last executing test programs: 26.743485826s ago: executing program 3 (id=289): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 26.743248536s ago: executing program 3 (id=290): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) 26.743117516s ago: executing program 3 (id=291): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec0000002100010026bd700000000000ac1414aa0000000000000000000000007f0000010000000000000000000000000004000000000000020000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000009c00110000000000000000000000000000000000ac1414bb000000000000000000000000ac1efe01000000000000000000000000e00000020000000000000000000000006c000000feffffff0200020000000000000000000000000000000000ac1414bb"], 0xec}, 0x1, 0x0, 0x0, 0x8814}, 0x20000140) 26.742979856s ago: executing program 3 (id=292): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 26.717322386s ago: executing program 3 (id=293): syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x48, [@loopback, @private=0xa010101, @broadcast]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 26.637605207s ago: executing program 3 (id=294): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x4024, 0x4) 26.614732747s ago: executing program 32 (id=294): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x4024, 0x4) 7.263539931s ago: executing program 4 (id=872): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00', 0x0) 7.261410791s ago: executing program 4 (id=873): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x2040400) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40010080, 0x0) 6.090247507s ago: executing program 5 (id=914): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000040)='\x00', 0x1, 0x5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000280)=""/8, 0x8, 0xc9100120, 0x0, 0x0) 5.87959482s ago: executing program 4 (id=915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 5.87939665s ago: executing program 4 (id=916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_NMI(r2, 0xae9a) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb"], 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x3, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffb, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x1, 0x0, 0x8000000000000000, 0x0, 0x8000000000000000, 0x4, 0xffffffffffffffff, 0x1000000000000006, 0x8000], 0xd000, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.207342519s ago: executing program 5 (id=920): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000000)) 5.1203608s ago: executing program 5 (id=923): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r0, 0x1260, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300ffffffe80000000000000000000000000000e7ff00", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) 5.1197028s ago: executing program 5 (id=925): r0 = socket$inet6(0xa, 0x3, 0x3c) sendmmsg(r0, &(0x7f0000000600)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x9}, 0x8, 0x4}, 0x80, 0x0}}], 0x1, 0x4004010) 5.037363871s ago: executing program 5 (id=929): syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x5, 0x6, 0x1, 0x100, 0xffffffffffffffff, 0xb238, '\x00', 0x0, r3, 0x5, 0x2, 0x0, 0x4, @void, @value, @void, @value}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x633, 0x0, 0x80000008, {{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in=@local, 0x4d2, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x100}, {0x5, 0x2000000000, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09"], 0x0) 4.967567652s ago: executing program 2 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000000000000001d00060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 4.964206332s ago: executing program 2 (id=933): r0 = socket(0x840000000002, 0x800, 0x800) sendmmsg$inet(r0, 0x0, 0x0, 0x0) inotify_init() accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x101, 0x300, 0x0, 0x101, 0x300}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file1\x00') r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0xb, 0xff}, @broadcast, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 4.804314554s ago: executing program 2 (id=934): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x5, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/17, 0x11}, 0x1711}], 0x1, 0x45833af96e4b39ff, 0x0) 4.790356494s ago: executing program 2 (id=935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000055c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 4.691602836s ago: executing program 2 (id=936): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.253238012s ago: executing program 1 (id=946): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000000)) 4.252872832s ago: executing program 1 (id=947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x26, 0xeeee0000, 0x2, 0xffffffffffffffff, 0x20}) 4.191568883s ago: executing program 1 (id=948): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x18, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xb2742, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r5, &(0x7f0000000180)={[{0x2d, 'cpuset'}, {0x2d, 'pids'}]}, 0xe) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r7, r6, 0x0) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000480)={0xf0, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="5900c24235e00df63bf7db857de2029f08e1a7926ea47bbdbbb1d9c4c174c00019de51733e8c8e3fb081c8ba594f7bba5b4b68950d875d9a380f12e97f18220800bdf26bb6f13d91189e178805e5b5ec1d4ccd3135dd877efaba30a0600ee30fa9204abf28071f062cd2fe46efb0464dcd370b503edc7be4e45e306695cd234b9686c7a7521dadd5a1365bb4c8b11a738a26ff744527cb0f3543b9e5d1fb1163b5bc1df0566b43f438ba2df080c5e05953a3ff72b365dbd17ec33dfc7ed23afe1fb3fc37e967e45ed13b7afe0a6f259a81d4324733de69b1e4e1df"]}, 0xf0}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/138, 0x8a}], 0x1, 0x131, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r8) 4.191210653s ago: executing program 4 (id=949): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfd, 0xfd}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$xdp(0x2c, 0x3, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x5b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=r0, 0x12) dup3(r2, r3, 0x80000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_l2cap(r5, &(0x7f0000000080), 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) 3.253605476s ago: executing program 1 (id=950): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x2, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x10000, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) r1 = gettid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000200), 0x0, 0x0, 0x2) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x3051141, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = dup(r2) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x20f0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x101802, 0x124) sendfile(r3, r5, 0x0, 0x405) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x7, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 3.240594966s ago: executing program 0 (id=951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$xdp(0x2c, 0x3, 0x0) unshare(0x2c020400) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000d504bece5ef381e977aaaaaad28c"], 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000000)=0x6, 0xea) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7c61ecb810ea1fd9e141d3f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x50) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x1b, 0x0, 0x7}]}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.098295718s ago: executing program 1 (id=952): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020df9000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xa0, 0xf9, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x3, 0xd, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xfe, 0x0, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xe, 0x80, 0x3}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0xf, 0x10, 0x2, 0x0, 0x1}, 0x8, &(0x7f0000000540)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0xf9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x421}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000a40)={0x14, &(0x7f0000000940)={0x20, 0x10, 0x91, {0x91, 0x9, "1dd15a0e87ee96d4a1965d2b3162c8185ebcba632c1233e4fa57b9223eb646d22f164b7aecde211e04e19d543b2914bfb56ba68f529d893706a45bc26ba9d2b92f0b5ac5b4f4705b55f5fec5982b20eeea9e66ac0c32f02147875dc9b4699adc0046e48ba27b9eddf60a481be94a6003518b88de40e216177d34cac6e684a209396a909b22aeb4f538ce5c8b5a8ff8"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c1a}}}, &(0x7f0000000c80)={0x34, &(0x7f0000000a80)={0x20, 0x8, 0x11, "6a68de372876cbe8bd8396561cbd911ee3"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xc7}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b40)={0x20, 0x0, 0x82, {0x80, "a2e156a70b55cbf2ac7c7feece18e0a9bce69c6a1ee1328ace2baf125736b810ee129b30863a2e2fe7f31eab9c71e3bbd27feba94fc89171df3175f1811e1119fc564cb301eb06b82a5be71ae4a20e0b61458a05fa82086a8a434e3ee9b1a37c23b9426149ed1d73d141cd6d374aed040d040b9faddcce4fc12d6351632ec973"}}, &(0x7f0000000c00)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000c40)={0x20, 0x0, 0x1, 0xb}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x2, 0x6, 0x401, 0x1, 0x84, 0x0, 0x0, 0x8000, 0x4, 0x2, 0x9, 0xff}}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x20000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000e2793b10e705092000060102030309021200c70800000900099e52dfee42bd30c323c2e52e916fb4237645496f398753e8153714a5e298bf658b71f01602707a6770b5dabd762e7f7081d2be25f11ba227360a78b8e915c40cd5b89efdee43ce99"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000002300)={0x34, &(0x7f0000002100)={0x40, 0xb, 0x7, "98a7947543c3b3"}, &(0x7f0000002140)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000021c0)={0x20, 0x0, 0x96, {0x94, "6d43ea9760c7f513d45037b5e9fd4a9c06892549631d8b82b4ad86775dbc6ad1f733c85b8c70c0bbe1618ce23199f782b6d38f1223c7d5d5a62f264acea2c15b34a7bd4824453a069ca5901d78a5035e0dd808ed9b2a6ffbb8042c09c51837ecc47ebd3646a14da1ab795ee5de660fd7a25e87644d3db38e8fd06d43563821a1bbabbd445df15ccca3a63d4ec6fe903b89e4c383"}}, &(0x7f0000002280)={0x20, 0x1, 0x1, 0x9}, &(0x7f00000022c0)={0x20, 0x0, 0x1, 0x9}}) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0x14, &(0x7f00000001c0)={0x0, 0x30, 0xcc, {0xcc, 0xd, "00ca96df9d9dbd05b0ff66944a1083f69442aa2f96bbdaaa5362d1e17bcad1ad1d21841d279f918436508ab7568128c1d5fae13fa4cf5fc2bd596eacf32702009b93733d5aada912890d01d7ea5101ebb699da83667dd5585ce2b7a2df346e13ebe0e2fa465da73a48a751c98e22ce8caf720cb18c37b24c1b091515b25a770d3767f21f6b86324e6fbebcae798894d31038bca40d3be856387093f6c136715329289e6371a5d61367754cc04024aa3be874dcb6c91dbdb2663c32f59398bcbbf23f11e63ad333d2ba32"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000680)={0x20, 0x12, 0xfc, "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"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x7f}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) fdatasync(r3) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$incfs(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB='rlog_pages=0']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.459438806s ago: executing program 2 (id=953): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x20000400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0}, 0x4) unshare(0x24060400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000a900"/20, @ANYRES32=r2, @ANYBLOB="0000010000e6ff001400030076657468315f8d6f5f7465616d0000000800040082"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec15494021040203340b01020331e7024400010000000009040000000202ff000a2401000000020102092403000000000000132406000006000000000000000000000000000624040000970724080200f731"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x1268, &(0x7f0000001080)) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000280)={0x2, 0x8, 0x100, 0x5}, 0x10) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f00000000c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000008050000050000000300000010000000d919ca928dc1429c6bd7eb18ddc93daecd374c91e55c4c06741f254cd88cb2ce1e326871d12aa3aecf327318a2e9781e1c2ea1b98b4bbda294abdd747b0279d7715d37c8d61ded9c5a5b375363de4172e5eedb1a4a9bd71fee5b4e96b16a", @ANYRES32=r4, @ANYBLOB='G\f\x00'/20, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="0100000003000000000000000500"/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r6, 0x0, 0x0, 0x4}, 0x20) unshare(0x18020800) bpf$MAP_UPDATE_CONST_STR(0x15, 0x0, 0x0) 2.361954747s ago: executing program 5 (id=954): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000b80)={0x0, 0x200002000001, 0x0, 0x0, 0x0, 0x0, 0x2401}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x775, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}, {{@in6=@local, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x2, 0x0, 0x5}, {{@in=@remote, 0x0, 0x33}, 0x2, @in=@empty}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x5593ee2f0bddd491}, 0x0) r2 = syz_usb_connect$cdc_ecm(0x1, 0x61, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0xa, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "8de75f"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x7, 0xaf}, [@country_functional={0x8, 0x24, 0x7, 0x9, 0x6fc5, [0x502]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x9, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x9, 0x7c}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x9, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0xfe, 0x1, 0x8}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x40, 0xe, 0x97, {0x97, 0x11, "9124a374a6f68d0f6f1623dc575e3d578c16398cd2b3e9083be886c3ea2c9ecca990e540b6ebf810ac195762b67692c356719be65281318fa28854591bc8c43e24c122ab1955257ac5acce9b94223e58f3bdbacb66c05456f3f235783e5e1c77cdbf82b736f8d80287ce90ee6cbf6f741079816c7a94e066a224abb7bf290c920c87bb2b2e85df607e7af7caa50f4f51b0c073f34c"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f00000005c0)={0x0, 0xf, 0xe2, {0x5, 0xf, 0xe2, 0x1, [@generic={0xdd, 0x10, 