last executing test programs: 7.156369905s ago: executing program 0 (id=3090): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x2, 0x1}) 6.912834215s ago: executing program 0 (id=3098): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, "8500"}, @main=@item_4={0x3, 0x0, 0x8, "00000002"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 6.034996013s ago: executing program 4 (id=3104): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_io_uring_setup(0x3a9, &(0x7f0000000080)={0x0, 0x0, 0x803, 0x0, 0x10000}, 0x0, &(0x7f0000000240)) sendmsg$key(0xffffffffffffffff, 0x0, 0x2000c800) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000300)=""/214, 0xd6}], 0x1, 0x1239, 0x4b4a) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000140)={0x14, 0x1, 0x5, 0x501, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0xc015) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000002c0)={[{@dioread_nolock}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@debug}, {@errors_remount}, {@minixdf}, {@usrjquota}, {@orlov}, {@minixdf}, {@dioread_lock}]}, 0x1, 0x43a, &(0x7f00000008c0)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020a0e190300000027bd7000ffdb"], 0x1b}}, 0x8890) 5.727886332s ago: executing program 4 (id=3107): r0 = socket(0xbfd5b93f7c3b78c7, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x1}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 4.64380503s ago: executing program 4 (id=3120): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.55694098s ago: executing program 1 (id=3121): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) 4.478371379s ago: executing program 1 (id=3122): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x402, &(0x7f0000002740)={[{@stripe={'stripe', 0x3d, 0x3}}, {@nodelalloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@nodiscard}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(0xffffffffffffffff, 0x0, 0x40012160) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) fallocate(r1, 0x0, 0xb7d4, 0x1001f0) 4.420148499s ago: executing program 3 (id=3124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b40)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) 4.416880879s ago: executing program 3 (id=3126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, &(0x7f0000000000)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001900)={0x14, 0x3, 0x3, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 4.188699009s ago: executing program 0 (id=3131): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) 3.912388278s ago: executing program 1 (id=3132): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_io_uring_setup(0x2d5b, &(0x7f0000000140), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0], 0x0) 3.169499066s ago: executing program 0 (id=3133): r0 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0004050000000300"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, 0x0, 0x1800}}], 0x1, 0x0, 0x0) 2.238820895s ago: executing program 3 (id=3137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x7, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) 1.716405123s ago: executing program 2 (id=3140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) 1.716194383s ago: executing program 2 (id=3141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000130a030000000000000000000200f3000900020073797a31000036000800034000000001090001"], 0x34}}, 0x0) 1.702123824s ago: executing program 2 (id=3142): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) r1 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r1, 0x8, 0x2000000, 0x10000) 1.584357293s ago: executing program 4 (id=3143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.241633893s ago: executing program 3 (id=3144): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x2, r4}, 0x38) 1.114885212s ago: executing program 2 (id=3145): r0 = io_uring_setup(0x29ea, &(0x7f0000000480)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 787.268372ms ago: executing program 0 (id=3146): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x190, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x160, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x154, 0x6, [@m_simple={0x150, 0x1f, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x2d, 0x3, '@-^[\xa5&,.\x00pe\xe9\xb9\xf1Q+=\xdf\xacqd\xb4\xd3\rj6\xb4\xa6fz\x91\xa6\xe9\xdfy\xef\xbcY\xbb[a'}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}]}, {0xdd, 0x6, "bb56072c27c5e2984fb9b39740c7dea2e6372a168bf1fdb8ecb6019c9f5db834fcaca18620641b7aab2922f69d2f9b062f5ec4be8a5a603fe7236ffd67f60e9e007b34e0f9cb58fc8855dae5289e4e856559f64bc5a1c5683263937fdd088e5f34874e0d2d2273a7a09810d9042b32fb69223c74e88c41fda5268c22a3107d32ee49d3a99665178abfde24d27a872b23ece9d09c9560070a6e3cca383ccb4d1a6d7c302ab3ee820e67d26e78f72566a2f9765698d783e6c14d8da6156473bc39143eaba66c1921f94f19f65bc88b127c0eb8ac765b9220105c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x190}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 710.893631ms ago: executing program 2 (id=3147): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 677.885631ms ago: executing program 4 (id=3148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000002c0)=""/66, 0x42, 0x40000000, 0x0, 0x0) mkdir(0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 667.918551ms ago: executing program 0 (id=3149): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = eventfd2(0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 561.593641ms ago: executing program 1 (id=3139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000034000000080a0101000000000000006ecbc31b000900020073797a32000000000900010073797a30"], 0xa8}}, 0x0) 498.537191ms ago: executing program 1 (id=3150): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 471.957261ms ago: executing program 2 (id=3151): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000140)={[{@abort}, {@grpid}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 384.80961ms ago: executing program 3 (id=3152): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x100, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 312.234691ms ago: executing program 1 (id=3153): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_io_uring_setup(0x2d5b, &(0x7f0000000140), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 182.01175ms ago: executing program 4 (id=3154): mprotect(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 0s ago: executing program 3 (id=3155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='sysv\x00', 0x8000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): 94967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb997e9d29 code=0x7ffc0000 [ 745.636351][ T2993] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 745.661600][ T2993] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 745.674934][ T30] audit: type=1326 audit(1736989622.497:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb997e9d29 code=0x7ffc0000 [ 745.699029][ T2993] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 745.699614][ T30] audit: type=1326 audit(1736989622.497:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb997e9d29 code=0x7ffc0000 [ 745.708195][ T2993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.731345][ T30] audit: type=1326 audit(1736989622.497:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb997e9d29 code=0x7ffc0000 [ 745.881307][ T9568] hub 2-0:1.0: USB hub found [ 745.885954][ T9568] hub 2-0:1.0: 1 port detected [ 746.169822][ T30] audit: type=1326 audit(1736989622.497:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb997e9d29 code=0x7ffc0000 [ 746.193202][ T9535] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 746.206162][ T30] audit: type=1326 audit(1736989622.497:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb997e9d29 code=0x7ffc0000 [ 746.266624][ T30] audit: type=1326 audit(1736989622.497:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb997e9d29 code=0x7ffc0000 [ 746.466311][ T2993] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 746.489708][ T2993] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input13 [ 746.533915][ T2993] usb 1-1: USB disconnect, device number 9 [ 746.539640][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 747.264330][ T9602] loop1: detected capacity change from 0 to 8192 [ 747.426186][ T2993] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 747.808341][ T9609] fuse: Bad value for 'fd' [ 748.106211][ T2993] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 748.119473][ T2993] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 748.131182][ T2993] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 748.140331][ T2993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.196151][ T462] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 748.216355][ T9600] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 748.263348][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 748.263377][ T30] audit: type=1326 audit(1736989625.177:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.1.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b0e7d29 code=0x7ffc0000 [ 748.292615][ T30] audit: type=1326 audit(1736989625.177:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.1.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b0e7d29 code=0x7ffc0000 [ 748.316493][ T30] audit: type=1326 audit(1736989625.177:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.1.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f494b0e7d29 code=0x7ffc0000 [ 748.339974][ T30] audit: type=1326 audit(1736989625.177:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.1.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b0e7d29 code=0x7ffc0000 [ 748.363529][ T30] audit: type=1326 audit(1736989625.177:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.1.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b0e7d29 code=0x7ffc0000 [ 748.387386][ T30] audit: type=1326 audit(1736989625.177:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.1.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f494b0e7d29 code=0x7ffc0000 [ 748.411816][ T30] audit: type=1326 audit(1736989625.177:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.1.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b0e7d29 code=0x7ffc0000 [ 748.470081][ T30] audit: type=1326 audit(1736989625.177:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.1.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b0e7d29 code=0x7ffc0000 [ 748.494043][ T2993] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 748.501133][ T30] audit: type=1326 audit(1736989625.177:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.1.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f494b0e7d29 code=0x7ffc0000 [ 748.526536][ T30] audit: type=1326 audit(1736989625.177:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.1.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b0e7d29 code=0x7ffc0000 [ 748.549987][ T6133] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 748.561352][ T2993] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input14 [ 748.591168][ T2993] usb 1-1: USB disconnect, device number 10 [ 748.596973][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 748.626207][ T462] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 748.646392][ T8910] udevd[8910]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 748.651332][ T462] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 748.668797][ T462] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 748.685451][ T462] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.716221][ T9608] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 748.976204][ T6133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.994565][ T6133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.007100][ T6133] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 749.016331][ T6133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.057333][ T6133] usb 2-1: config 0 descriptor?? [ 750.922328][ T462] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 750.961269][ T462] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input15 [ 750.976600][ T9636] loop4: detected capacity change from 0 to 1024 [ 750.984670][ T462] usb 3-1: USB disconnect, device number 14 [ 751.042473][ T9636] EXT4-fs (loop4): barriers disabled [ 751.054260][ T9636] JBD2: no valid journal superblock found [ 751.068385][ T9636] EXT4-fs (loop4): error loading journal [ 751.096053][ T6133] usbhid 2-1:0.0: can't add hid device: -71 [ 751.101917][ T6133] usbhid: probe of 2-1:0.0 failed with error -71 [ 751.108902][ T6133] usb 2-1: USB disconnect, device number 23 [ 751.570508][ T9653] fuse: Bad value for 'fd' [ 751.584343][ T9653] loop4: detected capacity change from 0 to 256 [ 752.156381][ T9670] fuse: Bad value for 'fd' [ 753.173185][ T9673] hub 2-0:1.0: USB hub found [ 753.178273][ T9673] hub 2-0:1.0: 1 port detected [ 753.248866][ T9674] syz.3.2626[9674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 753.252595][ T9674] syz.3.2626[9674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 753.878626][ T9689] syz.2.2630[9689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 753.889942][ T9689] syz.2.2630[9689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 754.076767][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 754.076799][ T30] audit: type=1400 audit(1736989630.977:4335): avc: denied { append } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 754.207638][ T30] audit: type=1400 audit(1736989631.047:4336): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 754.230945][ T30] audit: type=1400 audit(1736989631.047:4337): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.254685][ T30] audit: type=1400 audit(1736989631.047:4338): avc: denied { open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 754.297020][ T30] audit: type=1400 audit(1736989631.057:4339): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 755.006221][ T30] audit: type=1400 audit(1736989631.907:4340): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 755.126168][ T30] audit: type=1400 audit(1736989631.907:4341): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 755.157884][ T30] audit: type=1400 audit(1736989631.907:4342): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 755.208263][ T9697] loop4: detected capacity change from 0 to 256 [ 755.250921][ T30] audit: type=1400 audit(1736989631.957:4343): avc: denied { read } for pid=9691 comm="syz.2.2632" dev="nsfs" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 755.276584][ T30] audit: type=1400 audit(1736989631.957:4344): avc: denied { open } for pid=9691 comm="syz.2.2632" path="net:[4026532550]" dev="nsfs" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 756.466019][ T9702] hub 2-0:1.0: USB hub found [ 756.470969][ T9702] hub 2-0:1.0: 1 port detected [ 756.912542][ T9715] syz.1.2637[9715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 756.912624][ T9715] syz.1.2637[9715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 756.924897][ T9715] fuse: Bad value for 'fd' [ 757.374822][ T9719] loop2: detected capacity change from 0 to 128 [ 757.477113][ T9719] FAT-fs (loop2): Unrecognized mount option "˙0xffffffffffffffff˙˙˙˙˙˙˙˙" or missing value [ 757.604761][ T9723] loop4: detected capacity change from 0 to 8192 [ 758.296403][ T9725] syz.2.2640[9725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 758.296495][ T9725] syz.2.2640[9725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 759.459414][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 759.459436][ T30] audit: type=1400 audit(1736989635.487:4388): avc: denied { write } for pid=9717 comm="syz.2.