last executing test programs: 12.251966771s ago: executing program 0 (id=820): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000340)="cd97625a94c3f3d6f8c969cfe247ced2d4fb28880e25bf60da2591aa371e2a5d4461d3ccc67822c85eb48d24c2e26ce8e612e7c505d7ff71c19a9fa0226f1c7a288959993dd941aa01fcb0c78b35984e7815b1f24f6eea639ddfefb5cd386bde532f4095e8b990f65b35f70d28fa9f2fcf2443ae26ee93f1a0c92df553d8793f937852e2ce6bf9dccd75453f9e86c393511a6c35d856c72b833f67f2b501262652521f283e02eeb7b74f9670f98539e76aad21dc653f652ca6fa44125c5b81162f1e7d87d0fabd11b1e13a6132a8358ade3deb0075c86512b3738c581bbd94e0ab99cd67", &(0x7f0000000440)=""/243}, 0x20) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket(0x0, 0x0, 0x100000001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1180, 0x26) 11.626856173s ago: executing program 0 (id=823): socket(0x29, 0x80000, 0x806) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) (async) socket$inet(0x2, 0x0, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) (async) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) connect$inet6(r5, &(0x7f0000000600)={0xa, 0x4e04, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}, 0x5d27}, 0x1c) (async, rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="600000001000370400000000000000000000000081ad39d5a934594e63642f941d90cad902ea6c087a0b4320b8192b1321b18b9d8222181c612c55599b14d06b9b68b35eebe3bf4a2f58f8f63bdc492396b72d4f37c95a86a052e2255c91ff60d191127e4814528340c3fff5ed62953a15374c50a2fdd227c5cbf44d82854803", @ANYRES32=r8, @ANYBLOB="8b0404000000000040001280080001007369740034000280060008003f00000006001000080000000800140003000000050004000000000008000200ac14140005000500c9000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x88890) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'\x00', 0x0, 0x40, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x27, 0xf3, [@dev={0xac, 0x14, 0x14, 0x24}, @broadcast, @local, @loopback, @multicast2, @broadcast, @rand_addr=0x64010102, @multicast2, @multicast2]}, @end, @end, @rr={0x7, 0xb, 0xa3, [@broadcast, @multicast1]}]}}}}}) (async) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty}}}], 0x20}}], 0x1, 0x0) 11.499745982s ago: executing program 0 (id=824): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f0000001780)=ANY=[@ANYBLOB='iocharset=cp1255,umask=00000000000000000000777,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',dmask=00000000000000000000005,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303032372c6572726f72733d636f6e74696e75652c6572726f72733d72656d6f756e742d726f2c00a36a9f3782f0352ef82c07fa1b6ef8989ed1a01b254c18f4a1aa23"], 0x9, 0x1505, &(0x7f0000000180)="$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") mount(0x0, 0x0, 0x0, 0x200052, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2000040, &(0x7f00000009c0)={[{@dioread_nolock}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@noacl}, {@usrquota}], [{@fowner_eq}, {@measure}, {@subj_type={'subj_type', 0x3d, ')\\\\'}}, {@fowner_eq}, {@context={'context', 0x3d, 'sysadm_u'}}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x11, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@can_delroute={0x17c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0xc, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "8093a0c32af2552e53200ae1002632002c84c88b"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "ba51e7ad079edbdc"}}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "91be0bd38ec1f65e"}, 0x2}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "d23bcbcdcaf9eef3"}, 0x3}}]}, 0x17c}}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 10.671307489s ago: executing program 0 (id=827): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) eventfd2(0x0, 0x0) io_submit(0x0, 0x0, 0x0) 10.616072762s ago: executing program 0 (id=828): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x8, 0x0, @void}}}}}}}, 0x0) 10.615670932s ago: executing program 0 (id=829): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ptrace(0x10, 0x1) gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x0, 0x2}) 1.203462347s ago: executing program 3 (id=1100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) modify_ldt$read_default(0x2, 0x0, 0x17) 1.128104472s ago: executing program 3 (id=1103): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x2, 0x33, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x2, 0x0) 1.127656172s ago: executing program 3 (id=1104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) 1.047472318s ago: executing program 3 (id=1111): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00&\x00\a'], 0x20}}, 0x41) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 520.601054ms ago: executing program 2 (id=1139): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x440, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006f00)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004e40)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r2], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0xda) 506.753625ms ago: executing program 4 (id=1140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0xabea, 0x3fc00, 0x0, 0xf0}) 455.976708ms ago: executing program 2 (id=1141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000000780)="a6e2976b5c", 0x5, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)='\f', 0x1, 0x0, 0x0, 0x0) 393.501113ms ago: executing program 2 (id=1142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rename(0x0, 0x0) 393.188333ms ago: executing program 4 (id=1143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x8000, 0x8, 0x0) 344.037496ms ago: executing program 2 (id=1144): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0067e0dae119e3477dbb94973b176a776cf90d9b837457ef84e30633de9c36b1d643dc009c3f3558ebe3bf", @ANYRES32], 0x48) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9", 0x2, 0x4014, 0x0, 0x0) shutdown(r2, 0x1) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) 325.675478ms ago: executing program 4 (id=1147): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000008f35aa80ab51d1cc000000000000000000301d00"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)='7', 0x2, 0x0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r5, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad904069910b1b5fcf00000000000000000000200000040010000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r6, &(0x7f0000000800)={'syz1\x00', {0x800}, 0x0, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff59ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r6, 0x5501) rename(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000280)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 307.016109ms ago: executing program 2 (id=1148): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x200048d1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x40000000004) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB, @ANYBLOB="0400000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") 220.241895ms ago: executing program 4 (id=1149): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x4400, &(0x7f0000000840)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2a6, &(0x7f0000000440)="$eJzs3T9rW1cUAPDzbFlS20EaOpVCH7RDJ2N77SJTbDDV1KKh7dCa2oZiiYINhv6hqqeuXTr2ExQC2fIlsmTIHsgayBYPhhee9F4kO7JsBcvOn99v8fV999x77vXFxoPO+/Hj3v5OGnvHfzyKej2JhVa04iSJZixE6a84o/VPAABvspMsi6fZ0CxxSUTU55cWADBHM//9vzv3lACAOfvm2+++Wm+3N75O03ps9v4+6uT/2edfh8/X9+Ln6MZurEQjTiOyF4btzSzL+pU014zPev2jTh7Z++F+Mf/6k4hB/Go0ojnoOhu/1d5YTYfG4vt5Hu8X67fy+LVoxIcT1t9qb6xNiI9ONT7/dCz/5WjEg5/il+jGziCJUfyfq2n6Zfbvs9+/z9PL45P+Uac2GDeSLd7wjwYAAAAAAAAAAAAAAAAAAAAAgLfYclE7pxaD+j15V1F/Z/E0/2Yp0lLzbH2eYXxSTnSuPlA/i//K+joraZpmxcBRfCU+qkTldnYNAAAAAAAAAAAAAAAAAAAAr5fDX3/b3+52dw+upVFWAyg/1v+q87TGej6J6YNro7UWiuaUmWOxHJNETE0j38Q1Hctljfcuyvn/O7NOWL98zNK087meRnm79reTyWdYi7KnXl6Se+NjqnHFtaoXPcpmun7ViY8aM++9+sGg0Z8yJpJpiX3xeHhyRU9yfhfVwalODF8qGmPh5+7GTPf55d8ViWodAAAAAAAAAAAAAAAAAAAwV6MP/U54eHxB0MOt4Uv+a3NODgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuyOj9/zM0+kXwFQZX4+DwlrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAO+B5AAAA///S9mga") 202.267106ms ago: executing program 3 (id=1151): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='dns_resolver\x00', 0x0, 0x0, 0x0, r1) 192.196997ms ago: executing program 1 (id=1152): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={0x0, r0}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 191.646217ms ago: executing program 4 (id=1153): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) unshare(0x22020400) pwritev2(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 131.782931ms ago: executing program 3 (id=1154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) writev(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r2}, 0x4) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r8}, 0x10) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x9) setresgid(r14, 0x0, 0x0) statx(r5, &(0x7f00000004c0)='./file0\x00', 0x0, 0x80, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r6, &(0x7f0000004ac0)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000240)="02f9f8a7ac0b8a3b6f907c43cf43faab543a5be7aaa40510aa5cd1a6389f3c0096ca4bc4866c0f65b18877b6ea85f6899fa15a73de09d71e090fb7c83b35eb418d1ad20bc85d47f62a261ae8d746e89e7a54807ee1d4ead0e85300ae343457991463e829d093d2e3f23761034487b8235719616448005df32ba01856f058341c9f5c8d430f6b9b271da89b87025e9cafb127b60e1ae95b3298ea5df9faf8e376922c23005c17d9092d38d350effe2be60015c1f8dd44166593493d784c316fbaa76152d1a9d7806a445dbeffafb33d69765893a8973629552bddc377f823f7205928", 0xe2}, {&(0x7f0000000180)="428c594fc9354ce17965029cbde10774dd6a59006019c63f4b5b7cb67fe25e34f2ba64d210ce1a7f24bc7743ad9f200eb554f6b6a39e5634bc2e44f04af8dceedf9b85516f7b9b297a5166eba4c03d514bb618b6c1901701b6b947d635acf4b28bb7d83920c2d2410a", 0x69}], 0x2, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [r2, r6]}}, @cred={{0x1c, 0x1, 0x2, {r17, r10, r18}}}, @rights={{0x1c, 0x1, 0x1, [r7, r5, r5]}}, @rights={{0x18, 0x1, 0x1, [r8, r2]}}, @rights={{0x20, 0x1, 0x1, [r9, r11, r11, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r15, r18}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r17, r15, r18}}}], 0xf0, 0x20008084}}, {{&(0x7f0000002880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002900)="f7c1e2422bbea7555945b07945aee00608c2153ed5e205e34a0b04e600d88af8181f22a7063f5221a9948e8f068b6e75d331260be63e9632351b3a5781ce0e2674a7e76614e916660f495b10542100d26932c4ef97f70b4d7022b2c7f2f891e7032271e9244a104018d5d18be4785adf84852ef9fcb42f736abfb56b76c4dc9fd2330b220af60e4342c0af", 0x8b}], 0x1, &(0x7f0000002a80), 0x0, 0x20000819}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002ac0)="9e302504fcf4e2983b8e1aad769ad28f9dc8a35042ca973631fc55483dca442cfdbe0398e3007b774d4c24e28ddb5f8d09df5fc6c39c84d6771b66300342", 0x3e}, {&(0x7f0000002b00)="589635710f46e079ebe5791fe130a87d449aba7f735835", 0x17}], 0x2, &(0x7f0000002b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000002bc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000002c40)="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", 0xfa}, {&(0x7f0000002d40)="faee136b0bcbbd6e00deafda2076da46b6c39244f298b3e37198b88953aae9af671d50f592b0a206c9d540ccde5ef0f396ca83b4a7ad3696599c5825ae62c745ac960bb736486270e8b978008e3d8efa16f3f7597f563be28a12f934e84aee51772dc4814ca9d879cfcfaf228252afd233f3fd272d3958e35339a3dc5b9582ed939f2ab687d1e3d8a01dde2562ae94019cb58208df2745b09544152b4d852dcaaae04bb2af26e2b285514fe1a291198e22ced37e72a0a67f", 0xb8}, {&(0x7f0000002e40)="5e0e41e0ef6659776dd899a422890b0cf20bc7f2fa1bf15cfe7d9abc6fc62986a2cd3d53212c0e0300f2c167934ec61b01d2c37abc77a3e92adbcedbda4ed92fa85093956345e0dd63f9755d0f5ac7b602de945c5c7d31a835db912dabb80a750509d727c6fbe5ebfc4ae2d5a215a941499975ccbd2af224559f0f03be5c26fa0fe1611aba17d89cff114ca810dad21a251ba6d9ead7b196eaf4bbebaba1196c7f94a1ae84bf3219f4a222", 0xab}, {&(0x7f0000002f00)="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", 0x1000}, {&(0x7f0000003f00)="8eda58bfbba6ceb3", 0x8}, {&(0x7f0000003f40)="c107cd4be090f9c577aad080793b5bc83437f13a0e77c33c7893ec5215d56b8a6fdaa8ed89d0244742c2cf2017e80bfba92d5a4a9c34128edb2908454ba7c9e4ec40b9c115d20118c3e50c5f532d5f95f5eb710fc8627fbd6eae3e1d9f3eaf655e5a0aa713364dd213377f8b37e0866a7105ab45ae56fd2dfced45625ff891ce5df59489557a23b11ff76b8bc009de1d0189deeab297e8e287f5947a33c1e06a7bee174ced63fea25c", 0xa9}, {&(0x7f0000004000)="fb570908ac15672dd0a473766370f9a221a55af071036ce6880f927815d2993665050082ab3b06f213d9d4e5d8b80cedafc5ee760ea27bcb1bc2d1a7e65d06b68ff62b285301e780cc700e599b28d385191a39b53ee28307ee07a7851d9b5eb3c55c83c78df79c1d5feeaa1f4367424022c34753e18177a0b0b3361591ae0ac621f63bb5a19eeebbdadb162de98bfbf18ef0039308d44e9d879c66b769ebe258c6070b6deaa3138c8f1e499fcb5e31d6cd7ab7dea333616e8c", 0xb9}], 0x7, &(0x7f0000004200)=[@rights={{0x20, 0x1, 0x1, [r0, r11, 0xffffffffffffffff, r11]}}, @cred={{0x1c, 0x1, 0x2, {r4, r13}}}, @rights={{0x18, 0x1, 0x1, [r3, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r18}}}, @rights={{0x24, 0x1, 0x1, [r1, r7, r5, r16, r1]}}, @rights={{0x2c, 0x1, 0x1, [r5, r9, 0xffffffffffffffff, r2, r8, 0xffffffffffffffff, r2]}}], 0xd0, 0x41005}}, {{&(0x7f0000004300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000004380)="5ea51eb4986d0e4673794471fb25594c47f87e356433c4048ac09f614dd99d5659b90c44b7450185d731b3dbf31563b590f55bda5cc15d7018da46e02a97c7b692891d87437acaac7d20693d29a2c0372449697552def7b47b1c7cff1292c95e4520e5b0ff5cf55837633b5b495a4fbf7c20fa40e9e25a73ce12c1e3c29b96c0f790c1693860d80ec698c92e1153f57a38f0c7df9b0a03804e04c3ce589fc2de4449b13f07dd1120e65675f78418f06acdac8c0a9d3e2f176e51b77b80f2231e2194254ff46f25aaf386df1181cdc58c8ceeef949115960615850af47e666053", 0xe0}, {&(0x7f0000004480)="79a0ba7440f2f69fe291815278b766e5d8ba91706169e87d8bf3f2a6a3f27dccd5606825188a29b652ceb41f61c1f01b01934a930ba85fa7fba7ed3b25bbfc931fec433c0d1ba61bda1903aa3e3125376685e49d5ce65ddd062a82b9fd75587d15aea1383166b608726b011856d27dde5bf0cac1778fbca816cf57b29d67908282aeaf76991470dce08aaccc6fb875e5af94a9987ee7cff445fe7023ed847c27e25211830623684dd6d0f3169b63293e59214c6adc2d93aa9458", 0xba}, {&(0x7f0000004540)="57d69662f063e149f9cfb595c58c358effe8a516770849b9856c4c05b9c454886f31c842cae6da9dbb702488e64e3f68efc551307d070150c6448abe3526a3f80c5608d13b4248847ac75110fde94912870a6681b2f85d1f6daef50654af2a74d09a12e077f2a0c24e9833544db19084b1c131ec2e9e59128f93b02307e05de760506276eb8105550281cbfad5dfe6fef710ef481b0faf7d8927c465f5f366a6d23216042b0e311b68f53f657d94ba223b0dbc930fc929d0a6cf493cb176e276fcf13176c9fe1134f0d32da33c28a3fa96e5c5e6b673b30059b3d22ab927032628c4b99cf5962f6fb09babe75b6125b3", 0xf0}, {&(0x7f0000004640)="83a4b0819be06a49786e97aaa82581b082d3ecf8e7fc96d1d436181ae339c04be941e7185c6676cec8288feb7aafe598a4736c60811dc1c8965f0884d0a86a71b1242459a8af7d54e7247d0f37f9b12f8a915515c8e990", 0x57}], 0x4, &(0x7f0000004840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, r18}}}], 0x38}}, {{&(0x7f0000004880)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004900)="a1f6dc4650bfce01c1222f55b1867b08d3f761267d893259ba983465068d5776dbb4143437e74611f026ab3f6a28fdf7b3c778f7e3992fa35042aa96aee1e2400bf5f702d23848de70d5007849de9271f34752b070591faafb9a8512bc0712deca49582d03f05c42fd0d7fea286c322012049943882f5b09319613e780029957c7f374867e34a0e348f934914bf59f59a818012d125a20d076f9633ef611616fc849", 0xa2}], 0x1, &(0x7f0000004a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r10}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r9]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [r2, r8, r7, r7, r9, r0, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13}}}], 0xa0, 0x4000}}], 0x6, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$inet6(0xa, 0x3, 0x3) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 131.446861ms ago: executing