last executing test programs: 5.975131556s ago: executing program 4 (id=163): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) 5.960307277s ago: executing program 4 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r5, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) write$cgroup_devices(r0, &(0x7f0000000580)=ANY=[], 0xffdd) 5.829469488s ago: executing program 4 (id=171): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 2.83495794s ago: executing program 1 (id=188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)}, 0x20) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) unlink(&(0x7f0000000100)='./file0/file0\x00') 2.041747285s ago: executing program 2 (id=195): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 1.958504711s ago: executing program 1 (id=196): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/rt6_stats\x00') recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 1.958095401s ago: executing program 1 (id=197): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x9, [@volatile={0x8}, @union={0x5, 0x2, 0x0, 0x5, 0x1, 0x6, [{0xf, 0x0, 0x8}, {0x5, 0x5, 0x7}]}, @var={0x10, 0x0, 0x0, 0xe, 0x1, 0x1}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @var={0xc, 0x0, 0x0, 0xe, 0x5, 0x1}, @restrict={0x3, 0x0, 0x0, 0xb, 0x4}, @func={0x0, 0x0, 0x0, 0xc, 0x5}, @ptr={0x4, 0x0, 0x0, 0x2, 0x1}, @const]}, {0x0, [0x0, 0x5f, 0x6f, 0x2e, 0x5f, 0x0, 0x1e]}}, &(0x7f0000000540)=""/243, 0xad, 0xf3, 0x1, 0x4}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000084c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, r1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000ec0)='./file0\x00', 0x0, 0x20, &(0x7f0000000e80)={[], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x8, {0x8, 0x0, "cf88ec8998df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.904767606s ago: executing program 3 (id=199): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x80086601, 0x1000000000000) 1.822321562s ago: executing program 3 (id=200): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x749c, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.812100093s ago: executing program 3 (id=201): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x20, 0x6c, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) 1.770567607s ago: executing program 3 (id=202): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000020660800002ab91a00180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000001000000850000000600000095000000000000009ab30e81bcd85a9a83b805fdeb2147e3f870681826a1a628b6b306424ebb29"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.706403592s ago: executing program 3 (id=203): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="c00000001900674c0000000000000000ff01000000000000000000000000000100000000000000000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000022000000000000000000000000000000000000efffffff0000000000000000000000000000000000000000000000000000efff08001f"], 0xc0}}, 0x0) 1.706091062s ago: executing program 3 (id=204): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x0, 0x862b01) write$char_usb(r1, 0x0, 0x0) 1.378285509s ago: executing program 4 (id=209): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8}, 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000000000000000000fc0100"/56, @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) unlink(&(0x7f0000000100)='./file0/file0\x00') 1.197668753s ago: executing program 0 (id=214): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000180)={0x2, 0x7, 0xd1, &(0x7f0000000340)=""/209}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 977.915311ms ago: executing program 2 (id=215): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000016000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 915.348436ms ago: executing program 2 (id=216): add_key(&(0x7f0000000000)='trusted\x00', 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000007c0)='asymmetric\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c001906000000000000000007000000", @ANYRES32=r1, @ANYBLOB="f500662f0a0002"], 0x28}}, 0x0) 858.37422ms ago: executing program 2 (id=217): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) 817.863334ms ago: executing program 2 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x28, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 803.970075ms ago: executing program 2 (id=219): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 457.522393ms ago: executing program 4 (id=220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@setlink={0x20, 0x13, 0x1}, 0x20}}, 0x0) 406.099467ms ago: executing program 4 (id=221): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x9ff, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000119000/0x2000)=nil, 0x930, 0x5000012, 0x13, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket(0x2, 0x1, 0x7ff) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x290880, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$inet(r4, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 364.827791ms ago: executing program 0 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000580)=""/45, 0x2d) 300.344326ms ago: executing program 0 (id=223): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="2fe1adfa036a0aed765be43dc0a42cacef056857f83f701c319ba5debf5e5119b462fe1c8b1ed3077636484eaec01a1c2d8c0d0f34aba0c1f3d2d15540729884a815a98c9582d43d5599ae0a3d1201fbe83976fc82fc2e0ce8e9d9f8c7cfaacfc1c0757ab1e1ba658f4803274ab72100fca9dd8cf514f56b8f61dfc60966bb519075f1152c0d2fc8f77298f95a5adb20aff55e2ec841e81b7540280a582eb98c8f", @ANYRES16=0x0, @ANYBLOB="010025bd700000000000070000000800030008000000080002000400000020000180080006000400000014000400ff02000000000000000000000000000108000200040000000800030002000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x884) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="278ccad80010b15bf557e680f6a967e3687043908568789de8f39c7ca80b2ab5959ce9b24bd1d54ccc1b07ee08ebaf131b171f1fda0b51dc2c81bdbf8f3ccfc633928da35a369273a0c1534b103e6fb08e133f02d99a7a2e40e6b9c32be1881eb0d9046fb70e1d845657fd9fad455af067d5478c34cf9a757d4fcb9ebcc947a0cb87e890df4e35d249ae", @ANYRES16=r4, @ANYBLOB="01000000000000000000030000000c0009800800020034000000"], 0x20}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r6, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000f100", @ANYRES16=r4, @ANYBLOB="00012cbd7000ffdbdf2512000000540003800800030001000080080003007f00000008000200010000000800010001000000080003000200000008000100e60000000800020002000000080001000800000008000300020000000800010009000000"], 0x68}, 0x1, 0x0, 0x0, 0x10008000}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x38, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4ff5677c1a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x38}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="2a003300d0d4fe00ffffffffffff080211000000505050505050"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="20002abd7000fcdbdf251d00000008000300", @ANYRES32=0x0, @ANYBLOB="67ce85bd", @ANYRES32=r14, @ANYBLOB="0c00990052ab00003c00000008000300", @ANYRES32=r15, @ANYBLOB="08000100010000001c00238006001b0005000000060010000600000008000b00080000000800010075000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000810}, 0x800) 154.218837ms ago: executing program 0 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000006340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 153.972638ms ago: executing program 0 (id=225): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000000050000000a"], 0x14}}, 0x0) 92.213443ms ago: executing program 1 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 78.635194ms ago: executing program 0 (id=227): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xd9, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.338669ms ago: executing program 1 (id=228): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 0s ago: executing program 1 (id=229): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000a40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r2, 0x3, r3, 0xffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. [ 21.756569][ T23] audit: type=1400 audit(1720008317.369:66): avc: denied { mounton } for pid=342 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.758106][ T342] cgroup1: Unknown subsys name 'net' [ 21.779235][ T23] audit: type=1400 audit(1720008317.369:67): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.784311][ T342] cgroup1: Unknown subsys name 'net_prio' [ 21.812350][ T342] cgroup1: Unknown subsys name 'devices' [ 21.818590][ T23] audit: type=1400 audit(1720008317.439:68): avc: denied { unmount } for pid=342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.019678][ T342] cgroup1: Unknown subsys name 'hugetlb' [ 22.025378][ T342] cgroup1: Unknown subsys name 'rlimit' [ 22.188475][ T23] audit: type=1400 audit(1720008317.809:69): avc: denied { setattr } for pid=342 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.211607][ T23] audit: type=1400 audit(1720008317.809:70): avc: denied { mounton } for pid=342 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.217051][ T344] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.236337][ T23] audit: type=1400 audit(1720008317.809:71): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.267821][ T23] audit: type=1400 audit(1720008317.859:72): avc: denied { relabelto } for pid=344 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.293374][ T23] audit: type=1400 audit(1720008317.859:73): avc: denied { write } for pid=344 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.325363][ T23] audit: type=1400 audit(1720008317.939:74): avc: denied { read } for pid=342 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.350806][ T23] audit: type=1400 audit(1720008317.939:75): avc: denied { open } for pid=342 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.376929][ T342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.656630][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.663704][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.671287][ T350] device bridge_slave_0 entered promiscuous mode [ 22.679631][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.686455][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.693814][ T350] device bridge_slave_1 entered promiscuous mode [ 22.856521][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.863413][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.870737][ T356] device bridge_slave_0 entered promiscuous mode [ 22.881416][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.888276][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.895642][ T356] device bridge_slave_1 entered promiscuous mode [ 22.933761][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.940623][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.947998][ T352] device bridge_slave_0 entered promiscuous mode [ 22.966671][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.973605][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.980858][ T357] device bridge_slave_0 entered promiscuous mode [ 22.990673][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.997627][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.004703][ T352] device bridge_slave_1 entered promiscuous mode [ 23.011404][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.018275][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.025608][ T357] device bridge_slave_1 entered promiscuous mode [ 23.062438][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.069412][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.076473][ T355] device bridge_slave_0 entered promiscuous mode [ 23.097423][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.104273][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.111862][ T355] device bridge_slave_1 entered promiscuous mode [ 23.185869][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.192727][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.199975][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.206819][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.298550][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.305394][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.312543][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.319289][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.330021][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.337034][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.344226][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.351432][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.359307][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.366534][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.378227][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.386281][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.393127][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.417722][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.425757][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.432599][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.469698][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.477687][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.494849][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.521962][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.534521][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.543232][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.550077][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.576733][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.584590][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.592385][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.601205][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.608087][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.615647][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.623887][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.630724][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.637874][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.645689][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.652555][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.660540][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.681800][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.690195][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.698652][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.706517][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.715079][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.723072][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.742436][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.750205][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.758197][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.766018][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.773962][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.782197][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.790272][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.798495][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.806421][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.813266][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.820961][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.829268][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.837426][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.844246][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.867330][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.874663][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.882355][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.891625][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.899898][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.906714][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.914103][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.922426][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.930487][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.937318][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.944560][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.952843][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.960685][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.968655][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.976453][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.996784][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.005466][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.013917][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.022566][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.030513][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.038490][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.062214][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.070439][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.079681][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.087787][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.095979][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.104316][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.127811][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.136054][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.144722][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.152470][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.160278][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.168135][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.209596][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.220006][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.228580][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.236209