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 759.527260][ T9729] loop0: detected capacity change from 0 to 8192 [ 759.818051][ T30] audit: type=1400 audit(1736989636.737:4389): avc: denied { write } for pid=9727 comm="syz.1.2643" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 759.954989][ T30] audit: type=1400 audit(1736989636.867:4390): avc: denied { create } for pid=9736 comm="syz.4.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 760.148384][ T30] audit: type=1400 audit(1736989636.867:4391): avc: denied { setopt } for pid=9736 comm="syz.4.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 760.167807][ T30] audit: type=1400 audit(1736989636.867:4392): avc: denied { write } for pid=9736 comm="syz.4.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 760.188762][ T30] audit: type=1400 audit(1736989636.867:4393): avc: denied { read } for pid=9736 comm="syz.4.2645" lport=55 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 760.217243][ T30] audit: type=1400 audit(1736989636.937:4394): avc: denied { create } for pid=9733 comm="syz.2.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 760.237122][ T30] audit: type=1400 audit(1736989637.067:4395): avc: denied { write } for pid=9740 comm="syz.1.2646" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 760.270582][ T30] audit: type=1400 audit(1736989637.067:4396): avc: denied { open } for pid=9740 comm="syz.1.2646" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 760.398992][ T30] audit: type=1400 audit(1736989637.317:4397): avc: denied { read write } for pid=9740 comm="syz.1.2646" name="vhost-vsock" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 761.266967][ T9761] syz.2.2650[9761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 761.267054][ T9761] syz.2.2650[9761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 761.450421][ T9763] loop0: detected capacity change from 0 to 8192 [ 762.029729][ T9775] loop2: detected capacity change from 0 to 256 [ 763.682725][ T9782] hub 2-0:1.0: USB hub found [ 763.687683][ T9782] hub 2-0:1.0: 1 port detected [ 764.364435][ T9799] loop4: detected capacity change from 0 to 8192 [ 765.049423][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 765.049464][ T30] audit: type=1400 audit(1736989641.917:4404): avc: denied { create } for pid=9805 comm="syz.1.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 765.236235][ T30] audit: type=1400 audit(1736989641.927:4405): avc: denied { write } for pid=9805 comm="syz.1.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 765.264191][ T30] audit: type=1400 audit(1736989641.957:4406): avc: denied { read } for pid=9805 comm="syz.1.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 765.326802][ T30] audit: type=1400 audit(1736989642.207:4407): avc: denied { ioctl } for pid=9812 comm="syz.2.2668" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 766.463885][ T2666] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 766.735824][ T9845] syz.0.2676[9845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 766.736401][ T9845] syz.0.2676[9845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 767.013877][ T9844] loop1: detected capacity change from 0 to 512 [ 768.556408][ T30] audit: type=1400 audit(1736989644.217:4408): avc: denied { mounton } for pid=9839 comm="syz.1.2678" path="/521/file0" dev="tmpfs" ino=2879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 768.706768][ T9844] EXT4-fs (loop1): orphan cleanup on readonly fs [ 768.716997][ T9844] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2678: bg 0: block 248: padding at end of block bitmap is not set [ 768.733631][ T9844] Quota error (device loop1): write_blk: dquota write failed [ 768.741052][ T9844] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 768.750904][ T9844] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.2678: Failed to acquire dquot type 1 [ 768.764564][ T9844] EXT4-fs (loop1): 1 truncate cleaned up [ 768.771128][ T9844] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 769.024703][ T30] audit: type=1400 audit(1736989645.457:4409): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 769.138380][ T30] audit: type=1400 audit(1736989645.467:4410): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 769.168529][ T9842] loop3: detected capacity change from 0 to 8192 [ 769.185760][ T2666] usb 3-1: device descriptor read/all, error -71 [ 769.204809][ T30] audit: type=1400 audit(1736989645.507:4411): avc: denied { append } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 770.079157][ T9862] loop0: detected capacity change from 0 to 512 [ 770.426504][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 770.426619][ T30] audit: type=1326 audit(1736989646.897:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.0.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e87422d29 code=0x7ffc0000 [ 770.522623][ T9862] EXT4-fs (loop0): orphan cleanup on readonly fs [ 770.532196][ T9862] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2684: bg 0: block 248: padding at end of block bitmap is not set [ 770.549612][ T9862] Quota error (device loop0): write_blk: dquota write failed [ 770.557040][ T9862] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 770.566903][ T9862] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.2684: Failed to acquire dquot type 1 [ 770.581716][ T9862] EXT4-fs (loop0): 1 truncate cleaned up [ 770.588921][ T9862] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 771.340907][ T9870] fuse: Bad value for 'fd' [ 771.360040][ T30] audit: type=1326 audit(1736989646.897:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.0.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e87422d29 code=0x7ffc0000 [ 771.387458][ T30] audit: type=1326 audit(1736989646.997:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.0.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1e87422d29 code=0x7ffc0000 [ 771.410993][ T30] audit: type=1326 audit(1736989646.997:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.0.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e87422d63 code=0x7ffc0000 [ 771.437510][ T9870] loop0: detected capacity change from 0 to 256 [ 771.449503][ T30] audit: type=1326 audit(1736989646.997:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.0.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1e874217df code=0x7ffc0000 [ 771.479725][ T30] audit: type=1326 audit(1736989646.997:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.0.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1e87422db7 code=0x7ffc0000 [ 771.761296][ T30] audit: type=1326 audit(1736989646.997:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.0.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e87421690 code=0x7ffc0000 [ 771.796472][ T30] audit: type=1326 audit(1736989646.997:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.0.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e8742292b code=0x7ffc0000 [ 772.769471][ T9888] hub 2-0:1.0: USB hub found [ 772.774358][ T9888] hub 2-0:1.0: 1 port detected [ 773.325008][ T9907] loop4: detected capacity change from 0 to 512 [ 774.524853][ T9907] EXT4-fs (loop4): orphan cleanup on readonly fs [ 774.534341][ T9907] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2695: bg 0: block 248: padding at end of block bitmap is not set [ 774.549907][ T9907] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.2695: Failed to acquire dquot type 1 [ 774.564235][ T9907] EXT4-fs (loop4): 1 truncate cleaned up [ 774.570828][ T9907] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 774.819784][ T9914] loop3: detected capacity change from 0 to 128 [ 774.876809][ T9914] FAT-fs (loop3): Unrecognized mount option "˙0xffffffffffffffff˙˙˙˙˙˙˙˙" or missing value [ 775.228477][ T9924] syz.3.2698[9924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 775.228938][ T9924] syz.3.2698[9924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 775.456285][ T507] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 775.946242][ T507] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 775.962138][ T507] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 775.986538][ T507] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 775.995428][ T507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.046197][ T9922] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 776.064940][ T9935] syz.3.2703[9935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 776.065329][ T9935] syz.3.2703[9935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 776.236189][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 776.236211][ T30] audit: type=1400 audit(1736989653.127:4473): avc: denied { create } for pid=9932 comm="syz.4.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 776.387255][ T30] audit: type=1400 audit(1736989653.127:4474): avc: denied { setopt } for pid=9932 comm="syz.4.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 776.406864][ T30] audit: type=1400 audit(1736989653.127:4475): avc: denied { listen } for pid=9932 comm="syz.4.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 776.427779][ T30] audit: type=1400 audit(1736989653.127:4476): avc: denied { connect } for pid=9932 comm="syz.4.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 776.447568][ T30] audit: type=1400 audit(1736989653.127:4477): avc: denied { write } for pid=9932 comm="syz.4.2702" path="socket:[43277]" dev="sockfs" ino=43277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 776.506322][ T507] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 776.519475][ T507] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input16 [ 776.548576][ T30] audit: type=1400 audit(1736989653.467:4478): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1475 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 776.596566][ T507] usb 2-1: USB disconnect, device number 24 [ 776.603033][ T30] audit: type=1400 audit(1736989653.467:4479): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1475 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 776.626199][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 776.635562][ T30] audit: type=1400 audit(1736989653.467:4480): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1475 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 776.689553][ T9946] loop2: detected capacity change from 0 to 8192 [ 777.243363][ T30] audit: type=1400 audit(1736989654.157:4481): avc: denied { read } for pid=9957 comm="syz.1.2713" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 777.311120][ T30] audit: type=1400 audit(1736989654.187:4482): avc: denied { open } for pid=9957 comm="syz.1.2713" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 777.354418][ T9961] loop4: detected capacity change from 0 to 128 [ 777.406688][ T9961] FAT-fs (loop4): Unrecognized mount option "˙0xffffffffffffffff˙˙˙˙˙˙˙˙" or missing value [ 777.506718][ T9966] loop1: detected capacity change from 0 to 2048 [ 777.736536][ T9966] EXT4-fs (loop1): Unrecognized mount option "smackfshat=-$%" or missing value [ 778.911324][ T9983] syz.4.2712[9983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 778.911412][ T9983] syz.4.2712[9983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 781.391031][T10000] loop2: detected capacity change from 0 to 512 [ 781.416595][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 781.416668][ T30] audit: type=1326 audit(1736989658.297:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfed93d29 code=0x7ffc0000 [ 781.583214][T10000] EXT4-fs (loop2): orphan cleanup on readonly fs [ 781.592748][T10000] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2722: bg 0: block 248: padding at end of block bitmap is not set [ 781.608894][T10000] Quota error (device loop2): write_blk: dquota write failed [ 781.616293][T10000] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 781.626131][T10000] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.2722: Failed to acquire dquot type 1 [ 781.639581][T10000] EXT4-fs (loop2): 1 truncate cleaned up [ 781.646119][T10000] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 782.383509][ T30] audit: type=1326 audit(1736989658.297:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfed93d29 code=0x7ffc0000 [ 782.459486][T10013] syz.1.2724[10013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 782.459876][T10013] syz.1.2724[10013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 782.514447][ T30] audit: type=1326 audit(1736989658.297:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6bfed93d29 code=0x7ffc0000 [ 782.550865][ T30] audit: type=1326 audit(1736989658.297:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6bfed93d63 code=0x7ffc0000 [ 782.612398][ T30] audit: type=1326 audit(1736989658.307:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6bfed927df code=0x7ffc0000 [ 782.698645][ T30] audit: type=1326 audit(1736989658.307:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6bfed93db7 code=0x7ffc0000 [ 782.722098][ T30] audit: type=1326 audit(1736989658.307:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bfed92690 code=0x7ffc0000 [ 782.745752][ T30] audit: type=1326 audit(1736989658.307:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6bfed9392b code=0x7ffc0000 [ 782.870089][T10027] syz.2.2729[10027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 782.870171][T10027] syz.2.2729[10027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 783.015190][T10029] loop4: detected capacity change from 0 to 8192 [ 783.106131][ T472] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 783.486212][ T472] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.500516][ T472] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 783.524450][ T472] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.06 [ 783.550607][ T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.576717][ T472] usb 1-1: config 0 