0x2, "9e8ec0c510f196481fdc409937ca8bcb496de5735b63d42590e4a3ded7f5cad90f5772ea98436209e110b5abf41ec772090e833592c9d385a74071b52ba283596d3999fe2b1ae8444012645d22f94a40b6c653659cccf52a56bc35757b58aeb1d91cfceba4fb818e6edb5485509bb10755ac0eba652cab6501014aa5b69d79ce2a01501907577db91c4c2f5ed5e53238c864427565eed5defc4ac0f220c6a6deb46990efb6e5a95d82c4452ee76178fe96e9668a4b1865a0a6210fbfe46b0a23c011d489889931d27b86c1bc8c56020365e764728af245f4b0c8"}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x4, 0x6, 0x9, "82126a7d", "ffea3d3e"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x2, 0x3, 0x5, 0xc, 0xff7f}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x18, 0x28, "ebcd49126a41f534456694594f7ff31e3a41a111e0dfc1a2ca1ab671dce90f9e4869d836b7ad2832"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x7}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x60, 0x80}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0xc4}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0xb, 0x2, "3ace"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "6111"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0xef}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x7}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 2.095397561s ago: executing program 0 (id=955): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) 1.960317053s ago: executing program 0 (id=956): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x0, 0x5, 0x0, 0xfffffffffffffdfc}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xff, 0x2, 0x0, 0x800000000000000}, {0x2, 0x33, 0x0, 0x0, 0x4, 0x5, 0x4, 0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800554875e32a240000000000001800000018000000030000000e000000000000080400000000000005060000000010004c67f33fcd6c63323d2fe08610dde9424431a179d43208b96c5afac8101fcd33556a9cd40cc0bfe58ce35815a2945970c26cbbf0eda28319249c8b1a61072017042ea1f8124bf28f2731d3ef4b463c3cbe7e80118c39c88805a6a989775399621d279d98f1294b449af2b89c08f9277abc38d5edc8633210adffc3ea535900000000"], &(0x7f0000000140)=""/59, 0x33, 0x3b, 0x0, 0x7ff, 0x0, @void, @value}, 0x28) 1.831603025s ago: executing program 0 (id=957): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$eJzsmb+uEkEUxr+Z3QvcG2NiY2GjiTfxmlyW3UUNjQU+gQn4r5PIStAFDGwBJBbExsbH8BUsqCzs7Gy1UBMTCymt18xw2B35J8QQSTy/hNlvZs7MnDnAVwAYhvlv+frl5+dXt0rVUwBncIwsjX+30hhpxH/Kkfj4+l377PPx/H4CQBxvfr4N4G3ZQkT9OP599TE9q5CJvgOJq6TvQcAh/RASd0kHEHhA+omhO4ckwsB51Anrj5th4KrGU42vmuJ8fpORQB1AjvITxnxvMHxaC8OgOy8O4tk5C1Pbij/Uz56UJW4a9VPv1/2XL0aqP6uNa9TPg4RHugiBCukSsnAcJy2Jcf8Ldrq/tcn990Gcy6+LOd2DDFn8AyGMkUMl1Bc6GTk/Gb9fXPVtl4ld2u2VQZ69MPXh6O92zpAJLI1J/VNZ7hXDn2zYiX8UotazQm8wzDdbtUbQCNq+X7zhXnPd635BG9G0XeN/Oe1PR8b+BytiMyKDfi2Kul4fiLpe0venreG4lTedH3qN1P4ncXJ5uof6qOhrZ5efIegl9VOpE2tl8gzDMAzDMAzDMAzDMAzDMFtxEUL/Ckp/VMUr8G/r6F8BAAD///ckZMc=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000000000)="91d91b8d9a17fa8249e367895d4d520e43487abd4f57d82105d49bd2e256ffce23e38eb65332", 0x26}, {&(0x7f0000000200)="efd861032047e6dd7db1ccaa116c1b65df9deebcd808a6a6f0832ee2af921494b6fd3260c98f6dd39e7cecf9a0f2f9ef520707ac0fe1c9122b3b0c14cd02410ce8b7ce5ea4623d93666541d0bb7dbe32242073348c4d0a512c45e0a9a145480c9f90bd858530b99da5085b83247f2396d06bd7fb641ccdd78b564544f5", 0x7d}, {&(0x7f0000000280)="7ecb16e999d88a279caa25cf2aba6762c305eddaeb56d8acf9ba7f9d578f4a8f14b1c4d74f4cad5be24c3c0c8883827525b7a2035494265ac4044f7d6a0d09b9558500c56de45723aca51678d68a5accd792d76810b3c7e5b0", 0x59}], 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0) 1.658463567s ago: executing program 0 (id=958): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{0x0}, {&(0x7f0000000840)=""/215, 0xd7}], 0x2}, 0x8}], 0x1, 0x10041, 0x0) 1.657597207s ago: executing program 0 (id=959): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/138, 0x8a}], 0x1, 0x131, 0x4) (async) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/138, 0x8a}], 0x1, 0x131, 0x4) sendto$inet_nvme_icreq_pdu(r2, &(0x7f0000000400)={{0x0, 0x2, 0x80, 0x1}, 0x0, 0x0, 0x3, 0xffff}, 0x80, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r4, r3) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01000000000000ffff0006241a00002e0905810300020020000904010000020d0000090d00000905820200020020"], 0x0) (async) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01000000000000ffff0006241a00002e0905810300020020000904010000020d0000090d00000905820200020020"], 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b63081b2842", 0x8}], 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000003c0)={0x5b, 0x1, 0x2}) (async) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000003c0)={0x5b, 0x1, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r5, &(0x7f00000051c0)=[{{&(0x7f0000000000)=@ll, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/237, 0xed}], 0x1, &(0x7f0000000200)=""/139, 0x8b}, 0x39beef16}, {{&(0x7f00000002c0)=@alg, 0x80, &(0x7f0000000540)=[{&(0x7f0000000e00)=""/202, 0xca}, {&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000000480)=""/136, 0x88}], 0x3, &(0x7f0000000580)=""/87, 0x57}, 0x31a8fb82}, {{&(0x7f0000000600)=@phonet, 0x80, &(0x7f0000005440)=[{&(0x7f0000000680)=""/219, 0xdb}, {&(0x7f0000003e80)=""/154, 0x9a}, {&(0x7f0000000900)=""/199, 0xc7}, {&(0x7f0000000a00)=""/219, 0xdb}], 0x4, &(0x7f0000000b00)=""/119, 0x77}, 0x6}, {{&(0x7f0000000b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000d00)=""/243, 0xf3}, {&(0x7f0000003d80)=""/213, 0xd5}, {&(0x7f0000000f00)=""/109, 0x6d}, {&(0x7f0000000f80)=""/212, 0xd4}, {&(0x7f0000000880)=""/1, 0x1}, {&(0x7f0000001080)=""/147, 0x93}, {&(0x7f0000001140)=""/78, 0x4e}], 0x8, &(0x7f0000001240)=""/15, 0xf}, 0x1}, {{&(0x7f0000001280)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001300)=""/251, 0xfb}], 0x1}, 0x101}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/74, 0x4a}, {&(0x7f00000024c0)=""/80, 0x50}], 0x3, &(0x7f0000002580)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003600)=""/235, 0xeb}, {&(0x7f0000003700)=""/233, 0xe9}, {&(0x7f0000003800)=""/197, 0xc5}], 0x3, &(0x7f0000000340)=""/94, 0x5e}}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f00000039c0)=""/11, 0xb}, {&(0x7f0000003a00)=""/55, 0x37}, {&(0x7f0000003a40)=""/23, 0x17}], 0x3, &(0x7f0000003ac0)=""/15, 0xf}, 0x6}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003b00)=""/48, 0x30}, {&(0x7f0000003b40)=""/185, 0xb9}, {&(0x7f0000003c00)=""/94, 0x5e}, {&(0x7f0000003c80)=""/49, 0x31}], 0x4}, 0x8}, {{&(0x7f0000003d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000050c0), 0x0, &(0x7f0000005140)=""/65, 0x41}, 0x9}], 0xa, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x1}}, 0x10) (async) bind$tipc(r7, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x1}}, 0x10) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) ppoll(&(0x7f00000008c0)=[{0xffffffffffffffff, 0x1}, {r6, 0x46c2}], 0x2, 0x0, 0x0, 0x0) 1.556006499s ago: executing program 4 (id=960): syz_usb_connect$printer(0x1, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0x80, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0xe4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x3, 0xc, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x1, 0x6}}]}}}]}}]}}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2, 0x16}, 0x10) syz_open_dev$usbmon(&(0x7f00000003c0), 0x9, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000100)={0x1, 0x1, 0xffff, 0x200000000000, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r4, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x95}, 0x20000800) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x30, 0xf, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x75, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x80, 0xf7, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x80, 0x2, 0x6, 0x10, 0x10}, 0x1e, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x401}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum64={0x7, 0x3, 0x0, 0x13, 0x0, 0xa, [{0x8, 0x4}, {0x1, 0x1, 0x9}, {0xa, 0x9, 0x5}]}]}}, 0x0, 0x4a, 0x0, 0x1, 0x7ff, 0x10000, @value}, 0x28) syz_usb_connect(0x0, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c000301035100090d0a00000000000009050313000000000003270103"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x8, 0xa0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'U'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x143f, 0x40, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0x200, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x8, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xb, 0x5, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x85, 0x81, 0x7f}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xff, 0xe, 0xa, 0x20, 0x27}, 0x1e, &(0x7f00000000c0)={0x5, 0xf, 0x1e, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x3b8b9f40910da1f5, 0x1, 0xc, 0xe}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa1, 0x33, 0x9, 0x81, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xe, 0x8, 0x5}]}, 0x3, [{0xd7, &(0x7f0000000100)=@string={0xd7, 0x3, "022d8d8323d6889d6582b9dd03e1de5b5c84a9f1a85f421e32e7707b978cb6bcba043742a8cd1c294d8420f5fd1de4258192972b2d089460e8be0bd2e5879bf5924bcda343b567824c6f045ec316f355c8ce225ffbc9a1701934468c250143f401c72966f83b8946e8c9b5fdf9c1ae4808ff91e379777bc05af74dd7af9b43c370e2df408e7b8751f6cbe41728288a92e09182b8d91cbe2da20fbf644bd1904528325f9f56fec666ec3005443a06783fe21be0a5b225f3fc37632f78865663be5702775ebf6eb78b9c9dbc7ebb55ddc441c5c33d79"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x801}}, {0x4e, &(0x7f0000000240)=@string={0x4e, 0x3, "54ace8f647e2a3f8e164ddc730f86e67ff49344140ccd7ba09eb3c6616ec276912878b4f2dfcda61d25b5bd4ef6ed5f828d022f21e264a1185d2d0b84af8428c271691e207327b444e83489c"}}]}) 0s ago: executing program 1 (id=961): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x18, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xb2742, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r5, &(0x7f0000000180)={[{0x2d, 'cpuset'}, {0x2d, 'pids'}]}, 0xe) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r7, r6, 0x0) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000480)={0xf0, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="5900c24235e00df63bf7db857de2029f08e1a7926ea47bbdbbb1d9c4c174c00019de51733e8c8e3fb081c8ba594f7bba5b4b68950d875d9a380f12e97f18220800bdf26bb6f13d91189e178805e5b5ec1d4ccd3135dd877efaba30a0600ee30fa9204abf28071f062cd2fe46efb0464dcd370b503edc7be4e45e306695cd234b9686c7a7521dadd5a1365bb4c8b11a738a26ff744527cb0f3543b9e5d1fb1163b5bc1df0566b43f438ba2df080c5e05953a3ff72b365dbd17ec33dfc7ed23afe1fb3fc37e967e45ed13b7afe0a6f259a81d4324733de69b1e4e1df"]}, 0xf0}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 22.836633][ T23] audit: type=1400 audit(1745716733.890:66): avc: denied { mounton } for pid=344 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.838305][ T344] cgroup1: Unknown subsys name 'net' [ 22.859176][ T23] audit: type=1400 audit(1745716733.890:67): avc: denied { mount } for pid=344 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.864460][ T344] cgroup1: Unknown subsys name 'net_prio' [ 22.891842][ T344] cgroup1: Unknown subsys name 'devices' [ 22.897982][ T23] audit: type=1400 audit(1745716733.950:68): avc: denied { unmount } for pid=344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.031510][ T344] cgroup1: Unknown subsys name 'hugetlb' [ 23.037165][ T344] cgroup1: Unknown subsys name 'rlimit' [ 23.043109][ T23] audit: type=1400 audit(1745716734.110:69): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 23.258042][ T23] audit: type=1400 audit(1745716734.310:70): avc: denied { setattr } for pid=344 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=10766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.281187][ T23] audit: type=1400 audit(1745716734.310:71): avc: denied { mounton } for pid=344 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.305654][ T23] audit: type=1400 audit(1745716734.310:72): avc: denied { mount } for pid=344 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.327313][ T347] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.337387][ T23] audit: type=1400 audit(1745716734.390:73): avc: denied { relabelto } for pid=347 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.363070][ T23] audit: type=1400 audit(1745716734.390:74): avc: denied { write } for pid=347 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.388806][ T23] audit: type=1400 audit(1745716734.430:75): avc: denied { read } for pid=344 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.414248][ T344] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.897073][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.903975][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.911380][ T355] device bridge_slave_0 entered promiscuous mode [ 23.922359][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.929359][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.936497][ T355] device bridge_slave_1 entered promiscuous mode [ 23.985237][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.992484][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.999794][ T354] device bridge_slave_0 entered promiscuous mode [ 24.015101][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.021972][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.029486][ T354] device bridge_slave_1 entered promiscuous mode [ 24.087693][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.094832][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.102300][ T358] device bridge_slave_0 entered promiscuous mode [ 24.110687][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.117518][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.124931][ T356] device bridge_slave_0 entered promiscuous mode [ 24.133176][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.140042][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.147186][ T356] device bridge_slave_1 entered promiscuous mode [ 24.155280][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.162326][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.169622][ T358] device bridge_slave_1 entered promiscuous mode [ 