program 1 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x99) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000f47f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) 123.218831ms ago: executing program 1 (id=1156): socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) 104.433703ms ago: executing program 1 (id=1157): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) uname(&(0x7f0000000600)=""/88) 12.037349ms ago: executing program 2 (id=1158): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x47a, &(0x7f0000000900)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lstat(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) creat(&(0x7f0000000000)='./bus\x00', 0x0) 11.741179ms ago: executing program 1 (id=1159): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getgid() 5.53354ms ago: executing program 4 (id=1160): syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3d173085e040f04cee8010203010902fe0101000000020904b5000ee84ffc0009050e03100006e109072501010604000725018015070009050500400005ff0509050900000207dee107250180970900090507100002020ca3072501030bf9ff09050010ff036002030905040c08000c0a0607250102050104090506"], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x7f}}}}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 1 (id=1161): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000002c0)="be", 0x1) write$char_usb(r1, &(0x7f0000000140)='D', 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_open_dev$hiddev(0x0, 0x3, 0x120000) read$hiddev(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 132.265971][ T1111] usb 4-1: device descriptor read/64, error -71 [ 132.346682][ T377] appleir 0003:05AC:8243.0013: item fetching failed at offset 0/1 [ 132.354455][ T377] appleir 0003:05AC:8243.0013: parse failed [ 132.360480][ T377] appleir: probe of 0003:05AC:8243.0013 failed with error -22 [ 132.436065][ T1112] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 132.485980][ T417] usb 1-1: Using ep0 maxpacket: 16 [ 132.546942][ T377] usb 2-1: USB disconnect, device number 24 [ 132.606079][ T417] usb 1-1: config 0 has no interfaces? [ 132.686006][ T1111] usb 4-1: device descriptor read/64, error -71 [ 132.696141][ T1112] usb 3-1: Using ep0 maxpacket: 16 [ 132.766070][ T417] usb 1-1: New USB device found, idVendor=0525, idProduct=9ea1, bcdDevice= 0.40 [ 132.775091][ T417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.783205][ T417] usb 1-1: Product: syz [ 132.783215][ T417] usb 1-1: Manufacturer: syz [ 132.783224][ T417] usb 1-1: SerialNumber: syz [ 132.783912][ T417] usb 1-1: config 0 descriptor?? [ 132.806079][ T1111] usb usb4-port1: attempt power cycle [ 132.836530][ T1112] usb 3-1: config 0 has no interfaces? [ 133.016112][ T1112] usb 3-1: New USB device found, idVendor=0525, idProduct=9ea1, bcdDevice= 0.40 [ 133.017139][ T377] usb 1-1: USB disconnect, device number 27 [ 133.025563][ T1112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.038638][ T1112] usb 3-1: Product: syz [ 133.042558][ T1112] usb 3-1: Manufacturer: syz [ 133.047038][ T1112] usb 3-1: SerialNumber: syz [ 133.056412][ T1112] usb 3-1: config 0 descriptor?? [ 133.061718][ T24] audit: type=1326 audit(1726455973.419:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c8f9aef9 code=0x7ffc0000 [ 133.085243][ T24] audit: type=1326 audit(1726455973.419:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c8f9aef9 code=0x7ffc0000 [ 133.108961][ T24] audit: type=1326 audit(1726455973.419:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02c8f9aef9 code=0x7ffc0000 [ 133.132178][ T24] audit: type=1326 audit(1726455973.419:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c8f9aef9 code=0x7ffc0000 [ 133.155296][ T24] audit: type=1326 audit(1726455973.419:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c8f9aef9 code=0x7ffc0000 [ 133.178487][ T24] audit: type=1326 audit(1726455973.419:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02c8f9aef9 code=0x7ffc0000 [ 133.189667][ T2487] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 133.202150][ T24] audit: type=1326 audit(1726455973.449:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c8f9aef9 code=0x7ffc0000 [ 133.207990][ T2487] EXT4-fs (loop1): mount failed [ 133.232130][ T24] audit: type=1326 audit(1726455973.449:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02c8f9aef9 code=0x7ffc0000 [ 133.266110][ T1102] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 133.273546][ T1111] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 133.334943][ T377] usb 3-1: USB disconnect, device number 26 [ 133.466198][ T1111] usb 4-1: device descriptor read/8, error -71 [ 133.526004][ T1102] usb 5-1: Using ep0 maxpacket: 8 [ 133.616080][ T1112] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 133.656086][ T1102] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 133.664430][ T1102] usb 5-1: config 179 has no interface number 0 [ 133.670896][ T1102] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 133.681981][ T1102] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 133.693835][ T2495] fuse: Bad value for 'fd' [ 133.698300][ T1102] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.709626][ T1102] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 133.721177][ T1102] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 133.734497][ T1102] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 133.743643][ T1102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.756084][ T1111] usb 4-1: device descriptor read/8, error -71 [ 133.796536][ T2485] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 133.856008][ T1112] usb 2-1: Using ep0 maxpacket: 16 [ 133.976078][ T1112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.986807][ T1112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.996348][ T1112] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.008955][ T1112] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 134.130689][ T2502] netlink: 'syz.4.533': attribute type 5 has an invalid length. [ 134.189377][ T1111] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 134.196824][ T1112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.205216][ T1112] usb 2-1: config 0 descriptor?? [ 134.366024][ T1111] usb 4-1: device descriptor read/8, error -71 [ 134.636098][ T1111] usb 4-1: device descriptor read/8, error -71 [ 134.748086][ T1112] wacom 0003:056A:0022.0014: ignoring exceeding usage max [ 134.756078][ T1111] usb usb4-port1: unable to enumerate USB device [ 134.762688][ T1112] wacom 0003:056A:0022.0014: unknown main item tag 0x0 [ 134.770096][ T1112] wacom 0003:056A:0022.0014: unknown main item tag 0x0 [ 134.776866][ T1112] wacom 0003:056A:0022.0014: unknown main item tag 0x0 [ 134.784729][ T1112] wacom 0003:056A:0022.0014: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 134.794962][ T1112] wacom 0003:056A:0022.0014: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.1-1/input0 [ 134.806485][ T1112] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0022.0014/input/input11 [ 134.996973][ T417] usb 2-1: USB disconnect, device number 25 [ 135.005994][ T377] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 135.245967][ T377] usb 3-1: Using ep0 maxpacket: 8 [ 135.406157][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.416982][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.426833][ T377] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 135.435688][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.444289][ T377] usb 3-1: config 0 descriptor?? [ 135.524312][ T2518] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 136.059665][ T1112] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 136.070851][ T417] usb 5-1: USB disconnect, device number 25 [ 136.075984][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 136.232446][ T377] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 136.240292][ T377] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 136.248131][ T377] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 136.269032][ T377] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 136.288369][ T377] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 136.297588][ T377] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 136.305333][ T377] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 136.396489][ T377] playstation 0003:054C:0CE6.0015: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0 [ 136.415975][ T1112] usb 1-1: Using ep0 maxpacket: 8 [ 136.436347][ T2531] fuse: Bad value for 'fd' [ 136.468637][ T2533] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 136.546038][ T377] playstation 0003:054C:0CE6.0015: Invalid reportID received, expected 9 got 0 [ 136.554950][ T377] playstation 0003:054C:0CE6.0015: Failed to retrieve DualSense pairing info: -22 [ 136.563986][ T377] playstation 0003:054C:0CE6.0015: Failed to get MAC address from DualSense [ 136.572459][ T377] playstation 0003:054C:0CE6.0015: Failed to create dualsense. [ 136.582990][ T377] playstation: probe of 0003:054C:0CE6.0015 failed with error -22 [ 136.856075][ T1112] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.00 [ 136.865024][ T1112] usb 1-1: New USB device strings: Mfr=16, Product=1, SerialNumber=1 [ 136.872915][ T1112] usb 1-1: Product: syz [ 136.877134][ T1112] usb 1-1: Manufacturer: syz [ 136.881570][ T1112] usb 1-1: SerialNumber: syz [ 136.886831][ T1112] usb 1-1: config 0 descriptor?? [ 136.926544][ T1112] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 136.934350][ T1112] usb 1-1: Detected SIO [ 136.958623][ T1112] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 136.984246][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 136.984258][ T24] audit: type=1326 audit(1726455977.339:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 137.013355][ T24] audit: type=1326 audit(1726455977.339:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 137.036577][ T24] audit: type=1326 audit(1726455977.339:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 137.059730][ T24] audit: type=1326 audit(1726455977.339:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 137.083383][ T24] audit: type=1326 audit(1726455977.339:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 137.108702][ T24] audit: type=1326 audit(1726455977.339:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 137.132157][ T24] audit: type=1326 audit(1726455977.339:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 137.155861][ T24] audit: type=1326 audit(1726455977.339:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 137.179216][ T24] audit: type=1326 audit(1726455977.339:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 137.202519][ T24] audit: type=1326 audit(1726455977.339:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 137.207085][ T2544] device batadv_slave_1 entered promiscuous mode [ 137.317238][ T2541] device batadv_slave_1 left promiscuous mode [ 137.534733][ T2554] fuse: Bad value for 'fd' [ 137.998396][ T377] usb 3-1: USB disconnect, device number 27 [ 138.886038][ T377] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 139.225980][ T1127] usb 1-1: USB disconnect, device number 28 [ 139.234216][ T1127] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 139.242938][ T2577] udc-core: couldn't find an available UDC or it's busy [ 139.250502][ T2577] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 139.253179][ T1127] ftdi_sio 1-1:0.0: device disconnected [ 139.264353][ T2581] fuse: Unknown parameter 'fsuuid' [ 139.269489][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.284115][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.293899][ T377] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 139.306195][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.329212][ T377] usb 3-1: config 0 descriptor?? [ 139.368491][ T2590] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 139.798397][ T290] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 140.066014][ T377] usbhid 3-1:0.0: can't add hid device: -71 [ 140.072048][ T377] usbhid: probe of 3-1:0.0 failed with error -71 [ 140.080393][ T377] usb 3-1: USB disconnect, device number 28 [ 140.268166][ T290] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.308592][ T290] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.402346][ T2606] netlink: 76 bytes leftover after parsing attributes in process `syz.4.561'. [ 140.413168][ T2606] xt_hashlimit: size too large, truncated to 1048576 [ 140.655995][ T290] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.670057][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.683349][ T290] usb 2-1: SerialNumber: syz [ 140.713510][ T2610] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.720432][ T2610] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.727863][ T2610] device bridge_slave_0 entered promiscuous mode [ 140.734818][ T2610] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.741766][ T2610] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.748962][ T2610] device bridge_slave_1 entered promiscuous mode [ 140.781891][ T2610] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.788748][ T2610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.795827][ T2610] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.802645][ T2610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.823091][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.830470][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.837612][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.847203][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.855130][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.861969][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.872230][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.880525][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.887375][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.899733][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.910514][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.918232][ T1102] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 140.931833][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.949997][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.958302][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.965616][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.975160][ T2610] device veth0_vlan entered promiscuous mode [ 140.985317][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.004060][ T2578] FAT-fs (loop1): bogus number of reserved sectors [ 141.012171][ T2578] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 141.021418][ T2578] FAT-fs (loop1): Can't find a valid FAT filesystem [ 141.029253][ T2610] device veth1_macvtap entered promiscuous mode [ 141.039273][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.050466][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.096836][ T290] usb 2-1: 0:2 : does not exist [ 141.104680][ T290] usb 2-1: unit 255 not found! [ 141.158029][ T290] usb 2-1: USB disconnect, device number 26 [ 141.261406][ T2625] fuse: Bad value for 'fd' [ 141.456169][ T1102] usb 3-1: config 0 has an invalid descriptor of length 153, skipping remainder of the config [ 141.466634][ T1102] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 141.477567][ T1102] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 141.490573][ T1102] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 141.499552][ T1102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.510991][ T1102] usb 3-1: config 0 descriptor?? [ 141.535971][ T290] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 141.546328][ T2627] netlink: 32 bytes leftover after parsing attributes in process `syz.4.566'. [ 141.556707][ T111] device bridge_slave_1 left