descriptor?? [ 784.216202][ T2666] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 784.424453][T10044] syz.3.2737[10044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 784.424809][T10044] syz.3.2737[10044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 785.496189][T10054] syz.2.2739[10054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 785.596247][ T2666] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 785.619711][T10054] syz.2.2739[10054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 785.636133][ T2666] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 785.686212][ T2666] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 785.695450][ T2666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.756199][T10032] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 786.160733][ T462] usb 1-1: USB disconnect, device number 11 [ 786.309809][T10068] loop0: detected capacity change from 0 to 1024 [ 786.331667][T10068] EXT4-fs (loop0): barriers disabled [ 786.337214][ T2666] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 786.353131][T10066] loop3: detected capacity change from 0 to 8192 [ 786.360570][ T2666] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input17 [ 786.369894][T10068] JBD2: no valid journal superblock found [ 786.375439][T10068] EXT4-fs (loop0): error loading journal [ 786.383170][ T2666] usb 5-1: USB disconnect, device number 16 [ 786.505230][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 786.505248][ T30] audit: type=1400 audit(1736989663.417:4564): avc: denied { mount } for pid=10065 comm="syz.3.2744" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 786.853500][ T30] audit: type=1400 audit(1736989663.767:4565): avc: denied { read write } for pid=10074 comm="syz.4.2748" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.879467][ T30] audit: type=1400 audit(1736989663.797:4566): avc: denied { open } for pid=10074 comm="syz.4.2748" path="/dev/raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.923683][ T30] audit: type=1400 audit(1736989663.837:4567): avc: denied { read } for pid=10077 comm="syz.2.2749" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 786.979811][T10081] syz.1.2747[10081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.979899][T10081] syz.1.2747[10081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.993034][T10081] fuse: Bad value for 'fd' [ 787.130349][ T30] audit: type=1400 audit(1736989663.837:4568): avc: denied { open } for pid=10077 comm="syz.2.2749" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 787.156140][ T2666] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 787.228774][ T30] audit: type=1400 audit(1736989663.897:4569): avc: denied { prog_load } for pid=10069 comm="syz.1.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 787.285230][ T30] audit: type=1400 audit(1736989663.897:4570): avc: denied { bpf } for pid=10069 comm="syz.1.2747" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 787.373251][ T30] audit: type=1400 audit(1736989663.897:4571): avc: denied { perfmon } for pid=10069 comm="syz.1.2747" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 787.421951][T10091] loop3: detected capacity change from 0 to 128 [ 787.458638][ T30] audit: type=1400 audit(1736989663.897:4572): avc: denied { integrity } for pid=10069 comm="syz.1.2747" lockdown_reason="use of bpf to write user RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 787.502776][ T30] audit: type=1400 audit(1736989663.917:4573): avc: denied { prog_run } for pid=10069 comm="syz.1.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 787.532503][T10091] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 787.556773][T10091] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.586229][ T2666] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 787.600390][ T2666] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 787.612237][ T2666] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 787.621331][ T2666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.656201][T10076] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 787.748671][T10099] loop1: detected capacity change from 0 to 512 [ 787.789561][T10099] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 787.800650][T10099] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 787.826001][T10099] System zones: 0-1, 15-15, 18-18, 34-34 [ 787.854606][T10099] EXT4-fs (loop1): orphan cleanup on readonly fs [ 787.879140][T10099] EXT4-fs warning (device loop1): ext4_enable_quotas:6423: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 787.921594][T10099] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 787.939743][T10099] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2754: bg 0: block 40: padding at end of block bitmap is not set [ 787.984648][T10099] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 788.007082][T10099] EXT4-fs (loop1): 1 truncate cleaned up [ 788.012565][T10099] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,data=writeback,,errors=continue. Quota mode: writeback. [ 788.106220][ T2666] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 788.117034][ T2666] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input18 [ 788.151781][ T2666] usb 5-1: USB disconnect, device number 17 [ 788.166129][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 788.808615][T10112] loop3: detected capacity change from 0 to 128 [ 788.848229][T10112] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 788.965323][T10112] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 789.597719][T10125] syz.0.2759[10125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 789.597806][T10125] syz.0.2759[10125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 789.644998][T10125] fuse: Bad value for 'fd' [ 789.811037][T10130] syz.2.2760[10130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 789.812352][T10130] syz.2.2760[10130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 791.941253][T10149] syz.2.2763[10149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 791.952599][T10149] syz.2.2763[10149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 791.965870][T10149] fuse: Bad value for 'fd' [ 792.007883][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 792.007905][ T30] audit: type=1400 audit(1736989668.637:4637): avc: denied { create } for pid=10143 comm="syz.3.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 792.201825][ T30] audit: type=1400 audit(1736989668.637:4638): avc: denied { setopt } for pid=10143 comm="syz.3.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 792.494858][T10154] syz.3.2766[10154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 792.494946][T10154] syz.3.2766[10154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 792.675122][ T30] audit: type=1400 audit(1736989668.637:4639): avc: denied { listen } for pid=10143 comm="syz.3.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 793.017933][ T30] audit: type=1400 audit(1736989668.647:4640): avc: denied { connect } for pid=10143 comm="syz.3.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 793.038139][ T30] audit: type=1400 audit(1736989668.857:4641): avc: denied { integrity } for pid=10135 comm="syz.2.2763" lockdown_reason="use of bpf to write user RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 793.116675][ T30] audit: type=1400 audit(1736989668.887:4642): avc: denied { mounton } for pid=10135 comm="syz.2.2763" path="/580/file0" dev="tmpfs" ino=3187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 793.210881][ T30] audit: type=1400 audit(1736989669.477:4643): avc: denied { append } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 793.391095][ T30] audit: type=1400 audit(1736989669.507:4644): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 793.415241][ T30] audit: type=1400 audit(1736989669.507:4645): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 793.516175][ T30] audit: type=1400 audit(1736989669.507:4646): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 794.339172][T10179] syz.1.2772[10179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 794.339253][T10179] syz.1.2772[10179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 796.074456][T10202] loop1: detected capacity change from 0 to 512 [ 796.261438][T10202] EXT4-fs (loop1): orphan cleanup on readonly fs [ 796.270654][T10202] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2777: bg 0: block 248: padding at end of block bitmap is not set [ 796.286751][T10202] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.2777: Failed to acquire dquot type 1 [ 796.300437][T10202] EXT4-fs (loop1): 1 truncate cleaned up [ 796.307604][T10202] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 797.009526][T10207] loop3: detected capacity change from 0 to 512 [ 797.106619][T10207] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 797.140081][T10207] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 797.181777][T10207] EXT4-fs (loop3): 1 truncate cleaned up [ 797.190732][T10207] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,block_validity,quota,. Quota mode: writeback. [ 797.294310][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 797.294329][ T30] audit: type=1400 audit(1736989674.207:4726): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 797.361226][ T30] audit: type=1400 audit(1736989674.277:4727): avc: denied { read write } for pid=10216 comm="syz.4.2787" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 797.395899][ T30] audit: type=1400 audit(1736989674.277:4728): avc: denied { open } for pid=10216 comm="syz.4.2787" path="/dev/raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 797.456381][ T30] audit: type=1400 audit(1736989674.277:4729): avc: denied { ioctl } for pid=10216 comm="syz.4.2787" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 797.517677][ T30] audit: type=1400 audit(1736989674.347:4730): avc: denied { create } for pid=10219 comm="syz.2.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 797.546500][ T30] audit: type=1400 audit(1736989674.357:4731): avc: denied { mounton } for pid=10219 comm="syz.2.2786" path="/587/file0" dev="tmpfs" ino=3224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 797.547239][T10217] loop0: detected capacity change from 0 to 32768 [ 797.575635][ T30] audit: type=1400 audit(1736989674.397:4732): avc: denied { read } for pid=10225 comm="syz.1.2788" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 797.598468][ T30] audit: type=1400 audit(1736989674.397:4733): avc: denied { open } for pid=10225 comm="syz.1.2788" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 797.622546][ T30] audit: type=1400 audit(1736989674.397:4734): avc: denied { ioctl } for pid=10225 comm="syz.1.2788" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 797.647930][ T296] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 797.648418][ T30] audit: type=1400 audit(1736989674.397:4735): avc: denied { set_context_mgr } for pid=10225 comm="syz.1.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 797.689701][T10238] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2792'. [ 797.726200][ T6001] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 797.796156][ T6] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 797.860261][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2798'. [ 797.891766][T10252] loop3: detected capacity change from 0 to 256 [ 797.936667][T10252] exfat: Unknown parameter 'keep_last_dots' [ 797.966254][ T6001] usb 3-1: Using ep0 maxpacket: 16 [ 798.036197][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 798.136396][ T2993] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 798.156340][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 798.176330][ T296] usb 5-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 798.185212][ T296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.216205][ T6] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 798.226151][ T296] usb 5-1: Product: syz [ 798.230177][ T296] usb 5-1: Manufacturer: syz [ 798.234764][ T6] usb 2-1: can't read configurations, error -71 [ 798.246194][ T6001] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 798.265693][ T296] usb 5-1: SerialNumber: syz [ 798.270688][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.280363][ T296] usb 5-1: config 0 descriptor?? [ 798.286314][ T6001] usb 3-1: Product: syz [ 798.296440][ T6001] usb 3-1: Manufacturer: syz [ 798.306339][ T6001] usb 3-1: SerialNumber: syz [ 798.312160][ T6001] r8152-cfgselector 3-1: config 0 descriptor?? [ 798.506183][ T2993] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.516154][ T2993] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 798.527831][ T296] usb 5-1: USB disconnect, device number 18 [ 798.686201][ T2993] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 798.695264][ T2993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.703949][ T2993] usb 1-1: Product: syz [ 798.708222][ T2993] usb 1-1: Manufacturer: syz [ 798.712642][ T2993] usb 1-1: SerialNumber: syz [ 798.764902][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2805'. [ 798.796233][ T6001] r8152-cfgselector 3-1: Unknown version 0x0000 [ 798.803568][ T6001] r8152-cfgselector 3-1: bad CDC descriptors [ 798.829368][ T6001] r8152-cfgselector 3-1: Unknown version 0x0000 [ 798.838792][ T6001] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 799.036533][ T2993] usb 1-1: 0:2 : does not exist [ 799.043153][ T2993] usb 1-1: USB disconnect, device number 12 [ 799.061426][T10280] loop4: detected capacity change from 0 to 256 [ 799.139013][T10280] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3f486145, utbl_chksum : 0xe619d30d) [ 799.146209][ T6] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 799.267024][ T8910] udevd[8910]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 799.296555][T10289] loop2: detected capacity change from 0 to 512 [ 799.366564][T10289] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 799.377403][T10289] EXT4-fs (loop2): 1 truncate cleaned up [ 799.382861][T10289] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 799.444562][T10292] loop2: detected capacity change from 0 to 256 [ 799.456273][ T296] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 799.486128][ T472] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 799.501841][T10292] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 799.516293][ T6] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x6D, skipping [ 799.544242][T10300] overlayfs: unrecognized mount option "verity=on" or missing value [ 799.686232][ T6] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 799.695122][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.703116][ T296] usb 4-1: Using ep0 maxpacket: 32 [ 799.708134][ T6] usb 