24.232809][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.239671][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.246953][ T357] device bridge_slave_0 entered promiscuous mode [ 24.272026][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.279129][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.286370][ T357] device bridge_slave_1 entered promiscuous mode [ 24.345520][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.352370][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.359516][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.366335][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.392574][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.399427][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.406504][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.413331][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.430579][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.437413][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.444530][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.451320][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.474451][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.481306][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.488383][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.495199][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.529653][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.536613][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.543922][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.551359][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.558341][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.565379][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.572625][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.579679][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.587501][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.594997][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.607752][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.615860][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.622795][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.642827][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.650539][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.658577][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.665454][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.673032][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.681276][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.688095][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.720151][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.728241][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.736651][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.743513][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.751153][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.758960][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.766680][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.774575][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.782404][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.790420][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.797230][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.804533][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.812564][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.819406][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.839986][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.847721][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.855782][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.862626][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.870849][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.878851][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.885669][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.911876][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.920293][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.928028][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.936224][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.944742][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.953768][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.974668][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.982902][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.991447][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.999830][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.007562][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.015487][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.024105][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.032159][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.042594][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.050108][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.072000][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.079971][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.087671][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.096013][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.104511][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.112895][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.126210][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.134406][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.145416][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.153698][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.163268][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.171738][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.179810][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.186626][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.194713][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.215396][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.224708][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.233408][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.241698][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.249570][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.257543][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.266008][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.274279][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.282547][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.289791][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.297732][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.306425][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.333475][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.341893][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.350014][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.357869][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.365985][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.374480][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.382437][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.390540][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.398578][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.406674][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.416398][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.424950][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.443323][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.451935][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.469474][ T355] request_module fs-gadgetfs succeeded, but still no fs? [ 25.478438][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.486832][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.495461][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.519458][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.527281][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.535648][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.544537][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.553087][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.594343][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.630273][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.638405][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.646869][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.663090][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.671450][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.695823][ T380] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.105577][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.197490][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.274591][ T397] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 27.228897][ T125] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.396695][ T415] ====================================================== [ 27.396695][ T415] WARNING: the mand mount option is being deprecated and [ 27.396695][ T415] will be removed in v5.15! [ 27.396695][ T415] ====================================================== [ 27.422796][ T396] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.449887][ T108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.458270][ T415] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=e802c028, mo2=0000] [ 27.466093][ T415] System zones: 0-2, 18-18, 34-34 [ 27.472143][ T415] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.11: bg 0: block 368: padding at end of block bitmap is not set [ 27.486221][ T415] EXT4-fs (loop1): Remounting filesystem read-only [ 27.492716][ T415] EXT4-fs error (device loop1) in ext4_free_blocks:5016: Corrupt filesystem [ 27.501498][ T415] EXT4-fs (loop1): 1 orphan inode deleted [ 27.507019][ T415] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,debug,resgid=0x0000000000000000,sysvgroups,discard,sb=0x0000000000000007, [ 27.525818][ T415] ext4 filesystem being mounted at /3/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 27.528871][ T125] usb 5-1: device descriptor read/64, error 18 [ 27.552665][ T419] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 27.562047][ T419] ext4 filesystem being mounted at /1/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 27.639890][ T426] loop1: p1 < > p3 [ 27.644659][ T426] loop1: p3 size 134217728 extends beyond EOD, truncated [ 27.688981][ T108] usb 1-1: Using ep0 maxpacket: 32 [ 27.788995][ T396] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 27.799703][ T396] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 27.808540][ T396] usb 3-1: config 220 interface 0 has no altsetting 0 [ 27.815272][ T108] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 27.823449][ T108] usb 1-1: config 0 has no interface number 0 [ 27.829498][ T108] usb 1-1: config 0 interface 231 has no altsetting 0 [ 27.938906][ T125] usb 5-1: device descriptor read/64, error 18 [ 27.979105][ T396] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 27.988020][ T396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.995890][ T108] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 28.004787][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.012239][ T396] usb 3-1: Product: syz [ 28.016225][ T396] usb 3-1: Manufacturer: syz [ 28.020711][ T108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.028438][ T108] usb 1-1: Product: syz [ 28.032467][ T396] usb 3-1: SerialNumber: syz [ 28.037143][ T108] usb 1-1: Manufacturer: syz [ 28.041979][ T108] usb 1-1: SerialNumber: syz [ 28.046986][ T108] usb 1-1: config 0 descriptor?? [ 28.059128][ T375] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.208874][ T125] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 28.258904][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 28.298999][ T5] usb 2-1: too many configurations: 50, using maximum allowed: 8 [ 28.339100][ T375] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 28.378966][ T5] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 28.387109][ T5] usb 2-1: config 0 has no interface number 0 [ 28.398970][ T396] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 28.404404][ T23] kauditd_printk_skb: 66 callbacks suppressed [ 28.404416][ T23] audit: type=1400 audit(1745716739.460:142): avc: denied { write } for pid=406 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.406269][ T396] uvcvideo: No valid video chain found. [ 28.437376][ T396] usb 3-1: USB disconnect, device number 2 [ 28.468942][ T375] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 28.469001][ T5] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 28.484616][ T5] usb 2-1: config 0 has no interface number 0 [ 28.484622][ T375] usb 4-1: can't read configurations, error -61 [ 28.499073][ T125] usb 5-1: device descriptor read/64, error 18 [ 28.569164][ T108] asix 1-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 28.579121][ T5] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 28.587023][ T5] usb 2-1: config 0 has no interface number 0 [ 28.593417][ T108] asix: probe of 1-1:0.231 failed with error -71 [ 28.600579][ T108] usb 1-1: USB disconnect, device number 2 [ 28.629039][ T375] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.678982][ T5] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 28.687007][ T5] usb 2-1: config 0 has no interface number 0 [ 28.744675][ T23] audit: type=1400 audit(1745716739.810:143): avc: denied { mounton } for pid=435 comm="syz.4.14" path="/1/file0" dev="tmpfs" ino=13453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.769071][ T5] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 28.769921][ T23] audit: type=1400 audit(1745716739.830:144): avc: denied { create } for pid=435 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 28.777047][ T5] usb 2-1: config 0 has no interface number 0 [ 28.848949][ T5] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 28.856996][ T5] usb 2-1: config 0 has no interface number 0 [ 28.918967][ T375] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 28.938938][ T5] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 28.946927][ T5] usb 2-1: config 0 has no interface number 0 [ 29.028959][ T5] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 29.036940][ T5] usb 2-1: config 0 has no interface number 0 [ 29.039077][ T375] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.050708][ T375] usb 4-1: can't read configurations, error -61 [ 29.056862][ T375] usb usb4-port1: attempt power cycle [ 29.078987][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.098961][ T125] usb 5-1: device descriptor read/64, error -71 [ 29.158166][ T446] sock: sock_set_timeout: `syz.0.17' (pid 446) tries to set negative timeout [ 29.191897][ T23] audit: type=1400 audit(1745716740.250:145): avc: denied { name_bind } for pid=449 comm="syz.0.19" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 29.209073][ T5] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=be.3e [ 29.213524][ T23] audit: type=1400 audit(1745716740.250:146): avc: denied { node_bind } for pid=449 comm="syz.0.19" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 29.221999][ T450] syz.0.19 uses obsolete (PF_INET,SOCK_PACKET) [ 29.242709][ T125] usb usb5-port1: attempt power cycle [ 29.248318][ T5] usb 2-1: New USB device strings: Mfr=137, Product=125, SerialNumber=24 [ 29.261892][ T5] usb 2-1: Product: syz [ 29.263969][ T23] audit: type=1400 audit(1745716740.330:147): avc: denied { connect } for pid=449 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.265857][ T5] usb 2-1: Manufacturer: syz [ 29.289418][ T5] usb 2-1: SerialNumber: syz [ 29.297652][ T5] usb 2-1: config 0 descriptor?? [ 29.414472][ T23] audit: type=1400 audit(1745716740.470:148): avc: denied { mount } for pid=457 comm="syz.0.21" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 29.436315][ T23] audit: type=1400 audit(1745716740.470:149): avc: denied { remount } for pid=457 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 29.468997][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 29.478584][ T375] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.485906][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 29.595561][ T23] audit: type=1400 audit(1745716740.650:150): avc: denied { mounton } for pid=425 comm="syz.1.12" path="/dev/loop1p1" dev="devtmpfs" ino=13408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.619923][ T375] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 29.659031][ T24] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 29.668052][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.676154][ T24] usb 3-1: Product: syz [ 29.678899][ T108] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 29.680582][ T24] usb 3-1: Manufacturer: syz [ 29.692038][ T125] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 29.699576][ T24] usb 3-1: SerialNumber: syz [ 29.707969][ T24] usb 3-1: config 0 descriptor?? [ 29.728941][ T439] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 29.735726][ T439] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 29.742625][ T375] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.750371][ T375] usb 4-1: can't read configurations, error -61 [ 29.898896][ T375] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.909032][ T125] usb 5-1: config 0 has an invalid interface number: 84 but max is 0 [ 29.917147][ T125] usb 5-1: config 0 has no interface number 0 [ 29.923353][ T125] usb 5-1: too many endpoints for config 0 interface 84 altsetting 3: 60, using maximum allowed: 30 [ 29.934369][ T125] usb 5-1: config 0 interface 84 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 60 [ 29.947994][ T23] audit: type=1400 audit(1745716741.000:151): avc: denied { append } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=10892 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.971127][ T462] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 29.977814][ T462] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 29.984590][ T125] usb 5-1: config 0 interface 84 has no altsetting 0 [ 29.991180][ T125] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 30.000092][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.008587][ T125] usb 5-1: config 0 descriptor?? [ 30.058961][ T375] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 30.078998][ T108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 30.088906][ T24] Error reading MAC address [ 30.118947][ T108] usb 1-1: not running at top speed; connect to a high speed hub [ 30.178937][ T375] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 30.186685][ T375] usb 4-1: can't read configurations, error -61 [ 30.192988][ T375] usb usb4-port1: unable to enumerate USB device [ 30.208925][ T108] usb 1-1: config 10 has an invalid interface number: 50 but max is 0 [ 30.216975][ T108] usb 1-1: config 10 has no interface number 0 [ 30.223070][ T108] usb 1-1: config 10 interface 50 has no altsetting 0 [ 30.388950][ T108] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=43.2d [ 30.397813][ T108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.405670][ T108] usb 1-1: Product: syz [ 30.409887][ T108] usb 1-1: Manufacturer: syz [ 30.414275][ T108] usb 1-1: SerialNumber: syz [ 30.604419][ T382] usb 3-1: USB disconnect, device number 3 [ 30.638930][ T125] usb 5-1: string descriptor 0 read error: -71 [ 30.738904][ T125] usb 5-1: Cannot read MAC address [ 30.739274][ T108] usbserial_generic 1-1:10.50: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 30.743904][ T125] MOSCHIP usb-ethernet driver: probe of 5-1:0.84 failed with error -71 [ 30.774622][ T5] usb 2-1: USB disconnect, device number 2 [ 30.782579][ T125] usb 5-1: USB disconnect, device number 4 [ 30.789405][ T108] usbserial_generic 1-1:10.50: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 30.817268][ T108] usbserial_generic 1-1:10.50: generic converter detected [ 30.845399][ T108] usb 1-1: generic converter now attached to ttyUSB0 [ 30.885507][ T108] usb 1-1: USB disconnect, device number 3 [ 30.901377][ T108] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 30.926604][ T108] usbserial_generic 1-1:10.50: device disconnected [ 30.988170][ T475] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 30.996102][ T475] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 31.018856][ T382] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 31.026576][ T475] F2FS-fs (loop4): invalid crc value [ 31.033331][ T475] F2FS-fs (loop4): Found nat_bits in checkpoint [ 31.075435][ T475] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 31.082514][ T475] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 31.114376][ T491] kvm [490]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 31.128350][ T491] kvm [490]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 31.141865][ T491] kvm [490]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 31.150844][ T491] kvm [490]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 31.187312][ T501] device syzkaller0 entered promiscuous mode [ 31.240432][ T505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.33'. [ 31.267314][ T510] debugfs: Directory 'vcpu0' with parent '510-4' already present! [ 31.275634][ T510] debugfs: Directory 'vcpu0' with parent '510-4' already present! [ 31.283933][ T510] debugfs: Directory 'vcpu0' with parent '510-4' already present! [ 31.292654][ T510] debugfs: Directory 'vcpu0' with parent '510-4' already present! [ 31.300702][ T510] debugfs: Directory 'vcpu0' with parent '510-4' already present! [ 31.308655][ T510] debugfs: Directory 'vcpu0' with parent '510-4' already present! [ 31.316918][ T510] debugfs: Directory 'vcpu0' with parent '510-4' already present! [ 31.318959][ T5] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.388893][ T382] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.399117][ T382] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.449146][ T125] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 31.478984][ T382] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 31.487830][ T382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.495948][ T382] usb 3-1: SerialNumber: syz [ 31.532463][ T522] kvm [521]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 31.541960][ T382] usb 3-1: 0:2 : does not exist [ 31.553762][ T522] kvm [521]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 31.568898][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 31.575919][ T522] kvm [521]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 31.688859][ T125] usb 5-1: Using ep0 maxpacket: 8 [ 31.689157][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.704873][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.714637][ T5] usb 2-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 31.723691][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.736406][ T5] usb 2-1: config 0 descriptor?? [ 31.784550][ T382] usb 3-1: USB disconnect, device number 4 [ 31.828962][ T125] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 31.837819][ T125] usb 5-1: config 0 has an invalid interface number: 55 but max is -1 [ 31.845985][ T125] usb 5-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 31.857077][ T125] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 31.865834][ T125] usb 5-1: config 0 has no interface number 0 [ 31.872466][ T125] usb 5-1: too many endpoints for config 0 interface 55 altsetting 15: 37, using maximum allowed: 30 [ 31.896424][ T125] usb 5-1: config 0 interface 55 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 31.909719][ T125] usb 5-1: config 0 interface 55 has no altsetting 0 [ 32.040255][ T5] apple 0003:05AC:029C.0001: unknown main item tag 0xd [ 32.049443][ T5] apple 0003:05AC:029C.0001: hidraw0: USB HID v0.00 Device [HID 05ac:029c] on usb-dummy_hcd.1-1/input0 [ 32.089305][ T125] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 32.098469][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.109478][ T125] usb 5-1: Product: syz [ 32.118419][ T125] usb 5-1: Manufacturer: syz [ 32.127912][ T125] usb 5-1: SerialNumber: syz [ 32.133285][ T125] usb 5-1: config 0 descriptor?? [ 32.504348][ T600] process 'syz.3.75' launched './file0' with NULL argv: empty string added [ 32.608903][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.848878][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 32.968954][ T24] usb 1-1: config 0 has an invalid interface number: 111 but max is 1 [ 32.977247][ T24] usb 1-1: config 0 has no interface number 1 [ 33.008877][ T384] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.139250][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 33.148149][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.156092][ T24] usb 1-1: Product: syz [ 33.160691][ T24] usb 1-1: Manufacturer: syz [ 33.165087][ T24] usb 1-1: SerialNumber: syz [ 33.170301][ T24] usb 1-1: config 0 descriptor?? [ 33.248882][ T384] usb 4-1: Using ep0 maxpacket: 32 [ 33.369504][ T384] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.379479][ T384] usb 4-1: config 0 has no interfaces? [ 33.412062][ T24] usb 1-1: USB disconnect, device number 4 [ 33.558949][ T384] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 33.567884][ T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.575857][ T384] usb 4-1: Product: syz [ 33.579916][ T384] usb 4-1: Manufacturer: syz [ 33.584242][ T384] usb 4-1: SerialNumber: syz [ 33.589406][ T384] usb 4-1: config 0 descriptor?? [ 33.719220][ T125] hub 5-1:0.55: bad descriptor, ignoring hub [ 33.725643][ T125] hub: probe of 5-1:0.55 failed with error -5 [ 33.738887][ T375] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.759185][ T125] usb 5-1: USB disconnect, device number 5 [ 33.830315][ T382] usb 4-1: USB disconnect, device number 6 [ 33.850897][ T23] kauditd_printk_skb: 34 callbacks suppressed [ 33.850910][ T23] audit: type=1400 audit(1745716744.910:186): avc: denied { write } for pid=621 comm="syz.4.83" name="map_files" dev="proc" ino=14168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 33.878747][ T23] audit: type=1400 audit(1745716744.910:187): avc: denied { add_name } for pid=621 comm="syz.4.83" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 33.898564][ T23] audit: type=1400 audit(1745716744.910:188): avc: denied { create } for pid=621 comm="syz.4.83" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 33.918048][ T23] audit: type=1400 audit(1745716744.910:189): avc: denied { associate } for pid=621 comm="syz.4.83" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.944231][ T5] usb 2-1: USB disconnect, device number 3 [ 34.037337][ T634] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.044399][ T634] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.088298][ T627] syz.1.85 (627) used greatest stack depth: 23008 bytes left [ 34.095549][ T634] syz.1.85 (634) used greatest stack depth: 21920 bytes left [ 34.108892][ T375] usb 3-1: config 0 has no interfaces? [ 34.181602][ T23] audit: type=1400 audit(1745716745.240:190): avc: denied { create } for pid=651 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 34.278947][ T375] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 34.299376][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.307379][ T375] usb 3-1: Product: syz [ 34.318842][ T375] usb 3-1: Manufacturer: syz [ 34.323265][ T375] usb 3-1: SerialNumber: syz [ 34.329325][ T375] usb 3-1: config 0 descriptor?? [ 34.398884][ T382] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.587408][ T23] audit: type=1400 audit(1745716745.640:191): avc: denied { listen } for pid=617 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 34.638012][ T23] audit: type=1400 audit(1745716745.690:192): avc: denied { accept } for pid=617 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.690184][ T23] audit: type=1400 audit(1745716745.750:193): avc: denied { create } for pid=651 comm="syz.1.94" dev="anon_inodefs" ino=15474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.725880][ T23] audit: type=1400 audit(1745716745.780:194): avc: denied { ioctl } for pid=651 comm="syz.1.94" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15474 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.768907][ T382] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 34.777343][ T382] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 34.789228][ T382] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 34.798232][ T382] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 34.809042][ T382] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 34.832268][ T23] audit: type=1400 audit(1745716745.890:195): avc: denied { create } for pid=669 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.935741][ T679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 34.944525][ T382] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 34.953930][ T382] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 34.961829][ T679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.106'. [ 34.970513][ T382] usb 1-1: Product: syz [ 34.974452][ T382] usb 1-1: Manufacturer: syz [ 35.019300][ T382] cdc_wdm 1-1:1.0: skipping garbage [ 35.024317][ T382] cdc_wdm 1-1:1.0: skipping garbage [ 35.032437][ T382] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 35.460955][ T703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 35.532754][ T711] capability: warning: `syz.4.120' uses 32-bit capabilities (legacy support in use) [ 35.595552][ T717] mmap: syz.3.123 (717) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 35.669703][ T723] device batadv_slave_0 entered promiscuous mode [ 35.680606][ T725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.127'. [ 36.018853][ T473] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.278843][ T473] usb 4-1: Using ep0 maxpacket: 16 [ 36.366815][ T382] usb 3-1: USB disconnect, device number 5 [ 36.399034][ T473] usb 4-1: config 0 has no interfaces? [ 36.520684][ T756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=114 sclass=netlink_route_socket pid=756 comm=syz.1.140 [ 36.569001][ T473] usb 4-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 36.578606][ T473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.586838][ T473] usb 4-1: Product: syz [ 36.590888][ T473] usb 4-1: Manufacturer: syz [ 36.595229][ T473] usb 4-1: SerialNumber: syz [ 36.600458][ T473] usb 4-1: config 0 descriptor?? [ 36.841519][ T382] usb 4-1: USB disconnect, device number 7 [ 36.938879][ T125] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.036148][ T24] usb 1-1: USB disconnect, device number 5 [ 37.064839][ T772] device veth2 entered promiscuous mode [ 37.300556][ T125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.310624][ T125] usb 2-1: config 0 has no interfaces? [ 37.315843][ T125] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 37.324773][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.333410][ T125] usb 2-1: config 0 descriptor?? [ 37.379689][ T802] netlink: 'syz.3.160': attribute type 4 has an invalid length. [ 37.578895][ T473] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.668861][ T125] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 37.948901][ T473] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.959025][ T473] usb 3-1: config 0 has no interfaces? [ 37.964445][ T473] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 37.973584][ T473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.983792][ T473] usb 3-1: config 0 descriptor?? [ 38.009390][ T811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 38.039197][ T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.050216][ T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.060032][ T125] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 38.069001][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.080297][ T125] usb 4-1: config 0 descriptor?? [ 38.231520][ T24] usb 3-1: USB disconnect, device number 6 [ 38.560925][ T125] logitech-djreceiver 0003:046D:C534.0002: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.3-1/input0 [ 38.737818][ T796] syz.2.157 (796) used greatest stack depth: 21248 bytes left [ 38.760726][ T125] usb 4-1: USB disconnect, device number 8 [ 38.773276][ T828] Zero length message leads to an empty skb [ 38.791024][ T830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'. [ 38.863030][ T23] kauditd_printk_skb: 26 callbacks suppressed [ 38.863042][ T23] audit: type=1400 audit(1745716749.920:222): avc: denied { connect } for pid=831 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.029968][ T853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.182'. [ 39.211167][ T23] audit: type=1400 audit(1745716750.270:223): avc: denied { create } for pid=854 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 39.258853][ T125] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.297539][ T23] audit: type=1400 audit(1745716750.350:224): avc: denied { bind } for pid=862 comm="syz.3.185" laddr=::1 lport=60 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.337185][ T23] audit: type=1400 audit(1745716750.380:225): avc: denied { name_bind } for pid=862 comm="syz.3.185" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 39.358121][ T23] audit: type=1400 audit(1745716750.380:226): avc: denied { node_bind } for pid=862 comm="syz.3.185" saddr=fc02::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 39.518850][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 39.542523][ T23] audit: type=1400 audit(1745716750.600:227): avc: denied { ioctl } for pid=877 comm="syz.4.191" path="socket:[17369]" dev="sockfs" ino=17369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.558431][ T880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 39.586965][ T24] usb 2-1: USB disconnect, device number 4 [ 39.648891][ T125] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 39.656892][ T125] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 39.666608][ T125] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 39.676189][ T125] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 39.685881][ T125] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 39.699378][ T125] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 39.708211][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.848892][ T382] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 40.048888][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.198897][ T125] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.225563][ T23] audit: type=1400 audit(1745716751.280:228): avc: denied { read write } for pid=907 comm="syz.3.205" name="fuse" dev="devtmpfs" ino=9389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.249041][ T23] audit: type=1400 audit(1745716751.280:229): avc: denied { open } for pid=907 comm="syz.3.205" path="/dev/fuse" dev="devtmpfs" ino=9389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.272757][ T382] usb 5-1: unable to get BOS descriptor or descriptor too short [ 40.318952][ T382] usb 5-1: not running at top speed; connect to a high speed hub [ 40.336303][ T908] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 40.348607][ T23] audit: type=1400 audit(1745716751.410:230): avc: denied { unmount } for pid=355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 40.376657][ T913] netlink: 'syz.3.206': attribute type 6 has an invalid length. [ 40.408926][ T382] usb 5-1: config 4 has an invalid interface number: 156 but max is 0 [ 40.417036][ T382] usb 5-1: config 4 has no interface number 0 [ 40.423469][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.423519][ T382] usb 5-1: config 4 interface 156 has no altsetting 0 [ 40.437431][ T24] usb 2-1: config 0 has no interfaces? [ 40.445337][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 40.454655][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.463222][ T24] usb 2-1: config 0 descriptor?? [ 40.558938][ T125] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 40.569081][ T125] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 40.577852][ T125] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 40.586775][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.595650][ T125] usb 1-1: config 0 descriptor?? [ 40.608945][ T382] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 40.617938][ T382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.625737][ T382] usb 5-1: Product: syz [ 40.629724][ T382] usb 5-1: Manufacturer: syz [ 40.634093][ T382] usb 5-1: SerialNumber: syz [ 40.708887][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.948875][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 40.960243][ T382] usb 5-1: USB disconnect, device number 6 [ 41.068906][ T13] usb 4-1: config 0 has too many interfaces: 162, using maximum allowed: 32 [ 41.077468][ T13] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 162 [ 41.086421][ T13] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 41.095232][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.103670][ T13] usb 4-1: config 0 descriptor?? [ 41.340292][ T125] usb 4-1: USB disconnect, device number 9 [ 41.516046][ T935] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 41.997148][ T125] usb 3-1: USB disconnect, device number 7 [ 42.032489][ T23] audit: type=1400 audit(1745716753.090:231): avc: denied { create } for pid=943 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.075629][ T948] netlink: 44 bytes leftover after parsing attributes in process `syz.2.219'. [ 42.473334][ T980] xt_hashlimit: size too large, truncated to 1048576 [ 42.799008][ T984] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 42.824025][ T984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 42.923995][ T24] usb 1-1: USB disconnect, device number 6 [ 42.972974][ T1004] cgroup: syz.0.244 (1004) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 42.993868][ T1004] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 43.008986][ T1006] capability: warning: `syz.2.245' uses deprecated v2 capabilities in a way that may be insecure [ 43.039000][ T125] usb 2-1: USB disconnect, device number 5 [ 43.100156][ T1020] netlink: 116 bytes leftover after parsing attributes in process `syz.0.251'. [ 43.182270][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 43.478879][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.498907][ T125] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.568879][ T13] usb 5-1: config 0 has no interfaces? [ 43.718848][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 43.729051][ T13] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 43.737968][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.738915][ T125] usb 2-1: Using ep0 maxpacket: 8 [ 43.746017][ T13] usb 5-1: Product: syz [ 43.754547][ T13] usb 5-1: Manufacturer: syz [ 43.759304][ T13] usb 5-1: SerialNumber: syz [ 43.764399][ T13] usb 5-1: config 0 descriptor?? [ 43.838904][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.848935][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 43.859535][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 43.872216][ T125] usb 2-1: config 0 has no interfaces? [ 43.877488][ T125] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 43.886473][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.894973][ T125] usb 2-1: config 0 descriptor?? [ 44.004873][ T23] kauditd_printk_skb: 2295 callbacks suppressed [ 44.004888][ T23] audit: type=1400 audit(1745716755.060:2527): avc: denied { mount } for pid=1056 comm="syz.3.266" name="/" dev="ramfs" ino=18163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.013350][ T991] netlink: 452 bytes leftover after parsing attributes in process `syz.4.235'. [ 44.046373][ T991] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 44.053959][ T24] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 44.063854][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 44.072479][ T23] audit: type=1400 audit(1745716755.130:2528): avc: denied { getopt } for pid=983 comm="syz.4.235" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.092783][ T24] usb 1-1: Product: syz [ 44.096900][ T24] usb 1-1: Manufacturer: syz [ 44.101622][ T24] usb 1-1: SerialNumber: syz [ 44.107317][ T24] usb 1-1: config 0 descriptor?? [ 44.140782][ T23] audit: type=1400 audit(1745716755.200:2529): avc: denied { append } for pid=1024 comm="syz.1.252" name="kvm" dev="devtmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 44.142542][ T13] usb 2-1: USB disconnect, device number 6 [ 44.164284][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 44.618155][ T1080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 45.311711][ T23] audit: type=1400 audit(1745716756.370:2530): avc: denied { unmount } for pid=355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.505467][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.518174][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.526200][ T1120] device bridge_slave_0 entered promiscuous mode [ 45.536487][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.548778][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.556094][ T1120] device bridge_slave_1 entered promiscuous mode [ 45.569168][ T23] audit: type=1400 audit(1745716756.630:2531): avc: denied { remove_name } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=10892 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.592754][ T23] audit: type=1400 audit(1745716756.630:2532): avc: denied { rename } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=10892 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.616764][ T23] audit: type=1400 audit(1745716756.630:2533): avc: denied { create } for pid=146 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.639992][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.646855][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.653974][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.660731][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.685553][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.697807][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.705381][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.721688][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.729924][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.736748][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.744366][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.752417][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.759269][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.772805][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.781978][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.797524][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.812928][ T24] usb 5-1: USB disconnect, device number 7 [ 45.815592][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.858653][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.867554][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.876245][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.891054][ T23] audit: type=1400 audit(1745716756.950:2534): avc: denied { mount } for pid=1120 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 45.915684][ T23] audit: type=1400 audit(1745716756.950:2535): avc: denied { unmount } for pid=1120 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.980493][ T125] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 45.999458][ T9] device bridge_slave_1 left promiscuous mode [ 46.005911][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.013825][ T9] device bridge_slave_0 left promiscuous mode [ 46.020300][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.126579][ T13] usb 1-1: USB disconnect, device number 7 [ 46.228845][ T125] usb 3-1: Using ep0 maxpacket: 32 [ 46.353244][ T125] usb 3-1: descriptor type invalid, skip [ 46.359295][ T125] usb 3-1: descriptor type invalid, skip [ 46.365219][ T125] usb 3-1: descriptor type invalid, skip [ 46.393795][ T1189] device syz_tun entered promiscuous mode [ 46.399558][ T1188] device syz_tun left promiscuous mode [ 46.448939][ T125] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 46.457493][ T125] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 46.467815][ T125] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.628919][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 46.638919][ T125] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.647893][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.655961][ T125] usb 3-1: Product: syz [ 46.660090][ T125] usb 3-1: Manufacturer: syz [ 46.664438][ T125] usb 3-1: SerialNumber: syz [ 46.733182][ T1198] netlink: 'syz.4.328': attribute type 27 has an invalid length. [ 46.765435][ T1202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 46.797495][ T1206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 46.915343][ T23] audit: type=1400 audit(1745716757.970:2536): avc: denied { lock } for pid=1213 comm="syz.4.336" path="socket:[20814]" dev="sockfs" ino=20814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.008977][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.019989][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.030380][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.038953][ T125] usb 3-1: 0:2 : does not exist [ 47.050131][ T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.058587][ T125] usb 3-1: USB disconnect, device number 8 [ 47.076218][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.088262][ T13] usb 1-1: config 0 descriptor?? [ 47.569970][ T13] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.577200][ T13] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.614795][ T13] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.634498][ T13] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.658891][ T13] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.671948][ T13] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.688994][ T13] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.698875][ T13] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.709043][ T13] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.726401][ T13] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.736463][ T13] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.748136][ T13] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 47.758759][ T13] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 47.842305][ T13] usb 1-1: USB disconnect, device number 8 [ 48.185176][ T1284] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.061982][ T23] kauditd_printk_skb: 13 callbacks suppressed [ 49.061994][ T23] audit: type=1400 audit(1745716760.120:2550): avc: denied { getopt } for pid=1362 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.094643][ T1366] input: syz0 as /devices/virtual/input/input4 [ 49.117542][ T23] audit: type=1400 audit(1745716760.150:2551): avc: denied { read } for pid=1365 comm="syz.5.397" name="uinput" dev="devtmpfs" ino=10770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.146689][ T23] audit: type=1400 audit(1745716760.160:2552): avc: denied { read } for pid=149 comm="acpid" name="event3" dev="devtmpfs" ino=21849 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.183928][ T23] audit: type=1400 audit(1745716760.160:2553): avc: denied { open } for pid=149 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=21849 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.207828][ T1377] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.400'. [ 49.217225][ T1377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.400'. [ 49.237826][ T23] audit: type=1400 audit(1745716760.160:2554): avc: denied { ioctl } for pid=149 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=21849 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.373686][ T1385] kvm: pic: non byte write [ 49.513715][ T1402] PF_BRIDGE: br_mdb_parse() with invalid attr [ 49.665140][ T1411] netlink: 36 bytes leftover after parsing attributes in process `syz.0.417'. [ 49.805636][ T1427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 50.290551][ T23] audit: type=1326 audit(1745716761.350:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1481 comm="syz.5.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010dd15969 code=0x7ffc0000 [ 50.344903][ T23] audit: type=1326 audit(1745716761.350:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1481 comm="syz.5.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010dd15969 code=0x7ffc0000 [ 50.368955][ T23] audit: type=1326 audit(1745716761.380:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1481 comm="syz.5.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f010dd15969 code=0x7ffc0000 [ 50.413417][ T23] audit: type=1326 audit(1745716761.380:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1481 comm="syz.5.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010dd15969 code=0x7ffc0000 [ 50.437375][ T1491] netlink: 'syz.5.453': attribute type 27 has an invalid length. [ 50.489249][ T23] audit: type=1326 audit(1745716761.380:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1481 comm="syz.5.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010dd15969 code=0x7ffc0000 [ 50.522707][ T1502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.459'. [ 51.076567][ T1560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.485'. [ 51.105243][ T1560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.485'. [ 51.201783][ T1569] netlink: 'syz.5.490': attribute type 5 has an invalid length. [ 51.345913][ T1580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.493'. [ 51.500701][ T1597] input: syz0 as /devices/virtual/input/input5 [ 51.748854][ T108] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 51.998894][ T108] usb 3-1: Using ep0 maxpacket: 16 [ 52.118922][ T108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.138999][ T108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.148561][ T108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 52.161555][ T108] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 52.170723][ T108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.179488][ T108] usb 3-1: config 0 descriptor?? [ 52.463855][ T1635] kvm [1634]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 52.485572][ T1635] kvm [1634]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 52.499814][ T1635] kvm [1634]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 52.660393][ T108] hid-generic 0003:0955:7214.0004: unknown main item tag 0x0 [ 52.673343][ T108] hid-generic 0003:0955:7214.0004: unknown main item tag 0x0 [ 52.700916][ T108] hid-generic 0003:0955:7214.0004: unknown main item tag 0x0 [ 52.718779][ T108] hid-generic 0003:0955:7214.0004: unknown main item tag 0x0 [ 52.730378][ T108] hid-generic 0003:0955:7214.0004: unknown main item tag 0x0 [ 52.746761][ T108] hid-generic 0003:0955:7214.0004: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 52.862710][ T382] usb 3-1: USB disconnect, device number 9 [ 52.987115][ T1670] netlink: 68 bytes leftover after parsing attributes in process `syz.5.534'. [ 53.250550][ T1687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.542'. [ 53.454612][ T1703] PF_BRIDGE: br_mdb_parse() with invalid entry [ 54.135095][ T23] kauditd_printk_skb: 29 callbacks suppressed [ 54.135108][ T23] audit: type=1400 audit(1745716765.190:2589): avc: denied { create } for pid=1777 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 54.208893][ T23] audit: type=1400 audit(1745716765.230:2590): avc: denied { sys_module } for pid=1775 comm="syz.5.584" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.438842][ T440] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 54.625005][ T23] audit: type=1326 audit(1745716765.680:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.5.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010dd15969 code=0x7ffc0000 [ 54.667696][ T23] audit: type=1326 audit(1745716765.680:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.5.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010dd15969 code=0x7ffc0000 [ 54.688874][ T440] usb 5-1: Using ep0 maxpacket: 8 [ 54.736957][ T23] audit: type=1326 audit(1745716765.710:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.5.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f010dd15969 code=0x7ffc0000 [ 54.763870][ T23] audit: type=1326 audit(1745716765.710:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.5.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010dd15969 code=0x7ffc0000 [ 54.787447][ T23] audit: type=1326 audit(1745716765.710:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1826 comm="syz.5.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010dd15969 code=0x7ffc0000 [ 54.818975][ T440] usb 5-1: config 6 has an invalid interface number: 197 but max is 0 [ 54.837055][ T440] usb 5-1: config 6 has no interface number 0 [ 54.863128][ T440] usb 5-1: config 6 interface 197 altsetting 129 endpoint 0x8 has an invalid bInterval 64, changing to 7 [ 54.878904][ T440] usb 5-1: config 6 interface 197 altsetting 129 has an invalid endpoint with address 0x0, skipping [ 54.898898][ T440] usb 5-1: config 6 interface 197 altsetting 129 bulk endpoint 0xA has invalid maxpacket 1023 [ 54.918947][ T440] usb 5-1: config 6 interface 197 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 54.948457][ T440] usb 5-1: config 6 interface 197 altsetting 129 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 54.968828][ T440] usb 5-1: config 6 interface 197 has no altsetting 0 [ 55.128964][ T440] usb 5-1: New USB device found, idVendor=0b63, idProduct=6530, bcdDevice=e3.a6 [ 55.152551][ T440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.178855][ T440] usb 5-1: Product: syz [ 55.182918][ T440] usb 5-1: Manufacturer: syz [ 55.187270][ T440] usb 5-1: SerialNumber: syz [ 55.228965][ T1786] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 55.248936][ T1786] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 55.549465][ T440] pl2303 5-1:6.197: required endpoints missing [ 55.572214][ T440] usb 5-1: USB disconnect, device number 8 [ 55.617078][ T23] audit: type=1400 audit(1745716766.670:2596): avc: denied { getopt } for pid=1865 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.674793][ T1868] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.686251][ T1873] __nla_validate_parse: 4 callbacks suppressed [ 55.686260][ T1873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 55.752537][ T23] audit: type=1400 audit(1745716766.810:2597): avc: denied { read write } for pid=1875 comm="syz.0.625" name="ppp" dev="devtmpfs" ino=9494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.775984][ T23] audit: type=1400 audit(1745716766.810:2598): avc: denied { open } for pid=1875 comm="syz.0.625" path="/dev/ppp" dev="devtmpfs" ino=9494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.050204][ T1909] tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 56.099893][ T1911] input: syz0 as /devices/virtual/input/input6 [ 57.168881][ T440] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 57.359089][ T2006] xt_hashlimit: overflow, rate too high: 0 [ 57.394872][ T2014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.681'. [ 57.403760][ T2014] tipc: Invalid UDP bearer configuration [ 57.403782][ T2014] tipc: Enabling of bearer rejected, failed to enable media [ 57.418868][ T440] usb 5-1: Using ep0 maxpacket: 16 [ 57.538904][ T440] usb 5-1: unable to get BOS descriptor or descriptor too short [ 57.550509][ T2041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 57.578839][ T382] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.598870][ T440] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 57.606315][ T440] usb 5-1: can't read configurations, error -71 [ 57.891847][ T2068] tipc: Started in network mode [ 57.896561][ T2068] tipc: Own node identity 5fe45f059c716634002e, cluster identity 4711 [ 57.915636][ T2070] netlink: 48 bytes leftover after parsing attributes in process `syz.1.707'. [ 57.938881][ T382] usb 6-1: config 0 has no interfaces? [ 57.944193][ T382] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 57.958713][ T382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.974043][ T382] usb 6-1: config 0 descriptor?? [ 58.238339][ T108] usb 6-1: USB disconnect, device number 2 [ 59.190152][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 59.190165][ T23] audit: type=1400 audit(1745716770.250:2603): avc: denied { mount } for pid=2158 comm="syz.1.745" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.478839][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 