last executing test programs: 22m54.809934434s ago: executing program 2 (id=3272): r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x440) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)={0xac, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x96}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc925}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x45}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000400000000000000000000c70b6c4b9129b75dbf46dee29cc566d69e261c5cde879bd49cddae396d229c0d44358e330230bd6560b637371f9c5443382b0e29b769c863c197b49246caff69b13ae108aa8b020f4e08ec01050656bfc527565d99f920394604ce3b6ea1850618fc45943b40e4f38c0d7b85da5b6bdaab74fe58ea29de7ba952ebf08e5a4cfd12162d4de9c0591bfa7df00c047b4a1171094112148a07a48702b43d1f459043", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e0000020000000000000000000000000b4bc22b339e468c230675ac609aefcbc7a5306e8b614d6813ee55d984533fdf227b096035b7c35953e8fbf1a47fa8ee3ba79bd1702bc860f0118bc99bcd0e5636046d545d341ad5c582da2ffa60e2a9d9cf6bcfecf608f5013c31d16cb69fa0b21c1316fcf73a19548a04693bcdbadf7e427dc"], 0x10) 22m53.764376479s ago: executing program 2 (id=3276): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_procs(r0, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r2, 0x0, r3, 0x0, 0x10000000000016, 0x0) 22m52.767472963s ago: executing program 2 (id=3281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00'}, 0x18) r4 = gettid() tkill(r4, 0x12) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x372}], 0x1}, 0x20000044) 22m51.632760409s ago: executing program 2 (id=3283): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00') seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) stat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000300)="f669184087b8c6242cbef8573fd18712277769d7ba74a0ed685e031d2d83134b5e67a7257d7d0231ef52c076678e416d4649d44c8d67fd8a495b119a3be74c4b35bf22d3c21c5822ffb202943be0b3a2b808861a3eaf5cb8ab16d5db09fefd8b2930e8a0c1880920825f6e2716cb3b359fdb451beebe860cd49fa5a38786d7fd172bd1aff2e30734d993d22eeb31836c71ce38d8d8124e5e255e0338eb5c2e43a95a38e0b9d4586bd2e891f324d81d4a1454bb5760b092721aead07070f01aba25e22ef7bb4ad9d4fc60445909fb2892", 0xd0, 0x3) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xprtrdma_frwr_dereg\x00', 0xffffffffffffffff, 0x0, 0x400001fffffffff}, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000c00)={0xb0000000}) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43, 0x4f]}, 0x31) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 22m51.255517684s ago: executing program 2 (id=3286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000400018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70a7500080000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) socket$netlink(0x10, 0x3, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @multicast1}, 0xc) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x6}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x85, 0x29b, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 22m51.055119917s ago: executing program 2 (id=3287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xfd) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0]) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006440)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r6, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x11, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r7, &(0x7f0000006340), 0x0, 0x5c884) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x84000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 22m50.720580941s ago: executing program 32 (id=3287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xfd) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0]) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006440)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r6, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x11, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r7, &(0x7f0000006340), 0x0, 0x5c884) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x84000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 5.915147147s ago: executing program 1 (id=9669): socket(0x2c, 0x803, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 5.860234728s ago: executing program 1 (id=9670): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e4d700", 0x34, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @empty, @loopback={0xfec0ffff00000000, 0xffffac1414aa}, [], "ef9edaaa"}}}}}}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.782483387s ago: executing program 3 (id=9692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000003e00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x28, r1, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}}, 0x28}}, 0x0) 3.693259188s ago: executing program 5 (id=9694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r0, r3) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x20, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x313}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) 3.693094568s ago: executing program 3 (id=9695): creat(0x0, 0x12e) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x40) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) 3.687794118s ago: executing program 5 (id=9696): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) unshare(0x62040200) syz_usb_connect(0x0, 0x48f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) 2.523946615s ago: executing program 3 (id=9708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 2.349133078s ago: executing program 1 (id=9699): r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000000)=0x80) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat(0xffffffffffffffff, 0x0, 0x2c500, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r2, &(0x7f0000007100)={0x2020}, 0x941f) 2.327989418s ago: executing program 0 (id=9700): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0) 2.257166588s ago: executing program 1 (id=9701): r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pwritev(r0, 0x0, 0x0, 0x8, 0x365) 2.201173049s ago: executing program 1 (id=9702): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x8, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x4) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003020000082505a1a440000101000109023b00010102f4070804"], &(0x7f0000000940)={0x0, 0x0, 0xf, 0x0, 0x1, [{0x0, 0x0}]}) 2.200966129s ago: executing program 0 (id=9703): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) capget(&(0x7f0000000000)={0x20071026}, 0x0) mmap(&(0x7f0000e22000/0x14000)=nil, 0x14000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) 1.873183904s ago: executing program 4 (id=9705): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 1.788631655s ago: executing program 4 (id=9706): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$unix(0x1, 0x5, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000340)={0x5, {0x10, 0x1, 0x10001, 0x9, 0x2cc}}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioperm(0x3, 0x7, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.788481195s ago: executing program 4 (id=9707): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af000000", 0x17) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0xa}, 0xa}, 0x57) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) timerfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.612335757s ago: executing program 3 (id=9709): pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lstat(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x9da, 0x7, 0x81, 0xc80, r0, 0xffff, '\x00', r2, r0, 0x5, 0x2, 0x0, 0xb, @void, @value, @void, @value}, 0x50) 1.48733829s ago: executing program 3 (id=9710): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x0, 0x2}}, 0x10, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x80}, 0x20000080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r2, &(0x7f0000000240), &(0x7f00000002c0)=""/238}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcffffffe4a3000000000000", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_setup(0x3f3d, &(0x7f0000000400)={0x0, 0xc890, 0x8}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000680)='xprtrdma_createmrs\x00', r6}, 0x18) 1.45423723s ago: executing program 4 (id=9711): socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 1.411019401s ago: executing program 3 (id=9712): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1f, 0x8, 0x4, 0x7cb4, 0x40000, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r4, &(0x7f0000000780)=[{{&(0x7f0000000580)=@l2={0x1f, 0x4d9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf}, 0x80, &(0x7f0000000340)}}], 0x1, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0) 1.349150322s ago: executing program 0 (id=9713): r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000000)=0x80) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat(0xffffffffffffffff, 0x0, 0x2c500, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r2, &(0x7f0000007100)={0x2020}, 0x941f) 1.328747972s ago: executing program 0 (id=9714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x8000c61) 1.244770233s ago: executing program 0 (id=9715): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfdb7) 1.033554866s ago: executing program 0 (id=9716): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x3) mlockall(0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140), 0xee, 0x478, &(0x7f0000000e40)="$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") 711.270071ms ago: executing program 5 (id=9717): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0x4}, 0x18) shutdown(0xffffffffffffffff, 0x1) 657.202631ms ago: executing program 5 (id=9718): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x1, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x0) listen(r1, 0xffffff2b) 655.633001ms ago: executing program 5 (id=9719): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffff7ffffe9}, 0x18) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f00000001c0)={0x40, 0x1, 0x8, 0x3, 0x0, 0x0, 0x0}) 617.354792ms ago: executing program 5 (id=9720): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000580)={0x8, 0x5dc7b2f2, 0x7, 0xf126, 0xa, 0x0, [{0x6, 0x6b37, 0xde, '\x00', 0x2c80}, {0x1000, 0x9, 0x5, '\x00', 0x202}, {0xfffffffffffffff9, 0x4, 0x4, '\x00', 0x1403}, {0x5, 0x6, 0x9, '\x00', 0x2d82}, {0x7, 0x6, 0x7fffffff}, {0x7, 0x8, 0xb}, {0x4, 0x1, 0x7}, {0xffffffffffffffff, 0x80, 0xd1f5, '\x00', 0x2502}, {0xac58, 0xd5, 0x2, '\x00', 0x4}, {0x81, 0x5, 0x5, '\x00', 0x1103}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={0x0, r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000008) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc020000000000000000000000000080e7b12ec32cc1a7854598c2c8407eb23fa217157ab6e45c914a0a8379fde64c9435d454f319128c1759f1f6c3b3200cc6dd13d253674c6b7441317b93d0f5242af76fabd9e9e296af528d02de7b0de22b5b9864fc7bdcfdaeea0c164ff1096583a3717dedf99cba74d48e5527cc8033a4be14b9bc19f46d3a9553e046ed"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 262.267147ms ago: executing program 4 (id=9721): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x2}], 0x18) 197.128078ms ago: executing program 4 (id=9722): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af000000", 0x17) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0xa}, 0xa}, 0x57) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) timerfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 1 (id=9723): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d0000000c00060001"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 0x7ffc0000 [ 2582.701527][ T30] audit: type=1326 audit(1749292734.587:16036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.3.8808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2582.780553][ T30] audit: type=1326 audit(1749292734.597:16037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.3.8808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2582.876008][ T30] audit: type=1326 audit(1749292734.597:16038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.3.8808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2582.944777][ T30] audit: type=1326 audit(1749292734.597:16039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.3.8808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2583.453640][ T2525] syz.1.8811[2525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2583.453752][ T2525] syz.1.8811[2525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2584.247802][ T2536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8817'. [ 2584.323565][ T2533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8817'. [ 2584.878022][ T2550] device sit0 entered promiscuous mode [ 2585.449909][ T2561] hub 1-0:1.0: USB hub found [ 2585.507068][ T2561] hub 1-0:1.0: 1 port detected [ 2585.576178][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 2585.598947][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2585.642179][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2585.687592][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2585.732212][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2585.797238][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2585.815954][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2585.824395][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2586.479784][ T39] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 2586.492468][ T39] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 2586.517198][ T39] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 2586.537426][ T39] hid-generic 0000:0004:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2586.557981][ T2597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8838'. [ 2586.584542][ T2595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8838'. [ 2586.709190][ T2600] fido_id[2600]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2587.742647][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 2587.742664][ T30] audit: type=1326 audit(1749292739.967:16191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.0.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d57eb9929 code=0x7ffc0000 [ 2587.801843][ T2623] hub 1-0:1.0: USB hub found [ 2587.818250][ T2623] hub 1-0:1.0: 1 port detected [ 2587.872473][ T30] audit: type=1326 audit(1749292739.967:16192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.0.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d57eb9929 code=0x7ffc0000 [ 2587.989519][ T30] audit: type=1326 audit(1749292740.007:16193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.0.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d57eb9929 code=0x7ffc0000 [ 2588.100400][ T30] audit: type=1326 audit(1749292740.007:16194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.0.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d57eb9929 code=0x7ffc0000 [ 2588.199643][ T30] audit: type=1326 audit(1749292740.007:16195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.0.