promiscuous mode [ 141.562704][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.570281][ T111] device bridge_slave_0 left promiscuous mode [ 141.576509][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.584428][ T111] device veth1_macvtap left promiscuous mode [ 141.590563][ T111] device veth0_vlan left promiscuous mode [ 141.785955][ T290] usb 2-1: Using ep0 maxpacket: 16 [ 141.826034][ T1102] usb 3-1: string descriptor 0 read error: -71 [ 141.832316][ T1102] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 141.841041][ T1102] usb 3-1: USB disconnect, device number 29 [ 141.926029][ T352] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 141.933496][ T290] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.948151][ T290] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 141.977582][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.989596][ T2632] ------------[ cut here ]------------ [ 141.995001][ T2632] trace type BPF program uses run-time allocation [ 141.995427][ T290] usb 2-1: config 0 descriptor?? [ 142.001783][ T2632] WARNING: CPU: 0 PID: 2632 at kernel/bpf/verifier.c:10493 check_map_prog_compatibility+0x65b/0x7c0 [ 142.017042][ T2632] Modules linked in: [ 142.020776][ T2632] CPU: 0 PID: 2632 Comm: syz.3.568 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 142.030467][ T2632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 142.040559][ T2632] RIP: 0010:check_map_prog_compatibility+0x65b/0x7c0 [ 142.047577][ T24] kauditd_printk_skb: 55 callbacks suppressed [ 142.047587][ T24] audit: type=1326 audit(1726455982.409:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2631 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7293def9 code=0x7ffc0000 [ 142.048767][ T2632] Code: c8 e9 84 fe ff ff e8 34 f4 ee ff 31 db e9 85 fe ff ff e8 28 f4 ee ff c6 05 9e 15 65 05 01 48 c7 c7 40 76 45 85 e8 25 7a c2 ff <0f> 0b e9 42 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 17 fa ff [ 142.055314][ T24] audit: type=1326 audit(1726455982.409:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2631 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fae7293def9 code=0x7ffc0000 [ 142.076818][ T2632] RSP: 0018:ffffc90000e06f90 EFLAGS: 00010246 [ 142.096270][ T24] audit: type=1326 audit(1726455982.459:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2631 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7293def9 code=0x7ffc0000 [ 142.119502][ T2632] [ 142.125577][ T24] audit: type=1326 audit(1726455982.459:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2631 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7293def9 code=0x7ffc0000 [ 142.148510][ T2632] RAX: 8718524e92b3db00 RBX: ffff88810fcdd800 RCX: 0000000000040000 [ 142.180974][ T2632] RDX: ffffc90004349000 RSI: 0000000000000800 RDI: 0000000000000801 [ 142.188887][ T2632] RBP: ffffc90000e06fd0 R08: ffffffff81522098 R09: ffffed103ee0a5f8 [ 142.197007][ T2632] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000011 [ 142.204774][ T2632] R13: 1ffff92000017204 R14: ffff88811fba4000 R15: ffffc900000b9020 [ 142.212737][ T2632] FS: 00007fae715b76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 142.221495][ T2632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.227915][ T2632] CR2: ffffffffde000000 CR3: 0000000121db5000 CR4: 00000000003506a0 [ 142.235699][ T2632] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.243668][ T2632] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 142.251446][ T2632] Call Trace: [ 142.254600][ T2632] ? show_regs+0x58/0x60 [ 142.258749][ T2632] ? __warn+0x160/0x2f0 [ 142.262712][ T2632] ? check_map_prog_compatibility+0x65b/0x7c0 [ 142.268856][ T2632] ? report_bug+0x3d9/0x5b0 [ 142.273178][ T2632] ? check_map_prog_compatibility+0x65b/0x7c0 [ 142.280700][ T2632] ? handle_bug+0x41/0x70 [ 142.284854][ T2632] ? exc_invalid_op+0x1b/0x50 [ 142.289618][ T2632] ? asm_exc_invalid_op+0x12/0x20 [ 142.294451][ T2632] ? wake_up_klogd+0xb8/0xf0 [ 142.299156][ T2632] ? check_map_prog_compatibility+0x65b/0x7c0 [ 142.305049][ T2632] ? __fdget+0x1bc/0x240 [ 142.309360][ T2632] resolve_pseudo_ldimm64+0x586/0x1020 [ 142.314631][ T2632] ? bpf_check+0xf2b0/0xf2b0 [ 142.319436][ T2632] ? kvmalloc_node+0x82/0x130 [ 142.323940][ T2632] bpf_check+0xaf21/0xf2b0 [ 142.328475][ T2632] ? stack_depot_save+0xe/0x10 [ 142.342991][ T2632] ? __se_sys_bpf+0x9856/0x11cb0 [ 142.348165][ T2632] ? sched_clock+0x3a/0x40 [ 142.352393][ T2632] ? 0xffffffffa00186b8 [ 142.357011][ T352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.357256][ T2632] ? bpf_get_btf_vmlinux+0x60/0x60 [ 142.373168][ T2632] ? __kernel_text_address+0x9b/0x110 [ 142.379954][ T352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.381622][ T2632] ? unwind_get_return_address+0x4d/0x90 [ 142.389737][ T352] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 142.395312][ T2632] ? arch_stack_walk+0xf3/0x140 [ 142.404082][ T352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.408669][ T2632] ? stack_trace_save+0x113/0x1c0 [ 142.421404][ T2632] ? stack_trace_snprint+0xf0/0xf0 [ 142.426414][ T2632] ? stack_trace_snprint+0xf0/0xf0 [ 142.431305][ T2632] ? selinux_bpf_prog_alloc+0x51/0x140 [ 142.431683][ T352] usb 5-1: config 0 descriptor?? [ 142.441400][ T2632] ? selinux_bpf_prog_alloc+0x51/0x140 [ 142.448632][ T2632] ? ____kasan_kmalloc+0xed/0x110 [ 142.453534][ T2632] ? ____kasan_kmalloc+0xdb/0x110 [ 142.459355][ T2632] ? __kasan_kmalloc+0x9/0x10 [ 142.463909][ T2632] ? kmem_cache_alloc_trace+0x18a/0x2e0 [ 142.472282][ T2632] ? selinux_bpf_prog_alloc+0x51/0x140 [ 142.478490][ T2632] ? security_bpf_prog_alloc+0x62/0x90 [ 142.490797][ T2632] ? __se_sys_bpf+0x9f8c/0x11cb0 [ 142.500078][ T2632] ? __x64_sys_bpf+0x7b/0x90 [ 142.500606][ T290] usb 2-1: string descriptor 0 read error: -71 [ 142.504528][ T2632] ? do_syscall_64+0x34/0x70 [ 142.517060][ T2632] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 142.523017][ T2632] ? __kasan_kmalloc+0x9/0x10 [ 142.606134][ T2632] __se_sys_bpf+0x107a2/0x11cb0 [ 142.610935][ T2632] ? __kasan_check_write+0x14/0x20 [ 142.616082][ T290] usbhid 2-1:0.0: can't add hid device: -71 [ 142.622143][ T290] usbhid: probe of 2-1:0.0 failed with error -71 [ 142.623291][ T2632] ? __x64_sys_bpf+0x90/0x90 [ 142.635970][ T2632] ? futex_wake+0x630/0x790 [ 142.641844][ T2632] ? copy_from_kernel_nofault+0x2af/0x2e0 [ 142.649977][ T290] usb 2-1: USB disconnect, device number 27 [ 142.656039][ T2632] ? do_futex+0x13c5/0x17b0 [ 142.660446][ T2632] ? update_load_avg+0x541/0x1690 [ 142.665335][ T2632] ? __kasan_check_write+0x14/0x20 [ 142.670366][ T2632] ? __switch_to+0x5f6/0x1240 [ 142.674894][ T2632] ? bpf_ringbuf_output+0x1ac/0x1f0 [ 142.679989][ T2632] ? futex_exit_release+0x1e0/0x1e0 [ 142.684937][ T2632] ? bpf_trace_run3+0x126/0x2c0 [ 142.689693][ T2632] ? compat_start_thread+0x80/0x80 [ 142.694582][ T2632] ? bpf_trace_run2+0x280/0x280 [ 142.699414][ T2632] ? __this_cpu_preempt_check+0x13/0x20 [ 142.704780][ T2632] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 142.711503][ T2632] ? __kasan_check_write+0x14/0x20 [ 142.716508][ T2632] ? finish_task_switch+0x1bb/0x5a0 [ 142.721481][ T2632] ? __se_sys_futex+0x355/0x470 [ 142.726226][ T2632] ? fpu__clear_all+0x20/0x20 [ 142.730677][ T2632] ? __kasan_check_read+0x11/0x20 [ 142.735527][ T2632] __x64_sys_bpf+0x7b/0x90 [ 142.739967][ T2632] do_syscall_64+0x34/0x70 [ 142.744210][ T2632] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 142.749996][ T2632] RIP: 0033:0x7fae7293def9 [ 142.754185][ T2632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.774400][ T2632] RSP: 002b:00007fae715b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.782704][ T2632] RAX: ffffffffffffffda RBX: 00007fae72af5f80 RCX: 00007fae7293def9 [ 142.790497][ T2632] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 142.798290][ T2632] RBP: 00007fae729b0b76 R08: 0000000000000000 R09: 0000000000000000 [ 142.806297][ T2632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.814414][ T2632] R13: 0000000000000000 R14: 00007fae72af5f80 R15: 00007ffcedb40388 [ 142.822267][ T2632] ---[ end trace be506d4cf363e835 ]--- [ 143.019586][ T2649] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.572: casefold flag without casefold feature [ 143.032446][ T2649] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.572: missing EA_INODE flag [ 143.044170][ T2649] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.572: error while reading EA inode 12 err=-117 [ 143.056833][ T2649] EXT4-fs (loop1): 1 orphan inode deleted [ 143.062386][ T2649] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue [ 143.078399][ T24] audit: type=1400 audit(1726455983.439:893): avc: denied { unlink } for pid=2648 comm="syz.1.572" name="#11" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.086548][ T2649] overlayfs: failed to resolve './file0': -2 [ 143.136059][ T417] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 143.369192][ T2673] hub 6-0:1.0: USB hub found [ 143.374191][ T2673] hub 6-0:1.0: 1 port detected [ 143.514852][ T2675] fuse: Bad value for 'fd' [ 143.546435][ T352] usb 5-1: string descriptor 0 read error: -71 [ 143.576735][ T352] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #200: -71 [ 143.585525][ T352] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 143.623457][ T352] uclogic 0003:256C:006D.0016: failed probing pen v2 parameters: -71 [ 143.662044][ T2668] EXT4-fs (loop1): 1 orphan inode deleted [ 143.668429][ T417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.682423][ T2668] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 143.701154][ T2668] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038 (0x7fffffff) [ 143.701389][ T352] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 143.718308][ T417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.727890][ T417] usb 4-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 143.736812][ T352] uclogic: probe of 0003:256C:006D.0016 failed with error -71 [ 143.744024][ T417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.762430][ T352] usb 5-1: USB disconnect, device number 26 [ 143.770402][ T417] usb 4-1: config 0 descriptor?? [ 143.801858][ T2667] mmap: syz.1.577 (2667): VmData 17453056 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 143.917840][ T2679] EXT4-fs (loop1): Test dummy encryption mode enabled [ 143.925219][ T2679] EXT4-fs (loop1): Ignoring removed orlov option [ 143.933812][ T2679] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,barrier=0x0000000000000b24,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000008,data_err=abort,,errors=continue [ 144.252259][ T417] wacom 0003:056A:00E5.0017: unknown main item tag 0x0 [ 144.267910][ T417] wacom 0003:056A:00E5.0017: item fetching failed at offset 5/7 [ 144.400634][ T417] wacom 0003:056A:00E5.0017: parse failed [ 144.416003][ T417] wacom: probe of 0003:056A:00E5.0017 failed with error -22 [ 144.449554][ T417] usb 4-1: USB disconnect, device number 28 [ 144.770014][ T24] audit: type=1326 audit(1726455985.129:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2689 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 144.831624][ T24] audit: type=1326 audit(1726455985.129:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2689 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 144.866026][ T24] audit: type=1326 audit(1726455985.129:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2689 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 144.895949][ T24] audit: type=1326 audit(1726455985.129:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2689 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 144.925944][ T24] audit: type=1326 audit(1726455985.129:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2689 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 145.071018][ T2717] EXT4-fs (loop0): 1 orphan inode deleted [ 145.079991][ T2717] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,quota,resgid=0x0000000000000000,sysvgroups,bsddf,dioread_lock, [ 145.141428][ T2717] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038 (0x7fffffff) [ 145.425979][ T1107] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 145.675968][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 145.762565][ T2747] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2747 comm=syz.4.593 [ 145.931275][ T2749] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 145.976034][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.986858][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.996726][ T1107] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 146.005664][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.017661][ T1107] usb 3-1: config 0 descriptor?? [ 146.398497][ T2763] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 147.198066][ T2778] exfat: Deprecated parameter 'utf8' [ 147.203581][ T2778] exfat: Deprecated parameter 'utf8' [ 147.208933][ T2778] exfat: Deprecated parameter 'utf8' [ 147.252071][ T2778] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 147.316047][ T1112] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 148.046443][ T2797] exfat: Deprecated parameter 'utf8' [ 148.051761][ T2797] exfat: Deprecated parameter 'namecase' [ 148.060196][ T2797] exfat: Deprecated parameter 'namecase' [ 148.065752][ T2797] exfat: Deprecated parameter 'utf8' [ 148.091852][ T2797] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 148.136141][ T1112] usb 4-1: config 0 has no interfaces? [ 148.141501][ T1112] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 148.181186][ T1112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.194316][ T1112] usb 4-1: config 0 descriptor?? [ 148.201559][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 148.201572][ T24] audit: type=1400 audit(1726455988.569:918): avc: denied { append } for pid=2796 comm="syz.0.605" path="/25/file0/cpu.stat" dev="loop0" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.247744][ T24] audit: type=1400 audit(1726455988.599:919): avc: denied { map } for pid=2796 comm="syz.0.605" path="/25/file0/cpu.stat" dev="loop0" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.271300][ T1107] usbhid 3-1:0.0: can't add hid device: -71 [ 148.272477][ T2809] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 148.277403][ T1107] usbhid: probe of 3-1:0.0 failed with error -71 [ 148.299139][ T1107] usb 3-1: USB disconnect, device number 30 [ 148.885558][ T24] audit: type=1400 audit(1726455988.769:920): avc: denied { mount } for pid=2811 comm="syz.2.609" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 148.926208][ T24] audit: type=1400 audit(1726455988.769:921): avc: denied { write } for pid=2811 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.979519][ T2770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 149.057938][ T1112] usb 4-1: USB disconnect, device number 29 [ 149.660003][ T24] audit: type=1400 audit(1726455990.019:922): avc: denied { read } for pid=2840 comm="syz.3.616" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 149.685658][ T24] audit: type=1400 audit(1726455990.019:923): avc: denied { open } for pid=2840 comm="syz.3.616" path="/dev/rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 149.711853][ T24] audit: type=1400 audit(1726455990.019:924): avc: denied { ioctl } for pid=2840 comm="syz.3.616" path="/dev/rtc0" dev="devtmpfs" ino=166 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 149.741922][ T2835] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.748869][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.755969][ T2835] device bridge_slave_0 entered promiscuous mode [ 149.762725][ T2835] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.769765][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.776981][ T2835] device bridge_slave_1 entered promiscuous mode [ 149.809288][ T2835] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.816165][ T2835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.823201][ T2835] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.830031][ T2835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.854500][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.862237][ T883] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.869742][ T883] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.880209][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.888347][ T883] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.895175][ T883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.914060][ T2835] device veth0_vlan entered promiscuous mode [ 149.920887][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.929071][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.936888][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.944121][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.951740][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.959714][ T883] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.966561][ T883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.973699][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.981284][ T417] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 149.981730][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.002618][ T2835] device veth1_macvtap entered promiscuous mode [ 150.009468][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.020565][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.030727][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.236131][ T417] usb 3-1: Using ep0 maxpacket: 16 [ 150.325997][ T25] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 150.366045][ T417] usb 3-1: config 0 has no interfaces? [ 150.496983][ T315] device bridge_slave_1 left promiscuous mode [ 150.506273][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.513744][ T315] device bridge_slave_0 left promiscuous mode [ 150.520453][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.529238][ T315] device veth1_macvtap left promiscuous mode [ 150.535159][ T315] device veth0_vlan left promiscuous mode [ 150.546097][ T417] usb 3-1: New USB device found, idVendor=0525, idProduct=9ea1, bcdDevice= 0.40 [ 150.558102][ T417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.566160][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 150.571167][ T417] usb 3-1: Product: syz [ 150.575089][ T417] usb 3-1: Manufacturer: syz [ 150.579560][ T417] usb 3-1: SerialNumber: syz [ 150.584770][ T24] audit: type=1400 audit(1726455990.939:925): avc: denied { bind } for pid=2865 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.588172][ T417] usb 3-1: config 0 descriptor?? [ 150.716007][ T25] usb 2-1: config 0 has no interfaces? [ 150.778980][ T2870] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 150.853821][ T1111] usb 3-1: USB disconnect, device number 31 [ 150.906917][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=9ea1, bcdDevice= 0.40 [ 150.916455][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.924296][ T25] usb 2-1: Product: syz [ 150.928584][ T25] usb 2-1: Manufacturer: syz [ 150.933026][ T25] usb 2-1: SerialNumber: syz [ 150.942831][ T25] usb 2-1: config 0 descriptor?? [ 151.188914][ T1127] usb 2-1: USB disconnect, device number 28 [ 151.248605][ T2883] udc-core: couldn't find an available UDC or it's busy [ 151.255416][ T2883] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 151.264256][ T2883] binder: 2879:2883 ioctl 4018620d 0 returned -22 [ 151.875955][ T1584] Bluetooth: hci0: command 0x1003 tx timeout [ 151.881807][ T1217] Bluetooth: hci0: sending frame failed (-49) [ 151.958895][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.965792][ T2903] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.973123][ T2903] device bridge_slave_0 entered promiscuous mode [ 151.981436][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.988516][ T2903] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.995626][ T2903] device bridge_slave_1 entered promiscuous mode [ 152.026805][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.033634][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.040764][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.047721][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.067278][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.074609][ T541] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.082060][ T541] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.093089][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.101267][ T541] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.108120][ T541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.118743][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.126629][ T1112] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 152.134216][ T541] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.141058][ T541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.152958][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.164234][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.177706][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.189408][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.197605][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.204834][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.213301][ T315] device bridge_slave_1 left promiscuous mode [ 152.219501][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.227088][ T315] device bridge_slave_0 left promiscuous mode [ 152.233022][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.241347][ T315] device veth1_macvtap left promiscuous mode [ 152.247410][ T315] device veth0_vlan left promiscuous mode [ 152.338890][ T2903] device veth0_vlan entered promiscuous mode [ 152.360916][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.380752][ T2903] device veth1_macvtap entered promiscuous mode [ 152.402094][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.418148][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.433431][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.486174][ T1112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.505984][ T1112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.530793][ T1112] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.548661][ T1112] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.560281][ T1112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.571965][ T1112] usb 2-1: config 0 descriptor?? [ 152.998432][ T24] audit: type=1400 audit(1726455993.359:926): avc: denied { accept } for pid=2927 comm="syz.4.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 153.106004][ T1102] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 153.548297][ T1118] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 153.575978][ T1102] usb 1-1: Using ep0 maxpacket: 16 [ 153.586326][ T1112] usbhid 2-1:0.0: can't add hid device: -71 [ 153.592088][ T1112] usbhid: probe of 2-1:0.0 failed with error -71 [ 153.599366][ T1112] usb 2-1: USB disconnect, device number 29 [ 153.616131][ T1102] usb 1-1: too many configurations: 56, using maximum allowed: 8 [ 153.736058][ T1102] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 153.743460][ T1102] usb 1-1: can't read configurations, error -61 [ 153.795994][ T1118] usb 5-1: Using ep0 maxpacket: 32 [ 153.895994][ T1102] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 153.926149][ T1118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.937151][ T1118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.946914][ T1118] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 153.956333][ T25] Bluetooth: hci0: command 0x1001 tx timeout [ 153.959806][ T1118] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 153.965842][ T1217] Bluetooth: hci0: sending frame failed (-49) [ 153.974473][ T1118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.988942][ T1118] usb 5-1: config 0 descriptor?? [ 154.135955][ T1102] usb 1-1: Using ep0 maxpacket: 16 [ 154.155995][ T1107] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 154.186077][ T1102] usb 1-1: too many configurations: 56, using maximum allowed: 8 [ 154.566834][ T1118] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0 [ 154.573531][ T1118] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0 [ 154.580522][ T1102] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 154.587965][ T1102] usb 1-1: can't read configurations, error -61 [ 154.594134][ T1118] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0 [ 154.601286][ T1102] usb usb1-port1: attempt power cycle [ 154.606630][ T1118] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0 [ 154.613378][ T1118] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0 [ 154.621504][ T1118] ntrig 0003:1B96:000A.0018: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 154.776059][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.788592][ T1118] usb 5-1: USB disconnect, device number 28 [ 154.794699][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.805366][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.818673][ T1107] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.827871][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.836386][ T1107] usb 2-1: config 0 descriptor?? [ 155.036220][ T1102] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 155.276037][ T1102] usb 1-1: Using ep0 maxpacket: 16 [ 155.304418][ T24] audit: type=1400 audit(1726455995.659:927): avc: denied { mount } for pid=2956 comm="syz.4.643" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 155.306775][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.336255][ T1102] usb 1-1: too many configurations: 56, using maximum allowed: 8 [ 155.344564][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.352004][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.352065][ T24] audit: type=1400 audit(1726455995.709:928): avc: denied { remount } for pid=2956 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 155.359279][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.359294][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.380397][ T24] audit: type=1400 audit(1726455995.749:929): avc: denied { unmount } for pid=754 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 155.386187][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.420582][ T2961] udc-core: couldn't find an available UDC or it's busy [ 155.427490][ T2961] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 155.434971][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.442364][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.449606][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.456865][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.463963][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.471189][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.479564][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.486790][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.494073][ T1107] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 155.501423][ T1102] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 155.508927][ T1107] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 155.516485][ T1102] usb 1-1: can't read configurations, error -61 [ 155.528401][ T1107] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 155.574836][ T2966] syz.0.646[2966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.574888][ T2966] syz.0.646[2966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.647362][ T2969] netlink: 60 bytes leftover after parsing attributes in process `syz.0.646'. [ 155.676052][ T2969] netlink: 60 bytes leftover after parsing attributes in process `syz.0.646'. [ 155.685696][ T1107] usb 2-1: USB disconnect, device number 30 [ 155.794356][ T2971] fuse: Bad value for 'fd' [ 155.873602][ T2973] syz.2.647[2973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.873674][ T2973] syz.2.647[2973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.035948][ T25] Bluetooth: hci0: command 0x1009 tx timeout [ 156.196124][ T1102] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 156.335815][ T2981] syz.2.648[2981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.336153][ T2981] syz.2.648[2981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.360594][ T2981] binder: 2975:2981 ioctl c0306201 20000300 returned -22 [ 156.526095][ T290] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 156.789351][ T1102] usb 1-1: Using ep0 maxpacket: 16 [ 156.892984][ T24] audit: type=1400 audit(1726455997.249:930): avc: denied { listen } for pid=2984 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.914329][ T290] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 156.922997][ T290] usb 2-1: config 179 has no interface number 0 [ 156.929153][ T290] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 156.936027][ T1102] usb 1-1: config 0 has no interfaces? [ 156.940090][ T290] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 156.956545][ T290] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 156.969646][ T290] usb 2-1: config 179 interface 65 has no altsetting 0 [ 156.976333][ T290] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 156.985147][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.006125][ T2979] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 157.013413][ T2979] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 157.041914][ T290] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input15 [ 157.136097][ T1102] usb 1-1: New USB device found, idVendor=0525, idProduct=9ea1, bcdDevice= 0.40 [ 157.145029][ T1102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.370788][ T1584] usb 2-1: USB disconnect, device number 31 [ 157.376567][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 157.447017][ T1102] usb 1-1: Product: syz [ 157.450978][ T1584] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 157.646998][ T1102] usb 1-1: Manufacturer: syz [ 157.956365][ T1102] usb 1-1: SerialNumber: syz [ 157.962322][ T1102] usb 1-1: config 0 descriptor?? [ 158.071328][ T24] audit: type=1400 audit(1726455998.429:931): avc: denied { bind } for pid=2995 comm="syz.1.