59.838893][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.848919][ T24] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 60.008905][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 60.017837][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.025596][ T24] usb 1-1: Product: syz [ 60.029799][ T24] usb 1-1: Manufacturer: syz [ 60.034197][ T24] usb 1-1: SerialNumber: syz [ 60.131535][ T23] audit: type=1400 audit(1745716771.190:2604): avc: denied { create } for pid=2201 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 60.151866][ T23] audit: type=1400 audit(1745716771.190:2605): avc: denied { create } for pid=2201 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.188066][ T23] audit: type=1400 audit(1745716771.240:2606): avc: denied { setopt } for pid=2205 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.294803][ T23] audit: type=1326 audit(1745716771.350:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2216 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f010dcb1b39 code=0x7ffc0000 [ 60.334166][ T108] usb 1-1: USB disconnect, device number 9 [ 60.356439][ T23] audit: type=1326 audit(1745716771.380:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2216 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f010dcb1b39 code=0x7ffc0000 [ 60.417684][ T23] audit: type=1326 audit(1745716771.380:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2216 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f010dcb1b39 code=0x7ffc0000 [ 60.495798][ T23] audit: type=1326 audit(1745716771.380:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2216 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f010dcb1b39 code=0x7ffc0000 [ 60.553811][ T23] audit: type=1326 audit(1745716771.380:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2216 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f010dcb1b39 code=0x7ffc0000 [ 60.608847][ T23] audit: type=1326 audit(1745716771.390:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2216 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f010dcb1b39 code=0x7ffc0000 [ 61.273789][ T2243] xt_hashlimit: overflow, rate too high: 0 [ 61.559879][ T2259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=2259 comm=syz.4.789 [ 61.618848][ T108] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 61.813591][ T2280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 61.858609][ T2284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 61.988869][ T108] usb 3-1: config 0 has no interfaces? [ 62.099558][ T2309] input: syz0 as /devices/virtual/input/input7 [ 62.160536][ T108] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 62.178989][ T108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.195941][ T108] usb 3-1: Product: syz [ 62.206056][ T108] usb 3-1: Manufacturer: syz [ 62.210642][ T108] usb 3-1: SerialNumber: syz [ 62.218315][ T108] usb 3-1: config 0 descriptor?? [ 62.349297][ T2330] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 62.461872][ T24] usb 3-1: USB disconnect, device number 10 [ 62.488858][ T382] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.738902][ T382] usb 6-1: Using ep0 maxpacket: 8 [ 62.858974][ T382] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 62.866992][ T382] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.888855][ T382] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.908646][ T382] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.918785][ T382] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.948860][ T382] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 62.967342][ T382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.258840][ T125] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 63.558926][ T125] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 63.648953][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.658082][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.669146][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 63.768910][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.779827][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.808861][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 63.861241][ T2399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 63.898927][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.916354][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.937237][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 64.028967][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.041031][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.056914][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 64.138874][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.155232][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.183491][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 64.279973][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.297964][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.323963][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 64.327544][ T2421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.339656][ T24] usb 6-1: USB disconnect, device number 3 [ 64.409038][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.420298][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.435902][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 64.465859][ T23] kauditd_printk_skb: 2099 callbacks suppressed [ 64.465872][ T23] audit: type=1400 audit(1745716775.520:4712): avc: denied { read append } for pid=2427 comm="syz.5.864" name="loop-control" dev="devtmpfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 64.513330][ T23] audit: type=1400 audit(1745716775.550:4713): avc: denied { open } for pid=2427 comm="syz.5.864" path="/dev/loop-control" dev="devtmpfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 64.538423][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.547266][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.568453][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 64.575344][ T23] audit: type=1400 audit(1745716775.550:4714): avc: denied { ioctl } for pid=2427 comm="syz.5.864" path="/dev/loop-control" dev="devtmpfs" ino=9407 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 64.579943][ T2432] device gretap1 entered promiscuous mode [ 64.637249][ T23] audit: type=1400 audit(1745716775.690:4715): avc: denied { read write } for pid=2433 comm="syz.5.867" name="uhid" dev="devtmpfs" ino=10774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 64.665578][ T23] audit: type=1400 audit(1745716775.690:4716): avc: denied { open } for pid=2433 comm="syz.5.867" path="/dev/uhid" dev="devtmpfs" ino=10774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 64.721239][ T2441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.788989][ T125] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 64.802790][ T125] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 64.818685][ T125] usb 3-1: Product: syz [ 64.835298][ T125] usb 3-1: Manufacturer: syz [ 64.845188][ T125] usb 3-1: SerialNumber: syz [ 64.871101][ T125] usb 3-1: config 0 descriptor?? [ 65.030456][ T2458] kvm: pic: non byte write [ 65.110708][ T13] usb 3-1: USB disconnect, device number 11 [ 65.139950][ T23] audit: type=1400 audit(1745716776.200:4717): avc: denied { map } for pid=2464 comm="syz.1.879" path="/dev/usbmon0" dev="devtmpfs" ino=9495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.251995][ T2473] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 65.299007][ T18] cfg80211: failed to load regulatory.db [ 65.333287][ T23] audit: type=1326 audit(1745716776.390:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2476 comm="syz.5.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010dd15969 code=0x7ffc0000 [ 65.390858][ T2486] netlink: 148 bytes leftover after parsing attributes in process `syz.0.888'. [ 65.403519][ T23] audit: type=1326 audit(1745716776.420:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2476 comm="syz.5.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f010dd15969 code=0x7ffc0000 [ 65.457123][ T23] audit: type=1326 audit(1745716776.420:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2476 comm="syz.5.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010dd15969 code=0x7ffc0000 [ 65.902154][ T2535] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 66.459004][ T382] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 66.818951][ T382] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.843413][ T382] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 66.867224][ T23] audit: type=1400 audit(1745716777.920:4721): avc: denied { getopt } for pid=2557 comm="syz.5.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.980984][ T2576] netlink: 68 bytes leftover after parsing attributes in process `syz.2.928'. [ 66.998921][ T382] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 67.019605][ T382] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 67.032890][ T382] usb 5-1: Manufacturer: syz [ 67.050030][ T382] usb 5-1: config 0 descriptor?? [ 67.308524][ T382] usb 5-1: USB disconnect, device number 11 [ 67.328953][ T18] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 67.568838][ T18] usb 6-1: Using ep0 maxpacket: 8 [ 67.588867][ T473] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 67.688928][ T18] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 67.697704][ T18] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.708596][ T18] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 67.717477][ T18] usb 6-1: config 0 has no interface number 0 [ 67.723935][ T18] usb 6-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 67.734603][ T18] usb 6-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 67.746847][ T18] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.838926][ T473] usb 3-1: Using ep0 maxpacket: 8 [ 67.931896][ T2624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2624 comm=syz.1.948 [ 68.149172][ T473] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 68.158582][ T473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.167733][ T473] usb 3-1: Product: syz [ 68.172753][ T473] usb 3-1: Manufacturer: syz [ 68.177856][ T473] usb 3-1: SerialNumber: syz [ 68.204020][ T473] usb 3-1: config 0 descriptor?? [ 68.828961][ T18] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 68.837827][ T18] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.845664][ T18] usb 6-1: Product: syz [ 68.849637][ T18] usb 6-1: Manufacturer: syz [ 68.854020][ T18] usb 6-1: SerialNumber: syz [ 68.859455][ T18] usb 6-1: config 0 descriptor?? [ 68.875244][ T2631] device sit0 entered promiscuous mode [ 68.878961][ T2578] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 68.882384][ T2631] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 68.894700][ T2631] netlink: 1 bytes leftover after parsing attributes in process `syz.0.951'. [ 68.900105][ T18] snd-usb-audio: probe of 6-1:0.151 failed with error -2 [ 68.912194][ T2627] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue [ 68.938839][ T125] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 69.120361][ T24] usb 6-1: USB disconnect, device number 4 [ 69.178933][ T125] usb 5-1: Using ep0 maxpacket: 16 [ 69.248865][ T18] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 69.299204][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 69.310372][ T125] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.323485][ T125] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 69.332869][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.346452][ T125] usb 5-1: config 0 descriptor?? [ 69.538134][ T24] usb 3-1: USB disconnect, device number 12 [ 69.580207][ T2641] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 69.597613][ T2622] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.605710][ T23] kauditd_printk_skb: 24 callbacks suppressed [ 69.605723][ T23] audit: type=1400 audit(1745716780.670:4746): avc: denied { read } for pid=2621 comm="syz.4.949" name="msr" dev="devtmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.635865][ T23] audit: type=1400 audit(1745716780.670:4747): avc: denied { open } for pid=2621 comm="syz.4.949" path="/dev/cpu/0/msr" dev="devtmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.638981][ T18] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.708949][ T23] audit: type=1400 audit(1745716780.760:4748): avc: denied { create } for pid=2621 comm="syz.4.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.748084][ T23] audit: type=1400 audit(1745716780.760:4749): avc: denied { bind } for pid=2621 comm="syz.4.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.807251][ T23] audit: type=1400 audit(1745716780.760:4750): avc: denied { setopt } for pid=2621 comm="syz.4.