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d57eb9929 code=0x7ffc0000 [ 2588.264356][ T30] audit: type=1326 audit(1749292740.007:16196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.0.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1d57eb9929 code=0x7ffc0000 [ 2588.321232][ T30] audit: type=1326 audit(1749292740.007:16197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.0.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d57eb9929 code=0x7ffc0000 [ 2588.352957][ T30] audit: type=1326 audit(1749292740.007:16198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.0.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1d57eb9929 code=0x7ffc0000 [ 2588.380207][ T30] audit: type=1400 audit(1749292740.007:16199): avc: denied { mount } for pid=2622 comm="syz.0.8847" name="/" dev="ramfs" ino=120384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2588.470108][ T30] audit: type=1326 audit(1749292740.007:16200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.0.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d57eb9929 code=0x7ffc0000 [ 2589.300130][ T2666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8862'. [ 2591.316706][ T2697] syz.0.8873[2697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2591.317276][ T2697] syz.0.8873[2697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2591.359713][ T2697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2591.378380][ T2697] IPv6: NLM_F_CREATE should be set when creating new route [ 2592.159976][ T2711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8879'. [ 2592.310857][ T2709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8878'. [ 2592.328053][ T2709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8878'. [ 2592.946643][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 2592.946662][ T30] audit: type=1400 audit(1749292745.177:16295): avc: denied { name_bind } for pid=2730 comm="syz.1.8884" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2593.423244][ T39] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2593.490885][ T2745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8891'. [ 2593.781211][ T2751] syz.3.8892[2751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2593.781332][ T2751] syz.3.8892[2751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2593.798769][ T2751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2593.817347][ T2751] IPv6: NLM_F_CREATE should be set when creating new route [ 2593.831949][ T30] audit: type=1400 audit(1749292745.917:16296): avc: denied { setopt } for pid=2738 comm="syz.5.8887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2593.966668][ T30] audit: type=1400 audit(1749292745.917:16297): avc: denied { create } for pid=2738 comm="syz.5.8887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2594.003699][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2594.044820][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2594.092452][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.244178][ T39] usb 2-1: config 0 descriptor?? [ 2594.653239][ T30] audit: type=1326 audit(1749292746.767:16298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.4.8893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84debe9929 code=0x7ffc0000 [ 2595.316251][ T30] audit: type=1326 audit(1749292746.767:16299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.4.8893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f84debe9929 code=0x7ffc0000 [ 2595.397032][ T30] audit: type=1326 audit(1749292746.777:16300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.4.8893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84debe9929 code=0x7ffc0000 [ 2595.441430][ T30] audit: type=1400 audit(1749292747.467:16301): avc: denied { mounton } for pid=2732 comm="syz.1.8885" path="/588/file0" dev="tmpfs" ino=3422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2595.491315][ T30] audit: type=1400 audit(1749292747.477:16302): avc: denied { unlink } for pid=2732 comm="syz.1.8885" name="#355" dev="tmpfs" ino=3428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2595.514268][ T30] audit: type=1400 audit(1749292747.477:16303): avc: denied { mount } for pid=2732 comm="syz.1.8885" name="/" dev="overlay" ino=3424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2595.537882][ T30] audit: type=1400 audit(1749292747.477:16304): avc: denied { create } for pid=2732 comm="syz.1.8885" name="#359" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2595.592966][ T2765] bridge0: port 1(bridge_slave_0) entered blocking state [ 2595.600636][ T2765] bridge0: port 1(bridge_slave_0) entered disabled state [ 2595.608475][ T2765] device bridge_slave_0 entered promiscuous mode [ 2595.618358][ T2765] bridge0: port 2(bridge_slave_1) entered blocking state [ 2595.625722][ T2765] bridge0: port 2(bridge_slave_1) entered disabled state [ 2595.633460][ T2765] device bridge_slave_1 entered promiscuous mode [ 2595.683456][T19091] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2595.757221][ T2765] bridge0: port 2(bridge_slave_1) entered blocking state [ 2595.764324][ T2765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2595.771697][ T2765] bridge0: port 1(bridge_slave_0) entered blocking state [ 2595.778770][ T2765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2595.818743][T17871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2595.827345][T17871] bridge0: port 1(bridge_slave_0) entered disabled state [ 2595.835033][T17871] bridge0: port 2(bridge_slave_1) entered disabled state [ 2595.855784][T17871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2595.866295][T17871] bridge0: port 1(bridge_slave_0) entered blocking state [ 2595.873390][T17871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2595.886318][T17871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2595.896155][T17871] bridge0: port 2(bridge_slave_1) entered blocking state [ 2595.903249][T17871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2596.005751][T17871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2596.057873][T17871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2596.093637][T19091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2596.139984][T19091] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2596.177255][T17871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2596.189931][T19091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2596.200655][T17871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2596.209155][T17871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2596.221183][T19091] usb 1-1: config 0 descriptor?? [ 2596.227426][T17871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2596.240212][ T2765] device veth0_vlan entered promiscuous mode [ 2596.254458][T17871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2596.268232][ T2765] device veth1_macvtap entered promiscuous mode [ 2596.280540][T17871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2596.291902][T11624] device bridge_slave_1 left promiscuous mode [ 2596.298851][T11624] bridge0: port 2(bridge_slave_1) entered disabled state [ 2596.307867][T11624] device bridge_slave_0 left promiscuous mode [ 2596.314527][T11624] bridge0: port 1(bridge_slave_0) entered disabled state [ 2596.380570][T11624] device veth1_macvtap left promiscuous mode [ 2596.412332][T11624] device veth0_vlan left promiscuous mode [ 2597.643324][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 2597.649313][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 2597.665456][ T39] usb 2-1: USB disconnect, device number 55 [ 2597.761479][T17871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2598.019007][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2598.019023][ T30] audit: type=1400 audit(1749292750.247:16312): avc: denied { mounton } for pid=2765 comm="syz-executor" path="/root/syzkaller.XdkMWH/syz-tmp" dev="sda1" ino=2069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2598.127621][ T30] audit: type=1400 audit(1749292750.277:16313): avc: denied { mount } for pid=2765 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2598.276430][ T30] audit: type=1400 audit(1749292750.287:16314): avc: denied { mount } for pid=2765 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2598.372248][ T30] audit: type=1400 audit(1749292750.287:16315): avc: denied { mounton } for pid=2765 comm="syz-executor" path="/root/syzkaller.XdkMWH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2598.401718][ T30] audit: type=1400 audit(1749292750.287:16316): avc: denied { mounton } for pid=2765 comm="syz-executor" path="/root/syzkaller.XdkMWH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=121744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2598.430671][ T30] audit: type=1400 audit(1749292750.297:16317): avc: denied { mounton } for pid=2765 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2598.473838][ T30] audit: type=1400 audit(1749292750.297:16318): avc: denied { mount } for pid=2765 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2598.573600][ T30] audit: type=1400 audit(1749292750.297:16319): avc: denied { mounton } for pid=2765 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2598.632708][ T30] audit: type=1400 audit(1749292750.297:16320): avc: denied { mount } for pid=2765 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2598.676865][ T30] audit: type=1400 audit(1749292750.437:16321): avc: denied { connect } for pid=2798 comm="syz.5.8907" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2598.907899][ T2809] syz.3.8909[2809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2598.908017][ T2809] syz.3.8909[2809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2598.984092][T19091] usbhid 1-1:0.0: can't add hid device: -71 [ 2599.671030][T19091] usbhid: probe of 1-1:0.0 failed with error -71 [ 2600.198670][T19091] usb 1-1: USB disconnect, device number 58 [ 2600.366019][ T2831] netlink: 'syz.1.8918': attribute type 4 has an invalid length. [ 2600.933579][T28395] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2601.103210][T19091] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2601.260194][ T2864] syz.4.8932[2864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2601.260279][ T2864] syz.4.8932[2864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2601.313337][T28395] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2601.411547][T28395] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2601.421090][T28395] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2601.425166][ T2870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8935'. [ 2601.439395][T28395] usb 6-1: config 0 descriptor?? [ 2601.492786][T19091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2601.503683][T19091] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2601.512797][T19091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2601.521733][T19091] usb 1-1: config 0 descriptor?? [ 2602.710264][ T1362] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2602.901544][ T2893] syz.4.8941[2893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2602.901669][ T2893] syz.4.8941[2893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2603.083327][ T1362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2603.104722][ T1362] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2603.113823][ T1362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.124209][ T1362] usb 2-1: config 0 descriptor?? [ 2603.423320][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 2603.423338][ T30] audit: type=1400 audit(1749292755.647:16334): avc: denied { relabelfrom } for pid=2895 comm="syz.3.8942" name="" dev="pipefs" ino=121950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2603.585630][ T2900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8943'. [ 2603.730789][ T2898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8943'. [ 2603.944418][ T30] audit: type=1400 audit(1749292756.177:16335): avc: denied { setopt } for pid=2912 comm="syz.0.8948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2603.963295][T19091] usbhid 1-1:0.0: can't add hid device: -71 [ 2603.969969][T19091] usbhid: probe of 1-1:0.0 failed with error -71 [ 2603.983810][T19091] usb 1-1: USB disconnect, device number 59 [ 2604.016651][ T30] audit: type=1400 audit(1749292756.247:16336): avc: denied { append } for pid=2915 comm="syz.5.8949" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2604.043260][T28395] usbhid 6-1:0.0: can't add hid device: -71 [ 2604.049281][T28395] usbhid: probe of 6-1:0.0 failed with error -71 [ 2604.054713][ T30] audit: type=1400 audit(1749292756.277:16337): avc: denied { ioctl } for pid=2912 comm="syz.0.8948" path="socket:[121981]" dev="sockfs" ino=121981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2604.070471][T28395] usb 6-1: USB disconnect, device number 39 [ 2604.081665][ T30] audit: type=1400 audit(1749292756.277:16338): avc: denied { bind } for pid=2912 comm="syz.0.8948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2604.806177][ T30] audit: type=1400 audit(1749292756.817:16339): avc: denied { create } for pid=2923 comm="syz.3.8952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2604.827594][ T30] audit: type=1400 audit(1749292756.837:16340): avc: denied { bind } for pid=2923 comm="syz.3.8952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2604.857398][ T30] audit: type=1400 audit(1749292757.087:16341): avc: denied { read } for pid=2927 comm="syz.4.8953" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2604.880453][ T30] audit: type=1400 audit(1749292757.087:16342): avc: denied { open } for pid=2927 comm="syz.4.8953" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2604.904676][ T30] audit: type=1400 audit(1749292757.087:16343): avc: denied { ioctl } for pid=2927 comm="syz.4.8953" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2604.952988][ T2931] futex_wake_op: syz.0.8954 tries to shift op by -1; fix this program [ 2605.124011][ T1362] usbhid 2-1:0.0: can't add hid device: -71 [ 2605.130524][ T1362] usbhid: probe of 2-1:0.0 failed with error -71 [ 2605.163475][T19091] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2605.168522][ T1362] usb 2-1: USB disconnect, device number 56 [ 2605.423255][T19091] usb 4-1: Using ep0 maxpacket: 8 [ 2605.503300][T28395] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2605.583267][T19091] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2605.663350][T19091] usb 4-1: config 0 has an invalid interface number: 125 but max is 2 [ 2605.671973][T19091] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2605.682955][T19091] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2605.691983][T19091] usb 4-1: config 0 has no interface number 0 [ 2605.698276][T19091] usb 4-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2605.711471][T19091] usb 4-1: config 0 interface 125 has no altsetting 0 [ 2605.713206][ T1362] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2605.923422][T19091] usb 4-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 2605.932873][T19091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2605.941456][T19091] usb 4-1: Product: syz [ 2605.945942][T19091] usb 