last executing test programs: 3.670490474s ago: executing program 2 (id=683): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001042088be13f124e22dd3"], 0xfdef) 3.511091478s ago: executing program 2 (id=687): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = gettid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1e, 0x6, 0xffffffffffffffff, 0x500, 0x0, 0x0, 0x3}, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 2.600371192s ago: executing program 2 (id=706): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r0, 0x2}, 0x20) 2.546962554s ago: executing program 2 (id=707): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000037d6f2c669"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000004c0)=ANY=[]) sendmsg$nl_route(r0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380), 0x0, 0x0, 0x0) 2.443766077s ago: executing program 2 (id=711): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}], 0x1, 0x4800) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2.352522049s ago: executing program 2 (id=714): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r1) syz_usb_connect(0x3, 0x24, &(0x7f0000001680)={{0x12, 0x1, 0x300, 0xe2, 0x24, 0x2c, 0x8, 0x41e, 0x401d, 0x295c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0xab, 0x3, 0x0, 0x96, 0xe2, 0x4d}}]}}]}}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x59}) 1.434485683s ago: executing program 1 (id=724): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00), 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) 1.433861403s ago: executing program 1 (id=725): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x3b6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.385877334s ago: executing program 1 (id=727): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000004100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x25000}) 1.340770835s ago: executing program 1 (id=728): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x1, 0x233, &(0x7f0000000c80)="$eJzs2k+LW1UYB+D3xtYZp0wT8R8tiAddqJtLk7WLDtKCGFC0EaogvXUSDbkmQxIGImJnpVs/Qtfi0p0gXbrpxk/gfjaz7EK80ibaTolCESehPs8mL5zzI+/hnBzOIodvfPv5oDfJe8U0alkWtYtxEHeyaEQt/nQQr7969ecX37/64ds77fal91K6vHOl2UopnX3pp4++/P7lW9MzH/xw9seNuN34+PCotRnP3z53+PuVz/qT1J+k4WiainR9NJoW18tu2u1PBnlK75bdaiOiP5x0x8fGe+Vob2+WiuHu9tbeuDvJohjO0qA7S9NRmo5nqfi06A9Tnudpeyv4Nzrf3amqOKpOX4uqqp66GWduxfavUY/s6ZQ9czF77lr2wkF27qiq6qtulf+E/f9/e+BS34wov9nv7Hfmn/PxnV70o4xuXIh6/BZ3j8nCvL78VvvShXRPI74ubyzyN/Y7TxzPN6MejeX55jyfjuc3YividMQi34p6PLs831qa34zXXnng+/Ooxy+fxCjK2I272fv5r5opvflO+6H8+XvzAAAeN3n6y9L3W57/3fg8/wjvw4feV6fi/KnVrp2IyeyLQVGW3fHaFuXN+Xlal35OpohaxBq0oXgsiycXv/5/mrPii4kTcX/TV90JAAAAAAAAAAAAj+Ik/nK46jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADr7Y8AAAD//5zE0Rg=") r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.112834941s ago: executing program 1 (id=734): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) gettid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xffffffeffffffff5]}, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1e, 0x6, 0xffffffffffffffff, 0x500, 0x0, 0x0, 0x3}, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 660.559283ms ago: executing program 3 (id=743): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x2cd0}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 660.226973ms ago: executing program 3 (id=744): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022024780e8ff06006d00000078cc6f920a97c99f494e83cf3b21f84fcf47e2af0bf9", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc)=0x61, 0x4) sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002d40)=""/4086, 0xff6}, {&(0x7f0000000ac0)=""/273, 0x111}, {0x0}, {&(0x7f0000000dc0)=""/183, 0xb7}, {&(0x7f00000001c0)=""/131, 0x83}, {&(0x7f0000000940)=""/153, 0x99}, {&(0x7f0000000640)=""/156, 0x9c}, {&(0x7f0000000800)=""/147, 0x93}, {&(0x7f0000000540)=""/244, 0xf4}, {&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000700)=""/98, 0x62}], 0xb}, 0x10001}], 0x1, 0x10120, 0x0) 648.092463ms ago: executing program 3 (id=745): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x529247731525211c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="56020000010900"], 0x256) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) 618.304174ms ago: executing program 3 (id=746): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000200000000000000050000000f54e4fffcffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000fabea20000470000000702009a57ff", @ANYRES32=0x1, @ANYBLOB="000000000400000085200000"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x26, &(0x7f0000000340)=""/38, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x678eba39, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0xf, 0x4}, {0x4, 0x1, 0xc, 0x5}], 0x10, 0x4}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x10, 0x2, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0x8, 0x6}}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 575.855286ms ago: executing program 3 (id=747): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x92, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0xe20, 0x0, @empty}, 0x1c) 560.480846ms ago: executing program 3 (id=748): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x200091, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r1, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 296.885013ms ago: executing program 1 (id=753): socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 277.450683ms ago: executing program 0 (id=754): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) write$binfmt_format(r0, &(0x7f0000000140)='1\x00', 0x2) 177.870776ms ago: executing program 4 (id=756): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x529247731525211c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="56020000010900"], 0x256) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) 177.555246ms ago: executing program 0 (id=757): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="818af31252b3", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) 177.298256ms ago: executing program 0 (id=758): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x92, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0xe20, 0x0, @empty}, 0x1c) 176.904586ms ago: executing program 4 (id=759): syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344}, 0x1, 0x7) syz_emit_ethernet(0xde, &(0x7f0000000500)={@random="7d1db9abc3f0", @remote, @void, {@ipv4={0x800, @tcp={{0x16, 0x4, 0x1, 0x7, 0xd0, 0x64, 0x0, 0x0, 0x6, 0x0, @empty, @loopback, {[@ssrr={0x89, 0x17, 0x7a, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010102, @local]}, @timestamp_addr={0x44, 0x2c, 0xee, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfa84}, {@multicast2, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@private=0xa010102}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x2}]}]}}, {{0x4e20, 0x4e24, 0x41424344, r0, 0x0, 0x0, 0x5, 0x2, 0x3, 0x0, 0x4}, {"c46c09c4ccf564ae2bfb98878f9e1e65178431d38775a50d73dad0e816abf831ee40285ef180a4c4e6d64a3784d0eb585119ee310400447b531d282b0dbc0c5e5570b1a17145f892d6012ea0591165d019cb2f67566b6b5a8cb7891ec6e1716ba39cf977"}}}}}}, 0x0) 161.197236ms ago: executing program 0 (id=760): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="1000"/14, 0x0, 0x19, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 108.833578ms ago: executing program 4 (id=761): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 108.497268ms ago: executing program 0 (id=762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = getpid() mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000080)={r2}) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000001000), 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="17e40000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000140002007767320000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000004000880080005000100"], 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) chdir(&(0x7f0000001100)='./config/usb_gadget/g1\x00') symlink(&(0x7f0000001200)='functions/ecm.usb0\x00', &(0x7f0000001300)='configs/c.1/ecm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001500), 0x0) r6 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000001700)={'syzkaller0\x00', 0x41}) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) 108.333348ms ago: executing program 4 (id=763): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='p:my_probe ./file0:0x0', 0x16) 99.763767ms ago: executing program 4 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000200000000000000050000000f54e4fffcffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000fabea20000470000000702009a57ff", @ANYRES32=0x1, @ANYBLOB="000000000400000085200000"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x26, &(0x7f0000000340)=""/38, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x678eba39, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0xf, 0x4}, {0x4, 0x1, 0xc, 0x5}], 0x10, 0x4}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x10, 0x2, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0x8, 0x6}}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 68.608129ms ago: executing program 0 (id=765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @private=0xa0100fe, @local}}}], 0x20}}], 0x1, 0x48c0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 94.43µs ago: executing program 4 (id=766): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977720a89"], 0xa) 0s ago: executing program 32 (id=766): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977720a89"], 0xa) kernel console output (not intermixed with test programs): " scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.818285][ T30] audit: type=1400 audit(1786110202.291:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.392984][ T231] scp (231) used greatest stack depth: 22184 bytes left Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts. [ 22.877087][ T30] audit: type=1400 audit(1786110209.391:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.881296][ T277] cgroup: Unknown subsys name 'net' [ 22.900341][ T30] audit: type=1400 audit(1786110209.391:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.927639][ T30] audit: type=1400 audit(1786110209.421:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.928168][ T277] cgroup: Unknown subsys name 'devices' [ 23.071456][ T277] cgroup: Unknown subsys name 'hugetlb' [ 23.077086][ T277] cgroup: Unknown subsys name 'rlimit' [ 23.218549][ T30] audit: type=1400 audit(1786110209.731:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.242181][ T30] audit: type=1400 audit(1786110209.731:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.267105][ T30] audit: type=1400 audit(1786110209.741:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.287148][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.299094][ T30] audit: type=1400 audit(1786110209.811:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.324634][ T30] audit: type=1400 audit(1786110209.811:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.356423][ T30] audit: type=1400 audit(1786110209.871:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.382053][ T30] audit: type=1400 audit(1786110209.871:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.382230][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.185836][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.193115][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.200714][ T286] device bridge_slave_0 entered promiscuous mode [ 24.235297][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.242578][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.250073][ T286] device bridge_slave_1 entered promiscuous mode [ 24.279277][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.286424][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.293939][ T289] device bridge_slave_0 entered promiscuous mode [ 24.304430][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.311604][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.319067][ T289] device bridge_slave_1 entered promiscuous mode [ 24.358713][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.366133][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.373635][ T285] device bridge_slave_0 entered promiscuous mode [ 24.384321][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.391561][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.398933][ T287] device bridge_slave_0 entered promiscuous mode [ 24.411052][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.418121][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.425809][ T285] device bridge_slave_1 entered promiscuous mode [ 24.441969][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.449044][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.456579][ T287] device bridge_slave_1 entered promiscuous mode [ 24.552999][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.560145][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.567526][ T288] device bridge_slave_0 entered promiscuous mode [ 24.574592][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.581670][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.589134][ T288] device bridge_slave_1 entered promiscuous mode [ 24.690425][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.697597][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.704944][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.712002][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.723280][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.730387][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.737675][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.744752][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.754677][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.761766][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.769051][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.776124][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.799799][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.806875][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.814200][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.821257][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.849027][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.856146][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.863567][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.870638][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.889971][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.897459][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.905043][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.913075][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.920596][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.927894][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.935300][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.942597][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.950479][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.957713][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.965756][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.973262][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.998999][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.007159][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.015451][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.022501][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.030159][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.038344][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.045534][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.053206][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.061439][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.068490][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.075918][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.084095][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.091169][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.098510][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.106586][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.117822][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.135280][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.142990][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.151580][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.158639][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.166955][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