2-1: Product: syz [ 799.712039][ T6] usb 2-1: Manufacturer: syz [ 799.716500][ T6] usb 2-1: SerialNumber: syz [ 799.721839][ T6] usb 2-1: config 0 descriptor?? [ 799.736172][ T472] usb 5-1: Using ep0 maxpacket: 8 [ 799.967704][ T6] usb 2-1: USB disconnect, device number 26 [ 799.986224][ T296] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 799.995160][ T296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.002982][ T296] usb 4-1: Product: syz [ 800.007131][ T296] usb 4-1: Manufacturer: syz [ 800.011535][ T296] usb 4-1: SerialNumber: syz [ 800.016781][ T296] usb 4-1: config 0 descriptor?? [ 800.046229][ T472] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 800.055161][ T472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.063076][ T472] usb 5-1: Product: syz [ 800.067023][ T472] usb 5-1: Manufacturer: syz [ 800.071412][ T472] usb 5-1: SerialNumber: syz [ 800.076864][ T472] usb 5-1: config 0 descriptor?? [ 800.136380][T10323] loop0: detected capacity change from 0 to 512 [ 800.198686][T10323] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.2829: bad orphan inode 13 [ 800.208825][T10323] ext4_test_bit(bit=12, block=4) = 1 [ 800.213972][T10323] is_bad_inode(inode)=0 [ 800.217999][T10323] NEXT_ORPHAN(inode)=0 [ 800.221867][T10323] max_ino=32 [ 800.224912][T10323] i_nlink=1 [ 800.227968][T10323] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 800.239943][T10323] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.2829: Unrecognised inode hash code 20 [ 800.251327][T10323] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2829: Corrupt directory, running e2fsck is recommended [ 800.264337][T10323] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.2829: Unrecognised inode hash code 20 [ 800.275650][T10323] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2829: Corrupt directory, running e2fsck is recommended [ 800.288420][T10323] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.2829: corrupted in-inode xattr [ 800.300667][T10323] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.2829: Unrecognised inode hash code 20 [ 800.312004][T10323] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2829: Corrupt directory, running e2fsck is recommended [ 800.324986][T10323] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.2829: Unrecognised inode hash code 20 [ 800.336313][T10323] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2829: Corrupt directory, running e2fsck is recommended [ 800.349312][T10323] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.2829: Unrecognised inode hash code 20 [ 800.360535][T10323] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2829: Corrupt directory, running e2fsck is recommended [ 800.373231][T10323] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.2829: corrupted in-inode xattr [ 800.796140][ T6] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 801.056167][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 801.206192][ T6] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 801.214334][ T6] usb 1-1: config 0 has no interface number 0 [ 801.220221][ T6] usb 1-1: config 0 interface 207 has no altsetting 0 [ 801.330199][ T296] usb 4-1: USB disconnect, device number 16 [ 801.396259][ T6] usb 1-1: Dual-Role OTG device on HNP port [ 801.411985][T10351] loop3: detected capacity change from 0 to 512 [ 801.426216][ T6] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01e0, bcdDevice=f7.d8 [ 801.435327][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.443615][ T6] usb 1-1: Product: syz [ 801.447882][ T6] usb 1-1: Manufacturer: syz [ 801.452290][ T6] usb 1-1: SerialNumber: syz [ 801.457261][T10351] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 801.462089][ T6] usb 1-1: config 0 descriptor?? [ 801.469609][T10351] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 801.479792][T10351] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 801.487696][T10351] System zones: 0-2, 18-18, 34-34 [ 801.493277][T10351] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 801.508532][T10351] EXT4-fs (loop3): 1 truncate cleaned up [ 801.514119][T10351] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,quota,errors=remount-ro,grpquota,jqfmt=vfsv1,nogrpid,. Quota mode: writeback. [ 801.533558][T10351] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.2838: corrupted xattr block 19 [ 801.545489][T10351] EXT4-fs (loop3): Remounting filesystem read-only [ 801.551965][T10351] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 801.560980][T10351] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.2838: corrupted xattr block 19 [ 801.572945][T10351] EXT4-fs (loop3): Remounting filesystem read-only [ 801.579316][T10351] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 801.588285][T10351] EXT4-fs error (device loop3): ext4_xattr_block_find:1857: inode #15: comm syz.3.2838: corrupted xattr block 19 [ 801.600427][T10351] EXT4-fs (loop3): Remounting filesystem read-only [ 801.668943][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 801.675184][T10358] Bluetooth: hci0: Frame reassembly failed (-84) [ 801.686242][ T2993] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 801.776750][ T6] ftdi_sio 1-1:0.207: FTDI USB Serial Device converter detected [ 801.784670][ T6] usb 1-1: Detected FT-X [ 801.806326][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 801.826200][ T6] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 801.846197][ T6] ftdi_sio 1-1:0.207: GPIO initialisation failed: -71 [ 801.854245][ T6] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 801.863230][ T6] usb 1-1: USB disconnect, device number 13 [ 801.871185][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 801.880909][ T6] ftdi_sio 1-1:0.207: device disconnected [ 801.926259][ T2993] usb 2-1: Using ep0 maxpacket: 32 [ 802.046230][ T2993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.057005][ T2993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.066524][ T2993] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 802.075331][ T2993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.084232][ T2993] usb 2-1: config 0 descriptor?? [ 802.225372][ T472] usb 5-1: USB disconnect, device number 19 [ 802.248585][T10365] loop4: detected capacity change from 0 to 128 [ 802.265634][T10365] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 802.273919][T10365] FAT-fs (loop4): Filesystem has been set read-only [ 802.281963][T10365] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 802.290187][T10365] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 802.306996][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 802.307012][ T30] audit: type=1400 audit(1736989679.227:4790): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 802.366975][T10377] loop4: detected capacity change from 0 to 512 [ 802.408272][T10377] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 802.422206][T10377] ext4 filesystem being mounted at /558/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.516553][ T30] audit: type=1400 audit(1736989679.437:4791): avc: denied { remount } for pid=10375 comm="syz.0.2849" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 802.558161][T10383] loop4: detected capacity change from 0 to 256 [ 802.563516][T10386] x_tables: duplicate underflow at hook 2 [ 802.573193][ T2993] savu 0003:1E7D:2D5A.000E: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 802.611542][T10383] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 802.837366][ T2993] usb 2-1: USB disconnect, device number 27 [ 803.146137][ T26] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 803.536254][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.547322][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.556989][ T26] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 803.565867][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.574424][ T26] usb 1-1: config 0 descriptor?? [ 803.626226][ T507] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 803.656585][T10417] capability: warning: `syz.4.2865' uses deprecated v2 capabilities in a way that may be insecure [ 803.697036][ T30] audit: type=1400 audit(1736989680.617:4792): avc: denied { create } for pid=10420 comm="syz.4.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 803.724586][T10423] loop4: detected capacity change from 0 to 256 [ 803.736208][ T472] Bluetooth: hci0: command 0x1003 tx timeout [ 803.742181][T10360] Bluetooth: hci0: sending frame failed (-49) [ 803.808994][T10423] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd137a500, utbl_chksum : 0xe619d30d) [ 803.823820][ T30] audit: type=1400 audit(1736989680.747:4793): avc: denied { mounton } for pid=10422 comm="syz.4.2868" path="/567/file0/file0" dev="loop4" ino=1048760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 803.896151][ T507] usb 2-1: Using ep0 maxpacket: 32 [ 803.908726][ T30] audit: type=1400 audit(1736989680.827:4794): avc: denied { write } for pid=10426 comm="syz.4.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 803.977515][T10435] binder: 10434:10435 ioctl c0306201 20000100 returned -14 [ 803.996699][T10437] loop4: detected capacity change from 0 to 512 [ 804.026277][ T507] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.037223][ T507] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.046852][ T507] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 804.055655][ T507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.064279][ T507] usb 2-1: config 0 descriptor?? [ 804.070207][ T26] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 804.077535][ T26] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 804.081354][T10437] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 804.086177][ T26] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 804.103522][T10437] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2875: invalid indirect mapped block 4294967295 (level 1) [ 804.103772][ T26] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 804.118163][T10437] EXT4-fs (loop4): Remounting filesystem read-only [ 804.125291][ T26] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 804.131249][T10437] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2875: invalid indirect mapped block 4294967295 (level 1) [ 804.141245][ T26] playstation 0003:054C:0DF2.000F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 804.152695][T10437] EXT4-fs (loop4): Remounting filesystem read-only [ 804.170016][T10437] EXT4-fs (loop4): 2 truncates cleaned up [ 804.175548][T10437] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 804.279430][T10448] loop4: detected capacity change from 0 to 16 [ 804.286358][ T26] playstation 0003:054C:0DF2.000F: Invalid reportID received, expected 9 got 0 [ 804.295138][ T26] playstation 0003:054C:0DF2.000F: Failed to retrieve DualSense pairing info: -22 [ 804.304543][ T26] playstation 0003:054C:0DF2.000F: Failed to get MAC address from DualSense [ 804.313165][ T26] playstation 0003:054C:0DF2.000F: Failed to create dualsense. [ 804.321238][ T26] playstation: probe of 0003:054C:0DF2.000F failed with error -22 [ 804.346707][T10448] erofs: (device loop4): mounted with root inode @ nid 36. [ 804.355376][ T30] audit: type=1400 audit(1736989681.267:4795): avc: denied { read } for pid=10447 comm="syz.4.2879" name="file1" dev="loop4" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 804.435212][T10450] loop4: detected capacity change from 0 to 512 [ 804.490726][ T26] usb 1-1: USB disconnect, device number 14 [ 804.499599][T10450] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 804.510819][T10450] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.522613][ T30] audit: type=1400 audit(1736989681.447:4796): avc: denied { read } for pid=10449 comm="syz.4.2880" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 804.545138][ T30] audit: type=1400 audit(1736989681.447:4797): avc: denied { open } for pid=10449 comm="syz.4.2880" path="/579/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 804.588420][ T507] savu 0003:1E7D:2D5A.0010: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 804.856797][ T26] usb 2-1: USB disconnect, device number 28 [ 804.875418][ T30] audit: type=1400 audit(1736989681.787:4798): avc: denied { integrity } for pid=10455 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 804.938344][ T30] audit: type=1400 audit(1736989681.857:4799): avc: denied { mounton } for pid=10456 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 805.028852][T10456] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.035829][T10456] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.047946][T10456] device bridge_slave_0 entered promiscuous mode [ 805.055234][T10456] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.082779][T10456] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.091005][T10456] device bridge_slave_1 entered promiscuous mode [ 805.195352][T10456] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.202265][T10456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.209397][T10456] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.216285][T10456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.260047][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.268204][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.275818][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 805.283571][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 805.301263][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 805.309440][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.316324][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.324278][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 805.332404][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.339294][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.355456][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 805.363499][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 805.406122][ T2993] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 805.415177][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 805.440540][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 805.454441][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 805.472400][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 805.489917][T10456] device veth0_vlan entered promiscuous mode [ 805.512928][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 805.525298][T10456] device veth1_macvtap entered promiscuous mode [ 805.541047][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 805.567196][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 805.611999][T10488] loop1: detected capacity change from 0 to 40427 [ 805.645218][T10488] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 805.646192][ T2993] usb 5-1: Using ep0 