4-1: Manufacturer: syz [ 2605.950836][T19091] usb 4-1: SerialNumber: syz [ 2605.957022][T19091] usb 4-1: config 0 descriptor?? [ 2605.979760][ T2954] hub 1-0:1.0: USB hub found [ 2605.984800][ T2954] hub 1-0:1.0: 1 port detected [ 2606.033280][T28395] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2606.051147][T28395] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2606.061489][T28395] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2606.082598][T28395] usb 6-1: config 0 descriptor?? [ 2606.263308][ T1362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2606.273345][ T1362] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2606.282465][ T1362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2606.295603][ T1362] usb 2-1: config 0 descriptor?? [ 2607.433507][T19091] hub 4-1:0.125: bad descriptor, ignoring hub [ 2607.441162][T19091] hub: probe of 4-1:0.125 failed with error -5 [ 2607.483480][T19091] usb 4-1: Found UVC 15.ff device syz (17dc:0202) [ 2607.490128][T19091] usb 4-1: No valid video chain found. [ 2607.533896][T19091] usb 4-1: USB disconnect, device number 39 [ 2609.183306][T28395] usbhid 6-1:0.0: can't add hid device: -71 [ 2609.189322][T28395] usbhid: probe of 6-1:0.0 failed with error -71 [ 2609.203281][ T1362] usbhid 2-1:0.0: can't add hid device: -71 [ 2609.223811][ T1362] usbhid: probe of 2-1:0.0 failed with error -71 [ 2609.237242][T28395] usb 6-1: USB disconnect, device number 40 [ 2609.257252][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 2609.257270][ T30] audit: type=1326 audit(1749292761.487:16390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2609.308501][ T1362] usb 2-1: USB disconnect, device number 57 [ 2609.320059][ T2993] hub 1-0:1.0: USB hub found [ 2609.333727][ T2993] hub 1-0:1.0: 1 port detected [ 2609.358832][ T30] audit: type=1326 audit(1749292761.527:16391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2609.442189][ T30] audit: type=1326 audit(1749292761.527:16392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2609.514974][ T30] audit: type=1326 audit(1749292761.527:16393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2609.574418][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 2609.603182][ T2997] bridge0: port 1(bridge_slave_0) entered disabled state [ 2609.611078][ T2997] device bridge_slave_0 entered promiscuous mode [ 2609.633243][ T30] audit: type=1326 audit(1749292761.527:16394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2609.657153][ T30] audit: type=1326 audit(1749292761.527:16395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2609.683960][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 2609.693178][ T2997] bridge0: port 2(bridge_slave_1) entered disabled state [ 2609.693489][ T30] audit: type=1326 audit(1749292761.527:16396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2609.708673][ T2997] device bridge_slave_1 entered promiscuous mode [ 2609.810099][ T30] audit: type=1326 audit(1749292761.527:16397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2609.847561][ T30] audit: type=1326 audit(1749292761.527:16398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2609.883113][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 2609.890224][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2609.897624][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 2609.904712][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2609.929983][ T30] audit: type=1326 audit(1749292761.527:16399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2609.987752][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2609.996043][T11624] bridge0: port 1(bridge_slave_0) entered disabled state [ 2610.010900][T11624] bridge0: port 2(bridge_slave_1) entered disabled state [ 2610.034383][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2610.048514][T11624] bridge0: port 1(bridge_slave_0) entered blocking state [ 2610.055620][T11624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2610.088255][ T372] device veth1_macvtap left promiscuous mode [ 2610.097734][ T372] device veth0_vlan left promiscuous mode [ 2610.660219][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2610.668681][T11624] bridge0: port 2(bridge_slave_1) entered blocking state [ 2610.675778][T11624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2610.697544][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2610.708329][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2610.725634][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2610.734359][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2610.750588][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2610.759648][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2610.771160][ T2997] device veth0_vlan entered promiscuous mode [ 2610.784168][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2610.792256][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2610.800469][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2610.808107][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2610.826076][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2610.835371][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2610.849412][ T2997] device veth1_macvtap entered promiscuous mode [ 2610.882072][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2610.921276][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2610.933961][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2611.183995][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2611.192685][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2612.864116][ T3088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9006'. [ 2614.863208][T19091] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2615.129079][ T3129] device wireguard0 entered promiscuous mode [ 2615.242057][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 2615.242084][ T30] audit: type=1400 audit(1749292767.467:16491): avc: denied { nlmsg_write } for pid=3126 comm="syz.0.9019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2615.294390][T19091] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2615.304414][T19091] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2615.314121][T19091] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2615.356725][T19091] usb 6-1: config 0 descriptor?? [ 2616.790629][ T30] audit: type=1400 audit(1749292769.017:16492): avc: denied { lock } for pid=3138 comm="syz.4.9022" path="socket:[123317]" dev="sockfs" ino=123317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2616.837279][ T3151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9025'. [ 2616.851651][ T3148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9025'. [ 2617.445217][ T30] audit: type=1400 audit(1749292769.677:16493): avc: denied { setopt } for pid=3159 comm="syz.3.9028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2617.465799][ T3160] syz.3.9028[3160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2617.465934][ T3160] syz.3.9028[3160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2617.480150][ T3160] SELinux: Context Ü is not valid (left unmapped). [ 2618.173468][T19091] usbhid 6-1:0.0: can't add hid device: -71 [ 2618.180882][T19091] usbhid: probe of 6-1:0.0 failed with error -71 [ 2618.225773][T19091] usb 6-1: USB disconnect, device number 41 [ 2618.449364][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2618.962441][ T30] audit: type=1326 audit(1749292771.187:16494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3191 comm="syz.3.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2618.986580][ T30] audit: type=1326 audit(1749292771.197:16495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3191 comm="syz.3.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2619.010481][ T30] audit: type=1326 audit(1749292771.197:16496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3191 comm="syz.3.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2619.084007][ T30] audit: type=1326 audit(1749292771.197:16497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3191 comm="syz.3.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2619.137983][ T30] audit: type=1326 audit(1749292771.207:16498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3191 comm="syz.3.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2619.175925][ T30] audit: type=1326 audit(1749292771.207:16499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3191 comm="syz.3.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2619.206291][ T30] audit: type=1326 audit(1749292771.207:16500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3191 comm="syz.3.9038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ca10929 code=0x7ffc0000 [ 2619.357670][ T3207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9042'. [ 2619.373445][ T3202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9042'. [ 2619.640206][ T3211] bridge0: port 1(bridge_slave_0) entered blocking state [ 2619.652672][ T3211] bridge0: port 1(bridge_slave_0) entered disabled state [ 2619.667940][ T3211] device bridge_slave_0 entered promiscuous mode [ 2619.741323][ T3211] bridge0: port 2(bridge_slave_1) entered blocking state [ 2619.763434][ T3211] bridge0: port 2(bridge_slave_1) entered disabled state [ 2619.786734][ T3211] device bridge_slave_1 entered promiscuous mode [ 2619.847790][T11624] tipc: Disabling bearer [ 2619.855597][T11624] tipc: Disabling bearer [ 2619.946797][T11624] tipc: Left network mode [ 2620.025849][ T3211] bridge0: port 2(bridge_slave_1) entered blocking state [ 2620.033044][ T3211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2620.040366][ T3211] bridge0: port 1(bridge_slave_0) entered blocking state [ 2620.047440][ T3211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2620.174734][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 2620.185736][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 2620.194752][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2620.203603][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2620.234289][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2620.244449][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 2620.251539][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2620.260495][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2620.272559][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 2620.279644][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2620.287148][ T39] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2620.329650][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2620.364921][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2620.417232][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2620.458569][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2620.468053][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2620.477623][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2620.490818][ T3211] device veth0_vlan entered promiscuous mode [ 2620.518768][T11624] device bridge_slave_1 left promiscuous mode [ 2620.527591][T11624] bridge0: port 2(bridge_slave_1) entered disabled state [ 2620.537752][T11624] device bridge_slave_0 left promiscuous mode [ 2620.544990][T11624] bridge0: port 1(bridge_slave_0) entered disabled state [ 2620.558121][T11624] device veth1_macvtap left promiscuous mode [ 2620.564764][T11624] device veth0_vlan left promiscuous mode [ 2620.570543][ T39] usb 5-1: device descriptor read/64, error -71 [ 2620.813428][ T3211] device veth1_macvtap entered promiscuous mode [ 2620.821836][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2620.856577][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2620.878861][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2620.914753][ T3241] tipc: Started in network mode [ 2620.919880][ T3241] tipc: Node identity ac14140f, cluster identity 4711 [ 2620.932351][ T3241] tipc: New replicast peer: 0.0.255.255 [ 2620.938701][ T3241] tipc: Enabled bearer , priority 10 [ 2620.939341][ T39] usb 5-1: device descriptor read/64, error -71 [ 2620.960329][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2620.976882][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2621.631742][ T39] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2621.875775][T32584] tipc: Node number set to 2886997007 [ 2621.889596][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2621.889611][ T30] audit: type=1400 audit(1749293542.266:16507): avc: denied { setopt } for pid=3252 comm="syz.5.9058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2621.919971][ T3253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9058'. [ 2621.950974][ T30] audit: type=1400 audit(1749293542.319:16508): avc: denied { relabelto } for pid=3252 comm="syz.5.9058" name="542" dev="tmpfs" ino=3116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2622.034472][ T30] audit: type=1400 audit(1749293542.362:16509): avc: denied { associate } for pid=3252 comm="syz.5.9058" name="542" dev="tmpfs" ino=3116 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 2622.065943][ T39] usb 5-1: device descriptor read/64, error -71 [ 2622.092900][ T30] audit: type=1400 audit(1749293542.383:16510): avc: denied { write } for pid=26654 comm="syz-executor" name="542" dev="tmpfs" ino=3116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2622.119672][ T30] audit: type=1400 audit(1749293542.383:16511): avc: denied { remove_name } for pid=26654 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2622.148028][ T30] audit: type=1400 audit(1749293542.383:16512): avc: denied { rmdir } for pid=26654 comm="syz-executor" name="542" dev="tmpfs" ino=3116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2622.471692][ T39] usb 5-1: device descriptor read/64, error -71 [ 2622.585703][ T39] usb usb5-port1: attempt power cycle [ 2622.623027][ T1362] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2622.956646][ T30] audit: type=1326 audit(1749293543.397:16513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3279 comm="syz.3.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2622.973792][ T3280] hub 1-0:1.0: USB hub found [ 2622.980687][ T30] audit: type=1326 audit(1749293543.397:16514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3279 comm="syz.3.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2622.992518][ T3280] hub 1-0:1.0: 1 port detected [ 2623.008582][ T30] audit: type=1326 audit(1749293543.408:16515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3279 comm="syz.3.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2623.037468][ T30] audit: type=1326 audit(1749293543.408:16516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3279 comm="syz.3.