last executing test programs: 3m15.517498987s ago: executing program 2 (id=2993): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x3, &(0x7f00000000c0)=[{0xf05, 0x7, 0x9, 0x6}, {0x2, 0xa, 0x4, 0x2}, {0x7, 0x0, 0x3, 0x4}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x28) socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) timerfd_create(0x2, 0x80000) epoll_create1(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r5, 0x2000, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250c08000005005000f40000000500300000000000050030000100000008000600e1e145420f1f43de9afa5e52b8eb511c059f3621f31bc7c387", @ANYRES32=0x0, @ANYBLOB="08003200050000000500350004000000"], 0x44}, 0x1, 0x0, 0x0, 0x20044880}, 0x8010) 3m13.856974614s ago: executing program 2 (id=2997): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x6, &(0x7f0000000300)=0x80006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010102000000102509888840000102030109022d00010109300809040000030921ff00100122890609058103ff0380050e09050203080005ff0400000000"], &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000002bc0)={0x18, 0x0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="00039800000004030a40"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000003280)={0x18, 0x0, &(0x7f0000003180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, 0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) stat(&(0x7f0000000340)='./file2\x00', &(0x7f0000000380)) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) readv(r3, &(0x7f0000000a80), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r4 = syz_pidfd_open(0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000080)='./file1\x00', 0x0, 0x1) unlinkat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x7f, 0xf}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2d0061a5a7a704fdf95d46e627403a8d6ce38648f2780c83900271152ac7"]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5}]}}}]}, 0x3c}}, 0x0) fsmount(r3, 0x1, 0xc) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) 3m10.786559593s ago: executing program 2 (id=3015): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000180)=0xff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @broadcast, @loopback}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) chmod(&(0x7f0000000100)='./file0\x00', 0x24c) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r9, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 3m9.299379419s ago: executing program 2 (id=3020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000090000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000002000000000000000000000c1f5dc9e96df580d88a351458d5351c59a1eed098d84d2421e79d71597f71d4e7e56a75d94cfe3e84e"], 0x48) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000080)=ANY=[], 0xfd, 0x5519, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x923004, 0x0, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0xfea000, 0x2000402) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), 0x3f, r0}, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x8, 0x0, 0x3, 0xb, 0x8, 0xffffffffffffffff}) sched_setscheduler(r3, 0x0, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) execveat$binfmt(r1, r5, &(0x7f0000000440)={[&(0x7f0000000200)='(&%\xd9+}!\x00', &(0x7f0000000240)='}),[:!}\x00', &(0x7f0000000280)='pids.current\x00', &(0x7f0000000300)='\x00', &(0x7f0000000380)='workdir', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='\x00']}, &(0x7f00000005c0)={[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='upperdir', &(0x7f0000000540)='\'\xeb&}\x91{\x00', &(0x7f0000000580)='\x00']}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0xb, 0x4) sendmsg$netlink(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x5e, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r0}, 0x38) 3m8.148471326s ago: executing program 2 (id=3027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a7fb7", 0x1c, 0x6, 0x0, @private1, @local, {[], {{0x44, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x1b, 0x0, 0x81, {[@fastopen={0x22, 0x8, "052f8482529e"}]}}}}}}}}, 0x0) 3m7.783480837s ago: executing program 2 (id=3030): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 3m7.751132699s ago: executing program 32 (id=3030): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 797.627284ms ago: executing program 1 (id=5375): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0xf8, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@loopback, {0x0, 0x0, 0x2, 0x0, 0x10000002, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x3500, 0xa, 0x2, 0xff, 0x34}, [@tfcpad={0x8, 0x16, 0xf}]}, 0xf8}}, 0x0) 758.824466ms ago: executing program 1 (id=5377): r0 = getpid() syz_pidfd_open(r0, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x300, 0x7ffffffff000}, 0x806, 0x0, 0x3, 0x1, 0x7, 0x4}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) fchdir(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="2db4", 0x2, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000380)=@alg, &(0x7f00000000c0)=0x8b, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 758.227106ms ago: executing program 1 (id=5379): r0 = socket(0x11, 0x3, 0xff) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) 747.435397ms ago: executing program 1 (id=5380): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 727.414738ms ago: executing program 1 (id=5382): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0), 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/128, 0x80}], 0x1, 0x111, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40106726, &(0x7f00000000c0)) 665.194182ms ago: executing program 4 (id=5385): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:file_context_t:s0\x00', 0x24) 664.602962ms ago: executing program 3 (id=5387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390440bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0198000000000000180012800e000100776972656775617264000000440002800800290016150700080028008ee60004"], 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) 612.234555ms ago: executing program 4 (id=5389): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 611.752195ms ago: executing program 3 (id=5391): unshare(0x26000400) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0x1de) pwrite64(r0, &(0x7f0000000480)="63fcd6", 0x3, 0x100006) 611.429035ms ago: executing program 4 (id=5392): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 603.232995ms ago: executing program 4 (id=5393): syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x40000000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 596.730236ms ago: executing program 3 (id=5395): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000740)=[{&(0x7f00000002c0)="00214717a70700000000030600710a5eeb9d04710400", 0x16}], 0x1, 0xee, 0x4200006) 581.949297ms ago: executing program 3 (id=5396): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x0, 0x12}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 516.26481ms ago: executing program 5 (id=5401): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0xfeffff7f, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 516.13383ms ago: executing program 5 (id=5402): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') setns(r0, 0x0) 515.278781ms ago: executing program 5 (id=5405): r0 = getpid() syz_pidfd_open(r0, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x300, 0x7ffffffff000}, 0x806, 0x0, 0x3, 0x1, 0x7, 0x4}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) fchdir(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="2db4", 0x2, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000380)=@alg, &(0x7f00000000c0)=0x8b, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 504.703981ms ago: executing program 5 (id=5407): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0xa2000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001080)={0x0, 0x9, &(0x7f0000000080)="a9d4be2653806b6cfb"}) 448.602955ms ago: executing program 5 (id=5408): r0 = socket$packet(0x11, 0x3, 0x300) recvmsg(r0, &(0x7f0000000400)={0x0, 0xffffff81, &(0x7f00000002c0), 0x64}, 0x20) 448.200924ms ago: executing program 5 (id=5410): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x5, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r3, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x0, 0x8, r2, 0x0, 0x0, 0x1}]) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r6 = socket$inet(0x2, 0x801, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r6, 0x1) sendto$inet(r4, 0x0, 0x0, 0x2000cf2c, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r1, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 333.643601ms ago: executing program 4 (id=5422): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) 278.989914ms ago: executing program 0 (id=5425): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0"], &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) sendmsg$inet(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x4040010) 278.675134ms ago: executing program 0 (id=5426): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 220.690838ms ago: executing program 0 (id=5427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000161000008000b40000000000900010073797a30"], 0xd8}}, 0x0) 220.481098ms ago: executing program 0 (id=5428): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@newtaction={0x1bc, 0x30, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0xec, 0x1, [@m_simple={0xe8, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\t\x00\x00\x00\x00'}]}, {0xad, 0x6, "c92acebef543cf5eac95ff99fdfe71226f0f8ca3945cf1e27303fef4d7edee9dc07b9c204234f1518f815a1e6f9900be0653c30ee7044fc49940d26166aca9768a60e2633236607ed8e41497a644f35e0d2494ec2432e189bde8a31ee3c25d98a9d5eabb59832b6b5d302ef8dbee798a364094b288f82acbcd5acc3d37148318dc5491c9505a46e3387d31e31c2a8f31a806aff980e9556c76256efb4a5cd9c0b1d305d220c3ba3063"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xbc, 0x1, [@m_simple={0x78, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x49, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05ff436ae121782b9f13ed2deb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x40, 0x17, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 220.206098ms ago: executing program 0 (id=5429): r0 = getpid() syz_pidfd_open(r0, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x300, 0x7ffffffff000}, 0x806, 0x0, 0x3, 0x1, 0x7, 0x4}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) fchdir(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000380)=@alg, &(0x7f00000000c0)=0x8b, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 220.036448ms ago: executing program 0 (id=5430): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x0, 0xd, 0x2, 'W@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000180)={0x0, 0x15, 0x2, '1]'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000a02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x40, 0x12, 0x3, "00cca3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 212.042058ms ago: executing program 4 (id=5431): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x9000000) 64.616667ms ago: executing program 1 (id=5432): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfff3, 0x4}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 401.92µs ago: executing program 3 (id=5433): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c3314, 0x0) 0s ago: executing program 3 (id=5434): sendmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="f0017b7dcb59e7519dcbde7465cddd9c1d4d8f9685b407a779e1b62f6f2ea9205dce3a820ea6ac0a1f4430184e7e34177c40e0af787a29d5bd4c21bfd3f3da48", 0x40}], 0x1}}], 0x1, 0x8010) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r1, @ANYBLOB="0006000000000000240012800b00010067656e65766500001400028006000500"], 0x94}, 0x1, 0x2}, 0x0) kernel console output (not intermixed with test programs): 896] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 1177.374079][ T334] hub 2-1:0.0: 1 port detected [ 1177.511680][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-diskseq/3060.tmp-b7:5' failed: Read-only file system [ 1177.575795][ T896] usb 5-1: config 0 has no interface number 0 [ 1177.581998][ T896] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1177.591159][ T896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.599884][ T896] usb 5-1: config 0 descriptor?? [ 1177.644528][ T896] usb 5-1: bad CDC descriptors [ 1177.816434][T13795] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1177.855988][ T334] usb 2-1: USB disconnect, device number 92 [ 1177.893952][T15095] set_capacity_and_notify: 2 callbacks suppressed [ 1177.900447][T15095] loop4: detected capacity change from 0 to 4096 [ 1177.922955][T15095] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1177.933744][T15095] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1177.962966][T12584] usb 5-1: USB disconnect, device number 102 [ 1178.073130][T15124] hub 8-0:1.0: USB hub found [ 1178.078305][T15124] hub 8-0:1.0: 1 port detected [ 1178.204091][T13795] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1178.212821][T13795] usb 6-1: config 0 has no interface number 0 [ 1178.219943][T13795] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1178.230265][T13795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.245946][T13795] usb 6-1: config 0 descriptor?? [ 1178.286144][T13795] usb 6-1: bad CDC descriptors [ 1178.527615][T15132] loop4: detected capacity change from 0 to 256 [ 1178.534048][T15115] loop5: detected capacity change from 0 to 4096 [ 1178.567165][T15115] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1178.598260][T15115] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1178.645742][T15135] hub 8-0:1.0: USB hub found [ 1178.650944][T15135] hub 8-0:1.0: 1 port detected [ 1178.934632][T15138] xt_hashlimit: size too large, truncated to 1048576 [ 1178.969838][T15132] attempt to access beyond end of device [ 1178.969838][T15132] loop4: rw=2049, want=352, limit=256 [ 1179.073242][T12581] usb 6-1: USB disconnect, device number 12 [ 1179.393427][T15147] hub 8-0:1.0: USB hub found [ 1179.405234][T15147] hub 8-0:1.0: 1 port detected [ 1179.443442][T15151] hub 8-0:1.0: USB hub found [ 1179.448328][T15151] hub 8-0:1.0: 1 port detected [ 1179.524687][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1179.524704][ T30] audit: type=1400 audit(1770339079.943:3396): avc: denied { connect } for pid=15152 comm="syz.4.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1179.550895][T15154] loop4: detected capacity change from 0 to 1024 [ 1179.604618][T15154] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1179.615627][T15154] EXT4-fs (loop4): group descriptors corrupted! [ 1179.963892][T13795] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1180.318620][T15172] loop4: detected capacity change from 0 to 512 [ 1180.324076][T13795] usb 6-1: config index 0 descriptor too short (expected 324, got 68) [ 1180.333214][T13795] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1180.344288][T13795] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 23304, setting to 64 [ 1180.355382][T13795] usb 6-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1180.385359][T15172] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1180.397455][T15172] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.413163][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3512'. [ 1180.424399][ T30] audit: type=1400 audit(1770339080.843:3397): avc: denied { map } for pid=15171 comm="syz.4.3512" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1180.448466][T13795] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1180.457562][T13795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1180.465740][T13795] usb 6-1: SerialNumber: syz [ 1180.473522][T15172] EXT4-fs error (device loop4): ext4_ind_map_blocks:604: inode #18: comm syz.4.3512: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 1180.488947][T15172] EXT4-fs (loop4): Remounting filesystem read-only [ 1180.494341][T15160] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1180.523915][T12581] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1180.704527][ T30] audit: type=1326 audit(1770339081.063:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.0.