maxpacket: 8 [ 805.652922][T10488] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 805.670508][T10488] F2FS-fs (loop1): invalid crc value [ 805.677396][T10488] F2FS-fs (loop1): Found nat_bits in checkpoint [ 805.730288][T10488] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 805.734730][T10510] loop2: detected capacity change from 0 to 1024 [ 805.737435][T10488] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 805.765562][ T466] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 805.775093][ T466] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 805.816191][ T805] Bluetooth: hci0: command 0x1001 tx timeout [ 805.816244][ T2993] usb 5-1: unable to get BOS descriptor or descriptor too short [ 805.822525][T10360] Bluetooth: hci0: sending frame failed (-49) [ 805.837321][ T311] device bridge_slave_1 left promiscuous mode [ 805.843305][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.851198][ T311] device bridge_slave_0 left promiscuous mode [ 805.859174][T10510] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 805.861864][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.868802][T10510] EXT4-fs (loop2): orphan cleanup on readonly fs [ 805.881149][ T311] device veth1_macvtap left promiscuous mode [ 805.890436][ T311] device veth0_vlan left promiscuous mode [ 805.896686][T10510] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm syz.2.2903: Invalid inode table block 0 in block_group 0 [ 805.911101][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 805.917829][T10510] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 805.927636][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 805.934010][T10510] EXT4-fs error (device loop2): ext4_quota_write:6583: inode #3: comm syz.2.2903: mark_inode_dirty error [ 805.945367][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 805.952132][T10510] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.2903: Failed to acquire dquot type 0 [ 805.963831][T10524] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2909'. [ 805.966308][ T2993] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 805.974655][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 805.981329][ T2993] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 805.996715][ T2993] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 806.005443][ T2993] usb 5-1: config 1 has no interface number 1 [ 806.005483][ T2993] usb 5-1: too many endpoints for config 1 interface 5 altsetting 119: 36, using maximum allowed: 30 [ 806.005519][ T2993] usb 5-1: config 1 interface 5 altsetting 119 has an invalid endpoint descriptor of length 5, skipping [ 806.005545][ T2993] usb 5-1: config 1 interface 5 altsetting 119 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 806.005575][ T2993] usb 5-1: config 1 interface 5 has no altsetting 0 [ 806.007358][T10510] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm syz.2.2903: Invalid inode table block 0 in block_group 0 [ 806.016182][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 806.016205][T10510] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 806.016493][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 806.016511][T10510] EXT4-fs error (device loop2): ext4_ext_truncate:4454: inode #15: comm syz.2.2903: mark_inode_dirty error [ 806.109596][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 806.115940][T10510] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm syz.2.2903: Invalid inode table block 0 in block_group 0 [ 806.128653][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 806.134987][T10510] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 806.144553][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 806.151243][T10510] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 806.159795][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 806.167919][T10510] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm syz.2.2903: Invalid inode table block 0 in block_group 0 [ 806.180710][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 806.187243][T10510] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 806.198109][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 806.204479][T10510] EXT4-fs error (device loop2): ext4_truncate:4303: inode #15: comm syz.2.2903: mark_inode_dirty error [ 806.215992][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 806.222993][T10510] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 806.227485][ T2993] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 806.232003][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 806.242598][ T2993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.247566][T10510] EXT4-fs (loop2): 1 truncate cleaned up [ 806.255454][ T2993] usb 5-1: Product: syz [ 806.260659][T10510] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,usrquota,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback. [ 806.264561][ T2993] usb 5-1: Manufacturer: syz [ 806.296001][T10510] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 16: comm syz.2.2903: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 806.297520][ T2993] usb 5-1: SerialNumber: syz [ 806.371457][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 806.414592][T10537] loop1: detected capacity change from 0 to 128 [ 806.488347][T10537] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 806.499120][T10537] ext4 filesystem being mounted at /554/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 806.513867][T10537] EXT4-fs warning (device loop1): __ext4_ioctl:881: Setting inode version is not supported with metadata_csum enabled. [ 806.696751][ T2993] usb 5-1: 0:2 : does not exist [ 806.739633][ T2993] usb 5-1: USB disconnect, device number 20 [ 806.816873][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.823794][T10548] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.831161][T10548] device bridge_slave_0 entered promiscuous mode [ 806.838393][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.845346][T10548] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.852811][T10548] device bridge_slave_1 entered promiscuous mode [ 806.876122][ T6] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 806.925453][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.932345][T10548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.939501][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.946368][T10548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.975039][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 806.984928][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.992831][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.005346][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 807.013705][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.022837][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.032409][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 807.040543][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.048020][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.062768][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 807.072345][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 807.092507][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 807.105929][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 807.115469][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 807.124148][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 807.137344][T10548] device veth0_vlan entered promiscuous mode [ 807.150503][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 807.160617][T10548] device veth1_macvtap entered promiscuous mode [ 807.172881][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 807.192960][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 807.201486][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 807.352589][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 807.352607][ T30] audit: type=1400 audit(1736989684.267:4815): avc: denied { write } for pid=10572 comm="syz.4.2925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 807.417482][ T6] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 807.428899][T10580] loop4: detected capacity change from 0 to 256 [ 807.429561][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.442962][ T6] usb 2-1: Product: syz [ 807.446977][ T6] usb 2-1: Manufacturer: syz [ 807.451369][ T6] usb 2-1: SerialNumber: syz [ 807.476931][T10580] exfat: Deprecated parameter 'namecase' [ 807.485787][T10580] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 807.507004][ T30] audit: type=1400 audit(1736989684.427:4816): avc: denied { read write } for pid=10579 comm="syz.4.2928" name="file1" dev="loop4" ino=1048775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 807.514740][T10580] exFAT-fs (loop4): hint_cluster is invalid (1) [ 807.533311][ T30] audit: type=1400 audit(1736989684.427:4817): avc: denied { open } for pid=10579 comm="syz.4.2928" path="/587/file0/file1" dev="loop4" ino=1048775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 807.539953][T10580] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 807.572980][T10580] exFAT-fs (loop4): error, failed to bmap (inode : ffff8881288cb490 iblock : 9, err : -5) [ 807.583088][T10580] attempt to access beyond end of device [ 807.583088][T10580] loop4: rw=2049, want=34359738496, limit=256 [ 807.606176][ T6001] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 807.617338][ T466] device bridge_slave_1 left promiscuous mode [ 807.623334][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.630851][ T466] device bridge_slave_0 left promiscuous mode [ 807.637026][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.644754][ T466] device veth1_macvtap left promiscuous mode [ 807.650991][ T466] device veth0_vlan left promiscuous mode [ 807.671143][ T30] audit: type=1400 audit(1736989684.587:4818): avc: denied { write } for pid=10582 comm="syz.4.2929" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 807.693968][ T26] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 807.846257][ T6001] usb 1-1: Using ep0 maxpacket: 16 [ 807.896532][ T805] Bluetooth: hci0: command 0x1009 tx timeout [ 807.956138][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 807.966319][ T6001] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 808.096327][ T26] usb 3-1: config 2 has an invalid interface number: 169 but max is 0 [ 808.104454][ T26] usb 3-1: config 2 has no interface number 0 [ 808.110602][ T26] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 808.119445][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.136788][ T6001] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 808.145763][ T6001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.153650][ T6001] usb 1-1: Product: syz [ 808.157658][ T6001] usb 1-1: Manufacturer: syz [ 808.162029][ T6001] usb 1-1: SerialNumber: syz [ 808.167148][ T6001] usb 1-1: config 0 descriptor?? [ 808.379711][ T26] usb 3-1: USB disconnect, device number 18 [ 808.705567][ T30] audit: type=1400 audit(1736989685.617:4819): avc: denied { watch_reads } for pid=10595 comm="syz.4.2934" path="/593" dev="tmpfs" ino=3264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 808.749888][ T30] audit: type=1326 audit(1736989685.667:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb997e9d29 code=0x7ffc0000 [ 808.773446][ T30] audit: type=1326 audit(1736989685.667:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb997e9d29 code=0x7ffc0000 [ 808.798924][ T30] audit: type=1326 audit(1736989685.667:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb997e9d29 code=0x7ffc0000 [ 808.823934][ T30] audit: type=1326 audit(1736989685.667:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb997e9d29 code=0x7ffc0000 [ 808.847882][ T30] audit: type=1326 audit(1736989685.667:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb997e9d29 code=0x7ffc0000 [ 808.888561][T10607] loop4: detected capacity change from 0 to 128 [ 808.938597][T10613] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 809.075859][T10626] loop2: detected capacity change from 0 to 256 [ 809.104287][T10626] FAT-fs (loop2): Directory bread(block 64) failed [ 809.110687][T10626] FAT-fs (loop2): Directory bread(block 65) failed [ 809.117158][T10626] FAT-fs (loop2): Directory bread(block 66) failed [ 809.123582][T10626] FAT-fs (loop2): Directory bread(block 67) failed [ 809.130122][T10626] FAT-fs (loop2): Directory bread(block 68) failed [ 809.136908][T10626] FAT-fs (loop2): Directory bread(block 69) failed [ 809.143428][T10626] FAT-fs (loop2): Directory bread(block 70) failed [ 809.149885][T10626] FAT-fs (loop2): Directory bread(block 71) failed [ 809.156434][T10626] FAT-fs (loop2): Directory bread(block 72) failed [ 809.162776][T10626] FAT-fs (loop2): Directory bread(block 73) failed [ 809.180113][T10626] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 809.187717][T10626] FAT-fs (loop2): Filesystem has been set read-only [ 809.516199][ T6] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 809.618931][ T805] usb 2-1: USB disconnect, device number 29 [ 809.664247][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.671211][T10633] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.679766][T10633] device bridge_slave_0 entered promiscuous mode [ 809.686948][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.693881][T10633] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.701271][T10633] device bridge_slave_1 entered promiscuous mode [ 809.772560][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.779452][T10633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.786571][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.793501][T10633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.815825][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.823177][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.830940][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 809.838645][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 809.848495][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 809.856549][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.863414][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.872246][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 809.880400][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.887411][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.896305][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.907292][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.917050][ T6] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 809.926497][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.935521][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 809.938841][ T6] usb 3-1: config 0 descriptor?? [ 809.943718][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 