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.919348][ T18] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.941417][ T18] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.952371][ T18] usb 2-1: Product: syz [ 69.956377][ T18] usb 2-1: Manufacturer: syz [ 69.961171][ T18] usb 2-1: SerialNumber: syz [ 69.998946][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 70.028707][ T23] audit: type=1400 audit(1745716781.080:4751): avc: denied { create } for pid=2646 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.049693][ T2647] netlink: 68 bytes leftover after parsing attributes in process `syz.0.955'. [ 70.049728][ T23] audit: type=1400 audit(1745716781.110:4752): avc: denied { write } for pid=2646 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.079296][ T125] usbhid 5-1:0.0: can't add hid device: -71 [ 70.085072][ T125] usbhid: probe of 5-1:0.0 failed with error -71 [ 70.091659][ T23] audit: type=1400 audit(1745716781.110:4753): avc: denied { nlmsg_write } for pid=2646 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.113001][ T125] usb 5-1: USB disconnect, device number 12 [ 70.119190][ T23] audit: type=1400 audit(1745716781.110:4754): avc: denied { nlmsg_read } for pid=2646 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.231674][ T2653] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 70.242938][ T23] audit: type=1400 audit(1745716781.300:4755): avc: denied { write } for pid=2652 comm="syz.0.957" path="socket:[32725]" dev="sockfs" ino=32725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.244040][ T2653] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 70.275334][ T2653] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=32726 [ 70.298963][ T24] usb 3-1: too many configurations: 49, using maximum allowed: 8 [ 70.338853][ T382] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 70.350639][ T2658] netlink: 48 bytes leftover after parsing attributes in process `syz.0.959'. [ 70.361391][ T2659] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.378941][ T24] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 231 [ 70.387429][ T24] usb 3-1: can't read configurations, error -22 [ 70.538863][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 70.578872][ T382] usb 6-1: Invalid ep0 maxpacket: 64 [ 70.628851][ T125] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 70.639213][ T2636] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.728870][ T382] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 70.758845][ T615] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 70.818926][ T24] usb 3-1: too many configurations: 49, using maximum allowed: 8 [ 70.898992][ T125] usb 1-1: device descriptor read/64, error 18 [ 70.905002][ T24] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 231 [ 70.913424][ T24] usb 3-1: can't read configurations, error -22 [ 70.919553][ T24] usb usb3-port1: attempt power cycle [ 70.988868][ T382] usb 6-1: Invalid ep0 maxpacket: 64 [ 70.994104][ T382] usb usb6-port1: attempt power cycle [ 71.080282][ T2636] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.178902][ T615] usb 5-1: unable to get BOS descriptor or descriptor too short [ 71.258933][ T615] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 is Bulk; changing to Interrupt [ 71.268587][ T615] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x82 is Bulk; changing to Interrupt [ 71.278444][ T615] usb 5-1: config 1 interface 0 has no altsetting 0 [ 71.298980][ T18] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 71.305292][ T18] cdc_ncm 2-1:1.0: dwNtbInMaxSize=1025 is too small. Using 2048 [ 71.313104][ T125] usb 1-1: device descriptor read/64, error 18 [ 71.319196][ T18] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 71.338969][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 71.408871][ T382] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 71.468926][ T24] usb 3-1: too many configurations: 49, using maximum allowed: 8 [ 71.518931][ T18] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 71.518937][ T382] usb 6-1: Invalid ep0 maxpacket: 64 [ 71.529896][ T615] usb 5-1: string descriptor 0 read error: -22 [ 71.535883][ T615] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 71.546748][ T18] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 71.556777][ T24] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 231 [ 71.565227][ T615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.573015][ T24] usb 3-1: can't read configurations, error -22 [ 71.585915][ T18] usb 2-1: USB disconnect, device number 7 [ 71.591811][ T18] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 71.600054][ T2663] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 71.608925][ T125] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 71.610274][ T2663] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 71.678835][ T382] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 71.729050][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 71.768976][ T382] usb 6-1: Invalid ep0 maxpacket: 64 [ 71.774279][ T382] usb usb6-port1: unable to enumerate USB device [ 71.848347][ T2663] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.855967][ T2663] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.864052][ T2663] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.872336][ T382] usb 5-1: USB disconnect, device number 13 [ 71.878968][ T24] usb 3-1: too many configurations: 49, using maximum allowed: 8 [ 71.886610][ T125] usb 1-1: device descriptor read/64, error 18 [ 71.958896][ T24] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 231 [ 71.967381][ T24] usb 3-1: can't read configurations, error -22 [ 71.973677][ T24] usb usb3-port1: unable to enumerate USB device [ 72.045254][ T354] ------------[ cut here ]------------ [ 72.050547][ T354] WARNING: CPU: 1 PID: 354 at fs/inode.c:302 drop_nlink+0xc5/0x110 [ 72.058252][ T354] Modules linked in: [ 72.061992][ T354] CPU: 1 PID: 354 Comm: syz-executor Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 72.071706][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.081615][ T354] RIP: 0010:drop_nlink+0xc5/0x110 [ 72.086460][ T354] Code: 1b 48 8d bb d0 04 00 00 be 08 00 00 00 e8 b3 a4 f3 ff f0 48 ff 83 d0 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4b d0 c5 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 72.105903][ T354] RSP: 0018:ffff8881d74bfc00 EFLAGS: 00010293 [ 72.111797][ T354] RAX: ffffffff8199ae95 RBX: ffff8881e77903d8 RCX: ffff8881f37d8000 [ 72.119619][ T354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.127422][ T354] RBP: ffff8881d74bfc28 R08: 0000000000000004 R09: 0000000000000003 [ 72.135523][ T354] R10: ffffed103ae97f70 R11: 1ffff1103ae97f70 R12: dffffc0000000000 [ 72.143328][ T354] R13: 1ffff1103cef2084 R14: ffff8881e7790420 R15: 0000000000000000 [ 72.151148][ T354] FS: 0000555590493500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 72.159989][ T354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.166411][ T354] CR2: 00005555904b64e8 CR3: 00000001d791f000 CR4: 00000000003426a0 [ 72.174406][ T354] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.182209][ T354] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.190029][ T354] Call Trace: [ 72.193152][ T354] shmem_rmdir+0x5b/0x90 [ 72.197313][ T354] vfs_rmdir+0x1b3/0x3e0 [ 72.201394][ T354] incfs_kill_sb+0xfe/0x210 [ 72.205754][ T354] deactivate_locked_super+0xa0/0x100 [ 72.211025][ T354] deactivate_super+0x14f/0x1d0 [ 72.215714][ T354] ? deactivate_locked_super+0x100/0x100 [ 72.221185][ T354] cleanup_mnt+0x446/0x500 [ 72.225439][ T354] __cleanup_mnt+0x19/0x20 [ 72.229689][ T354] task_work_run+0x146/0x170 [ 72.234114][ T354] exit_to_usermode_loop+0x195/0x1b0 [ 72.239236][ T354] prepare_exit_to_usermode+0x18e/0x1f0 [ 72.244613][ T354] do_syscall_64+0x13e/0x170 [ 72.249043][ T354] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 72.254768][ T354] RIP: 0033:0x7f6f4e9a8c97 [ 72.259114][ T354] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 72.278548][ T354] RSP: 002b:00007ffe0279e928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 72.286794][ T354] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6f4e9a8c97 [ 72.294777][ T354] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0279e9e0 [ 72.302590][ T354] RBP: 00007ffe0279e9e0 R08: 0000000000000000 R09: 0000000000000000 [ 72.310403][ T354] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0279fa70 [ 72.318217][ T354] R13: 00007f6f4ea2989d R14: 00000000000118fd R15: 00007ffe0279fab0 [ 72.326028][ T354] ---[ end trace 4add77f2a1d74ad7 ]--- [ 72.331851][ T354] ================================================================== [ 72.339741][ T354] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 72.345796][ T354] Write of size 4 at addr 0000000000000160 by task syz-executor/354 [ 72.353607][ T354] [ 72.355785][ T354] CPU: 1 PID: 354 Comm: syz-executor Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 72.366891][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.376786][ T354] Call Trace: [ 72.379922][ T354] __dump_stack+0x1e/0x20 [ 72.384088][ T354] dump_stack+0x15b/0x1b8 [ 72.388256][ T354] ? thaw_kernel_threads+0x220/0x220 [ 72.393381][ T354] ? show_regs_print_info+0x18/0x18 [ 72.398413][ T354] ? __kasan_check_write+0x14/0x20 [ 72.403348][ T354] ? _raw_spin_lock+0x8e/0xe0 [ 72.407856][ T354] ? ihold+0x20/0x60 [ 72.411586][ T354] ? ihold+0x20/0x60 [ 72.415330][ T354] __kasan_report+0xe4/0x120 [ 72.419746][ T354] ? ihold+0x20/0x60 [ 72.423484][ T354] kasan_report+0x30/0x60 [ 72.427647][ T354] check_memory_region+0x274/0x280 [ 72.432597][ T354] __kasan_check_write+0x14/0x20 [ 72.437364][ T354] ihold+0x20/0x60 [ 72.440928][ T354] vfs_rmdir+0x247/0x3e0 [ 72.445006][ T354] incfs_kill_sb+0xfe/0x210 [ 72.449347][ T354] deactivate_locked_super+0xa0/0x100 [ 72.454639][ T354] deactivate_super+0x14f/0x1d0 [ 72.459324][ T354] ? deactivate_locked_super+0x100/0x100 [ 72.464794][ T354] cleanup_mnt+0x446/0x500 [ 72.469046][ T354] __cleanup_mnt+0x19/0x20 [ 72.473301][ T354] task_work_run+0x146/0x170 [ 72.477726][ T354] exit_to_usermode_loop+0x195/0x1b0 [ 72.482845][ T354] prepare_exit_to_usermode+0x18e/0x1f0 [ 72.488226][ T354] do_syscall_64+0x13e/0x170 [ 72.492653][ T354] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 72.498381][ T354] RIP: 0033:0x7f6f4e9a8c97 [ 72.502634][ T354] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 72.522101][ T354] RSP: 002b:00007ffe0279e928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 72.530317][ T354] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6f4e9a8c97 [ 72.538237][ T354] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0279e9e0 [ 72.546039][ T354] RBP: 00007ffe0279e9e0 R08: 0000000000000000 R09: 0000000000000000 [ 72.553851][ T354] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0279fa70 [ 72.561666][ T354] R13: 00007f6f4ea2989d R14: 00000000000118fd R15: 00007ffe0279fab0 [ 72.569476][ T354] ================================================================== [ 72.577383][ T354] Disabling lock debugging due to kernel taint [ 72.583681][ T354] BUG: kernel NULL pointer dereference, address: 0000000000000160 [ 72.591292][ T354] #PF: supervisor write access in kernel mode [ 72.597188][ T354] #PF: error_code(0x0002) - not-present page [ 72.603013][ T354] PGD 1ec7a7067 P4D 1ec7a7067 PUD 0 [ 72.608137][ T354] Oops: 0002 [#1] PREEMPT SMP KASAN [ 72.613171][ T354] CPU: 1 PID: 354 Comm: syz-executor Tainted: G B W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 72.624288][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.634169][ T354] RIP: 0010:ihold+0x26/0x60 [ 72.638504][ T354] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 61 c8 c5 ff 48 8d bb 60 01 00 00 be 04 00 00 00 e8 a0 9c f3 ff 41 be 01 00 00 00 44 0f c1 b3 60 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 81 [ 72.658469][ T354] RSP: 0018:ffff8881d74bfc40 EFLAGS: 00010246 [ 72.664380][ T354] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881f37d8000 [ 72.672641][ T354] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 72.680459][ T354] RBP: ffff8881d74bfc50 R08: 0000000000000004 R09: 0000000000000003 [ 72.688262][ T354] R10: fffffbfff0ca7a5c R11: 1ffffffff0ca7a5c R12: 1ffff1103d3cfcf4 [ 72.696073][ T354] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 72.703884][ T354] FS: 0000555590493500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 72.712651][ T354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.719069][ T354] CR2: 0000000000000160 CR3: 00000001d791f000 CR4: 00000000003426a0 [ 72.726883][ T354] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.734694][ T354] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.742501][ T354] Call Trace: [ 72.745641][ T354] vfs_rmdir+0x247/0x3e0 [ 72.749716][ T354] incfs_kill_sb+0xfe/0x210 [ 72.754055][ T354] deactivate_locked_super+0xa0/0x100 [ 72.759262][ T354] deactivate_super+0x14f/0x1d0 [ 72.763948][ T354] ? deactivate_locked_super+0x100/0x100 [ 72.769823][ T354] cleanup_mnt+0x446/0x500 [ 72.774321][ T354] __cleanup_mnt+0x19/0x20 [ 72.778576][ T354] task_work_run+0x146/0x170 [ 72.783032][ T354] exit_to_usermode_loop+0x195/0x1b0 [ 72.788164][ T354] prepare_exit_to_usermode+0x18e/0x1f0 [ 72.793507][ T354] do_syscall_64+0x13e/0x170 [ 72.797933][ T354] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 72.803744][ T354] RIP: 0033:0x7f6f4e9a8c97 [ 72.807998][ T354] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 72.827440][ T354] RSP: 002b:00007ffe0279e928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 72.835682][ T354] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6f4e9a8c97 [ 72.843494][ T354] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0279e9e0 [ 72.851561][ T354] RBP: 00007ffe0279e9e0 R08: 0000000000000000 R09: 0000000000000000 [ 72.859373][ T354] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0279fa70 [ 72.867189][ T354] R13: 00007f6f4ea2989d R14: 00000000000118fd R15: 00007ffe0279fab0 [ 72.875349][ T354] Modules linked in: [ 72.879090][ T354] CR2: 0000000000000160 [ 72.883073][ T354] ---[ end trace 4add77f2a1d74ad8 ]--- [ 72.888368][ T354] RIP: 0010:ihold+0x26/0x60 [ 72.892703][ T354] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 61 c8 c5 ff 48 8d bb 60 01 00 00 be 04 00 00 00 e8 a0 9c f3 ff 41 be 01 00 00 00 44 0f c1 b3 60 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 81 [ 72.912228][ T354] RSP: 0018:ffff8881d74bfc40 EFLAGS: 00010246 [ 72.918129][ T354] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881f37d8000 [ 72.925940][ T354] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 72.933751][ T354] RBP: ffff8881d74bfc50 R08: 0000000000000004 R09: 0000000000000003 [ 72.941740][ T354] R10: fffffbfff0ca7a5c R11: 1ffffffff0ca7a5c R12: 1ffff1103d3cfcf4 [ 72.949553][ T354] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 72.957361][ T354] FS: 0000555590493500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 72.966127][ T354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.972913][ T354] CR2: 0000000000000160 CR3: 00000001d791f000 CR4: 00000000003426a0 [ 72.980725][ T354] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.988546][ T354] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.996348][ T354] Kernel panic - not syncing: Fatal exception [ 73.002436][ T354] Kernel Offset: disabled [ 73.006564][ T354] Rebooting in 86400 seconds..