last executing test programs: 4.704237032s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003"], 0xd0}}, 0x0) 4.695766554s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[], 0x0}, 0x90) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4], 0x1c}}, 0x0) close(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e001803010902"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB='.'], 0x20}}, 0x0) 3.115289265s ago: executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810320000000000905820208000000000905030208"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000ffff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 2.723012155s ago: executing program 0: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f0000001600)={'ip_vti0\x00', 0x0}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1a46, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.644966616s ago: executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$TCGETS2(r0, 0x5452, &(0x7f0000000000)) 2.635627378s ago: executing program 0: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) sendmsg$netlink(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[], 0x10}], 0x1}, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x64, 0x0, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x77359400}, {r5, r6+60000000}}, 0x0) rt_sigreturn() write$FUSE_INIT(r1, 0x0, 0x0) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) 2.563831249s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2008002, &(0x7f0000000440), 0x1, 0x547, &(0x7f0000001940)="$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") fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 2.249985587s ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r3) 1.687690362s ago: executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.653898658s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r2}, 0x38) 1.603287106s ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x0, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 1.518604358s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}}, 0xc) 1.464915687s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00'}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 1.296459222s ago: executing program 4: getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) fallocate(r1, 0x0, 0x0, 0x2c2) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)) 1.258294738s ago: executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.225889353s ago: executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r1 = signalfd4(r0, &(0x7f0000000200), 0x8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000000)="19", 0x1, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020}, 0x2020) sendfile(r2, r2, &(0x7f0000000080), 0xe0000000) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r4, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r5, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10842, 0x0) pwrite64(r6, 0x0, 0x0, 0x800b5eb) sendfile(r1, r6, 0x0, 0x1000000000006) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) ppoll(&(0x7f0000000400)=[{r1}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 813.397466ms ago: executing program 4: pipe(&(0x7f0000000000)) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) poll(&(0x7f0000000100)=[{r0, 0xcf9aa395655278ef}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 662.359309ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r2, 0x709, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) 625.446234ms ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 579.640272ms ago: executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1c27, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x6}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000100f1ff0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000340)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000016c0)='\xc8\x10C', 0x0, r2) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000580)='#]\x00', &(0x7f0000001700)="c5", 0x1) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='romfs\x00', &(0x7f0000000100)='./file0\x00', r4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001a00)='romfs\x003\x8e\x97\xbaN\xf1jYm>L\x9b)WL\x03\x9f)IG\x80]\x17\xa1\x95&\x86[\x87\xc5\xd7\xea\xd3\xe1o\xfc\xa5\xed\xa7H\xb9\xbe\xfa{\x89\x14D.\x13`\xd5\xb6\xb5]0\xa5\xac4\x12C\xfas\xc5\xc1\xee1\xc6P\x810Ir\\\xa0\x9dwY0\xbe&\x8eC\xe2\x981p\xe9\x98A\x83\x10\xc6\xbaF\xe8 \xe2h\x1c/\xd5)k\x00', &(0x7f00000004c0)='\x19\x80\xf5', 0x0) close(r3) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') preadv(r5, &(0x7f0000000780)=[{&(0x7f0000000400)=""/162, 0x29}], 0x1, 0x26, 0xd) 512.668582ms ago: executing program 4: write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) 489.533655ms ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) r1 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 429.267555ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 413.156577ms ago: executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 349.919296ms ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x44, r1, 0x511, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x8, @empty}]}, 0x44}}, 0x0) 340.347218ms ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x814, &(0x7f0000005800)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6163746976655f6c6f67733d362c6163746976655f6c6f67733d342c6a71666d743d76667376312c6163746976655f6c6f67733d3600000000615f666c7573682c6261636b67736f756e645f67633d6f6e2c6673796e635f6d6f64653d7374726963742c657874656e745fe3616368652c76c202748e327a69cd00f4f0d086ccccef7b6f05185fa7202d3de5fa04f8e54f6efc92b384d8740ade28b1d9b5877b8c6d4a206d0d0f202ceea69c9a567ef2a4b849ca4299ced7216150550b526fbbb003890381533d4e125766beb376faa027305d810d45cd14305e27081968"], 0x1, 0x5536, &(0x7f00000002c0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) 108.001064ms ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$KVM_RUN(r3, 0xae80, 0x0) 104.194264ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000040), 0x0, 0x0) mlock(&(0x7f0000a38000/0x1000)=nil, 0x1000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r5, @ANYBLOB="000000000000000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000a39000/0x1000)=nil, 0x1000, &(0x7f0000000000)=',#-/\x00') 2.95687ms ago: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000140)) 0s ago: executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): [ 12.353934][ T24] audit: type=1400 audit(1717139494.470:62): avc: denied { noatsecure } for pid=217 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.357586][ T24] audit: type=1400 audit(1717139494.470:63): avc: denied { write } for pid=217 comm="sh" path="pipe:[502]" dev="pipefs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.362223][ T24] audit: type=1400 audit(1717139494.470:64): avc: denied { rlimitinh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.365656][ T24] audit: type=1400 audit(1717139494.470:65): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. 2024/05/31 07:11:41 fuzzer started 2024/05/31 07:11:41 dialing manager at 10.128.0.163:30004 [ 19.700790][ T24] audit: type=1400 audit(1717139501.820:66): avc: denied { node_bind } for pid=275 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 19.706977][ T24] audit: type=1400 audit(1717139501.820:67): avc: denied { name_bind } for pid=275 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 19.737996][ T24] audit: type=1400 audit(1717139501.850:68): avc: denied { mounton } for pid=284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.746811][ T285] cgroup: Unknown subsys name 'net' [ 19.764951][ T24] audit: type=1400 audit(1717139501.860:69): avc: denied { mount } for pid=284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.790704][ T285] cgroup: Unknown subsys name 'devices' [ 19.791285][ T24] audit: type=1400 audit(1717139501.860:70): avc: denied { mounton } for pid=285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.818595][ T24] audit: type=1400 audit(1717139501.860:71): avc: denied { mount } for pid=285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.840642][ T24] audit: type=1400 audit(1717139501.890:72): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.846560][ T290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.863843][ T24] audit: type=1400 audit(1717139501.890:73): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.891787][ T24] audit: type=1400 audit(1717139502.020:74): avc: denied { relabelto } for pid=290 comm="mkswap" name="swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.917065][ T24] audit: type=1400 audit(1717139502.020:75): avc: denied { write } for pid=290 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.942566][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.059520][ T285] cgroup: Unknown subsys name 'hugetlb' [ 20.064965][ T285] cgroup: Unknown subsys name 'rlimit' 2024/05/31 07:11:42 starting 5 executor processes [ 21.897867][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.904728][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.912202][ T301] device bridge_slave_0 entered promiscuous mode [ 21.918864][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.925688][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.932970][ T301] device bridge_slave_1 entered promiscuous mode [ 22.033115][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.040035][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.047068][ T303] device bridge_slave_0 entered promiscuous mode [ 22.053687][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.060524][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.067634][ T302] device bridge_slave_0 entered promiscuous mode [ 22.074795][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.081641][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.088826][ T302] device bridge_slave_1 entered promiscuous mode [ 22.100869][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.107697][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.114914][ T303] device bridge_slave_1 entered promiscuous mode [ 22.142633][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.149488][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.156662][ T305] device bridge_slave_0 entered promiscuous mode [ 22.165334][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.172431][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.179586][ T305] device bridge_slave_1 entered promiscuous mode [ 22.243702][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.250562][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.257695][ T304] device bridge_slave_0 entered promiscuous mode [ 22.264313][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.271251][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.278439][ T304] device bridge_slave_1 entered promiscuous mode [ 22.293260][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.300099][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.307189][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.314022][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.376143][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.382997][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.390078][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.396882][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.409911][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.416738][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.423843][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.430637][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.447625][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.454464][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.461585][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.468456][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.476376][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.483504][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.490709][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.497614][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.504593][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.511560][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.518529][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.525443][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.532974][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.540119][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.568238][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.575823][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.584332][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.591327][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.598739][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.606610][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.613386][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.620519][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.628407][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.635226][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.642383][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.650233][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.657042][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.682005][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.690189][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.709002][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.716476][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.724974][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.731822][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.740057][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.747984][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.754803][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.775271][ T302] device veth0_vlan entered promiscuous mode [ 22.787529][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.795362][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.803067][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.811510][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.819174][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.826423][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.833784][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.841733][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.848556][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.855668][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.863567][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.870393][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.877553][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.899269][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.919003][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.926998][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.935148][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.942023][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.949581][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.957450][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.964234][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.971477][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.979194][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.986809][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.994555][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.002403][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.010231][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.018038][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.025772][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.033422][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.041205][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.048953][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.056990][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.065116][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.072903][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.085949][ T305] device veth0_vlan entered promiscuous mode [ 23.098589][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.106673][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.115148][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.123119][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.130988][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.138862][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.146713][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.153894][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.161280][ T302] device veth1_macvtap entered promiscuous mode [ 23.173009][ T303] device veth0_vlan entered promiscuous mode [ 23.180451][ T304] device veth0_vlan entered promiscuous mode [ 23.188845][ T305] device veth1_macvtap entered promiscuous mode [ 23.201799][ T301] device veth0_vlan entered promiscuous mode [ 23.209544][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.216856][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.225573][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.233932][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.241684][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.249452][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.257440][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.265470][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.273140][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.281024][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.289146][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.297169][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.305361][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.313581][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.321602][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.329359][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.336567][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.343884][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.351354][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.358717][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.365856][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.383410][ T301] device veth1_macvtap entered promiscuous mode [ 23.392715][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.401934][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.410030][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.417892][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.425223][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.433328][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.443456][ T304] device veth1_macvtap entered promiscuous mode [ 23.454353][ T303] device veth1_macvtap entered promiscuous mode [ 23.463565][ T305] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.474930][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.482587][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.490686][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.498830][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.506793][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.515007][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.523305][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.552271][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.560520][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.569453][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.577470][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.586884][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.595760][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.604839][ T329] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿ0177777777777777777777718446744073709551615ÿÿ18446744073709551615ÿ0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿÿ' [ 23.618854][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.626856][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.635126][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.643302][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.763813][ T337] fuse: Unknown parameter 'fèßzÙºd' [ 23.834040][ T342] EXT4-fs (loop3): quotafile must be on filesystem root [ 24.042737][ T354] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 24.076352][ T354] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 24.097873][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.408227][ T25] usb 2-1: device descriptor read/64, error -71 [ 24.560099][ T362] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=362 comm=syz-executor.0 [ 24.737311][ T24] kauditd_printk_skb: 58 callbacks suppressed [ 24.737322][ T24] audit: type=1400 audit(1717139506.850:134): avc: denied { create } for pid=369 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 24.763025][ T24] audit: type=1400 audit(1717139506.870:135): avc: denied { write } for pid=369 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 24.782731][ T24] audit: type=1400 audit(1717139506.870:136): avc: denied { setopt } for pid=369 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 24.798022][ T25] usb 2-1: device descriptor read/64, error -71 [ 24.802635][ T24] audit: type=1400 audit(1717139506.870:137): avc: denied { read } for pid=369 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 24.992501][ T24] audit: type=1400 audit(1717139507.110:138): avc: denied { getopt } for pid=381 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.012543][ T24] audit: type=1400 audit(1717139507.110:139): avc: denied { bind } for pid=381 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.032865][ T24] audit: type=1400 audit(1717139507.110:140): avc: denied { write } for pid=381 comm="syz-executor.3" path="socket:[14663]" dev="sockfs" ino=14663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.087872][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.317846][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.357875][ T25] usb 2-1: device descriptor read/64, error -71 [ 25.380203][ T24] audit: type=1400 audit(1717139507.500:141): avc: denied { write } for pid=397 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 25.447991][ T323] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 25.509526][ T406] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 25.518403][ T24] audit: type=1400 audit(1717139507.640:142): avc: denied { mount } for pid=405 comm="syz-executor.4" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.540582][ T24] audit: type=1400 audit(1717139507.640:143): avc: denied { write } for pid=405 comm="syz-executor.4" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.567894][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 25.614450][ T412] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.688063][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.698853][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 25.707859][ T396] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.711743][ T20] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 25.727838][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.747854][ T25] usb 2-1: device descriptor read/64, error -71 [ 25.753948][ T20] usb 3-1: config 0 descriptor?? [ 25.837947][ T323] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 25.850139][ T323] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 25.859888][ T323] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 166, setting to 64 [ 25.870715][ T25] usb usb2-port1: attempt power cycle [ 25.877284][ T323] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 25.909454][ T419] overlayfs: upper fs does not support tmpfile. [ 25.946732][ T423] Unknown ioctl -2146933247 [ 25.967992][ T396] usb 1-1: Using ep0 maxpacket: 32 [ 25.978058][ T323] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.987011][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 25.995059][ T323] usb 4-1: SerialNumber: syz [ 25.999830][ T425] device veth0_vlan left promiscuous mode [ 26.018028][ T394] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 26.038529][ T323] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 26.046524][ T323] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 26.108024][ T396] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.118945][ T396] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.128585][ T396] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 26.137378][ T396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.188509][ T396] hub 1-1:4.0: USB hub found [ 26.227913][ T375] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.239362][ T20] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.248582][ T20] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.255654][ T20] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.262856][ T20] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.270114][ T20] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.277175][ T20] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.284469][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.291876][ T20] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.299060][ T20] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.306110][ T20] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.313246][ T20] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.316544][ T309] usb 4-1: USB disconnect, device number 2 [ 26.334452][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input5 [ 26.410025][ T20] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 26.446805][ T387] udc-core: couldn't find an available UDC or it's busy [ 26.453623][ T387] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 26.457955][ T396] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 26.467985][ T25] usb 2-1: device descriptor read/8, error -71 [ 26.498376][ T396] usb 1-1: USB disconnect, device number 2 [ 26.504343][ T454] usb 3-1: USB disconnect, device number 2 [ 26.514996][ T387] syz-executor.2[387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.515034][ T387] syz-executor.2[387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.587927][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 26.610235][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 26.621272][ T375] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.634016][ T375] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.642841][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.651269][ T375] usb 5-1: config 0 descriptor?? [ 26.667882][ T428] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 26.757906][ T25] usb 2-1: device descriptor read/8, error -71 [ 26.931641][ T515] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 27.091936][ T519] ====================================================== [ 27.091936][ T519] WARNING: the mand mount option is being deprecated and [ 27.091936][ T519] will be removed in v5.15! [ 27.091936][ T519] ====================================================== [ 27.118628][ T519] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 27.126227][ T519] FAT-fs (loop2): Filesystem has been set read-only [ 27.187924][ T375] usbhid 5-1:0.0: can't add hid device: -71 [ 27.197032][ T375] usbhid: probe of 5-1:0.0 failed with error -71 [ 27.207743][ T375] usb 5-1: USB disconnect, device number 2 [ 27.214499][ T512] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.281047][ T528] overlayfs: upper fs does not support tmpfile. [ 27.457859][ T512] usb 4-1: Using ep0 maxpacket: 16 [ 27.577893][ T512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.588639][ T512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.598149][ T512] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.611108][ T512] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 27.619975][ T512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.631395][ T512] usb 4-1: config 0 descriptor?? [ 27.640319][ T536] xt_l2tp: missing protocol rule (udp|l2tpip) [ 27.667871][ T477] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.669154][ T542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 27.907880][ T477] usb 3-1: Using ep0 maxpacket: 8 [ 27.977873][ T478] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 28.027898][ T506] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.047898][ T477] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.058160][ T477] usb 3-1: config 1 interface 0 has no altsetting 0 [ 28.097849][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.108743][ T512] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 28.115755][ T512] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 28.123061][ T512] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 28.130805][ T512] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 28.142174][ T512] microsoft 0003:045E:07DA.0002: no inputs found [ 28.147952][ T477] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 28.148479][ T512] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 28.165938][ T477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 28.173742][ T477] usb 3-1: SerialNumber: syz [ 28.218379][ T477] usb-storage 3-1:1.0: USB Mass Storage device detected [ 28.225989][ T477] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 28.233578][ T478] usb 5-1: Using ep0 maxpacket: 16 [ 28.308777][ T515] udc-core: couldn't find an available UDC or it's busy [ 28.315584][ T515] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.324572][ T477] usb 4-1: USB disconnect, device number 3 [ 28.337938][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 28.377887][ T478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.388650][ T478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.398110][ T478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.411150][ T478] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 28.420047][ T478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.427890][ T506] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.438990][ T506] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.448818][ T478] usb 5-1: config 0 descriptor?? [ 28.456678][ T506] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 28.457881][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.465740][ T506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.476328][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.497537][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 28.497714][ T506] usb 1-1: config 0 descriptor?? [ 28.506806][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.519989][ T25] usb 2-1: config 0 descriptor?? [ 28.758861][ T478] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 28.765990][ T478] microsoft 0003:045E:07DA.0003: unknown global tag 0xc [ 28.772810][ T478] microsoft 0003:045E:07DA.0003: item 0 4 1 12 parsing failed [ 28.780266][ T478] microsoft 0003:045E:07DA.0003: parse failed [ 28.786186][ T478] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 28.958395][ T477] usb 5-1: USB disconnect, device number 3 [ 28.999321][ T25] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 29.006343][ T25] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 29.013643][ T25] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 29.020861][ T25] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 29.028015][ T25] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 29.035021][ T25] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 29.042387][ T25] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 29.049557][ T25] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 29.056551][ T25] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 29.059229][ T506] kye 0003:0458:501A.0005: unknown main item tag 0x0 [ 29.063786][ T25] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 29.072325][ T506] kye 0003:0458:501A.0005: unknown main item tag 0x0 [ 29.083427][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input6 [ 29.089514][ T506] kye 0003:0458:501A.0005: item fetching failed at offset 7/11 [ 29.102330][ T506] kye 0003:0458:501A.0005: parse failed [ 29.107724][ T506] kye: probe of 0003:0458:501A.0005 failed with error -22 [ 29.107876][ T498] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.158843][ T25] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 29.208048][ T548] udc-core: couldn't find an available UDC or it's busy [ 29.215032][ T548] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.238408][ T25] usb 2-1: USB disconnect, device number 6 [ 29.242899][ T548] syz-executor.1[548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.244134][ T548] syz-executor.1[548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.256394][ T375] usb 3-1: USB disconnect, device number 3 [ 29.280234][ T512] usb 1-1: USB disconnect, device number 3 [ 29.357855][ T498] usb 4-1: Using ep0 maxpacket: 8 [ 29.394014][ T567] cgroup: syz-executor.2 (567) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 29.410685][ T567] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 29.487881][ T498] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.565686][ T570] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=570 comm=syz-executor.4 [ 29.657869][ T498] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 29.666715][ T498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.674544][ T498] usb 4-1: Product: syz [ 29.678534][ T498] usb 4-1: Manufacturer: syz [ 29.683009][ T498] usb 4-1: SerialNumber: syz [ 29.688139][ T498] usb 4-1: config 0 descriptor?? [ 29.928423][ T559] udc-core: couldn't find an available UDC or it's busy [ 29.935435][ T559] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.987889][ T498] uvcvideo: Found UVC 0.00 device syz (8086:0b03) [ 29.994228][ T498] uvcvideo: No valid video chain found. [ 30.001285][ T498] usb 4-1: USB disconnect, device number 4 [ 30.127858][ T477] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 30.356024][ T24] kauditd_printk_skb: 51 callbacks suppressed [ 30.356036][ T24] audit: type=1400 audit(1717139512.470:195): avc: denied { ioctl } for pid=599 comm="syz-executor.2" path="/dev/usbmon6" dev="devtmpfs" ino=152 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 30.507892][ T477] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 30.508070][ T603] kvm: emulating exchange as write [ 30.518662][ T477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.533253][ T477] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 30.546486][ T477] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 30.555460][ T477] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.566166][ T477] usb 5-1: config 0 descriptor?? [ 30.667871][ T375] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.899893][ T24] audit: type=1400 audit(1717139513.020:196): avc: denied { unlink } for pid=615 comm="syz-executor.1" name="#3" dev="sda1" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 31.047998][ T375] usb 3-1: config 255 has too many interfaces: 240, using maximum allowed: 32 [ 31.058601][ T375] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 240 [ 31.068634][ T375] usb 3-1: New USB device found, idVendor=07cf, idProduct=2002, bcdDevice=39.14 [ 31.077767][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.161895][ T477] elecom 0003:056E:00FE.0006: unknown main item tag 0x0 [ 31.171600][ T477] elecom 0003:056E:00FE.0006: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 31.269333][ T626] EXT4-fs (loop3): journaled quota format not specified [ 31.292255][ T25] usb 5-1: USB disconnect, device number 4 [ 31.365293][ T24] audit: type=1400 audit(1717139513.480:197): avc: denied { getopt } for pid=625 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.385252][ T626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=626 comm=syz-executor.3 [ 31.398977][ T24] audit: type=1400 audit(1717139513.520:198): avc: denied { create } for pid=625 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.399955][ T626] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 31.419897][ T24] audit: type=1400 audit(1717139513.520:199): avc: denied { write } for pid=625 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.448034][ T24] audit: type=1400 audit(1717139513.520:200): avc: denied { nlmsg_write } for pid=625 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.494085][ T24] audit: type=1400 audit(1717139513.610:201): avc: denied { relabelfrom } for pid=631 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 31.514326][ T24] audit: type=1400 audit(1717139513.610:202): avc: denied { relabelto } for pid=631 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 31.540191][ T24] audit: type=1400 audit(1717139513.660:203): avc: denied { bind } for pid=631 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.564951][ T24] audit: type=1400 audit(1717139513.680:204): avc: denied { setopt } for pid=631 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.702179][ T637] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 31.708640][ T498] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 31.708935][ T110] Bluetooth: hci0: Frame reassembly failed (-84) [ 31.722734][ T636] exfat: Deprecated parameter 'namecase' [ 31.728241][ T636] exfat: Deprecated parameter 'utf8' [ 31.733307][ T636] exfat: Deprecated parameter 'namecase' [ 31.738800][ T636] exfat: Deprecated parameter 'utf8' [ 31.770415][ T636] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 32.017872][ T498] usb 4-1: device descriptor read/64, error -71 [ 32.407887][ T498] usb 4-1: device descriptor read/64, error -71 [ 32.677841][ T498] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 32.813869][ T661] syz-executor.0[661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.813921][ T661] syz-executor.0[661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.947832][ T498] usb 4-1: device descriptor read/64, error -71 [ 33.138148][ T666] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 33.146915][ T666] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 33.210426][ T670] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 33.347851][ T498] usb 4-1: device descriptor read/64, error -71 [ 33.377884][ T375] usb 3-1: string descriptor 0 read error: -71 [ 33.384367][ T375] usb 3-1: USB disconnect, device number 4 [ 33.467912][ T498] usb usb4-port1: attempt power cycle [ 33.497921][ T506] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 33.519768][ T675] syz-executor.2[675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.519808][ T675] syz-executor.2[675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.767825][ T477] Bluetooth: hci0: command 0x1003 tx timeout [ 33.789486][ T640] Bluetooth: hci0: sending frame failed (-49) [ 33.857916][ T506] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.868625][ T506] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.877860][ T498] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 33.878558][ T506] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 33.894358][ T506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.918689][ T506] usb 5-1: config 0 descriptor?? [ 33.924615][ T688] usb usb8: usbfs: process 688 (syz-executor.0) did not claim interface 0 before use [ 33.935719][ T687] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 34.047881][ T498] usb 4-1: device descriptor read/8, error -71 [ 34.207845][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.257873][ T498] usb 4-1: device descriptor read/8, error -71 [ 34.264096][ T701] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 34.271444][ T701] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 34.271444][ T701] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 34.271444][ T701] [ 34.289773][ T701] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.302249][ T701] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 34.310107][ T701] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842801c, mo2=0002] [ 34.318379][ T701] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 34.327641][ T701] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 34.336290][ T701] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,nouser_xattr,jqfmt=vfsv0,barrier=0x000000000000d95b,debug,,errors=continue [ 34.359293][ T701] EXT4-fs warning (device loop3): dx_probe:859: inode #2: comm syz-executor.3: dx entry: limit 65535 != root limit 120 [ 34.371532][ T701] EXT4-fs warning (device loop3): dx_probe:945: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 34.384908][ T701] EXT4-fs warning (device loop3): dx_probe:859: inode #2: comm syz-executor.3: dx entry: limit 65535 != root limit 120 [ 34.397762][ T670] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 34.400880][ T701] EXT4-fs warning (device loop3): dx_probe:945: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 34.415755][ T670] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 34.509116][ T506] arvo 0003:1E7D:30D4.0007: item fetching failed at offset 5/7 [ 34.516738][ T506] arvo 0003:1E7D:30D4.0007: parse failed [ 34.522555][ T506] arvo: probe of 0003:1E7D:30D4.0007 failed with error -22 [ 34.539215][ T712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 34.577884][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.588945][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.598688][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 34.607588][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.616223][ T25] usb 1-1: config 0 descriptor?? [ 34.622904][ T715] x_tables: duplicate underflow at hook 2 [ 34.827854][ T498] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 34.874774][ T723] F2FS-fs (loop2): invalid crc value [ 34.882091][ T723] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 34.888761][ T723] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 34.957878][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 34.964005][ T25] usbhid: probe of 1-1:0.0 failed with error -71 [ 34.971865][ T25] usb 1-1: USB disconnect, device number 4 [ 35.038055][ T498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.049205][ T498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.059063][ T498] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.071918][ T498] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 35.081101][ T498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.102641][ T498] usb 4-1: config 0 descriptor?? [ 35.579407][ T498] wacom 0003:056A:0094.0008: unknown main item tag 0x0 [ 35.586095][ T498] wacom 0003:056A:0094.0008: unknown main item tag 0x0 [ 35.593117][ T498] wacom 0003:056A:0094.0008: unknown main item tag 0x0 [ 35.600194][ T498] wacom 0003:056A:0094.0008: unknown main item tag 0x0 [ 35.607140][ T498] wacom 0003:056A:0094.0008: unknown main item tag 0x0 [ 35.614326][ T498] wacom 0003:056A:0094.0008: unknown main item tag 0x0 [ 35.621371][ T498] wacom 0003:056A:0094.0008: unknown main item tag 0x0 [ 35.628730][ T498] wacom 0003:056A:0094.0008: Using device in hidraw-only mode [ 35.637414][ T498] wacom 0003:056A:0094.0008: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 35.813492][ T740] syz-executor.2[740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.813529][ T740] syz-executor.2[740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.826151][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 35.826162][ T24] audit: type=1400 audit(1717139517.950:253): avc: denied { read write } for pid=739 comm="syz-executor.2" name="uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.829871][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x1 [ 35.837758][ T24] audit: type=1400 audit(1717139517.950:254): avc: denied { open } for pid=739 comm="syz-executor.2" path="/dev/uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.845239][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 35.866847][ T498] Bluetooth: hci0: command 0x1001 tx timeout [ 35.874435][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 35.897353][ T640] Bluetooth: hci0: sending frame failed (-49) [ 35.904908][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 35.930571][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 35.937751][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 35.944980][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x4 [ 35.952174][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 35.959405][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2 [ 35.966571][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 35.973812][ T24] audit: type=1400 audit(1717139518.090:255): avc: denied { ioctl } for pid=739 comm="syz-executor.2" path="socket:[16067]" dev="sockfs" ino=16067 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.998892][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.006067][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.018466][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.025647][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x4 [ 36.032871][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.040065][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.047255][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.054482][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.061678][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.068912][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.076071][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.083294][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.090489][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.097686][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.104933][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.112113][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.119314][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.126506][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.133727][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.140926][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.148125][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.155311][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.162547][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.169731][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.176926][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.184146][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.191345][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.198559][ T504] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 36.206764][ T504] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz0] on syz0 [ 36.213518][ T498] usb 5-1: USB disconnect, device number 5 [ 36.318009][ T375] usb 4-1: USB disconnect, device number 8 [ 36.388782][ T24] audit: type=1400 audit(1717139518.510:256): avc: denied { connect } for pid=747 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.501915][ T748] syz-executor.3 (pid 748) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 36.539192][ T24] audit: type=1400 audit(1717139518.650:257): avc: denied { ioctl } for pid=752 comm="syz-executor.0" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.637509][ T24] audit: type=1400 audit(1717139518.690:258): avc: denied { set_context_mgr } for pid=752 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 36.661320][ T24] audit: type=1400 audit(1717139518.700:259): avc: denied { map } for pid=752 comm="syz-executor.0" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.688812][ T24] audit: type=1400 audit(1717139518.710:260): avc: denied { call } for pid=752 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 36.714621][ T24] audit: type=1400 audit(1717139518.710:261): avc: denied { transfer } for pid=752 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 36.740892][ T24] audit: type=1400 audit(1717139518.830:262): avc: denied { create } for pid=756 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.818887][ T766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=766 comm=syz-executor.0 [ 36.820416][ T774] process 'syz-executor.3' launched '/dev/fd/-1/./file0/file0' with NULL argv: empty string added [ 37.147905][ T504] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.286702][ T793] syz-executor.2[793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.286737][ T793] syz-executor.2[793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.327840][ T478] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 37.722417][ T504] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.733159][ T504] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.742898][ T504] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 37.751803][ T504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.760235][ T504] usb 1-1: config 0 descriptor?? [ 37.777858][ T478] usb 4-1: Using ep0 maxpacket: 8 [ 37.897899][ T478] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 37.927852][ T497] Bluetooth: hci0: command 0x1009 tx timeout [ 38.078931][ T504] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0 [ 38.086898][ T504] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0 [ 38.094774][ T504] logitech-djreceiver 0003:046D:C534.000A: item fetching failed at offset 2/5 [ 38.103478][ T478] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.40 [ 38.112423][ T504] logitech-djreceiver 0003:046D:C534.000A: logi_dj_probe: parse failed [ 38.120496][ T478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.128322][ T504] logitech-djreceiver: probe of 0003:046D:C534.000A failed with error -22 [ 38.136629][ T478] usb 4-1: Product: syz [ 38.140644][ T478] usb 4-1: Manufacturer: syz [ 38.145978][ T478] usb 4-1: SerialNumber: syz [ 38.282431][ T497] usb 1-1: USB disconnect, device number 5 [ 38.298474][ T811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=811 comm=syz-executor.4 [ 38.305938][ T817] EXT4-fs warning (device sda1): ext4_group_extend:1804: can't shrink FS - resize aborted [ 38.311416][ T811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61572 sclass=netlink_route_socket pid=811 comm=syz-executor.4 [ 38.334020][ T811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=811 comm=syz-executor.4 [ 38.480886][ T828] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 38.490101][ T828] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 38.658007][ T497] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 38.698238][ T478] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 38.705953][ T478] usb 4-1: USB disconnect, device number 9 [ 38.871988][ T834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=834 comm=syz-executor.0 [ 39.018410][ T497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.460004][ T497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.469918][ T497] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 39.479001][ T497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.488787][ T497] usb 3-1: config 0 descriptor?? [ 39.498076][ T846] syz-executor.0[846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.498117][ T846] syz-executor.0[846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.951462][ T866] overlayfs: failed to resolve './file1': -2 [ 39.971360][ T497] hid (null): bogus close delimiter [ 40.198006][ T497] usb 3-1: string descriptor 0 read error: -22 [ 40.436964][ T497] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000B/input/input7 [ 40.465256][ T497] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000B/input/input8 [ 40.477727][ T497] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 40.507886][ T478] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.534663][ T880] 9pnet: Insufficient options for proto=fd [ 40.609008][ T880] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 40.618927][ T825] udc-core: couldn't find an available UDC or it's busy [ 40.625872][ T825] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.757831][ T478] usb 1-1: Using ep0 maxpacket: 8 [ 41.233923][ T478] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 41.242248][ T478] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 41.253955][ T478] usb 1-1: config 135 has no interface number 0 [ 41.262454][ T478] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.269213][ T900] fuse: Bad value for 'fd' [ 41.437911][ T478] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 41.446941][ T478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.454892][ T478] usb 1-1: Product: syz [ 41.458864][ T478] usb 1-1: Manufacturer: syz [ 41.463273][ T478] usb 1-1: SerialNumber: syz [ 41.508417][ T478] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 41.514698][ T478] uvcvideo: No valid video chain found. [ 41.641936][ T478] usb 3-1: USB disconnect, device number 5 [ 41.754505][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 41.754518][ T24] audit: type=1400 audit(1717139523.870:272): avc: denied { ioctl } for pid=911 comm="syz-executor.4" path="/dev/input/event0" dev="devtmpfs" ino=163 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.004074][ T497] usb 1-1: USB disconnect, device number 6 [ 42.057908][ T478] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.258579][ T24] audit: type=1400 audit(1717139524.380:273): avc: denied { mounton } for pid=919 comm="syz-executor.1" path="/root/syzkaller-testdir394472682/syzkaller.xTdtjV/13/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 42.349398][ T924] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 42.368571][ T924] netlink: 472 bytes leftover after parsing attributes in process `syz-executor.1'. [ 42.378190][ T924] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 42.437922][ T478] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 42.449232][ T478] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 42.463242][ T935] syz-executor.1[935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.463295][ T935] syz-executor.1[935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.465280][ T478] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 42.494980][ T478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.527853][ T910] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 42.592971][ T24] audit: type=1400 audit(1717139524.710:274): avc: denied { read } for pid=943 comm="syz-executor.0" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.647057][ T24] audit: type=1326 audit(1717139524.750:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=946 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5ef0ee9 code=0x7ffc0000 [ 42.682529][ T24] audit: type=1326 audit(1717139524.750:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=946 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d5ef0ee9 code=0x7ffc0000 [ 42.712167][ T24] audit: type=1326 audit(1717139524.750:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=946 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5ef0ee9 code=0x7ffc0000 [ 42.744280][ T24] audit: type=1326 audit(1717139524.750:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=946 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d5ef0ee9 code=0x7ffc0000 [ 42.748249][ T910] udc-core: couldn't find an available UDC or it's busy [ 42.774990][ T24] audit: type=1326 audit(1717139524.760:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=946 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5ef0ee9 code=0x7ffc0000 [ 42.798612][ T477] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 42.801420][ T910] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 42.813292][ T24] audit: type=1326 audit(1717139524.760:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=946 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5ef0ee9 code=0x7ffc0000 [ 42.836944][ T24] audit: type=1326 audit(1717139524.760:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=946 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d5ef0ee9 code=0x7ffc0000 [ 42.879458][ T959] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 42.888238][ T959] ext4 filesystem being mounted at /root/syzkaller-testdir602349366/syzkaller.XbxqhO/34/file1 supports timestamps until 2038 (0x7fffffff) [ 42.988693][ T970] 9pnet: Insufficient options for proto=fd [ 43.217914][ T477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.237818][ T477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.247354][ T477] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.277838][ T477] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 43.295319][ T477] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.318202][ T477] usb 5-1: config 0 descriptor?? [ 43.477858][ T504] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 43.627878][ T478] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 43.635429][ T478] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input9 [ 43.799002][ T477] wacom 0003:056A:0094.000C: unknown main item tag 0x0 [ 43.805713][ T477] wacom 0003:056A:0094.000C: unknown main item tag 0x0 [ 43.812478][ T477] wacom 0003:056A:0094.000C: unknown main item tag 0x0 [ 43.819124][ T477] wacom 0003:056A:0094.000C: unknown main item tag 0x0 [ 43.825738][ T477] wacom 0003:056A:0094.000C: unknown main item tag 0x0 [ 43.832520][ T477] wacom 0003:056A:0094.000C: unknown main item tag 0x0 [ 43.839138][ T375] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 43.846415][ T477] wacom 0003:056A:0094.000C: unknown main item tag 0x0 [ 43.853167][ T504] usb 4-1: No LPM exit latency info found, disabling LPM. [ 43.860439][ T477] wacom 0003:056A:0094.000C: Using device in hidraw-only mode [ 43.868487][ T477] wacom 0003:056A:0094.000C: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 43.948080][ T504] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 43.960925][ T504] usb 4-1: config 1 interface 0 has no altsetting 0 [ 44.308032][ T375] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 3 [ 44.318120][ T375] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.407878][ T375] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.416766][ T375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.424575][ T375] usb 2-1: SerialNumber: syz [ 44.447899][ T999] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 44.568708][ T478] usb 5-1: USB disconnect, device number 6 [ 44.621416][ T1012] overlayfs: missing 'lowerdir' [ 44.668820][ T999] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 44.914904][ T25] usb 3-1: USB disconnect, device number 6 [ 44.978601][ T1026] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 45.148158][ T375] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 45.149945][ T504] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 45.157764][ T375] usb 2-1: USB disconnect, device number 7 [ 45.166655][ T504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.208386][ T987] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 45.215165][ T987] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 45.367878][ T498] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 45.447835][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 45.467845][ T477] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 45.607831][ T498] usb 1-1: Using ep0 maxpacket: 16 [ 45.642936][ T375] usb 4-1: USB disconnect, device number 10 [ 45.727961][ T498] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.738794][ T498] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.748527][ T498] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 45.757356][ T498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.765738][ T498] usb 1-1: config 0 descriptor?? [ 45.807893][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.819254][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.828933][ T25] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 45.837754][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.846099][ T25] usb 3-1: config 0 descriptor?? [ 45.857918][ T477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.868656][ T477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.878166][ T477] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.890763][ T504] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 45.898033][ T477] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 45.906834][ T477] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.915219][ T477] usb 5-1: config 0 descriptor?? [ 46.287887][ T504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.297860][ T498] usbhid 1-1:0.0: can't add hid device: -71 [ 46.298582][ T504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.304434][ T498] usbhid: probe of 1-1:0.0 failed with error -71 [ 46.314099][ T504] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.321423][ T498] usb 1-1: USB disconnect, device number 7 [ 46.333253][ T504] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 46.345046][ T25] steelseries_srws1 0003:1038:1410.000D: missing HID_OUTPUT_REPORT 0 [ 46.349503][ T504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.363902][ T504] usb 2-1: config 0 descriptor?? [ 46.399131][ T477] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 46.405899][ T477] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 46.413341][ T477] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 46.420036][ T477] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 46.426690][ T477] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 46.433423][ T477] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 46.440063][ T477] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 46.446847][ T477] wacom 0003:056A:0094.000E: Using device in hidraw-only mode [ 46.454734][ T477] wacom 0003:056A:0094.000E: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 46.562862][ T25] usb 3-1: USB disconnect, device number 7 [ 46.618304][ T477] usb 5-1: USB disconnect, device number 7 [ 46.928996][ T504] wacom 0003:056A:0094.000F: unknown main item tag 0x0 [ 46.935671][ T504] wacom 0003:056A:0094.000F: unknown main item tag 0x0 [ 46.942447][ T504] wacom 0003:056A:0094.000F: unknown main item tag 0x0 [ 46.949066][ T504] wacom 0003:056A:0094.000F: unknown main item tag 0x0 [ 46.955724][ T504] wacom 0003:056A:0094.000F: unknown main item tag 0x0 [ 46.962515][ T504] wacom 0003:056A:0094.000F: unknown main item tag 0x0 [ 46.969095][ T504] wacom 0003:056A:0094.000F: unknown main item tag 0x0 [ 46.975904][ T504] wacom 0003:056A:0094.000F: Using device in hidraw-only mode [ 46.984215][ T504] wacom 0003:056A:0094.000F: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0 [ 47.103637][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 47.103648][ T24] audit: type=1326 audit(1717139529.220:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe2fdc47ee9 code=0x7ffc0000 [ 47.140109][ T24] audit: type=1326 audit(1717139529.230:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe2fdc47ee9 code=0x7ffc0000 [ 47.164088][ T24] audit: type=1326 audit(1717139529.250:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe2fdc47ee9 code=0x7ffc0000 [ 47.187970][ T24] audit: type=1326 audit(1717139529.250:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe2fdc47ee9 code=0x7ffc0000 [ 47.211862][ T24] audit: type=1326 audit(1717139529.250:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe2fdc47ee9 code=0x7ffc0000 [ 47.261167][ T24] audit: type=1326 