809.962589][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 809.976596][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 809.984489][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 809.992158][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 810.000997][T10633] device veth0_vlan entered promiscuous mode [ 810.013542][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 810.023096][T10633] device veth1_macvtap entered promiscuous mode [ 810.033662][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 810.043930][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 810.052058][ T805] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 810.080943][T10643] loop4: detected capacity change from 0 to 1024 [ 810.147810][T10643] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 810.161016][T10643] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 810.176399][T10643] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 810.188706][T10643] EXT4-fs (loop4): This should not happen!! Data will be lost [ 810.188706][T10643] [ 810.199651][T10643] EXT4-fs (loop4): Total free blocks count 0 [ 810.205553][T10643] EXT4-fs (loop4): Free/Dirty block details [ 810.211590][T10643] EXT4-fs (loop4): free_blocks=68451041280 [ 810.212090][T10649] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 810.217644][T10643] EXT4-fs (loop4): dirty_blocks=32 [ 810.229361][T10649] EXT4-fs (loop4): This should not happen!! Data will be lost [ 810.229361][T10649] [ 810.234680][T10643] EXT4-fs (loop4): Block reservation details [ 810.243922][T10649] EXT4-fs (loop4): Total free blocks count 0 [ 810.296158][ T805] usb 2-1: Using ep0 maxpacket: 16 [ 810.307331][ T311] device bridge_slave_1 left promiscuous mode [ 810.313368][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.320723][ T311] device bridge_slave_0 left promiscuous mode [ 810.326752][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.332478][ T6001] usb 1-1: USB disconnect, device number 15 [ 810.394429][T10658] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=926752543 (1853505086 ns) > initial count (336460 ns). Using initial count to start timer. [ 810.426204][ T805] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 810.426439][ T6] hid (null): nested delimiters [ 810.437206][ T805] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 810.451092][ T6] wacom 0003:056A:030C.0011: nested delimiters [ 810.451113][ T6] wacom 0003:056A:030C.0011: item 0 1 2 10 parsing failed [ 810.451295][ T6] wacom 0003:056A:030C.0011: parse failed [ 810.462095][ T805] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 810.464502][ T6] wacom: probe of 0003:056A:030C.0011 failed with error -22 [ 810.573713][T10678] device bridge1 entered promiscuous mode [ 810.629402][ T507] usb 3-1: USB disconnect, device number 19 [ 810.656298][ T805] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 810.665161][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.673421][ T805] usb 2-1: Product: syz [ 810.677480][ T805] usb 2-1: Manufacturer: syz [ 810.681841][ T805] usb 2-1: SerialNumber: syz [ 811.166848][ T805] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 811.207939][T10694] loop2: detected capacity change from 0 to 256 [ 811.236782][T10694] exfat: Unknown parameter '˙˙˙˙˙˙˙˙0x0000000000000000' [ 811.332405][T10696] tipc: Can't bind to reserved service type 2 [ 811.382042][T10702] loop2: detected capacity change from 0 to 1024 [ 811.441526][T10702] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 811.824363][ T507] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 811.997435][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2988'. [ 812.006554][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2988'. [ 812.015214][T10738] netlink: 18 bytes leftover after parsing attributes in process `syz.0.2988'. [ 812.024217][T10738] netlink: 18 bytes leftover after parsing attributes in process `syz.0.2988'. [ 812.066227][ T805] usb 2-1: current rate 1048576 is different from the runtime rate 9338507 [ 812.150587][T10744] loop3: detected capacity change from 0 to 256 [ 812.186258][ T507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.197710][ T507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.211100][T10744] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 812.219363][T10744] FAT-fs (loop3): Filesystem has been set read-only [ 812.225847][ T507] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 812.239841][ T507] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 812.248901][ T507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.250469][T10754] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.262281][ T507] usb 5-1: config 0 descriptor?? [ 812.286545][ T805] usb 2-1: USB disconnect, device number 30 [ 812.339109][T10759] usb usb8: usbfs: process 10759 (syz.0.2997) did not claim interface 0 before use [ 812.418522][T10772] overlayfs: failed to resolve './file2': -2 [ 812.437195][T10774] loop3: detected capacity change from 0 to 512 [ 812.445437][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 812.445454][ T30] audit: type=1400 audit(1736989689.357:4863): avc: denied { name_bind } for pid=10775 comm="syz.0.3005" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 812.460488][T10774] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 812.484986][T10774] EXT4-fs (loop3): 1 truncate cleaned up [ 812.490835][T10774] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000003,stripe=0x0000000000000004,block_validity,debug_want_extra_isize=0x000000000000002e,,errors=continue. Quota mode: writeback. [ 812.532229][ T30] audit: type=1400 audit(1736989689.447:4864): avc: denied { write } for pid=10773 comm="syz.3.3004" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 812.559516][ T30] audit: type=1400 audit(1736989689.477:4865): avc: denied { add_name } for pid=10773 comm="syz.3.3004" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 812.580196][ T30] audit: type=1400 audit(1736989689.477:4866): avc: denied { remove_name } for pid=10773 comm="syz.3.3004" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 812.603047][ T30] audit: type=1400 audit(1736989689.477:4867): avc: denied { rename } for pid=10773 comm="syz.3.3004" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 812.625485][ T30] audit: type=1400 audit(1736989689.477:4868): avc: denied { reparent } for pid=10773 comm="syz.3.3004" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 812.648500][ T30] audit: type=1400 audit(1736989689.477:4869): avc: denied { remove_name } for pid=10773 comm="syz.3.3004" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 812.670927][ T30] audit: type=1400 audit(1736989689.477:4870): avc: denied { rmdir } for pid=10773 comm="syz.3.3004" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 812.750097][ T507] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 812.907485][ T30] audit: type=1400 audit(1736989689.477:4871): avc: denied { rename } for pid=10773 comm="syz.3.3004" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 812.923835][ T507] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 814.301906][ T30] audit: type=1400 audit(1736989689.477:4872): avc: denied { reparent } for pid=10773 comm="syz.3.3004" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 814.305461][T10788] loop1: detected capacity change from 0 to 1024 [ 814.547612][ T507] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 814.558000][T10788] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000008,barrier=0x0000000000000004,norecovery,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 814.595000][T10788] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2746: inode #12: comm syz.1.3009: corrupted in-inode xattr [ 814.632796][ T507] usb 5-1: USB disconnect, device number 21 [ 815.023817][T10811] tipc: Enabling of bearer rejected, failed to enable media [ 815.081653][T10817] loop1: detected capacity change from 0 to 256 [ 815.118121][T10817] exfat: Deprecated parameter 'utf8' [ 815.123452][T10817] exfat: Deprecated parameter 'namecase' [ 815.129285][T10817] exfat: Deprecated parameter 'namecase' [ 815.134913][T10817] exfat: Deprecated parameter 'utf8' [ 815.146434][T10822] loop4: detected capacity change from 0 to 256 [ 815.147147][T10817] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 815.559316][T10828] loop3: detected capacity change from 0 to 128 [ 815.599354][T10828] FAT-fs (loop3): Directory bread(block 32) failed [ 815.629325][T10837] loop1: detected capacity change from 0 to 512 [ 815.634936][T10828] FAT-fs (loop3): Directory bread(block 33) failed [ 815.645534][T10828] FAT-fs (loop3): Directory bread(block 34) failed [ 815.653919][T10828] FAT-fs (loop3): Directory bread(block 35) failed [ 815.663083][T10828] FAT-fs (loop3): Directory bread(block 36) failed [ 815.664337][T10842] binder: 10841:10842 ioctl 541b 0 returned -22 [ 815.669813][T10828] FAT-fs (loop3): Directory bread(block 37) failed [ 815.682292][T10828] FAT-fs (loop3): Directory bread(block 38) failed [ 815.689028][T10828] FAT-fs (loop3): Directory bread(block 39) failed [ 815.695490][T10828] FAT-fs (loop3): Directory bread(block 40) failed [ 815.702208][T10828] FAT-fs (loop3): Directory bread(block 41) failed [ 815.717917][T10837] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 815.771409][T10837] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 815.786246][T10837] EXT4-fs (loop1): Remounting filesystem read-only [ 815.793389][T10837] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3029: invalid indirect mapped block 1 (level 1) [ 815.837472][T10837] EXT4-fs (loop1): Remounting filesystem read-only [ 815.851521][T10837] EXT4-fs (loop1): 1 truncate cleaned up [ 816.084482][T10837] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 816.098912][T10837] EXT4-fs error (device loop1): ext4_remount:5846: comm syz.1.3029: Abort forced by user [ 816.126907][T10837] EXT4-fs (loop1): Remounting filesystem read-only [ 816.156275][T10858] loop2: detected capacity change from 0 to 512 [ 816.167624][T10858] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 816.188609][T10858] EXT4-fs (loop2): Unrecognized mount option "obj_type=" or missing value [ 816.776117][ T6] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 816.896109][ T2993] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 817.056139][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 817.176228][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.196129][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.215897][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 817.236112][ T6] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 817.256598][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.266497][ T2993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.288377][ T2993] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 817.307002][ T6] usb 4-1: config 0 descriptor?? [ 817.326382][ T2993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.365764][ T2993] usb 3-1: config 0 descriptor?? [ 817.827047][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 817.842903][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 817.866114][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 817.866167][ T30] audit: type=1326 audit(1736989694.777:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9859085d29 code=0x7ffc0000 [ 818.566708][ T30] audit: type=1326 audit(1736989695.147:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9859085d29 code=0x7ffc0000 [ 818.745503][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 818.753690][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 818.760849][ T30] audit: type=1326 audit(1736989695.147:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9859085d29 code=0x7ffc0000 [ 818.761521][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 818.791755][ T30] audit: type=1326 audit(1736989695.147:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9859085d29 code=0x7ffc0000 [ 818.791853][ T2993] usbhid 3-1:0.0: can't add hid device: -71 [ 818.821010][ T6133] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 818.821172][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 818.835633][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 818.842652][ T30] audit: type=1326 audit(1736989695.147:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f9859085d29 code=0x7ffc0000 [ 818.842671][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 818.874052][ T30] audit: type=1326 audit(1736989695.157:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9859085d29 code=0x7ffc0000 [ 818.883802][ T2993] usbhid: probe of 3-1:0.0 failed with error -71 [ 818.926570][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 818.933470][ T30] audit: type=1326 audit(1736989695.157:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9859085d29 code=0x7ffc0000 [ 818.939228][ T2993] usb 3-1: USB disconnect, device number 20 [ 818.965952][ T30] audit: type=1326 audit(1736989695.157:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9859085d29 code=0x7ffc0000 [ 818.969502][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.381690][T10920] loop3: detected capacity change from 0 to 256 [ 819.436179][ T30] audit: type=1326 audit(1736989695.217:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9859085d29 code=0x7ffc0000 [ 819.520309][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.525183][T10928] mmap: syz.1.3058 (10928) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 819.527693][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.558314][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.565677][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.572747][ T6133] usb 5-1: Using ep0 maxpacket: 8 [ 819.587801][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.627532][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.634351][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.641205][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.653199][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.660420][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.667432][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.674324][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.695470][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.696194][ T6133] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.704452][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.719470][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.727290][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.741998][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.755025][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.762422][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.769882][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.779576][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.787028][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.800119][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.807621][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.814473][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.824724][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.832000][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.842528][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.851472][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.862980][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.873386][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.881117][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.886224][ T6133] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 819.889166][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.899085][ T6133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.912683][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.920607][ T6133] usb 5-1: Product: syz [ 819.923499][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.926768][ T6133] usb 5-1: Manufacturer: syz [ 819.932269][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.936736][ T6133] usb 5-1: SerialNumber: syz [ 819.943239][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.954307][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.961544][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.968818][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.975722][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.982990][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.991080][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 819.998370][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.005382][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.012616][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.022557][ T6133] usb 5-1: config 0 descriptor?? [ 820.026305][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.034367][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.041623][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.048641][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.055476][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.062250][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.069050][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.075863][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.082663][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.306508][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.314746][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.320817][ T6133] usb 5-1: USB disconnect, device number 22 [ 820.361082][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.368148][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.375205][ T6] elecom 0003:056E:00FE.0013: unknown main item tag 0x0 [ 820.385904][ T6] elecom 0003:056E:00FE.0013: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 820.399927][ T6] usb 4-1: USB disconnect, device number 17 [ 820.756171][ T6] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 820.953659][ T30] audit: type=1400 audit(1736989697.867:4899): avc: denied { mount } for pid=10962 comm="syz.0.3073" name="/" dev="configfs" ino=13680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 822.221419][T10974] bridge0: port 3(syz_tun) entered blocking state [ 822.227750][T10974] bridge0: port 3(syz_tun) entered disabled state [ 822.235435][T10974] device syz_tun entered promiscuous mode [ 822.241393][T10974] bridge0: port 3(syz_tun) entered blocking state [ 822.247647][T10974] bridge0: port 3(syz_tun) entered forwarding state [ 822.483904][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3076'. [ 822.543716][T10989] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3082'. [ 822.556111][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 822.562217][T10993] loop4: detected capacity change from 0 to 512 [ 822.788455][T10993] EXT4-fs (loop4): Ignoring removed nobh option [ 822.803699][T10993] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 822.836169][ T6] usb 4-1: unable to read config index 0 descriptor/all [ 822.842990][ T6] usb 4-1: can't read configurations, error -71 [ 822.871893][T10993] EXT4-fs (loop4): 1 truncate cleaned up [ 822.894766][T10993] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,jqfmt=vfsold,init_itable,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 822.921903][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 822.921918][ T30] audit: type=1400 audit(1736989699.837:4905): avc: denied { map } for pid=10991 comm="syz.4.3083" path="/16/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 822.993362][ T30] audit: type=1400 audit(1736989699.907:4906): avc: denied { execute } for pid=11008 comm="syz.0.3090" path="/63/pids.current" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 823.066131][T10895] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 823.074633][T11026] loop4: detected capacity change from 0 to 256 [ 823.094723][T11028] loop3: detected capacity change from 0 to 256 [ 823.126821][T11026] exfat: Bad value for 'errors' [ 823.178261][T11028] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb75ad3fb, utbl_chksum : 0xe619d30d) [ 823.283368][T11039] loop1: detected capacity change from 0 to 2048 [ 823.337072][T11039] loop1: p1 < > p4 [ 823.341651][T11039] loop1: p4 size 8388608 extends beyond EOD, truncated [ 823.351619][ T30] audit: type=1400 audit(1736989700.267:4907): avc: denied { map } for pid=11038 comm="syz.1.3102" path="/591/bus" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 823.375222][T10895] usb 3-1: Using ep0 maxpacket: 16 [ 823.382127][ T30] audit: type=1400 audit(1736989700.277:4908): avc: denied { execute } for pid=11038 comm="syz.1.3102" path="/591/bus" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 823.386258][ T2993] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 823.431930][T11042] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 823.440594][T11042] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 823.496374][T10895] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 823.504628][T10895] usb 3-1: config 0 has no interface number 0 [ 823.510705][T10895] usb 3-1: config 0 interface 41 has no altsetting 0 [ 823.643120][ T101] loop1: p1 < > p4 [ 823.649611][ T101] loop1: p4 size 8388608 extends beyond EOD, truncated [ 823.661844][ T30] audit: type=1400 audit(1736989700.577:4909): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 823.676252][ T2993] usb 1-1: Using ep0 maxpacket: 16 [ 823.690919][T10895] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 823.700759][T10895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.708708][T10895] usb 3-1: Product: syz [ 823.712782][T10895] usb 3-1: Manufacturer: syz [ 823.717516][T10895] usb 3-1: SerialNumber: syz [ 823.724663][T10895] usb 3-1: config 0 descriptor?? [ 823.769731][ T9246] udevd[9246]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 823.772560][ T8910] udevd[8910]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 823.792955][T10895] CoreChips: probe of 3-1:0.41 failed with error -22 [ 823.824383][ T30] audit: type=1326 audit(1736989700.737:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b0e7d29 code=0x7ffc0000 [ 823.848160][ T2993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.861756][ T2993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.865353][ T30] audit: type=1326 audit(1736989700.787:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f494b0e792b code=0x7ffc0000 [ 824.022663][ T2993] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 824.027056][ T472] usb 3-1: USB disconnect, device number 21 [ 824.047007][ T2993] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 824.059723][ T30] audit: type=1326 audit(1736989700.787:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b0e7d29 code=0x7ffc0000 [ 824.062445][ T2993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.091220][ T30] audit: type=1326 audit(1736989700.787:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b0e7d29 code=0x7ffc0000 [ 824.125416][ T2993] usb 1-1: config 0 descriptor?? [ 824.152964][ T30] audit: type=1326 audit(1736989700.907:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f494b0e6690 code=0x7ffc0000 [ 824.184290][T11048] loop4: detected capacity change from 0 to 512 [ 824.200090][T11048] EXT4-fs (loop4): Ignoring removed orlov option [ 824.207780][T11048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e0ac, mo2=0002] [ 824.215652][T11048] System zones: 1-12 [ 824.220507][T11048] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.3104: casefold flag without casefold feature [ 824.238306][T11048] EXT4-fs (loop4): Remounting filesystem read-only [ 824.244695][T11048] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.3104: couldn't read orphan inode 15 (err -117) [ 824.256647][T11048] EXT4-fs (loop4): Remounting filesystem read-only [ 824.263002][T11048] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,abort,debug_want_extra_isize=0x000000000000005c,debug,errors=remount-ro,minixdf,usrjquota=,orlov,minixdf,dioread_lock,. Quota mode: none. [ 824.483836][T11063] loop3: detected capacity change from 0 to 256 [ 824.577661][T11063] FAT-fs (loop3): Directory bread(block 64) failed [ 824.584575][T11063] FAT-fs (loop3): Directory bread(block 65) failed [ 824.591526][T11063] FAT-fs (loop3): Directory bread(block 66) failed [ 824.598600][T11063] FAT-fs (loop3): Directory bread(block 67) failed [ 824.607589][T11063] FAT-fs (loop3): Directory bread(block 68) failed [ 824.628113][T11063] FAT-fs (loop3): Directory bread(block 69) failed [ 824.691167][T11063] FAT-fs (loop3): Directory bread(block 70) failed [ 824.701143][ T2993] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0014/input/input20 [ 824.726217][T11063] FAT-fs (loop3): Directory bread(block 71) failed [ 824.741834][ T2993] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 824.762811][T11063] FAT-fs (loop3): Directory bread(block 72) failed [ 824.769559][T11063] FAT-fs (loop3): Directory bread(block 73) failed [ 824.770098][T11074] loop1: detected capacity change from 0 to 2048 [ 824.888003][T11074] loop1: p4 < > [ 825.260322][ T26] usb 1-1: USB disconnect, device number 16 [ 825.389929][T11088] loop3: detected capacity change from 0 to 512 [ 825.408201][T11091] loop2: detected capacity change from 0 to 512 [ 825.416627][T11088] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 825.437289][T11091] EXT4-fs (loop2): Ignoring removed orlov option [ 825.446635][T11088] EXT4-fs (loop3): Unrecognized mount option "obj_type=" or missing value [ 825.448486][ T8910] udevd[8910]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 825.472226][T11091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e0ac, mo2=0002] [ 825.480073][T11091] System zones: 1-12 [ 825.484539][T11091] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.3118: casefold flag without casefold feature [ 825.497155][T11091] EXT4-fs (loop2): Remounting filesystem read-only [ 825.503519][T11091] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.3118: couldn't read orphan inode 15 (err -117) [ 825.515685][T11091] EXT4-fs (loop2): Remounting filesystem read-only [ 825.522286][T11091] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,abort,debug_want_extra_isize=0x000000000000005c,debug,errors=remount-ro,minixdf,usrjquota=,orlov,minixdf,dioread_lock,. Quota mode: none. [ 825.561706][T11100] loop1: detected capacity change from 0 to 1024 [ 825.678222][ T805] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 825.704571][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3129'. [ 825.715087][T11100] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,nodelalloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,nodiscard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 825.790802][T11122] hub 2-0:1.0: USB hub found [ 825.795409][T11122] hub 2-0:1.0: 1 port detected [ 825.956205][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 826.286340][ T805] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 826.295575][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.303693][ T805] usb 5-1: Product: syz [ 826.307873][ T805] usb 5-1: Manufacturer: syz [ 826.312411][ T805] usb 5-1: SerialNumber: syz [ 826.325955][ T805] usb 5-1: config 0 descriptor?? [ 826.526183][ T6] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 826.886296][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 826.918925][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 827.086240][ T6] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 827.099651][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.116139][ T6] usb 2-1: Product: syz [ 827.122021][ T6] usb 2-1: Manufacturer: syz [ 827.126510][ T6] usb 2-1: SerialNumber: syz [ 827.156135][ T26] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 827.646309][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.657315][ T26] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 827.666259][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.678553][ T26] usb 1-1: config 0 descriptor?? [ 827.696192][ T6] usb 2-1: 0:2 : does not exist [ 827.784599][ T6] usb 2-1: USB disconnect, device number 31 [ 828.298242][ T26] pantherlord 0003:0810:0001.0015: item fetching failed at offset 0/3 [ 828.310534][ T26] pantherlord 0003:0810:0001.0015: parse failed [ 828.324261][ T26] pantherlord: probe of 0003:0810:0001.0015 failed with error -22 [ 828.327091][ T8910] udevd[8910]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 828.354671][T11162] loop2: detected capacity change from 0 to 2048 [ 828.403140][T11163] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.406375][ T6] usb 5-1: USB disconnect, device number 23 [ 828.410276][T11163] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.423863][T11163] device bridge_slave_0 entered promiscuous mode [ 828.431523][T11163] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.438859][T11163] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.446413][T11163] device bridge_slave_1 entered promiscuous mode [ 828.476622][T11162] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 828.502824][T11162] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 828.528910][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 828.528927][ T30] audit: type=1326 audit(1736989705.447:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd6fd29 code=0x7ffc0000 [ 828.562805][ T805] usb 1-1: USB disconnect, device number 17 [ 828.603313][T11162] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 828.619513][ T30] audit: type=1326 