last executing test programs: 6.88777264s ago: executing program 3 (id=1230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.817879516s ago: executing program 4 (id=1234): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0xfe00, 0xffffffffffffffff) 6.033373792s ago: executing program 3 (id=1237): syz_open_dev$loop(&(0x7f0000000180), 0xaf, 0xa000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x3) close(r3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) 5.905535353s ago: executing program 4 (id=1239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(r2, &(0x7f0000000680)=[{&(0x7f0000000780)="6823e4a3328425456665df2c3f3f2101996839df339286e62a23b2014f0eaf7119e0968f2a769ce5bc09f2c80d54e9c3da6dd661463c71d5f99d646c", 0x3c}], 0x1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.901933613s ago: executing program 3 (id=1240): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000000866660488000000000001090224000100000000090400000103000000092100000001330700090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "fe862411"}]}}, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0xcf7, 0xfffffffffffffffc, 0x40, 0x5, 0x8]}, &(0x7f0000000100)=0x78) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.679407542s ago: executing program 1 (id=1241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r2}, 0x19) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) 5.653640304s ago: executing program 4 (id=1242): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c756e616d653dae"]) syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) 5.638162335s ago: executing program 1 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.567686421s ago: executing program 4 (id=1244): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x46, &(0x7f0000000000), 0x4) r4 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x10000, 0x9, 0x17, 0x140c, r0, 0x2, '\x00', 0x0, r4, 0x0, 0x2, 0x3, 0x200000000005, @void, @value, @void, @value}, 0x48) lseek(r4, 0x0, 0x3) 4.51381321s ago: executing program 1 (id=1246): r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$int_in(r0, 0x5452, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x7ca36000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180)) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x0) 4.310212237s ago: executing program 1 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000ac0)=0x1, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x35, 0xe, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0003730000000003"], 0x0, 0x0}, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 4.026268161s ago: executing program 0 (id=1261): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socketpair(0xf, 0x3, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.179604732s ago: executing program 0 (id=1250): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0xfe00, 0xffffffffffffffff) 3.179443292s ago: executing program 4 (id=1251): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="000006"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000015c0)={0x34, &(0x7f0000000c80)={0x20, 0xf, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x0, 0x7, 0x5, "64d1cfa707"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x890b, &(0x7f0000000000)=@buf) 2.447426874s ago: executing program 2 (id=1252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.447239924s ago: executing program 3 (id=1253): ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={@mcast2, @private0}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) sendfile(r3, r1, 0x0, 0x10000a007) 2.287320378s ago: executing program 0 (id=1254): r0 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x303}, &(0x7f0000000080)=0x0, &(0x7f0000000780)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_uring_enter(r0, 0x0, 0x464f, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x1815, 0x0, 0x0, 0x0, 0x0) 2.107450913s ago: executing program 1 (id=1256): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x42, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002206"], 0x0}, 0x0) 2.084184385s ago: executing program 2 (id=1257): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) tkill(0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syslog(0x4, &(0x7f0000000740)=""/28, 0x1c) 1.387744333s ago: executing program 0 (id=1259): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.387554703s ago: executing program 2 (id=1260): r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$int_in(r0, 0x5452, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x7ca36000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180)) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x0) 1.387362503s ago: executing program 3 (id=1262): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@remote}, {@in6=@loopback, 0x0, 0x6c}}, 0x4}}, 0xf8}}, 0x0) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x5}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) 303.275094ms ago: executing program 2 (id=1263): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00?']) 301.727205ms ago: executing program 2 (id=1264): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000940)=0xd30, 0x2) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000240)={0x0, 0xa, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x400, r6, 0x1, 0x70bd2a, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x622}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x500}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xebb5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @mcast2, 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x862}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd8}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20abd60e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x74}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x60}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf0f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffc0}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7a7c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x100, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}]}]}, 0x400}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 301.063505ms ago: executing program 4 (id=1265): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "f8c8a46d962b8623", "6fe02066d144c7aa813be61ebe5bda9d", "7c805367", "ec6e097531baf812"}, 0x28) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000e40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2c93497d9ae41ebc6099d95fea5e764494873e0d82a172b3bb54f35039c7d81e9ab07f2fb4dad61bd50c4b2c861c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d0200000050685e0f4f079d2d8e79be174ef9355b70739c712c5d3f739f01dfbf5eb2772052b215d2", 0xc5}], 0x1}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x4000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x0, 0x20000}}}}]}, 0x4c}}, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902", @ANYRES32], 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r1) 300.579955ms ago: executing program 0 (id=1266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x1, 0x7, 0xffff}, 0x20) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'vlan1\x00', {}, 0x77b5}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x3}}) 201.064473ms ago: executing program 3 (id=1267): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 174.406806ms ago: executing program 2 (id=1268): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x58000, 0x42) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x8001) ioctl$KVM_RUN(r3, 0xae80, 0x0) 59.275085ms ago: executing program 0 (id=1269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 0s ago: executing program 1 (id=1270): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='tlb_flush\x00', r2}, 0x10) socket$inet6(0xa, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x1, 0x1000, 0x1000, &(0x7f000009f000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f00001ac000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) kernel console output (not intermixed with test programs): T318] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 116.509715][ T318] usb 3-1: Using ep0 maxpacket: 32 [ 116.629767][ T318] usb 3-1: config 0 has no interfaces? [ 116.789717][ T318] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 116.798707][ T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.806551][ T318] usb 3-1: Product: syz [ 116.810506][ T318] usb 3-1: Manufacturer: syz [ 116.814971][ T318] usb 3-1: SerialNumber: syz [ 116.819929][ T6] usb 1-1: USB disconnect, device number 17 [ 116.820046][ T318] usb 3-1: config 0 descriptor?? [ 116.993914][ T2492] loop3: detected capacity change from 0 to 512 [ 117.040026][ T2143] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.058759][ T2494] loop3: detected capacity change from 0 to 128 [ 117.182990][ T2498] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 117.190491][ T2498] EXT4-fs warning (device sda1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 117.313415][ T2507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.712'. [ 117.407753][ T2510] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.415103][ T2510] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.422471][ T2510] device bridge_slave_0 entered promiscuous mode [ 117.434457][ T2510] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.441420][ T2510] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.448476][ T2510] device bridge_slave_1 entered promiscuous mode [ 117.495334][ T2510] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.502318][ T2510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.509388][ T2510] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.516259][ T2510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.540361][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.547956][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.555167][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.564795][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.573368][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.580264][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.587376][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.595567][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.602424][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.618233][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.627162][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.643753][ T2510] device veth0_vlan entered promiscuous mode [ 117.650057][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.658637][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.667008][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.674297][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.687733][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.696330][ T2510] device veth1_macvtap entered promiscuous mode [ 117.705459][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.716897][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.740810][ T37] usb 5-1: USB disconnect, device number 12 [ 118.040403][ T360] device bridge_slave_1 left promiscuous mode [ 118.046429][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.053689][ T360] device bridge_slave_0 left promiscuous mode [ 118.059638][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.067175][ T360] device veth1_macvtap left promiscuous mode [ 118.073158][ T360] device veth0_vlan left promiscuous mode [ 118.282400][ T2539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 118.420433][ T2548] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.517777][ T28] audit: type=1400 audit(1729090201.912:1605): avc: denied { watch } for pid=2551 comm="syz.3.724" path=2F6D656D66643A59FFFF202864656C6574656429 dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.927393][ T334] usb 3-1: USB disconnect, device number 16 [ 119.159237][ T2570] overlayfs: statfs failed on './file0' [ 119.324265][ T28] audit: type=1400 audit(1729090202.722:1606): avc: denied { mounton } for pid=2579 comm="syz.1.737" path="/5/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 120.174749][ T2600] loop3: detected capacity change from 0 to 512 [ 120.185558][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.221934][ T2600] EXT4-fs (loop3): 1 orphan inode deleted [ 120.227572][ T2600] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 120.256829][ T2600] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 120.319530][ T2455] EXT4-fs (loop3): unmounting filesystem. [ 120.325567][ T2612] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 120.669697][ T318] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 120.919653][ T318] usb 2-1: Using ep0 maxpacket: 16 [ 121.039699][ T318] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 121.199825][ T318] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 121.214022][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.259824][ T318] usb 2-1: Product: syz [ 121.264023][ T318] usb 2-1: Manufacturer: syz [ 121.268397][ T318] usb 2-1: SerialNumber: syz [ 121.274329][ T318] usb 2-1: config 0 descriptor?? [ 121.306281][ T2631] loop3: detected capacity change from 0 to 512 [ 121.314872][ T318] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 121.330316][ T318] usb 2-1: Detected FT232R [ 121.371233][ T2631] EXT4-fs (loop3): 1 orphan inode deleted [ 121.377027][ T2631] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.386231][ T2631] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038 (0x7fffffff) [ 121.529706][ T318] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 121.669791][ T334] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 121.791095][ T318] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 121.886413][ T28] audit: type=1400 audit(1729090205.282:1607): avc: denied { getopt } for pid=2639 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.887478][ T2640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.754'. [ 121.907252][ T28] audit: type=1400 audit(1729090205.282:1608): avc: denied { write } for pid=2639 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.915868][ T2640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.754'. [ 121.935178][ T334] usb 4-1: Using ep0 maxpacket: 32 [ 121.943808][ T2640] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.955726][ T2640] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.962708][ T2640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.965602][ T28] audit: type=1400 audit(1729090205.362:1609): avc: denied { write } for pid=2641 comm="syz.0.755" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.993846][ T318] usb 2-1: USB disconnect, device number 18 [ 122.015903][ T318] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 122.030895][ T318] ftdi_sio 2-1:0.0: device disconnected [ 122.099736][ T334] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 122.107975][ T334] usb 4-1: config 0 has an invalid interface number: 253 but max is 1 [ 122.117595][ T334] usb 4-1: config 0 has no interface number 0 [ 122.124262][ T334] usb 4-1: config 0 has no interface number 1 [ 122.319833][ T334] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 