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.090481][ T2997] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 158.131363][ T24] audit: type=1400 audit(1726455998.489:932): avc: denied { ioctl } for pid=2995 comm="syz.1.653" path="socket:[27903]" dev="sockfs" ino=27903 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.232659][ T1102] usb 1-1: USB disconnect, device number 32 [ 158.372525][ T3004] fuse: Bad value for 'fd' [ 158.471811][ T2997] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.481765][ T2997] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.494836][ T2997] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 158.503868][ T2997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.512614][ T2997] usb 5-1: config 0 descriptor?? [ 158.678305][ T2997] hub 5-1:0.0: bad descriptor, ignoring hub [ 158.685570][ T2997] hub: probe of 5-1:0.0 failed with error -5 [ 159.105965][ T2997] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 159.345949][ T2997] usb 3-1: Using ep0 maxpacket: 32 [ 159.392116][ T3033] syz.1.662[3033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.392386][ T3033] syz.1.662[3033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.416337][ T3033] binder: 3029:3033 ioctl c0306201 20000300 returned -22 [ 159.486266][ T2997] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.494520][ T2997] usb 3-1: config 0 has no interface number 0 [ 159.500484][ T2997] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.512424][ T2997] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.522019][ T2997] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 159.530826][ T2997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.539418][ T2997] usb 3-1: config 0 descriptor?? [ 160.019874][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.027114][ T3035] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.034349][ T3035] device bridge_slave_0 entered promiscuous mode [ 160.041514][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.048441][ T3035] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.055496][ T3035] device bridge_slave_1 entered promiscuous mode [ 160.093116][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.099980][ T3035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.107084][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.113844][ T3035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.146433][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.154042][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.163126][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.180819][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.192795][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.204708][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.215265][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.223159][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.230622][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.237061][ T2997] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.001A/input/input16 [ 160.239619][ T3035] device veth0_vlan entered promiscuous mode [ 160.267227][ T2997] uclogic 0003:28BD:0094.001A: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 160.284611][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.297243][ T3035] device veth1_macvtap entered promiscuous mode [ 160.309811][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.324162][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.353992][ T3045] netlink: 88 bytes leftover after parsing attributes in process `syz.3.663'. [ 160.375977][ T3045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 160.498039][ T1112] usb 3-1: USB disconnect, device number 32 [ 160.649926][ T315] device bridge_slave_1 left promiscuous mode [ 160.665010][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.700339][ T315] device bridge_slave_0 left promiscuous mode [ 160.721758][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.731136][ T315] device veth1_macvtap left promiscuous mode [ 160.737034][ T315] device veth0_vlan left promiscuous mode [ 160.936050][ T1584] usb 5-1: USB disconnect, device number 29 [ 161.456234][ T3066] fuse: Bad value for 'fd' [ 161.669857][ T1118] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 162.103496][ T3073] syz.4.673[3073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.103553][ T3073] syz.4.673[3073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.116568][ T3073] binder: 3071:3073 ioctl c0306201 20000300 returned -22 [ 162.426054][ T1118] usb 2-1: Using ep0 maxpacket: 8 [ 162.566177][ T1118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.595955][ T1584] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 162.611907][ T1118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.621594][ T1118] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 162.630489][ T1118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.638884][ T1118] usb 2-1: config 0 descriptor?? [ 162.708576][ T3088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 162.881415][ T24] audit: type=1400 audit(1726456003.239:933): avc: denied { map } for pid=3084 comm="syz.2.676" path="/dev/ashmem" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.905100][ T3091] fuse: Unknown parameter 'È$u™ŸXà‚pê9O—°à7ÃœArñdYj®' [ 162.985963][ T1112] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 163.176205][ T1584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 163.237969][ T1584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 163.356145][ T1112] usb 5-1: Using ep0 maxpacket: 16 [ 163.446040][ T1584] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 163.454935][ T1584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.462761][ T1584] usb 4-1: Product: syz [ 163.467179][ T1584] usb 4-1: Manufacturer: syz [ 163.472074][ T1584] usb 4-1: SerialNumber: syz [ 163.629997][ T1584] usb 4-1: config 0 descriptor?? [ 163.666238][ T3079] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 163.694282][ T1112] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 163.702155][ T1112] usb 5-1: config 0 has no interface number 0 [ 163.708093][ T1112] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 163.717517][ T1112] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 163.866049][ T1112] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 163.877216][ T1112] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 163.891290][ T1112] usb 5-1: Product: syz [ 163.897370][ T1112] usb 5-1: SerialNumber: syz [ 163.898074][ T3079] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 163.909232][ T1112] usb 5-1: config 0 descriptor?? [ 164.141561][ T3079] udc-core: couldn't find an available UDC or it's busy [ 164.150544][ T3079] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 164.159179][ T3079] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 164.177082][ T1127] usb 4-1: USB disconnect, device number 30 [ 164.486405][ T1118] usbhid 2-1:0.0: can't add hid device: -71 [ 164.494604][ T1118] usbhid: probe of 2-1:0.0 failed with error -71 [ 164.502037][ T1118] usb 2-1: USB disconnect, device number 32 [ 164.958950][ T3126] fuse: Bad value for 'fd' [ 165.392761][ T3129] overlayfs: bad mount option "redirect_dir=off:/" [ 166.027192][ T1112] snd-usb-audio: probe of 5-1:0.2 failed with error -12 [ 166.115360][ T24] audit: type=1400 audit(1726456006.419:934): avc: denied { listen } for pid=3147 comm="syz.4.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.116907][ T1112] usb 5-1: USB disconnect, device number 30 [ 166.214522][ T24] audit: type=1400 audit(1726456006.419:935): avc: denied { accept } for pid=3147 comm="syz.4.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.296003][ T290] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 166.529053][ T24] audit: type=1400 audit(1726456006.889:936): avc: denied { create } for pid=3155 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 166.548372][ T290] usb 3-1: Using ep0 maxpacket: 16 [ 166.655966][ T1584] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 166.666107][ T290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.677322][ T290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.687306][ T290] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 166.696566][ T290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.705314][ T290] usb 3-1: config 0 descriptor?? [ 166.712943][ T3162] hub 6-0:1.0: USB hub found [ 166.720550][ T3162] hub 6-0:1.0: 1 port detected [ 166.888315][ T3164] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=257231385 (16462808640 ns) > initial count (3499436608 ns). Using initial count to start timer. [ 166.906122][ T1584] usb 2-1: Using ep0 maxpacket: 32 [ 167.046313][ T1584] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.186749][ T290] hid-rmi 0003:17EF:6085.001B: item 0 1 0 9 parsing failed [ 167.194005][ T290] hid-rmi 0003:17EF:6085.001B: parse failed [ 167.200013][ T290] hid-rmi: probe of 0003:17EF:6085.001B failed with error -22 [ 167.216008][ T1584] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.224929][ T1584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.232757][ T1584] usb 2-1: Product: syz [ 167.236723][ T1584] usb 2-1: Manufacturer: syz [ 167.241099][ T1584] usb 2-1: SerialNumber: syz [ 167.286354][ T1584] cdc_ether 2-1:1.0: skipping garbage [ 167.294308][ T1584] usb 2-1: bad CDC descriptors [ 167.386413][ T1102] usb 3-1: USB disconnect, device number 33 [ 167.488355][ T24] audit: type=1326 audit(1726456007.849:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3153 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7338826ef9 code=0x7ffc0000 [ 167.526074][ T1118] usb 2-1: USB disconnect, device number 33 [ 167.533330][ T24] audit: type=1326 audit(1726456007.849:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3153 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7338826ef9 code=0x7ffc0000 [ 167.558014][ T24] audit: type=1326 audit(1726456007.869:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3153 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7338826ef9 code=0x7ffc0000 [ 167.581661][ T24] audit: type=1326 audit(1726456007.869:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3153 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7338826ef9 code=0x7ffc0000 [ 167.604937][ T24] audit: type=1326 audit(1726456007.869:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3153 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7338826ef9 code=0x7ffc0000 [ 167.628598][ T24] audit: type=1326 audit(1726456007.869:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3153 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7338826ef9 code=0x7ffc0000 [ 167.826016][ T1584] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 167.916113][ T3182] fuse: Bad value for 'fd' [ 168.065985][ T1584] usb 1-1: Using ep0 maxpacket: 16 [ 168.220763][ T3193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 168.234001][ T1584] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.244001][ T1584] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 168.646425][ T1584] usb 1-1: New USB device found, idVendor=118c, idProduct=0893, bcdDevice=f4.95 [ 168.701631][ T1584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.779860][ T1584] usb 1-1: Product: syz [ 168.784096][ T1584] usb 1-1: Manufacturer: syz [ 168.789074][ T1584] usb 1-1: SerialNumber: syz [ 168.797892][ T1584] usb 1-1: config 0 descriptor?? [ 169.113648][ T3214] SELinux: Context Ü is not valid (left unmapped). [ 169.159521][ T1584] usb 1-1: USB disconnect, device number 33 [ 169.534249][ T24] kauditd_printk_skb: 110 callbacks suppressed [ 169.534262][ T24] audit: type=1326 audit(1726456009.889:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 169.635019][ T24] audit: type=1326 audit(1726456009.909:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 169.671568][ T24] audit: type=1326 audit(1726456009.909:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 169.699904][ T24] audit: type=1326 audit(1726456009.909:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 170.025824][ T24] audit: type=1326 audit(1726456009.909:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 170.055149][ T24] audit: type=1326 audit(1726456009.909:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 170.091599][ T24] audit: type=1326 audit(1726456009.909:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 170.128727][ T3238] fuse: Bad value for 'fd' [ 170.132254][ T24] audit: type=1326 audit(1726456009.909:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 170.175526][ T24] audit: type=1326 audit(1726456009.909:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 170.213406][ T24] audit: type=1326 audit(1726456009.909:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d27901ef9 code=0x7ffc0000 [ 170.305989][ T1118] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 171.036099][ T1118] usb 3-1: Using ep0 maxpacket: 16 [ 171.147890][ T3273] futex_wake_op: syz.4.724 tries to shift op by -1; fix this program [ 171.176540][ T1118] usb 3-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 171.192252][ T1118] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 171.263822][ T3281] syz.3.722[3281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.264159][ T3281] syz.3.722[3281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.716070][ T1118] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 171.736047][ T1118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.743854][ T1118] usb 3-1: Product: syz [ 171.747864][ T1118] usb 3-1: Manufacturer: syz [ 171.752268][ T1118] usb 3-1: SerialNumber: syz [ 171.906007][ T1112] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 172.026028][ T1118] r8152 3-1:1.0: Unknown version 0x0070 [ 172.366129][ T1112] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.376983][ T1112] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.386777][ T1112] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 172.395696][ T1112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.407055][ T1112] usb 1-1: config 0 descriptor?? [ 172.425987][ T1118] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 172.646249][ T3305] hub 6-0:1.0: USB hub found [ 172.651468][ T3305] hub 6-0:1.0: 1 port detected [ 173.036064][ T1118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.049859][ T1118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.065607][ T1118] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 173.080643][ T1118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.095246][ T1118] usb 4-1: config 0 descriptor?? [ 173.294799][ T359] usb 3-1: USB disconnect, device number 34 [ 173.333452][ T3314] syz.4.735[3314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.333507][ T3314] syz.4.735[3314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.746417][ T1118] hid (null): bogus close delimiter [ 173.986046][ T1118] usb 4-1: language id specifier not provided by device, defaulting to English [ 174.547119][ T1118] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001C/input/input17 [ 174.568532][ T1118] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001C/input/input18 [ 174.747949][ T3338] netlink: 288 bytes leftover after parsing attributes in process `syz.1.742'. [ 174.788695][ T1127] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 174.810211][ T24] kauditd_printk_skb: 135 callbacks suppressed [ 174.810223][ T24] audit: type=1400 audit(1726456015.169:1198): avc: denied { ioctl } for pid=79 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=826 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.849390][ T1118] uclogic 0003:256C:006D.001C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 174.863350][ T24] audit: type=1400 audit(1726456015.169:1199): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 174.909552][ T24] audit: type=1400 audit(1726456015.169:1200): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.931315][ T24] audit: type=1400 audit(1726456015.169:1201): avc: denied { append } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.965995][ T24] audit: type=1400 audit(1726456015.169:1202): avc: denied { open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.988542][ T24] audit: type=1400 audit(1726456015.169:1203): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.011176][ T24] audit: type=1400 audit(1726456015.169:1204): avc: denied { read } for pid=79 comm="acpid" name="event4" dev="devtmpfs" ino=826 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.034082][ T24] audit: type=1400 audit(1726456015.169:1205): avc: denied { open } for pid=79 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=826 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.058437][ T24] audit: type=1400 audit(1726456015.239:1206): avc: denied { ioctl } for pid=3333 comm="syz.2.741" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.083265][ T24] audit: type=1400 audit(1726456015.259:1207): avc: denied { read write } for pid=754 comm="syz-executor" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.211210][ T290] usb 4-1: USB disconnect, device number 31 [ 175.226155][ T1127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.237492][ T1127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.248753][ T1127] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 175.257855][ T1127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.266994][ T1127] usb 3-1: config 0 descriptor?? [ 175.317513][ T1107] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 175.796060][ T1112] usbhid 1-1:0.0: can't add hid device: -71 [ 175.801863][ T1112] usbhid: probe of 1-1:0.0 failed with error -71 [ 175.810354][ T1112] usb 1-1: USB disconnect, device number 34 [ 175.891017][ T3334] binder: 3333:3334 ioctl c0306201 20000080 returned -14 [ 175.917220][ T1127] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 175.924384][ T1127] hid-steam 0003:28DE:1142.001D: item fetching failed at offset 2/5 [ 175.932493][ T1127] hid-steam 0003:28DE:1142.001D: steam_probe:parse of hid interface failed [ 175.941028][ T1127] hid-steam: probe of 0003:28DE:1142.001D failed with error -22 [ 175.956172][ T1107] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 175.963693][ T1107] usb 5-1: can't read configurations, error -61 [ 176.117409][ T1127] usb 3-1: USB disconnect, device number 35 [ 176.125974][ T1107] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 176.176029][ T1112] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 176.269455][ T3373] syz.3.750[3373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.269494][ T3373] syz.3.750[3373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.495996][ T1584] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 176.576086][ T1112] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 176.616069][ T1107] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 176.623467][ T1107] usb 5-1: can't read configurations, error -61 [ 176.630021][ T1107] usb usb5-port1: attempt power cycle [ 176.716061][ T1127] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 176.866184][ T1584] usb 2-1: config 1 interface 0 altsetting 75 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 176.877675][ T1584] usb 2-1: config 1 interface 0 altsetting 75 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 176.890084][ T1584] usb 2-1: config 1 interface 0 has no altsetting 0 [ 176.892625][ T1112] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 176.907766][ T1112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.915639][ T1112] usb 1-1: Product: syz [ 176.919599][ T1112] usb 1-1: Manufacturer: syz [ 176.923983][ T1112] usb 1-1: SerialNumber: syz [ 176.929191][ T1112] usb 1-1: config 0 descriptor?? [ 177.056036][ T1584] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 177.064938][ T1584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.072738][ T1584] usb 2-1: Product: syz [ 177.076711][ T1584] usb 2-1: Manufacturer: syz [ 177.081094][ T1584] usb 2-1: SerialNumber: syz [ 177.106039][ T3366] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.112874][ T3366] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.206060][ T1107] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 177.246180][ T1127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.257029][ T1127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.266616][ T1127] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 177.282644][ T1127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.297874][ T1127] usb 4-1: config 0 descriptor?? [ 177.396144][ T1112] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 177.404072][ T1112] usb 1-1: USB disconnect, device number 35 [ 177.609244][ T1584] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 75 proto 2 vid 0x0525 pid 0xA4A8 [ 177.659828][ T1584] usb 2-1: USB disconnect, device number 34 [ 177.723494][ T1584] usblp0: removed [ 177.756049][ T1107] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 177.763891][ T1107] usb 5-1: can't read configurations, error -61 [ 177.889670][ T3394] syz.2.755[3394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.889890][ T3394] syz.2.755[3394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.930931][ T3394] binder: 3391:3394 ioctl 4018620d 0 returned -22 [ 177.999638][ T1107] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 178.328277][ T1107] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 178.335744][ T1107] usb 5-1: can't read configurations, error -61 [ 178.342254][ T1107] usb usb5-port1: unable to enumerate USB device [ 178.355986][ T1102] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 178.815977][ T1102] usb 2-1: Using ep0 maxpacket: 32 [ 178.936013][ T1102] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 178.944617][ T1102] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 178.955490][ T1102] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.955942][ T1584] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 178.965066][ T1102] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.136229][ T1102] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.145268][ T1102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.158596][ T1102] usb 2-1: Product: syz [ 179.162889][ T1102] usb 2-1: Manufacturer: syz [ 179.167660][ T1102] usb 2-1: SerialNumber: syz [ 179.225964][ T1584] usb 3-1: Using ep0 maxpacket: 32 [ 179.376043][ T1584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.386831][ T1584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.396412][ T1584] usb 3-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 179.405332][ T1584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.414704][ T1584] usb 3-1: config 0 descriptor?? [ 179.435969][ T1107] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 179.526034][ T1127] usbhid 4-1:0.0: can't add hid device: -71 [ 179.531851][ T1127] usbhid: probe of 4-1:0.0 failed with error -71 [ 179.540131][ T1127] usb 4-1: USB disconnect, device number 32 [ 179.546044][ T1102] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 179.554277][ T1102] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 179.565483][ T1102] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 179.573811][ T1102] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 179.615997][ T1102] usb 2-1: 2:130: cannot set enable PITCH [ 179.639048][ T1102] usb 2-1: USB disconnect, device number 35 [ 179.649032][ T847] udevd[847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.675980][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 179.796839][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 179.807639][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 179.817247][ T1107] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 179.826136][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.834503][ T1107] usb 1-1: config 0 descriptor?? [ 179.886693][ T1584] cypress 0003:04B4:DE64.001E: collection stack underflow [ 179.893770][ T1584] cypress 0003:04B4:DE64.001E: item 0 1 0 12 parsing failed [ 179.901098][ T1584] cypress 0003:04B4:DE64.001E: parse failed [ 179.906907][ T1584] cypress: probe of 0003:04B4:DE64.001E failed with error -22 [ 180.158415][ T3415] hub 6-0:1.0: USB hub found [ 180.173081][ T3415] hub 6-0:1.0: 1 port detected [ 180.229633][ T1127] usb 3-1: USB disconnect, device number 36 [ 180.325271][ T3406] udc-core: couldn't find an available UDC or it's busy [ 180.332576][ T3406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 180.372138][ T3406] udc-core: couldn't find an available UDC or it's busy [ 180.379091][ T3406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 180.397160][ T1107] hid (null): unknown global tag 0xd [ 180.403669][ T1107] hid-generic 0003:0158:0100.001F: unknown main item tag 0x1 [ 180.410950][ T1107] hid-generic 0003:0158:0100.001F: unexpected long global item [ 180.418496][ T1107] hid-generic: probe of 0003:0158:0100.001F failed with error -22 [ 180.588420][ T3421] netlink: 96 bytes leftover after parsing attributes in process `syz.1.761'. [ 180.615450][ T2997] usb 1-1: USB disconnect, device number 36 [ 180.775971][ T1102] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 180.928215][ T24] kauditd_printk_skb: 45 callbacks suppressed [ 180.928227][ T24] audit: type=1400 audit(1726456021.269:1253): avc: denied { mounton } for pid=3424 comm="syz.1.764" path="/28/file0" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 180.956874][ T24] audit: type=1400 audit(1726456021.269:1254): avc: denied { mount } for pid=3424 comm="syz.1.764" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 180.959982][ T3428] fuse: Unknown parameter 'âÓWVe;¾¢jS»Äd²ê;mÉRű' [ 180.978798][ T24] audit: type=1400 audit(1726456021.279:1255): avc: denied { unmount } for pid=2835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 181.005537][ T24] audit: type=1400 audit(1726456021.319:1256): avc: denied { read write } for pid=3427 comm="syz.1.765" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 181.038931][ T24] audit: type=1400 audit(1726456021.319:1257): avc: denied { open } for pid=3427 comm="syz.1.765" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 181.063171][ T3423] netlink: 'syz.2.763': attribute type 3 has an invalid length. [ 181.070678][ T3432] netlink: 'syz.2.763': attribute type 3 has an invalid length. [ 181.154035][ T1102] usb 4-1: Using ep0 maxpacket: 8 [ 181.431828][ T3440] syz.0.768[3440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.431883][ T3440] syz.0.768[3440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.469223][ T3440] binder: 3435:3440 ioctl 4018620d 0 returned -22 [ 181.558032][ T1102] usb 4-1: unable to get BOS descriptor set [ 181.706870][ T1102] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 182.116023][ T1102] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.125105][ T1102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.133219][ T1102] usb 4-1: Product: syz [ 182.137562][ T1102] usb 4-1: Manufacturer: syz [ 182.142004][ T1102] usb 4-1: SerialNumber: syz [ 182.186574][ T1102] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 182.366290][ T24] audit: type=1400 audit(1726456022.629:1258): avc: denied { create } for pid=3448 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.386451][ T1584] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 182.389377][ T24] audit: type=1400 audit(1726456022.639:1259): avc: denied { write } for pid=3448 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.645973][ T1584] usb 1-1: Using ep0 maxpacket: 8 [ 182.785999][ T1584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.795703][ T1584] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 182.804754][ T1584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.817507][ T1584] usb 1-1: config 0 descriptor?? [ 182.958315][ T24] audit: type=1400 audit(1726456023.319:1260): avc: denied { read } for pid=3458 comm="syz.1.773" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 182.981099][ T24] audit: type=1400 audit(1726456023.319:1261): avc: denied { open } for pid=3458 comm="syz.1.773" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 183.007594][ T24] audit: type=1400 audit(1726456023.319:1262): avc: denied { ioctl } for pid=3458 comm="syz.1.773" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 183.186724][ T1584] logitech 0003:046D:C295.0020: item fetching failed at offset 0/3 [ 183.194573][ T1584] logitech 0003:046D:C295.0020: parse failed [ 183.200448][ T1584] logitech: probe of 0003:046D:C295.0020 failed with error -22 [ 183.388606][ T3447] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 183.399553][ T1584] usb 1-1: USB disconnect, device number 37 [ 183.462790][ T1127] usb 4-1: USB disconnect, device number 33 [ 183.866088][ T1127] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 184.105958][ T1127] usb 4-1: Using ep0 maxpacket: 8 [ 184.226026][ T1127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.236786][ T1127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.246302][ T1127] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 184.255131][ T1127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.263522][ T1127] usb 4-1: config 0 descriptor?? [ 184.907305][ T1127] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 184.917563][ T1127] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 184.924923][ T1127] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 184.932248][ T1127] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 184.939477][ T1127] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 184.946729][ T1127] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 184.953933][ T1127] playstation 0003:054C:0CE6.0021: unknown main item tag 0x0 [ 184.962240][ T1127] playstation 0003:054C:0CE6.0021: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 185.036113][ T3489] overlayfs: failed to resolve './file0': -2 [ 185.179005][ T3490] syz.1.781[3490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.179060][ T3490] syz.1.781[3490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.191843][ T3490] binder: 3485:3490 ioctl c0306201 0 returned -14 [ 185.456001][ T1127] playstation 0003:054C:0CE6.0021: Invalid reportID received, expected 9 got 0 [ 185.471236][ T1127] playstation 0003:054C:0CE6.0021: Failed to retrieve DualSense pairing info: -22 [ 185.480717][ T1127] playstation 0003:054C:0CE6.0021: Failed to get MAC address from DualSense [ 185.489338][ T1127] playstation 0003:054C:0CE6.0021: Failed to create dualsense. [ 185.498153][ T1127] playstation: probe of 0003:054C:0CE6.0021 failed with error -22 [ 185.558517][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.565463][ T3496] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.572989][ T3496] device bridge_slave_0 entered promiscuous mode [ 185.585089][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.592040][ T3496] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.599852][ T3496] device bridge_slave_1 entered promiscuous mode [ 185.758600][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.765491][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.772594][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.779398][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.809615][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.818243][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.878811][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.940221][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.948538][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.955394][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.967931][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.977230][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.984106][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.000592][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.015087][ T24] kauditd_printk_skb: 40 callbacks suppressed [ 186.015096][ T24] audit: type=1400 audit(1726456026.369:1303): avc: denied { unmount } for pid=2903 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 186.026302][ T3496] device veth0_vlan entered promiscuous mode [ 186.120144][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.130588][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.148057][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.161536][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.174050][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.229998][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.243528][ T3496] device veth1_macvtap entered promiscuous mode [ 186.266562][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.284051][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.307180][ T24] audit: type=1400 audit(1726456026.659:1304): avc: denied { create } for pid=3521 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.328520][ T9] device bridge_slave_1 