audit(1736989705.477:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd6fd29 code=0x7ffc0000 [ 828.625636][T11162] EXT4-fs (loop2): This should not happen!! Data will be lost [ 828.625636][T11162] [ 828.643319][ T30] audit: type=1326 audit(1736989705.477:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fe60cd6fd29 code=0x7ffc0000 [ 828.686144][T11162] EXT4-fs (loop2): Total free blocks count 0 [ 828.703937][T11162] EXT4-fs (loop2): Free/Dirty block details [ 828.719079][ T30] audit: type=1326 audit(1736989705.477:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd6fd29 code=0x7ffc0000 [ 828.732137][T11163] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.745938][ T30] audit: type=1326 audit(1736989705.477:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd6fd29 code=0x7ffc0000 [ 828.749425][T11163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.772835][T11162] EXT4-fs (loop2): free_blocks=2415919104 [ 828.779917][T11163] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.779940][T11163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.801605][ T30] audit: type=1326 audit(1736989705.477:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe60cd6fd29 code=0x7ffc0000 [ 828.825539][ T30] audit: type=1326 audit(1736989705.477:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd6fd29 code=0x7ffc0000 [ 828.848959][T11162] EXT4-fs (loop2): dirty_blocks=32 [ 828.854003][T11162] EXT4-fs (loop2): Block reservation details [ 828.868919][T11162] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 828.874905][ T30] audit: type=1326 audit(1736989705.477:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cd6fd29 code=0x7ffc0000 [ 828.907207][ T3509] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 828.921465][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.928562][ T3509] EXT4-fs (loop2): This should not happen!! Data will be lost [ 828.928562][ T3509] [ 828.938484][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.028227][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 829.064790][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 829.239260][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 829.250255][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.257166][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.281914][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 829.296440][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.303337][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.357472][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 829.395328][T11163] device veth0_vlan entered promiscuous mode [ 829.410003][T11163] device veth1_macvtap entered promiscuous mode [ 829.504941][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 829.514905][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 829.524095][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 829.533316][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 829.541700][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 829.550542][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 829.559326][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 829.569058][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 829.806227][ T30] audit: type=1400 audit(1736989706.707:4932): avc: denied { create } for pid=11189 comm="syz.0.3149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 830.006582][T11203] loop2: detected capacity change from 0 to 2048 [ 830.128251][T11203] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,grpid,,errors=continue. Quota mode: none. [ 830.167114][ T30] audit: type=1400 audit(1736989707.077:4933): avc: denied { mounton } for pid=11210 comm="syz.3.3155" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 830.452879][T11203] ================================================================== [ 830.460769][T11203] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0xb9d/0x3430 [ 830.468768][T11203] Read of size 8 at addr ffff8881272ae6c0 by task syz.2.3151/11203 [ 830.476479][T11203] [ 830.478661][T11203] CPU: 0 PID: 11203 Comm: syz.2.3151 Not tainted 5.15.176-syzkaller-00972-g829d9f138569 #0 [ 830.488450][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 830.498347][T11203] Call Trace: [ 830.501490][T11203] [ 830.504251][T11203] dump_stack_lvl+0x151/0x1c0 [ 830.508760][T11203] ? io_uring_drop_tctx_refs+0x190/0x190 [ 830.514226][T11203] ? panic+0x760/0x760 [ 830.518134][T11203] print_address_description+0x87/0x3b0 [ 830.523519][T11203] kasan_report+0x179/0x1c0 [ 830.527856][T11203] ? tc_setup_flow_action+0xb9d/0x3430 [ 830.533147][T11203] ? tc_setup_flow_action+0xb9d/0x3430 [ 830.538446][T11203] __asan_report_load8_noabort+0x14/0x20 [ 830.543910][T11203] tc_setup_flow_action+0xb9d/0x3430 [ 830.546170][ T507] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 830.549038][T11203] mall_replace_hw_filter+0x394/0xc20 [ 830.561623][T11203] ? mall_set_parms+0x4b0/0x4b0 [ 830.566337][T11203] ? tcf_exts_destroy+0xb0/0xb0 [ 830.570990][T11203] ? pcpu_memcg_post_alloc_hook+0x1b1/0x260 [ 830.576737][T11203] ? pcpu_alloc+0xda0/0x13e0 [ 830.581145][T11203] ? mall_set_parms+0x1c3/0x4b0 [ 830.585829][T11203] mall_change+0x56e/0x780 [ 830.590085][T11203] ? mall_get+0xb0/0xb0 [ 830.594190][T11203] ? tcf_chain_tp_insert_unique+0xa90/0xbb0 [ 830.600030][T11203] ? nla_strcmp+0xed/0x120 [ 830.604291][T11203] ? mall_get+0xb0/0xb0 [ 830.608276][T11203] tc_new_tfilter+0x151a/0x1c00 [ 830.612960][T11203] ? tcf_gate_entry_destructor+0x20/0x20 [ 830.618437][T11203] ? security_capable+0x87/0xb0 [ 830.623114][T11203] ? ns_capable+0x89/0xe0 [ 830.627273][T11203] ? netlink_net_capable+0x125/0x160 [ 830.632395][T11203] ? tcf_gate_entry_destructor+0x20/0x20 [ 830.637866][T11203] rtnetlink_rcv_msg+0x776/0xc40 [ 830.642638][T11203] ? rtnetlink_bind+0x80/0x80 [ 830.647152][T11203] ? stack_trace_save+0x1c0/0x1c0 [ 830.652008][T11203] ? __kernel_text_address+0x9b/0x110 [ 830.657215][T11203] ? unwind_get_return_address+0x4d/0x90 [ 830.662811][T11203] ? avc_has_perm_noaudit+0x348/0x430 [ 830.668019][T11203] ? memcpy+0x56/0x70 [ 830.671836][T11203] ? avc_has_perm_noaudit+0x2dd/0x430 [ 830.677038][T11203] ? avc_denied+0x1b0/0x1b0 [ 830.681381][T11203] ? avc_has_perm+0x16f/0x260 [ 830.685889][T11203] ? ____kasan_kmalloc+0xed/0x110 [ 830.690749][T11203] ? avc_has_perm_noaudit+0x430/0x430 [ 830.695957][T11203] ? x64_sys_call+0x16a/0x9a0 [ 830.700474][T11203] netlink_rcv_skb+0x1cf/0x410 [ 830.705072][T11203] ? rtnetlink_bind+0x80/0x80 [ 830.709584][T11203] ? netlink_ack+0xb10/0xb10 [ 830.714012][T11203] ? __netlink_lookup+0x37b/0x3a0 [ 830.718883][T11203] rtnetlink_rcv+0x1c/0x20 [ 830.723124][T11203] netlink_unicast+0x8df/0xac0 [ 830.727726][T11203] ? netlink_detachskb+0x90/0x90 [ 830.732501][T11203] ? security_netlink_send+0x7b/0xa0 [ 830.737618][T11203] netlink_sendmsg+0xa0a/0xd20 [ 830.742219][T11203] ? netlink_getsockopt+0x560/0x560 [ 830.747276][T11203] ? security_socket_sendmsg+0x82/0xb0 [ 830.752554][T11203] ? netlink_getsockopt+0x560/0x560 [ 830.757579][T11203] ____sys_sendmsg+0x59e/0x8f0 [ 830.762180][T11203] ? __sys_sendmsg_sock+0x40/0x40 [ 830.767074][T11203] ? import_iovec+0xe5/0x120 [ 830.771480][T11203] ___sys_sendmsg+0x252/0x2e0 [ 830.775990][T11203] ? __sys_sendmsg+0x260/0x260 [ 830.780590][T11203] ? check_stack_object+0xf4/0x130 [ 830.785551][T11203] ? __fdget+0x1bc/0x240 [ 830.789613][T11203] __se_sys_sendmsg+0x19a/0x260 [ 830.794307][T11203] ? __x64_sys_sendmsg+0x90/0x90 [ 830.799080][T11203] ? __kasan_check_write+0x14/0x20 [ 830.804020][T11203] ? switch_fpu_return+0x15f/0x2e0 [ 830.808971][T11203] __x64_sys_sendmsg+0x7b/0x90 [ 830.813557][T11203] x64_sys_call+0x16a/0x9a0 [ 830.817895][T11203] do_syscall_64+0x3b/0xb0 [ 830.822151][T11203] ? clear_bhb_loop+0x35/0x90 [ 830.826664][T11203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 830.832401][T11203] RIP: 0033:0x7f9859085d29 [ 830.836648][T11203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.856087][T11203] RSP: 002b:00007f98576f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.864850][T11203] RAX: ffffffffffffffda RBX: 00007f9859275fa0 RCX: 00007f9859085d29 [ 830.872661][T11203] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 830.880571][T11203] RBP: 00007f9859101b08 R08: 0000000000000000 R09: 0000000000000000 [ 830.888378][T11203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.896193][T11203] R13: 0000000000000000 R14: 00007f9859275fa0 R15: 00007ffd30f6d918 [ 830.904016][T11203] [ 830.906865][T11203] [ 830.909037][T11203] Allocated by task 11203: [ 830.913292][T11203] ____kasan_kmalloc+0xdb/0x110 [ 830.917975][T11203] __kasan_kmalloc+0x9/0x10 [ 830.922315][T11203] __kmalloc+0x13f/0x2c0 [ 830.926395][T11203] tcf_idr_create+0x5f/0x780 [ 830.930837][T11203] tcf_idr_create_from_flags+0x5f/0x70 [ 830.936114][T11203] tcf_gact_init+0x3cd/0x6e0 [ 830.940542][T11203] tcf_action_init_1+0x50f/0x7f0 [ 830.945312][T11203] tcf_action_init+0x306/0x840 [ 830.949912][T11203] tcf_exts_validate+0x236/0x520 [ 830.954687][T11203] mall_set_parms+0x44/0x4b0 [ 830.959461][T11203] mall_change+0x495/0x780 [ 830.963729][T11203] tc_new_tfilter+0x151a/0x1c00 [ 830.968399][T11203] rtnetlink_rcv_msg+0x776/0xc40 [ 830.973238][T11203] netlink_rcv_skb+0x1cf/0x410 [ 830.977774][T11203] rtnetlink_rcv+0x1c/0x20 [ 830.982026][T11203] netlink_unicast+0x8df/0xac0 [ 830.986626][T11203] netlink_sendmsg+0xa0a/0xd20 [ 830.991224][T11203] ____sys_sendmsg+0x59e/0x8f0 [ 830.995827][T11203] ___sys_sendmsg+0x252/0x2e0 [ 831.000352][T11203] __se_sys_sendmsg+0x19a/0x260 [ 831.005028][T11203] __x64_sys_sendmsg+0x7b/0x90 [ 831.009633][T11203] x64_sys_call+0x16a/0x9a0 [ 831.013966][T11203] do_syscall_64+0x3b/0xb0 [ 831.018218][T11203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 831.023954][T11203] [ 831.026117][T11203] Last potentially related work creation: [ 831.031681][T11203] kasan_save_stack+0x3b/0x60 [ 831.036184][T11203] __kasan_record_aux_stack+0xd3/0xf0 [ 831.041394][T11203] kasan_record_aux_stack_noalloc+0xb/0x10 [ 831.047033][T11203] call_rcu+0x123/0x10b0 [ 831.051113][T11203] neigh_parms_release+0x1e1/0x220 [ 831.056063][T11203] addrconf_ifdown+0x1844/0x1ae0 [ 831.060832][T11203] addrconf_notify+0x37d/0xdd0 [ 831.065435][T11203] raw_notifier_call_chain+0x8c/0xf0 [ 831.070552][T11203] unregister_netdevice_many+0xe0a/0x17c0 [ 831.076109][T11203] default_device_exit_batch+0x38a/0x3f0 [ 831.081587][T11203] cleanup_net+0x6ce/0xc00 [ 831.085827][T11203] process_one_work+0x6bb/0xc10 [ 831.090514][T11203] worker_thread+0xad5/0x12a0 [ 831.095026][T11203] kthread+0x421/0x510 [ 831.098938][T11203] ret_from_fork+0x1f/0x30 [ 831.103186][T11203] [ 831.105359][T11203] The buggy address belongs to the object at ffff8881272ae600 [ 831.105359][T11203] which belongs to the cache kmalloc-192 of size 192 [ 831.119252][T11203] The buggy address is located 0 bytes to the right of [ 831.119252][T11203] 192-byte region [ffff8881272ae600, ffff8881272ae6c0) [ 831.132698][T11203] The buggy address belongs to the page: [ 831.138167][T11203] page:ffffea00049cab80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1272ae [ 831.148234][T11203] flags: 0x4000000000000200(slab|zone=1) [ 831.153711][T11203] raw: 4000000000000200 ffffea00042f51c0 0000000800000008 ffff888100042c00 [ 831.162128][T11203] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 831.170538][T11203] page dumped because: kasan: bad access detected [ 831.176799][T11203] page_owner tracks the page as allocated [ 831.182340][T11203] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 288, ts 21557559287, free_ts 0 [ 831.197271][T11203] post_alloc_hook+0x1a3/0x1b0 [ 831.201867][T11203] prep_new_page+0x1b/0x110 [ 831.206207][T11203] get_page_from_freelist+0x3550/0x35d0 [ 831.211587][T11203] __alloc_pages+0x27e/0x8f0 [ 831.216016][T11203] new_slab+0x9a/0x4e0 [ 831.219919][T11203] ___slab_alloc+0x39e/0x830 [ 831.224351][T11203] __slab_alloc+0x4a/0x90 [ 831.228517][T11203] __kmalloc_track_caller+0x171/0x2c0 [ 831.233719][T11203] kmemdup+0x24/0x50 [ 831.237454][T11203] neigh_parms_alloc+0x81/0x4c0 [ 831.242140][T11203] ipv6_add_dev+0x31d/0x1140 [ 831.246567][T11203] addrconf_notify+0x593/0xdd0 [ 831.251166][T11203] raw_notifier_call_chain+0x8c/0xf0 [ 831.256286][T11203] call_netdevice_notifiers+0x145/0x1b0 [ 831.261669][T11203] register_netdevice+0x1035/0x1390 [ 831.266709][T11203] veth_newlink+0x94f/0xe20 [ 831.271038][T11203] page_owner free stack trace missing [ 831.276248][T11203] [ 831.278417][T11203] Memory state around the buggy address: [ 831.283893][T11203] ffff8881272ae580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 831.291789][T11203] ffff8881272ae600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 831.299688][T11203] >ffff8881272ae680: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 831.307577][T11203] ^ [ 831.313571][T11203] ffff8881272ae700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 831.321469][T11203] ffff8881272ae780: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 831.329364][T11203] ================================================================== [ 831.337263][T11203] Disabling lock debugging due to kernel taint [ 831.344390][ T472] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 831.566840][ T3509] device bridge_slave_1 left promiscuous mode [ 831.572819][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.580219][ T3509] device bridge_slave_0 left promiscuous mode [ 831.586231][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.593910][ T3509] device veth1_macvtap left promiscuous mode [ 831.596254][ T507] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.600294][ T3509] device veth0_vlan left promiscuous mode [ 831.609918][ T507] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 831.666229][ T472] usb 1-1: Using ep0 maxpacket: 8 [ 831.816328][ T507] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 831.825272][ T472] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 831.834816][ T507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.842659][ T472] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 831.852293][ T507] usb 2-1: Product: syz [ 831.856328][ T507] usb 2-1: Manufacturer: syz [ 831.860815][ T507] usb 2-1: SerialNumber: syz [ 831.865556][ T472] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 831.875768][ T472] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.888683][ T472] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 831.897701][ T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.186238][ T507] usb 2-1: 0:2 : does not exist [ 832.193612][ T507] usb 2-1: USB disconnect, device number 32 [ 832.396922][ T8910] udevd[8910]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 833.862909][ T20] usb 1-1: USB disconnect, device number 18