122.328836][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.336686][ T334] usb 4-1: Product: syz [ 122.341062][ T334] usb 4-1: Manufacturer: syz [ 122.345463][ T334] usb 4-1: SerialNumber: syz [ 122.350574][ T334] usb 4-1: config 0 descriptor?? [ 122.671189][ T6] usb 4-1: USB disconnect, device number 14 [ 122.719750][ T334] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 123.079749][ T334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.089725][ T334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.169764][ T334] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 123.178757][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.186862][ T334] usb 3-1: SerialNumber: syz [ 123.188527][ T2455] EXT4-fs (loop3): unmounting filesystem. [ 123.275261][ T2676] loop3: detected capacity change from 0 to 8192 [ 123.450204][ T334] usb 3-1: 0:2 : does not exist [ 123.584593][ T2680] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 123.717029][ T2684] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.733565][ T2684] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.740836][ T2684] device bridge_slave_0 entered promiscuous mode [ 123.747461][ T2684] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.754476][ T2684] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.761706][ T2684] device bridge_slave_1 entered promiscuous mode [ 123.806912][ T2684] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.813794][ T2684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.820895][ T2684] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.827658][ T2684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.847149][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.854625][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.861998][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.873418][ T1026] usb 3-1: USB disconnect, device number 17 [ 123.880962][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.888979][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.896010][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.903174][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.911219][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.918064][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.925334][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.934290][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.952586][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.960791][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.968484][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.975940][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.984381][ T2684] device veth0_vlan entered promiscuous mode [ 123.996362][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.005364][ T2684] device veth1_macvtap entered promiscuous mode [ 124.017891][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.026273][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.194615][ T28] audit: type=1400 audit(1729090207.592:1610): avc: denied { append } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.219715][ T2651] Bluetooth: hci0: command 0x1003 tx timeout [ 124.220088][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.247976][ T28] audit: type=1400 audit(1729090207.642:1611): avc: denied { create } for pid=2694 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.285523][ T28] audit: type=1400 audit(1729090207.642:1612): avc: denied { bpf } for pid=2694 comm="syz.3.774" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.313823][ T28] audit: type=1400 audit(1729090207.642:1613): avc: denied { prog_load } for pid=2694 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 124.347371][ T28] audit: type=1400 audit(1729090207.642:1614): avc: denied { create } for pid=2694 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.380458][ T388] device bridge_slave_1 left promiscuous mode [ 124.392028][ T28] audit: type=1400 audit(1729090207.642:1615): avc: denied { setopt } for pid=2694 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.399465][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.413172][ T28] audit: type=1400 audit(1729090207.642:1616): avc: denied { ioctl } for pid=2694 comm="syz.3.774" path="socket:[32519]" dev="sockfs" ino=32519 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.443229][ T388] device bridge_slave_0 left promiscuous mode [ 124.451398][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.478265][ T388] device veth1_macvtap left promiscuous mode [ 124.494108][ T388] device veth0_vlan left promiscuous mode [ 126.109626][ C1] sched: RT throttling activated [ 127.116177][ T2718] loop4: detected capacity change from 0 to 256 [ 127.125297][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 127.125312][ T28] audit: type=1400 audit(1729090210.522:1634): avc: denied { mounton } for pid=2717 comm="syz.4.779" path="/1/file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 127.178572][ T28] audit: type=1400 audit(1729090210.572:1635): avc: denied { mount } for pid=2720 comm="syz.2.780" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 127.204658][ T2721] incfs: Can't find or create .index dir in ./file0 [ 127.221379][ T2721] incfs: mount failed -14 [ 127.227554][ T28] audit: type=1400 audit(1729090210.602:1636): avc: denied { mounton } for pid=2720 comm="syz.2.780" path="/123/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.253182][ T28] audit: type=1400 audit(1729090210.602:1637): avc: denied { write } for pid=2720 comm="syz.2.780" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.287577][ T28] audit: type=1400 audit(1729090210.602:1638): avc: denied { add_name } for pid=2720 comm="syz.2.780" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.323044][ T2732] loop3: detected capacity change from 0 to 256 [ 127.348730][ T28] audit: type=1400 audit(1729090210.602:1639): avc: denied { create } for pid=2720 comm="syz.2.780" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 127.418448][ T28] audit: type=1400 audit(1729090210.602:1640): avc: denied { associate } for pid=2720 comm="syz.2.780" name=".index" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 127.470436][ T28] audit: type=1400 audit(1729090210.622:1641): avc: denied { execmem } for pid=2717 comm="syz.4.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 127.501072][ T2718] netlink: 'syz.4.779': attribute type 3 has an invalid length. [ 127.519841][ T28] audit: type=1400 audit(1729090210.682:1642): avc: denied { unmount } for pid=835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 127.550594][ T28] audit: type=1400 audit(1729090210.772:1643): avc: denied { create } for pid=2730 comm="syz.3.785" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 127.950207][ T6] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 128.449759][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.460680][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.470863][ T6] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 128.480340][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.493386][ T6] usb 2-1: config 0 descriptor?? [ 128.562081][ T2782] process 'syz.4.803' launched './file0' with NULL argv: empty string added [ 128.679723][ T1026] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 128.774392][ T2786] overlayfs: statfs failed on './file0' [ 128.961051][ T6] saitek 0003:06A3:0621.001A: unbalanced collection at end of report description [ 128.969724][ T377] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 128.977636][ T6] saitek 0003:06A3:0621.001A: parse failed [ 128.983354][ T6] saitek: probe of 0003:06A3:0621.001A failed with error -22 [ 129.050116][ T1026] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 129.060767][ T1026] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.071770][ T1026] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.079666][ T37] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 129.081560][ T1026] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 129.101673][ T1026] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 129.110702][ T1026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.122517][ T1026] usb 1-1: config 0 descriptor?? [ 129.163880][ T333] usb 2-1: USB disconnect, device number 19 [ 129.319687][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 129.340569][ T377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.351344][ T377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.361837][ T377] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.371375][ T377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.383559][ T377] usb 5-1: config 0 descriptor?? [ 129.439754][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.450640][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.460575][ T37] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.473621][ T37] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.482473][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.490921][ T37] usb 4-1: config 0 descriptor?? [ 129.620592][ T1026] hid-rmi 0003:17EF:6085.001B: unknown main item tag 0x0 [ 129.627637][ T1026] hid-rmi 0003:17EF:6085.001B: unknown main item tag 0x0 [ 129.634455][ T1026] hid-rmi 0003:17EF:6085.001B: unknown main item tag 0x0 [ 129.641418][ T1026] hid-rmi 0003:17EF:6085.001B: unknown main item tag 0x0 [ 129.648742][ T1026] hid-rmi 0003:17EF:6085.001B: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.0-1/input0 [ 129.860468][ T377] hid (null): bogus close delimiter [ 129.866355][ T1026] usb 1-1: USB disconnect, device number 18 [ 129.959669][ T333] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 129.990785][ T37] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 129.999967][ T37] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001D/input/input12 [ 130.012217][ T37] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 130.079753][ T377] usb 5-1: string descriptor 0 read error: -22 [ 130.197988][ T37] usb 4-1: USB disconnect, device number 15 [ 130.350671][ T377] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.001C/input/input13 [ 130.363735][ T377] uclogic 0003:256C:006D.001C: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 130.376311][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.397820][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.407500][ T333] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 130.416736][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.425131][ T333] usb 2-1: config 0 descriptor?? [ 130.554065][ T37] usb 5-1: USB disconnect, device number 13 [ 130.941091][ T333] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 131.072599][ T2818] loop4: detected capacity change from 0 to 512 [ 131.081360][ T2818] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 131.089782][ T2818] EXT4-fs (loop4): 1 truncate cleaned up [ 131.095263][ T2818] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.114337][ T2684] EXT4-fs (loop4): unmounting filesystem. [ 131.521346][ T2833] __vm_enough_memory: pid: 2833, comm: syz.0.829, no enough memory for the allocation [ 131.744584][ T2837] loop3: detected capacity change from 0 to 512 [ 131.768500][ T2837] EXT4-fs: Ignoring removed i_version option [ 131.788779][ T2837] EXT4-fs: Ignoring removed nobh option [ 131.799983][ T333] pyra 0003:1E7D:2CF6.001E: couldn't init struct pyra_device [ 131.807615][ T2837] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.817526][ T333] pyra 0003:1E7D:2CF6.001E: couldn't install mouse [ 131.826414][ T333] pyra: probe of 0003:1E7D:2CF6.001E failed with error -71 [ 131.843481][ T333] usb 2-1: USB disconnect, device number 20 [ 131.874727][ T2837] EXT4-fs (loop3): 1 truncate cleaned up [ 131.889547][ T2837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 131.961431][ T2837] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #18: comm syz.3.819: invalid indirect mapped block 2349660427 (level 0) [ 131.995388][ T2455] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /33/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 132.019919][ T2455] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 132.041539][ T2455] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /33/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 132.064884][ T2455] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 132.087129][ T2455] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /33/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 132.109681][ T2455] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 132.130711][ T2455] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /33/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 132.153340][ T2455] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 132.174512][ T2455] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /33/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 132.285811][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 132.285827][ T28] audit: type=1400 audit(1729090215.682:1703): avc: denied { read } for pid=2840 comm="syz.4.822" name="uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.289096][ T2843] syz.0.821[2843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.292759][ T2841] input: syz0 as /devices/virtual/input/input14 [ 132.332703][ T28] audit: type=1400 audit(1729090215.692:1704): avc: denied { ioctl } for pid=2840 comm="syz.4.822" path="/dev/uinput" dev="devtmpfs" ino=170 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.360716][ T2455] EXT4-fs (loop3): unmounting filesystem. [ 132.362084][ T2843] syz.0.821[2843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.659677][ T6] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 132.800282][ T8] device bridge_slave_1 left promiscuous mode [ 132.806440][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.813884][ T8] device bridge_slave_0 left promiscuous mode [ 132.819999][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.827578][ T8] device veth1_macvtap left promiscuous mode [ 132.833556][ T8] device veth0_vlan left promiscuous mode [ 132.919722][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 133.069767][ T6] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 133.216405][ T28] audit: type=1400 audit(1729090216.612:1705): avc: denied { mounton } for pid=2857 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 133.249731][ T6] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 133.267930][ T28] audit: type=1400 audit(1729090216.642:1706): avc: denied { write } for pid=2854 comm="syz.1.836" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.282698][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.302947][ T6] usb 1-1: Product: syz [ 133.307595][ T6] usb 1-1: Manufacturer: syz [ 133.312827][ T6] usb 1-1: SerialNumber: syz [ 133.314612][ T28] audit: type=1400 audit(1729090216.692:1707): avc: denied { create } for pid=2860 comm="syz.1.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.319837][ T6] usb 1-1: config 0 descriptor?? [ 133.343439][ T28] audit: type=1400 audit(1729090216.692:1708): avc: denied { bind } for pid=2860 comm="syz.1.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.363333][ T28] audit: type=1400 audit(1729090216.692:1709): avc: denied { listen } for pid=2860 comm="syz.1.