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2623.225184][ T3291] device pim6reg1 entered promiscuous mode [ 2623.257266][ T1362] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2623.272638][ T1362] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2623.282024][ T1362] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.291666][ T1362] usb 6-1: config 0 descriptor?? [ 2624.819518][ T3327] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3327 comm=syz.3.9085 [ 2625.764811][ T1362] usbhid 6-1:0.0: can't add hid device: -71 [ 2625.770996][ T1362] usbhid: probe of 6-1:0.0 failed with error -71 [ 2625.785670][ T1362] usb 6-1: USB disconnect, device number 42 [ 2625.833723][ T3339] hub 1-0:1.0: USB hub found [ 2625.852150][ T3339] hub 1-0:1.0: 1 port detected [ 2626.199647][ T3344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9091'. [ 2626.917130][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 2626.917146][ T30] audit: type=1326 audit(1749293547.572:16652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0327868929 code=0x7ffc0000 [ 2626.947768][ T30] audit: type=1326 audit(1749293547.583:16653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0327868929 code=0x7ffc0000 [ 2626.971885][ T30] audit: type=1400 audit(1749293547.593:16654): avc: denied { connect } for pid=3376 comm="syz.3.9105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2627.003572][ T30] audit: type=1326 audit(1749293547.614:16655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0327868929 code=0x7ffc0000 [ 2627.029770][ T30] audit: type=1326 audit(1749293547.614:16656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0327868929 code=0x7ffc0000 [ 2627.054005][ T30] audit: type=1326 audit(1749293547.614:16657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0327868929 code=0x7ffc0000 [ 2627.081822][ T30] audit: type=1326 audit(1749293547.635:16658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0327868929 code=0x7ffc0000 [ 2627.105335][ T39] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2627.120865][ T30] audit: type=1326 audit(1749293547.635:16659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0327868929 code=0x7ffc0000 [ 2627.144905][ T30] audit: type=1326 audit(1749293547.635:16660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0327868929 code=0x7ffc0000 [ 2627.168884][ T30] audit: type=1326 audit(1749293547.635:16661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0327868929 code=0x7ffc0000 [ 2627.254635][ T3390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9110'. [ 2627.450408][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2627.513880][ T39] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2627.551579][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2627.567888][ T39] usb 1-1: config 0 descriptor?? [ 2628.078063][ T3404] SELinux: failed to load policy [ 2628.173139][ T3415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9118'. [ 2629.664056][ T39] usbhid 1-1:0.0: can't add hid device: -71 [ 2629.670052][ T39] usbhid: probe of 1-1:0.0 failed with error -71 [ 2629.683163][T19091] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2629.694795][ T3662] syz.5.9129[3662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2629.694880][ T3662] syz.5.9129[3662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2629.700424][ T39] usb 1-1: USB disconnect, device number 60 [ 2629.795732][ T3665] fuse: Invalid rootmode [ 2630.043153][T19091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2630.053034][T19091] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2630.062152][T19091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2630.063027][ T3671] bridge0: port 1(bridge_slave_0) entered blocking state [ 2630.078924][T19091] usb 5-1: config 0 descriptor?? [ 2630.107365][ T3671] bridge0: port 1(bridge_slave_0) entered disabled state [ 2630.117638][ T3671] device bridge_slave_0 entered promiscuous mode [ 2630.140343][ T3671] bridge0: port 2(bridge_slave_1) entered blocking state [ 2630.158827][ T3671] bridge0: port 2(bridge_slave_1) entered disabled state [ 2630.166466][ T3671] device bridge_slave_1 entered promiscuous mode [ 2630.242712][ T3671] bridge0: port 2(bridge_slave_1) entered blocking state [ 2630.249823][ T3671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2630.257158][ T3671] bridge0: port 1(bridge_slave_0) entered blocking state [ 2630.264227][ T3671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2630.327610][ T3684] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 2630.356499][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2630.365891][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 2630.388250][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 2630.409794][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2630.423860][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 2630.430984][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2630.456471][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2630.471409][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 2630.478546][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2630.505784][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2630.522268][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2630.549952][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2630.569095][ T3671] device veth0_vlan entered promiscuous mode [ 2630.575911][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2630.585487][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2630.593667][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2630.612921][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2630.628341][ T3671] device veth1_macvtap entered promiscuous mode [ 2630.646228][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2630.660145][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2630.708744][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9132'. [ 2630.793769][ T3465] device veth1_macvtap left promiscuous mode [ 2630.800291][ T3465] device veth0_vlan left promiscuous mode [ 2630.863149][ T3701] fuse: Invalid rootmode [ 2630.999621][ T541] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2631.368211][ T541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2631.381026][ T3718] SELinux: Context @ is not valid (left unmapped). [ 2631.389816][ T541] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2631.408751][ T541] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2631.427342][ T541] usb 1-1: config 0 descriptor?? [ 2631.853945][ T30] kauditd_printk_skb: 137 callbacks suppressed [ 2631.856675][ T30] audit: type=1400 audit(1749293552.790:16799): avc: denied { unlink } for pid=3693 comm="syz.0.9139" name="#3a2" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2631.943135][ T30] audit: type=1400 audit(1749293552.790:16800): avc: denied { mount } for pid=3693 comm="syz.0.9139" name="/" dev="overlay" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2632.013458][ T30] audit: type=1400 audit(1749293552.790:16801): avc: denied { create } for pid=3693 comm="syz.0.9139" name="#3a6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2632.038859][ T3734] fuse: Invalid rootmode [ 2632.065817][ T30] audit: type=1400 audit(1749293552.790:16802): avc: denied { link } for pid=3693 comm="syz.0.9139" name="#3a6" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2632.169055][ T30] audit: type=1400 audit(1749293552.790:16803): avc: denied { rename } for pid=3693 comm="syz.0.9139" name="#3a7" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2632.205863][ T30] audit: type=1400 audit(1749293552.832:16804): avc: denied { module_request } for pid=3727 comm="syz.1.9151" kmod="tcp-ulp-tls" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2632.240124][ T30] audit: type=1400 audit(1749293552.875:16805): avc: denied { read } for pid=3729 comm="syz.1.9152" dev="nsfs" ino=4026532345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2632.339723][ T30] audit: type=1400 audit(1749293552.875:16806): avc: denied { open } for pid=3729 comm="syz.1.9152" path="net:[4026532345]" dev="nsfs" ino=4026532345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2632.383589][ T30] audit: type=1400 audit(1749293553.286:16807): avc: denied { unmount } for pid=2765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2632.410340][T19091] usbhid 5-1:0.0: can't add hid device: -71 [ 2632.417313][T19091] usbhid: probe of 5-1:0.0 failed with error -71 [ 2632.424832][T19091] usb 5-1: USB disconnect, device number 56 [ 2632.437307][ T30] audit: type=1400 audit(1749293553.286:16808): avc: denied { unmount } for pid=2765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2632.860519][ T3750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9159'. [ 2632.869963][ T3749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9159'. [ 2632.959201][T19091] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 2633.546268][T19091] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2633.641134][T19091] usb 5-1: config 1 has an invalid interface descriptor of length 8, skipping [ 2633.650189][T19091] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2633.661180][T19091] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2633.678883][ T541] usbhid 1-1:0.0: can't add hid device: -71 [ 2633.685217][ T541] usbhid: probe of 1-1:0.0 failed with error -71 [ 2633.728519][ T541] usb 1-1: USB disconnect, device number 61 [ 2634.991940][T19091] usb 5-1: string descriptor 0 read error: -22 [ 2634.999872][T19091] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2635.011546][T19091] usb 5-1: New USB device strings: Mfr=1, Product=1, SerialNumber=0 [ 2635.640281][T19091] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2635.713776][ T39] usb 5-1: USB disconnect, device number 57 [ 2636.028755][T19091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2636.051960][T19091] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2636.096279][T19091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2636.286129][T19091] usb 4-1: config 0 descriptor?? [ 2636.512462][ T3807] syz.1.9175[3807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2636.512575][ T3807] syz.1.9175[3807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2636.526139][ T3807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2636.544762][ T3807] IPv6: NLM_F_CREATE should be set when creating new route [ 2637.755066][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 2637.755084][ T30] audit: type=1326 audit(1749293559.019:16835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3809 comm="syz.5.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0327868929 code=0x7ffc0000 [ 2637.798440][ T30] audit: type=1326 audit(1749293559.019:16836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3809 comm="syz.5.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f0327868929 code=0x7ffc0000 [ 2637.823723][ T30] audit: type=1326 audit(1749293559.019:16837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3809 comm="syz.5.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0327868929 code=0x7ffc0000 [ 2637.856215][ T3816] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2638.022819][ T30] audit: type=1400 audit(1749293559.304:16838): avc: denied { read } for pid=3819 comm="syz.1.9183" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2638.046329][ T30] audit: type=1400 audit(1749293559.304:16839): avc: denied { open } for pid=3819 comm="syz.1.9183" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2638.131673][ T541] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2638.538746][ T541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2638.552817][ T541] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2638.574333][ T541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2638.594878][ T541] usb 6-1: config 0 descriptor?? [ 2638.610443][ T6681] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 2638.619022][ T6681] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 2638.627165][ T6681] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 2638.635459][ T6681] hid-generic 0000:0004:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2638.680780][ T30] audit: type=1400 audit(1749293559.916:16840): avc: denied { read write } for pid=3839 comm="syz.0.9189" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2638.706850][ T3841] fido_id[3841]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2638.727750][ T30] audit: type=1400 audit(1749293559.916:16841): avc: denied { open } for pid=3839 comm="syz.0.9189" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2638.911096][T28395] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 2638.982934][ T30] audit: type=1400 audit(1749293560.317:16842): avc: denied { ioctl } for pid=3852 comm="syz.1.9194" path="socket:[124606]" dev="sockfs" ino=124606 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2639.273876][ T30] audit: type=1400 audit(1749293560.623:16843): avc: denied { create } for pid=3856 comm="syz.1.9196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2639.334826][T28395] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2639.410444][T28395] usb 5-1: config 1 has an invalid interface descriptor of length 8, skipping [ 2639.419750][T28395] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2639.518762][T28395] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2639.552826][T19091] usbhid 4-1:0.0: can't add hid device: -71 [ 2639.560769][T19091] usbhid: probe of 4-1:0.0 failed with error -71 [ 2640.474144][T19091] usb 4-1: USB disconnect, device number 40 [ 2640.890476][ T30] audit: type=1400 audit(1749293562.333:16844): avc: denied { read write } for pid=3867 comm="syz.1.9199" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2640.900179][ T3870] tmpfs: Bad value for 'nr_inodes' [ 2640.919295][ T541] usbhid 6-1:0.0: can't add hid device: -71 [ 2640.958164][ T541] usbhid: probe of 6-1:0.0 failed with error -71 [ 2640.978263][ T3872] syz.3.9197[3872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2640.978842][ T3872] syz.3.9197[3872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2641.145234][ T3873] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 2641.173171][ T541] usb 6-1: USB disconnect, device number 43 [ 2641.495352][ T3888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9206'. [ 2641.600120][T28395] usb 5-1: string descriptor 0 read error: -71 [ 2641.606366][T28395] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2641.615511][T28395] usb 5-1: New USB device strings: Mfr=1, Product=1, SerialNumber=0 [ 2641.884017][ T541] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2642.253637][ T541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2642.263718][ T541] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2642.273299][ T541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2642.285138][ T541] usb 6-1: config 0 descriptor?? [ 2642.301024][ T3866] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 2642.312397][T28395] usb 5-1: can't set config #1, error -71 [ 2642.321023][T28395] usb 5-1: USB disconnect, device number 58 [ 2642.737137][ T3866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2642.812960][ T3866] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 2642.821917][ T3866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2642.832081][ T3866] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2643.059622][ T3866] usb 2-1: string descriptor 0 read