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe38e2eb9 code=0x7ffc0000 [ 1180.748148][T15179] loop4: detected capacity change from 0 to 256 [ 1180.765561][T13795] rndis_host 6-1:253.0: skipping garbage [ 1180.798872][T13795] usb 6-1: USB disconnect, device number 13 [ 1180.918800][ T30] audit: type=1326 audit(1770339081.063:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.0.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe38e2eb9 code=0x7ffc0000 [ 1180.942845][ T30] audit: type=1326 audit(1770339081.073:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.0.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effe38e2eb9 code=0x7ffc0000 [ 1180.972606][ T30] audit: type=1326 audit(1770339081.073:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.0.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe38e2eb9 code=0x7ffc0000 [ 1180.997766][ T30] audit: type=1326 audit(1770339081.073:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.0.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe38e2eb9 code=0x7ffc0000 [ 1181.022931][ T30] audit: type=1326 audit(1770339081.073:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.0.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7effe38e2eb9 code=0x7ffc0000 [ 1181.038093][T15179] attempt to access beyond end of device [ 1181.038093][T15179] loop4: rw=2049, want=544, limit=256 [ 1181.059778][ T30] audit: type=1326 audit(1770339081.073:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.0.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe38e2eb9 code=0x7ffc0000 [ 1181.083513][T15179] attempt to access beyond end of device [ 1181.083513][T15179] loop4: rw=2049, want=672, limit=256 [ 1181.088816][T15184] xt_hashlimit: size too large, truncated to 1048576 [ 1181.102919][ T30] audit: type=1326 audit(1770339081.073:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.0.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe38e2eb9 code=0x7ffc0000 [ 1181.173910][T12581] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 1181.182025][T12581] usb 2-1: config 0 has no interface number 0 [ 1181.188586][T12581] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1181.197784][T12581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.214115][T12581] usb 2-1: config 0 descriptor?? [ 1181.254271][T12581] usb 2-1: bad CDC descriptors [ 1181.439845][T13795] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1181.453865][T15199] hub 8-0:1.0: USB hub found [ 1181.468120][T15199] hub 8-0:1.0: 1 port detected [ 1181.486151][T15170] loop1: detected capacity change from 0 to 4096 [ 1181.603001][T15201] overlayfs: failed to resolve './bus': -2 [ 1181.983214][T15170] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1182.001306][T15170] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1182.112048][ T8050] usb 2-1: USB disconnect, device number 93 [ 1182.184107][T13795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.573334][T14976] udevd[14976]: symlink '../../loop1' '/dev/disk/by-diskseq/3075.tmp-b7:1' failed: Read-only file system [ 1182.593313][T15052] udevd[15052]: symlink '../../loop0' '/dev/disk/by-diskseq/3061.tmp-b7:0' failed: Read-only file system [ 1182.612943][T14978] udevd[14978]: symlink '../../loop5' '/dev/disk/by-diskseq/3070.tmp-b7:5' failed: Read-only file system [ 1182.631777][T13795] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1182.653115][T13795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.662017][T14976] udevd[14976]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1182.690583][T15052] udevd[15052]: symlink '../../loop4' '/dev/disk/by-diskseq/3074.tmp-b7:4' failed: Read-only file system [ 1182.736767][T13795] usb 4-1: config 0 descriptor?? [ 1182.757141][T15052] udevd[15052]: symlink '../../loop4' '/dev/disk/by-diskseq/3074.tmp-b7:4' failed: Read-only file system [ 1182.811288][T15207] loop5: detected capacity change from 0 to 40427 [ 1182.894569][T15207] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 1182.926719][T15207] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1182.939010][T15207] F2FS-fs (loop5): invalid crc value [ 1182.976302][T15207] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1183.003846][T12584] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1183.021763][T15207] F2FS-fs (loop5): Inconsistent i_blocks, ino:3, iblocks:0, sectors:8 [ 1183.037394][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-diskseq/3076.tmp-b7:5' failed: Read-only file system [ 1183.054904][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system [ 1183.077224][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-diskseq/3076.tmp-b7:5' failed: Read-only file system [ 1183.088995][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system [ 1183.108620][T15207] netlink: 'syz.5.3523': attribute type 4 has an invalid length. [ 1183.117961][T15207] overlayfs: missing 'lowerdir' [ 1183.129732][T15207] SELinux: policydb table sizes (86,37) do not match mine (8,7) [ 1183.150512][T15207] SELinux: failed to load policy [ 1183.188091][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3518'. [ 1183.202542][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3518'. [ 1183.214435][T13795] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 1183.224957][T13795] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input175 [ 1183.281917][T15207] loop5: detected capacity change from 0 to 40427 [ 1183.305408][T13795] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1183.358055][T15207] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0) [ 1183.369452][T15207] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1183.379266][T15207] F2FS-fs (loop5): invalid crc value [ 1183.391826][T15207] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1183.398962][T12584] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 1183.409706][T12584] usb 1-1: config 0 has no interface number 0 [ 1183.429899][T12584] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1183.440984][T12584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.449722][T12584] usb 1-1: config 0 descriptor?? [ 1183.456071][T15207] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1183.463196][T15207] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1183.494321][T12584] usb 1-1: bad CDC descriptors [ 1183.707944][T15208] loop0: detected capacity change from 0 to 4096 [ 1183.757409][T15208] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1183.766832][T15208] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1183.793785][T12581] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1183.843153][T13795] usb 1-1: USB disconnect, device number 110 [ 1183.943671][T12584] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1183.987013][ T8050] usb 4-1: USB disconnect, device number 113 [ 1184.154476][T12581] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 1184.162663][T12581] usb 5-1: config 0 has no interface number 0 [ 1184.168807][T12581] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1184.177915][T12581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.186738][T12581] usb 5-1: config 0 descriptor?? [ 1184.224118][T12581] usb 5-1: bad CDC descriptors [ 1184.253726][ T896] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1184.313723][T12584] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1184.321865][T12584] usb 6-1: config 0 has no interface number 0 [ 1184.328019][T12584] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1184.337091][T12584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.345626][T12584] usb 6-1: config 0 descriptor?? [ 1184.384086][T12584] usb 6-1: bad CDC descriptors [ 1184.404137][T15238] loop0: detected capacity change from 0 to 256 [ 1184.436356][T15228] loop4: detected capacity change from 0 to 4096 [ 1184.494920][T15228] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1184.506836][T15238] attempt to access beyond end of device [ 1184.506836][T15238] loop0: rw=2049, want=544, limit=256 [ 1184.518118][T15228] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1184.518398][T15238] attempt to access beyond end of device [ 1184.518398][T15238] loop0: rw=2049, want=1024, limit=256 [ 1184.561551][T15242] loop3: detected capacity change from 0 to 256 [ 1184.569890][T15238] attempt to access beyond end of device [ 1184.569890][T15238] loop0: rw=2049, want=3192, limit=256 [ 1184.592024][T15238] attempt to access beyond end of device [ 1184.592024][T15238] loop0: rw=2049, want=3776, limit=256 [ 1184.617752][T15243] xt_hashlimit: size too large, truncated to 1048576 [ 1184.629066][T15233] loop5: detected capacity change from 0 to 4096 [ 1184.634652][ T896] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 1184.643633][ T896] usb 2-1: config 0 has no interface number 0 [ 1184.649746][ T896] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1184.662240][ T896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.674913][ T896] usb 2-1: config 0 descriptor?? [ 1184.693369][T12584] usb 5-1: USB disconnect, device number 103 [ 1184.705647][T15233] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1184.714391][ T896] usb 2-1: bad CDC descriptors [ 1184.746287][T15242] attempt to access beyond end of device [ 1184.746287][T15242] loop3: rw=2049, want=544, limit=256 [ 1184.760813][T15233] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1184.789431][T15242] attempt to access beyond end of device [ 1184.789431][T15242] loop3: rw=2049, want=1024, limit=256 [ 1184.828132][T15245] xt_hashlimit: size too large, truncated to 1048576 [ 1184.855021][T15242] attempt to access beyond end of device [ 1184.855021][T15242] loop3: rw=2049, want=1888, limit=256 [ 1184.951154][T12584] usb 6-1: USB disconnect, device number 14 [ 1184.958418][T15236] loop1: detected capacity change from 0 to 4096 [ 1185.007414][T15236] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1185.036703][T15236] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1185.166627][T12584] usb 2-1: USB disconnect, device number 94 [ 1185.281763][T15253] loop4: detected capacity change from 0 to 8192 [ 1185.862081][T15261] loop5: detected capacity change from 0 to 128 [ 1185.890574][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1185.890590][ T30] audit: type=1400 audit(1770339086.303:3415): avc: denied { getopt } for pid=15262 comm="syz.0.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1185.924575][T15261] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1185.938288][T15261] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1185.949054][T15261] ext2 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1185.963031][T15266] loop1: detected capacity change from 0 to 16 [ 1185.971679][ T30] audit: type=1400 audit(1770339086.383:3416): avc: denied { ioctl } for pid=15260 comm="syz.5.3536" path="/83/file1/file1" dev="loop5" ino=12 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1186.014712][T15266] erofs: (device loop1): mounted with root inode @ nid 36. [ 1186.193981][ T896] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1186.343602][ T8050] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1186.463530][ T896] usb 1-1: device descriptor read/64, error -71 [ 1186.821323][ T30] audit: type=1326 audit(1770339087.094:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.3.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7b9ddeb9 code=0x7ffc0000 [ 1186.847432][ T30] audit: type=1326 audit(1770339087.094:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.3.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7b9ddeb9 code=0x7ffc0000 [ 1186.871682][ T8050] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1186.881353][T15283] loop3: p1 < > p3 < p5 > p4 [ 1186.886136][T15283] loop3: partition table partially beyond EOD, truncated [ 1186.893741][T15283] loop3: p1 start 261888 is beyond EOD, truncated [ 1186.992136][ T30] audit: type=1326 audit(1770339087.094:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.3.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3c7b9ddeb9 code=0x7ffc0000 [ 1187.025851][ T30] audit: type=1326 audit(1770339087.094:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.3.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7b9ddeb9 code=0x7ffc0000 [ 1187.048048][ T8050] usb 2-1: config 0 has no interface number 0 [ 1187.055559][ T8050] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1187.066613][ T30] audit: type=1326 audit(1770339087.094:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.3.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7b9ddeb9 code=0x7ffc0000 [ 1187.096135][ T30] audit: type=1326 audit(1770339087.094:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.3.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3c7b9ddeb9 code=0x7ffc0000 [ 1187.123577][ T30] audit: type=1326 audit(1770339087.104:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.3.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7b9ddeb9 code=0x7ffc0000 [ 1187.153307][ T30] audit: type=1326 audit(1770339087.104:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.3.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7b9ddeb9 code=0x7ffc0000 [ 1187.263490][ T896] usb 1-1: device descriptor read/64, error -71 [ 1187.263528][ T8050] usb 2-1: New USB device found, idVendor=0af0, idProduct=6501, bcdDevice= 4.82 [ 1187.279335][ T8050] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.287841][ T8050] usb 2-1: Product: syz [ 1187.292027][ T8050] usb 2-1: Manufacturer: syz [ 1187.296854][ T8050] usb 2-1: SerialNumber: syz [ 1187.302039][ T8050] usb 2-1: config 0 descriptor?? [ 1187.323559][T15269] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1187.453509][T13795] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1187.491498][T15290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3546'. [ 1187.533511][ T896] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1187.549450][ T8050] usb 2-1: USB disconnect, device number 95 [ 1187.573560][T12584] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1187.763586][ T20] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1187.803493][ T896] usb 1-1: device descriptor read/64, error -71 [ 1187.813519][T13795] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 1187.821741][T13795] usb 5-1: config 0 has no interface number 0 [ 1187.827888][T13795] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1187.837055][T13795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.845602][T13795] usb 5-1: config 0 descriptor?? [ 1187.884181][T13795] usb 5-1: bad CDC descriptors [ 1187.933539][T12584] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.943802][T12584] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1188.013543][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 1188.033577][T12584] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1188.042764][T12584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1188.050797][T12584] usb 6-1: SerialNumber: syz [ 1188.065325][T15052] udevd[15052]: symlink '../../loop1' '/dev/disk/by-diskseq/3096.tmp-b7:1' failed: Read-only file system [ 1188.094458][T12584] usb 6-1: bad CDC descriptors [ 1188.192440][T15294] hub 8-0:1.0: USB hub found [ 1188.197735][T15294] hub 8-0:1.0: 1 port detected [ 1188.295518][ T20] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1188.295657][ T896] usb 1-1: device descriptor read/64, error -71 [ 1188.311365][ T20] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1188.320154][ T20] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1188.332375][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1188.335183][T15287] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1188.353892][ T20] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1188.397226][T15052] udevd[15052]: symlink '../../loop4' '/dev/disk/by-diskseq/3103.tmp-b7:4' failed: Read-only file system [ 1188.413141][T15052] udevd[15052]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1188.435113][ T896] usb usb1-port1: attempt power cycle [ 1188.440666][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1188.453805][ T20] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1188.462924][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.471872][ T20] usb 4-1: config 0 descriptor?? [ 1188.475412][T15287] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1188.491754][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3103.tmp-b7:4' failed: Read-only file system [ 1188.514602][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1188.554338][ T334] usb 5-1: USB disconnect, device number 104 [ 1188.801470][T15290] set_capacity_and_notify: 3 callbacks suppressed [ 1188.801484][T15290] loop3: detected capacity change from 0 to 40427 [ 1188.843408][ T896] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1188.857874][T15290] F2FS-fs (loop3): invalid crc value [ 1188.865023][T15290] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1188.872181][T14976] udevd[14976]: symlink '../../loop3' '/dev/disk/by-diskseq/3104.tmp-b7:3' failed: Read-only file system [ 1188.884441][T14976] udevd[14976]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 1188.930797][T15223] udevd[15223]: symlink '../../loop1' '/dev/disk/by-diskseq/3096.tmp-b7:1' failed: Read-only file system [ 1188.942630][T14978] udevd[14978]: symlink '../../loop0' '/dev/disk/by-diskseq/3088.tmp-b7:0' failed: Read-only file system [ 1188.953497][ T896] usb 1-1: device descriptor read/8, error -71 [ 1188.962510][T15290] F2FS-fs (loop3): Start checkpoint disabled! [ 1188.970075][T15290] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1188.974299][T14976] udevd[14976]: symlink '../../loop3' '/dev/disk/by-diskseq/3104.tmp-b7:3' failed: Read-only file system [ 1189.004138][ T20] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1189.278244][ T896] usb 1-1: device descriptor read/8, error -71 [ 1189.314207][ T332] usb 4-1: USB disconnect, device number 114 [ 1189.344760][ T332] usblp0: removed [ 1189.576631][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3553'. [ 1189.589631][T15314] loop4: detected capacity change from 0 to 128 [ 1189.863153][ T353] attempt to access beyond end of device [ 1189.863153][ T353] loop3: rw=2049, want=40976, limit=40427 [ 1189.895206][T15324] hub 8-0:1.0: USB hub found [ 1189.899988][T15324] hub 8-0:1.0: 1 port detected [ 1190.035770][ T332] usb 6-1: USB disconnect, device number 15 [ 1190.383346][ T896] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1190.473666][T13795] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1190.603355][ T896] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 1190.623796][ T896] usb 1-1: config 0 has no interface number 0 [ 1190.629983][ T896] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1190.639534][ T896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.653436][ T896] usb 1-1: config 0 descriptor?? [ 1190.703906][ T896] usb 1-1: bad CDC descriptors [ 1190.733301][T13795] usb 4-1: Using ep0 maxpacket: 16 [ 1190.863379][T13795] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.883326][T13795] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.893549][T13795] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1190.926869][T13795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1190.945974][T13795] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1190.959608][T15326] loop0: detected capacity change from 0 to 4096 [ 1190.971591][T13795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.002031][T13795] usb 4-1: config 0 descriptor?? [ 1191.051362][T15326] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1191.089333][T15326] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1191.125118][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1191.125133][ T30] audit: type=1400 audit(1770339091.544:3458): avc: denied { watch watch_reads } for pid=15382 comm="syz.1.3580" path="/30/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1191.309147][T12581] usb 1-1: USB disconnect, device number 114 [ 1191.423328][ T896] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1191.457314][T15343] loop3: detected capacity change from 0 to 1024 [ 1191.496783][T13795] hid (null): global environment stack underflow [ 1191.699513][T15343] loop3: detected capacity change from 0 to 256 [ 1191.738658][T15343] exfat: Deprecated parameter 'codepage' [ 1191.744640][T15343] exfat: Bad value for 'codepage' [ 1191.783265][ T896] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1191.803129][ T896] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.813344][ T896] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1191.820094][ T896] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1191.829418][ T896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.839450][ T896] usb 6-1: config 0 descriptor?? [ 1191.980169][T15405] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1191.989611][T15405] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1191.993625][T12581] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1192.115046][ T30] audit: type=1400 audit(1770339092.524:3459): avc: denied { append } for pid=15411 comm="syz.1.3591" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1192.263198][T12581] usb 5-1: Using ep0 maxpacket: 16 [ 1192.324244][ T896] hid-generic 0003:17EF:60EE.0005: unknown main item tag 0x0 [ 1192.331704][ T896] hid-generic 0003:17EF:60EE.0005: unknown main item tag 0x0 [ 1192.339155][ T896] hid-generic 0003:17EF:60EE.0005: unknown main item tag 0x0 [ 1192.346654][ T896] hid-generic 0003:17EF:60EE.0005: unknown main item tag 0x0 [ 1192.354072][ T896] hid-generic 0003:17EF:60EE.0005: unknown main item tag 0x0 [ 1192.361992][ T896] hid-generic 0003:17EF:60EE.0005: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.5-1/input0 [ 1192.393293][T12581] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1192.402404][T12581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.411584][T12581] usb 5-1: config 0 descriptor?? [ 1192.453927][T12581] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1192.525040][ T896] usb 6-1: USB disconnect, device number 16 [ 1192.673211][T12581] usb 5-1: Detected FT8U232AM [ 1192.678717][T12581] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1192.688073][T12581] usb 5-1: USB disconnect, device number 105 [ 1192.695186][T12581] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1192.704871][T12581] ftdi_sio 5-1:0.0: device disconnected [ 1192.759157][ T30] audit: type=1400 audit(1770339093.164:3460): avc: denied { append } for pid=15415 comm="syz.0.3592" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1192.816325][ T30] audit: type=1400 audit(1770339093.224:3461): avc: denied { relabelfrom } for pid=15421 comm="syz.0.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1192.837084][ T30] audit: type=1400 audit(1770339093.224:3462): avc: denied { relabelto } for pid=15421 comm="syz.0.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1192.951633][ T30] audit: type=1400 audit(1770339093.354:3463): avc: denied { map } for pid=15423 comm="syz.0.3596" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1193.004563][ T30] audit: type=1400 audit(1770339093.394:3464): avc: denied { read } for pid=15427 comm="syz.0.3598" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1193.040871][ T30] audit: type=1400 audit(1770339093.394:3465): avc: denied { ioctl } for pid=15427 comm="syz.0.3598" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1193.092865][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-diskseq/3097.tmp-b7:5' failed: Read-only file system [ 1193.111237][T14976] udevd[14976]: symlink '../../loop0' '/dev/disk/by-diskseq/3114.tmp-b7:0' failed: Read-only file system [ 1193.125606][T12584] usb 4-1: USB disconnect, device number 115 [ 1193.140121][T14976] udevd[14976]: symlink '../../loop3' '/dev/disk/by-diskseq/3113.tmp-b7:3' failed: Read-only file system [ 1193.159275][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-diskseq/3097.tmp-b7:5' failed: Read-only file system [ 1193.171565][T15446] overlayfs: unrecognized mount option "verity=require" or missing value [ 1193.192101][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3108.tmp-b7:4' failed: Read-only file system [ 1193.218159][T15052] udevd[15052]: symlink '../../loop3' '/dev/disk/by-diskseq/3113.tmp-b7:3' failed: Read-only file system [ 1193.237498][T14976] udevd[14976]: symlink '../../loop0' '/dev/disk/by-diskseq/3114.tmp-b7:0' failed: Read-only file system [ 1193.261950][ T30] audit: type=1400 audit(1770339093.656:3466): avc: denied { shutdown } for pid=15449 comm="syz.5.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1193.297655][T14976] udevd[14976]: symlink '../../loop3' '/dev/disk/by-diskseq/3113.tmp-b7:3' failed: Read-only file system [ 1193.317979][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-diskseq/3097.tmp-b7:5' failed: Read-only file system [ 1193.329349][T13795] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1193.341535][ T30] audit: type=1400 audit(1770339093.656:3467): avc: denied { connect } for pid=15449 comm="syz.5.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1193.362700][T15463] 9pnet_virtio: no channels available for device ./bus [ 1193.374026][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3108.tmp-b7:4' failed: Read-only file system [ 1193.698791][T15487] 9pnet_virtio: no channels available for device syz [ 1193.721893][ T332] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1193.743399][T13795] usb 2-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1193.752514][T13795] usb 2-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 1193.762786][T13795] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1193.772134][T13795] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1193.781274][T13795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.978445][ T332] usb 5-1: Using ep0 maxpacket: 16 [ 1194.106947][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.117962][ T332] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1194.126987][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.135242][T13795] usb 2-1: string descriptor 0 read error: -71 [ 1194.142573][ T332] usb 5-1: config 0 descriptor?? [ 1194.147885][T13795] usb 2-1: USB disconnect, device number 96 [ 1194.181655][ T896] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1194.300515][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3634'. [ 1194.311247][T15517] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3634'. [ 1194.438209][ T896] usb 4-1: Using ep0 maxpacket: 16 [ 1194.566667][ T896] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1194.575065][ T896] usb 4-1: config 1 has no interface number 0 [ 1194.582743][ T896] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1194.593004][ T896] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1194.603304][ T896] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1194.738833][T15556] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1194.780428][ T896] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1194.790910][ T896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.791410][ T332] usbhid 5-1:0.0: can't add hid device: -71 [ 1194.799823][ T896] usb 4-1: Product: syz [ 1194.809252][ T896] usb 4-1: Manufacturer: syz [ 1194.811186][ T332] usbhid: probe of 5-1:0.0 failed with error -71 [ 1194.817868][ T896] usb 4-1: SerialNumber: syz [ 1194.828457][ T332] usb 5-1: USB disconnect, device number 106 [ 1194.865962][T15508] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1194.873220][T15508] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1194.897989][T15572] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1195.022057][T15598] loop5: detected capacity change from 0 to 7 [ 1195.168809][T15616] tmpfs: Unknown parameter 'usrquota' [ 1195.326482][T15508] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1195.333714][T15508] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1195.485989][ T332] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1195.560823][T12581] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1195.681491][T15629] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1195.689993][T15629] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1195.742576][ T332] usb 2-1: Using ep0 maxpacket: 8 [ 1195.817509][ T896] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1195.828313][T12581] usb 5-1: Using ep0 maxpacket: 8 [ 1195.881656][ T896] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1195.892449][ T332] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1195.911378][ T332] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1195.930453][ T332] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1195.935385][ T896] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: 0 [ 1195.956457][T12581] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1195.964658][T12581] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1195.980028][ T896] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2e:55:73:1b:d9:2f [ 1196.003325][T12581] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1196.024706][T12581] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1196.041958][T12581] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1196.070949][T12581] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1196.089308][T12581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.138298][ T332] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1196.158243][ T332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.175088][ T332] usb 2-1: Product: syz [ 1196.181235][T12581] usb 4-1: USB disconnect, device number 116 [ 1196.188909][T12581] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1196.196851][ T332] usb 2-1: Manufacturer: syz [ 1196.212321][ T332] usb 2-1: SerialNumber: syz [ 1196.288053][T12581] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1196.303497][T12581] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1196.323342][T12581] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1196.443378][T15666] 9pnet_virtio: no channels available for device syz [ 1196.566013][ T332] usb 2-1: 2:1 : sample bitwidth 202 in over sample bytes 1 [ 1196.584410][ T332] usb 2-1: 2:1 : invalid channels 0 [ 1196.620655][ T332] usb 2-1: USB disconnect, device number 97 [ 1197.246941][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1197.246960][ T30] audit: type=1400 audit(1770339097.388:3479): avc: denied { getattr } for pid=15717 comm="syz.1.3705" path="/proc/145/cgroup" dev="nsfs" ino=4026532287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1197.314288][ T334] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1197.523497][T15724] overlayfs: failed to resolve './bus': -2 [ 1197.582023][ T334] usb 4-1: Using ep0 maxpacket: 32 [ 1197.709921][ T334] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1197.718408][ T334] usb 4-1: config 0 has no interface number 0 [ 1197.724777][ T334] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1197.913122][ T334] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1197.940087][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.954625][ T334] usb 4-1: Product: syz [ 1197.958951][ T334] usb 4-1: Manufacturer: syz [ 1197.963859][ T334] usb 4-1: SerialNumber: syz [ 1197.969054][ T334] usb 4-1: config 0 descriptor?? [ 1197.977286][ T332] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1197.988267][T15704] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1198.031087][T15768] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1198.224992][T15704] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1198.233783][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 1198.306950][T15790] serio: Serial