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.383322][ T6] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 133.383381][ T28] audit: type=1400 audit(1729090216.702:1710): avc: denied { connect } for pid=2860 comm="syz.1.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.394785][ T6] usb 1-1: Detected FT232R [ 133.415169][ T2857] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.422205][ T2857] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.429661][ T2857] device bridge_slave_0 entered promiscuous mode [ 133.436730][ T2857] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.443965][ T2857] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.451427][ T2857] device bridge_slave_1 entered promiscuous mode [ 133.506525][ T28] audit: type=1400 audit(1729090216.902:1711): avc: denied { write } for pid=2857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.514486][ T2857] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.526990][ T28] audit: type=1400 audit(1729090216.902:1712): avc: denied { read } for pid=2857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.533790][ T2857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.533885][ T2857] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.533898][ T2857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.575086][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.582867][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.591994][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.599425][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.606682][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 133.620531][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.629037][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.635918][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.643241][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.651890][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.658832][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.680405][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.688361][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.699769][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.715307][ T2857] device veth0_vlan entered promiscuous mode [ 133.722500][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.730623][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.737916][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.753819][ T2857] device veth1_macvtap entered promiscuous mode [ 133.761831][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.778259][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.786756][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.869776][ T6] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5 [ 133.870001][ T2869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.826'. [ 133.877273][ T6] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 133.885069][ T2869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.826'. [ 133.901889][ T2869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.826'. [ 134.035943][ T2871] loop4: detected capacity change from 0 to 512 [ 134.074214][ T2871] EXT4-fs (loop4): 1 orphan inode deleted [ 134.080301][ T2871] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 134.089465][ T2871] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 134.130344][ T377] usb 1-1: USB disconnect, device number 19 [ 134.137062][ T377] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 134.146707][ T377] ftdi_sio 1-1:0.0: device disconnected [ 134.271747][ T2885] syz.3.833[2885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.271800][ T2885] syz.3.833[2885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.379814][ T6] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 134.699773][ T37] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 134.759701][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 134.909727][ T6] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 134.917739][ T6] usb 5-1: config 0 has an invalid interface number: 253 but max is 1 [ 134.925948][ T6] usb 5-1: config 0 has no interface number 0 [ 134.932097][ T6] usb 5-1: config 0 has no interface number 1 [ 135.069744][ T37] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 135.080934][ T37] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.090552][ T37] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 135.110119][ T6] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 135.119040][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.127067][ T6] usb 5-1: Product: syz [ 135.131316][ T6] usb 5-1: Manufacturer: syz [ 135.135732][ T6] usb 5-1: SerialNumber: syz [ 135.149923][ T6] usb 5-1: config 0 descriptor?? [ 135.267991][ T37] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.277730][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.286335][ T37] usb 4-1: Product: syz [ 135.290562][ T37] usb 4-1: Manufacturer: syz [ 135.294997][ T37] usb 4-1: SerialNumber: syz [ 135.466238][ T6] usb 5-1: USB disconnect, device number 14 [ 135.560565][ T2897] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.000648][ T2684] EXT4-fs (loop4): unmounting filesystem. [ 136.079778][ T2934] syz.0.848[2934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.079831][ T2934] syz.0.848[2934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.220152][ T2897] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.459923][ T37] cdc_ncm 4-1:1.0: bind() failure [ 136.477644][ T37] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 136.484488][ T37] cdc_ncm 4-1:1.1: bind() failure [ 136.519737][ T333] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 136.676263][ T19] usb 4-1: USB disconnect, device number 16 [ 136.880475][ T333] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 136.911426][ T333] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 137.099724][ T333] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 137.118800][ T333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.126803][ T333] usb 2-1: Product: syz [ 137.130835][ T333] usb 2-1: Manufacturer: syz [ 137.135250][ T333] usb 2-1: SerialNumber: syz [ 137.149224][ T333] usb 2-1: config 0 descriptor?? [ 137.169709][ T2949] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 137.176763][ T2949] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 137.391014][ T2949] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 137.398084][ T2949] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.783649][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 139.783663][ T28] audit: type=1400 audit(1729090223.182:1735): avc: denied { create } for pid=2961 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.810185][ T2964] syz.4.859[2964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.810268][ T2964] syz.4.859[2964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.839320][ T28] audit: type=1400 audit(1729090223.182:1736): avc: denied { setopt } for pid=2961 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.873290][ T2964] syz.4.859[2964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.873373][ T2964] syz.4.859[2964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.877484][ T28] audit: type=1400 audit(1729090223.182:1737): avc: denied { write } for pid=2961 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.915546][ T28] audit: type=1400 audit(1729090223.182:1738): avc: denied { read } for pid=2961 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.944351][ T28] audit: type=1400 audit(1729090223.342:1739): avc: denied { relabelfrom } for pid=2962 comm="syz.4.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 139.964413][ T28] audit: type=1400 audit(1729090223.342:1740): avc: denied { relabelto } for pid=2962 comm="syz.4.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 140.033161][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.042180][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.043974][ T2984] loop4: detected capacity change from 0 to 128 [ 140.049521][ T2970] device bridge_slave_0 entered promiscuous mode [ 140.059789][ T2984] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.063860][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.076925][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.077639][ T2984] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038 (0x7fffffff) [ 140.084643][ T2970] device bridge_slave_1 entered promiscuous mode [ 140.118210][ T28] audit: type=1400 audit(1729090223.512:1741): avc: denied { write } for pid=2983 comm="syz.4.865" name="encrypted_dir" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 140.121039][ T2984] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 140.140677][ T28] audit: type=1400 audit(1729090223.512:1742): avc: denied { add_name } for pid=2983 comm="syz.4.865" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 140.153392][ T333] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 140.203519][ T2684] EXT4-fs (loop4): unmounting filesystem. [ 140.204088][ T28] audit: type=1400 audit(1729090223.602:1743): avc: denied { create } for pid=2991 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.229203][ T28] audit: type=1400 audit(1729090223.602:1744): avc: denied { bind } for pid=2991 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.252561][ T333] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 5e:14:07:1f:26:20 [ 140.288370][ T2997] loop3: detected capacity change from 0 to 1024 [ 140.318135][ T333] usb 2-1: USB disconnect, device number 21 [ 140.331734][ T2997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 140.332994][ T333] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 140.413770][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.420688][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.427735][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.434580][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.442047][ T1345] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 140.467094][ T1345] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 140.486054][ T3016] bridge0: port 3(vlan2) entered blocking state [ 140.493425][ T1345] EXT4-fs (loop3): This should not happen!! Data will be lost [ 140.493425][ T1345] [ 140.495773][ T3016] bridge0: port 3(vlan2) entered disabled state [ 140.503397][ T1345] EXT4-fs (loop3): Total free blocks count 0 [ 140.516335][ T1345] EXT4-fs (loop3): Free/Dirty block details [ 140.525374][ T1345] EXT4-fs (loop3): free_blocks=68451041280 [ 140.530043][ T3016] device vlan2 entered promiscuous mode [ 140.536404][ T3016] device vlan1 entered promiscuous mode [ 140.536499][ T1345] EXT4-fs (loop3): dirty_blocks=64 [ 140.552546][ T3016] bridge0: port 3(vlan2) entered blocking state [ 140.557361][ T1345] EXT4-fs (loop3): Block reservation details [ 140.558628][ T3016] bridge0: port 3(vlan2) entered forwarding state [ 140.571073][ T1345] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 140.590838][ T2857] EXT4-fs (loop3): unmounting filesystem. [ 140.633816][ T3016] bridge0: port 3(vlan2) entered disabled state [ 140.639991][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.646882][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.705501][ T3035] loop4: detected capacity change from 0 to 1024 [ 140.736607][ T3035] EXT4-fs: Ignoring removed oldalloc option [ 140.760930][ T3016] device vlan1 left promiscuous mode [ 140.771297][ T3035] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.805771][ T3023] device bridge_slave_0 left promiscuous mode [ 140.812663][ T3023] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.830096][ T3023] device bridge_slave_1 left promiscuous mode [ 140.839795][ T3023] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.851043][ T3023] device vlan2 left promiscuous mode [ 140.869271][ T3023] bridge0: port 3(vlan2) entered disabled state [ 140.887482][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.906678][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.937144][ T2684] EXT4-fs (loop4): unmounting filesystem. [ 140.981696][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.989484][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.012208][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.022029][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.030324][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.037182][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.044851][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.053402][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.062417][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.069280][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.092788][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.102027][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.110864][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.119032][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.130842][ T388] device bridge_slave_1 left promiscuous mode [ 141.137850][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.163419][ T388] device bridge_slave_0 left promiscuous mode [ 141.170990][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.181647][ T388] device veth1_macvtap left promiscuous mode [ 141.187777][ T388] device veth0_vlan left promiscuous mode [ 141.282978][ T3071] syz.4.887[3071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.283053][ T3071] syz.4.887[3071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.354598][ T2970] device veth0_vlan entered promiscuous mode [ 141.377291][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.388323][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.396956][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.398555][ T3075] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 141.405101][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.427267][ T2970] device veth1_macvtap entered promiscuous mode [ 141.436019][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.451133][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.465497][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.475896][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.484314][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.499579][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.508325][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.516886][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.531684][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.729686][ T333] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 141.799721][ T37] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 142.013347][ T333] usb 1-1: Using ep0 maxpacket: 8 [ 142.230446][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.251708][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.263197][ T37] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 142.276336][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.288207][ T37] usb 4-1: config 0 descriptor?? [ 142.313622][ T3102] device syzkaller0 entered promiscuous mode [ 142.359823][ T333] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 142.368925][ T333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.377610][ T333] usb 1-1: Product: syz [ 142.382042][ T333] usb 1-1: Manufacturer: syz [ 142.386548][ T333] usb 1-1: SerialNumber: syz [ 142.431717][ T3106] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 142.661806][ T333] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 142.781933][ T37] pyra 0003:1E7D:2CF6.