 4-1: config 0 interface 0 has no altsetting 0 [ 75.308790][ T295] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 75.321393][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.338262][ T295] usb 4-1: config 0 descriptor?? [ 75.348284][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 75.628278][ T26] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 75.638982][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.658051][ T20] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 75.659342][ T26] usb 1-1: Product: syz [ 75.670601][ T26] usb 1-1: Manufacturer: syz [ 75.675654][ T26] usb 1-1: SerialNumber: syz [ 75.680667][ T295] usbhid 4-1:0.0: can't add hid device: -71 [ 75.689960][ T295] usbhid: probe of 4-1:0.0 failed with error -71 [ 75.707569][ T26] r8152-cfgselector 1-1: config 0 descriptor?? [ 75.721646][ T295] usb 4-1: USB disconnect, device number 8 [ 75.788361][ T30] audit: type=1400 audit(1745227853.103:458): avc: denied { read } for pid=1368 comm="syz.4.257" name="rtc0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.832766][ T1371] UDC core: couldn't find an available UDC or it's busy: -16 [ 75.840603][ T30] audit: type=1400 audit(1745227853.103:459): avc: denied { open } for pid=1368 comm="syz.4.257" path="/dev/rtc0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.865207][ T1371] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.874258][ T30] audit: type=1400 audit(1745227853.103:460): avc: denied { ioctl } for pid=1368 comm="syz.4.257" path="/dev/rtc0" dev="devtmpfs" ino=255 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.938117][ T20] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 75.947729][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.957715][ T20] usb 3-1: config 0 descriptor?? [ 76.188218][ T26] r8152-cfgselector 1-1: Unknown version 0x0000 [ 76.196052][ T26] r8152-cfgselector 1-1: bad CDC descriptors [ 76.218151][ T26] r8152-cfgselector 1-1: Unknown version 0x0000 [ 76.228670][ T26] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 76.446725][ T1385] device bridge1 entered promiscuous mode [ 76.484528][ T1388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 77.486458][ T1428] bridge0: port 3(gretap0) entered blocking state [ 77.493354][ T1428] bridge0: port 3(gretap0) entered disabled state [ 77.513426][ T1428] device gretap0 entered promiscuous mode [ 77.522096][ T1428] bridge0: port 3(gretap0) entered blocking state [ 77.529833][ T1428] bridge0: port 3(gretap0) entered forwarding state [ 78.298785][ T26] usb 3-1: USB disconnect, device number 10 [ 79.389617][ T1473] xt_hashlimit: size too large, truncated to 1048576 [ 79.526322][ T1484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 80.329751][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 80.329767][ T30] audit: type=1400 audit(1745227857.653:471): avc: denied { execute } for pid=1491 comm="syz.0.299" path="/62/file0" dev="tmpfs" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.469851][ T1510] process 'syz.3.307' launched './file0' with NULL argv: empty string added [ 80.480287][ T30] audit: type=1400 audit(1745227857.803:472): avc: denied { mounton } for pid=1509 comm="syz.3.307" path="/proc/181/task" dev="proc" ino=19850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 80.524860][ T30] audit: type=1400 audit(1745227857.803:473): avc: denied { mount } for pid=1509 comm="syz.3.307" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.873680][ T1539] UDC core: couldn't find an available UDC or it's busy: -16 [ 81.898119][ T1539] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.939378][ T30] audit: type=1326 audit(1745227859.263:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a8e816359 code=0x7ffc0000 [ 82.005715][ T30] audit: type=1326 audit(1745227859.303:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a8e816359 code=0x7ffc0000 [ 82.110695][ T30] audit: type=1326 audit(1745227859.303:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a8e816359 code=0x7ffc0000 [ 82.145587][ T30] audit: type=1326 audit(1745227859.303:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a8e816359 