audit(1717139529.250:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe2fdc47ee9 code=0x7ffc0000 [ 47.289085][ T24] audit: type=1326 audit(1717139529.250:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe2fdc47ee9 code=0x7ffc0000 [ 47.328609][ T24] audit: type=1326 audit(1717139529.250:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe2fdc47ee9 code=0x7ffc0000 [ 47.355376][ T24] audit: type=1326 audit(1717139529.250:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe2fdc47ee9 code=0x7ffc0000 [ 47.385356][ T24] audit: type=1326 audit(1717139529.250:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe2fdc47ee9 code=0x7ffc0000 [ 47.429159][ T1064] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.459282][ T1064] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,errors=remount-ro,jqfmt=vfsv0,stripe=0x000000000004ffff,usrjquota=,sb=0x0000000000000401,norecovery, [ 47.724882][ T25] usb 2-1: USB disconnect, device number 8 [ 48.157869][ T504] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 48.165229][ T477] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 48.333024][ T1099] F2FS-fs (loop4): invalid crc value [ 48.358697][ T1099] F2FS-fs (loop4): Found nat_bits in checkpoint [ 48.396333][ T1099] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 48.438162][ T477] usb 3-1: Using ep0 maxpacket: 8 [ 48.577890][ T477] usb 3-1: config index 0 descriptor too short (expected 38, got 36) [ 48.586152][ T504] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.597174][ T1122] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 48.605037][ T477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.616221][ T1122] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 48.624754][ T504] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.643010][ T477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.652892][ T504] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.665757][ T477] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 48.674690][ T1122] F2FS-fs (loop3): invalid crc value [ 48.679969][ T504] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 48.689156][ T477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.697052][ T504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.708171][ T477] usb 3-1: config 0 descriptor?? [ 48.713696][ T1122] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.720362][ T504] usb 1-1: config 0 descriptor?? [ 48.758702][ T1122] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 48.765603][ T1122] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.788038][ T301] attempt to access beyond end of device [ 48.788038][ T301] loop3: rw=2049, want=45104, limit=40427 [ 48.939041][ T1150] EXT4-fs (loop3): Invalid journal IO priority (must be 0-7) [ 49.017972][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 49.093913][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.100950][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.108650][ T1157] device bridge_slave_0 entered promiscuous mode [ 49.115442][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.122383][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.129691][ T1157] device bridge_slave_1 entered promiscuous mode [ 49.167891][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.174799][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.181939][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.188715][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.210672][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.218150][ T505] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.225220][ T505] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.233456][ T504] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 49.241048][ T504] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 49.247701][ T504] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 49.254598][ T477] usbhid 3-1:0.0: can't add hid device: -71 [ 49.260361][ T478] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 49.267742][ T477] usbhid: probe of 3-1:0.0 failed with error -71 [ 49.273969][ T504] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 49.281378][ T477] usb 3-1: USB disconnect, device number 8 [ 49.287614][ T504] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 49.294765][ T504] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 49.301594][ T504] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 49.308393][ T504] wacom 0003:056A:0094.0010: Using device in hidraw-only mode [ 49.316342][ T504] wacom 0003:056A:0094.0010: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 49.332510][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.340682][ T494] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.347502][ T494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.356394][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.364377][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.371216][ T494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.378483][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.390038][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.399644][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.412186][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 49.421261][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.429756][ T25] usb 5-1: config 0 descriptor?? [ 49.430184][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.446536][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.456570][ T496] usb 1-1: USB disconnect, device number 8 [ 49.462243][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.466780][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.478513][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.485844][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.496570][ T1157] device veth0_vlan entered promiscuous mode [ 49.506739][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.517316][ T1157] device veth1_macvtap entered promiscuous mode [ 49.517829][ T478] usb 4-1: Using ep0 maxpacket: 8 [ 49.528445][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.540132][ T494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.588414][ T386] device bridge_slave_1 left promiscuous mode [ 49.594384][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.601730][ T386] device bridge_slave_0 left promiscuous mode [ 49.607675][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.615575][ T386] device veth1_macvtap left promiscuous mode [ 49.622833][ T386] device veth0_vlan left promiscuous mode [ 49.678516][ T478] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.689330][ T478] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.699337][ T478] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 49.712362][ T478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.722661][ T478] usb 4-1: config 0 descriptor?? [ 49.909104][ T25] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 49.915867][ T25] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 49.924856][ T25] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 49.931787][ T25] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 49.938774][ T25] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 49.945521][ T25] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 49.952335][ T25] wacom 0003:056A:0094.0011: unknown main item tag 0x0 [ 49.973629][ T25] wacom 0003:056A:0094.0011: Using device in hidraw-only mode [ 49.985475][ T1176] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 49.986465][ T25] wacom 0003:056A:0094.0011: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 49.997889][ T504] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 50.218595][ T478] cherry 0003:046A:0023.0012: unknown main item tag 0x0 [ 50.225373][ T478] cherry 0003:046A:0023.0012: unknown main item tag 0x0 [ 50.241692][ T478] cherry 0003:046A:0023.0012: unknown main item tag 0x0 [ 50.261570][ T478] cherry 0003:046A:0023.0012: unknown main item tag 0x0 [ 50.268390][ T478] cherry 0003:046A:0023.0012: unknown main item tag 0x0 [ 50.280532][ T478] cherry 0003:046A:0023.0012: hidraw1: USB HID v0.00 Device [HID 046a:0023] on usb-dummy_hcd.3-1/input0 [ 50.417916][ T504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.420135][ T497] usb 4-1: USB disconnect, device number 11 [ 50.434369][ T504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.458517][ T1190] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 50.478220][ T1190] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 50.478262][ T504] usb 2-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 50.507029][ T504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.520523][ T504] usb 2-1: config 0 descriptor?? [ 50.635881][ T25] usb 5-1: USB disconnect, device number 8 [ 50.823341][ T1198] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 50.877879][ T1198] loop_set_status: loop4 () has still dirty pages (nrpages=3) [ 50.890435][ T1198] device pim6reg1 entered promiscuous mode [ 51.012159][ T504] wacom 0003:056A:00F8.0013: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.1-1/input0 [ 51.298823][ T477] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 51.307941][ T497] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 51.429287][ T504] usb 2-1: USB disconnect, device number 9 [ 51.547842][ T497] usb 5-1: Using ep0 maxpacket: 32 [ 51.582164][ T1242] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 51.667897][ T497] usb 5-1: config 0 has no interfaces? [ 51.673284][ T497] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 51.682162][ T497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.694162][ T497] usb 5-1: config 0 descriptor?? [ 51.697881][ T477] usb 3-1: No LPM exit latency info found, disabling LPM. [ 51.740607][ T1244] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 51.748229][ T1244] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 51.758734][ T1244] F2FS-fs (loop0): Found nat_bits in checkpoint [ 51.786802][ T1244] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 51.798068][ T1244] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 51.804942][ T1244] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 51.812312][ T477] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x1 is Bulk; changing to Interrupt [ 51.821977][ T477] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x82 is Bulk; changing to Interrupt [ 51.831816][ T506] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 51.839117][ T477] usb 3-1: config 1 interface 0 has no altsetting 0 [ 51.938827][ T478] usb 5-1: USB disconnect, device number 9 [ 52.047915][ T477] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 52.056768][ T477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.065441][ T477] usb 3-1: Product: П [ 52.069557][ T477] usb 3-1: SerialNumber: ã  [ 52.075421][ T1255] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 52.087884][ T1214] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 52.096405][ T1214] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 52.127878][ T1255] loop_set_status: loop1 () has still dirty pages (nrpages=3) [ 52.138510][ T1255] device pim6reg1 entered promiscuous mode [ 52.177845][ T504] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 52.207879][ T506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.218928][ T506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.230474][ T506] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.244527][ T506] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 52.254663][ T506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.263050][ T506] usb 4-1: config 0 descriptor?? [ 52.417907][ T504] usb 1-1: Using ep0 maxpacket: 8 [ 52.537908][ T504] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.551403][ T504] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.561227][ T504] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 52.570247][ T504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.578863][ T504] usb 1-1: config 0 descriptor?? [ 52.657970][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 52.749296][ T506] wacom 0003:056A:0094.0014: unknown main item tag 0x0 [ 52.755977][ T506] wacom 0003:056A:0094.0014: unknown main item tag 0x0 [ 52.764055][ T1214] udc-core: couldn't find an available UDC or it's busy [ 52.772878][ T1214] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 52.780525][ T506] wacom 0003:056A:0094.0014: unknown main item tag 0x0 [ 52.788476][ T506] wacom 0003:056A:0094.0014: unknown main item tag 0x0 [ 52.795400][ T506] wacom 0003:056A:0094.0014: unknown main item tag 0x0 [ 52.802390][ T506] wacom 0003:056A:0094.0014: unknown main