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 143.091420][ T334] usb 1-1: USB disconnect, device number 20 [ 143.101740][ T334] usblp0: removed [ 143.180486][ T377] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 143.405129][ T3139] loop4: detected capacity change from 0 to 512 [ 143.421683][ T3139] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.433338][ T3139] EXT4-fs (loop4): 1 truncate cleaned up [ 143.438965][ T3139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.449745][ T377] usb 2-1: device descriptor read/64, error -71 [ 143.659741][ T37] pyra 0003:1E7D:2CF6.001F: couldn't init struct pyra_device [ 143.667287][ T37] pyra 0003:1E7D:2CF6.001F: couldn't install mouse [ 143.674725][ T37] pyra: probe of 0003:1E7D:2CF6.001F failed with error -71 [ 143.690328][ T37] usb 4-1: USB disconnect, device number 17 [ 143.719683][ T334] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 143.889676][ T377] usb 2-1: device descriptor read/64, error -71 [ 144.079725][ T334] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 144.179693][ T377] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 144.239697][ T334] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 144.251996][ T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.261842][ T3148] loop3: detected capacity change from 0 to 256 [ 144.268488][ T334] usb 5-1: Product: syz [ 144.276874][ T334] usb 5-1: Manufacturer: syz [ 144.277346][ T3148] FAT-fs (loop3): Unrecognized mount option "umask=000000000000000000042eck=strict" or missing value [ 144.290118][ T334] usb 5-1: SerialNumber: syz [ 144.309984][ T334] usb 5-1: config 0 descriptor?? [ 144.339708][ T3139] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.459654][ T377] usb 2-1: device descriptor read/64, error -71 [ 144.591879][ T334] usb 5-1: USB disconnect, device number 15 [ 144.899664][ T377] usb 2-1: device descriptor read/64, error -71 [ 145.019850][ T377] usb usb2-port1: attempt power cycle [ 145.076999][ T2684] EXT4-fs (loop4): unmounting filesystem. [ 145.439730][ T377] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 145.619811][ T377] usb 2-1: device descriptor read/8, error -71 [ 145.899808][ T377] usb 2-1: device descriptor read/8, error -71 [ 146.189718][ T377] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 146.369775][ T377] usb 2-1: device descriptor read/8, error -71 [ 146.639743][ T377] usb 2-1: device descriptor read/8, error -71 [ 146.769756][ T377] usb usb2-port1: unable to enumerate USB device [ 153.306835][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 153.306851][ T28] audit: type=1400 audit(1729090236.702:1823): avc: denied { ioctl } for pid=3172 comm="syz.3.920" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35248 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.422185][ T28] audit: type=1400 audit(1729090236.792:1824): avc: denied { create } for pid=3182 comm="syz.0.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 153.800352][ T3188] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.814898][ T3188] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.831492][ T3188] device bridge_slave_0 entered promiscuous mode [ 153.843122][ T3188] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.850359][ T3188] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.857690][ T3188] device bridge_slave_1 entered promiscuous mode [ 153.928500][ T3188] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.935413][ T3188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.942512][ T3188] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.949261][ T3188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.977619][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.986422][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.994082][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.012150][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.020760][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.027723][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.035323][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.043922][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.050824][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.071526][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.079741][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.094366][ T3188] device veth0_vlan entered promiscuous mode [ 154.102427][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.111022][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.118399][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.126111][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.143916][ T3188] device veth1_macvtap entered promiscuous mode [ 154.154884][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.169718][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.178148][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.296572][ T28] audit: type=1400 audit(1729090237.692:1825): avc: denied { connect } for pid=3202 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.352308][ T360] device bridge_slave_1 left promiscuous mode [ 154.358461][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.367037][ T28] audit: type=1400 audit(1729090237.752:1826): avc: denied { accept } for pid=3207 comm="syz.0.929" laddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 154.398799][ T360] device bridge_slave_0 left promiscuous mode [ 154.417062][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.423660][ T3211] overlayfs: failed to get inode (-116) [ 154.431399][ T360] device veth1_macvtap left promiscuous mode [ 154.441888][ T3211] overlayfs: failed to get inode (-116) [ 154.442402][ T360] device veth0_vlan left promiscuous mode [ 154.641536][ T3227] device pim6reg1 entered promiscuous mode [ 154.760326][ T334] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 155.005158][ T3234] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.029667][ T334] usb 4-1: Using ep0 maxpacket: 32 [ 155.049762][ T19] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 155.190391][ T334] usb 4-1: config 0 has no interfaces? [ 155.349757][ T334] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 155.358635][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.366765][ T6] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 155.389832][ T334] usb 4-1: Product: syz [ 155.393828][ T334] usb 4-1: Manufacturer: syz [ 155.398248][ T334] usb 4-1: SerialNumber: syz [ 155.420262][ T334] usb 4-1: config 0 descriptor?? [ 155.441926][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.454244][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.458463][ T3257] netlink: 36 bytes leftover after parsing attributes in process `syz.4.946'. [ 155.463949][ T28] audit: type=1400 audit(1729090238.852:1827): avc: denied { getopt } for pid=3256 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.498731][ T19] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 155.508241][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.516420][ T28] audit: type=1400 audit(1729090238.902:1828): avc: denied { nlmsg_write } for pid=3256 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 155.542179][ T19] usb 1-1: config 0 descriptor?? [ 155.554998][ T3260] device pim6reg1 entered promiscuous mode [ 155.739830][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.750711][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.760736][ T6] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 155.769796][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.779263][ T6] usb 3-1: config 0 descriptor?? [ 155.829781][ T334] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 156.089694][ T334] usb 2-1: Using ep0 maxpacket: 16 [ 156.220310][ T334] usb 2-1: config index 0 descriptor too short (expected 65535, got 159) [ 156.228603][ T334] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 156.237284][ T334] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 156.247414][ T334] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 156.270413][ T6] sony 0003:054C:0268.0021: unknown main item tag 0x0 [ 156.277042][ T6] sony 0003:054C:0268.0021: unknown main item tag 0x0 [ 156.283642][ T6] sony 0003:054C:0268.0021: unknown main item tag 0x0 [ 156.290352][ T6] sony 0003:054C:0268.0021: unknown main item tag 0x0 [ 156.297091][ T6] sony 0003:054C:0268.0021: unknown main item tag 0x0 [ 156.305240][ T6] sony 0003:054C:0268.0021: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 156.316998][ T6] sony 0003:054C:0268.0021: failed to claim input [ 156.379932][ T19] usb 1-1: string descriptor 0 read error: -22 [ 156.419728][ T334] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.428651][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.436448][ T334] usb 2-1: Product: syz [ 156.440587][ T334] usb 2-1: Manufacturer: syz [ 156.444928][ T334] usb 2-1: SerialNumber: syz [ 156.473902][ T37] usb 3-1: USB disconnect, device number 18 [ 156.589707][ T19] uclogic 0003:256C:006D.0020: failed retrieving string descriptor #200: -71 [ 156.598389][ T19] uclogic 0003:256C:006D.0020: failed retrieving pen parameters: -71 [ 156.606236][ T19] uclogic 0003:256C:006D.0020: failed probing pen v2 parameters: -71 [ 156.614182][ T19] uclogic 0003:256C:006D.0020: failed probing parameters: -71 [ 156.621680][ T19] uclogic: probe of 0003:256C:006D.0020 failed with error -71 [ 156.630615][ T19] usb 1-1: USB disconnect, device number 21 [ 156.685086][ T28] audit: type=1400 audit(1729090240.082:1829): avc: denied { watch watch_reads } for pid=3272 comm="syz.4.951" path="/40/control" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 156.718624][ T334] usb 2-1: USB disconnect, device number 26 [ 156.723378][ T3276] loop4: detected capacity change from 0 to 512 [ 156.751241][ T3276] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.760323][ T3276] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 156.775707][ T28] audit: type=1400 audit(1729090240.172:1830): avc: denied { bind } for pid=3275 comm="syz.4.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.795503][ T28] audit: type=1400 audit(1729090240.182:1831): avc: denied { name_bind } for pid=3275 comm="syz.4.952" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 156.816445][ T28] audit: type=1400 audit(1729090240.182:1832): avc: denied { node_bind } for pid=3275 comm="syz.4.952" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 156.816879][ T2684] EXT4-fs (loop4): unmounting filesystem. [ 156.982625][ T3285] syz.2.955[3285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.982674][ T3285] syz.2.955[3285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.390292][ T19] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 157.416365][ T300] usb 4-1: USB disconnect, device number 18 [ 158.769717][ T19] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 158.794229][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.822533][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.839651][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 158.859667][ T1026] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 158.867152][ T19] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 158.876738][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.888235][ T19] usb 5-1: config 0 descriptor?? [ 159.109800][ T1026] usb 3-1: Using ep0 maxpacket: 16 [ 159.156809][ T3283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.166638][ T3283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.279702][ T1026] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.289680][ T1026] usb 3-1: config 0 has no interface number 0 [ 159.300238][ T1026] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.311175][ T1026] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.320925][ T1026] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 159.330038][ T1026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.338930][ T1026] usb 3-1: config 0 descriptor?? [ 159.400381][ T19] hid-rmi 0003:17EF:6085.0022: unknown main item tag 0x0 [ 159.408030][ T19] hid-rmi 0003:17EF:6085.0022: unknown main item tag 0x0 [ 159.420659][ T19] hid-rmi 0003:17EF:6085.0022: item fetching failed at offset 2/5 [ 159.437350][ T19] hid-rmi 0003:17EF:6085.0022: parse failed [ 159.451721][ T19] hid-rmi: probe of 0003:17EF:6085.0022 failed with error -22 [ 159.680457][ T37] usb 5-1: USB disconnect, device number 16 [ 160.028767][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 160.028781][ T28] audit: type=1400 audit(1729090243.422:1834): avc: denied { unmount } for pid=2157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 160.089715][ T1026] uclogic 0003:28BD:0071.0023: failed retrieving string descriptor #100: -71 [ 160.098334][ T1026] uclogic 0003:28BD:0071.0023: failed retrieving pen parameters: -71 [ 160.106469][ T1026] uclogic 0003:28BD:0071.0023: pen probing failed: -71 [ 160.113256][ T1026] uclogic 0003:28BD:0071.0023: failed probing parameters: -71 [ 160.120707][ T1026] uclogic: probe of 0003:28BD:0071.0023 failed with error -71 [ 160.128793][ T1026] usb 3-1: USB disconnect, device number 19 [ 160.327271][ T60] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 160.423957][ T3382] device pim6reg1 entered promiscuous mode [ 160.525973][ T3389] loop3: detected capacity change from 0 to 16 [ 160.541613][ T3389] erofs: (device loop3): mounted with root inode @ nid 36. [ 160.602728][ T28] audit: type=1400 audit(1729090244.002:1835): avc: denied { create } for pid=3390 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 160.638504][ T28] audit: type=1400 audit(1729090244.032:1836): avc: denied { read write } for pid=3392 comm="syz.2.991" name="uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 160.642548][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.669014][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.669263][ T28] audit: type=1400 audit(1729090244.032:1837): avc: denied { open } for pid=3392 comm="syz.2.991" path="/dev/uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 160.676790][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.706553][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.713934][ T60] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 160.723535][ T60] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 