.175135][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.182476][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.199587][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.207728][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.230236][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.237790][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.245340][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.254343][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.262864][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.269945][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.277509][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.285099][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.292632][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.301221][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.309379][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.316518][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.324347][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.332873][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.341389][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.348426][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.355848][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.363994][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.372157][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.380295][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.390414][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.398927][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.415149][ T287] device veth0_vlan entered promiscuous mode [ 25.424039][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.432545][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.440857][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.447903][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.455472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.463642][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.472007][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.480057][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.487924][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.496305][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.504005][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.525996][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.534284][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.542898][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.551043][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.567277][ T288] device veth0_vlan entered promiscuous mode [ 25.577270][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.585845][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.594024][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.602242][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.610001][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.618298][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.630580][ T289] device veth0_vlan entered promiscuous mode [ 25.646647][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.655292][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.663506][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.672355][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.680853][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.689183][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.697806][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.706451][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.714058][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.725508][ T288] device veth1_macvtap entered promiscuous mode [ 25.736380][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.744737][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.752913][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.763195][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.772937][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.780508][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.790406][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.798399][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.806750][ T285] device veth0_vlan entered promiscuous mode [ 25.815076][ T289] device veth1_macvtap entered promiscuous mode [ 25.822746][ T287] device veth1_macvtap entered promiscuous mode [ 25.831268][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.838805][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.846950][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.855346][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.870537][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.879025][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.888758][ T286] device veth0_vlan entered promiscuous mode [ 25.899008][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.907455][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.919721][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.928288][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.937733][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.954027][ T286] device veth1_macvtap entered promiscuous mode [ 25.968122][ T285] device veth1_macvtap entered promiscuous mode [ 