code=0x7ffc0000 [ 82.176026][ T30] audit: type=1326 audit(1745227859.303:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a8e816359 code=0x7ffc0000 [ 82.206135][ T30] audit: type=1326 audit(1745227859.303:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a8e816359 code=0x7ffc0000 [ 82.235993][ T30] audit: type=1326 audit(1745227859.303:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a8e816359 code=0x7ffc0000 [ 83.818086][ T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 84.068081][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 84.263192][ T26] usb 2-1: config 0 has no interfaces? [ 84.269205][ T26] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.279570][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.304145][ T26] usb 2-1: config 0 descriptor?? [ 84.998122][ T20] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 85.288076][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 85.456380][ T20] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 85.578085][ T30] kauditd_printk_skb: 4072 callbacks suppressed [ 85.578104][ T30] audit: type=1400 audit(1745227862.893:4553): avc: denied { create } for pid=1636 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.670870][ T30] audit: type=1400 audit(1745227862.993:4554): avc: denied { write } for pid=1642 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.703555][ T1645] UDC core: couldn't find an available UDC or it's busy: -16 [ 85.708497][ T20] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.712082][ T1645] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.721853][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.737781][ T20] usb 1-1: Product: syz [ 85.743786][ T20] usb 1-1: Manufacturer: syz [ 85.749240][ T20] usb 1-1: SerialNumber: syz [ 85.755334][ T20] usb 1-1: config 0 descriptor?? [ 86.312379][ T1649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 86.373474][ T30] audit: type=1400 audit(1745227863.693:4555): avc: denied { nlmsg_write } for pid=1651 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 86.381833][ T26] usb 2-1: USB disconnect, device number 7 [ 86.497323][ T30] audit: type=1400 audit(1745227863.813:4556): avc: denied { read } for pid=1655 comm="syz.2.359" dev="nsfs" ino=4026532559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.554999][ T30] audit: type=1400 audit(1745227863.843:4557): avc: denied { open } for pid=1655 comm="syz.2.359" path="net:[4026532559]" dev="nsfs" ino=4026532559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.766941][ T1676] bridge0: port 3(gretap0) entered blocking state [ 86.774929][ T1676] bridge0: port 3(gretap0) entered disabled state [ 86.785097][ T1676] device gretap0 entered promiscuous mode [ 86.792456][ T1676] bridge0: port 3(gretap0) entered blocking state [ 86.799520][ T1676] bridge0: port 3(gretap0) entered forwarding state [ 86.816124][ T1676] device gretap0 left promiscuous mode [ 86.822440][ T1676] bridge0: port 3(gretap0) entered disabled state [ 86.878339][ T30] audit: type=1400 audit(1745227864.083:4558): avc: denied { bind } for pid=1659 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.931913][ T30] audit: type=1400 audit(1745227864.083:4559): avc: denied { name_bind } for pid=1659 comm="syz.2.362" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 86.937919][ T1677] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 86.965658][ T30] audit: type=1400 audit(1745227864.083:4560): avc: denied { node_bind } for pid=1659 comm="syz.2.362" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 86.969135][ T1677] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 87.089601][ T316] usb 1-1: USB disconnect, device number 11 [ 87.284322][ T26] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 87.298261][ T30] audit: type=1400 audit(1745227864.513:4561): avc: denied { mount } for pid=1680 comm="syz.4.368" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.332550][ T1689] bridge0: port 3(gretap0) entered disabled state [ 87.343809][ T1689] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.353952][ T1689] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.371272][ T1689] netlink: 'syz.3.370': attribute type 16 has an invalid length. [ 87.379354][ T1689] netlink: 'syz.3.370': attribute type 17 has an invalid length. [ 87.388948][ T1689] bridge0: port 3(gretap0) entered blocking state [ 87.395434][ T1689] bridge0: port 3(gretap0) entered forwarding state [ 87.407405][ T1689] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.416400][ T1689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.425175][ T1689] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.432792][ T1689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.480013][ T1693] input: syz1 as /devices/virtual/input/input6 [ 87.489844][ T30] audit: type=1400 audit(1745227864.813:4562): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=694 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.550308][ T1699] netlink: 156 bytes leftover after parsing attributes in process `syz.3.374'. [ 87.588033][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 88.302318][ T316] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 88.304586][ T26] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 88.323862][ T26] usb 2-1: config 0 has no interface number 0 [ 88.978204][ T26] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 88.988283][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.996775][ T26] usb 2-1: Product: syz [ 89.008307][ T26] usb 2-1: Manufacturer: syz [ 89.012857][ T26] usb 2-1: SerialNumber: syz [ 89.029081][ T26] usb 2-1: config 0 descriptor?? [ 89.318135][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.332686][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.348844][ T316] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 89.359681][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.398754][ T316] usb 1-1: config 0 descriptor?? [ 89.419275][ T1744] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 89.512415][ T1751] tmpfs: Bad value for 'size' [ 89.731161][ T316] usbhid 1-1:0.0: can't add hid device: -71 [ 89.745291][ T316] usbhid: probe of 1-1:0.0 failed with error -71 [ 89.756167][ T1768] tmpfs: Unknown parameter 'usrquota' [ 89.764191][ T316] usb 1-1: USB disconnect, device number 12 [ 89.872952][ T1780] UDC core: couldn't find an available UDC or it's busy: -16 [ 89.889529][ T1780] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.639052][ T504] usb 2-1: USB disconnect, device number 8 [ 90.758081][ T26] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 90.857582][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 90.857626][ T30] audit: type=1400 audit(1745227868.173:4571): avc: denied { setopt } for pid=1790 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.896870][ T30] audit: type=1400 audit(1745227868.183:4572): avc: denied { ioctl } for pid=1790 comm="syz.1.408" path="socket:[20474]" dev="sockfs" ino=20474 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.929653][ T30] audit: type=1400 audit(1745227868.193:4573): avc: denied { bind } for pid=1790 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.962328][ T30] audit: type=1400 audit(1745227868.193:4574): avc: denied { read } for pid=1790 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.986333][ T30] audit: type=1400 audit(1745227868.253:4575): avc: denied { write } for pid=1790 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.158211][ T26] usb 3-1: device descriptor read/64, error -71 [ 91.158266][ T412] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 91.178237][ T316] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 92.028043][ T316] usb 1-1: Using ep0 maxpacket: 8 [ 92.214021][ T1815] IPv6: NLM_F_REPLACE set, but no existing node found! [ 92.223128][ T412] usb 4-1: Using ep0 maxpacket: 8 [ 92.228904][ T26] usb 3-1: device descriptor read/64, error -71 [ 92.498269][ T26] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 92.513362][ T30] audit: type=1400 audit(1745227869.833:4576): avc: denied { write } for pid=1818 comm="syz.4.418" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 92.544302][ T1821] UDC core: couldn't find an available UDC or it's