160.733223][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.740964][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.748307][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.755657][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.763102][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.770634][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.777978][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.785411][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.792720][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.800154][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.807519][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.814915][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.822349][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.829712][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.837035][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.844445][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.851802][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.859127][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.866521][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.873866][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.881261][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.888555][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.895800][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.903088][ T60] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 160.911880][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.919761][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.926983][ T60] usb 1-1: Product: syz [ 160.931109][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.938374][ T60] usb 1-1: Manufacturer: syz [ 160.942924][ T60] usb 1-1: SerialNumber: syz [ 160.947429][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.956988][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.964478][ T60] usb 1-1: config 0 descriptor?? [ 160.969514][ T377] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 160.979808][ T3372] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.979896][ T377] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz0 [ 160.987198][ T3372] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 161.110550][ T3397] device pim6reg1 entered promiscuous mode [ 161.150756][ T3400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.995'. [ 161.162950][ T28] audit: type=1400 audit(1729090244.562:1838): avc: denied { setopt } for pid=3401 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.184637][ T28] audit: type=1400 audit(1729090244.562:1839): avc: denied { write } for pid=3401 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.229439][ T3372] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 161.236702][ T3372] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 161.269685][ T28] audit: type=1400 audit(1729090244.662:1840): avc: denied { read } for pid=3401 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.721010][ T3434] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 162.228738][ T3440] syz.4.1009[3440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.228808][ T3440] syz.4.1009[3440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.477770][ T3464] 9pnet_fd: Insufficient options for proto=fd [ 162.549778][ T3469] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 162.557126][ T3469] EXT4-fs warning (device sda1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 163.154770][ T28] audit: type=1400 audit(1729090246.552:1841): avc: denied { read } for pid=3474 comm="syz.3.1017" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.177575][ T28] audit: type=1400 audit(1729090246.552:1842): avc: denied { open } for pid=3474 comm="syz.3.1017" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.201956][ T28] audit: type=1400 audit(1729090246.552:1843): avc: denied { ioctl } for pid=3474 comm="syz.3.1017" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.316592][ T3482] loop3: detected capacity change from 0 to 16 [ 163.339530][ T3482] erofs: (device loop3): mounted with root inode @ nid 36. [ 163.366408][ T3482] syz.3.1019: attempt to access beyond end of device [ 163.366408][ T3482] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 167.219752][ T60] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 167.235290][ T60] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 5e:14:07:1f:26:20 [ 167.258259][ T60] usb 1-1: USB disconnect, device number 22 [ 167.267550][ T60] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 167.288088][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.295163][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.358016][ T388] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.369847][ T2650] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 167.376748][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.383650][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.390805][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.397660][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.423450][ T3501] device bridge0 entered promiscuous mode [ 167.751498][ T3548] device pim6reg1 entered promiscuous mode [ 167.779669][ T1026] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 167.831228][ T3551] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 167.985856][ T28] audit: type=1400 audit(1729090251.382:1844): avc: denied { remount } for pid=3557 comm="syz.3.1035" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 167.985859][ T3558] tmpfs: Cannot retroactively limit inodes [ 168.020836][ T28] audit: type=1400 audit(1729090251.422:1845): avc: denied { bind } for pid=3559 comm="syz.3.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.061690][ T3562] loop3: detected capacity change from 0 to 512 [ 168.071220][ T1026] usb 3-1: Using ep0 maxpacket: 8 [ 168.079443][ T3562] EXT4-fs (loop3): Test dummy encryption mode enabled [ 168.087803][ T3562] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.1037: invalid block [ 168.098868][ T3562] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1037: couldn't read orphan inode 11 (err -117) [ 168.111271][ T3562] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.126849][ T28] audit: type=1400 audit(1729090251.522:1846): avc: denied { mounton } for pid=3561 comm="syz.3.1037" path="/50/file0/file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.150893][ T28] audit: type=1400 audit(1729090251.522:1847): avc: denied { setattr } for pid=3561 comm="syz.3.1037" name="work" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.172906][ T28] audit: type=1400 audit(1729090251.522:1848): avc: denied { remove_name } for pid=3561 comm="syz.3.1037" name="#56" dev="loop3" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.195621][ T28] audit: type=1400 audit(1729090251.522:1849): avc: denied { rename } for pid=3561 comm="syz.3.1037" name="#56" dev="loop3" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 168.217390][ T28] audit: type=1400 audit(1729090251.522:1850): avc: denied { unlink } for pid=3561 comm="syz.3.1037" name="#56" dev="loop3" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 168.240808][ T1026] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 168.248886][ T28] audit: type=1400 audit(1729090251.522:1851): avc: denied { unlink } for pid=3561 comm="syz.3.1037" name="#57" dev="loop3" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 168.271115][ T1026] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 168.281164][ T1026] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.290151][ T1026] usb 3-1: config 1 has no interface number 0 [ 168.290981][ T2857] EXT4-fs (loop3): unmounting filesystem. [ 168.296059][ T1026] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.315473][ T28] audit: type=1400 audit(1729090251.522:1852): avc: denied { rmdir } for pid=3561 comm="syz.3.1037" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.369236][ T28] audit: type=1400 audit(1729090251.522:1853): avc: denied { rename } for pid=3561 comm="syz.3.1037" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.440760][ T3580] loop3: detected capacity change from 0 to 2048 [ 168.452148][ T3580] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.471540][ T2857] EXT4-fs (loop3): unmounting filesystem. [ 168.519893][ T3588] bridge0: port 3(vlan2) entered blocking state [ 168.526122][ T3588] bridge0: port 3(vlan2) entered disabled state [ 168.532662][ T3588] device vlan2 entered promiscuous mode [ 168.538084][ T3588] device vlan1 entered promiscuous mode [ 168.543803][ T3588] bridge0: port 3(vlan2) entered blocking state [ 168.549908][ T3588] bridge0: port 3(vlan2) entered forwarding state [ 168.573676][ T3588] bridge0: port 3(vlan2) entered disabled state [ 168.579820][ T3588] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.586764][ T3588] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.593921][ T1026] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.603690][ T1026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.611586][ T1026] usb 3-1: Product: syz [ 168.615517][ T1026] usb 3-1: Manufacturer: syz [ 168.620493][ T1026] usb 3-1: SerialNumber: syz [ 168.641112][ T3588] device vlan1 left promiscuous mode [ 168.650706][ T3589] device bridge_slave_0 left promiscuous mode [ 168.656782][ T3589] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.665567][ T3589] device bridge_slave_1 left promiscuous mode [ 168.670106][ T1026] cdc_wdm 3-1:1.128: skipping garbage [ 168.671955][ T3589] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.677855][ T1026] cdc_wdm 3-1:1.128: skipping garbage [ 168.689786][ T1026] cdc_wdm 3-1:1.128: invalid descriptor buffer length [ 168.690086][ T3589] device vlan2 left promiscuous mode [ 168.696433][ T1026] cdc_wdm: probe of 3-1:1.128 failed with error -22 [ 168.708439][ T3589] bridge0: port 3(vlan2) entered disabled state [ 168.740879][ T3591] loop3: detected capacity change from 0 to 512 [ 168.747890][ T3591] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 168.897570][ T60] usb 3-1: USB disconnect, device number 20 [ 168.933781][ T3596] loop3: detected capacity change from 0 to 40427 [ 168.943965][ T3596] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 168.951848][ T3596] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 168.960730][ T3596] F2FS-fs (loop3): invalid crc value [ 168.967223][ T3596] F2FS-fs (loop3): Found nat_bits in checkpoint [ 168.997316][ T3596] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 169.004246][ T3596] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 169.039158][ T3596] syz.3.1049: attempt to access beyond end of device [ 169.039158][ T3596] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.242283][ T3609] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 169.419648][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.419663][ T2650] Bluetooth: hci0: command 0x1003 tx timeout [ 169.514051][ T3617] Non-string source [ 169.572862][ T3622] loop3: detected capacity change from 0 to 1024 [ 169.602674][ T60] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 169.682067][ T3622] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.750865][ T2857] EXT4-fs (loop3): unmounting filesystem. [ 169.849666][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 169.923068][ T3637] overlayfs: statfs failed on './file0' [ 169.926325][ T3639] bridge0: port 3(vlan2) entered blocking state [ 169.934980][ T3639] bridge0: port 3(vlan2) entered disabled state [ 169.941772][ T3639] device vlan2 entered promiscuous mode [ 169.947346][ T3639] device vlan1 entered promiscuous mode [ 169.954069][ T3639] bridge0: port 3(vlan2) entered blocking state [ 169.960207][ T3639] bridge0: port 3(vlan2) entered forwarding state [ 169.969710][ T60] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 169.985966][ T60] usb 1-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 170.001145][ T60] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 170.010095][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.021133][ T3642] bridge0: port 3(vlan2) entered disabled state [ 170.027361][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.104159][ T3642] device vlan1 left promiscuous mode [ 170.123470][ T3639] device bridge_slave_0 left promiscuous mode [ 170.138259][ T3639] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.179136][ T3639] device bridge_slave_1 left promiscuous mode [ 170.200909][ T3639] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.218809][ T3639] device vlan2 left promiscuous mode [ 170.232613][ T3639] bridge0: port 3(vlan2) entered disabled state [ 170.669271][ T3668] ipt_REJECT: ECHOREPLY no longer supported. [ 170.763638][ T3673] syz.2.1074[3673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.763711][ T3673] syz.2.1074[3673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.038313][ T3682] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1076' sets config #0 [ 171.239782][ T377] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 171.278622][ T3685] bridge0: port 3(vlan2) entered blocking state [ 171.284784][ T3685] bridge0: port 3(vlan2) entered disabled state [ 171.291586][ T3685] device vlan2 entered promiscuous mode [ 171.296992][ T3685] device vlan1 entered promiscuous mode [ 171.303064][ T3685] bridge0: port 3(vlan2) entered blocking state [ 171.309140][ T3685] bridge0: port 3(vlan2) entered forwarding state [ 171.348670][ T3685] bridge0: port 3(vlan2) entered disabled state [ 171.354808][ T3685] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.361686][ T3685] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.395296][ T3685] device vlan1 left promiscuous mode [ 171.405364][ T3689] device bridge_slave_0 left promiscuous mode [ 171.411542][ T3689] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.418895][ T3689] device bridge_slave_1 left promiscuous mode [ 171.434069][ T3689] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.450038][ T3689] device vlan2 left promiscuous mode [ 171.455313][ T3689] bridge0: port 3(vlan2) entered disabled state [ 171.599773][ T377] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 171.609521][ T377] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 171.739715][ T334] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 171.769771][ T377] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 171.778771][ T377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.786627][ T377] usb 4-1: Product: syz [ 171.790706][ T377] usb 4-1: Manufacturer: syz [ 171.795122][ T377] usb 4-1: SerialNumber: syz [ 171.801063][ T377] usb 4-1: config 0 descriptor?? [ 171.819752][ T3681] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 171.826919][ T3681] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 171.989671][ T1026] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 172.041265][ T3681] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 172.048389][ T3681] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 172.109709][ T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.120592][ T334] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.133586][ T334] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.142687][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.155195][ T334] usb 5-1: config 0 descriptor?? [ 172.249738][ T1026] usb 3-1: Using ep0 maxpacket: 32 [ 172.309740][ T60] usb 1-1: string descriptor 0 read error: -71 [ 172.316504][ T60] usb 1-1: USB disconnect, device number 23 [ 172.364478][ T3706] netlink: 'syz.0.1085': attribute type 4 has an invalid length. [ 172.380029][ T1026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 172.391421][ T1026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 172.402845][ T1026] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 172.412004][ T1026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.426122][ T1026] usb 3-1: config 0 descriptor?? [ 172.449790][ T3693] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 172.469872][ T333] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 172.470258][ T1026] hub 3-1:0.0: USB hub found [ 172.620532][ T334] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 172.629298][ T334] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 172.699717][ T1026] hub 3-1:0.0: 2 ports detected [ 172.829731][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.840545][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.850119][ T333] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 172.850145][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.859914][ T333] usb 2-1: config 0 descriptor?? [ 173.351014][ T333] pyra 0003:1E7D:2CF6.0026: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 173.529764][ T334] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 173.550145][ T37] usb 5-1: USB disconnect, device number 17 [ 173.899809][ T334] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.909814][ T334] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.989846][ T334] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 173.998752][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.006670][ T334] usb 1-1: SerialNumber: syz [ 174.219734][ T333] pyra 0003:1E7D:2CF6.0026: couldn't init struct pyra_device [ 174.226963][ T333] pyra 0003:1E7D:2CF6.0026: couldn't install mouse [ 174.234069][ T333] pyra: probe of 0003:1E7D:2CF6.0026 failed with error -71 [ 174.242773][ T333] usb 2-1: USB disconnect, device number 27 [ 174.270393][ T334] usb 1-1: 0:2 : does not exist [ 174.280169][ T3728] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 174.375807][ T3736] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 174.630401][ T334] usb 3-1: USB disconnect, device number 21 [ 174.649764][ T1026] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 174.656575][ T1026] usb 3-1-port1: attempt power cycle [ 174.669761][ T37] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 174.692611][ T19] usb 1-1: USB disconnect, device number 24 [ 174.759777][ T377] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 174.769796][ T377] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 5e:14:07:1f:26:20 [ 174.795006][ T377] usb 4-1: USB disconnect, device number 19 [ 174.802456][ T377] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 174.852476][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 174.852492][ T28] audit: type=1400 audit(1729090258.252:1862): avc: denied { connect } for pid=3742 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.919663][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 175.039733][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.051084][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.061003][ T37] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 175.069981][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.083115][ T37] usb 5-1: config 0 descriptor?? [ 175.186881][ T3777] device syzkaller0 entered promiscuous mode [ 175.394270][ T3782] bridge: RTM_NEWNEIGH with invalid ether address [ 175.421990][ T3784] device pim6reg1 entered promiscuous mode [ 175.458064][ T28] audit: type=1400 audit(1729090258.852:1863): avc: denied { mount } for pid=3787 comm="syz.0.1108" name="/" dev="configfs" ino=13543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 175.480991][ T28] audit: type=1400 audit(1729090258.852:1864): avc: denied { search } for pid=3787 comm="syz.0.1108" name="/" dev="configfs" ino=13543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 175.503787][ T28] audit: type=1400 audit(1729090258.852:1865): avc: denied { read } for pid=3787 comm="syz.0.1108" name="/" dev="configfs" ino=13543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 175.526320][ T28] audit: type=1400 audit(1729090258.852:1866): avc: denied { open } for pid=3787 comm="syz.0.1108" path="/114/file0" dev="configfs" ino=13543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 175.549356][ T28] audit: type=1400 audit(1729090258.902:1867): avc: denied { unmount } for pid=2157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 175.570809][ T28] audit: type=1400 audit(1729090258.952:1868): avc: denied { accept } for pid=3790 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.590606][ T28] audit: type=1400 audit(1729090258.952:1869): avc: denied { create } for pid=3790 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 175.611291][ T28] audit: type=1400 audit(1729090258.952:1870): avc: denied { write } for pid=3790 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 175.632438][ T28] audit: type=1400 audit(1729090258.952:1871): avc: denied { nlmsg_read } for pid=3790 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 175.653304][ T334] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 175.680750][ T37] lenovo 0003:17EF:6009.0027: global environment stack underflow [ 175.688453][ T37] lenovo 0003:17EF:6009.0027: item 0 4 1 11 parsing failed [ 175.695789][ T37] lenovo 0003:17EF:6009.0027: hid_parse failed [ 175.702019][ T37] lenovo: probe of 0003:17EF:6009.0027 failed with error -22 [ 175.886913][ T19] usb 5-1: USB disconnect, device number 18 [ 175.939677][ T377] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 176.039752][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.050752][ T334] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.063729][ T334] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.073170][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.082262][ T334] usb 3-1: config 0 descriptor?? [ 176.189679][ T377] usb 4-1: Using ep0 maxpacket: 8 [ 176.319743][ T377] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.339663][ T377] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 176.440948][ T377] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 176.454316][ T377] usb 4-1: New USB device strings: Mfr=0, Product=242, SerialNumber=0 [ 176.475377][ T377] usb 4-1: Product: syz [ 176.484106][ T377] usb 4-1: config 0 descriptor?? [ 176.521975][ T3812] pit: kvm: requested 89676 ns i8254 timer period limited to 200000 ns [ 176.551356][ T3812] kvm: pic: non byte read [ 176.556231][ T3812] kvm: pic: level sensitive irq not supported [ 176.556296][ T3812] kvm: pic: non byte read [ 176.568188][ T334] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 176.578389][ T334] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 176.638311][ T3823] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 179.924986][ T334] usb 3-1: USB disconnect, device number 26 [ 180.033748][ T1026] usb 4-1: USB disconnect, device number 20 [ 180.047242][ T3855] loop4: detected capacity change from 0 to 512 [ 180.062289][ T3858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.237019][ T3855] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 180.260718][ T3855] ext4 filesystem being mounted at /75/bus supports timestamps until 2038 (0x7fffffff) [ 180.396494][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 180.396508][ T28] audit: type=1400 audit(1729090263.792:1881): avc: denied { create } for pid=3874 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.445041][ T2684] EXT4-fs (loop4): unmounting filesystem. [ 180.810420][ T3886] incfs: Can't find or create .index dir in ./file0 [ 180.817087][ T3886] incfs: mount failed -14 [ 181.169744][ T377] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 181.439682][ T377] usb 1-1: Using ep0 maxpacket: 32 [ 181.518912][ T3913] device pim6reg1 entered promiscuous mode [ 181.579810][ T3915] loop4: detected capacity change from 0 to 512 [ 181.586606][ T3915] EXT4-fs (loop4): Test dummy encryption mode enabled [ 181.593320][ T1026] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 181.594376][ T3915] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.1150: invalid block [ 181.611483][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 181.619566][ T3915] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1150: couldn't read orphan inode 11 (err -117) [ 181.622642][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 181.634678][ T3915] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 181.645249][ T377] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 181.665514][ T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.680109][ T377] usb 1-1: config 0 descriptor?? [ 181.699813][ T2684] EXT4-fs (loop4): unmounting filesystem. [ 181.717551][ T3889] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.726295][ T334] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 181.740338][ T377] hub 1-1:0.0: USB hub found [ 181.969710][ T1026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.982652][ T1026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.995240][ T1026] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 182.004481][ T1026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.012532][ T334] usb 3-1: device descriptor read/64, error -71 [ 182.019732][ T377] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 182.022434][ T1026] usb 2-1: config 0 descriptor?? [ 182.139899][ T377] usbhid 1-1:0.0: can't add hid device: -71 [ 182.146293][ T377] usbhid: probe of 1-1:0.0 failed with error -71 [ 182.201077][ T377] usb 1-1: USB disconnect, device number 25 [ 182.399661][ T334] usb 3-1: device descriptor read/64, error -71 [ 182.510525][ T1026] hid-steam 0003:28DE:1142.0029: unknown main item tag 0x0 [ 182.517572][ T1026] hid-steam 0003:28DE:1142.0029: item fetching failed at offset 2/5 [ 182.526230][ T1026] hid-steam 0003:28DE:1142.0029: steam_probe:parse of hid interface failed [ 182.544863][ T1026] hid-steam: probe of 0003:28DE:1142.0029 failed with error -22 [ 182.560179][ T3930] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 182.674082][ T334] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 182.721274][ T1026] usb 2-1: USB disconnect, device number 28 [ 183.132961][ T3946] device veth0_vlan left promiscuous mode [ 183.138739][ T3946] device veth0_vlan entered promiscuous mode [ 183.169680][ T334] usb 3-1: device descriptor read/64, error -71 [ 183.480252][ T37] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 183.559681][ T334] usb 3-1: device descriptor read/64, error -71 [ 185.109671][ T377] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 185.126855][ T334] usb usb3-port1: attempt power cycle [ 187.194076][ T3970] loop3: detected capacity change from 0 to 512 [ 187.229720][ T37] usb 4-1: device descriptor read/all, error -71 [ 187.260056][ T3970] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 187.283399][ T3970] ext4 filesystem being mounted at /81/bus supports timestamps until 2038 (0x7fffffff) [ 187.323000][ T3982] pit: kvm: requested 89676 ns i8254 timer period limited to 200000 ns [ 187.332874][ T3982] kvm: pic: non byte read [ 187.337181][ T3982] kvm: pic: level sensitive irq not supported [ 187.337218][ T3982] kvm: pic: non byte read [ 187.376274][ T2857] EXT4-fs (loop3): unmounting filesystem. [ 187.429741][ T334] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 187.484493][ T28] audit: type=1400 audit(1729090270.882:1882): avc: denied { ioctl } for pid=3991 comm="syz.4.1174" path="socket:[39698]" dev="sockfs" ino=39698 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.588410][ T3998] loop3: detected capacity change from 0 to 256 [ 187.594772][ T3998] exfat: Deprecated parameter 'namecase' [ 187.600791][ T334] usb 3-1: device descriptor read/8, error -71 [ 187.685365][ T3998] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 187.873163][ T377] usb 2-1: device not accepting address 29, error -71 [ 187.894434][ T334] usb 3-1: device descriptor read/8, error -71 [ 187.944781][ T28] audit: type=1400 audit(1729090271.342:1883): avc: denied { set_context_mgr } for pid=4001 comm="syz.4.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 187.965093][ T28] audit: type=1400 audit(1729090271.342:1884): avc: denied { map } for pid=4001 comm="syz.4.1176" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 187.990632][ T28] audit: type=1400 audit(1729090271.342:1885): avc: denied { call } for pid=4001 comm="syz.4.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 188.009519][ T28] audit: type=1400 audit(1729090271.342:1886): avc: denied { transfer } for pid=4001 comm="syz.4.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 188.148384][ T4010] syz.0.1179[4010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.148468][ T4010] syz.0.1179[4010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.169855][ T334] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 188.309671][ T334] usb 3-1: device descriptor read/8, error -71 [ 188.352711][ T4022] loop3: detected capacity change from 0 to 128 [ 188.372121][ T4022] ext4: Unknown parameter 'subj_type' [ 188.519670][ T334] usb 3-1: device descriptor read/8, error -71 [ 188.639720][ T334] usb usb3-port1: unable to enumerate USB device [ 188.849687][ T37] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 188.886253][ T4027] loop4: detected capacity change from 0 to 512 [ 188.893146][ T4027] EXT4-fs (loop4): Test dummy encryption mode enabled [ 188.900728][ T4027] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.1184: inline data xattr refers to an external xattr inode [ 188.915545][ T4027] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1184: couldn't read orphan inode 12 (err -117) [ 188.927544][ T4027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.116446][ T334] kernel write not supported for file bpf-prog (pid: 334 comm: kworker/0:4) [ 189.249739][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.260557][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.270166][ T37] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 189.279025][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.288272][ T37] usb 4-1: config 0 descriptor?? [ 189.325503][ T4049] device pim6reg1 entered promiscuous mode [ 189.459723][ T60] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 189.689668][ T1026] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 189.721618][ T2684] EXT4-fs (loop4): unmounting filesystem. [ 189.736487][ T4056] device veth0_vlan left promiscuous mode [ 189.742300][ T4056] device veth0_vlan entered promiscuous mode [ 189.760539][ T4058] netlink: 'syz.4.1195': attribute type 8 has an invalid length. [ 189.776923][ T4060] loop4: detected capacity change from 0 to 128 [ 189.784503][ T28] audit: type=1400 audit(1729090273.182:1887): avc: denied { mount } for pid=4059 comm="syz.4.1196" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 189.827488][ T4060] syz.4.1196: attempt to access beyond end of device [ 189.827488][ T4060] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 189.879727][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.890455][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.900013][ T60] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 189.908815][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.917195][ T60] usb 2-1: config 0 descriptor?? [ 189.932486][ T28] audit: type=1400 audit(1729090273.332:1888): avc: denied { unmount } for pid=2684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 189.979761][ T37] usb 4-1: language id specifier not provided by device, defaulting to English [ 190.049767][ T1026] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.060571][ T1026] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.070061][ T1026] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 190.078916][ T1026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.087189][ T1026] usb 1-1: config 0 descriptor?? [ 190.194443][ T4071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1200'. [ 190.206722][ T4071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1200'. [ 190.379736][ T60] usbhid 2-1:0.0: can't add hid device: -71 [ 190.385514][ T60] usbhid: probe of 2-1:0.0 failed with error -71 [ 190.392532][ T60] usb 2-1: USB disconnect, device number 31 [ 190.469744][ T37] uclogic 0003:256C:006D.002A: interface is invalid, ignoring [ 190.570747][ T1026] pyra 0003:1E7D:2CF6.