25.980349][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.988707][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.997394][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.005961][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.014694][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.023099][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.031431][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.039139][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.047805][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.060158][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.068565][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.085681][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.094196][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.143115][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.157469][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.166554][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.175674][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.221790][ T312] using random self ethernet address [ 26.256221][ T326] ======================================================= [ 26.256221][ T326] WARNING: The mand mount option has been deprecated and [ 26.256221][ T326] and is ignored by this kernel. Remove the mand [ 26.256221][ T326] option from the mount to silence this warning. [ 26.256221][ T326] ======================================================= [ 26.271411][ T312] using random host ethernet address [ 26.348124][ T326] 9pnet_virtio: no channels available for device syz [ 26.371314][ T335] device-mapper: ioctl: Unable to rename non-existent device, to § [ 26.393399][ T328] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 26.454653][ T340] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.519686][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.547455][ T26] android_work: sent uevent USB_STATE=CONNECTED [ 26.760415][ T349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 26.799531][ T39] usb 1-1: Dual-Role OTG device on HNP port [ 26.819506][ T39] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 26.833112][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.872916][ T348] android_work: sent uevent USB_STATE=CONFIGURED [ 27.017435][ T45] blk_update_request: I/O error, dev sda, sector 278838 op 0x1:(WRITE) flags 0x4000 phys_seg 51 prio class 0 [ 27.029596][ T45] blk_update_request: I/O error, dev sda, sector 279344 op 0x1:(WRITE) flags 0x4000 phys_seg 39 prio class 0 [ 27.041764][ T45] blk_update_request: I/O error, dev sda, sector 279856 op 0x1:(WRITE) flags 0x4000 phys_seg 49 prio class 0 [ 27.054360][ T45] blk_update_request: I/O error, dev sda, sector 280368 op 0x1:(WRITE) flags 0x4000 phys_seg 56 prio class 0 [ 27.069149][ T45] blk_update_request: I/O error, dev sda, sector 280880 op 0x1:(WRITE) flags 0x4000 phys_seg 55 prio class 0 [ 27.087606][ T45] blk_update_request: I/O error, dev sda, sector 281392 op 0x1:(WRITE) flags 0x0 phys_seg 11 prio class 0 [ 27.099189][ T45] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35187) [ 27.110887][ T45] blk_update_request: I/O error, dev sda, sector 281502 op 0x1:(WRITE) flags 0x4000 phys_seg 60 prio class 0 [ 27.123590][ T45] blk_update_request: I/O error, dev sda, sector 282008 op 0x1:(WRITE) flags 0x4000 phys_seg 58 prio class 0 [ 27.135588][ T45] blk_update_request: I/O error, dev sda, sector 282520 op 0x1:(WRITE) flags 0x4000 phys_seg 41 prio class 0 [ 27.147463][ T45] blk_update_request: I/O error, dev sda, sector 283032 op 0x1:(WRITE) flags 0x4000 phys_seg 47 prio class 0 [ 27.166695][ T45] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35511) [ 27.181198][ T45] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35862) [ 27.201721][ T45] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35998) [ 27.213688][ T45] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139303) [ 27.213844][ T8] Buffer I/O error on device sda1, logical block 35824 [ 27.228681][ T45] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139416) [ 27.243793][ T8] Buffer I/O error on device sda1, logical block 35825 [ 27.243877][ T8] Buffer I/O error on device sda1, logical block 35826 [ 27.243895][ T8] Buffer I/O error on device sda1, logical block 35827 [ 27.243911][ T8] Buffer I/O error on device sda1, logical block 35828 [ 27.243926][ T8] Buffer I/O error on device sda1, logical block 35829 [ 27.243950][ T8] Buffer I/O error on device sda1, logical block 35830 [ 27.244024][ T8] Buffer I/O error on device sda1, logical block 35831 [ 27.259783][ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.292628][ T8] Buffer I/O error on device sda1, logical block 35832 [ 27.311117][ T45] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139453) [ 27.330506][ T8] Buffer I/O error on device sda1, logical block 35833 [ 27.357123][ T45] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139471) [ 27.384168][ T45] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139490) [ 27.395925][ T45] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139494) [ 27.420183][ T358] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 27.428798][ T358] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 27.431649][ T277] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm syz-executor: Error while async write back metadata [ 27.437737][ T358] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 27.458420][ T358] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 27.467008][ T358] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 27.473883][ T277] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm syz-executor: Error while