left promiscuous mode [ 186.339706][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.373262][ T9] device bridge_slave_0 left promiscuous mode [ 186.380173][ T24] audit: type=1400 audit(1726456026.669:1305): avc: denied { mount } for pid=3521 comm="syz.0.790" name="/" dev="configfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 186.403215][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.426920][ T9] device veth1_macvtap left promiscuous mode [ 186.432794][ T9] device veth0_vlan left promiscuous mode [ 186.438557][ T24] audit: type=1400 audit(1726456026.689:1306): avc: denied { mounton } for pid=3496 comm="syz-executor" path="/root/syzkaller.PcH7e8/syz-tmp" dev="sda1" ino=1978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 186.473015][ T24] audit: type=1400 audit(1726456026.689:1307): avc: denied { mount } for pid=3496 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.502141][ T24] audit: type=1400 audit(1726456026.699:1308): avc: denied { mount } for pid=3496 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 186.542491][ T24] audit: type=1400 audit(1726456026.699:1309): avc: denied { unmount } for pid=3496 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 186.747702][ T1127] usb 4-1: USB disconnect, device number 34 [ 186.771288][ T24] audit: type=1400 audit(1726456026.699:1310): avc: denied { mounton } for pid=3496 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 186.794058][ T24] audit: type=1400 audit(1726456027.129:1311): avc: denied { write } for pid=3517 comm="syz.1.789" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 186.865105][ T24] audit: type=1400 audit(1726456027.219:1312): avc: denied { setopt } for pid=3517 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.316063][ T1118] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 187.676020][ T1118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.692787][ T1118] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 187.720085][ T1118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.742533][ T1118] usb 1-1: config 0 descriptor?? [ 187.926016][ T1102] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 188.046000][ T1107] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 188.286054][ T1118] usbhid 1-1:0.0: can't add hid device: -71 [ 188.291947][ T1118] usbhid: probe of 1-1:0.0 failed with error -71 [ 188.298374][ T1102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.309269][ T1102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.318983][ T1107] usb 4-1: device descriptor read/64, error -71 [ 188.332961][ T1118] usb 1-1: USB disconnect, device number 38 [ 188.339229][ T1102] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 188.349521][ T1102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.360801][ T1102] usb 5-1: config 0 descriptor?? [ 188.605951][ T1584] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 188.705943][ T1107] usb 4-1: device descriptor read/64, error -71 [ 188.865959][ T1584] usb 3-1: Using ep0 maxpacket: 8 [ 188.916035][ T290] Bluetooth: hci0: command 0x1003 tx timeout [ 188.922064][ T1217] Bluetooth: hci0: sending frame failed (-49) [ 188.975947][ T1107] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 189.015990][ T1584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.026821][ T1584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.036336][ T1584] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 189.045156][ T1584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.053897][ T1584] usb 3-1: config 0 descriptor?? [ 189.245970][ T1107] usb 4-1: device descriptor read/64, error -71 [ 189.575104][ T1102] usb 5-1: string descriptor 0 read error: -71 [ 189.595990][ T1102] uclogic 0003:256C:006D.0022: failed retrieving string descriptor #200: -71 [ 189.604624][ T1102] uclogic 0003:256C:006D.0022: failed retrieving pen parameters: -71 [ 189.613686][ T1102] uclogic 0003:256C:006D.0022: failed probing pen v2 parameters: -71 [ 189.622091][ T1102] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 189.629580][ T1102] uclogic: probe of 0003:256C:006D.0022 failed with error -71 [ 189.637928][ T1102] usb 5-1: USB disconnect, device number 35 [ 189.687079][ T1584] playstation 0003:054C:0CE6.0023: unknown main item tag 0x0 [ 189.694614][ T1584] playstation 0003:054C:0CE6.0023: unknown main item tag 0x0 [ 189.702118][ T1584] playstation 0003:054C:0CE6.0023: unknown main item tag 0x0 [ 189.702676][ T3578] FAULT_INJECTION: forcing a failure. [ 189.702676][ T3578] name failslab, interval 1, probability 0, space 0, times 0 [ 189.709597][ T1584] playstation 0003:054C:0CE6.0023: unknown main item tag 0x0 [ 189.721853][ T3578] CPU: 0 PID: 3578 Comm: syz.0.804 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 189.730121][ T1584] playstation 0003:054C:0CE6.0023: unknown main item tag 0x0 [ 189.739930][ T3578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 189.739948][ T3578] Call Trace: [ 189.739971][ T3578] dump_stack_lvl+0x1e2/0x24b [ 189.739990][ T3578] ? bfq_pos_tree_add_move+0x43b/0x43b [ 189.747508][ T1584] playstation 0003:054C:0CE6.0023: unknown main item tag 0x0 [ 189.757041][ T3578] dump_stack+0x15/0x17 [ 189.757052][ T3578] should_fail+0x3c6/0x510 [ 189.757062][ T3578] ? kobject_get_path+0xbc/0x1f0 [ 189.757082][ T3578] __should_failslab+0xa4/0xe0 [ 189.760514][ T1584] playstation 0003:054C:0CE6.0023: unknown main item tag 0x0 [ 189.764671][ T3578] should_failslab+0x9/0x20 [ 189.770864][ T1584] playstation 0003:054C:0CE6.0023: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0 [ 189.777171][ T3578] __kmalloc+0x60/0x330 [ 189.777183][ T3578] kobject_get_path+0xbc/0x1f0 [ 189.777193][ T3578] kobject_uevent_env+0x27f/0x700 [ 189.777204][ T3578] ? __kasan_check_write+0x14/0x20 [ 189.777213][ T3578] kobject_uevent+0x1f/0x30 [ 189.777222][ T3578] device_add+0x791/0xbc0 [ 189.777239][ T3578] device_create+0x259/0x2e0 [ 189.849031][ T3578] ? vsnprintf+0x196/0x1c70 [ 189.853370][ T3578] ? root_device_unregister+0x80/0x80 [ 189.858567][ T3578] ? wb_init+0x5cf/0x630 [ 189.862646][ T3578] bdi_register_va+0x93/0x610 [ 189.867165][ T3578] super_setup_bdi_name+0xe0/0x1c0 [ 189.872107][ T3578] ? vfs_get_tree+0x290/0x290 [ 189.876624][ T3578] ? fuse_dev_alloc_install+0x287/0x2f0 [ 189.882000][ T3578] fuse_fill_super_common+0x57a/0x1200 [ 189.887300][ T3578] ? fuse_fill_super_submount+0xd40/0xd40 [ 189.892851][ T3578] ? __kasan_check_write+0x14/0x20 [ 189.897795][ T3578] ? fuse_conn_init+0x73f/0x920 [ 189.902500][ T3578] fuse_fill_super+0x219/0x550 [ 189.907089][ T3578] get_tree_nodev+0xb2/0x160 [ 189.911515][ T3578] ? fuse_reconfigure+0xb0/0xb0 [ 189.916204][ T3578] fuse_get_tree+0x8f/0xd0 [ 189.920456][ T3578] vfs_get_tree+0x88/0x290 [ 189.924705][ T3578] do_new_mount+0x2ba/0xb30 [ 189.929075][ T3578] ? do_move_mount_old+0x160/0x160 [ 189.934006][ T3578] ? security_capable+0x87/0xb0 [ 189.938679][ T3578] ? ns_capable+0x89/0xe0 [ 189.942843][ T3578] path_mount+0x56f/0xcb0 [ 189.947010][ T3578] __se_sys_mount+0x2c4/0x3b0 [ 189.951521][ T3578] ? __x64_sys_mount+0xd0/0xd0 [ 189.956129][ T3578] __x64_sys_mount+0xbf/0xd0 [ 189.960549][ T3578] do_syscall_64+0x34/0x70 [ 189.964824][ T3578] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 189.970545][ T3578] RIP: 0033:0x7fc9861d3ef9 [ 189.974785][ T3578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.994222][ T3578] RSP: 002b:00007fc984e2c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 190.002471][ T3578] RAX: ffffffffffffffda RBX: 00007fc98638c058 RCX: 00007fc9861d3ef9 [ 190.010364][ T3578] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 190.018174][ T3578] RBP: 00007fc984e2c090 R08: 0000000020000200 R09: 0000000000000000 [ 190.025984][ T3578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.033796][ T3578] R13: 0000000000000000 R14: 00007fc98638c058 R15: 00007fff52159048 [ 190.046067][ T1584] playstation 0003:054C:0CE6.0023: Invalid reportID received, expected 9 got 0 [ 190.056735][ T1584] playstation 0003:054C:0CE6.0023: Failed to retrieve DualSense pairing info: -22 [ 190.066089][ T1584] playstation 0003:054C:0CE6.0023: Failed to get MAC address from DualSense [ 190.074560][ T1584] playstation 0003:054C:0CE6.0023: Failed to create dualsense. [ 190.082852][ T1584] playstation: probe of 0003:054C:0CE6.0023 failed with error -22 [ 190.106026][ T1107] usb 4-1: device descriptor read/64, error -71 [ 190.226005][ T1107] usb usb4-port1: attempt power cycle [ 190.635967][ T1107] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 190.805994][ T1107] usb 4-1: device descriptor read/8, error -71 [ 190.855086][ T1584] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 190.995941][ T290] Bluetooth: hci0: command 0x1001 tx timeout [ 191.002176][ T1217] Bluetooth: hci0: sending frame failed (-49) [ 191.021746][ T1107] usb 4-1: device descriptor read/8, error -71 [ 191.205076][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 191.205087][ T24] audit: type=1400 audit(1726456031.559:1323): avc: denied { write } for pid=3607 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 191.265336][ T1584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.276230][ T1584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.285829][ T1584] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 191.294760][ T1584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.303432][ T1584] usb 5-1: config 0 descriptor?? [ 191.366376][ T359] usb 3-1: USB disconnect, device number 37 [ 191.930555][ T3620] fuse: Bad value for 'fd' [ 192.327393][ T3628] FAULT_INJECTION: forcing a failure. [ 192.327393][ T3628] name failslab, interval 1, probability 0, space 0, times 0 [ 192.365921][ T3628] CPU: 0 PID: 3628 Comm: syz.2.816 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 192.377019][ T3628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 192.386909][ T3628] Call Trace: [ 192.390041][ T3628] dump_stack_lvl+0x1e2/0x24b [ 192.394548][ T3628] ? panic+0x812/0x812 [ 192.398449][ T3628] ? bfq_pos_tree_add_move+0x43b/0x43b [ 192.403751][ T3628] dump_stack+0x15/0x17 [ 192.407742][ T3628] should_fail+0x3c6/0x510 [ 192.411998][ T3628] ? kobject_uevent_env+0x269/0x700 [ 192.417028][ T3628] __should_failslab+0xa4/0xe0 [ 192.421626][ T3628] should_failslab+0x9/0x20 [ 192.425990][ T3628] kmem_cache_alloc_trace+0x3a/0x2e0 [ 192.431096][ T3628] ? __kasan_check_write+0x14/0x20 [ 192.436042][ T3628] ? dev_uevent_filter+0xb0/0xb0 [ 192.440815][ T3628] kobject_uevent_env+0x269/0x700 [ 192.445670][ T3628] ? __kasan_check_write+0x14/0x20 [ 192.450618][ T3628] kobject_uevent+0x1f/0x30 [ 192.454954][ T3628] device_add+0x791/0xbc0 [ 192.459137][ T3628] device_create+0x259/0x2e0 [ 192.463548][ T3628] ? vsnprintf+0x196/0x1c70 [ 192.467886][ T3628] ? root_device_unregister+0x80/0x80 [ 192.473095][ T3628] ? wb_init+0x5cf/0x630 [ 192.477173][ T3628] bdi_register_va+0x93/0x610 [ 192.481687][ T3628] super_setup_bdi_name+0xe0/0x1c0 [ 192.486751][ T3628] ? vfs_get_tree+0x290/0x290 [ 192.491235][ T3628] ? fuse_dev_alloc_install+0x287/0x2f0 [ 192.496616][ T3628] fuse_fill_super_common+0x57a/0x1200 [ 192.501912][ T3628] ? fuse_fill_super_submount+0xd40/0xd40 [ 192.507466][ T3628] ? __kasan_check_write+0x14/0x20 [ 192.512410][ T3628] ? fuse_conn_init+0x73f/0x920 [ 192.517103][ T3628] fuse_fill_super+0x219/0x550 [ 192.521700][ T3628] get_tree_nodev+0xb2/0x160 [ 192.526124][ T3628] ? fuse_reconfigure+0xb0/0xb0 [ 192.530897][ T3628] fuse_get_tree+0x8f/0xd0 [ 192.535150][ T3628] vfs_get_tree+0x88/0x290 [ 192.539406][ T3628] do_new_mount+0x2ba/0xb30 [ 192.543742][ T3628] ? do_move_mount_old+0x160/0x160 [ 192.548688][ T3628] ? security_capable+0x87/0xb0 [ 192.553375][ T3628] ? ns_capable+0x89/0xe0 [ 192.557540][ T3628] path_mount+0x56f/0xcb0 [ 192.561708][ T3628] __se_sys_mount+0x2c4/0x3b0 [ 192.566228][ T3628] ? __x64_sys_mount+0xd0/0xd0 [ 192.570831][ T3628] __x64_sys_mount+0xbf/0xd0 [ 192.575251][ T3628] do_syscall_64+0x34/0x70 [ 192.579509][ T3628] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 192.585233][ T3628] RIP: 0033:0x7f0667fadef9 [ 192.589483][ T3628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.608927][ T3628] RSP: 002b:00007f0666c06038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.617171][ T3628] RAX: ffffffffffffffda RBX: 00007f0668166058 RCX: 00007f0667fadef9 [ 192.624985][ T3628] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 192.632792][ T3628] RBP: 00007f0666c06090 R08: 0000000020000200 R09: 0000000000000000 [ 192.640605][ T3628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.648416][ T3628] R13: 0000000000000000 R14: 00007f0668166058 R15: 00007ffc49500d28 [ 192.806719][ T24] audit: type=1400 audit(1726456033.169:1324): avc: denied { name_bind } for pid=3630 comm="syz.2.817" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 192.849905][ T24] audit: type=1400 audit(1726456033.209:1325): avc: denied { read write } for pid=3635 comm="syz.3.819" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.893139][ T24] audit: type=1400 audit(1726456033.209:1326): avc: denied { open } for pid=3635 comm="syz.3.819" path="/dev/ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.932479][ T24] audit: type=1400 audit(1726456033.209:1327): avc: denied { ioctl } for pid=3635 comm="syz.3.819" path="/dev/ppp" dev="devtmpfs" ino=133 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.085958][ T290] Bluetooth: hci0: command 0x1009 tx timeout [ 193.256042][ T24] audit: type=1400 audit(1726456033.569:1328): avc: denied { bind } for pid=3643 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.636692][ T24] audit: type=1400 audit(1726456033.569:1329): avc: denied { ioctl } for pid=3643 comm="syz.3.821" path="socket:[29327]" dev="sockfs" ino=29327 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.684177][ T24] audit: type=1400 audit(1726456034.029:1330): avc: denied { create } for pid=3653 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 193.721094][ T24] audit: type=1400 audit(1726456034.069:1331): avc: denied { audit_write } for pid=3653 comm="syz.0.823" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 193.742488][ T24] audit: type=1107 audit(1726456034.069:1332): pid=3653 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 194.049373][ T25] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 194.286139][ T1584] usbhid 5-1:0.0: can't add hid device: -71 [ 194.292380][ T1584] usbhid: probe of 5-1:0.0 failed with error -71 [ 194.303056][ T1584] usb 5-1: USB disconnect, device number 36 [ 194.466304][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.488462][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.499878][ T25] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 194.508929][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.518906][ T25] usb 3-1: config 0 descriptor?? [ 194.605964][ T1107] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 194.996730][ T25] holtek 0003:1241:5015.0024: collection stack underflow [ 195.003648][ T25] holtek 0003:1241:5015.0024: item 0 1 0 12 parsing failed [ 195.010986][ T25] holtek 0003:1241:5015.0024: parse failed [ 195.016686][ T25] holtek: probe of 0003:1241:5015.0024 failed with error -22 [ 195.026165][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.039401][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.048984][ T1107] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 195.057799][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.066373][ T1107] usb 4-1: config 0 descriptor?? [ 195.216448][ T25] usb 3-1: USB disconnect, device number 38 [ 195.547461][ T1107] isku 0003:1E7D:319C.