port ptm0 [ 1198.362147][ T332] usb 1-1: config 173 has too many interfaces: 43, using maximum allowed: 32 [ 1198.371469][ T332] usb 1-1: config 173 has 1 interface, different from the descriptor's value: 43 [ 1198.380867][ T332] usb 1-1: config 173 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.392123][ T332] usb 1-1: config 173 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.402131][ T332] usb 1-1: config 173 interface 0 has no altsetting 0 [ 1198.408995][ T332] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1198.418211][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.500139][T12581] usb 5-1: USB disconnect, device number 107 [ 1198.519621][T14978] udevd[14978]: symlink '../../loop5' '/dev/disk/by-diskseq/3116.tmp-b7:5' failed: Read-only file system [ 1198.539189][T14997] udevd[14997]: symlink '../../loop4' '/dev/disk/by-diskseq/3108.tmp-b7:4' failed: Read-only file system [ 1198.562303][T14978] udevd[14978]: symlink '../../loop4' '/dev/disk/by-diskseq/3108.tmp-b7:4' failed: Read-only file system [ 1198.593779][T15223] udevd[15223]: symlink '../../loop5' '/dev/disk/by-diskseq/3116.tmp-b7:5' failed: Read-only file system [ 1198.630950][T14978] udevd[14978]: symlink '../../loop5' '/dev/disk/by-diskseq/3116.tmp-b7:5' failed: Read-only file system [ 1198.666055][T14978] udevd[14978]: symlink '../../loop5' '/dev/disk/by-diskseq/3116.tmp-b7:5' failed: Read-only file system [ 1198.684756][T15741] UDC core: couldn't find an available UDC or it's busy: -16 [ 1198.692203][T15741] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1198.709469][T14978] udevd[14978]: symlink '../../loop5' '/dev/disk/by-diskseq/3116.tmp-b7:5' failed: Read-only file system [ 1198.765922][T14978] udevd[14978]: symlink '../../loop5' '/dev/disk/by-diskseq/3116.tmp-b7:5' failed: Read-only file system [ 1198.791427][T14978] udevd[14978]: symlink '../../loop4' '/dev/disk/by-diskseq/3108.tmp-b7:4' failed: Read-only file system [ 1198.818048][T14978] udevd[14978]: symlink '../../loop4' '/dev/disk/by-diskseq/3108.tmp-b7:4' failed: Read-only file system [ 1198.981130][ T30] audit: type=1400 audit(1770339099.006:3480): avc: denied { mounton } for pid=15834 comm="syz.1.3753" path="/67/file0" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1199.050702][T15845] binder: 15844:15845 unknown command 0 [ 1199.056301][T15845] binder: 15844:15845 ioctl c0306201 200000000080 returned -22 [ 1199.121191][ T332] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1199.159479][T13795] usb 1-1: USB disconnect, device number 115 [ 1199.277834][T15871] kvm [15870]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 1199.287296][T15871] kvm [15870]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 1199.300417][T15871] APIC base relocation is unsupported by KVM [ 1199.377795][ T332] usb 5-1: Using ep0 maxpacket: 8 [ 1199.500926][T15888] pimreg0: tun_chr_ioctl cmd 2147767507 [ 1199.516839][ T332] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1199.525237][ T332] usb 5-1: config 179 has no interface number 0 [ 1199.531607][ T332] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1199.542692][ T332] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1199.553929][ T332] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1199.565072][ T332] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1199.576523][ T332] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1199.589756][ T332] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1199.598800][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.623764][T15821] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1199.881150][ T332] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input176 [ 1200.086958][T15821] UDC core: couldn't find an available UDC or it's busy: -16 [ 1200.094880][T15821] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1200.104235][ T896] usb 5-1: USB disconnect, device number 108 [ 1200.115517][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1200.123832][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1200.132210][ T896] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1200.789199][ T334] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1200.813521][ T334] asix: probe of 4-1:0.188 failed with error -71 [ 1200.821422][ T334] usb 4-1: USB disconnect, device number 117 [ 1201.163673][T13795] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1201.559009][T13795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.568809][T13795] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1201.578177][T13795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.591751][T13795] usb 6-1: config 0 descriptor?? [ 1201.665840][ T332] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1202.061474][ T332] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1202.070235][ T332] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1202.080503][ T332] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1202.089549][ T332] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1202.110983][T13795] wacom 0003:056A:033B.0007: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 1202.121183][T13795] wacom 0003:056A:033B.0007: hidraw0: USB HID v0.00 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 1202.133682][T13795] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:033B.0007/input/input177 [ 1202.221889][ T332] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1202.231802][ T332] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1202.239882][ T332] usb 1-1: Product: syz [ 1202.246602][ T332] usb 1-1: Manufacturer: syz [ 1202.264670][T15987] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1202.286402][ T332] cdc_wdm 1-1:1.0: skipping garbage [ 1202.291658][ T332] cdc_wdm 1-1:1.0: skipping garbage [ 1202.296936][ T332] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1202.319483][T15959] UDC core: couldn't find an available UDC or it's busy: -16 [ 1202.326889][T15959] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1202.335405][T15959] UDC core: couldn't find an available UDC or it's busy: -16 [ 1202.342872][T15959] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1202.351087][ T334] usb 6-1: USB disconnect, device number 17 [ 1202.450744][T16018] serio: Serial port ptm0 [ 1202.501636][T15987] UDC core: couldn't find an available UDC or it's busy: -16 [ 1202.509042][T15987] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1202.734478][T15987] UDC core: couldn't find an available UDC or it's busy: -16 [ 1202.742359][T15987] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1202.750676][ T332] usb 1-1: USB disconnect, device number 116 [ 1202.935231][T16053] loop5: detected capacity change from 0 to 8192 [ 1202.988390][T16059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1203.066452][ T334] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1203.319498][T16101] loop0: detected capacity change from 0 to 128 [ 1203.326010][ T334] usb 2-1: Using ep0 maxpacket: 32 [ 1203.390256][T16101] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1203.415390][T16101] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1203.426164][T16113] loop3: detected capacity change from 0 to 256 [ 1203.443531][T16112] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1203.453295][T16109] loop5: detected capacity change from 0 to 8192 [ 1203.472842][ T334] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1203.481147][ T334] usb 2-1: config 0 has no interface number 0 [ 1203.489165][ T334] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1203.507051][T16113] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 1203.675949][ T334] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1203.678794][T16136] serio: Serial port ptm0 [ 1203.688635][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.698778][ T334] usb 2-1: Product: syz [ 1203.703392][ T334] usb 2-1: Manufacturer: syz [ 1203.708122][ T334] usb 2-1: SerialNumber: syz [ 1203.716657][ T334] usb 2-1: config 0 descriptor?? [ 1203.750871][T16036] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1203.760176][T16145] loop4: detected capacity change from 0 to 256 [ 1203.773320][T16145] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1203.784165][T16145] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1203.795668][T16145] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1203.814617][ T30] audit: type=1400 audit(1770339103.533:3481): avc: denied { write } for pid=16144 comm="syz.4.3879" name="file1" dev="loop4" ino=1048699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1203.844563][ T30] audit: type=1400 audit(1770339103.561:3482): avc: denied { remove_name } for pid=16144 comm="syz.4.3879" name="file1" dev="loop4" ino=1048699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1203.869433][T14976] udevd[14976]: symlink '../../loop3' '/dev/disk/by-diskseq/3124.tmp-b7:3' failed: Read-only file system [ 1203.869695][ T30] audit: type=1400 audit(1770339103.561:3483): avc: denied { rename } for pid=16144 comm="syz.4.3879" name="file1" dev="loop4" ino=1048699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1203.904018][ T30] audit: type=1400 audit(1770339103.561:3484): avc: denied { unlink } for pid=16144 comm="syz.4.3879" name="file0" dev="loop4" ino=1048701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1203.931454][T14976] udevd[14976]: symlink '../../loop3' '/dev/disk/by-diskseq/3124.tmp-b7:3' failed: Read-only file system [ 1203.943219][ T896] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1203.956043][T14978] udevd[14978]: symlink '../../loop4' '/dev/disk/by-diskseq/3125.tmp-b7:4' failed: Read-only file system [ 1203.976438][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3125.tmp-b7:4' failed: Read-only file system [ 1203.991579][T16036] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1203.992511][T14978] udevd[14978]: symlink '../../loop3' '/dev/disk/by-diskseq/3124.tmp-b7:3' failed: Read-only file system [ 1204.013387][T16154] loop3: detected capacity change from 0 to 512 [ 1204.015335][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3126.tmp-b7:4' failed: Read-only file system [ 1204.053928][T14976] udevd[14976]: symlink '../../loop3' '/dev/disk/by-diskseq/3127.tmp-b7:3' failed: Read-only file system [ 1204.059918][T16154] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1204.075155][T14976] udevd[14976]: symlink '../../loop3' '/dev/disk/by-diskseq/3127.tmp-b7:3' failed: Read-only file system [ 1204.090365][T14976] udevd[14976]: symlink '../../loop3' '/dev/disk/by-diskseq/3127.tmp-b7:3' failed: Read-only file system [ 1204.319314][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3126.tmp-b7:4' failed: Read-only file system [ 1204.381671][ T896] usb 6-1: config 0 interface 0 altsetting 220 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1204.393965][ T896] usb 6-1: config 0 interface 0 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1204.407832][ T896] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1204.414950][ T896] usb 6-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1204.424704][ T896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.433747][ T896] usb 6-1: config 0 descriptor?? [ 1204.467167][T16134] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1204.550622][ T30] audit: type=1400 audit(1770339104.216:3485): avc: denied { write } for pid=16174 comm="syz.4.3891" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1204.787499][T16192] overlayfs: missing 'lowerdir' [ 1204.932472][T16198] serio: Serial port ptm0 [ 1204.938640][ T896] wacom 0003:056A:00B4.0008: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 1204.949016][ T896] wacom 0003:056A:00B4.0008: hidraw0: USB HID v0.01 Device [HID 056a:00b4] on usb-dummy_hcd.5-1/input0 [ 1204.960802][ T896] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00B4.0008/input/input180 [ 1205.087199][T12584] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1205.152870][ T896] usb 6-1: USB disconnect, device number 18 [ 1205.177728][T16202] overlayfs: missing 'lowerdir' [ 1205.354507][T12584] usb 5-1: Using ep0 maxpacket: 32 [ 1205.440396][T16219] overlayfs: missing 'lowerdir' [ 1205.482830][T12584] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1205.491112][T12584] usb 5-1: config 0 has no interface number 0 [ 1205.497544][T12584] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1205.675294][T12584] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1205.684480][T12584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.692915][T12584] usb 5-1: Product: syz [ 1205.697168][T12584] usb 5-1: Manufacturer: syz [ 1205.701775][T12584] usb 5-1: SerialNumber: syz [ 1205.716469][T12584] usb 5-1: config 0 descriptor?? [ 1205.784833][T16233] loop5: detected capacity change from 0 to 512 [ 1205.812568][T16233] attempt to access beyond end of device [ 1205.812568][T16233] loop5: rw=0, want=17179852715, limit=512 [ 1205.824658][T16233] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 1205.832850][T16233] FAT-fs (loop5): Filesystem has been set read-only [ 1206.369288][ T30] audit: type=1400 audit(1770339105.703:3486): avc: denied { create } for pid=16250 comm="syz.0.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1206.390862][ T30] audit: type=1400 audit(1770339105.712:3487): avc: denied { write } for pid=16250 comm="syz.0.3925" path="socket:[71823]" dev="sockfs" ino=71823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1206.438532][T12584] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1206.519914][T12581] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1206.701642][T12584] usb 4-1: Using ep0 maxpacket: 16 [ 1206.776484][T12581] usb 6-1: Using ep0 maxpacket: 16 [ 1206.829992][T12584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.840956][T12584] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1206.850021][T12584] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.859049][T12584] usb 4-1: config 0 descriptor?? [ 1206.904933][T12581] usb 6-1: config 1 has too many interfaces: 33, using maximum allowed: 32 [ 1206.913704][T12581] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 33 [ 1206.922902][T12581] usb 6-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.934112][T12581] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 1206.943989][T12581] usb 6-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1206.957317][T12581] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1206.990375][ T334] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1207.000688][ T334] asix: probe of 2-1:0.188 failed with error -71 [ 1207.013506][ T334] usb 2-1: USB disconnect, device number 98 [ 1207.023093][ T30] audit: type=1400 audit(1770339106.535:3488): avc: denied { execute } for pid=16259 comm="syz.0.3927" path="/112/file1" dev="tmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1207.046195][T12581] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1207.055624][T12581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1207.063689][T12581] usb 6-1: SerialNumber: syz [ 1207.086636][T16249] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1207.156659][ T20] usb 5-1: USB disconnect, device number 109 [ 1207.320589][T16291] serio: Serial port ptm0 [ 1207.326822][T16249] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1207.385959][T12584] usbhid 4-1:0.0: can't add hid device: -71 [ 1207.392072][T12584] usbhid: probe of 4-1:0.0 failed with error -71 [ 1207.400018][T12584] usb 4-1: USB disconnect, device number 118 [ 1207.531738][ T334] kernel write not supported for file /181/net/rt_cache (pid: 334 comm: kworker/0:3) [ 1207.560406][T16328] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1207.600616][T16337] overlayfs: missing 'lowerdir' [ 1207.641080][T16340] 9pnet: Insufficient options for proto=fd [ 1207.665188][T16350] loop4: detected capacity change from 0 to 128 [ 1207.677929][ T30] audit: type=1400 audit(1770339107.153:3489): avc: denied { bind } for pid=16345 