][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.244900][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.253047][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.261155][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.269745][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.277974][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.285871][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.294163][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.302482][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.310720][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.318831][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.326711][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.334933][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.343168][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.351390][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.371927][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.379951][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.389261][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.397289][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.415642][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.423679][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.431909][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.440320][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.472079][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.480991][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.512341][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.589573][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.597931][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.606327][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.657288][ T381] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.684445][ T380] F2FS-fs (loop3): invalid crc value [ 24.731540][ T380] F2FS-fs (loop3): Found nat_bits in checkpoint [ 24.776402][ T380] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 24.897215][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.007373][ T381] usb 2-1: Using ep0 maxpacket: 32 [ 25.084831][ T400] attempt to access beyond end of device [ 25.084831][ T400] loop3: rw=2049, want=45104, limit=40427 [ 25.107450][ T18] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.122378][ T400] attempt to access beyond end of device [ 25.122378][ T400] loop3: rw=2049, want=45104, limit=40427 [ 25.134347][ T381] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.150794][ T381] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.161147][ T381] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 25.170523][ T381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.218174][ T381] hub 2-1:4.0: USB hub found [ 25.267351][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 25.295635][ T400] syz.3.4 (400) used greatest stack depth: 22744 bytes left [ 25.322698][ T357] attempt to access beyond end of device [ 25.322698][ T357] loop3: rw=2049, want=45112, limit=40427 [ 25.437343][ T381] hub 2-1:4.0: 2 ports detected [ 25.442133][ T381] usb 2-1: selecting invalid altsetting 1 [ 25.448445][ T381] hub 2-1:4.0: Using single TT (err -22) [ 25.457473][ T5] usb 3-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=b3.f2 [ 25.466402][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.474226][ T5] usb 3-1: Product: syz [ 25.478162][ T5] usb 3-1: Manufacturer: syz [ 25.482530][ T5] usb 3-1: SerialNumber: syz [ 25.487737][ T18] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.487990][ T5] usb 3-1: config 0 descriptor?? [ 25.498980][ T18] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 25.515405][ T18] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 25.524321][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.535228][ T18] usb 5-1: config 0 descriptor?? [ 25.577818][ T18] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 25.657237][ T373] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.657265][ T381] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 25.670822][ T381] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 25.707891][ T381] usb 2-1: USB disconnect, device number 2 [ 25.754016][ T359] usb 3-1: USB disconnect, device number 2 [ 25.857294][ T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.907253][ T373] usb 1-1: Using ep0 maxpacket: 8 [ 26.217279][ T373] usb 1-1: config 0 has an invalid interface number: 190 but max is 0 [ 26.225241][ T373] usb 1-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 26.235490][ T373] usb 1-1: config 0 has no interface number 0 [ 26.241559][ T373] usb 1-1: config 0 interface 190 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 26.260403][ T373] usb 1-1: config 0 interface 190 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 26.377275][ T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.387810][ T5] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 26.396878][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.405584][ T5] usb 4-1: config 0 descriptor?? [ 26.427328][ T373] usb 1-1: New USB device found, idVendor=19d2, idProduct=1590, bcdDevice=22.04 [ 26.436540][ T373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.444714][ T373] usb 1-1: Product: syz [ 26.449211][ T373] usb 1-1: Manufacturer: syz [ 26.453643][ T373] usb 1-1: SerialNumber: syz [ 26.469656][ T5] usb 4-1: cannot find UAC_HEADER [ 26.474568][ T5] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 26.482179][ T373] usb 1-1: config 0 descriptor?? [ 26.517730][ T373] hub 1-1:0.190: bad descriptor, ignoring hub [ 26.840366][ T381] usb 4-1: USB disconnect, device number 2 [ 26.846735][ T373] hub: probe of 1-1:0.190 failed with error -5 [ 26.944740][ T418] cgroup: syz.2.10 (418) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 26.960695][ T418] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 27.044730][ T23] kauditd_printk_skb: 37 callbacks suppressed [ 27.044738][ T23] audit: type=1400 audit(1720008322.659:113): avc: denied { prog_run } for pid=413 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.350367][ T418] syz.2.10 (418) used greatest stack depth: 22392 bytes left [ 27.461725][ T23] audit: type=1400 audit(1720008323.029:114): avc: denied { create } for pid=420 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.485337][ T424] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.506516][ T23] audit: type=1400 audit(1720008323.039:115): avc: denied { setopt } for pid=420 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.530755][ T23] audit: type=1400 audit(1720008323.039:116): avc: denied { bind } for pid=420 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.557466][ T23] audit: type=1400 audit(1720008323.039:117): avc: denied { node_bind } for pid=420 comm="syz.1.11" saddr=fe88::2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 27.611103][ T23] audit: type=1400 audit(1720008323.229:118): avc: denied { ioctl } for pid=401 comm="syz.0.7" path="socket:[12393]" dev="sockfs" ino=12393 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.735558][ T18] usb 5-1: USB disconnect, device number 2 [ 27.867321][ T23] audit: type=1400 audit(1720008323.449:119): avc: denied { bind } for pid=401 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.016021][ T436] F2FS-fs (loop2): invalid crc value [ 28.022413][ T436] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.037256][ T121] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.051911][ T436] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.117211][ T18] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 28.191092][ T23] audit: type=1400 audit(1720008323.809:120): avc: denied { mount } for pid=450 comm="syz.1.21" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.311032][ T456] attempt to access beyond end of device [ 28.311032][ T456] loop2: rw=2049, want=45104, limit=40427 [ 28.324490][ T456] attempt to access beyond end of device [ 28.324490][ T456] loop2: rw=2049, want=45104, limit=40427 [ 28.427267][ T18] usb 5-1: Using ep0 maxpacket: 32 [ 28.457626][ T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 28.567271][ T436] syz.2.17 (436) used greatest stack depth: 20344 bytes left [ 28.594290][ T355] attempt to access beyond end of device [ 28.594290][ T355] loop2: rw=2049, want=45112, limit=40427 [ 28.607502][ T18] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.618434][ T18] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.628143][ T121] usb 4-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=b3.f2 [ 28.637233][ T18] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 28.646189][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.654426][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.662194][ T121] usb 4-1: Product: syz [ 28.666171][ T121] usb 4-1: Manufacturer: syz [ 28.670965][ T121] usb 4-1: SerialNumber: syz [ 28.678930][ T121] usb 4-1: config 0 descriptor?? [ 28.707703][ T18] hub 5-1:4.0: USB hub found [ 28.927885][ T18] hub 5-1:4.0: 2 ports detected [ 28.933778][ T18] usb 5-1: selecting invalid altsetting 1 [ 28.940924][ T18] hub 5-1:4.0: Using single TT (err -22) [ 29.119265][ T124] usb 4-1: USB disconnect, device number 3 [ 29.124978][ T23] audit: type=1400 audit(1720008324.739:121): avc: denied { unmount } for pid=350 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.201347][ T18] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 29.207574][ T18] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 29.247897][ T18] usb 5-1: USB disconnect, device number 3 [ 29.531273][ T471] EXT4-fs (loop0): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 29.587349][ T124] usb 1-1: USB disconnect, device number 2 [ 29.617483][ T474] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET) [ 29.708625][ T476] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.717607][ T476] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 29.750214][ T479] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 29.967102][ T489] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 29.992683][ T489] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 30.070929][ T23] audit: type=1400 audit(1720008325.689:122): avc: denied { setattr } for pid=487 comm="syz.4.32" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.127229][ T18] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.197467][ T124] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.201635][ T511] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 30.497283][ T18] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.508893][ T18] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 30.521686][ T18] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.530598][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.539127][ T18] usb 3-1: config 0 descriptor?? [ 30.557343][ T405] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.577814][ T18] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 30.683027][ T124] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.695463][ T124] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 30.706101][ T124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.715426][ T124] usb 1-1: config 0 descriptor?? [ 30.749010][ T522] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 30.763081][ T522] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 30.763767][ T124] usb 1-1: cannot find UAC_HEADER [ 30.788083][ T124] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 30.827254][ T405] usb 2-1: Using ep0 maxpacket: 8 [ 31.199030][ T496] usb 1-1: USB disconnect, device number 3 [ 31.209343][ T532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 31.237290][ T405] usb 2-1: config 0 has an invalid interface number: 190 but max is 0 [ 31.245444][ T405] usb 2-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 31.255804][ T405] usb 2-1: config 0 has no interface number 0 [ 31.262006][ T405] usb 2-1: config 0 interface 190 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 31.273039][ T405] usb 2-1: config 0 interface 190 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 31.627320][ T405] usb 2-1: New USB device found, idVendor=19d2, idProduct=1590, bcdDevice=22.04 [ 31.636257][ T405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.644409][ T405] usb 2-1: Product: syz [ 31.648662][ T405] usb 2-1: Manufacturer: syz [ 31.653268][ T405] usb 2-1: SerialNumber: syz [ 31.658957][ T405] usb 2-1: config 0 descriptor?? [ 31.697600][ T405] hub 2-1:0.190: bad descriptor, ignoring hub [ 31.703635][ T405] hub: probe of 2-1:0.190 failed with error -5 [ 31.748806][ T556] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 31.762747][ T556] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 31.839604][ T561] EXT4-fs (loop4): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 31.928333][ T564] ====================================================== [ 31.928333][ T564] WARNING: the mand mount option is being deprecated and [ 31.928333][ T564] will be removed in v5.15! [ 31.928333][ T564] ====================================================== [ 32.001463][ T564] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 32.012189][ T564] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.022454][ T564] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 32.264714][ T576] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 32.280902][ T23] kauditd_printk_skb: 10 callbacks suppressed [ 32.280910][ T23] audit: type=1400 audit(1720008327.899:133): avc: denied { create } for pid=579 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.315660][ T23] audit: type=1400 audit(1720008327.929:134): avc: denied { write } for pid=579 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.337900][ T23] audit: type=1400 audit(1720008327.929:135): avc: denied { nlmsg_write } for pid=579 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.379529][ T584] EXT4-fs (loop4): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 32.409943][ T591] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 32.424202][ T591] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff) [ 32.540290][ T597] [ 32.542844][ T597] ********************************************************** [ 32.550105][ T597] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 32.557253][ T597] ** ** [ 32.564451][ T597] ** trace_printk() being used. Allocating extra memory. ** [ 32.571873][ T597] ** ** [ 32.579717][ T597] ** This means that this is a DEBUG kernel and it is ** [ 32.587675][ T597] ** unsafe for production use. ** [ 32.596171][ T597] ** ** [ 32.604676][ T597] ** If you see this message and you are not debugging ** [ 32.612488][ T597] ** the kernel, report this immediately to your vendor! ** [ 32.621168][ T597] ** ** [ 32.628918][ T597] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 32.676707][ T597] ********************************************************** [ 32.810406][ T374] usb 3-1: USB disconnect, device number 3 [ 32.818116][ T121] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 32.901372][ T616] EXT4-fs (loop2): Ignoring removed bh option [ 32.909332][ T616] EXT4-fs error (device loop2): __ext4_iget:5217: inode #15: block 1803188595: comm syz.2.76: invalid block [ 32.920990][ T616] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.76: couldn't read orphan inode 15 (err -117) [ 32.932744][ T616] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue [ 32.951455][ T23] audit: type=1400 audit(1720008328.569:136): avc: denied { mounton } for pid=615 comm="syz.2.76" path="/18/file0/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.002604][ T23] audit: type=1400 audit(1720008328.619:137): avc: denied { write } for pid=615 comm="syz.2.76" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.024453][ T616] loop_set_status: loop2 () has still dirty pages (nrpages=3) [ 33.035969][ T23] audit: type=1400 audit(1720008328.619:138): avc: denied { open } for pid=615 comm="syz.2.76" path="/18/file0/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.207319][ T121] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.218606][ T121] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 33.229703][ T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.242672][ T121] usb 5-1: config 0 descriptor?? [ 33.288018][ T121] usb 5-1: cannot find UAC_HEADER [ 33.294047][ T121] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 33.323003][ T626] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.329958][ T626] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.337098][ T626] device bridge_slave_0 entered promiscuous mode [ 33.343903][ T626] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.350841][ T626] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.358120][ T626] device bridge_slave_1 entered promiscuous mode [ 33.421026][ T626] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.427885][ T626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.435198][ T626] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.441953][ T626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.465155][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.472974][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.480128][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.490466][ T496] usb 5-1: USB disconnect, device number 4 [ 33.502693][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.511375][ T405] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.518215][ T405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.527404][ T374] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.536562][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.544590][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.551459][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.567919][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.575774][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.591134][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.602767][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.615831][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.632779][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.641166][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.656689][ T23] audit: type=1400 audit(1720008329.269:139): avc: denied { mounton } for pid=626 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=11135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.707335][ T121] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.714924][ T179] device bridge_slave_1 left promiscuous mode [ 33.721022][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.728541][ T179] device bridge_slave_0 left promiscuous mode [ 33.734454][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.937387][ T374] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.948178][ T374] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 33.965643][ T374] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.975292][ T374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.985089][ T374] usb 4-1: config 0 descriptor?? [ 33.993016][ T652] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 34.002317][ T652] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 34.017372][ T23] audit: type=1400 audit(1720008329.629:140): avc: denied { append } for pid=651 comm="syz.2.90" path="/8/file0/cpuset.effective_cpus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.027892][ T374] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 34.053549][ T23] audit: type=1400 audit(1720008329.639:141): avc: denied { ioctl } for pid=651 comm="syz.2.90" path="/8/file0/cpuset.effective_cpus" dev="loop2" ino=18 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.078680][ T121] usb 1-1: config 0 has an invalid interface number: 173 but max is 1 [ 34.131314][ T121] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 34.137935][ T660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=108 sclass=netlink_route_socket pid=660 comm=syz.1.93 [ 34.142197][ T121] usb 1-1: config 0 has no interface number 1 [ 34.161331][ T121] usb 1-1: config 0 interface 173 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 34.417342][ T121] usb 1-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=b3.f2 [ 34.426270][ T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.434274][ T121] usb 1-1: Product: syz [ 34.438175][ T121] usb 1-1: Manufacturer: syz [ 34.442567][ T121] usb 1-1: SerialNumber: syz [ 34.447847][ T121] usb 1-1: config 0 descriptor?? [ 34.477310][ T445] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.678786][ T374] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 34.885934][ T381] usb 1-1: USB disconnect, device number 4 [ 34.907284][ T445] usb 3-1: Using ep0 maxpacket: 8 [ 34.947418][ T374] usb 2-1: Using ep0 maxpacket: 32 [ 34.976279][ T23] audit: type=1400 audit(1720008330.589:142): avc: denied { read } for pid=682 comm="syz.4.101" name="msr" dev="devtmpfs" ino=9174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 34.987648][ T374] usb 2-1: device firmware changed [ 35.004139][ T374] usb 2-1: USB disconnect, device number 3 [ 35.027330][ T445] usb 3-1: config 0 has an invalid interface number: 190 but max is 0 [ 35.035610][ T445] usb 3-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 35.045801][ T445] usb 3-1: config 0 has no interface number 0 [ 35.051949][ T445] usb 3-1: config 0 interface 190 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 35.062947][ T445] usb 3-1: config 0 interface 190 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 35.227282][ T445] usb 3-1: New USB device found, idVendor=19d2, idProduct=1590, bcdDevice=22.04 [ 35.236261][ T445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.244098][ T445] usb 3-1: Product: syz [ 35.248297][ T445] usb 3-1: Manufacturer: syz [ 35.252822][ T445] usb 3-1: SerialNumber: syz [ 35.259069][ T445] usb 3-1: config 0 descriptor?? [ 35.297616][ T445] hub 3-1:0.190: bad descriptor, ignoring hub [ 35.303578][ T445] hub: probe of 3-1:0.190 failed with error -5 [ 35.357295][ T374] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.607238][ T374] usb 2-1: Using ep0 maxpacket: 32 [ 35.707248][ T496] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.747294][ T124] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 35.849536][ T693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 35.901987][ T374] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 35.911227][ T374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.919130][ T374] usb 2-1: Product: syz [ 35.923233][ T374] usb 2-1: Manufacturer: syz [ 35.927650][ T374] usb 2-1: SerialNumber: syz [ 35.932771][ T374] usb 2-1: config 0 descriptor?? [ 36.007331][ T124] usb 5-1: Using ep0 maxpacket: 8 [ 36.127416][ T124] usb 5-1: config 0 has an invalid interface number: 190 but max is 0 [ 36.135443][ T124] usb 5-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 36.145620][ T124] usb 5-1: config 0 has no interface number 0 [ 36.151649][ T496] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.161619][ T124] usb 5-1: config 0 interface 190 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 36.172264][ T496] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 36.181182][ T124] usb 5-1: config 0 interface 190 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 36.192007][ T496] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.200582][ T496] usb 1-1: config 0 descriptor?? [ 36.205854][ T671] EXT4-fs (loop1): Ignoring removed bh option [ 36.212097][ T671] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 36.222970][ T671] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 36.232726][ T671] EXT4-fs error (device loop1): ext4_ext_check_inode:540: inode #3: comm syz.1.97: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 36.251310][ T671] EXT4-fs (loop1): no journal found [ 36.256436][ T671] EXT4-fs (loop1): can't get journal size [ 36.258269][ T496] usb 1-1: cannot find UAC_HEADER [ 36.264774][ T671] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,bh,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue [ 36.267469][ T496] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 36.357713][ T700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 36.369190][ T381] usb 4-1: USB disconnect, device number 4 [ 36.407446][ T124] usb 5-1: New USB device found, idVendor=19d2, idProduct=1590, bcdDevice=22.04 [ 36.416505][ T124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.424435][ T124] usb 5-1: Product: syz [ 36.628155][ T124] usb 5-1: Manufacturer: syz [ 36.632616][ T124] usb 5-1: SerialNumber: syz [ 36.639523][ T458] usb 1-1: USB disconnect, device number 5 [ 36.648862][ T124] usb 5-1: config 0 descriptor?? [ 36.697796][ T124] hub 5-1:0.190: bad descriptor, ignoring hub [ 36.706489][ T124] hub: probe of 5-1:0.190 failed with error -5 [ 36.984722][ T726] FAT-fs (loop3): Directory bread(block 64) failed [ 36.991153][ T726] FAT-fs (loop3): Directory bread(block 65) failed [ 36.997604][ T726] FAT-fs (loop3): Directory bread(block 66) failed [ 37.003838][ T726] FAT-fs (loop3): Directory bread(block 67) failed [ 37.010260][ T726] FAT-fs (loop3): Directory bread(block 68) failed [ 37.016536][ T726] FAT-fs (loop3): Directory bread(block 69) failed [ 37.023077][ T726] FAT-fs (loop3): Directory bread(block 70) failed [ 37.029461][ T726] FAT-fs (loop3): Directory bread(block 71) failed [ 37.035801][ T726] FAT-fs (loop3): Directory bread(block 72) failed [ 37.042113][ T726] FAT-fs (loop3): Directory bread(block 73) failed [ 37.061758][ T726] Trying to write to read-only block-device loop3 (partno 0) [ 37.069017][ T726] attempt to access beyond end of device [ 37.069017][ T726] loop3: rw=2049, want=1192, limit=256 [ 37.081094][ T726] Trying to write to read-only block-device loop3 (partno 0) [ 37.090350][ T726] attempt to access beyond end of device [ 37.090350][ T726] loop3: rw=2049, want=1312, limit=256 [ 37.105789][ T357] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 37.113254][ T357] FAT-fs (loop3): Filesystem has been set read-only [ 37.168086][ T357] Trying to write to read-only block-device loop3 (partno 0) [ 37.175438][ T357] Trying to write to read-only block-device loop3 (partno 0) [ 37.182653][ T357] Trying to write to read-only block-device loop3 (partno 0) [ 37.190108][ T357] Trying to write to read-only block-device loop3 (partno 0) [ 37.197390][ T357] Trying to write to read-only block-device loop3 (partno 0) [ 37.252537][ T728] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.547646][ T374] usb 3-1: USB disconnect, device number 4 [ 37.651504][ T732] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.661935][ T749] capability: warning: `syz.0.124' uses deprecated v2 capabilities in a way that may be insecure [ 37.674015][ T458] usb 2-1: USB disconnect, device number 4 [ 37.680214][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.689001][ T732] device bridge_slave_0 entered promiscuous mode [ 37.696100][ T732] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.703316][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.714349][ T732] device bridge_slave_1 entered promiscuous mode [ 37.773712][ T756] FAT-fs (loop1): Directory bread(block 64) failed [ 37.788568][ T756] FAT-fs (loop1): Directory bread(block 65) failed [ 37.795545][ T756] FAT-fs (loop1): Directory bread(block 66) failed [ 37.802643][ T756] FAT-fs (loop1): Directory bread(block 67) failed [ 37.813478][ T756] FAT-fs (loop1): Directory bread(block 68) failed [ 37.841589][ T756] FAT-fs (loop1): Directory bread(block 69) failed [ 37.855208][ T756] FAT-fs (loop1): Directory bread(block 70) failed [ 37.855226][ T756] FAT-fs (loop1): Directory bread(block 71) failed [ 37.855264][ T756] FAT-fs (loop1): Directory bread(block 72) failed [ 37.855277][ T756] FAT-fs (loop1): Directory bread(block 73) failed [ 37.861072][ T732] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.875448][ T23] kauditd_printk_skb: 13 callbacks suppressed [ 37.875457][ T23] audit: type=1400 audit(1720008333.489:156): avc: denied { name_bind } for pid=767 comm="syz.2.133" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 37.877114][ T732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.877245][ T732] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.893258][ T23] audit: type=1400 audit(1720008333.499:157): avc: denied { node_bind } for pid=767 comm="syz.2.133" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 37.896303][ T732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.904839][ T756] attempt to access beyond end of device [ 37.904839][ T756] loop1: rw=524288, want=1164, limit=256 [ 37.996934][ T756] attempt to access beyond end of device [ 37.996934][ T756] loop1: rw=0, want=1164, limit=256 [ 38.041773][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.049843][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.065119][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.083363][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.101985][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.109563][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.127139][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.135691][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.142648][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.153047][ T654] device bridge_slave_1 left promiscuous mode [ 38.159446][ T654] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.167284][ T654] device bridge_slave_0 left promiscuous mode [ 38.171727][ T23] audit: type=1400 audit(1720008333.789:158): avc: denied { setopt } for pid=765 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.173923][ T654] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.215153][ T776] Zero length message leads to an empty skb [ 38.265017][ T23] audit: type=1400 audit(1720008333.879:159): avc: denied { ioctl } for pid=781 comm="syz.1.138" path="socket:[14746]" dev="sockfs" ino=14746 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.340355][ T784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'. [ 38.362945][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.374597][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.404046][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.414686][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.482478][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.492092][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.505268][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.513460][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.539979][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.552284][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.624336][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.632760][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.650858][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.664530][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.666511][ T23] audit: type=1400 audit(1720008334.279:160): avc: denied { setopt } for pid=803 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.728108][ T23] audit: type=1400 audit(1720008334.319:161): avc: denied { read } for pid=803 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.754580][ T810] syz.1.150[810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.754631][ T810] syz.1.150[810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.777020][ T23] audit: type=1400 audit(1720008334.389:162): avc: denied { read write } for pid=811 comm="syz.3.151" name="fuse" dev="devtmpfs" ino=9176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.860314][ T23] audit: type=1400 audit(1720008334.389:163): avc: denied { open } for pid=811 comm="syz.3.151" path="/dev/fuse" dev="devtmpfs" ino=9176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.908282][ T23] audit: type=1400 audit(1720008334.389:164): avc: denied { mounton } for pid=811 comm="syz.3.151" path="/1/file0" dev="tmpfs" ino=15573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.931868][ T23] audit: type=1400 audit(1720008334.469:165): avc: denied { bind } for pid=817 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.953374][ T824] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 38.961537][ T819] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.968685][ T819] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.977023][ T819] device bridge_slave_0 entered promiscuous mode [ 38.984626][ T819] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.996407][ T819] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.997718][ T824] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,nombcache,auto_da_alloc=0x0000000000000005,nombcache,noquota,nomblk_io_submit,init_itable=0x000000000000000d,usrquota,errors=continue,,errors=continue [ 39.004450][ T819] device bridge_slave_1 entered promiscuous mode [ 39.130194][ T845] device wg2 entered promiscuous mode [ 39.168495][ T374] usb 5-1: USB disconnect, device number 5 [ 39.192896][ T859] syz.2.169[859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.192949][ T859] syz.2.169[859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.197305][ T819] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.221776][ T819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.229045][ T819] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.235887][ T819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.273360][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.282401][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.289678][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.307699][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.315759][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.322611][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.330064][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.338113][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.344924][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.353027][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.360891][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.375035][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.383587][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.395411][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.405277][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.427643][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.435963][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.452553][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.461651][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.470952][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.479284][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.527216][ T374] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 39.567370][ T121] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.644212][ T878] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 39.655542][ T878] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 39.767238][ T374] usb 5-1: Using ep0 maxpacket: 32 [ 39.807574][ T121] usb 4-1: Using ep0 maxpacket: 32 [ 39.817394][ T445] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.837016][ T881] F2FS-fs (loop1): invalid crc value [ 39.843842][ T881] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.869328][ T881] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 39.876117][ T881] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 39.887457][ T374] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 