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 195.755992][ T1107] isku 0003:1E7D:319C.0025: couldn't init struct isku_device [ 195.763328][ T1107] isku 0003:1E7D:319C.0025: couldn't install keyboard [ 195.770838][ T1107] isku: probe of 0003:1E7D:319C.0025 failed with error -5 [ 195.792878][ T3688] netlink: 40 bytes leftover after parsing attributes in process `syz.2.835'. [ 195.920092][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.926988][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.934253][ T3700] device bridge_slave_0 entered promiscuous mode [ 195.941284][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.948879][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.956302][ T3700] device bridge_slave_1 entered promiscuous mode [ 196.004033][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.010918][ T3700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.018005][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.024774][ T3700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.046709][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.054282][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.062720][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.078402][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.086673][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.093526][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.101160][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.113524][ T1102] usb 4-1: USB disconnect, device number 39 [ 196.120638][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.127503][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.148485][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.157582][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.165724][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.176755][ T3700] device veth0_vlan entered promiscuous mode [ 196.186546][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.195173][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.202626][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.212914][ T3700] device veth1_macvtap entered promiscuous mode [ 196.220455][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.235733][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.244883][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.254099][ T3717] serio: Serial port pts0 [ 196.317767][ T24] kauditd_printk_skb: 39 callbacks suppressed [ 196.317779][ T24] audit: type=1326 audit(1726456036.679:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e2c3fef9 code=0x7ffc0000 [ 196.347176][ T24] audit: type=1326 audit(1726456036.689:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e2c3fef9 code=0x7ffc0000 [ 196.377633][ T24] audit: type=1326 audit(1726456036.689:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f27e2c3fef9 code=0x7ffc0000 [ 196.410995][ T24] audit: type=1326 audit(1726456036.689:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f27e2c3ff33 code=0x7ffc0000 [ 196.437949][ T24] audit: type=1326 audit(1726456036.689:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f27e2c3e9df code=0x7ffc0000 [ 196.462026][ T24] audit: type=1326 audit(1726456036.699:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f27e2c3ff87 code=0x7ffc0000 [ 196.488129][ T24] audit: type=1326 audit(1726456036.719:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27e2c3e890 code=0x7ffc0000 [ 196.511558][ T24] audit: type=1326 audit(1726456036.719:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27e2c3fafb code=0x7ffc0000 [ 196.534868][ T24] audit: type=1326 audit(1726456036.719:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27e2c3fafb code=0x7ffc0000 [ 196.558520][ T24] audit: type=1326 audit(1726456036.719:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f27e2c71fe5 code=0x7ffc0000 [ 196.999088][ T3787] syz.3.876[3787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.999138][ T3787] syz.3.876[3787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.293404][ T3827] fuse: Unknown parameter 'gr00000000000000000000' [ 198.767150][ T9] device bridge_slave_1 left promiscuous mode [ 198.773169][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.780716][ T9] device bridge_slave_0 left promiscuous mode [ 198.786813][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.795096][ T9] device veth1_macvtap left promiscuous mode [ 198.801116][ T9] device veth0_vlan left promiscuous mode [ 199.346060][ T3883] loop_set_status: loop2 () has still dirty pages (nrpages=3) [ 199.362887][ T3887] SELinux: Context some 00000000000000000000 00000000000000000000 is not valid (left unmapped). [ 200.437986][ T3965] kernel profiling enabled (shift: 17) [ 200.606682][ T3977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.957'. [ 200.620674][ T3977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 200.849586][ T3998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.966'. [ 201.146390][ T4052] input: syz1 as /devices/virtual/input/input21 [ 202.500821][ T24] kauditd_printk_skb: 222 callbacks suppressed [ 202.500833][ T24] audit: type=1400 audit(1726456042.859:1604): avc: denied { ioctl } for pid=4076 comm="syz.4.1003" path="socket:[32053]" dev="sockfs" ino=32053 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 202.550776][ T24] audit: type=1326 audit(1726456042.909:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988e2e4ef9 code=0x7ffc0000 [ 202.603093][ T4085] devtmpfs: Unknown parameter 'posixacl' [ 202.603314][ T24] audit: type=1326 audit(1726456042.909:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f988e2e3797 code=0x7ffc0000 [ 202.686217][ T24] audit: type=1326 audit(1726456042.909:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988e2e4ef9 code=0x7ffc0000 [ 202.718560][ T24] audit: type=1326 audit(1726456042.909:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f988e2e4ef9 code=0x7ffc0000 [ 202.741804][ T24] audit: type=1326 audit(1726456042.909:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988e2e4ef9 code=0x7ffc0000 [ 202.765257][ T24] audit: type=1326 audit(1726456042.909:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f988e2e4ef9 code=0x7ffc0000 [ 202.789592][ T24] audit: type=1326 audit(1726456042.909:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988e2e4ef9 code=0x7ffc0000 [ 202.814833][ T24] audit: type=1400 audit(1726456042.909:1612): avc: denied { unmount } for pid=3700 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 202.838109][ T24] audit: type=1326 audit(1726456042.939:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e2c3fef9 code=0x7ffc0000 [ 202.898857][ T4111] overlayfs: failed to resolve './file0': -2 [ 202.907446][ T4115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1021'. [ 203.187114][ T4147] device syzkaller0 entered promiscuous mode [ 203.372443][ T4179] overlayfs: statfs failed on './file0' [ 203.733550][ T4233] overlayfs: statfs failed on './file0' [ 203.927839][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1091'. [ 204.183457][ T4299] device syzkaller0 entered promiscuous mode [ 204.212474][ T4306] syz.2.1107[4306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.212514][ T4306] syz.2.1107[4306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.548067][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'. [ 204.673187][ T4347] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 204.739440][ T4378] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 204.748058][ T4378] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 204.762690][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.772384][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.780207][ T4372] device bridge_slave_0 entered promiscuous mode [ 204.787245][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.795184][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.802532][ T4372] device bridge_slave_1 entered promiscuous mode [ 204.872389][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.879270][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.886382][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.893132][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.920798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.930480][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.938589][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.959693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.971166][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.978054][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.996075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.014317][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.021197][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.036160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.065151][ T4372] device veth0_vlan entered promiscuous mode [ 205.134293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.150439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.174010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.196416][ T4423] syz.1.1157[4423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.196471][ T4423] syz.1.1157[4423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.196519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.250797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.281897][ T4372] device veth1_macvtap entered promiscuous mode [ 205.301622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.315636][ T4435] BUG: unable to handle page fault for address: 000000046cf38da0 [ 205.323178][ T4435] #PF: supervisor read access in kernel mode [ 205.328995][ T4435] #PF: error_code(0x0000) - not-present page [ 205.334802][ T4435] PGD 10a7d0067 P4D 10a7d0067 PUD 0 [ 205.339925][ T4435] Oops: 0000 [#1] PREEMPT SMP KASAN [ 205.344964][ T4435] CPU: 0 PID: 4435 Comm: syz.4.1160 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 205.356185][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 205.366094][ T4435] RIP: 0010:__raw_callee_save___kvm_vcpu_is_preempted+0x0/0x20 [ 205.373455][ T4435] Code: 10 01 c0 be 03 00 00 00 e8 1d 44 3e 01 bf 21 10 01 c0 be 0e 00 00 00 e8 0e 44 3e 01 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc <48> 8b 04 fd b0 46 dc 85 80 b8 50 70 02 00 00 0f 95 c0 c3 66 2e 0f [ 205.392901][ T4435] RSP: 0018:ffffc90000b173f8 EFLAGS: 00010286 [ 205.398795][ T4435] RAX: 1ffffffff0cd8f01 RBX: 000000009ce2e8de RCX: dffffc0000000000 [ 205.406614][ T4435] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000009ce2e8de [ 205.414422][ T4435] RBP: ffffc90000b17560 R08: dffffc0000000000 R09: ffffed1024255d09 [ 205.422231][ T4435] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff842313a8 [ 205.430049][ T4435] R13: ffff8881212ae840 R14: dffffc0000000000 R15: dffffc0000000000 [ 205.437855][ T4435] FS: 00007f27e18b96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 205.446623][ T4435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.453040][ T4435] CR2: 000000046cf38da0 CR3: 0000000111531000 CR4: 00000000003506b0 [ 205.460850][ T4435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.468749][ T4435] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.476557][ T4435] Call Trace: [ 205.479714][ T4435] ? __die_body+0x62/0xb0 [ 205.483942][ T4435] ? __die+0x7e/0x90 [ 205.487676][ T4435] ? no_context+0x9f9/0xd20 [ 205.492013][ T4435] ? is_prefetch+0x5c0/0x5c0 [ 205.496441][ T4435] ? __bad_area_nosemaphore+0xc4/0x430 [ 205.501738][ T4435] ? stack_trace_save+0x1c0/0x1c0 [ 205.506600][ T4435] ? bad_area_nosemaphore+0x2d/0x40 [ 205.511748][ T4435] ? exc_page_fault+0x3df/0x5b0 [ 205.516438][ T4435] ? asm_exc_page_fault+0x1e/0x30 [ 205.521297][ T4435] ? unix_dgram_recvmsg+0x7f8/0x1240 [ 205.526420][ T4435] ? __fix_erratum_688+0x30/0x30 [ 205.531190][ T4435] ? __mutex_lock+0x225/0xf20 [ 205.535701][ T4435] ? ____kasan_kmalloc+0xdb/0x110 [ 205.540563][ T4435] ? __kmalloc+0x1aa/0x330 [ 205.544813][ T4435] ? kvmalloc_node+0x82/0x130 [ 205.549332][ T4435] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 205.556035][ T4435] ? vfs_open+0x73/0x80 [ 205.560023][ T4435] ? do_syscall_64+0x34/0x70 [ 205.564441][ T4435] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 205.570351][ T4435] __mutex_lock_slowpath+0xe/0x10 [ 205.575218][ T4435] mutex_lock+0xd6/0x110 [ 205.579285][ T4435] ? mutex_trylock+0xa0/0xa0 [ 205.583719][ T4435] steam_input_open+0x91/0x1a0 [ 205.588312][ T4435] ? steam_input_register+0xa70/0xa70 [ 205.593519][ T4435] ? __kasan_check_write+0x14/0x20 [ 205.598473][ T4435] ? mutex_lock_interruptible+0xa5/0x110 [ 205.603941][ T4435] input_open_device+0x151/0x2a0 [ 205.608708][ T4435] evdev_open+0x3a5/0x5c0 [ 205.612872][ T4435] chrdev_open+0x4f7/0x620 [ 205.617139][ T4435] ? cd_forget+0x170/0x170 [ 205.621384][ T4435] ? fsnotify_perm+0x324/0x4e0 [ 205.625978][ T4435] ? cd_forget+0x170/0x170 [ 205.630234][ T4435] do_dentry_open+0x7c1/0x10d0 [ 205.634827][ T4435] vfs_open+0x73/0x80 [ 205.638649][ T4435] path_openat+0x2660/0x3000 [ 205.643082][ T4435] ? kmem_cache_alloc+0x168/0x2e0 [ 205.647944][ T4435] ? do_syscall_64+0x34/0x70 [ 205.652366][ T4435] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 205.658268][ T4435] ? do_filp_open+0x460/0x460 [ 205.662777][ T4435] do_filp_open+0x21c/0x460 [ 205.667117][ T4435] ? vfs_tmpfile+0x2b0/0x2b0 [ 205.671555][ T4435] ? get_unused_fd_flags+0x94/0xa0 [ 205.676488][ T4435] do_sys_openat2+0x13f/0x710 [ 205.681000][ T4435] ? do_sys_open+0x220/0x220 [ 205.685430][ T4435] __x64_sys_openat+0x243/0x290 [ 205.690116][ T4435] ? __ia32_sys_open+0x270/0x270 [ 205.694894][ T4435] ? __kasan_check_read+0x11/0x20 [ 205.699751][ T4435] do_syscall_64+0x34/0x70 [ 205.704005][ T4435] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 205.709728][ T4435] RIP: 0033:0x7f27e2c3e890 [ 205.713980][ T4435] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 205.733429][ T4435] RSP: 002b:00007f27e18b8b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 205.741672][ T4435] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f27e2c3e890 [ 205.749477][ T4435] RDX: 0000000000000000 RSI: 00007f27e18b8c10 RDI: 00000000ffffff9c [ 205.757302][ T4435] RBP: 00007f27e18b8c10 R08: 0000000000000000 R09: 0000000000000000 [ 205.765266][ T4435] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 205.773072][ T4435] R13: 0000000000000000 R14: 00007f27e2df7f80 R15: 00007ffcc992abd8 [ 205.780879][ T4435] Modules linked in: [ 205.784622][ T4435] CR2: 000000046cf38da0 [ 205.788621][ T4435] ---[ end trace be506d4cf363e836 ]--- [ 205.793912][ T4435] RIP: 0010:__raw_callee_save___kvm_vcpu_is_preempted+0x0/0x20 [ 205.801284][ T4435] Code: 10 01 c0 be 03 00 00 00 e8 1d 44 3e 01 bf 21 10 01 c0 be 0e 00 00 00 e8 0e 44 3e 01 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc <48> 8b 04 fd b0 46 dc 85 80 b8 50 70 02 00 00 0f 95 c0 c3 66 2e 0f [ 205.820721][ T4435] RSP: 0018:ffffc90000b173f8 EFLAGS: 00010286 [ 205.826630][ T4435] RAX: 1ffffffff0cd8f01 RBX: 000000009ce2e8de RCX: dffffc0000000000 [ 205.834433][ T4435] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000009ce2e8de [ 205.842245][ T4435] RBP: ffffc90000b17560 R08: dffffc0000000000 R09: ffffed1024255d09 [ 205.850053][ T4435] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff842313a8 [ 205.857865][ T4435] R13: ffff8881212ae840 R14: dffffc0000000000 R15: dffffc0000000000 [ 205.865679][ T4435] FS: 00007f27e18b96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 205.874441][ T4435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.880862][ T4435] CR2: 000000046cf38da0 CR3: 0000000111531000 CR4: 00000000003506b0 [ 205.888683][ T4435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.896485][ T4435] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.904296][ T4435] Kernel panic - not syncing: Fatal exception [ 205.910436][ T4435] Kernel Offset: disabled [ 205.914562][ T4435] Rebooting in 86400 seconds..