comm="syz.1.3967" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1207.710955][ T30] audit: type=1400 audit(1770339107.171:3490): avc: denied { name_bind } for pid=16345 comm="syz.1.3967" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1207.733130][T16350] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1207.815733][T12581] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1207.867250][T16361] loop4: detected capacity change from 128 to 0 [ 1207.923721][T16372] loop3: detected capacity change from 0 to 1024 [ 1207.962457][ T5763] FAT-fs (loop4): Invalid FSINFO signature: 0x9b5161e4, 0x7762b6d1 (sector = 1) [ 1207.976244][T16372] EXT4-fs (loop3): Ignoring removed orlov option [ 1207.982737][T16372] EXT4-fs (loop3): Ignoring removed oldalloc option [ 1207.995360][T12584] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1208.013243][T16372] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000003,orlov,jqfmt=vfsold,data_err=ignore,resgid=0x0000000000000000,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 1208.183695][T16389] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf,. Quota mode: writeback. [ 1208.196800][T16389] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1208.273389][T12584] usb 2-1: Using ep0 maxpacket: 16 [ 1208.279605][ T8050] usb 6-1: USB disconnect, device number 19 [ 1208.295458][ T8050] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 1208.348168][T12581] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1208.401815][T12584] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1208.411368][T12584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.426078][T12584] usb 2-1: config 0 descriptor?? [ 1208.477260][T12584] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1208.604796][ T334] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1208.701082][T12584] usb 2-1: Detected FT232BM [ 1208.754571][T12581] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.764916][T12581] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1208.841633][T16433] set_capacity_and_notify: 1 callbacks suppressed [ 1208.841645][T16433] loop5: detected capacity change from 0 to 512 [ 1208.855659][T16433] EXT4-fs (loop5): Ignoring removed oldalloc option [ 1208.862984][ T334] usb 4-1: Using ep0 maxpacket: 16 [ 1208.868449][T16433] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 1208.886063][T16433] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #16: comm syz.5.3987: corrupted inode contents [ 1208.898099][T16433] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #16: comm syz.5.3987: mark_inode_dirty error [ 1208.909820][T16433] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #16: comm syz.5.3987: corrupted inode contents [ 1208.921937][T16433] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.3987: mark_inode_dirty error [ 1208.933478][T16433] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #16: comm syz.5.3987: corrupted inode contents [ 1208.945664][T16433] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1208.954410][T12581] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1208.954828][T16433] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #16: comm syz.5.3987: corrupted inode contents [ 1208.963970][T12581] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.976602][T16433] EXT4-fs error (device loop5): ext4_truncate:4310: inode #16: comm syz.5.3987: mark_inode_dirty error [ 1208.983805][T12581] usb 5-1: Product: syz [ 1208.995838][T16433] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1208.998870][T12581] usb 5-1: Manufacturer: syz [ 1209.009245][T16433] EXT4-fs (loop5): 1 truncate cleaned up [ 1209.012775][ T334] usb 4-1: config 173 has too many interfaces: 43, using maximum allowed: 32 [ 1209.018334][T16433] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,oldalloc,data=journal,resgid=0x0000000000000000,grpjquota=./mnt,,errors=continue. Quota mode: writeback. [ 1209.027983][T12581] usb 5-1: SerialNumber: syz [ 1209.045000][T16433] ext4 filesystem being mounted at /201/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1209.049333][ T334] usb 4-1: config 173 has 1 interface, different from the descriptor's value: 43 [ 1209.072858][T12581] usb 5-1: config 0 descriptor?? [ 1209.079168][ T334] usb 4-1: config 173 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.090316][ T334] usb 4-1: config 173 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.100345][ T334] usb 4-1: config 173 interface 0 has no altsetting 0 [ 1209.107235][ T334] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1209.116654][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.150114][T12584] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1209.157522][T12584] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1209.167644][T12584] usb 2-1: USB disconnect, device number 99 [ 1209.181217][T12584] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1209.191455][T12584] ftdi_sio 2-1:0.0: device disconnected [ 1209.208307][T16439] loop5: detected capacity change from 0 to 16 [ 1209.239245][T16439] erofs: (device loop5): mounted with root inode @ nid 36. [ 1209.240215][T14976] udevd[14976]: symlink '../../loop5' '/dev/disk/by-diskseq/3139.tmp-b7:5' failed: Read-only file system [ 1209.260185][T14976] udevd[14976]: symlink '../../loop5' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:5' failed: Read-only file system [ 1209.295465][T14976] udevd[14976]: symlink '../../loop5' '/dev/disk/by-diskseq/3139.tmp-b7:5' failed: Read-only file system [ 1209.314411][T14976] udevd[14976]: symlink '../../loop5' '/dev/disk/by-diskseq/3139.tmp-b7:5' failed: Read-only file system [ 1209.329851][T14976] udevd[14976]: symlink '../../loop5' '/dev/disk/by-diskseq/3139.tmp-b7:5' failed: Read-only file system [ 1209.345243][T14976] udevd[14976]: symlink '../../loop5' '/dev/disk/by-diskseq/3140.tmp-b7:5' failed: Read-only file system [ 1209.384424][T12581] usb 5-1: USB disconnect, device number 110 [ 1209.397226][T16395] UDC core: couldn't find an available UDC or it's busy: -16 [ 1209.404713][T16395] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1209.576557][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1209.576665][ T30] audit: type=1400 audit(1770339108.892:3493): avc: denied { read write } for pid=16440 comm="syz.5.3990" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1209.616432][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.624493][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.632890][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.640620][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.648752][ T30] audit: type=1400 audit(1770339108.892:3494): avc: denied { open } for pid=16440 comm="syz.5.3990" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1209.673764][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.681781][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.690158][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.697966][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.705701][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.713675][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.733099][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.763144][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.777632][T14978] udevd[14978]: symlink '../../loop1' '/dev/disk/by-diskseq/3096.tmp-b7:1' failed: Read-only file system [ 1209.806015][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.816195][T16450] serio: Serial port ptm0 [ 1209.821736][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.829484][T12584] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1209.845352][T12584] hid-generic 00A0:0006:0003.0009: hidraw0: HID v0.05 Device [syz0] on syz0 [ 1209.861261][ T334] hid (null): unknown global tag 0xd [ 1209.866741][ T334] hid (null): unknown global tag 0xc [ 1209.888846][ T334] usb 4-1: USB disconnect, device number 119 [ 1209.940731][T14976] udevd[14976]: symlink '../../loop1' '/dev/disk/by-diskseq/3096.tmp-b7:1' failed: Read-only file system [ 1209.956914][T15052] udevd[15052]: symlink '../../loop4' '/dev/disk/by-diskseq/3133.tmp-b7:4' failed: Read-only file system [ 1209.971356][T16456] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1209.980251][T16456] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1209.992504][T16456] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1210.000496][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3133.tmp-b7:4' failed: Read-only file system [ 1210.115629][T16477] xt_hashlimit: size too large, truncated to 1048576 [ 1210.313625][T16485] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1210.337046][T16485] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1210.349719][T16485] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1210.410107][T16487] loop5: detected capacity change from 0 to 1024 [ 1210.471096][T16487] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 1210.522546][ T30] audit: type=1400 audit(1770339109.809:3495): avc: denied { unlink } for pid=16486 comm="syz.5.4009" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1210.621030][T16506] loop5: detected capacity change from 0 to 128 [ 1210.663801][T16506] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1210.674588][T16506] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1210.685742][ T30] audit: type=1400 audit(1770339109.958:3496): avc: denied { mount } for pid=16515 comm="syz.4.4020" name="/" dev="ramfs" ino=72231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1210.719397][ T30] audit: type=1400 audit(1770339109.986:3497): avc: denied { execute } for pid=16515 comm="syz.4.4020" name="file0" dev="ramfs" ino=71655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1210.724241][T16506] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1210.759517][ T30] audit: type=1400 audit(1770339110.015:3498): avc: denied { execute_no_trans } for pid=16515 comm="syz.4.4020" path="/file0" dev="ramfs" ino=71655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1210.791929][T16506] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-avx2)" [ 1210.804758][T16506] fscrypt: loop5: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 14 [ 1211.414937][ T30] audit: type=1400 audit(1770339110.641:3499): avc: denied { execmem } for pid=16575 comm="syz.4.4047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1211.435350][T12581] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1211.466329][T16578] loop4: detected capacity change from 0 to 2048 [ 1211.497147][T16578] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1211.694686][T12581] usb 4-1: Using ep0 maxpacket: 16 [ 1211.738651][T16588] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1211.753758][T16588] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1211.766357][T16588] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1211.766357][T16588] [ 1211.776161][T16588] EXT4-fs (loop4): Total free blocks count 0 [ 1211.782205][T16588] EXT4-fs (loop4): Free/Dirty block details [ 1211.788138][T16588] EXT4-fs (loop4): free_blocks=2415919504 [ 1211.797637][T16588] EXT4-fs (loop4): dirty_blocks=8192 [ 1211.802965][T16588] EXT4-fs (loop4): Block reservation details [ 1211.808982][T16588] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 1211.823102][T12581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.834109][T12581] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1211.843218][T12581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.852209][T12581] usb 4-1: config 0 descriptor?? [ 1212.272425][T12584] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1212.282813][ T30] audit: type=1400 audit(1770339111.361:3500): avc: denied { create } for pid=16595 comm="syz.0.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1212.507323][T12581] usbhid 4-1:0.0: can't add hid device: -71 [ 1212.513624][T12581] usbhid: probe of 4-1:0.0 failed with error -71 [ 1212.521002][T12581] usb 4-1: USB disconnect, device number 120 [ 1212.710464][T12584] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.720604][T12584] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1212.913752][T12584] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1212.922840][T12584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.930894][T12584] usb 5-1: Product: syz [ 1212.935074][T12584] usb 5-1: Manufacturer: syz [ 1212.939673][T12584] usb 5-1: SerialNumber: syz [ 1212.947707][T12584] usb 5-1: config 0 descriptor?? [ 1213.159503][ T30] audit: type=1400 audit(1770339112.269:3501): avc: denied { write } for pid=16638 comm="syz.1.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1213.228643][T16592] loop4: detected capacity change from 0 to 512 [ 1213.318718][T16592] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 1213.348372][ T30] audit: type=1400 audit(1770339112.287:3502): avc: denied { nlmsg_write } for pid=16638 comm="syz.1.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1213.417524][T16592] EXT4-fs (loop4): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 1213.498321][ T334] usb 5-1: USB disconnect, device number 111 [ 1213.524341][T16659] loop5: detected capacity change from 0 to 1024 [ 1213.603124][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.611176][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.618848][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.626995][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.634744][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.646221][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.660934][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.689251][T16659] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #3: block 1: comm syz.5.4081: lblock 1 mapped to illegal pblock 1 (length 1) [ 1213.707205][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.716865][T16659] EXT4-fs (loop5): Remounting filesystem read-only [ 1213.723750][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.733037][T16659] EXT4-fs error (device loop5): ext4_acquire_dquot:6225: comm syz.5.4081: Failed to acquire dquot type 0 [ 1213.745624][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.754008][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.763169][T16659] EXT4-fs (loop5): Remounting filesystem read-only [ 1213.771182][T16659] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.4081: Freeing blocks not in datazone - block = 0, count = 4096 [ 1213.785584][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.793984][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.803006][T16659] EXT4-fs (loop5): Remounting filesystem read-only [ 1213.809768][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.818948][T16659] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.4081: Invalid inode bitmap blk 0 in block_group 0 [ 1213.832798][ T332] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1213.843574][ T332] hid-generic 00A0:0006:0003.000B: hidraw0: HID v0.05 Device [syz0] on syz0 [ 1213.848536][T16659] EXT4-fs (loop5): Remounting filesystem read-only [ 1213.863506][ T5763] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 1213.868985][T16659] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 1213.886617][T16659] EXT4-fs (loop5): Remounting filesystem read-only [ 1213.893370][ T5763] EXT4-fs (loop5): Remounting filesystem read-only [ 1213.896655][T16659] EXT4-fs (loop5): 1 orphan inode deleted [ 1213.900815][ T5763] EXT4-fs error (device loop5): ext4_release_dquot:6261: comm kworker/u4:11: Failed to release dquot type 0 [ 1213.908009][T16659] EXT4-fs (loop5): mounted filesystem without journal. Opts: ; delalloc,delalloc,errors=remount-ro,nodiscard,barrier=0x0000000000000003,journal_dev=0x000000000000041b,. Quota mode: writeback. [ 1213.918781][ T5763] EXT4-fs (loop5): Remounting filesystem read-only [ 1213.958532][T16659] EXT4-fs (loop5): shut down requested (1) [ 1214.008121][T16671] overlayfs: missing 'workdir' [ 1214.143963][T16681] loop4: detected capacity