39.892405][ T881] attempt to access beyond end of device [ 39.892405][ T881] loop1: rw=34817, want=77848, limit=40427 [ 39.896744][ T374] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 39.908589][ T881] attempt to access beyond end of device [ 39.908589][ T881] loop1: rw=0, want=77832, limit=40427 [ 39.915799][ T374] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 39.934988][ T121] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 39.943486][ T374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.953490][ T121] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 39.964491][ T374] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 39.974240][ T121] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 39.985106][ T374] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 39.997946][ T121] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 40.010937][ T374] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 40.020150][ T121] usb 4-1: config 0 interface 0 has no altsetting 0 [ 40.026606][ T374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.036641][ T350] attempt to access beyond end of device [ 40.036641][ T350] loop1: rw=2049, want=45104, limit=40427 [ 40.038016][ T374] usb 5-1: config 0 descriptor?? [ 40.067736][ T445] usb 1-1: Using ep0 maxpacket: 8 [ 40.163910][ T890] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 40.163910][ T890] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 40.163910][ T890] [ 40.177340][ T121] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 40.191011][ T445] usb 1-1: config 0 has an invalid interface number: 190 but max is 0 [ 40.197410][ T890] EXT4-fs (loop2): Ignoring removed orlov option [ 40.199210][ T121] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 40.214430][ T445] usb 1-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 40.224507][ T445] usb 1-1: config 0 has no interface number 0 [ 40.230416][ T121] usb 4-1: Product: syz [ 40.230741][ T890] EXT4-fs (loop2): can't mount with dioread_nolock if block size != PAGE_SIZE [ 40.235162][ T121] usb 4-1: Manufacturer: syz [ 40.247685][ T445] usb 1-1: config 0 interface 190 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 40.258351][ T121] usb 4-1: SerialNumber: syz [ 40.263050][ T445] usb 1-1: config 0 interface 190 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 40.274166][ T121] usb 4-1: config 0 descriptor?? [ 40.308366][ T374] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 40.321359][ T179] device bridge_slave_1 left promiscuous mode [ 40.327387][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.336037][ T374] usb 5-1: USB disconnect, device number 6 [ 40.342428][ T179] device bridge_slave_0 left promiscuous mode [ 40.349397][ T374] usblp0: removed [ 40.353173][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.437629][ T445] usb 1-1: New USB device found, idVendor=19d2, idProduct=1590, bcdDevice=22.04 [ 40.440673][ T893] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.446707][ T445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.453787][ T893] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 40.461717][ T445] usb 1-1: Product: syz [ 40.476454][ T893] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 40.485725][ T445] usb 1-1: Manufacturer: syz [ 40.485918][ T893] EXT4-fs error (device loop1): ext4_ext_check_inode:540: inode #13: comm syz.1.176: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 40.490522][ T445] usb 1-1: SerialNumber: syz [ 40.508167][ T893] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.176: couldn't read orphan inode 13 (err -117) [ 40.516213][ T445] usb 1-1: config 0 descriptor?? [ 40.524208][ T893] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 40.535040][ T896] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 40.547054][ T121] usb 4-1: USB disconnect, device number 5 [ 40.557873][ T896] EXT4-fs (loop2): Ignoring removed oldalloc option [ 40.565000][ T896] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 40.569464][ T893] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 40.581591][ T893] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 2 [ 40.587688][ T445] hub 1-1:0.190: bad descriptor, ignoring hub [ 40.597637][ T445] hub: probe of 1-1:0.190 failed with error -5 [ 40.956788][ T374] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 41.174309][ T913] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 41.197320][ T374] usb 5-1: Using ep0 maxpacket: 32 [ 41.330693][ T374] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 41.341445][ T374] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 41.342563][ T915] SELinux: Context is not valid (left unmapped). [ 41.350709][ T374] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 41.367119][ T374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.376619][ T374] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 41.386109][ T374] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.559795][ T374] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 41.569108][ T374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.581533][ T374] usb 5-1: config 0 descriptor?? [ 41.711403][ T924] netlink: 68 bytes leftover after parsing attributes in process `syz.3.185'. [ 41.858758][ T374] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 42.146327][ T922] F2FS-fs (loop1): invalid crc value [ 42.153666][ T922] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.182166][ T922] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 42.189083][ T922] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 42.218566][ T922] attempt to access beyond end of device [ 42.218566][ T922] loop1: rw=34817, want=77848, limit=40427 [ 42.230692][ T922] attempt to access beyond end of device [ 42.230692][ T922] loop1: rw=0, want=77832, limit=40427 [ 42.246267][ T350] attempt to access beyond end of device [ 42.246267][ T350] loop1: rw=2049, want=45104, limit=40427 [ 42.448322][ T941] netlink: 68 bytes leftover after parsing attributes in process `syz.3.190'. [ 42.745919][ T951] EXT4-fs (loop0): Unrecognized mount option "smackfstransmute=" or missing value [ 42.788624][ T124] usb 1-1: USB disconnect, device number 6 [ 42.872704][ T955] netlink: 68 bytes leftover after parsing attributes in process `syz.2.193'. [ 43.289505][ T975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=108 sclass=netlink_route_socket pid=975 comm=syz.3.201 [ 43.336454][ T979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 43.357219][ T124] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 43.609697][ T23] kauditd_printk_skb: 33 callbacks suppressed [ 43.609706][ T23] audit: type=1400 audit(1720008339.229:199): avc: denied { setopt } for pid=985 comm="syz.0.206" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.635845][ T405] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.636359][ T23] audit: type=1400 audit(1720008339.239:200): avc: denied { write } for pid=985 comm="syz.0.206" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.658577][ T988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=988 comm=syz.0.207 [ 43.677080][ T988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 43.696103][ T378] usb 5-1: USB disconnect, device number 7 [ 43.707697][ T378] usblp0: removed [ 43.747900][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.760394][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.768721][ T23] audit: type=1400 audit(1720008339.359:201): avc: denied { read } for pid=993 comm="syz.0.210" name="kvm" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 43.784801][ T124] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 43.793316][ T23] audit: type=1400 audit(1720008339.359:202): avc: denied { open } for pid=993 comm="syz.0.210" path="/dev/kvm" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 43.804217][ T124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.841012][ T124] usb 2-1: config 0 descriptor?? [ 43.972169][ T1004] netlink: 68 bytes leftover after parsing attributes in process `syz.4.209'. [ 44.062202][ T405] usb 4-1: Using ep0 maxpacket: 8 [ 44.101161][ T23] audit: type=1400 audit(1720008339.719:203): avc: denied { mount } for pid=962 comm="syz.1.197" name="/" dev="ramfs" ino=16331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.107803][ T963] SELinux: security_context_str_to_sid(system_u) failed for (dev ramfs, type ramfs) errno=-22 [ 44.133945][ T23] audit: type=1400 audit(1720008339.719:204): avc: denied { remount } for pid=962 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.157833][ T1007] device wg2 entered promiscuous mode [ 44.187468][ T405] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 44.195687][ T405] usb 4-1: config 179 has no interface number 0 [ 44.202220][ T405] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 44.213372][ T405] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 