error: -22 [ 2643.065941][ T3866] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2643.075054][ T3866] usb 2-1: New USB device strings: Mfr=1, Product=1, SerialNumber=0 [ 2643.346279][ T3866] usb 2-1: USB disconnect, device number 58 [ 2643.649945][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2643.649961][ T30] audit: type=1400 audit(1749293565.244:16851): avc: denied { setopt } for pid=3941 comm="syz.4.9227" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2644.386564][ T541] usbhid 6-1:0.0: can't add hid device: -71 [ 2644.393772][ T541] usbhid: probe of 6-1:0.0 failed with error -71 [ 2644.431851][ T541] usb 6-1: USB disconnect, device number 44 [ 2644.471739][ T30] audit: type=1400 audit(1749293566.099:16852): avc: denied { create } for pid=3965 comm="syz.5.9237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2644.669381][ T30] audit: type=1400 audit(1749293566.289:16853): avc: denied { write } for pid=3976 comm="syz.4.9240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2644.862387][ T3994] syz.4.9244[3994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2644.862496][ T3994] syz.4.9244[3994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2644.876366][ T3994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2644.894977][ T3994] IPv6: NLM_F_CREATE should be set when creating new route [ 2645.513863][T28395] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2645.636647][ T30] audit: type=1400 audit(1749293567.333:16854): avc: denied { setopt } for pid=4003 comm="syz.3.9251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2646.192271][ T4023] tmpfs: Bad value for 'nr_inodes' [ 2646.263414][ T4025] syz.3.9254[4025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2646.263680][ T4025] syz.3.9254[4025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2646.294590][ T4025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2646.313208][ T4025] IPv6: NLM_F_CREATE should be set when creating new route [ 2647.113144][ T30] audit: type=1400 audit(1749293568.894:16855): avc: denied { read } for pid=4024 comm="syz.1.9260" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2647.179657][ T30] audit: type=1400 audit(1749293568.925:16856): avc: denied { open } for pid=4024 comm="syz.1.9260" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2647.215222][ T30] audit: type=1400 audit(1749293568.925:16857): avc: denied { ioctl } for pid=4024 comm="syz.1.9260" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2647.373613][T28395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2647.391524][T28395] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2647.421017][T28395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2647.466115][ T4048] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2647.475784][ T4048] device syzkaller0 entered promiscuous mode [ 2647.505522][T28395] usb 1-1: config 0 descriptor?? [ 2647.534503][T28395] usb 1-1: can't set config #0, error -71 [ 2647.554515][T28395] usb 1-1: USB disconnect, device number 62 [ 2647.626307][ T4059] syz.4.9267[4059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2647.626412][ T4059] syz.4.9267[4059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2647.692692][ T4059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2648.405704][ T4058] device veth1_macvtap left promiscuous mode [ 2648.414235][ T4058] device macsec0 entered promiscuous mode [ 2648.835290][ T4073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9278'. [ 2649.459756][ T30] audit: type=1400 audit(1749293571.319:16858): avc: denied { read } for pid=4094 comm="syz.1.9287" name="usbmon4" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2649.460300][ T30] audit: type=1400 audit(1749293571.319:16859): avc: denied { open } for pid=4094 comm="syz.1.9287" path="/dev/usbmon4" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2649.744102][ T30] audit: type=1326 audit(1749293571.678:16860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.0.9291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2649.744281][ T30] audit: type=1326 audit(1749293571.678:16861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.0.9291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2649.744358][ T30] audit: type=1326 audit(1749293571.678:16862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.0.9291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2649.744480][ T30] audit: type=1326 audit(1749293571.678:16863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.0.9291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2649.744555][ T30] audit: type=1326 audit(1749293571.678:16864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.0.9291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2649.744674][ T30] audit: type=1326 audit(1749293571.678:16865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.0.9291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2649.744846][ T30] audit: type=1326 audit(1749293571.678:16866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.0.9291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2649.754392][ T4106] hub 1-0:1.0: USB hub found [ 2649.768987][ T30] audit: type=1326 audit(1749293571.678:16867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.0.9291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2649.793314][ T4106] hub 1-0:1.0: 1 port detected [ 2650.750142][ T4147] hub 1-0:1.0: USB hub found [ 2650.755015][ T4147] hub 1-0:1.0: 1 port detected [ 2650.895845][ T3118] udevd[3118]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2651.550943][ T4160] syz.3.9308[4160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2651.551452][ T4160] syz.3.9308[4160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2651.598670][ T4160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2651.935909][ T4165] fuse: Unknown parameter '0x0000000000000005' [ 2652.864653][ T4194] hub 1-0:1.0: USB hub found [ 2652.874180][ T4194] hub 1-0:1.0: 1 port detected [ 2652.988956][ T3119] udevd[3119]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2653.702734][ T4210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9327'. [ 2653.725897][ T4209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9327'. [ 2653.780856][ T4214] device veth1_macvtap left promiscuous mode [ 2653.795330][ T4214] device macsec0 entered promiscuous mode [ 2654.510020][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 2654.510037][ T30] audit: type=1400 audit(1749293576.696:17059): avc: denied { read } for pid=4240 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2654.577462][ T30] audit: type=1400 audit(1749293576.696:17060): avc: denied { open } for pid=4240 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2654.619670][ T30] audit: type=1400 audit(1749293576.696:17061): avc: denied { mounton } for pid=4240 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2654.657722][ C0] ------------[ cut here ]------------ [ 2654.663297][ C0] refcount_t: addition on 0; use-after-free. [ 2654.669670][ C0] WARNING: CPU: 0 PID: 4219 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 2654.679212][ C0] Modules linked in: [ 2654.683184][ C0] CPU: 0 PID: 4219 Comm: syz.3.9332 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 2654.693167][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2654.703482][ C0] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 2654.709764][ C0] Code: 04 01 48 c7 c7 60 ef 62 85 e8 08 9d 50 02 0f 0b eb df e8 5f d6 1c ff c6 05 ba f8 99 04 01 48 c7 c7 a0 ee 62 85 e8 ec 9c 50 02 <0f> 0b eb c3 e8 43 d6 1c ff c6 05 9f f8 99 04 01 48 c7 c7 00 ef 62 [ 2654.729534][ C0] RSP: 0000:ffffc90000f0f920 EFLAGS: 00010246 [ 2654.735718][ C0] RAX: 6423d0a070f7d300 RBX: 0000000000000002 RCX: ffff888124db62c0 [ 2654.743771][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 2654.751878][ C0] RBP: ffffc90000f0f930 R08: dffffc0000000000 R09: fffff520001e1e71 [ 2654.760005][ C0] R10: fffff520001e1e71 R11: 1ffff920001e1e70 R12: ffff88811fb20c08 [ 2654.768144][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffc90000f0fae0 [ 2654.776349][ C0] FS: 00005555708fb500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2654.785462][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2654.792201][ C0] CR2: 000000110c2bd47a CR3: 0000000142997000 CR4: 00000000003506b0 [ 2654.800398][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2654.808477][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2654.816718][ C0] Call Trace: [ 2654.820143][ C0] [ 2654.823176][ C0] tipc_crypto_xmit+0x1938/0x2400 [ 2654.828356][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 2654.833698][ C0] ? __copy_skb_header+0x437/0x600 [ 2654.839016][ C0] tipc_bearer_xmit_skb+0x226/0x360 [ 2654.844386][ C0] ? __skb_clone+0x47a/0x790 [ 2654.849094][ C0] ? tipc_bearer_mtu+0x160/0x160 [ 2654.854134][ C0] ? skb_clone+0x202/0x360 [ 2654.858726][ C0] tipc_disc_timeout+0x6a2/0x830 [ 2654.863748][ C0] ? __kasan_check_write+0x14/0x20 [ 2654.869078][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2654.874349][ C0] ? __kasan_check_write+0x14/0x20 [ 2654.879581][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 2654.884794][ C0] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2654.890482][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2654.895810][ C0] call_timer_fn+0x38/0x290 [ 2654.900409][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2654.905726][ C0] __run_timers+0x639/0x9a0 [ 2654.910345][ C0] ? calc_index+0x200/0x200 [ 2654.914992][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 2654.919951][ C0] run_timer_softirq+0x6a/0xf0 [ 2654.924846][ C0] handle_softirqs+0x250/0x560 [ 2654.929852][ C0] __irq_exit_rcu+0x52/0xf0 [ 2654.934428][ C0] irq_exit_rcu+0x9/0x10 [ 2654.938727][ C0] sysvec_apic_timer_interrupt+0x58/0xc0 [ 2654.944432][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2654.950616][ C0] RIP: 0033:0x7f17f0fcea30 [ 2654.955069][ C0] Code: 38 44 89 68 fc 8b 43 28 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 c6 44 24 1e 01 48 89 ee 44 89 e7 4c 89 44 24 10 <4c> 89 54 24 08 e8 66 ef fd ff 4c 8b 54 24 08 4c 8b 44 24 10 84 c0 [ 2654.974830][ C0] RSP: 002b:00007ffcdb377ff0 EFLAGS: 00000246 [ 2654.981050][ C0] RAX: 000000000000ead7 RBX: 00007f17f1e45720 RCX: 000000000005e467 [ 2654.989161][ C0] RDX: ffffffff824bd614 RSI: ffffffff824bdc48 RDI: 0000000000000008 [ 2654.997225][ C0] RBP: ffffffff824bdc48 R08: 00007f17f1316118 R09: 00007f17f1302000 [ 2655.005296][ C0] R10: 00007f17f035d008 R11: 0000000000000008 R12: 0000000000000008 [ 2655.013449][ C0] R13: 0000000000000000 R14: ffffffff824bd614 R15: 000000000005e467 [ 2655.021485][ C0] ? _copy_from_user+0x64/0xd0 [ 2655.026280][ C0] ? __alloc_bucket_spinlocks+0x88/0x150 [ 2655.032003][ C0] ? _copy_from_user+0x64/0xd0 [ 2655.036814][ C0] ? __alloc_bucket_spinlocks+0x88/0x150 [ 2655.042553][ C0] [ 2655.045635][ C0] ---[ end trace fc3ef5254e7e2477 ]--- [ 2655.051220][ C0] ------------[ cut here ]------------ [ 2655.056716][ C0] refcount_t: underflow; use-after-free. [ 2655.062461][ C0] WARNING: CPU: 0 PID: 4219 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 2655.071932][ C0] Modules linked in: [ 2655.075854][ C0] CPU: 0 PID: 4219 Comm: syz.3.9332 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 2655.087185][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2655.087812][ T30] audit: type=1326 audit(1749293577.307:17062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.1.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2655.097288][ C0] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 2655.126945][ C0] Code: 04 01 48 c7 c7 a0 ee 62 85 e8 ec 9c 50 02 0f 0b eb c3 e8 43 d6 1c ff c6 05 9f f8 99 04 01 48 c7 c7 00 ef 62 85 e8 d0 9c 50 02 <0f> 0b eb a7 e8 27 d6 1c ff c6 05 80 f8 99 04 01 48 c7 c7 40 ee 62 [ 2655.146606][ C0] RSP: 0000:ffffc90000f0f920 EFLAGS: 00010246 [ 2655.151170][ T30] audit: type=1326 audit(1749293577.339:17063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.1.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2655.152705][ C0] RAX: 6423d0a070f7d300 RBX: 0000000000000003 RCX: ffff888124db62c0 [ 2655.184168][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 2655.192204][ C0] RBP: ffffc90000f0f930 R08: dffffc0000000000 R09: ffffed103ee065e8 [ 2655.200211][ C0] R10: ffffed103ee065e8 R11: 1ffff1103ee065e7 R12: ffff88811fb20c08 [ 2655.201531][ T30] audit: type=1326 audit(1749293577.339:17064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.1.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2655.208199][ C0] R13: dffffc0000000000 R14: 0000000000000003 R15: 00000000c0000000 [ 2655.208216][ C0] FS: 00005555708fb500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2655.208235][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2655.208250][ C0] CR2: 000000110c2bd47a CR3: 0000000142997000 CR4: 00000000003506b0 [ 2655.263249][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2655.268151][ T30] audit: type=1326 audit(1749293577.339:17065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.1.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2655.271267][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2655.302780][ C0] Call Trace: [ 2655.306100][ C0] [ 2655.309043][ C0] tipc_crypto_xmit+0x1a82/0x2400 [ 2655.314127][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 2655.319349][ C0] ? __copy_skb_header+0x437/0x600 [ 2655.323780][ T30] audit: type=1326 audit(1749293577.339:17066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.1.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2655.324499][ C0] tipc_bearer_xmit_skb+0x226/0x360 [ 2655.353241][ C0] ? __skb_clone+0x47a/0x790 [ 2655.357855][ C0] ? tipc_bearer_mtu+0x160/0x160 [ 2655.362835][ C0] ? skb_clone+0x202/0x360 [ 2655.367266][ C0] tipc_disc_timeout+0x6a2/0x830 [ 2655.372266][ C0] ? __kasan_check_write+0x14/0x20 [ 2655.376936][ T30] audit: type=1326 audit(1749293577.339:17067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.1.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2655.377394][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2655.377426][ C0] ? __kasan_check_write+0x14/0x20 [ 2655.411299][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 2655.416348][ C0] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2655.421947][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2655.427187][ C0] call_timer_fn+0x38/0x290 [ 2655.430124][ T30] audit: type=1326 audit(1749293577.339:17068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.1.