async write back metadata [ 27.475644][ T358] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 27.496680][ T358] Buffer I/O error on dev sda1, logical block 159, lost async page write [ 27.505220][ T358] Buffer I/O error on dev sda1, logical block 226, lost async page write [ 27.513776][ T358] Buffer I/O error on dev sda1, logical block 243, lost async page write [ 27.522374][ T358] Buffer I/O error on dev sda1, logical block 261, lost async page write [ 27.539194][ T277] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm syz-executor: Error while async write back metadata [ 27.541232][ T64] Aborting journal on device sda1-8. [ 27.557382][ T302] EXT4-fs (sda1): I/O error while writing superblock [ 27.564327][ T277] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Journal has aborted [ 27.566613][ T64] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 27.575159][ T302] EXT4-fs (sda1): I/O error while writing superblock [ 27.588977][ T277] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2037: comm syz-executor: mark_inode_dirty error [ 27.607205][ T345] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.14: Detected aborted journal [ 27.609696][ T302] EXT4-fs (sda1): I/O error while writing superblock [ 27.619128][ T345] EXT4-fs (sda1): previous I/O error to superblock detected [ 27.624983][ T277] EXT4-fs error (device sda1) in ext4_dirty_inode:6109: Journal has aborted [ 27.633909][ T345] EXT4-fs (sda1): I/O error while writing superblock [ 27.649688][ T302] EXT4-fs (sda1): I/O error while writing superblock [ 27.659876][ T362] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.20: Detected aborted journal [ 27.669584][ T345] EXT4-fs (sda1): Remounting filesystem read-only [ 27.671318][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 27.688518][ T362] EXT4-fs (sda1): I/O error while writing superblock [ 27.695586][ T362] EXT4-fs (sda1): Remounting filesystem read-only [ 27.702211][ T277] EXT4-fs (sda1): I/O error while writing superblock [ 27.708959][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 27.742078][ T358] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 27.783235][ T39] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 27.805582][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.821588][ T39] usb 4-1: config 0 descriptor?? [ 27.885847][ T372] mmap: syz.0.22 (372) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 27.901124][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 27.901139][ T30] audit: type=1400 audit(1786110214.421:151): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.959331][ T30] audit: type=1400 audit(1786110214.471:152): avc: denied { remove_name } for pid=376 comm="syz.2.24" name="c.1" dev="configfs" ino=15107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 27.983510][ T30] audit: type=1400 audit(1786110214.471:153): avc: denied { rmdir } for pid=376 comm="syz.2.24" name="c.1" dev="configfs" ino=15107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 28.005911][ T30] audit: type=1400 audit(1786110214.481:154): avc: denied { mounton } for pid=373 comm="syz.1.23" path="/5/file0" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.049853][ T380] Write-error on swap-device (8:0:787472) [ 28.055832][ T380] Write-error on swap-device (8:0:787480) Aug 7 13:43:34 syzkaller kern.alert kernel: [ [ 28.068711][ T380] Write-error on swap-device (8:0:787488) 28.049853][ T3[ 28.075682][ T30] audit: type=1400 audit(1786110214.591:155): avc: denied { create } for pid=355 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.091418][ T380] Write-error on swap-device (8:0:787496) 80] Write-error [ 28.101402][ T30] audit: type=1400 audit(1786110214.611:156): avc: denied { setopt } for pid=355 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.113635][ T380] Write-error on swap-device (8:0:787504) on swap-device ([ 28.125736][ T30] audit: type=1400 audit(1786110214.611:157): avc: denied { ioctl } for pid=355 comm="syz.3.17" path="socket:[15330]" dev="sockfs" ino=15330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 8:0:787472) Aug[ 28.147109][ T380] Write-error on swap-device (8:0:787512) 7 13:43:34 syz[ 28.156428][ T30] audit: type=1400 audit(1786110214.621:158): avc: denied { write } for pid=355 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 kaller kern.alert kernel: [ 28[ 28.184335][ T380] Write-error on swap-device (8:0:787520) .055832][ T380] Write-error on swap-device (8:0:787480) Aug 7 13:43:34 syzkal[ 28.196540][ T380] Write-error on swap-device (8:0:787528) ler kern.alert kernel: [ 28.068711][ T380] Write-error on swap-device (8:0:787488) Aug 7 13[ 28.210318][ T380] Write-error on swap-device (8:0:787536) :43:34 syzkaller kern.alert kernel: [ 28.091418][ T380] Write-error on swap-device (8:0:78749[ 28.224534][ T380] Write-error on swap-device (8:0:787544) 6) Aug 7 13:43:34 syzkaller kern.alert kernel: [ 28.113635][ T380] Write-error on swap-device (8:0:787504) Aug 7 13:43:34 syzkaller kern.alert kernel: [ 28.147109][ T380] Write-error on swap-device (8:0:787512) Aug 7 13:43:34 syzkaller kern.alert kernel: [ 28.184335][ T380] Write-error on swap-device (8:0:787520) Aug 7 13:43:34 syzkaller kern.alert kernel: [ 28.196540][ T380] Write-error on swap-device (8:0:787528) Aug 7 13:43:34 syzkaller kern.alert kernel: [ 28.210318][ T380] Write-error on swap-device (8:0:787536) Aug 7 13:43:34 syzkaller kern.alert kernel: [ 28.224534][ T380] Write-error on swap-device (8:0:787544) [ 28.303543][ T30] audit: type=1400 audit(1786110214.821:159): avc: denied { write } for pid=385 comm="syz.2.27" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 28.359742][ T30] audit: type=1400 audit(1786110214.851:160): avc: denied { open } for pid=385 comm="syz.2.27" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 28.542925][ T393] binder: 392:393 ioctl c0306201 200000000040 returned -14 [ 28.782848][ T404] input: syz1 as /devices/virtual/input/input4 [ 29.299488][ T39] usb 4-1: Cannot set autoneg [ 29.304456][ T39] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 29.320700][ T39] usb 4-1: USB disconnect, device number 2 [ 29.344475][ T101] udevd[101]: worker [309] terminated by signal 7 (Bus error) [ 29.354254][ T101] udevd[101]: worker [309] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 29.632653][ T101] udevd[101]: worker [330] terminated by signal 7 (Bus error) [ 29.643405][ T101] udevd[101]: worker [330] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 29.712866][ T419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.38'. [ 29.738449][ T419] Zero length message leads to an empty skb [ 29.745247][ T417] UDC core: couldn't find an available UDC or it's busy: -16 [ 29.765182][ T417] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.831846][ T435] netlink: 'syz.2.42': attribute type 12 has an invalid length. [ 29.840387][ T435] netlink: 'syz.2.42': attribute type 29 has an invalid length. [ 29.853091][ T435] netlink: 148 bytes leftover after parsing attributes in process `syz.2.42'. [ 29.862069][ T435] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 29.869905][ T435] netlink: 'syz.2.42': attribute type 2 has an invalid length. [ 29.877483][ T435] netlink: 7 bytes leftover after parsing attributes in process `syz.2.42'. [ 29.893083][ T417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 29.929472][ T417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.37'. [ 29.979911][ T445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.47'. [ 29.996763][ T447] netlink: 136 bytes leftover after parsing attributes in process `syz.2.48'. [ 30.179060][ T477] netlink: 136 bytes leftover after parsing attributes in process `syz.2.61'. [ 30.209905][ T480] capability: warning: `syz.3.64' uses 32-bit capabilities (legacy support in use) [ 30.325539][ T496] input: syz0 as /devices/virtual/input/input5 [ 31.640980][ T543] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 31.649875][ T58] kernel read not supported for file /kmsg (pid: 58 comm: kworker/0:2) [ 31.660841][ T543] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 31.669185][ T543] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 31.677824][ T543] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 31.686284][ T543] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 31.689584][ T348] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.695293][ T543] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 31.710685][ T543] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 31.719025][ T543] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 31.728138][ T543] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 31.733548][ T547] loop5: detected capacity change from 0 to 7 [ 31.736978][ T543] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 31.770421][ T549] fuse: Bad value for 'group_id' [ 31.949476][ T348] usb 4-1: Using ep0 maxpacket: 32 [ 32.109653][ T348] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.200235][ T348] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 32.211717][ T348] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 32.225383][ T348] usb 4-1: config 14 has no interface number 0 [ 32.232279][ T348] usb 4-1: config 14 has no interface number 1 [ 32.238530][ T348] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 32.249954][ T348] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 32.265956][ T348] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 32.277394][ T348] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 32.300956][ T348] usb 4-1: config 14 interface 57 has no altsetting 0 [ 32.307837][ T348] usb 4-1: config 14 interface 228 has no altsetting 0 [ 32.314877][ T417] syz.0.37 (417) used greatest stack depth: 22080 bytes left [ 32.426075][ T586] tipc: Started in network mode [ 32.431406][ T586] tipc: Node identity 7f000001, cluster identity 4711 [ 32.438375][ T586] tipc: Enabling of bearer rejected, failed to enable media [ 32.453020][ T586] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 32.461484][ T586] tipc: Enabled bearer , priority 10 [ 32.467792][ T585] EXT4-fs error: 270 callbacks suppressed [ 32.467808][ T585] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.109: Detected aborted journal [ 32.479858][ T348] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 32.485320][ T585] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.109: Detected aborted journal [ 32.500001][ T348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.505394][ T585] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.109: Detected aborted journal [ 32.525351][ T348] usb 4-1: Product: syz [ 32.532707][ T348] usb 4-1: Manufacturer: syz [ 32.537468][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 32.552852][ T348] usb 4-1: SerialNumber: syz [ 32.558274][ T588] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.110: Detected aborted journal [ 32.570111][ T588] EXT4-fs: 254 callbacks suppressed [ 32.570125][ T588] EXT4-fs (sda1): Remounting filesystem