item tag 0x0 [ 52.809254][ T506] wacom 0003:056A:0094.0014: unknown main item tag 0x0 [ 52.816084][ T506] wacom 0003:056A:0094.0014: Using device in hidraw-only mode [ 52.825147][ T506] wacom 0003:056A:0094.0014: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 52.842988][ T495] usb 3-1: USB disconnect, device number 9 [ 52.917839][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 53.077921][ T25] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 53.086216][ T25] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 53.096258][ T25] usb 2-1: config 135 has no interface number 0 [ 53.097862][ T504] usbhid 1-1:0.0: can't add hid device: -71 [ 53.102360][ T25] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.108372][ T504] usbhid: probe of 1-1:0.0 failed with error -71 [ 53.127356][ T506] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 53.137547][ T504] usb 1-1: USB disconnect, device number 9 [ 53.297859][ T25] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 53.306827][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.314643][ T25] usb 2-1: Product: syz [ 53.318623][ T25] usb 2-1: Manufacturer: syz [ 53.323020][ T25] usb 2-1: SerialNumber: syz [ 53.368574][ T25] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 53.374913][ T25] uvcvideo: No valid video chain found. [ 53.407836][ T506] usb 5-1: device descriptor read/64, error -71 [ 53.455408][ T477] usb 4-1: USB disconnect, device number 12 [ 53.578662][ T505] usb 2-1: USB disconnect, device number 10 [ 53.596918][ T1285] syz-executor.0[1285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.596949][ T1285] syz-executor.0[1285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.797828][ T506] usb 5-1: device descriptor read/64, error -71 [ 53.957852][ T477] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 53.994819][ T24] kauditd_printk_skb: 79 callbacks suppressed [ 53.994830][ T24] audit: type=1400 audit(1717139536.110:412): avc: denied { create } for pid=1320 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.077859][ T506] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 54.142537][ T24] audit: type=1326 audit(1717139536.260:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3401fee9 code=0x7ffc0000 [ 54.167419][ T1333] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.184856][ T24] audit: type=1326 audit(1717139536.280:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a3401fee9 code=0x7ffc0000 [ 54.207845][ T477] usb 4-1: Using ep0 maxpacket: 16 [ 54.216276][ T24] audit: type=1326 audit(1717139536.280:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3401fee9 code=0x7ffc0000 [ 54.240225][ T24] audit: type=1326 audit(1717139536.280:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a3401fee9 code=0x7ffc0000 [ 54.264279][ T24] audit: type=1326 audit(1717139536.280:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3401fee9 code=0x7ffc0000 [ 54.288274][ T24] audit: type=1326 audit(1717139536.280:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a3401fee9 code=0x7ffc0000 [ 54.312104][ T24] audit: type=1326 audit(1717139536.280:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3401fee9 code=0x7ffc0000 [ 54.328904][ T477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.337232][ T24] audit: type=1326 audit(1717139536.280:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a3401fee9 code=0x7ffc0000 [ 54.347016][ T477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.370522][ T24] audit: type=1326 audit(1717139536.280:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3401fee9 code=0x7ffc0000 [ 54.379785][ T506] usb 5-1: device descriptor read/64, error -71 [ 54.409587][ T478] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 54.417154][ T477] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.429980][ T477] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 54.438915][ T477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.450829][ T477] usb 4-1: config 0 descriptor?? [ 54.473468][ T1324] F2FS-fs (loop2): invalid crc value [ 54.486487][ T1324] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.515756][ T1324] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 54.522470][ T1324] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 54.531984][ T1323] overlayfs: workdir and upperdir must reside under the same mount [ 54.545834][ T302] attempt to access beyond end of device [ 54.545834][ T302] loop2: rw=2049, want=45120, limit=40427 [ 54.647840][ T478] usb 2-1: Using ep0 maxpacket: 32 [ 54.757873][ T504] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 54.767955][ T478] usb 2-1: config 0 has an invalid interface number: 60 but max is 1 [ 54.775874][ T478] usb 2-1: config 0 has an invalid interface number: 72 but max is 1 [ 54.783966][ T478] usb 2-1: config 0 has no interface number 0 [ 54.789938][ T478] usb 2-1: config 0 has no interface number 1 [ 54.795754][ T478] usb 2-1: config 0 interface 72 has no altsetting 0 [ 54.827864][ T506] usb 5-1: device descriptor read/64, error -71 [ 54.938582][ T477] microsoft 0003:045E:07DA.0015: unknown global tag 0xe [ 54.945359][ T477] microsoft 0003:045E:07DA.0015: item 0 0 1 14 parsing failed [ 54.952708][ T505] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 54.960351][ T478] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=5b.95 [ 54.969613][ T506] usb usb5-port1: attempt power cycle [ 54.974940][ T477] microsoft 0003:045E:07DA.0015: parse failed [ 54.980911][ T478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.988707][ T477] microsoft: probe of 0003:045E:07DA.0015 failed with error -22 [ 54.997133][ T478] usb 2-1: Product: syz [ 55.001257][ T478] usb 2-1: Manufacturer: syz [ 55.005649][ T478] usb 2-1: SerialNumber: syz [ 55.010809][ T478] usb 2-1: config 0 descriptor?? [ 55.117900][ T504] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.128723][ T504] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.138307][ T504] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 55.147141][ T504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.156573][ T504] usb 1-1: config 0 descriptor?? [ 55.217848][ T505] usb 3-1: Using ep0 maxpacket: 32 [ 55.252773][ T477] usb 4-1: USB disconnect, device number 13 [ 55.326802][ T478] usb 2-1: USB disconnect, device number 11 [ 55.337973][ T505] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.348969][ T505] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.377879][ T506] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 55.477974][ T505] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 55.486848][ T505] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 55.495063][ T505] usb 3-1: Product: syz [ 55.498988][ T505] usb 3-1: Manufacturer: syz [ 55.538351][ T505] hub 3-1:4.0: USB hub found [ 55.547859][ T506] usb 5-1: device descriptor read/8, error -71 [ 55.740228][ T1346] udc-core: couldn't find an available UDC or it's busy [ 55.747028][ T1346] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 55.756402][ T1346] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 55.799788][ T1346] 9pnet: Insufficient options for proto=fd [ 55.817918][ T506] usb 5-1: device descriptor read/8, error -71 [ 55.837898][ T505] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 55.852734][ T331] udevd[331]: failed to send result of seq 4506 to main daemon: Connection refused [ 55.888045][ T505] usb 3-1: USB disconnect, device number 10 [ 55.929043][ T1363] EXT4-fs warning (device loop4): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 55.939549][ T1363] EXT4-fs warning (device loop4): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 56.197925][ T478] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 56.437832][ T478] usb 2-1: Using ep0 maxpacket: 32 [ 56.557915][ T478] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.568359][ T478] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 56.572911][ T1384] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 56.578992][ T478] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 56.579011][ T478] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 56.579022][ T478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.582673][ T478] usb 2-1: config 0 descriptor?? [ 56.659596][ T478] usb 2-1: bad CDC descriptors [ 56.757910][ T504] uclogic 0003:256C:006D.0016: v1 buttonpad probing failed: -71 [ 56.767821][ T504] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 56.777081][ T504] uclogic: probe of 0003:256C:006D.0016 failed with error -71 [ 56.786971][ T1400] request_module fs-nfs4 succeeded, but still no fs? [ 56.787450][ T1403] fuse: Unknown parameter 'fdŸSP+' [ 56.799289][ T504] usb 1-1: USB disconnect, device number 10 [ 56.838422][ T1397] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.851553][ T1397] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.863146][ T478] usb 2-1: USB disconnect, device number 12 [ 56.871320][ T1397] EXT4-fs (loop3): 1 orphan inode deleted [ 56.876853][ T1397] EXT4-fs (loop3): 1 truncate cleaned up [ 56.882367][ T1397] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota, [ 57.257841][ T502] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 57.320946][ T1433] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 57.758192][ T1457] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 57.768105][ T1457] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 57.797384][ T1446] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 57.808103][ T1446] FAT-fs (loop4): Filesystem has been set read-only [ 57.814986][ T1446] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 57.817948][ T502] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.823776][ T1446] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 57.840049][ T502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.843705][ T1460] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 57.855910][ T502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.862694][ T1460] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 57.877672][ T502] usb 4-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 57.889058][ T1464] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 57.899130][ T502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.908725][ T303] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 57.919248][ T502] usb 4-1: config 0 descriptor?? [ 57.983776][ T1477] fuse: Bad value for 'fd' [ 58.008965][ T1470] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 58.360877][ T1498] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 58.369560][ T1498] FAT-fs (loop1): Filesystem has been set read-only [ 58.375986][ T1498] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 58.447844][ T477] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 58.467859][ T503] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 58.498679][ T1505] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 58.509136][ T1505] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 58.657911][ T502] usbhid 4-1:0.0: can't add hid device: -71 [ 58.663752][ T502] usbhid: probe of 4-1:0.0 failed with error -71 [ 58.673300][ T502] usb 4-1: USB disconnect, device number 14 [ 58.707888][ T503] usb 1-1: Using ep0 maxpacket: 8 [ 58.808041][ T477] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 58.818718][ T477] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.831485][ T503] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.841668][ T477] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.850677][ T503] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 58.859375][ T477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.862333][ T1542] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 58.867270][ T503] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 58.882655][ T1542] VFS: Lookup of 'file0' in exfat loop4 would have caused loop [ 58.890888][ T477] usb 3-1: config 0 descriptor?? [ 58.902314][ T503] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 58.913444][ T503] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 58.922737][ T503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.938246][ T477] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 58.968282][ T503] hub 1-1:1.0: bad descriptor, ignoring hub [ 58.974062][ T503] hub: probe of 1-1:1.0 failed with error -5 [ 58.980006][ T503] cdc_wdm 1-1:1.0: skipping garbage [ 58.985087][ T503] cdc_wdm 1-1:1.0: skipping garbage [ 58.990671][ T503] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 59.077905][ T502] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 59.161083][ T1550] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.194387][ T1550] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 59.213961][ T303] attempt to access beyond end of device [ 59.213961][ T303] loop4: rw=2049, want=45104, limit=40427 [ 59.317813][ T502] usb 2-1: Using ep0 maxpacket: 16 [ 59.329567][ T497] usb 1-1: USB disconnect, device number 11 [ 59.437863][ T502] usb 2-1: config 0 has no interfaces? [ 59.460539][ T1572] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 59.469212][ T1572] FAT-fs (loop3): Filesystem has been set read-only [ 59.475684][ T1572] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2076) [ 59.557888][ T502] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 59.558321][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 59.572365][ T502] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 59.585095][ T502] usb 2-1: Product: syz [ 59.589092][ T502] usb 2-1: SerialNumber: syz [ 59.594296][ T502] usb 2-1: config 0 descriptor?? [ 59.839700][ T25] usb 2-1: USB disconnect, device number 13 [ 60.617870][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 60.867853][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 60.969767][ T1646] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 60.978671][ T1646] ext4 filesystem being mounted at /root/syzkaller-testdir4234840057/syzkaller.3HCSkw/80/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 61.007885][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.019345][ T1643] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24) [ 61.021743][ T1646] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27 [ 61.027458][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 61.035663][ T1646] EXT4-fs error (device loop0): ext4_dirty_inode:6079: inode #2: comm syz-executor.0: mark_inode_dirty error [ 61.044981][ T1643] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 61.056663][ T1646] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27 [ 61.064336][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 61.072518][ T1646] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #2: comm syz-executor.0: mark_inode_dirty error [ 61.082635][ T1643] F2FS-fs (loop4): invalid crc value [ 61.098176][ T24] kauditd_printk_skb: 382 callbacks suppressed [ 61.098194][ T24] audit: type=1400 audit(1717139799.215:804): avc: denied { mounton } for pid=1645 comm="syz-executor.0" path=2F726F6F742F73797A6B616C6C65722D74657374646972343233343834303035372F73797A6B616C6C65722E334843536B772F38302F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.106033][ T1643] F2FS-fs (loop4): Found nat_bits in checkpoint [ 61.176662][ T1643] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 61.183719][ T1646] loop_set_status: loop0 () has still dirty pages (nrpages=8) [ 61.183739][ T1643] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 61.202373][ T477] usb 3-1: USB disconnect, device number 11 [ 61.205872][ T305] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor.0: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 61.221615][ T1643] attempt to access beyond end of device [ 61.221615][ T1643] loop4: rw=10241, want=45104, limit=40427 [ 61.243187][ T305] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz-executor.0: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 61.264858][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 61.266605][ T305] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 61.279771][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 61.295399][ T305] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz-executor.0: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 61.303159][ T25] usb 2-1: SerialNumber: syz [ 61.323396][ T303] attempt to access beyond end of device [ 61.323396][ T303] loop4: rw=2049, want=45120, limit=40427 [ 61.328188][ T305] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz-executor.0: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 61.362957][ T305] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor.0: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 61.384273][ T1596] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.391234][ T1596] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.657912][ T25] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 61.669228][ T25] usb-storage 2-1:1.0: USB Mass Storage device detected [ 61.694455][ T1700] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 61.702605][ T25] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 61.728003][ T25] scsi host1: usb-storage 2-1:1.0 [ 61.735240][ T25] usb 2-1: USB disconnect, device number 14 [ 61.751259][ T1702] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 61.826769][ T24] audit: type=1400 audit(1717139799.945:805): avc: denied { ioctl } for pid=1701 comm="syz-executor.4" path="/root/syzkaller-testdir3028602800/syzkaller.tXsV3R/89/file0/file0/bus" dev="loop4" ino=1048623 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.877449][ T24] audit: type=1400 audit(1717139799.995:806): avc: denied { map } for pid=1701 comm="syz-executor.4" path="socket:[20369]" dev="sockfs" ino=20369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.908203][ T1702] loop_set_status: loop4 () has still dirty pages (nrpages=4) [ 61.960528][ T24] audit: type=1326 audit(1717139800.085:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5ef0ee9 code=0x0 [ 62.028001][ T1728] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz-executor.4: bad orphan inode 2097152 [ 62.049680][ T1728] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 62.070046][ T24] audit: type=1400 audit(1717139800.195:808): avc: denied { setattr } for pid=1727 comm="syz-executor.4" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.925026][ T1757] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue [ 63.081542][ T1767] EXT4-fs (loop4): Ignoring removed orlov option [ 63.087859][ T1767] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 63.190375][ T24] audit: type=1400 audit(1717139801.315:809): avc: denied { remove_name } for pid=305 comm="syz-executor.0" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.247672][ T24] audit: type=1400 audit(1717139801.345:810): avc: denied { unlink } for pid=305 comm="syz-executor.0" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.273830][ T1767] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 63.298821][ T24] audit: type=1400 audit(1717139801.345:811): avc: denied { rmdir } for pid=305 comm="syz-executor.0" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 63.378889][ T1777] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 63.385908][ T1777] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 63.396294][ T1777] F2FS-fs (loop3): Found nat_bits in checkpoint [ 63.420226][ T1767] EXT4-fs error (device loop4): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.4: corrupt xattr in inline inode [ 63.433906][ T1767] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2204: inode #12: comm syz-executor.4: corrupted in-inode xattr [ 63.437787][ T24] audit: type=1400 audit(1717139801.535:812): avc: denied { map } for pid=1766 comm="syz-executor.4" path="/root/syzkaller-testdir3028602800/syzkaller.tXsV3R/97/file1/file0/bus" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.476200][ T303] ================================================================== [ 63.484114][ T303] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc67/0xc80 [ 63.491905][ T303] Read of size 4 at addr ffff888127117000 by task syz-executor.4/303 [ 63.499793][ T303] [ 63.501988][ T303] CPU: 1 PID: 303 Comm: syz-executor.4 Not tainted 5.10.214-syzkaller-00496-ga8e7f812fbc1 #0 [ 63.511947][ T303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 63.521836][ T303] Call Trace: [ 63.524976][ T303] dump_stack_lvl+0x1e2/0x24b [ 63.529501][ T303] ? bfq_pos_tree_add_move+0x43b/0x43b [ 63.534903][ T303] ? panic+0x80b/0x80b [ 63.538786][ T303] ? ext4_mark_iloc_dirty+0x2c23/0x3e60 [ 63.544179][ T303] print_address_description+0x81/0x3b0 [ 63.549554][ T303] kasan_report+0x179/0x1c0 [ 63.553887][ T303] ? __ext4_journal_ensure_credits+0x470/0x470 [ 63.559878][ T303] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 63.565345][ T303] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 63.570830][ T303] __asan_report_load4_noabort+0x14/0x20 [ 63.576279][ T303] ext4_xattr_delete_inode+0xc67/0xc80 [ 63.581577][ T303] ? sb_end_intwrite+0x110/0x110 [ 63.586349][ T303] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 63.592250][ T303] ? __kasan_check_read+0x11/0x20 [ 63.597112][ T303] ext4_evict_inode+0x1095/0x1730 [ 63.601982][ T303] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 63.607703][ T303] ? inode_io_list_del_locked+0x1ad/0x210 [ 63.613258][ T303] ? _raw_spin_unlock+0x4d/0x70 [ 63.617943][ T303] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 63.623669][ T303] evict+0x2a3/0x6c0 [ 63.627403][ T303] iput+0x632/0x7e0 [ 63.631050][ T303] vfs_rmdir+0x271/0x3f0 [ 63.635128][ T303] do_rmdir+0x2cf/0x5c0 [ 63.639118][ T303] ? d_delete_notify+0xd0/0xd0 [ 63.643720][ T303] ? strncpy_from_user+0x18e/0x2d0 [ 63.648665][ T303] ? getname_flags+0x1fd/0x520 [ 63.653268][ T303] __x64_sys_unlinkat+0xdf/0xf0 [ 63.657951][ T303] do_syscall_64+0x34/0x70 [ 63.662203][ T303] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 63.667945][ T303] RIP: 0033:0x7f40d02266c7 [ 63.672201][ T303] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 63.691625][ T303] RSP: 002b:00007ffd6aa46918 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 63.699872][ T303] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f40d02266c7 [ 63.707677][ T303] RDX: 0000000000000200 RSI: 00007ffd6aa47ac0 RDI: 00000000ffffff9c [ 63.715490][ T303] RBP: 00007f40d0272336 R08: 0000000000000000 R09: 0000000000000000 [ 63.723300][ T303] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffd6aa47ac0 [ 63.731115][ T303] R13: 00007f40d0272336 R14: 000000000000f61b R15: 0000000000000009 [ 63.738925][ T303] [ 63.741093][ T303] The buggy address belongs to the page: [ 63.746580][ T303] page:ffffea00049c45c0 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x1 pfn:0x127117 [ 63.756892][ T303] flags: 0x4000000000000000() [ 63.761413][ T303] raw: 4000000000000000 ffffea0004da0448 ffffea00049c6e48 0000000000000000 [ 63.769826][ T303] raw: 0000000000000001 0000000000000000 00000000ffffff7f 0000000000000000 [ 63.778240][ T303] page dumped because: kasan: bad access detected [ 63.784490][ T303] page_owner tracks the page as freed [ 63.789704][ T303] page last allocated via order 0, migratetype Movable, gfp_mask 0x8100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|0x8000000), pid 305, ts 22005464781, free_ts 63227269467 [ 63.805844][ T303] prep_new_page+0x166/0x180 [ 63.810271][ T303] get_page_from_freelist+0x2d8c/0x2f30 [ 63.815649][ T303] __alloc_pages_nodemask+0x435/0xaf0 [ 63.820860][ T303] handle_pte_fault+0x174f/0x3de0 [ 63.825717][ T303] handle_mm_fault+0x11d6/0x1a10 [ 63.830492][ T303] exc_page_fault+0x2a6/0x5b0 [ 63.835003][ T303] asm_exc_page_fault+0x1e/0x30 [ 63.839690][ T303] page last free stack trace: [ 63.844228][ T303] free_unref_page_prepare+0x2ae/0x2d0 [ 63.849499][ T303] free_unref_page_list+0x122/0xb20 [ 63.854530][ T303] release_pages+0xea0/0xef0 [ 63.858959][ T303] free_pages_and_swap_cache+0x8a/0xa0 [ 63.864250][ T303] tlb_finish_mmu+0x177/0x320 [ 63.868765][ T303] exit_mmap+0x312/0x5c0 [ 63.872844][ T303] __mmput+0x95/0x2d0 [ 63.876661][ T303] mmput+0x59/0x170 [ 63.880312][ T303] do_exit+0xbda/0x2a50 [ 63.884303][ T303] do_group_exit+0x141/0x310 [ 63.888729][ T303] __x64_sys_exit_group+0x3f/0x40 [ 63.893586][ T303] do_syscall_64+0x34/0x70 [ 63.897844][ T303] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 63.903563][ T303] [ 63.905733][ T303] Memory state around the buggy address: [ 63.911211][ T303] ffff888127116f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2024/05/31 07:16:42 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 63.919105][ T303] ffff888127116f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 63.927004][ T303] >ffff888127117000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 63.934898][ T303] ^ [ 63.938810][ T303] ffff888127117080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 63.947836][ T303] ffff888127117100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 63.955728][ T303] ================================================================== [ 63.963745][ T303] Disabling lock debugging due to kernel taint [ 64.022073][ T24] audit: type=1400 audit(1717139801.565:813): avc: denied { rmdir } for pid=303 comm="syz-executor.4" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1