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2655.431710][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2655.460402][ C0] __run_timers+0x639/0x9a0 [ 2655.464963][ C0] ? calc_index+0x200/0x200 [ 2655.469505][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 2655.474410][ C0] run_timer_softirq+0x6a/0xf0 [ 2655.479201][ C0] handle_softirqs+0x250/0x560 [ 2655.484023][ C0] __irq_exit_rcu+0x52/0xf0 [ 2655.488537][ C0] irq_exit_rcu+0x9/0x10 [ 2655.492778][ C0] sysvec_apic_timer_interrupt+0x58/0xc0 [ 2655.498442][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2655.504462][ C0] RIP: 0033:0x7f17f0fcea30 [ 2655.508899][ C0] Code: 38 44 89 68 fc 8b 43 28 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 c6 44 24 1e 01 48 89 ee 44 89 e7 4c 89 44 24 10 <4c> 89 54 24 08 e8 66 ef fd ff 4c 8b 54 24 08 4c 8b 44 24 10 84 c0 [ 2655.528728][ C0] RSP: 002b:00007ffcdb377ff0 EFLAGS: 00000246 [ 2655.534837][ C0] RAX: 000000000000ead7 RBX: 00007f17f1e45720 RCX: 000000000005e467 [ 2655.542859][ C0] RDX: ffffffff824bd614 RSI: ffffffff824bdc48 RDI: 0000000000000008 [ 2655.550866][ C0] RBP: ffffffff824bdc48 R08: 00007f17f1316118 R09: 00007f17f1302000 [ 2655.558856][ C0] R10: 00007f17f035d008 R11: 0000000000000008 R12: 0000000000000008 [ 2655.566889][ C0] R13: 0000000000000000 R14: ffffffff824bd614 R15: 000000000005e467 [ 2655.574907][ C0] ? _copy_from_user+0x64/0xd0 [ 2655.579764][ C0] ? __alloc_bucket_spinlocks+0x88/0x150 [ 2655.585433][ C0] ? _copy_from_user+0x64/0xd0 [ 2655.590255][ C0] ? __alloc_bucket_spinlocks+0x88/0x150 [ 2655.595920][ C0] [ 2655.598982][ C0] ---[ end trace fc3ef5254e7e2478 ]--- [ 2655.604788][ C0] ------------[ cut here ]------------ [ 2655.610290][ C0] refcount_t: saturated; leaking memory. [ 2655.616039][ C0] WARNING: CPU: 0 PID: 4219 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 2655.625466][ C0] Modules linked in: [ 2655.629367][ C0] CPU: 0 PID: 4219 Comm: syz.3.9332 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 2655.640692][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2655.650782][ C0] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 2655.657002][ C0] Code: 04 01 48 c7 c7 40 ee 62 85 e8 b4 9c 50 02 0f 0b eb 8b e8 0b d6 1c ff c6 05 65 f8 99 04 01 48 c7 c7 40 ee 62 85 e8 98 9c 50 02 <0f> 0b e9 6c ff ff ff e8 ec d5 1c ff c6 05 4a f8 99 04 01 48 c7 c7 [ 2655.676643][ C0] RSP: 0000:ffffc90000f0f920 EFLAGS: 00010246 [ 2655.682759][ C0] RAX: 6423d0a070f7d300 RBX: 0000000000000001 RCX: ffff888124db62c0 [ 2655.690746][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 2655.698770][ C0] RBP: ffffc90000f0f930 R08: dffffc0000000000 R09: ffffed103ee065e8 [ 2655.706949][ C0] R10: ffffed103ee065e8 R11: 1ffff1103ee065e7 R12: ffff88811fb20c08 [ 2655.714978][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc90000f0fae0 [ 2655.722989][ C0] FS: 00005555708fb500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2655.731972][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2655.738569][ C0] CR2: 000000110c2bd47a CR3: 0000000142997000 CR4: 00000000003506b0 [ 2655.746586][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2655.754588][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2655.762606][ C0] Call Trace: [ 2655.765905][ C0] [ 2655.768971][ C0] tipc_crypto_xmit+0x1938/0x2400 [ 2655.774009][ C0] ? __irq_exit_rcu+0x52/0xf0 [ 2655.778741][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 2655.784075][ C0] ? __copy_skb_header+0x437/0x600 [ 2655.789214][ C0] tipc_bearer_xmit_skb+0x226/0x360 [ 2655.794459][ C0] ? __skb_clone+0x47a/0x790 [ 2655.799120][ C0] ? tipc_bearer_mtu+0x160/0x160 [ 2655.804078][ C0] ? skb_clone+0x202/0x360 [ 2655.808640][ C0] tipc_disc_timeout+0x6a2/0x830 [ 2655.813597][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2655.818843][ C0] ? _find_next_bit+0x106/0x200 [ 2655.823737][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2655.828979][ C0] call_timer_fn+0x38/0x290 [ 2655.833501][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2655.838751][ C0] __run_timers+0x639/0x9a0 [ 2655.843278][ C0] ? calc_index+0x200/0x200 [ 2655.847834][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 2655.852700][ C0] run_timer_softirq+0x6a/0xf0 [ 2655.857521][ C0] handle_softirqs+0x250/0x560 [ 2655.862309][ C0] __irq_exit_rcu+0x52/0xf0 [ 2655.866864][ C0] irq_exit_rcu+0x9/0x10 [ 2655.871122][ C0] sysvec_apic_timer_interrupt+0x58/0xc0 [ 2655.876800][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2655.882822][ C0] RIP: 0033:0x7f17f0fcea30 [ 2655.887342][ C0] Code: 38 44 89 68 fc 8b 43 28 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 c6 44 24 1e 01 48 89 ee 44 89 e7 4c 89 44 24 10 <4c> 89 54 24 08 e8 66 ef fd ff 4c 8b 54 24 08 4c 8b 44 24 10 84 c0 [ 2655.906993][ C0] RSP: 002b:00007ffcdb377ff0 EFLAGS: 00000246 [ 2655.913118][ C0] RAX: 000000000000ead7 RBX: 00007f17f1e45720 RCX: 000000000005e467 [ 2655.921147][ C0] RDX: ffffffff824bd614 RSI: ffffffff824bdc48 RDI: 0000000000000008 [ 2655.929162][ C0] RBP: ffffffff824bdc48 R08: 00007f17f1316118 R09: 00007f17f1302000 [ 2655.937172][ C0] R10: 00007f17f035d008 R11: 0000000000000008 R12: 0000000000000008 [ 2655.945388][ C0] R13: 0000000000000000 R14: ffffffff824bd614 R15: 000000000005e467 [ 2655.953416][ C0] ? _copy_from_user+0x64/0xd0 [ 2655.958218][ C0] ? __alloc_bucket_spinlocks+0x88/0x150 [ 2655.963870][ C0] ? _copy_from_user+0x64/0xd0 [ 2655.968680][ C0] ? __alloc_bucket_spinlocks+0x88/0x150 [ 2655.974338][ C0] [ 2655.977469][ C0] ---[ end trace fc3ef5254e7e2479 ]--- [ 2656.067766][ T4250] syz.0.9339[4250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2656.067969][ T4250] syz.0.9339[4250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2656.110935][ T4250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2656.129500][ T4250] IPv6: NLM_F_CREATE should be set when creating new route [ 2656.143236][ T3465] tipc: Disabling bearer [ 2656.185864][ T3465] tipc: Disabling bearer [ 2656.345675][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 2656.363042][ T3465] tipc: Left network mode [ 2656.385072][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 2656.416558][ T4240] device bridge_slave_0 entered promiscuous mode [ 2656.443231][ T3465] ------------[ cut here ]------------ [ 2656.448782][ T3465] refcount_t: saturated; leaking memory. [ 2656.464543][ T3465] WARNING: CPU: 1 PID: 3465 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 2656.491689][ T3465] Modules linked in: [ 2656.509323][ T3465] CPU: 1 PID: 3465 Comm: kworker/u4:41 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 2656.543388][ T3465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2656.573958][ T3465] Workqueue: netns cleanup_net [ 2656.579330][ T3465] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 2656.587663][ T3465] Code: 04 01 48 c7 c7 00 ef 62 85 e8 d0 9c 50 02 0f 0b eb a7 e8 27 d6 1c ff c6 05 80 f8 99 04 01 48 c7 c7 40 ee 62 85 e8 b4 9c 50 02 <0f> 0b eb 8b e8 0b d6 1c ff c6 05 65 f8 99 04 01 48 c7 c7 40 ee 62 [ 2656.607621][ T3465] RSP: 0018:ffffc900011577c0 EFLAGS: 00010246 [ 2656.613946][ T3465] RAX: c4087bb43e83ea00 RBX: 0000000000000000 RCX: ffff88811944e2c0 [ 2656.622210][ T3465] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 2656.630202][ T3465] RBP: ffffc900011577d0 R08: dffffc0000000000 R09: ffffed103ee265e8 [ 2656.646623][ T3465] R10: ffffed103ee265e8 R11: 1ffff1103ee265e7 R12: 1ffff9200022af04 [ 2656.663002][ T3465] R13: ffff888117f2808c R14: 0000000000000000 R15: 0000000000000cc0 [ 2656.679013][ T3465] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2656.698219][ T3465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2656.704854][ T3465] CR2: 000000110c283737 CR3: 00000001286fc000 CR4: 00000000003506a0 [ 2656.728144][ T3465] DR0: ffffffffffffffff DR1: 0000000000000047 DR2: 0000000000000005 [ 2656.745123][ T3465] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2656.759272][ T3119] udevd[3119]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2656.773717][ T3465] Call Trace: [ 2656.777029][ T3465] [ 2656.787288][ T3465] nf_nat_masq_schedule+0x439/0x4c0 [ 2656.800018][ T3465] ? __kasan_check_write+0x14/0x20 [ 2656.805300][ T3465] ? nf_nat_masq_schedule+0x4c0/0x4c0 [ 2656.810702][ T3465] ? masq_device_event+0xd0/0xd0 [ 2656.816010][ T3465] ? nfqnl_rcv_dev_event+0x441/0x470 [ 2656.823149][ T3465] ? __kasan_check_read+0x11/0x20 [ 2656.828224][ T3465] masq_device_event+0x9b/0xd0 [ 2656.833067][ T3465] raw_notifier_call_chain+0x90/0x100 [ 2656.838543][ T3465] dev_close_many+0x32d/0x4d0 [ 2656.843524][ T3465] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 2656.850336][ T3465] ? __dev_open+0x4c0/0x4c0 [ 2656.854865][ T3465] ? _raw_spin_lock_irq+0x8f/0xe0 [ 2656.860033][ T3465] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2656.865605][ T3465] ? generic_exec_single+0x22d/0x390 [ 2656.871082][ T3465] ? __kasan_check_read+0x11/0x20 [ 2656.876590][ T3465] unregister_netdevice_many+0x44c/0x1990 [ 2656.887518][ T3465] ? alloc_netdev_mqs+0xc90/0xc90 [ 2656.892714][ T3465] ? unregister_netdevice_queue+0x1aa/0x360 [ 2656.900340][ T3465] ? list_netdevice+0x4c0/0x4c0 [ 2656.906190][ T3465] ip6gre_exit_batch_net+0x5a5/0x5f0 [ 2656.912390][ T3465] ? ip6gre_init_net+0x340/0x340 [ 2656.917831][ T3465] ? ip6gre_init_net+0x340/0x340 [ 2656.923143][ T3465] cleanup_net+0x602/0xad0 [ 2656.927727][ T3465] ? ops_init+0x4a0/0x4a0 [ 2656.932255][ T3465] ? __schedule+0xb76/0x14c0 [ 2656.937355][ T3465] process_one_work+0x6be/0xba0 [ 2656.942483][ T3465] worker_thread+0xa59/0x1200 [ 2656.947359][ T3465] kthread+0x411/0x500 [ 2656.951698][ T3465] ? worker_clr_flags+0x190/0x190 [ 2656.957680][ T3465] ? kthread_blkcg+0xd0/0xd0 [ 2656.963747][ T3465] ret_from_fork+0x1f/0x30 [ 2656.972274][ T3465] [ 2656.976320][ T3465] ---[ end trace fc3ef5254e7e247a ]--- [ 2656.982329][ T4269] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9348'. [ 2656.996449][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 2657.005436][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 2657.013149][ T4240] device bridge_slave_1 entered promiscuous mode [ 2657.186401][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2657.194494][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2657.211664][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2657.220872][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2657.229541][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 2657.236634][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2657.245736][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2657.254581][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2657.263147][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 2657.270219][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2657.277722][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2657.289727][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2657.299404][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2657.361619][ T4282] syz.4.9352[4282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2657.362059][ T4282] syz.4.9352[4282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2657.387691][ T4282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2657.476234][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2657.555969][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2657.586812][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2657.654303][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2658.085612][ T4240] device veth0_vlan entered promiscuous mode [ 2658.101794][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2658.110430][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2658.120803][ T4240] device veth1_macvtap entered promiscuous mode [ 2658.137397][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2658.178774][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2658.213691][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2658.271116][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2658.352021][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2658.422236][ T3465] device veth1_macvtap left promiscuous mode [ 2658.428772][ T3465] device veth0_vlan left promiscuous mode [ 2658.522944][ T4301] syz.0.9355[4301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2658.523445][ T4301] syz.0.9355[4301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2659.137038][ T4297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9338'. [ 2659.304991][ T4301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2659.433801][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 2659.433818][ T30] audit: type=1400 audit(1749293581.881:17124): avc: denied { mac_admin } for pid=4295 comm="syz.5.9338" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2659.481167][ T30] audit: type=1400 audit(1749293581.912:17125): avc: denied { relabelto } for pid=4295 comm="syz.5.9338" name="0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2659.525628][ T30] audit: type=1400 audit(1749293581.912:17126): avc: denied { associate } for pid=4295 comm="syz.5.9338" name="0" dev="tmpfs" ino=13 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 2659.666293][ T30] audit: type=1400 audit(1749293581.975:17127): avc: denied { write } for pid=4240 comm="syz-executor" name="0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2659.722585][ T30] audit: type=1400 audit(1749293581.975:17128): avc: denied { remove_name } for pid=4240 comm="syz-executor" name="binderfs" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2659.829822][ T30] audit: type=1400 audit(1749293582.018:17130): avc: denied { write } for pid=4307 comm="syz.0.9359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2659.855837][ T30] audit: type=1400 audit(1749293581.975:17129): avc: denied { rmdir } for pid=4240 comm="syz-executor" name="0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2659.901530][ T30] audit: type=1400 audit(1749293582.302:17131): avc: denied { read } for pid=4324 comm="syz.3.9367" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2659.941295][ T30] audit: type=1400 audit(1749293582.302:17132): avc: denied { open } for pid=4324 comm="syz.3.9367" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2660.027897][ T4332] hub 6-0:1.0: USB hub found [ 2660.038579][ T4332] hub 6-0:1.0: 1 port detected [ 2660.262153][ T4339] syz.1.9369[4339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2660.262651][ T4339] syz.1.9369[4339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2660.286648][ T4339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2661.718014][ T30] audit: type=1400 audit(1749293584.283:17133): avc: denied { write } for pid=4353 comm="syz.4.9376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2662.205570][ T4368] udevd[4368]: failed to send result of seq 46326 to main daemon: Connection refused [ 2662.953016][ T4406] 9pnet: Could not find request transport: rdma [ 2663.526480][ T4430] hub 6-0:1.0: USB hub found [ 2663.542695][ T4430] hub 6-0:1.0: 1 port detected [ 2664.042257][ T4438] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9399'. [ 2664.149952][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9397'. [ 2664.177752][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9401'. [ 2664.859863][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2664.859880][ T30] audit: type=1400 audit(1749293587.590:17166): avc: denied { write } for pid=4471 comm="syz.5.9411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2665.200571][ T4475] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9412'. [ 2665.367871][ T30] audit: type=1400 audit(1749293588.138:17167): avc: denied { name_bind } for pid=4483 comm="syz.5.9416" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2665.452717][ T4486] device veth1_macvtap left promiscuous mode [ 2665.486799][ T4486] device macsec0 entered promiscuous mode [ 2665.512303][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9418'. [ 2665.545014][ T4490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9419'. [ 2665.896977][ T4511] netlink: 136 bytes leftover after parsing attributes in process `syz.5.9429'. [ 2666.272869][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9431'. [ 2666.424616][ T30] audit: type=1400 audit(1749293589.244:17168): avc: denied { read } for pid=4522 comm="syz.5.9432" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2666.486643][ T30] audit: type=1400 audit(1749293589.276:17169): avc: denied { open } for pid=4522 comm="syz.5.9432" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2666.901628][ T3866] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 2667.150192][ T4531] syz.3.9435 uses obsolete (PF_INET,SOCK_PACKET) [ 2667.171344][ T30] audit: type=1400 audit(1749293590.034:17170): avc: denied { create } for pid=4532 comm="syz.4.9436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2667.226236][ T30] audit: type=1326 audit(1749293590.055:17171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.4.