busy: -16 [ 92.552379][ T1821] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 92.578229][ T412] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 92.588141][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.597144][ T412] usb 4-1: Product: syz [ 92.601610][ T412] usb 4-1: Manufacturer: syz [ 92.607667][ T412] usb 4-1: SerialNumber: syz [ 92.613653][ T412] usb 4-1: config 0 descriptor?? [ 92.628256][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.640691][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.685568][ T316] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 92.696457][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.707130][ T316] usb 1-1: config 0 descriptor?? [ 92.788204][ T26] usb 3-1: device descriptor read/64, error -71 [ 92.988052][ T412] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 93.178922][ T316] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0xe [ 93.228102][ T412] usb 2-1: Using ep0 maxpacket: 16 [ 93.258159][ T316] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf3 found [ 93.266519][ T316] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf4 found [ 93.379233][ T316] usb 1-1: USB disconnect, device number 13 [ 93.508310][ T412] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 93.518844][ T412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.529080][ T412] usb 2-1: Product: syz [ 93.533298][ T412] usb 2-1: Manufacturer: syz [ 93.537827][ T412] usb 2-1: SerialNumber: syz [ 93.543637][ T412] usb 2-1: config 0 descriptor?? [ 93.588836][ T412] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 93.790181][ T316] usb 2-1: USB disconnect, device number 9 [ 94.008270][ T30] audit: type=1400 audit(1745227871.273:4577): avc: denied { create } for pid=1847 comm="syz.2.428" name="#e" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.147911][ T30] audit: type=1400 audit(1745227871.273:4578): avc: denied { link } for pid=1847 comm="syz.2.428" name="#e" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.158366][ T26] usb 4-1: USB disconnect, device number 9 [ 94.177013][ T30] audit: type=1400 audit(1745227871.273:4579): avc: denied { rename } for pid=1847 comm="syz.2.428" name="#f" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.232432][ T30] audit: type=1326 audit(1745227871.523:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1854 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c00c8b169 code=0x7ffc0000 [ 94.533929][ T1871] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 94.543025][ T1871] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 95.008109][ T316] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 95.288130][ T316] usb 2-1: Using ep0 maxpacket: 32 [ 95.348233][ T316] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 95.458529][ T316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.558623][ T316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.649201][ T1896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'. [ 95.658142][ T316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.758131][ T316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.858144][ T316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.958167][ T316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.048127][ T316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.138130][ T316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.218062][ T26] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 96.328181][ T316] usb 2-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 96.338047][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.346598][ T316] usb 2-1: Product: syz [ 96.351872][ T316] usb 2-1: Manufacturer: syz [ 96.356618][ T316] usb 2-1: SerialNumber: syz [ 96.358067][ T1811] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 96.377484][ T316] usb 2-1: config 0 descriptor?? [ 96.518183][ T1922] UDC core: couldn't find an available UDC or it's busy: -16 [ 96.526213][ T1922] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 96.578164][ T26] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.586813][ T26] usb 1-1: config 0 has no interface number 0 [ 96.592928][ T26] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.604568][ T26] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.614854][ T26] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 96.624962][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.638492][ T26] usb 1-1: config 0 descriptor?? [ 96.672984][ T316] usb 2-1: USB disconnect, device number 10 [ 96.728143][ T1811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.742649][ T1811] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 96.754172][ T1811] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.928249][ T1811] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 96.938967][ T1811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.947355][ T1811] usb 3-1: Product: syz [ 96.951416][ T1811] usb 3-1: Manufacturer: syz [ 96.956428][ T1811] usb 3-1: SerialNumber: syz [ 96.962297][ T1811] usb 3-1: config 0 descriptor?? [ 97.088142][ T391] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 97.109173][ T26] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 97.117692][ T26] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 97.129792][ T26] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 97.137774][ T26] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 97.147905][ T26] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 97.156298][ T26] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 97.165055][ T26] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 97.176696][ T26] prodikeys 0003:041E:2801.0010: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 97.189514][ T26] hid_prodikeys: hid-prodikeys: failed to find output report [ 97.189514][ T26] [ 97.217775][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 97.217821][ T30] audit: type=1400 audit(1745227874.533:4587): avc: denied { sys_admin } for pid=1926 comm="syz.4.458" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 97.324137][ T26] usb 1-1: USB disconnect, device number 14 [ 97.338061][ T391] usb 4-1: Using ep0 maxpacket: 16 [ 97.356511][ T495] usb 3-1: USB disconnect, device number 13 [ 97.468545][ T391] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.480230][ T391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.493192][ T391] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 97.588368][ T391] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 97.599623][ T391] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 97.608828][ T391] usb 4-1: Manufacturer: syz [ 97.644316][ T391] usb 4-1: config 0 descriptor?? [ 98.058315][ T495] usb 4-1: USB disconnect, device number 10 [ 98.271168][ T1947] kvm: pic: level sensitive irq not supported [ 98.271353][ T1947] kvm: pic: level sensitive irq not supported [ 98.345095][ T1956] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.359687][ T1956] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.415975][ T30] audit: type=1400 audit(1745227875.693:4588): avc: denied { create } for pid=1957 comm="syz.4.468" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.460284][ T30] audit: type=1400 audit(1745227875.703:4589): avc: denied { write } for pid=1957 comm="syz.4.468" name="file0" dev="tmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.492271][ T30] audit: type=1400 audit(1745227875.703:4590): avc: denied { open } for pid=1957 comm="syz.4.468" path="/117/file0" dev="tmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.504994][ T1967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 98.536103][ T30] audit: type=1400 audit(1745227875.703:4591): avc: denied { ioctl } for pid=1957 comm="syz.4.468" path="/117/file0" dev="tmpfs" ino=652 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.571116][ T30] audit: type=1400 audit(1745227875.703:4592): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.324384][ T1988] netlink: 'syz.2.479': attribute type 12 has an invalid length. [ 100.345624][ T1988] netlink: 'syz.2.479': attribute type 29 has an invalid length. [ 100.354878][ T1988] netlink: 148 bytes leftover after parsing attributes in process `syz.2.479'. [ 100.367441][ T1988] netlink: 'syz.2.479': attribute type 1 has an invalid length. [ 100.376799][ T1988] netlink: 'syz.2.479': attribute type 2 has an invalid length. [ 100.386419][ T1988] netlink: 39 bytes leftover after parsing attributes in process `syz.2.479'. [ 100.398945][ T1992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.481'. [ 100.410580][ T1992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.481'. [ 100.595306][ T30] audit: type=1400 audit(1745227877.913:4593): avc: denied { read } for pid=86 comm="acpid" name="mouse0" dev="devtmpfs" ino=713 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 100.751310][ T30] audit: type=1400 audit(1745227877.913:4594): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=713 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 100.786991][ T30] audit: type=1400 audit(1745227877.913:4595): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=713 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 100.876370][ T30] audit: type=1400 audit(1745227878.193:4596): avc: denied { connect } for pid=2021 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.074397][ T6] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 101.338038][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 101.448088][ T391] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 101.468237][ T6] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 101.658173][ T6] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 101.676296][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.702422][ T6] usb 3-1: Product: syz [ 101.708165][ T391] usb 2-1: Using ep0 maxpacket: 16 [ 101.721209][ T6] usb 3-1: Manufacturer: syz [ 101.727040][ T6] usb 3-1: SerialNumber: syz [ 101.761266][ T6] usb 3-1: config 0 descriptor?? [ 101.828118][ T391] usb 2-1: config 0 has no interfaces? [ 101.990574][ T2068] x_tables: unsorted underflow at hook 1 [ 101.998635][ T391] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 102.008448][ T391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.024152][ T391] usb 2-1: Product: syz [ 102.028777][ T391] usb 2-1: Manufacturer: syz [ 102.033300][ T391] usb 2-1: SerialNumber: syz [ 102.048754][ T391] usb 2-1: config 0 descriptor?? [ 102.289429][ T391] usb 2-1: USB disconnect, device number 11 [ 103.202635][ T495] usb 3-1: USB disconnect, device number 14 [ 103.237784][ T2092] UDC core: couldn't find an available UDC or it's busy: -16 [ 103.283032][ T2092] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.362280][ T2100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.520'. [ 103.426667][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 103.426684][ T30] audit: type=1400 audit(1745227880.743:4599): avc: denied { setopt } for pid=2105 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.459408][ T2106] ================================================================== [ 103.467561][ T2106] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 103.476670][ T2106] Read of size 1 at addr ffff8881176593f8 by task syz.1.524/2106 [ 103.484385][ T2106] [ 103.486553][ T2106] CPU: 0 PID: 2106 Comm: syz.1.524 Not tainted 5.15.180-syzkaller-android13-5.15.180_r00 #0 [ 103.496448][ T2106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.506733][ T2106] Call Trace: [ 103.509978][ T2106] [ 103.512910][ T2106] dump_stack_lvl+0x151/0x1c0 [ 103.517549][ T2106] ? io_uring_drop_tctx_refs+0x190/0x190 [ 103.523201][ T2106] ? panic+0x760/0x760 [ 103.527099][ T2106] print_address_description+0x87/0x3b0 [ 103.532489][ T2106] ? stack_trace_save+0x113/0x1c0 [ 103.537342][ T2106] ? ___sys_sendmsg+0x252/0x2e0 [ 103.542131][ T2106] kasan_report+0x179/0x1c0 [ 103.546641][ T2106] ? xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 103.553169][ T2106] ? xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 103.559773][ T2106] __asan_report_load1_noabort+0x14/0x20 [ 103.565364][ T2106] xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 103.571522][ T2106] ? ____kasan_kmalloc+0xed/0x110 [ 103.576552][ T2106] ? ____kasan_kmalloc+0xdb/0x110 [ 103.581723][ T2106] ? xfrm_policy_addr_delta+0x24c/0x370 [ 103.587528][ T2106] xfrm_policy_inexact_insert_node+0x917/0xb00 [ 103.593818][ T2106] ? xfrm_policy_inexact_alloc_bin+0x651/0x1520 [ 103.600085][ T2106] xfrm_policy_inexact_alloc_chain+0x4ec/0xaf0 [ 103.606280][ T2106] xfrm_policy_inexact_insert+0x6a/0x1160 [ 103.611793][ T2106] ? __kasan_check_write+0x14/0x20 [ 103.616758][ T2106] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 103.621683][ T2106] ? policy_hash_bysel+0x137/0x700 [ 103.626628][ T2106] xfrm_policy_insert+0xe7/0x940 [ 103.631590][ T2106] xfrm_add_policy+0x4f2/0x980 [ 103.636357][ T2106] ? cap_capable+0x1d2/0x270 [ 103.640878][ T2106] ? xfrm_dump_sa_done+0xc0/0xc0 [ 103.645642][ T2106] xfrm_user_rcv_msg+0x4f3/0x7d0 [ 103.650414][ T2106] ? xfrm_netlink_rcv+0x90/0x90 [ 103.655239][ T2106] ? avc_has_perm+0x16f/0x260 [ 103.659824][ T2106] ? ____kasan_kmalloc+0xed/0x110 [ 103.664789][ T2106] ? avc_has_perm_noaudit+0x430/0x430 [ 103.670256][ T2106] ? x64_sys_call+0x16a/0x9a0 [ 103.675008][ T2106] netlink_rcv_skb+0x1cf/0x410 [ 103.679853][ T2106] ? xfrm_netlink_rcv+0x90/0x90 [ 103.684745][ T2106] ? netlink_ack+0xb10/0xb10 [ 103.689166][ T2106] ? mutex_lock+0xb6/0x1e0 [ 103.690487][ T2108] usb usb8: usbfs: process 2108 (syz.0.525) did not claim interface 0 before use [ 103.693509][ T2106] ? wait_for_completion_killable_timeout+0x10/0x10 [ 103.709105][ T2106] ? netlink_autobind+0x1a0/0x1a0 [ 103.713907][ T2106] ? selinux_vm_enough_memory+0x170/0x170 [ 103.719552][ T2106] xfrm_netlink_rcv+0x72/0x90 [ 103.724063][ T2106] netlink_unicast+0x8df/0xac0 [ 103.728752][ T2106] ? netlink_detachskb+0x90/0x90 [ 103.733534][ T2106] ? security_netlink_send+0x7b/0xa0 [ 103.738791][ T2106] netlink_sendmsg+0xa0a/0xd20 [ 103.743386][ T2106] ? netlink_getsockopt+0x560/0x560 [ 103.748421][ T2106] ? x64_sys_call+0x147/0x9a0 [ 103.753035][ T2106] ? check_stack_object+0x114/0x130 [ 103.758150][ T2106] ? security_socket_sendmsg+0x82/0xb0 [ 103.763438][ T2106] ? netlink_getsockopt+0x560/0x560 [ 103.768570][ T2106] ____sys_sendmsg+0x59e/0x8f0 [ 103.773158][ T2106] ? iovec_from_user+0x2d9/0x330 [ 103.777935][ T2106] ? __import_iovec+0x25e/0x420 [ 103.782614][ T2106] ? __sys_sendmsg_sock+0x40/0x40 [ 103.787483][ T2106] ___sys_sendmsg+0x252/0x2e0 [ 103.791993][ T2106] ? security_file_alloc+0x29/0x120 [ 103.797123][ T2106] ? __sys_sendmsg+0x260/0x260 [ 103.801867][ T2106] ? percpu_counter_add_batch+0x13d/0x160 [ 103.807451][ T2106] ? __fdget+0x1bc/0x240 [ 103.811489][ T2106] __se_sys_sendmsg+0x19a/0x260 [ 103.816364][ T2106] ? __x64_sys_sendmsg+0x90/0x90 [ 103.821134][ T2106] ? __kasan_check_write+0x14/0x20 [ 103.826177][ T2106] ? switch_fpu_return+0x15f/0x2e0 [ 103.831255][ T2106] __x64_sys_sendmsg+0x7b/0x90 [ 103.836072][ T2106] x64_sys_call+0x16a/0x9a0 [ 103.840437][ T2106] do_syscall_64+0x3b/0x80 [ 103.844631][ T2106] ? clear_bhb_loop+0x35/0x90 [ 103.849162][ T2106] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.855226][ T2106] RIP: 0033:0x7f163e471169 [ 103.859474][ T2106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.879095][ T2106] RSP: 002b:00007f163cada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.887345][ T2106] RAX: ffffffffffffffda RBX: 00007f163e698fa0 RCX: 00007f163e471169 [ 103.895145][ T2106] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 103.903045][ T2106] RBP: 00007f163e4f3a68 R08: 0000000000000000 R09: 0000000000000000 [ 103.910871][ T2106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.919230][ T2106] R13: 0000000000000000 R14: 00007f163e698fa0 R15: 00007fffdcce93d8 [ 103.927066][ T2106] [ 103.930003][ T2106] [ 103.932157][ T2106] Allocated by task 2106: [ 103.936585][ T2106] ____kasan_kmalloc+0xdb/0x110 [ 103.941266][ T2106] __kasan_kmalloc+0x9/0x10 [ 103.945692][ T2106] __kmalloc+0x13f/0x2c0 [ 103.949932][ T2106] sk_prot_alloc+0xf9/0x330 [ 103.954375][ T2106] sk_alloc+0x38/0x430 [ 103.958266][ T2106] pfkey_create+0x12c/0x620 [ 103.962609][ T2106] __sock_create+0x3be/0x7e0 [ 103.967116][ T2106] __sys_socket+0x132/0x370 [ 103.971456][ T2106] __x64_sys_socket+0x7a/0x90 [ 103.976080][ T2106] x64_sys_call+0x147/0x9a0 [ 103.980537][ T2106] do_syscall_64+0x3b/0x80 [ 103.985167][ T2106] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.991111][ T2106] [ 103.993281][ T2106] The buggy address belongs to the object at ffff888117659000 [ 103.993281][ T2106] which belongs to the cache kmalloc-1k of size 1024 [ 104.007269][ T2106] The buggy address is located 1016 bytes inside of [ 104.007269][ T2106] 1024-byte region [ffff888117659000, ffff888117659400) [ 104.020649][ T2106] The buggy address belongs to the page: [ 104.026117][ T2106] page:ffffea00045d9600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117658 [ 104.036804][ T2106] head:ffffea00045d9600 order:3 compound_mapcount:0 compound_pincount:0 [ 104.045053][ T2106] flags: 0x4000000000010200(slab|head|zone=1) [ 104.050963][ T2106] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043080 [ 104.059692][ T2106] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 104.068104][ T2106] page dumped because: kasan: bad access detected [ 104.074366][ T2106] page_owner tracks the page as allocated [ 104.079906][ T2106] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 279, ts 103412195812, free_ts 103384303387 [ 104.100440][ T2106] post_alloc_hook+0x1a3/0x1b0 [ 104.105218][ T2106] prep_new_page+0x1b/0x110 [ 104.109639][ T2106] get_page_from_freelist+0x3550/0x35d0 [ 104.115100][ T2106] __alloc_pages+0x27e/0x8f0 [ 104.119534][ T2106] new_slab+0x9a/0x4e0 [ 104.123434][ T2106] ___slab_alloc+0x39e/0x830 [ 104.127915][ T2106] __slab_alloc+0x4a/0x90 [ 104.132031][ T2106] __kmalloc_track_caller+0x171/0x2c0 [ 104.137242][ T2106] __alloc_skb+0x10c/0x550 [ 104.141487][ T2106] sk_stream_alloc_skb+0x1f8/0xad0 [ 104.146465][ T2106] tcp_sendmsg_locked+0xd34/0x3a90 [ 104.151378][ T2106] tcp_sendmsg+0x2f/0x50 [ 104.155460][ T2106] inet_sendmsg+0xa1/0xc0 [ 104.159626][ T2106] sock_write_iter+0x39b/0x530 [ 104.164310][ T2106] vfs_write+0xd5d/0x1110 [ 104.168475][ T2106] ksys_write+0x199/0x2c0 [ 104.172645][ T2106] page last free stack trace: [ 104.177154][ T2106] free_unref_page_prepare+0x7c8/0x7d0 [ 104.182459][ T2106] free_unref_page+0xe8/0x750 [ 104.186963][ T2106] __free_pages+0x61/0xf0 [ 104.191137][ T2106] __free_slab+0xec/0x1d0 [ 104.195650][ T2106] __unfreeze_partials+0x165/0x1a0 [ 104.200588][ T2106] put_cpu_partial+0xc4/0x120 [ 104.205114][ T2106] __slab_free+0x1c8/0x290 [ 104.209355][ T2106] ___cache_free+0x109/0x120 [ 104.213780][ T2106] qlink_free+0x4d/0x90 [ 104.217780][ T2106] qlist_free_all+0x44/0xb0 [ 104.222128][ T2106] kasan_quarantine_reduce+0x15a/0x180 [ 104.227424][ T2106] __kasan_slab_alloc+0x2f/0xe0 [ 104.232288][ T2106] slab_post_alloc_hook+0x53/0x2c0 [ 104.237217][ T2106] kmem_cache_alloc+0xf5/0x250 [ 104.241816][ T2106] getname_flags+0xba/0x520 [ 104.246329][ T2106] __x64_sys_unlink+0x3c/0x50 [ 104.250847][ T2106] [ 104.253010][ T2106] Memory state around the buggy address: [ 104.258660][ T2106] ffff888117659280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.266580][ T2106] ffff888117659300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.274458][ T2106] >ffff888117659380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 104.282350][ T2106] ^ [ 104.290166][ T2106] ffff888117659400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.298093][ T2106] ffff888117659480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.305956][ T2106] ================================================================== [ 104.313961][ T2106] Disabling lock debugging due to kernel taint [ 104.320029][ T495] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 104.342872][ T30] audit: type=1400 audit(1745227881.663:4600): avc: denied { bind } for pid=2109 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.688170][ T495] usb 3-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 104.700753][ T495] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 104.712601][ T495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.738221][ T2102] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 104.758902][ T495] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 106.371107][ T495] usb 3-1: USB disconnect, device number 15