change from 0 to 8192 [ 1214.230691][T16688] loop4: detected capacity change from 0 to 512 [ 1214.256145][T16688] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1214.266834][T16688] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1214.274082][T16688] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 1214.288710][T16688] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.4093: Failed to acquire dquot type 0 [ 1214.300504][T16688] EXT4-fs (loop4): 1 truncate cleaned up [ 1214.306531][T16688] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 1214.338688][T16688] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1214.379948][T16688] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 1214.432729][T16694] Illegal XDP return value 514, expect packet loss! [ 1214.630961][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3153.tmp-b7:4' failed: Read-only file system [ 1214.667342][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3153.tmp-b7:4' failed: Read-only file system [ 1214.674617][T16707] loop4: detected capacity change from 0 to 512 [ 1214.688308][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-diskseq/3149.tmp-b7:5' failed: Read-only file system [ 1214.755161][T16707] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1214.776527][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3154.tmp-b7:4' failed: Read-only file system [ 1214.791408][T16716] loop5: detected capacity change from 0 to 512 [ 1214.798315][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1214.818621][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3154.tmp-b7:4' failed: Read-only file system [ 1214.830997][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1214.845279][T16707] EXT4-fs (loop4): 1 truncate cleaned up [ 1214.851817][T16716] EXT4-fs (loop5): Unrecognized mount option "." or missing value [ 1214.864542][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-diskseq/3149.tmp-b7:5' failed: Read-only file system [ 1214.876075][T16707] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 1214.895391][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1214.921605][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3154.tmp-b7:4' failed: Read-only file system [ 1215.989668][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1215.989688][ T30] audit: type=1400 audit(1770339114.897:3504): avc: denied { nlmsg_read } for pid=16723 comm="syz.4.4106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1216.054597][T16733] 9pnet: Insufficient options for proto=fd [ 1216.190495][T16755] loop4: detected capacity change from 0 to 512 [ 1216.214900][T16755] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1216.222623][T16755] EXT4-fs (loop4): journaled quota format not specified [ 1217.885444][ T20] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1218.192357][T16823] loop4: detected capacity change from 0 to 512 [ 1218.270211][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.272777][T16823] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1218.281234][ T334] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 1218.289450][T16823] System zones: [ 1218.296829][ T20] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1218.297598][T16823] 0-2 [ 1218.300405][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.302648][ T20] usb 6-1: config 0 descriptor?? [ 1218.310356][T16823] , 18-18, 34-34 [ 1218.330014][T16823] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4143: bg 0: block 248: padding at end of block bitmap is not set [ 1218.344674][T16823] Quota error (device loop4): write_blk: dquota write failed [ 1218.352159][T16823] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1218.362402][T16823] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.4143: Failed to acquire dquot type 1 [ 1218.374409][T16823] EXT4-fs (loop4): 1 truncate cleaned up [ 1218.380099][T16823] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 1218.392511][T16823] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1218.412854][T16823] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.4143: deleted inode referenced: 12 [ 1218.520756][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.528465][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.535900][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.543599][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.551112][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.558563][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.566380][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.573962][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.581506][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.588963][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.597641][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.605716][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.613170][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.620642][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.628103][ T8050] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1218.636297][ T8050] hid-generic 00A0:0006:0003.000C: hidraw0: HID v0.05 Device [syz0] on syz0 [ 1218.676572][ T20] usbhid 6-1:0.0: can't add hid device: -71 [ 1218.682636][ T20] usbhid: probe of 6-1:0.0 failed with error -71 [ 1218.684439][T16839] fido_id[16839]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1218.689176][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.722877][ T20] usb 6-1: USB disconnect, device number 20 [ 1218.728938][ T334] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1218.742797][ T334] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1218.752833][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.769752][ T334] usb 4-1: config 0 descriptor?? [ 1219.019206][ T30] audit: type=1400 audit(1770339117.759:3505): avc: denied { remount } for pid=16859 comm="syz.4.4159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1219.047751][T16863] loop4: detected capacity change from 0 to 128 [ 1219.139580][T16863] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1219.150385][T16863] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.178986][ T20] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1219.222571][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4160'. [ 1219.350067][ T334] usbhid 4-1:0.0: can't add hid device: -71 [ 1219.356125][ T334] usbhid: probe of 4-1:0.0 failed with error -71 [ 1219.364161][ T334] usb 4-1: USB disconnect, device number 121 [ 1219.745258][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1219.756512][ T20] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 1219.765586][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.774831][ T20] usb 6-1: config 0 descriptor?? [ 1219.845184][T16880] loop3: detected capacity change from 0 to 512 [ 1219.888384][T16880] EXT4-fs (loop3): Ignoring removed nobh option [ 1219.894961][T16880] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1219.903300][T16880] EXT4-fs error (device loop3): __ext4_iget:4943: inode #11: block 1: comm syz.3.4166: invalid block [ 1219.914661][T16880] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4166: couldn't read orphan inode 11 (err -117) [ 1219.926760][T16880] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000080,bsddf,min_batch_time=0x0000000000000009,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 1219.994644][T15052] udevd[15052]: symlink '../../loop4' '/dev/disk/by-diskseq/3163.tmp-b7:4' failed: Read-only file system [ 1220.018964][T15052] udevd[15052]: symlink '../../loop4' '/dev/disk/by-diskseq/3163.tmp-b7:4' failed: Read-only file system [ 1220.048692][T15052] udevd[15052]: symlink '../../loop3' '/dev/disk/by-diskseq/3164.tmp-b7:3' failed: Read-only file system [ 1220.071248][T14978] udevd[14978]: symlink '../../loop4' '/dev/disk/by-diskseq/3165.tmp-b7:4' failed: Read-only file system [ 1220.084346][T15052] udevd[15052]: symlink '../../loop3' '/dev/disk/by-diskseq/3164.tmp-b7:3' failed: Read-only file system [ 1220.130110][T15052] udevd[15052]: symlink '../../loop4' '/dev/disk/by-diskseq/3165.tmp-b7:4' failed: Read-only file system [ 1220.151016][T15052] udevd[15052]: symlink '../../loop4' '/dev/disk/by-diskseq/3165.tmp-b7:4' failed: Read-only file system [ 1220.225924][T16914] 9pnet: Insufficient options for proto=fd [ 1220.365807][ T20] usbhid 6-1:0.0: can't add hid device: -71 [ 1220.371860][ T20] usbhid: probe of 6-1:0.0 failed with error -71 [ 1220.379773][ T20] usb 6-1: USB disconnect, device number 21 [ 1220.451358][ T896] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1220.609848][T14976] udevd[14976]: symlink '../../loop3' '/dev/disk/by-diskseq/3166.tmp-b7:3' failed: Read-only file system [ 1220.631193][T14976] udevd[14976]: symlink '../../loop3' '/dev/disk/by-diskseq/3166.tmp-b7:3' failed: Read-only file system [ 1220.642939][T16932] serio: Serial port ptm0 [ 1220.877251][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-diskseq/3157.tmp-b7:5' failed: Read-only file system [ 1220.911140][ T896] usb 5-1: Using ep0 maxpacket: 32 [ 1220.959046][T16945] loop3: detected capacity change from 0 to 8192 [ 1221.039512][ T896] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1221.052340][ T896] usb 5-1: config 0 has no interface number 0 [ 1221.058478][ T896] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1221.107206][T16951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.114504][T16951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.253882][ T896] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1221.262996][ T896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.296144][ T896] usb 5-1: Product: syz [ 1221.300359][ T896] usb 5-1: Manufacturer: syz [ 1221.304978][ T896] usb 5-1: SerialNumber: syz [ 1221.331545][ T896] usb 5-1: config 0 descriptor?? [ 1221.349689][T16908] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1221.404942][T16958] device batadv_slave_0 entered promiscuous mode [ 1221.420602][T16958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4199'. [ 1221.525841][T16957] device batadv_slave_0 left promiscuous mode [ 1221.586764][T16908] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1221.860228][T16985] loop5: detected capacity change from 0 to 128 [ 1221.884338][ T332] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1222.061834][T16985] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1222.134776][T16985] ext4 filesystem being mounted at /234/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1222.162394][ T332] usb 4-1: Using ep0 maxpacket: 8 [ 1222.313296][ T332] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1222.322411][ T332] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1222.332881][ T332] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1222.740191][ T332] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1222.749362][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.757431][ T332] usb 4-1: Product: syz [ 1222.761919][ T332] usb 4-1: Manufacturer: syz [ 1222.766558][ T332] usb 4-1: SerialNumber: syz [ 1223.103575][ T332] usb 4-1: 0:2 : does not exist [ 1223.110061][ T332] usb 4-1: USB disconnect, device number 122 [ 1223.301905][ T30] audit: type=1400 audit(2000000002.683:3506): avc: denied { setopt } for pid=17039 comm="syz.0.4235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1223.960062][ T30] audit: type=1326 audit(2000000003.300:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17068 comm="syz.3.4248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c7b9ddeb9 code=0x0 [ 1224.377790][ T896] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1224.389383][ T896] asix: probe of 5-1:0.188 failed with error -71 [ 1224.404055][ T896] usb 5-1: USB disconnect, device number 112 [ 1224.709007][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1224.716500][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1224.733338][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1224.762255][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1224.790841][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1224.814772][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1224.874765][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1224.952637][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1225.072201][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1225.117794][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1225.137876][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1225.158368][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1225.165812][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1225.198586][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1225.206035][T12584] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 1225.225720][T12584] hid-generic 00A0:0006:0003.000D: hidraw0: HID v0.05 Device [syz0] on syz0 [ 1225.363702][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3165.tmp-b7:4' failed: Read-only file system [ 1225.404788][T17146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4273'. [ 1225.460463][T15052] udevd[15052]: symlink '../../loop4' '/dev/disk/by-diskseq/3165.tmp-b7:4' failed: Read-only file system [ 1225.478920][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-diskseq/3170.tmp-b7:5' failed: Read-only file system [ 1225.498486][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3165.tmp-b7:4' failed: Read-only file system [ 1225.513495][T17162] loop4: detected capacity change from 0 to 128 [ 1225.523356][T14976] udevd[14976]: symlink '../../loop4' '/dev/disk/by-diskseq/3171.tmp-b7:4' failed: Read-only file system [ 1225.537664][T15052] udevd[15052]: symlink '../../loop5' '/dev/disk/by-diskseq/3170.tmp-b7:5' failed: Read-only file system [ 1225.556044][T17164] loop5: detected capacity change from 0 to 128 [ 1225.604251][T14976] udevd[14976]: symlink '../../loop5' '/dev/disk/by-diskseq/3172.tmp-b7:5' failed: Read-only file system [ 1225.604824][T15052] udevd[15052]: symlink '../../loop4' '/dev/disk/by-diskseq/3171.tmp-b7:4' failed: Read-only file system [ 1225.628416][T14976] udevd[14976]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 1225.635467][T15052] udevd[15052]: symlink '../../loop4' '/dev/disk/by-diskseq/3171.tmp-b7:4' failed: Read-only file system [ 1225.644126][T17166] serio: Serial port ptm0 [ 1225.659500][T17164] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1225.670816][T17164] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1225.684939][T17164] fscrypt: loop5: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1225.699954][ T30] audit: type=1400 audit(2000000005.922:3508): avc: denied { read } for pid=17163 comm="syz.5.4281" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1225.741576][ T30] audit: type=1400 audit(2000000005.959:3509): avc: denied { getopt } for pid=17172 comm="syz.0.4285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1225.789775][T17178] loop5: detected capacity change from 0 to 1024 [ 1225.831540][T17178] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1225.846873][T17178] VFS: Lookup of 'file0' in ext4 loop5 would have caused loop [ 1226.578057][ T30] audit: type=1404 audit(2000000262.751:3510): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 1226.608747][ T30] audit: type=1400 audit(2000000262.770:3511): avc: denied { bind } for pid=17211 comm="syz.5.4299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 1226.661531][ T30] audit: type=1400 audit(2000000262.770:3512): avc: denied { write } for pid=17211 comm="syz.5.4299" path="socket:[75232]" dev="sockfs" ino=75232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 1226.726285][ T30] audit: type=1400 audit(2000000262.779:3513): avc: denied { read write } for pid=14981 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1226.768712][ T30] audit: type=1400 audit(2000000262.808:3514): avc: denied { read } for pid=17215 comm="syz.4.4302" dev="nsfs" ino=4026532294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 1226.790319][ T30] audit: type=1400 audit(2000000262.808:3515): avc: denied { read write } for pid=13492 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1228.663530][ T30] kauditd_printk_skb: 126 callbacks suppressed [ 1228.663547][ T30] audit: type=1400 audit(2000000264.697:3642): avc: denied { map_create } for pid=17368 comm="syz.4.4371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1228.703708][ T30] audit: type=1400 audit(2000000264.725:3643): avc: denied { prog_load } for pid=17368 comm="syz.4.4371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1228.759771][ T30] audit: type=1400 audit(2000000264.725:3644): avc: denied { map_create } for pid=17368 comm="syz.4.4371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1228.816301][ T30] audit: type=1400 audit(2000000264.725:3645): avc: denied { prog_load } for pid=17368 comm="syz.4.4371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1228.878772][ T30] audit: type=1400 audit(2000000264.735:3646): avc: denied { read write } for pid=13492 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1228.931260][ T30] audit: type=1400 audit(2000000264.763:3647): avc: denied { map_create } for pid=17370 comm="syz.5.4369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1228.981362][ T30] audit: type=1400 audit(2000000264.763:3648): avc: denied { read write } for pid=14981 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1229.007591][ T30] audit: type=1400 audit(2000000264.763:3649): avc: denied { prog_load } for pid=17370 comm="syz.5.4369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1229.027211][ T30] audit: type=1400 audit(2000000264.763:3650): avc: denied { prog_load } for pid=17370 comm="syz.5.4369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1229.047682][ T30] audit: type=1400 audit(2000000264.763:3651): avc: denied { read } for pid=17370 comm="syz.5.4369" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 1232.444613][T17579] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4468'. [ 1233.966084][T17730] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17730 comm=syz.4.4540 [ 1233.987978][T17732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4541'. [ 1234.010712][ T30] kauditd_printk_skb: 316 callbacks suppressed [ 1234.010728][ T30] audit: type=1400 audit(2000000269.702:3968): avc: denied { read write } for pid=14981 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1234.041658][ T30] audit: type=1400 audit(2000000269.712:3969): avc: denied { read write } for pid=17735 comm="syz.4.4543" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1234.068359][ T30] audit: type=1400 audit(2000000269.758:3970): avc: denied { create } for pid=17737 comm="syz.0.4544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1234.526009][ T30] audit: type=1400 audit(2000000270.179:3971): avc: denied { map_create } for pid=17749 comm="syz.1.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1234.545378][ T30] audit: type=1400 audit(2000000270.179:3972): avc: denied { prog_load } for pid=17749 comm="syz.1.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1234.569826][ T30] audit: type=1400 audit(2000000270.179:3973): avc: denied { prog_load } for pid=17749 comm="syz.1.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1234.589318][ T30] audit: type=1400 audit(2000000270.179:3974): avc: denied { prog_load } for pid=17749 comm="syz.1.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1234.609950][ T30] audit: type=1400 audit(2000000270.179:3975): avc: denied { prog_load } for pid=17749 comm="syz.1.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1234.629946][ T30] audit: type=1400 audit(2000000270.198:3976): avc: denied { prog_load } for pid=17749 comm="syz.1.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1234.654141][ T30] audit: type=1400 audit(2000000270.198:3977): avc: denied { prog_load } for pid=17749 comm="syz.1.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1235.505224][T17806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.512538][T17806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.519619][T17806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.890658][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1236.209534][T17861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.216834][T17861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.374103][T17880] device batadv_slave_0 entered promiscuous mode [ 1236.587225][T17899] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1236.604719][T17899] device veth0_vlan left promiscuous mode [ 1236.610829][T17899] device veth0_vlan entered promiscuous mode [ 1236.618641][T17899] device veth1_macvtap left promiscuous mode [ 1236.625229][T17899] device veth1_macvtap entered promiscuous mode [ 1236.632823][T17899] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1236.640940][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1236.656295][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1236.663938][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1236.672341][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1236.680597][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.687671][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.695352][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1236.715644][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.722840][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.730492][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1236.739273][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1236.748219][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1236.770946][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1236.787956][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1236.806984][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1236.828427][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1236.837277][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1236.845657][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1236.854191][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1236.863296][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1236.872332][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1236.880791][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1236.896487][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1236.908090][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1236.919056][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1236.939878][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1236.959653][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1236.969126][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1236.978795][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1236.987269][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1236.996126][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1237.003859][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1237.011404][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1237.026057][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1237.034434][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1237.042325][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1237.055277][ T702] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1239.370513][T18128] netlink: 'syz.4.4717': attribute type 16 has an invalid length. [ 1239.381847][ T30] kauditd_printk_skb: 314 callbacks suppressed [ 1239.381862][ T30] audit: type=1400 audit(2000000274.726:4292): avc: denied { read write } for pid=13492 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1239.425527][T18128] netlink: 'syz.4.4717': attribute type 17 has an invalid length. [ 1239.439189][T18128] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1239.446847][T18128] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1239.454756][T18128] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1239.462292][ T30] audit: type=1400 audit(2000000274.791:4293): avc: denied { prog_load } for pid=18134 comm="syz.5.4720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1239.495532][ T30] audit: type=1400 audit(2000000274.791:4294): avc: denied { prog_load } for pid=18134 comm="syz.5.4720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1239.525198][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1239.535766][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1239.554979][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1239.565266][ T30] audit: type=1400 audit(2000000274.847:4295): avc: denied { read write } for pid=13492 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1239.596804][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1239.615270][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1239.631698][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1239.640887][ T30] audit: type=1400 audit(2000000274.922:4296): avc: denied { read write } for pid=14981 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1239.675062][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1239.700337][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1239.727656][ T30] audit: type=1400 audit(2000000274.941:4297): avc: denied { read write } for pid=14981 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1239.753047][ T9964] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1239.760659][ T9964] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1239.774790][ T30] audit: type=1400 audit(2000000274.950:4298): avc: denied { mounton } for pid=18143 comm="syz.4.4725" path="/271/bus" dev="tmpfs" ino=1438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 1239.806232][ T9964] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1239.831554][ T30] audit: type=1400 audit(2000000274.997:4299): avc: denied { read write } for pid=14981 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1239.877092][ T30] audit: type=1400 audit(2000000274.997:4300): avc: denied { mounton } for pid=18146 comm="syz.4.4726" path="/272/file0" dev="tmpfs" ino=1444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 1239.905880][ T30] audit: type=1400 audit(2000000274.997:4301): avc: denied { mounton } for pid=18146 comm="syz.4.4726" path="/272/file0" dev="tmpfs" ino=1444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 1239.941655][ T9964] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1240.219523][T12581] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1240.413807][T18206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.421052][T18206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.095571][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1242.802902][T18476] syz.5.4886 uses obsolete (PF_INET,SOCK_PACKET) [ 1243.520540][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4925'. [ 1243.529532][T18559] device bridge_slave_1 left promiscuous mode [ 1243.535980][T18559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.543945][T18560] netlink: 'syz.5.4924': attribute type 3 has an invalid length. [ 1243.552314][T18559] device bridge_slave_0 left promiscuous mode [ 1243.558442][T18560] netlink: 'syz.5.4924': attribute type 1 has an invalid length. [ 1243.566554][T18559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.775154][ T30] kauditd_printk_skb: 416 callbacks suppressed [ 1244.775171][ T30] audit: type=1400 audit(2000000279.796:4718): avc: denied { map_create } for pid=18670 comm="syz.3.4977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1244.807391][ T30] audit: type=1400 audit(2000000279.824:4719): avc: denied { read write } for pid=14981 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1244.849634][ T30] audit: type=1400 audit(2000000279.852:4720): avc: denied { read write } for pid=18674 comm="syz.4.4979" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1244.874224][ T30] audit: type=1400 audit(2000000279.852:4721): avc: denied { read write } for pid=14981 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1244.907508][ T30] audit: type=1400 audit(2000000279.862:4722): avc: denied { read write } for pid=13492 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1244.938764][ T30] audit: type=1400 audit(2000000279.890:4723): avc: denied { accept } for pid=18681 comm="syz.5.4983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=0 [ 1244.959897][ T30] audit: type=1400 audit(2000000279.918:4724): avc: denied { create } for pid=18678 comm="syz.4.4981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1244.981617][ T30] audit: type=1400 audit(2000000279.918:4725): avc: denied { execmem } for pid=18680 comm="syz.3.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1245.005364][ T30] audit: type=1400 audit(2000000279.918:4726): avc: denied { prog_load } for pid=18680 comm="syz.3.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1245.025044][ T30] audit: type=1400 audit(2000000279.918:4727): avc: denied { read write } for pid=14981 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1245.440677][T18726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=18726 comm=syz.0.5003 [ 1246.555907][T18847] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1246.771420][T18876] device veth0_vlan left promiscuous mode [ 1246.777904][T18876] device veth0_vlan entered promiscuous mode [ 1246.786318][T18876] device veth1_macvtap left promiscuous mode [ 1246.796828][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1246.808054][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1246.820672][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1246.834439][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.841553][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1246.860521][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1246.869599][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1246.880213][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.887302][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.896295][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1246.910362][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1246.919574][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1246.929316][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1246.938757][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1246.947235][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1246.955351][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1246.965524][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1246.975091][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1246.983607][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1246.998185][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1247.007451][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1247.026646][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1247.036635][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1247.067030][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1247.075283][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1247.083506][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1247.091942][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1247.110515][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1247.119224][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1247.127754][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1247.135725][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1247.151355][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1247.158845][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1247.176231][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1247.184871][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1247.247877][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5088'. [ 1247.536948][T18973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18973 comm=syz.4.5121 [ 1247.555688][T18973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5121'. [ 1247.681064][T19007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5136'. [ 1247.981045][T19067] TCP: TCP_TX_DELAY enabled [ 