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e919fb929 code=0x7ffc0000 [ 2667.259962][ T30] audit: type=1326 audit(1749293590.055:17172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.4.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e919fb929 code=0x7ffc0000 [ 2667.286087][ T30] audit: type=1326 audit(1749293590.055:17173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.4.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e919fb929 code=0x7ffc0000 [ 2667.309855][ T3866] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2667.309949][ T30] audit: type=1326 audit(1749293590.055:17174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.4.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e919fb929 code=0x7ffc0000 [ 2667.344433][ T30] audit: type=1326 audit(1749293590.055:17175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.4.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e919fb929 code=0x7ffc0000 [ 2667.414930][ T3866] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2667.434869][ T3866] usb 6-1: can't read configurations, error -71 [ 2667.519282][ T60] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2667.519336][ T541] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2667.974664][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2667.991789][ T60] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2668.012515][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2668.030522][ T60] usb 4-1: config 0 descriptor?? [ 2668.079147][ T541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2668.094272][ T541] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2668.117110][ T541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2668.139859][ T541] usb 5-1: config 0 descriptor?? [ 2668.952651][ T60] usbhid 4-1:0.0: can't add hid device: -71 [ 2668.958868][ T60] usbhid: probe of 4-1:0.0 failed with error -71 [ 2668.965555][ T541] usbhid 5-1:0.0: can't add hid device: -71 [ 2668.976823][ T541] usbhid: probe of 5-1:0.0 failed with error -71 [ 2669.009374][ T60] usb 4-1: USB disconnect, device number 41 [ 2669.019757][ T541] usb 5-1: USB disconnect, device number 59 [ 2669.664278][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 2669.664294][ T30] audit: type=1400 audit(1749293592.656:17205): avc: denied { unmount } for pid=2765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2669.705577][ T30] audit: type=1400 audit(1749293592.698:17206): avc: denied { read } for pid=4586 comm="syz.3.9458" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2669.745452][ T30] audit: type=1326 audit(1749293592.698:17207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.4.9457" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e919fb929 code=0x0 [ 2669.775936][ T4591] netlink: 182 bytes leftover after parsing attributes in process `syz.3.9460'. [ 2669.796455][ T30] audit: type=1400 audit(1749293592.698:17208): avc: denied { open } for pid=4586 comm="syz.3.9458" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2669.866411][ T30] audit: type=1400 audit(1749293592.698:17209): avc: denied { ioctl } for pid=4586 comm="syz.3.9458" path="/dev/usbmon0" dev="devtmpfs" ino=155 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2670.155365][ T4601] hub 6-0:1.0: USB hub found [ 2670.160764][ T4601] hub 6-0:1.0: 1 port detected [ 2670.547495][ T4603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9462'. [ 2671.402786][ T541] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2671.763709][ T541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2671.781484][ T541] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2671.820979][ T541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2671.839918][ T541] usb 6-1: config 0 descriptor?? [ 2671.879590][ T30] audit: type=1400 audit(1749293594.994:17210): avc: denied { mount } for pid=4632 comm="syz.3.9473" name="/" dev="configfs" ino=13216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2671.947982][ T30] audit: type=1400 audit(1749293595.025:17211): avc: denied { search } for pid=4632 comm="syz.3.9473" name="/" dev="configfs" ino=13216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2671.973625][ T30] audit: type=1400 audit(1749293595.025:17212): avc: denied { read } for pid=4632 comm="syz.3.9473" name="/" dev="configfs" ino=13216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2672.009895][ T30] audit: type=1400 audit(1749293595.025:17213): avc: denied { open } for pid=4632 comm="syz.3.9473" path="/" dev="configfs" ino=13216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2672.042468][ T4642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9477'. [ 2672.044999][ T4640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9476'. [ 2672.066908][ T30] audit: type=1400 audit(1749293595.110:17214): avc: denied { create } for pid=4636 comm="syz.1.9475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2672.088068][ T4642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9477'. [ 2672.818006][ T541] usbhid 6-1:0.0: can't add hid device: -71 [ 2672.825157][ T541] usbhid: probe of 6-1:0.0 failed with error -71 [ 2672.839649][ T541] usb 6-1: USB disconnect, device number 47 [ 2673.941009][ T60] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 2673.962171][ T60] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2674.236668][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9493'. [ 2674.497448][ T4694] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2674.511844][ T4694] SELinux: failed to load policy [ 2674.527779][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2674.527797][ T30] audit: type=1400 audit(1749293597.742:17228): avc: denied { load_policy } for pid=4687 comm="syz.5.9494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2675.075897][ T4707] syz.5.9498[4707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2675.077127][ T4707] syz.5.9498[4707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2675.130778][ T4707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2675.149397][ T4707] IPv6: NLM_F_CREATE should be set when creating new route [ 2676.138311][ T30] audit: type=1326 audit(1749293599.479:17229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2676.191903][ T30] audit: type=1326 audit(1749293599.500:17230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2676.233144][ T30] audit: type=1326 audit(1749293599.500:17231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2676.291155][ T30] audit: type=1326 audit(1749293599.500:17232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2676.333294][ T30] audit: type=1326 audit(1749293599.500:17233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2676.365719][ T30] audit: type=1326 audit(1749293599.500:17234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2676.386070][ T60] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2676.409107][ T30] audit: type=1326 audit(1749293599.500:17235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2676.437276][T32584] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2676.484907][ T30] audit: type=1326 audit(1749293599.500:17236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2676.526679][ T30] audit: type=1326 audit(1749293599.500:17237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.1.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1980294929 code=0x7ffc0000 [ 2676.731735][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2676.789085][ T60] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2676.870710][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2676.951087][ T60] usb 4-1: config 0 descriptor?? [ 2677.909384][ T60] usbhid 4-1:0.0: can't add hid device: -71 [ 2677.942791][ T60] usbhid: probe of 4-1:0.0 failed with error -71 [ 2677.957954][ T4743] 9pnet: Could not find request transport: f [ 2678.034640][ T60] usb 4-1: USB disconnect, device number 42 [ 2678.414809][T32584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2678.424894][T32584] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2678.784889][T32584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2678.798106][T32584] usb 5-1: config 0 descriptor?? [ 2678.882151][ T4768] binfmt_misc: register: failed to install interpreter file ./file2 [ 2679.068410][T32584] usbhid 5-1:0.0: can't add hid device: -71 [ 2679.074840][T32584] usbhid: probe of 5-1:0.0 failed with error -71 [ 2679.089042][T32584] usb 5-1: USB disconnect, device number 60 [ 2679.256716][ T4783] binfmt_misc: register: failed to install interpreter file ./file0 [ 2679.877131][T32584] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2679.883196][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 2679.883216][ T30] audit: type=1400 audit(1749293603.415:17324): avc: denied { unmount } for pid=4240 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2680.186771][ T30] audit: type=1400 audit(1749293603.731:17325): avc: denied { write } for pid=4798 comm="syz.5.9535" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2680.220064][ T4801] syz.3.9536[4801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2680.220157][ T4801] syz.3.9536[4801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2680.269109][ T30] audit: type=1326 audit(1749293603.815:17326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.3.9536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2680.342216][ T30] audit: type=1326 audit(1749293603.815:17327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.3.9536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2680.421381][ T30] audit: type=1326 audit(1749293603.826:17328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.3.9536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2680.475729][T32584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2680.493141][ T30] audit: type=1326 audit(1749293603.826:17329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.3.9536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2680.494287][T32584] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2680.545325][ T30] audit: type=1326 audit(1749293603.826:17330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.3.9536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2680.556882][T32584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2680.577244][ T30] audit: type=1326 audit(1749293603.826:17331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.3.9536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2680.600984][T32584] usb 5-1: config 0 descriptor?? [ 2680.613459][ T30] audit: type=1326 audit(1749293603.826:17332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.3.9536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2680.639638][ T30] audit: type=1326 audit(1749293603.826:17333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.3.9536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2680.816719][ T4822] syz.5.9543[4822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2680.817366][ T4822] syz.5.9543[4822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2680.848922][ T4822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2682.061411][T32584] usbhid 5-1:0.0: can't add hid device: -71 [ 2682.067501][T32584] usbhid: probe of 5-1:0.0 failed with error -71 [ 2682.107235][T32584] usb 5-1: USB disconnect, device number 61 [ 2683.183158][ T4865] syz.1.9556[4865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2683.183710][ T4865] syz.1.9556[4865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2683.273463][ T4865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2683.455599][ T4868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2683.462917][ T4868] IPv6: NLM_F_CREATE should be set when creating new route [ 2683.562839][T16520] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 2684.210682][ T4876] xt_hashlimit: max too large, truncated to 1048576 [ 2684.275964][T16520] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2684.351712][T16520] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping [ 2684.361369][T16520] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2684.374242][T16520] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2684.665137][T16520] usb 4-1: string descriptor 0 read error: -22 [ 2684.673595][T16520] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2684.701123][T16520] usb 4-1: New USB device strings: Mfr=1, Product=1, SerialNumber=0 [ 2685.026939][T16520] usb 4-1: USB disconnect, device number 43 [ 2685.480988][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2685.481005][ T30] audit: type=1400 audit(1749293609.298:17372): avc: denied { read } for pid=4900 comm="syz.5.9573" dev="nsfs" ino=4026532312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2685.511483][ T30] audit: type=1400 audit(1749293609.298:17373): avc: denied { open } for pid=4900 comm="syz.5.9573" path="net:[4026532312]" dev="nsfs" ino=4026532312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2685.698516][ T30] audit: type=1326 audit(1749293609.530:17374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.3.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2685.773070][ T4909] syz.5.9574[4909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2685.773555][ T4909] syz.5.9574[4909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2685.805426][ T4909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2686.065950][ T30] audit: type=1326 audit(1749293609.530:17375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.3.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2686.429758][ T30] audit: type=1326 audit(1749293609.719:17376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.3.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2686.530946][ T30] audit: type=1326 audit(1749293609.761:17377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.3.