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 190.764470][ T4078] loop4: detected capacity change from 0 to 256 [ 190.774036][ T4078] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 190.868324][ T28] audit: type=1400 audit(1729090274.262:1889): avc: denied { unlink } for pid=2684 comm="syz-executor" name="file0" dev="loop4" ino=1048707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.891636][ T28] audit: type=1400 audit(1729090274.262:1890): avc: denied { rmdir } for pid=2684 comm="syz-executor" name="file0" dev="loop4" ino=1048702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.955616][ T60] usb 4-1: USB disconnect, device number 23 [ 191.103885][ T4090] loop3: detected capacity change from 0 to 512 [ 191.110590][ T4090] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 191.122041][ T4090] EXT4-fs (loop3): 1 truncate cleaned up [ 191.127596][ T4090] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.151128][ T4088] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.157976][ T4088] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.165377][ T4088] device bridge_slave_0 entered promiscuous mode [ 191.172408][ T4088] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.179278][ T4088] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.186800][ T4088] device bridge_slave_1 entered promiscuous mode [ 191.232633][ T4088] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.239507][ T4088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.246609][ T4088] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.253386][ T4088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.271741][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.279031][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.286164][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.295794][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.303853][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.310697][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.318945][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.327083][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.334087][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.350891][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.358643][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.370978][ T4088] device veth0_vlan entered promiscuous mode [ 191.379796][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.387922][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.396485][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.403769][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.413196][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.423717][ T4088] device veth1_macvtap entered promiscuous mode [ 191.434726][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.442723][ T1026] pyra 0003:1E7D:2CF6.002B: couldn't init struct pyra_device [ 191.450165][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.458389][ T1026] pyra 0003:1E7D:2CF6.002B: couldn't install mouse [ 191.465982][ T1026] pyra: probe of 0003:1E7D:2CF6.002B failed with error -71 [ 191.473896][ T1026] usb 1-1: USB disconnect, device number 26 [ 191.512664][ T388] device veth0_vlan left promiscuous mode [ 191.549672][ T60] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 191.628397][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.638970][ T4100] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.647416][ T4100] device bridge_slave_0 entered promiscuous mode [ 191.654726][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.661807][ T4100] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.669000][ T4100] device bridge_slave_1 entered promiscuous mode [ 191.709344][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.716207][ T4100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.723309][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.730094][ T4100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.748616][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.755982][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.763349][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.772129][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.780483][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.787327][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.804711][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.812808][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.819684][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.833889][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.849429][ T4100] device veth0_vlan entered promiscuous mode [ 191.856181][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.865085][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.873062][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.880379][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.887605][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.899333][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.907229][ T377] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 191.917999][ T4100] device veth1_macvtap entered promiscuous mode [ 191.926896][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.935483][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.943497][ T60] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 191.989009][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.997145][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.069682][ T334] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 192.109727][ T60] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 192.118685][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.126723][ T60] usb 4-1: Product: syz [ 192.132575][ T60] usb 4-1: Manufacturer: syz [ 192.136993][ T60] usb 4-1: SerialNumber: syz [ 192.145433][ T60] usb 4-1: config 0 descriptor?? [ 192.150250][ T377] usb 5-1: Using ep0 maxpacket: 8 [ 192.169710][ T4090] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.269713][ T377] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.279787][ T377] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 192.309680][ T334] usb 2-1: Using ep0 maxpacket: 32 [ 192.349729][ T333] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 192.381069][ T377] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 192.390138][ T377] usb 5-1: New USB device strings: Mfr=0, Product=242, SerialNumber=0 [ 192.398120][ T377] usb 5-1: Product: syz [ 192.403057][ T377] usb 5-1: config 0 descriptor?? [ 192.429769][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 192.432562][ T60] usb 4-1: USB disconnect, device number 24 [ 192.447216][ T388] device bridge_slave_1 left promiscuous mode [ 192.453960][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.461719][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 192.472946][ T388] device bridge_slave_0 left promiscuous mode [ 192.473073][ T334] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 192.479061][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.487986][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.503275][ T388] device veth1_macvtap left promiscuous mode [ 192.507135][ T334] usb 2-1: config 0 descriptor?? [ 192.509261][ T388] device veth0_vlan left promiscuous mode [ 192.529744][ T4112] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 192.551359][ T334] hub 2-1:0.0: USB hub found [ 192.739781][ T333] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 192.750474][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.763819][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.773447][ T333] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 192.773584][ T334] hub 2-1:0.0: 2 ports detected [ 192.786198][ T333] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 192.786227][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.791097][ T333] usb 3-1: config 0 descriptor?? [ 192.840771][ T4123] pit: kvm: requested 89676 ns i8254 timer period limited to 200000 ns [ 192.850377][ T4123] kvm: pic: non byte read [ 192.854749][ T4123] kvm: pic: level sensitive irq not supported [ 192.854787][ T4123] kvm: pic: non byte read [ 192.861301][ T60] usb 5-1: USB disconnect, device number 19 [ 192.935498][ T2857] EXT4-fs (loop3): unmounting filesystem. [ 193.050992][ T4116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.059341][ T4116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.280570][ T333] hid-rmi 0003:17EF:6085.002C: unknown main item tag 0x0 [ 193.287460][ T333] hid-rmi 0003:17EF:6085.002C: unknown main item tag 0x0 [ 193.294378][ T333] hid-rmi 0003:17EF:6085.002C: item fetching failed at offset 2/5 [ 193.302053][ T333] hid-rmi 0003:17EF:6085.002C: parse failed [ 193.307747][ T333] hid-rmi: probe of 0003:17EF:6085.002C failed with error -22 [ 193.398522][ T28] audit: type=1400 audit(1729090276.792:1891): avc: denied { bind } for pid=4136 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 193.490315][ T1026] usb 3-1: USB disconnect, device number 31 [ 194.679792][ T333] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 195.059954][ T333] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 195.294516][ T4171] device pim6reg1 entered promiscuous mode [ 195.439749][ T333] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 195.449449][ T333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.468922][ T333] usb 1-1: Product: syz [ 195.476612][ T333] usb 1-1: Manufacturer: syz [ 195.482779][ T333] usb 1-1: SerialNumber: syz [ 195.488335][ T333] usb 1-1: config 0 descriptor?? [ 195.509791][ T4161] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.661556][ T60] usb 2-1: USB disconnect, device number 32 [ 195.679698][ T334] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 195.686489][ T334] usb 2-1-port1: attempt power cycle [ 195.751852][ T333] usb 1-1: USB disconnect, device number 27 [ 195.799680][ T318] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 196.179858][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.190818][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.200475][ T318] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 196.209385][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.220123][ T318] usb 3-1: config 0 descriptor?? [ 196.221249][ T334] kernel write not supported for file bpf-prog (pid: 334 comm: kworker/0:4) [ 196.576973][ T28] audit: type=1400 audit(1729090279.972:1892): avc: denied { mount } for pid=4207 comm="syz.4.1242" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 196.599067][ T60] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 196.599511][ T28] audit: type=1400 audit(1729090279.972:1893): avc: denied { mounton } for pid=4207 comm="syz.4.1242" path="/10/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 196.606550][ T318] usbhid 3-1:0.0: can't add hid device: -71 [ 196.635265][ T318] usbhid: probe of 3-1:0.0 failed with error -71 [ 196.655302][ T318] usb 3-1: USB disconnect, device number 32 [ 197.189709][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 197.340055][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.376463][ T60] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 197.582844][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.595134][ T60] usb 4-1: config 0 descriptor?? [ 197.640240][ T60] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 197.692910][ T28] audit: type=1400 audit(1729090281.082:1894): avc: denied { unmount } for pid=4088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 198.159691][ T334] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 198.449688][ T1026] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 198.519724][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.530512][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.540202][ T334] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 198.549122][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.560460][ T334] usb 2-1: config 0 descriptor?? [ 198.809710][ T1026] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 198.969722][ T1026] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 198.978620][ T1026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.986418][ T1026] usb 3-1: Product: syz [ 198.990397][ T1026] usb 3-1: Manufacturer: syz [ 198.994799][ T1026] usb 3-1: SerialNumber: syz [ 199.000097][ T1026] usb 3-1: config 0 descriptor?? [ 199.019737][ T4232] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 199.261550][ T1026] usb 3-1: USB disconnect, device number 33 [ 199.272577][ T4017] udevd[4017]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 199.289763][ T6] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 199.350853][ T318] usb 4-1: USB disconnect, device number 25 [ 199.379714][ T334] usb 2-1: string descriptor 0 read error: -22 [ 199.599713][ T334] uclogic 0003:256C:006D.002D: failed retrieving string descriptor #200: -71 [ 199.608387][ T334] uclogic 0003:256C:006D.002D: failed retrieving pen parameters: -71 [ 199.616348][ T334] uclogic 0003:256C:006D.002D: failed probing pen v2 parameters: -71 [ 199.624321][ T334] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 199.631734][ T334] uclogic: probe of 0003:256C:006D.002D failed with error -71 [ 199.640208][ T334] usb 2-1: USB disconnect, device number 37 [ 199.649749][ T6] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 199.659349][ T6] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 199.829715][ T6] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 199.838662][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.858855][ T6] usb 5-1: Product: syz [ 199.862938][ T6] usb 5-1: Manufacturer: syz [ 199.867388][ T6] usb 5-1: SerialNumber: syz [ 199.879778][ T6] usb 5-1: config 0 descriptor?? [ 199.899764][ T4242] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 199.918502][ T4242] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 200.146055][ T4242] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 200.155321][ T4242] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 200.359777][ T318] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 200.729747][ T318] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 66, using maximum allowed: 30 [ 200.740347][ T318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.751090][ T318] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 200.763765][ T318] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 200.775319][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.785695][ T318] usb 2-1: config 0 descriptor?? [ 201.327094][ T318] uclogic 0003:5543:0781.002E: unknown main item tag 0x0 [ 201.354098][ T318] uclogic 0003:5543:0781.002E: unknown main item tag 0x0 [ 201.415981][ T318] uclogic 0003:5543:0781.002E: unknown main item tag 0x0 [ 201.472471][ T318] uclogic 0003:5543:0781.002E: unknown main item tag 0x0 [ 201.544736][ T318] uclogic 0003:5543:0781.002E: unknown main item tag 0x0 [ 201.559844][ T28] audit: type=1400 audit(1729090284.952:1895): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.785619][ T318] uclogic 0003:5543:0781.002E: No inputs registered, leaving [ 201.809974][ T318] uclogic 0003:5543:0781.002E: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 201.821163][ T28] audit: type=1400 audit(1729090284.952:1896): avc: denied { remove_name } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.844450][ T4275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1264'. [ 201.863748][ T4275] tipc: Started in network mode [ 201.870586][ T318] usb 2-1: USB disconnect, device number 38 [ 201.898371][ T28] audit: type=1400 audit(1729090284.952:1897): avc: denied { rename } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.913826][ T4275] tipc: Node identity 7, cluster identity 6 [ 201.920829][ T28] audit: type=1400 audit(1729090284.952:1898): avc: denied { add_name } for pid=85 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.947203][ T4275] tipc: Node number set to 7 [ 201.948460][ T28] audit: type=1400 audit(1729090284.952:1899): avc: denied { unlink } for pid=85 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.974850][ T28] audit: type=1400 audit(1729090284.952:1900): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.993070][ T4275] tipc: Cannot configure node identity twice [ 202.006908][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.019691][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.029577][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.037005][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.044515][ T28] audit: type=1400 audit(1729090285.202:1901): avc: denied { setopt } for pid=4274 comm="syz.2.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.064395][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.071708][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.079058][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.086756][ T6] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 202.098001][ T6] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 00:00:00:28:00:00 [ 202.110253][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.117693][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.125792][ T6] usb 5-1: USB disconnect, device number 20 [ 202.131774][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.139558][ T6] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 202.150593][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.159489][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.167028][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.174535][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.182804][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.190276][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.196762][ T4288] device pim6reg1 entered promiscuous mode [ 202.201697][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.211718][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.219020][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.226551][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.234060][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.241704][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.248984][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.256592][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.264521][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.272005][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.279442][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.289221][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.297074][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.304549][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.312088][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.319377][ T300] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 202.327072][ T334] ================================================================== [ 202.334947][ T334] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 202.342578][ T334] Read of size 8 at addr ffff88813d8c2cf0 by task kworker/0:4/334 [ 202.350232][ T334] [ 202.352388][ T334] CPU: 0 PID: 334 Comm: kworker/0:4 Not tainted 6.1.99-syzkaller-00017-g752034bc8702 #0 [ 202.361933][ T334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.371830][ T334] Workqueue: rcu_gp process_srcu [ 202.376612][ T334] Call Trace: [ 202.379726][ T334] [ 202.382508][ T334] dump_stack_lvl+0x151/0x1b7 [ 202.387018][ T334] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 202.392313][ T334] ? _printk+0xd1/0x111 [ 202.396305][ T334] ? __virt_addr_valid+0x242/0x2f0 [ 202.401339][ T334] print_report+0x158/0x4e0 [ 202.405678][ T334] ? __virt_addr_valid+0x242/0x2f0 [ 202.410624][ T334] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 202.416699][ T334] ? __list_del_entry_valid+0xa6/0x130 [ 202.421994][ T334] kasan_report+0x13c/0x170 [ 202.426334][ T334] ? __list_del_entry_valid+0xa6/0x130 [ 202.431629][ T334] __asan_report_load8_noabort+0x14/0x20 [ 202.437098][ T334] __list_del_entry_valid+0xa6/0x130 [ 202.442219][ T334] process_one_work+0x4d7/0xcb0 [ 202.446906][ T334] worker_thread+0xa60/0x1260 [ 202.451420][ T334] kthread+0x26d/0x300 [ 202.455323][ T334] ? worker_clr_flags+0x1a0/0x1a0 [ 202.460183][ T334] ? kthread_blkcg+0xd0/0xd0 [ 202.464614][ T334] ret_from_fork+0x1f/0x30 [ 202.468865][ T334] [ 202.471728][ T334] [ 202.473932][ T334] Allocated by task 6: [ 202.477804][ T334] kasan_set_track+0x4b/0x70 [ 202.482237][ T334] kasan_save_alloc_info+0x1f/0x30 [ 202.487175][ T334] __kasan_kmalloc+0x9c/0xb0 [ 202.491606][ T334] __kmalloc_node+0xb4/0x1e0 [ 202.496038][ T334] kvmalloc_node+0x221/0x640 [ 202.500459][ T334] alloc_netdev_mqs+0x8c/0xf90 [ 202.505054][ T334] alloc_etherdev_mqs+0x36/0x40 [ 202.509742][ T334] usbnet_probe+0x207/0x27c0 [ 202.514179][ T334] usb_probe_interface+0x5b6/0xa90 [ 202.519117][ T334] really_probe+0x2b8/0x920 [ 202.523456][ T334] __driver_probe_device+0x1a0/0x310 [ 202.528578][ T334] driver_probe_device+0x54/0x3d0 [ 202.533436][ T334] __device_attach_driver+0x2e3/0x490 [ 202.538644][ T334] bus_for_each_drv+0x183/0x200 [ 202.543333][ T334] __device_attach+0x312/0x510 [ 202.547930][ T334] device_initial_probe+0x1a/0x20 [ 202.552792][ T334] bus_probe_device+0xbe/0x1e0 [ 202.557391][ T334] device_add+0xb60/0xf10 [ 202.561558][ T334] usb_set_configuration+0x190f/0x1e80 [ 202.566852][ T334] usb_generic_driver_probe+0x8b/0x150 [ 202.572149][ T334] usb_probe_device+0x144/0x260 [ 202.576834][ T334] really_probe+0x2b8/0x920 [ 202.581174][ T334] __driver_probe_device+0x1a0/0x310 [ 202.586295][ T334] driver_probe_device+0x54/0x3d0 [ 202.591155][ T334] __device_attach_driver+0x2e3/0x490 [ 202.596363][ T334] bus_for_each_drv+0x183/0x200 [ 202.601049][ T334] __device_attach+0x312/0x510 [ 202.605648][ T334] device_initial_probe+0x1a/0x20 [ 202.610509][ T334] bus_probe_device+0xbe/0x1e0 [ 202.615109][ T334] device_add+0xb60/0xf10 [ 202.619274][ T334] usb_new_device+0xf2f/0x1820 [ 202.623874][ T334] hub_event+0x2db1/0x4830 [ 202.628127][ T334] process_one_work+0x73d/0xcb0 [ 202.632816][ T334] worker_thread+0xa60/0x1260 [ 202.637329][ T334] kthread+0x26d/0x300 [ 202.641235][ T334] ret_from_fork+0x1f/0x30 [ 202.645488][ T334] [ 202.647655][ T334] Freed by task 6: [ 202.651217][ T334] kasan_set_track+0x4b/0x70 [ 202.655641][ T334] kasan_save_free_info+0x2b/0x40 [ 202.660504][ T334] ____kasan_slab_free+0x131/0x180 [ 202.665450][ T334] __kasan_slab_free+0x11/0x20 [ 202.670051][ T334] __kmem_cache_free+0x218/0x3b0 [ 202.674822][ T334] kfree+0x7a/0xf0 [ 202.678381][ T334] kvfree+0x35/0x40 [ 202.682026][ T334] netdev_freemem+0x3f/0x60 [ 202.686366][ T334] netdev_release+0x7f/0xb0 [ 202.690740][ T334] device_release+0x95/0x1c0 [ 202.695133][ T334] kobject_put+0x178/0x260 [ 202.699386][ T334] put_device+0x1f/0x30 [ 202.703377][ T334] free_netdev+0x393/0x480 [ 202.707631][ T334] usbnet_disconnect+0x245/0x390 [ 202.712404][ T334] usb_unbind_interface+0x1fa/0x8c0 [ 202.717439][ T334] device_release_driver_internal+0x53e/0x870 [ 202.723344][ T334] device_release_driver+0x19/0x20 [ 202.728288][ T334] bus_remove_device+0x2fa/0x360 [ 202.733061][ T334] device_del+0x663/0xe90 [ 202.737229][ T334] usb_disable_device+0x380/0x720 [ 202.742176][ T334] usb_disconnect+0x32a/0x890 [ 202.746688][ T334] hub_event+0x1ed8/0x4830 [ 202.750941][ T334] process_one_work+0x73d/0xcb0 [ 202.755652][ T334] worker_thread+0xd71/0x1260 [ 202.760140][ T334] kthread+0x26d/0x300 [ 202.764046][ T334] ret_from_fork+0x1f/0x30 [ 202.768300][ T334] [ 202.770469][ T334] Last potentially related work creation: [ 202.776026][ T334] kasan_save_stack+0x3b/0x60 [ 202.780539][ T334] __kasan_record_aux_stack+0xb4/0xc0 [ 202.785745][ T334] kasan_record_aux_stack_noalloc+0xb/0x10 [ 202.791386][ T334] insert_work+0x56/0x310 [ 202.795553][ T334] __queue_work+0x9b6/0xd70 [ 202.799891][ T334] queue_work_on+0x105/0x170 [ 202.804410][ T334] usbnet_link_change+0xeb/0x100 [ 202.809178][ T334] usbnet_probe+0x1dbe/0x27c0 [ 202.813692][ T334] usb_probe_interface+0x5b6/0xa90 [ 202.818640][ T334] really_probe+0x2b8/0x920 [ 202.822979][ T334] __driver_probe_device+0x1a0/0x310 [ 202.828101][ T334] driver_probe_device+0x54/0x3d0 [ 202.832960][ T334] __device_attach_driver+0x2e3/0x490 [ 202.838170][ T334] bus_for_each_drv+0x183/0x200 [ 202.842854][ T334] __device_attach+0x312/0x510 [ 202.847456][ T334] device_initial_probe+0x1a/0x20 [ 202.852319][ T334] bus_probe_device+0xbe/0x1e0 [ 202.856917][ T334] device_add+0xb60/0xf10 [ 202.861081][ T334] usb_set_configuration+0x190f/0x1e80 [ 202.866377][ T334] usb_generic_driver_probe+0x8b/0x150 [ 202.871670][ T334] usb_probe_device+0x144/0x260 [ 202.876356][ T334] really_probe+0x2b8/0x920 [ 202.880697][ T334] __driver_probe_device+0x1a0/0x310 [ 202.885818][ T334] driver_probe_device+0x54/0x3d0 [ 202.890679][ T334] __device_attach_driver+0x2e3/0x490 [ 202.895887][ T334] bus_for_each_drv+0x183/0x200 [ 202.900575][ T334] __device_attach+0x312/0x510 [ 202.905172][ T334] device_initial_probe+0x1a/0x20 [ 202.910033][ T334] bus_probe_device+0xbe/0x1e0 [ 202.914634][ T334] device_add+0xb60/0xf10 [ 202.918799][ T334] usb_new_device+0xf2f/0x1820 [ 202.923404][ T334] hub_event+0x2db1/0x4830 [ 202.927653][ T334] process_one_work+0x73d/0xcb0 [ 202.932338][ T334] worker_thread+0xa60/0x1260 [ 202.936852][ T334] kthread+0x26d/0x300 [ 202.940758][ T334] ret_from_fork+0x1f/0x30 [ 202.945013][ T334] [ 202.947182][ T334] The buggy address belongs to the object at ffff88813d8c2000 [ 202.947182][ T334] which belongs to the cache kmalloc-4k of size 4096 [ 202.961068][ T334] The buggy address is located 3312 bytes inside of [ 202.961068][ T334] 4096-byte region [ffff88813d8c2000, ffff88813d8c3000) [ 202.974347][ T334] [ 202.976517][ T334] The buggy address belongs to the physical page: [ 202.982781][ T334] page:ffffea0004f63000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13d8c0 [ 202.992921][ T334] head:ffffea0004f63000 order:3 compound_mapcount:0 compound_pincount:0 [ 203.001079][ T334] flags: 0x4000000000010200(slab|head|zone=1) [ 203.006986][ T334] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 203.015436][ T334] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 203.023819][ T334] page dumped because: kasan: bad access detected [ 203.030078][ T334] page_owner tracks the page as allocated [ 203.035625][ T334] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3971, tgid 3971 (udevd), ts 199648734926, free_ts 199359075109 [ 203.057758][ T334] post_alloc_hook+0x213/0x220 [ 203.062385][ T334] prep_new_page+0x1b/0x110 [ 203.066699][ T334] get_page_from_freelist+0x27ea/0x2870 [ 203.072084][ T334] __alloc_pages+0x3a1/0x780 [ 203.076503][ T334] alloc_slab_page+0x6c/0xf0 [ 203.080938][ T334] new_slab+0x90/0x3e0 [ 203.085186][ T334] ___slab_alloc+0x6f9/0xb80 [ 203.089608][ T334] __slab_alloc+0x5d/0xa0 [ 203.093774][ T334] __kmem_cache_alloc_node+0x1af/0x250 [ 203.099068][ T334] kmalloc_trace+0x2a/0xa0 [ 203.103321][ T334] kernfs_iop_get_link+0x65/0x610 [ 203.108191][ T334] vfs_readlink+0x166/0x390 [ 203.112524][ T334] do_readlinkat+0x27f/0x3a0 [ 203.116951][ T334] __x64_sys_readlink+0x7f/0x90 [ 203.121634][ T334] x64_sys_call+0x297/0x9a0 [ 203.125974][ T334] do_syscall_64+0x3b/0xb0 [ 203.130228][ T334] page last free stack trace: [ 203.134742][ T334] free_unref_page_prepare+0x83d/0x850 [ 203.140034][ T334] free_unref_page+0xb2/0x5c0 [ 203.144551][ T334] __free_pages+0x61/0xf0 [ 203.148714][ T334] __free_slab+0xce/0x1a0 [ 203.152907][ T334] __unfreeze_partials+0x165/0x1a0 [ 203.157828][ T334] put_cpu_partial+0xa9/0x100 [ 203.162344][ T334] __slab_free+0x1c8/0x280 [ 203.166594][ T334] ___cache_free+0xc6/0xd0 [ 203.170847][ T334] qlist_free_all+0xc5/0x140 [ 203.175277][ T334] kasan_quarantine_reduce+0x15a/0x180 [ 203.180569][ T334] __kasan_slab_alloc+0x24/0x80 [ 203.185265][ T334] slab_post_alloc_hook+0x53/0x2c0 [ 203.190205][ T334] kmem_cache_alloc+0x175/0x2c0 [ 203.194888][ T334] getname_flags+0xba/0x520 [ 203.199228][ T334] __se_sys_newfstatat+0xe2/0x7b0 [ 203.204089][ T334] __x64_sys_newfstatat+0x9b/0xb0 [ 203.208949][ T334] [ 203.211118][ T334] Memory state around the buggy address: [ 203.216592][ T334] ffff88813d8c2b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.224488][ T334] ffff88813d8c2c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.232386][ T334] >ffff88813d8c2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.240283][ T334] ^ [ 203.247836][ T334] ffff88813d8c2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.255839][ T334] ffff88813d8c2d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.263735][ T334] ================================================================== [ 203.271632][ T334] Disabling lock debugging due to kernel taint [ 203.279801][ T300] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 203.469715][ T6] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 203.709683][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 203.829841][ T6] usb 5-1: config index 0 descriptor too short (expected 65535, got 159) [ 203.838205][ T6] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 203.847230][ T6] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 203.857336][ T6] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 204.019721][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.028586][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.036412][ T6] usb 5-1: Product: syz [ 204.040514][ T6] usb 5-1: Manufacturer: syz [ 204.044913][ T6] usb 5-1: SerialNumber: syz [ 204.296718][ T6] usb 5-1: USB disconnect, device number 21