1248.121591][T19105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5186'. [ 1248.313099][T19140] bond_slave_0: Caught tx_queue_len zero misconfig [ 1248.331712][T19142] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1248.588677][T19185] serio: Serial port ptm0 [ 1248.871415][T19241] device veth0_vlan left promiscuous mode [ 1248.877936][T19241] device veth0_vlan entered promiscuous mode [ 1248.890435][T19241] device veth1_macvtap left promiscuous mode [ 1248.897458][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1248.906241][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1248.934058][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1248.945822][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.952896][ T5763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.960636][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1248.969882][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1248.978733][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.985797][ T5763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.993480][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1249.016808][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1249.032736][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1249.047151][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): c@0: link becomes ready [ 1249.055136][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1249.065277][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1249.073561][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1249.086308][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1249.094925][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1249.103441][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1249.111735][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1249.120604][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1249.129185][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1249.143004][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1249.157131][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1249.165251][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1249.177468][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1249.186039][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1249.208005][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1249.216844][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1249.225595][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1249.234050][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1249.242571][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1249.251471][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1249.264505][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1249.273225][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1249.281505][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1249.290324][ T8050] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1250.116914][ T30] kauditd_printk_skb: 583 callbacks suppressed [ 1250.116929][ T30] audit: type=1400 audit(2000000284.827:5311): avc: denied { prog_load } for pid=19429 comm="syz.3.5338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1250.142663][T19430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1250.149880][T19430] IPv6: NLM_F_CREATE should be set when creating new route [ 1250.170375][ T30] audit: type=1326 audit(2000000284.874:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19431 comm="syz.3.5339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7b9ddeb9 code=0x7ffc0000 [ 1250.230430][ T30] audit: type=1326 audit(2000000284.903:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19431 comm="syz.3.5339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f3c7b9ddeb9 code=0x7ffc0000 [ 1250.254590][ T30] audit: type=1326 audit(2000000284.903:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19431 comm="syz.3.5339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7b9ddeb9 code=0x7ffc0000 [ 1250.281187][ T30] audit: type=1400 audit(2000000284.921:5315): avc: denied { create } for pid=19433 comm="syz.3.5340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 1250.322733][ T30] audit: type=1400 audit(2000000285.025:5316): avc: denied { read write } for pid=13492 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1250.366242][ T30] audit: type=1400 audit(2000000285.063:5317): avc: denied { read write } for pid=19437 comm="syz.5.5342" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1250.415274][ T30] audit: type=1400 audit(2000000285.091:5318): avc: denied { read write } for pid=19437 comm="syz.5.5342" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1250.451020][ T30] audit: type=1400 audit(2000000285.100:5319): avc: denied { read write } for pid=13492 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1250.482540][ T30] audit: type=1400 audit(2000000285.100:5320): avc: denied { map_create } for pid=19439 comm="syz.5.5343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1250.815140][T19470] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19470 comm=syz.3.5356 [ 1251.477939][T19539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5387'. [ 1251.651646][T19587] serio: Serial port ptm0 [ 1251.738019][T19606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1251.745380][T19606] IPv6: NLM_F_CREATE should be set when creating new route [ 1252.095742][T19639] ================================================================== [ 1252.103855][T19639] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 1252.112117][T19639] Read of size 8 at addr ffff8881156018c0 by task syz.1.5432/19639 [ 1252.120060][T19639] [ 1252.122414][T19639] CPU: 1 PID: 19639 Comm: syz.1.5432 Not tainted syzkaller #0 [ 1252.130032][T19639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1252.140153][T19639] Call Trace: [ 1252.143458][T19639] [ 1252.146407][T19639] __dump_stack+0x21/0x30 [ 1252.150762][T19639] dump_stack_lvl+0x110/0x170 [ 1252.155465][T19639] ? show_regs_print_info+0x20/0x20 [ 1252.160683][T19639] ? load_image+0x3e0/0x3e0 [ 1252.165201][T19639] print_address_description+0x7f/0x2c0 [ 1252.170775][T19639] ? tc_setup_flow_action+0x870/0x3240 [ 1252.176254][T19639] kasan_report+0xf1/0x140 [ 1252.180705][T19639] ? tc_setup_flow_action+0x870/0x3240 [ 1252.186182][T19639] __asan_report_load8_noabort+0x14/0x20 [ 1252.191832][T19639] tc_setup_flow_action+0x870/0x3240 [ 1252.197140][T19639] mall_replace_hw_filter+0x2cc/0x8b0 [ 1252.202527][T19639] ? pcpu_block_update_hint_alloc+0x8c4/0xc50 [ 1252.208617][T19639] ? mall_set_parms+0x520/0x520 [ 1252.213496][T19639] ? tcf_exts_destroy+0xb0/0xb0 [ 1252.218365][T19639] ? pcpu_alloc+0x1170/0x16e0 [ 1252.223078][T19639] ? mall_set_parms+0x1e8/0x520 [ 1252.227960][T19639] mall_change+0x544/0x760 [ 1252.232400][T19639] ? __kasan_check_write+0x14/0x20 [ 1252.237529][T19639] ? mall_get+0xa0/0xa0 [ 1252.241707][T19639] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 1252.247615][T19639] tc_new_tfilter+0x12e5/0x18e0 [ 1252.252488][T19639] ? tcf_gate_entry_destructor+0x20/0x20 [ 1252.258139][T19639] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 1252.263786][T19639] ? security_capable+0x87/0xb0 [ 1252.268655][T19639] ? ns_capable+0x8c/0xf0 [ 1252.273010][T19639] ? netlink_net_capable+0x125/0x160 [ 1252.278320][T19639] ? tcf_gate_entry_destructor+0x20/0x20 [ 1252.283968][T19639] rtnetlink_rcv_msg+0x871/0xce0 [ 1252.288998][T19639] ? rtnetlink_bind+0x80/0x80 [ 1252.293705][T19639] ? avc_has_perm_noaudit+0x391/0x490 [ 1252.299098][T19639] ? memcpy+0x56/0x70 [ 1252.303104][T19639] ? avc_has_perm_noaudit+0x30b/0x490 [ 1252.308504][T19639] ? arch_stack_walk+0xee/0x140 [ 1252.313381][T19639] ? avc_denied+0x1b0/0x1b0 [ 1252.317899][T19639] ? stack_trace_save+0xa6/0xf0 [ 1252.322771][T19639] ? avc_has_perm+0x163/0x250 [ 1252.327560][T19639] ? avc_has_perm_noaudit+0x490/0x490 [ 1252.332952][T19639] ? x64_sys_call+0x4b/0x9a0 [ 1252.337722][T19639] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 1252.343147][T19639] netlink_rcv_skb+0x1f5/0x440 [ 1252.347946][T19639] ? rtnetlink_bind+0x80/0x80 [ 1252.352663][T19639] ? netlink_ack+0xb50/0xb50 [ 1252.357268][T19639] ? __netlink_lookup+0x387/0x3b0 [ 1252.362329][T19639] rtnetlink_rcv+0x1c/0x20 [ 1252.366765][T19639] netlink_unicast+0x876/0xa40 [ 1252.371555][T19639] netlink_sendmsg+0x879/0xb80 [ 1252.376352][T19639] ? netlink_getsockopt+0x530/0x530 [ 1252.381595][T19639] ? do_futex+0xde8/0x2800 [ 1252.386025][T19639] ? security_socket_sendmsg+0x82/0xa0 [ 1252.391487][T19639] ? netlink_getsockopt+0x530/0x530 [ 1252.396704][T19639] ____sys_sendmsg+0x5b7/0x8f0 [ 1252.401508][T19639] ? __sys_sendmsg_sock+0x40/0x40 [ 1252.406530][T19639] ? import_iovec+0x7c/0xb0 [ 1252.411042][T19639] ___sys_sendmsg+0x236/0x2e0 [ 1252.415727][T19639] ? __sys_sendmsg+0x280/0x280 [ 1252.420487][T19639] ? sock_show_fdinfo+0xa0/0xa0 [ 1252.425341][T19639] ? __fdget+0x1a1/0x230 [ 1252.429620][T19639] __x64_sys_sendmsg+0x206/0x2f0 [ 1252.434590][T19639] ? ___sys_sendmsg+0x2e0/0x2e0 [ 1252.439468][T19639] ? __kasan_check_write+0x14/0x20 [ 1252.444596][T19639] ? switch_fpu_return+0x15d/0x2c0 [ 1252.449854][T19639] x64_sys_call+0x4b/0x9a0 [ 1252.454293][T19639] do_syscall_64+0x4c/0xa0 [ 1252.458711][T19639] ? clear_bhb_loop+0x50/0xa0 [ 1252.463377][T19639] ? clear_bhb_loop+0x50/0xa0 [ 1252.468086][T19639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1252.473997][T19639] RIP: 0033:0x7f84d93abeb9 [ 1252.478446][T19639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.498216][T19639] RSP: 002b:00007f84d7e08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1252.506663][T19639] RAX: ffffffffffffffda RBX: 00007f84d9626fa0 RCX: 00007f84d93abeb9 [ 1252.514649][T19639] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 1252.522627][T19639] RBP: 00007f84d9419c1f R08: 0000000000000000 R09: 0000000000000000 [ 1252.530589][T19639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1252.538551][T19639] R13: 00007f84d9627038 R14: 00007f84d9626fa0 R15: 00007ffc67e72798 [ 1252.546525][T19639] [ 1252.549552][T19639] [ 1252.551876][T19639] Allocated by task 19639: [ 1252.556276][T19639] __kasan_kmalloc+0xda/0x110 [ 1252.560983][T19639] __kmalloc+0x13d/0x2c0 [ 1252.565245][T19639] tcf_idr_create+0x5f/0x790 [ 1252.569849][T19639] tcf_idr_create_from_flags+0x61/0x70 [ 1252.575296][T19639] tcf_gact_init+0x342/0x570 [ 1252.579883][T19639] tcf_action_init_1+0x3ff/0x6b0 [ 1252.584811][T19639] tcf_action_init+0x233/0x7a0 [ 1252.589571][T19639] tcf_exts_validate+0x24a/0x580 [ 1252.594496][T19639] mall_set_parms+0x48/0x520 [ 1252.599169][T19639] mall_change+0x478/0x760 [ 1252.603587][T19639] tc_new_tfilter+0x12e5/0x18e0 [ 1252.608428][T19639] rtnetlink_rcv_msg+0x871/0xce0 [ 1252.613378][T19639] netlink_rcv_skb+0x1f5/0x440 [ 1252.618156][T19639] rtnetlink_rcv+0x1c/0x20 [ 1252.622566][T19639] netlink_unicast+0x876/0xa40 [ 1252.627317][T19639] netlink_sendmsg+0x879/0xb80 [ 1252.632147][T19639] ____sys_sendmsg+0x5b7/0x8f0 [ 1252.636906][T19639] ___sys_sendmsg+0x236/0x2e0 [ 1252.641618][T19639] __x64_sys_sendmsg+0x206/0x2f0 [ 1252.646559][T19639] x64_sys_call+0x4b/0x9a0 [ 1252.650979][T19639] do_syscall_64+0x4c/0xa0 [ 1252.655387][T19639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1252.661268][T19639] [ 1252.663581][T19639] Last potentially related work creation: [ 1252.669281][T19639] kasan_save_stack+0x3a/0x60 [ 1252.673974][T19639] __kasan_record_aux_stack+0xd2/0x100 [ 1252.679439][T19639] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1252.685262][T19639] call_rcu+0x10b/0xf80 [ 1252.689484][T19639] neigh_parms_release+0x1dd/0x220 [ 1252.694580][T19639] inetdev_event+0x82e/0x10a0 [ 1252.699264][T19639] raw_notifier_call_chain+0x90/0x100 [ 1252.704694][T19639] unregister_netdevice_many+0x10a1/0x1aa0 [ 1252.710520][T19639] default_device_exit_batch+0x35e/0x3c0 [ 1252.716141][T19639] cleanup_net+0x60a/0xae0 [ 1252.720552][T19639] process_one_work+0x6be/0xba0 [ 1252.725402][T19639] worker_thread+0xa59/0x1200 [ 1252.730069][T19639] kthread+0x411/0x500 [ 1252.734222][T19639] ret_from_fork+0x1f/0x30 [ 1252.738646][T19639] [ 1252.740958][T19639] Second to last potentially related work creation: [ 1252.747533][T19639] kasan_save_stack+0x3a/0x60 [ 1252.752222][T19639] __kasan_record_aux_stack+0xd2/0x100 [ 1252.757676][T19639] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1252.763490][T19639] call_rcu+0x10b/0xf80 [ 1252.767680][T19639] neigh_parms_release+0x1dd/0x220 [ 1252.772807][T19639] inetdev_event+0x82e/0x10a0 [ 1252.777484][T19639] raw_notifier_call_chain+0x90/0x100 [ 1252.782867][T19639] unregister_netdevice_many+0x10a1/0x1aa0 [ 1252.788684][T19639] ip6_tnl_exit_batch_net+0x3d5/0x420 [ 1252.794111][T19639] cleanup_net+0x60a/0xae0 [ 1252.798524][T19639] process_one_work+0x6be/0xba0 [ 1252.803373][T19639] worker_thread+0xa59/0x1200 [ 1252.808074][T19639] kthread+0x411/0x500 [ 1252.812157][T19639] ret_from_fork+0x1f/0x30 [ 1252.816587][T19639] [ 1252.818914][T19639] The buggy address belongs to the object at ffff888115601800 [ 1252.818914][T19639] which belongs to the cache kmalloc-192 of size 192 [ 1252.832958][T19639] The buggy address is located 0 bytes to the right of [ 1252.832958][T19639] 192-byte region [ffff888115601800, ffff8881156018c0) [ 1252.846593][T19639] The buggy address belongs to the page: [ 1252.852226][T19639] page:ffffea0004558040 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115601 [ 1252.862484][T19639] flags: 0x4000000000000200(slab|zone=1) [ 1252.868140][T19639] raw: 4000000000000200 ffffea0004303440 0000000200000002 ffff888100042c00 [ 1252.876733][T19639] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1252.885326][T19639] page dumped because: kasan: bad access detected [ 1252.891748][T19639] page_owner tracks the page as allocated [ 1252.897471][T19639] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 111, ts 6392026151, free_ts 0 [ 1252.912520][T19639] post_alloc_hook+0x192/0x1b0 [ 1252.917303][T19639] prep_new_page+0x1c/0x110 [ 1252.921836][T19639] get_page_from_freelist+0x2d3a/0x2dc0 [ 1252.927400][T19639] __alloc_pages+0x1a2/0x460 [ 1252.932009][T19639] new_slab+0xa1/0x4d0 [ 1252.936088][T19639] ___slab_alloc+0x381/0x810 [ 1252.940693][T19639] __slab_alloc+0x49/0x90 [ 1252.945046][T19639] kmem_cache_alloc_trace+0x146/0x270 [ 1252.950430][T19639] kernfs_fop_open+0x343/0xb30 [ 1252.955293][T19639] do_dentry_open+0x834/0x1010 [ 1252.960079][T19639] vfs_open+0x73/0x80 [ 1252.964082][T19639] path_openat+0x26a6/0x2f20 [ 1252.968704][T19639] do_filp_open+0x1e2/0x410 [ 1252.973223][T19639] do_sys_openat2+0x15e/0x7f0 [ 1252.977921][T19639] __x64_sys_openat+0x136/0x160 [ 1252.982789][T19639] x64_sys_call+0x219/0x9a0 [ 1252.987303][T19639] page_owner free stack trace missing [ 1252.992656][T19639] [ 1252.994964][T19639] Memory state around the buggy address: [ 1253.000576][T19639] ffff888115601780: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1253.008638][T19639] ffff888115601800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.016692][T19639] >ffff888115601880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1253.024733][T19639] ^ [ 1253.030869][T19639] ffff888115601900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.038913][T19639] ffff888115601980: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1253.046982][T19639] ================================================================== [ 1253.055034][T19639] Disabling lock debugging due to kernel taint [ 1253.062580][T19642] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5434'. May 18 03:38:07 syzkaller kern.alert kernel: [ 1252.891748][T19639] page_owner tracks the page as allocated May 18 03:38:07 syzkaller kern.alert kernel: [ 1252.897471][T19639] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 111, ts 6392026151, free_ts 0 May 18 03:38:07 syzkaller kern.alert kernel: [ 1252.987303][T19639] page_owner free stack trace missing [ 1253.752161][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!