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2686.663531][ T4924] hub 1-0:1.0: USB hub found [ 2686.668632][ T4924] hub 1-0:1.0: 1 port detected [ 2686.673822][ T30] audit: type=1326 audit(1749293609.824:17378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.3.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2686.739415][ T30] audit: type=1326 audit(1749293609.845:17379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.3.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17f11211e5 code=0x7ffc0000 [ 2686.778272][ T30] audit: type=1326 audit(1749293609.993:17380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.3.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f17f10ee929 code=0x7ffc0000 [ 2686.843732][ T30] audit: type=1326 audit(1749293610.108:17381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.3.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f17f108ab19 code=0x7ffc0000 [ 2687.671297][ T4956] tipc: Started in network mode [ 2687.677633][ T4956] tipc: Node identity ee9a54730dcf, cluster identity 4711 [ 2687.685222][ T4956] tipc: Enabled bearer , priority 0 [ 2687.694327][ T4952] tipc: Resetting bearer [ 2687.717800][ T4952] tipc: Disabling bearer [ 2688.133992][T16520] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 2688.562090][T16520] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2688.676028][T16520] usb 5-1: config 1 has an invalid interface descriptor of length 8, skipping [ 2688.743329][T16520] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2688.847239][T16520] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2689.132146][T16520] usb 5-1: string descriptor 0 read error: -22 [ 2689.138480][T16520] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2689.148053][T16520] usb 5-1: New USB device strings: Mfr=1, Product=1, SerialNumber=0 [ 2689.200833][ T5028] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9626'. [ 2689.326356][ T5032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9628'. [ 2689.390559][T32535] usb 5-1: USB disconnect, device number 62 [ 2689.402238][ T5038] usb usb7: usbfs: process 5038 (syz.1.9631) did not claim interface 0 before use [ 2689.522746][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9638'. [ 2689.584989][ T5056] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9639'. [ 2690.358883][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 2690.358899][ T30] audit: type=1326 audit(1749293614.443:17537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.0.9640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2690.396905][ T30] audit: type=1326 audit(1749293614.485:17538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.0.9640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2690.399327][ T5058] hub 1-0:1.0: USB hub found [ 2690.420607][ T30] audit: type=1326 audit(1749293614.485:17539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.0.9640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a01938290 code=0x7ffc0000 [ 2690.472531][ T30] audit: type=1326 audit(1749293614.485:17540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.0.9640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2690.539347][ T30] audit: type=1326 audit(1749293614.485:17541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.0.9640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2690.590342][ T5058] hub 1-0:1.0: 1 port detected [ 2690.600874][ T30] audit: type=1326 audit(1749293614.485:17542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.0.9640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2690.675161][ T30] audit: type=1326 audit(1749293614.727:17543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.0.9640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2690.729865][ T5087] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9650'. [ 2690.739046][ T30] audit: type=1326 audit(1749293614.727:17544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.0.9640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2690.776543][ T30] audit: type=1400 audit(1749293614.748:17545): avc: denied { ioctl } for pid=5073 comm="syz.1.9645" path="socket:[127916]" dev="sockfs" ino=127916 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2690.821733][ T30] audit: type=1400 audit(1749293614.748:17546): avc: denied { name_bind } for pid=5072 comm="syz.5.9646" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2691.608206][ T5118] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9664'. [ 2691.727572][T32535] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 2691.950995][ T5147] device pim6reg1 entered promiscuous mode [ 2692.038879][ T5149] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9678'. [ 2692.107220][T32535] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2692.211844][T32535] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping [ 2692.517675][T32535] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2692.528748][T32535] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2692.763219][T32535] usb 4-1: string descriptor 0 read error: -22 [ 2692.770560][T32535] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2692.895731][ T5167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2693.089345][T32535] usb 4-1: New USB device strings: Mfr=1, Product=1, SerialNumber=0 [ 2693.346179][ T6] usb 4-1: USB disconnect, device number 44 [ 2695.439119][ T5206] tipc: Started in network mode [ 2695.475210][ T5206] tipc: Node identity 1e6e0b60408a, cluster identity 4711 [ 2695.491808][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 2695.491826][ T30] audit: type=1326 audit(1749293619.819:17613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2695.523665][ T5206] tipc: Enabled bearer , priority 0 [ 2695.548839][ T5205] tipc: Resetting bearer [ 2695.555170][ T30] audit: type=1326 audit(1749293619.819:17614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2695.620646][ T5205] tipc: Disabling bearer [ 2695.628430][ T30] audit: type=1326 audit(1749293619.819:17615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2695.663381][ T30] audit: type=1326 audit(1749293619.819:17616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2695.688164][ T30] audit: type=1326 audit(1749293619.819:17617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2695.712639][ T30] audit: type=1326 audit(1749293619.819:17618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2695.743146][ T30] audit: type=1326 audit(1749293619.819:17619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2695.776918][ T6] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 2695.802628][ T30] audit: type=1326 audit(1749293619.819:17620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2695.845399][ T30] audit: type=1326 audit(1749293619.819:17621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2695.850501][T29830] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2695.877684][ T30] audit: type=1326 audit(1749293619.819:17622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4a01939929 code=0x7ffc0000 [ 2696.128574][T29830] usb 6-1: Using ep0 maxpacket: 8 [ 2696.191835][ T5236] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9710'. [ 2696.201184][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2696.337896][ T6] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 2696.348674][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2696.359283][ T6] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2696.564088][ T5249] SELinux: failed to load policy [ 2696.594689][ T6] usb 2-1: string descriptor 0 read error: -22 [ 2696.601490][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2696.633442][ T6] usb 2-1: New USB device strings: Mfr=1, Product=1, SerialNumber=0 [ 2696.891626][ T6] usb 2-1: USB disconnect, device number 59 [ 2696.946368][T29830] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2697.012900][T29830] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2697.022874][T29830] usb 6-1: can't read configurations, error -71 [ 2697.142420][ T3866] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2697.555049][ T3866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2697.652821][ T3866] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2697.683796][ T3512] ================================================================== [ 2697.691911][ T3512] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 2697.699707][ T3512] Read of size 4 at addr ffff888117f2808c by task kworker/u4:88/3512 [ 2697.707777][ T3512] [ 2697.710130][ T3512] CPU: 1 PID: 3512 Comm: kworker/u4:88 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 2697.721772][ T3512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2697.731868][ T3512] Workqueue: netns cleanup_net [ 2697.737190][ T3512] Call Trace: [ 2697.740479][ T3512] [ 2697.743420][ T3512] __dump_stack+0x21/0x30 [ 2697.747791][ T3512] dump_stack_lvl+0xee/0x150 [ 2697.752389][ T3512] ? show_regs_print_info+0x20/0x20 [ 2697.757598][ T3512] ? load_image+0x3a0/0x3a0 [ 2697.762300][ T3512] ? ____kasan_slab_free+0x130/0x160 [ 2697.767606][ T3512] ? pde_put+0x14e/0x1a0 [ 2697.771897][ T3512] print_address_description+0x7f/0x2c0 [ 2697.777464][ T3512] ? tcp_metrics_flush_all+0xd3/0x210 [ 2697.782863][ T3512] kasan_report+0xf1/0x140 [ 2697.787287][ T3512] ? _raw_spin_lock_bh+0x8e/0xe0 [ 2697.792243][ T3512] ? tcp_metrics_flush_all+0xd3/0x210 [ 2697.797633][ T3512] kasan_check_range+0x280/0x290 [ 2697.802584][ T3512] __kasan_check_read+0x11/0x20 [ 2697.807440][ T3512] tcp_metrics_flush_all+0xd3/0x210 [ 2697.812648][ T3512] ? tcp_net_metrics_init+0x150/0x150 [ 2697.818036][ T3512] tcp_net_metrics_exit_batch+0x10/0x20 [ 2697.823738][ T3512] cleanup_net+0x602/0xad0 [ 2697.828282][ T3512] ? ops_init+0x4a0/0x4a0 [ 2697.832634][ T3512] ? __schedule+0xb76/0x14c0 [ 2697.837243][ T3512] process_one_work+0x6be/0xba0 [ 2697.842119][ T3512] worker_thread+0xa59/0x1200 [ 2697.846821][ T3512] kthread+0x411/0x500 [ 2697.850910][ T3512] ? worker_clr_flags+0x190/0x190 [ 2697.855978][ T3512] ? kthread_blkcg+0xd0/0xd0 [ 2697.860582][ T3512] ret_from_fork+0x1f/0x30 [ 2697.865017][ T3512] [ 2697.868039][ T3512] [ 2697.870369][ T3512] Allocated by task 26654: [ 2697.874786][ T3512] __kasan_slab_alloc+0xbd/0xf0 [ 2697.879653][ T3512] slab_post_alloc_hook+0x4f/0x2b0 [ 2697.884777][ T3512] kmem_cache_alloc+0xf7/0x260 [ 2697.889728][ T3512] copy_net_ns+0x145/0x5c0 [ 2697.894293][ T3512] create_new_namespaces+0x3a2/0x660 [ 2697.899599][ T3512] unshare_nsproxy_namespaces+0x120/0x170 [ 2697.905331][ T3512] ksys_unshare+0x4ac/0x7b0 [ 2697.909921][ T3512] __x64_sys_unshare+0x38/0x40 [ 2697.914700][ T3512] x64_sys_call+0x442/0x9a0 [ 2697.919227][ T3512] do_syscall_64+0x4c/0xa0 [ 2697.923791][ T3512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2697.929722][ T3512] [ 2697.932053][ T3512] The buggy address belongs to the object at ffff888117f28000 [ 2697.932053][ T3512] which belongs to the cache net_namespace of size 3968 [ 2697.946382][ T3512] The buggy address is located 140 bytes inside of [ 2697.946382][ T3512] 3968-byte region [ffff888117f28000, ffff888117f28f80) [ 2697.959842][ T3512] The buggy address belongs to the page: [ 2697.965483][ T3512] page:ffffea00045fca00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888117f28000 pfn:0x117f28 [ 2697.977033][ T3512] head:ffffea00045fca00 order:3 compound_mapcount:0 compound_pincount:0 [ 2697.985359][ T3512] flags: 0x4000000000010200(slab|head|zone=1) [ 2697.991459][ T3512] raw: 4000000000010200 0000000000000000 0000000100000001 ffff8881001c4780 [ 2698.000058][ T3512] raw: ffff888117f28000 0000000080080006 00000001ffffffff 0000000000000000 [ 2698.008747][ T3512] page dumped because: kasan: bad access detected [ 2698.015178][ T3512] page_owner tracks the page as allocated [ 2698.020916][ T3512] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 11184, ts 984259528569, free_ts 983251364414 [ 2698.041698][ T3512] post_alloc_hook+0x192/0x1b0 [ 2698.046542][ T3512] prep_new_page+0x1c/0x110 [ 2698.051073][ T3512] get_page_from_freelist+0x2cc5/0x2d50 [ 2698.056642][ T3512] __alloc_pages+0x18f/0x440 [ 2698.061251][ T3512] new_slab+0xa1/0x4d0 [ 2698.065343][ T3512] ___slab_alloc+0x381/0x810 [ 2698.069956][ T3512] __slab_alloc+0x49/0x90 [ 2698.074314][ T3512] kmem_cache_alloc+0x138/0x260 [ 2698.079190][ T3512] copy_net_ns+0x145/0x5c0 [ 2698.083812][ T3512] create_new_namespaces+0x3a2/0x660 [ 2698.089129][ T3512] unshare_nsproxy_namespaces+0x120/0x170 [ 2698.094901][ T3512] ksys_unshare+0x4ac/0x7b0 [ 2698.099452][ T3512] __x64_sys_unshare+0x38/0x40 [ 2698.104344][ T3512] x64_sys_call+0x442/0x9a0 [ 2698.108871][ T3512] do_syscall_64+0x4c/0xa0 [ 2698.113453][ T3512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2698.119385][ T3512] page last free stack trace: [ 2698.124071][ T3512] free_unref_page_prepare+0x542/0x550 [ 2698.129558][ T3512] free_unref_page+0xa2/0x550 [ 2698.134270][ T3512] __free_pages+0x6c/0x100 [ 2698.139261][ T3512] __free_slab+0xe8/0x1e0 [ 2698.143742][ T3512] __unfreeze_partials+0x160/0x190 [ 2698.148881][ T3512] put_cpu_partial+0xc6/0x120 [ 2698.153587][ T3512] __slab_free+0x1d4/0x290 [ 2698.158055][ T3512] ___cache_free+0x104/0x120 [ 2698.162670][ T3512] qlink_free+0x4d/0x90 [ 2698.166853][ T3512] qlist_free_all+0x5f/0xb0 [ 2698.171390][ T3512] kasan_quarantine_reduce+0x14a/0x170 [ 2698.176974][ T3512] __kasan_slab_alloc+0x2f/0xf0 [ 2698.181927][ T3512] slab_post_alloc_hook+0x4f/0x2b0 [ 2698.187044][ T3512] __kmalloc+0x120/0x2c0 [ 2698.191292][ T3512] ops_init+0x89/0x4a0 [ 2698.195401][ T3512] setup_net+0x344/0xa90 [ 2698.199654][ T3512] [ 2698.201981][ T3512] Memory state around the buggy address: [ 2698.207619][ T3512] ffff888117f27f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2698.215696][ T3512] ffff888117f28000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2698.223770][ T3512] >ffff888117f28080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2698.231837][ T3512] ^ [ 2698.236169][ T3512] ffff888117f28100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2698.244231][ T3512] ffff888117f28180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2698.252290][ T3512] ================================================================== [ 2698.260365][ T3512] Disabling lock debugging due to kernel taint [ 2698.684788][ T3866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2698.694279][ T3866] usb 4-1: config 0 descriptor?? [ 2700.495495][ T30] kauditd_printk_skb: 203 callbacks suppressed [ 2700.495531][ T30] audit: type=1400 audit(1749293625.098:17826): avc: denied { unmount } for pid=3211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2700.521314][ T3866] usbhid 4-1:0.0: can't add hid device: -71 [ 2700.527938][ T3866] usbhid: probe of 4-1:0.0 failed with error -71 [ 2700.529429][ T30] audit: type=1400 audit(1749293625.130:17827): avc: denied { unmount } for pid=3211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2700.535548][ T3866] usb 4-1: USB disconnect, device number 45