44.224535][ T405] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 44.235660][ T405] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 44.246924][ T405] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 44.266669][ T405] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 44.275596][ T405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.297285][ T981] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 44.417384][ T124] usbhid 2-1:0.0: can't add hid device: -71 [ 44.423156][ T124] usbhid: probe of 2-1:0.0 failed with error -71 [ 44.430585][ T124] usb 2-1: USB disconnect, device number 5 [ 44.538520][ T405] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input4 [ 44.561216][ T121] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 44.703360][ T23] audit: type=1400 audit(1720008340.319:205): avc: denied { mount } for pid=1021 comm="syz.0.222" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 44.723301][ T374] usb 4-1: USB disconnect, device number 6 [ 44.725111][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 44.742378][ T374] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 44.753819][ T23] audit: type=1400 audit(1720008340.339:206): avc: denied { write } for pid=980 comm="syz.3.204" name="event0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.787286][ T23] audit: type=1400 audit(1720008340.339:207): avc: denied { open } for pid=980 comm="syz.3.204" path="/dev/input/event0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.789071][ T1025] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 44.811590][ T23] audit: type=1400 audit(1720008340.399:208): avc: denied { unmount } for pid=819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 44.967265][ T121] usb 3-1: Using ep0 maxpacket: 32 [ 44.985863][ T1032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1032 comm=syz.0.225 [ 45.049171][ T1037] device wg2 entered promiscuous mode [ 45.097312][ T121] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 45.109873][ T121] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 45.135421][ T121] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 45.144077][ T1038] kvm: emulating exchange as write [ 45.157194][ T1038] BUG: kernel NULL pointer dereference, address: 0000000000000086 [ 45.163130][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.164905][ T1038] #PF: supervisor instruction fetch in kernel mode [ 45.164911][ T1038] #PF: error_code(0x0010) - not-present page [ 45.164915][ T1038] PGD 1daeea067 P4D 1daeea067 PUD 1f3ef6067 PMD 0 [ 45.164938][ T1038] Oops: 0010 [#1] PREEMPT SMP KASAN [ 45.197511][ T121] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.198005][ T1038] CPU: 0 PID: 1038 Comm: syz.0.227 Not tainted 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 45.217062][ T1038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 45.227001][ T1038] RIP: 0010:0x86 [ 45.227723][ T121] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.230380][ T1038] Code: Bad RIP value. [ 45.247014][ T1038] RSP: 0018:ffff8881e4f4f308 EFLAGS: 00010086 [ 45.252911][ T1038] RAX: ffff8881e4f4f338 RBX: dffffc0000000000 RCX: 0000000000040000 [ 45.260723][ T1038] RDX: ffffc90001146000 RSI: 0000000000020640 RDI: 0000000000020641 [ 45.268537][ T1038] RBP: 0000000000000ec0 R08: ffffffff82316961 R09: ffffffff811c8ff5 [ 45.276443][ T1038] R10: ffff8881e61bcec0 R11: 0000000000000002 R12: ffffffff84601550 [ 45.278342][ T121] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 45.284245][ T1038] R13: fffffe0000000ec8 R14: ffff8881e4e40000 R15: fffffe0000000ecb [ 45.284253][ T1038] FS: 00007f0be66cc6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 45.284259][ T1038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.284264][ T1038] CR2: 000000000000005c CR3: 00000001e6c49000 CR4: 00000000003426b0 [ 45.284271][ T1038] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.284283][ T1038] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.322698][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.323988][ T1038] Call Trace: [ 45.324010][ T1038] ? __die+0xb4/0x100 [ 45.324025][ T1038] ? no_context+0xbda/0xe50 [ 45.359113][ T1038] ? is_prefetch+0x4b0/0x4b0 [ 45.363541][ T1038] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 45.368909][ T1038] ? __do_page_fault+0xa7d/0xbb0 [ 45.373684][ T1038] ? vmx_spec_ctrl_restore_host+0x83/0xfd [ 45.379352][ T1038] ? __bad_area_nosemaphore+0xc0/0x460 [ 45.384638][ T1038] ? page_fault+0x2f/0x40 [ 45.388795][ T1038] ? __entry_text_end+0x4/0x4 [ 45.389757][ T121] usb 3-1: config 0 descriptor?? [ 45.393300][ T1038] ? vmx_handle_exit_irqoff+0x45/0x220 [ 45.393310][ T1038] ? check_preemption_disabled+0x91/0x320 [ 45.393325][ T1038] ? handle_external_interrupt_irqoff+0x148/0x2f0 [ 45.415319][ T1038] ? handle_external_interrupt_irqoff+0x12a/0x2f0 [ 45.421643][ T1038] ? __entry_text_end+0x4/0x4 [ 45.426147][ T1038] ? vcpu_enter_guest+0x2d06/0x9f70 [ 45.431187][ T1038] ? kvm_arch_vcpu_put+0x352/0x580 [ 45.436144][ T1038] ? check_preemption_disabled+0x9f/0x320 [ 45.441686][ T1038] ? debug_smp_processor_id+0x20/0x20 [ 45.446900][ T1038] ? check_preemption_disabled+0x153/0x320 [ 45.452531][ T1038] ? local_bh_enable+0x20/0x20 [ 45.457142][ T1038] ? check_preemption_disabled+0x9f/0x320 [ 45.462687][ T1038] ? check_preemption_disabled+0x9f/0x320 [ 45.468258][ T1038] ? debug_smp_processor_id+0x20/0x20 [ 45.473468][ T1038] ? check_preemption_disabled+0x9f/0x320 [ 45.479018][ T1038] ? check_preemption_disabled+0x9f/0x320 [ 45.484572][ T1038] ? debug_smp_processor_id+0x20/0x20 [ 45.489779][ T1038] ? check_preemption_disabled+0x9f/0x320 [ 45.495342][ T1038] ? debug_smp_processor_id+0x20/0x20 [ 45.500549][ T1038] ? switch_mm_irqs_off+0x325/0xab0 [ 45.505663][ T1038] ? _raw_spin_unlock_irq+0x4a/0x60 [ 45.510696][ T1038] ? finish_task_switch+0x130/0x590 [ 45.515722][ T1038] ? __schedule+0xb0d/0x1320 [ 45.520147][ T1038] ? reweight_entity+0x7e/0xac0 [ 45.524840][ T1038] ? is_mmconf_reserved+0x430/0x430 [ 45.529875][ T1038] ? plist_add+0x3f2/0x490 [ 45.534212][ T1038] ? plist_check_list+0x1f8/0x220 [ 45.539084][ T1038] ? schedule+0x143/0x1d0 [ 45.543234][ T1038] ? futex_wait_queue_me+0x378/0x690 [ 45.548375][ T1038] ? vmx_vcpu_load_vmcs+0x655/0x8b0 [ 45.553382][ T1038] ? futex_wait_setup+0x6c0/0x6c0 [ 45.558241][ T1038] ? read_msr+0x40/0x40 [ 45.562368][ T1038] ? check_preemption_disabled+0x9f/0x320 [ 45.567947][ T1038] ? cpus_share_cache+0x110/0x110 [ 45.572776][ T1038] ? check_preemption_disabled+0x9f/0x320 [ 45.578347][ T1038] ? debug_smp_processor_id+0x20/0x20 [ 45.583539][ T1038] ? kvm_check_async_pf_completion+0x387/0x3a0 [ 45.589537][ T1038] ? kvm_arch_vcpu_ioctl_run+0x748/0x18d0 [ 45.595269][ T1038] ? kvm_vcpu_ioctl+0x7f9/0xd10 [ 45.599926][ T1038] ? create_vcpu_fd+0x120/0x120 [ 45.604625][ T1038] ? do_futex+0x13c1/0x19f0 [ 45.608950][ T1038] ? __kasan_slab_free+0x233/0x270 [ 45.613900][ T1038] ? __kasan_slab_free+0x1b5/0x270 [ 45.618991][ T1038] ? create_vcpu_fd+0x120/0x120 [ 45.623773][ T1038] ? do_vfs_ioctl+0x742/0x1720 [ 45.628381][ T1038] ? ioctl_preallocate+0x250/0x250 [ 45.633336][ T1038] ? __fget+0x407/0x490 [ 45.637348][ T1038] ? fget_many+0x20/0x20 [ 45.641392][ T1038] ? switch_fpu_return+0x1d4/0x410 [ 45.646355][ T1038] ? security_file_ioctl+0x7d/0xa0 [ 45.651381][ T1038] ? __x64_sys_ioctl+0xd4/0x110 [ 45.656080][ T1038] ? do_syscall_64+0xca/0x1c0 [ 45.658284][ T121] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 45.660589][ T1038] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 45.660595][ T1038] Modules linked in: [ 45.660615][ T1038] CR2: 0000000000000086 [ 45.683209][ T121] usb 3-1: USB disconnect, device number 5 [ 45.684981][ T1038] ---[ end trace 6b6e34c046c6181a ]--- [ 45.684999][ T1038] RIP: 0010:0x86 [ 45.692863][ T121] usblp0: removed [ 45.695929][ T1038] Code: Bad RIP value. [ 45.695936][ T1038] RSP: 0018:ffff8881e4f4f308 EFLAGS: 00010086 [ 45.712569][ T1038] RAX: ffff8881e4f4f338 RBX: dffffc0000000000 RCX: 0000000000040000 [ 45.720561][ T1038] RDX: ffffc90001146000 RSI: 0000000000020640 RDI: 0000000000020641 [ 45.728371][ T1038] RBP: 0000000000000ec0 R08: ffffffff82316961 R09: ffffffff811c8ff5 [ 45.736346][ T1038] R10: ffff8881e61bcec0 R11: 0000000000000002 R12: ffffffff84601550 [ 45.744109][ T1038] R13: fffffe0000000ec8 R14: ffff8881e4e40000 R15: fffffe0000000ecb [ 45.751923][ T1038] FS: 00007f0be66cc6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 45.761033][ T1038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.767482][ T1038] CR2: 000000000000005c CR3: 00000001e6c49000 CR4: 00000000003426b0 [ 45.775308][ T1038] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.783202][ T1038] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.791092][ T1038] Kernel panic - not syncing: Fatal exception [ 45.797081][ T1038] Kernel Offset: disabled [ 45.801164][ T1038] Rebooting in 86400 seconds..