read-only [ 32.583277][ T588] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.110: Detected aborted journal [ 32.591982][ T101] udevd[101]: worker [422] terminated by signal 7 (Bus error) [ 32.595505][ T588] EXT4-fs (sda1): Remounting filesystem read-only [ 32.606117][ T101] udevd[101]: worker [422] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 32.633134][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 32.644580][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 32.652432][ T590] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.111: Detected aborted journal [ 32.656790][ T591] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.112: Detected aborted journal [ 32.674708][ T591] EXT4-fs (sda1): Remounting filesystem read-only [ 32.682749][ T591] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.112: Detected aborted journal [ 32.688476][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 32.697372][ T593] EXT4-fs (sda1): Remounting filesystem read-only [ 32.700715][ T590] EXT4-fs (sda1): Remounting filesystem read-only [ 32.714026][ T591] EXT4-fs (sda1): Remounting filesystem read-only [ 32.721884][ T592] input: syz0 as /devices/virtual/input/input7 [ 32.729962][ T590] EXT4-fs (sda1): Remounting filesystem read-only [ 32.737789][ T593] EXT4-fs (sda1): Remounting filesystem read-only [ 33.029457][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.341816][ T101] udevd[101]: worker [423] terminated by signal 7 (Bus error) [ 33.349655][ T101] udevd[101]: worker [423] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:14.228' [ 33.379976][ T101] udevd[101]: worker [424] terminated by signal 7 (Bus error) [ 33.387553][ T101] udevd[101]: worker [424] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:14.57' [ 33.389737][ T39] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 33.408594][ T39] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 33.424644][ T39] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 33.434868][ T39] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 33.456237][ T39] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 33.510382][ T39] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 33.589492][ T58] tipc: Node number set to 2130706433 [ 33.639488][ T39] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 33.652714][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 33.666259][ T39] usb 2-1: Product: syz [ 33.670557][ T39] usb 2-1: Manufacturer: syz [ 33.679531][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 33.679549][ T30] audit: type=1400 audit(1786110220.191:222): avc: denied { bind } for pid=615 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.709545][ T597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 33.721782][ T30] audit: type=1400 audit(1786110220.241:223): avc: denied { create } for pid=619 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.726246][ T597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 33.782221][ T597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 33.790766][ T597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 33.797787][ T597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 33.805289][ T597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 33.815052][ T30] audit: type=1400 audit(1786110220.331:224): avc: denied { connect } for pid=626 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.844881][ T30] audit: type=1400 audit(1786110220.331:225): avc: denied { write } for pid=626 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.355187][ T101] udevd[101]: worker [607] terminated by signal 7 (Bus error) [ 34.364609][ T58] usb 2-1: USB disconnect, device number 2 [ 34.366201][ T635] input: syz0 as /devices/virtual/input/input8 [ 34.370724][ T101] udevd[101]: worker [607] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 34.409229][ T101] udevd[101]: worker [609] terminated by signal 7 (Bus error) [ 34.425014][ T101] udevd[101]: worker [609] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0' [ 34.690124][ T647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 34.709510][ T647] bridge1: port 1(erspan0) entered blocking state [ 34.716242][ T647] bridge1: port 1(erspan0) entered disabled state [ 34.724027][ T647] device erspan0 entered promiscuous mode [ 34.732290][ T647] bridge1: port 1(erspan0) entered blocking state [ 34.738816][ T647] bridge1: port 1(erspan0) entered forwarding state [ 34.754676][ T647] bridge1: port 1(erspan0) entered disabled state [ 34.767480][ T647] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.775773][ T647] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.384066][ T30] audit: type=1400 audit(1786110221.901:226): avc: denied { mounton } for pid=664 comm="syz.0.136" path="/proc/40/task" dev="proc" ino=17705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 35.455733][ T39] usb 4-1: USB disconnect, device number 3 [ 35.468881][ T668] input: syz0 as /devices/virtual/input/input9 [ 35.494453][ T670] tipc: Started in network mode [ 35.499365][ T670] tipc: Node identity 7f000001, cluster identity 4711 [ 35.506356][ T670] tipc: Enabling of bearer rejected, failed to enable media [ 35.935311][ T683] netlink: 136 bytes leftover after parsing attributes in process `syz.1.143'. [ 35.945007][ T683] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 36.318615][ T695] tipc: Started in network mode [ 36.324109][ T695] tipc: Node identity 7f000001, cluster identity 4711 [ 36.331995][ T695] tipc: Enabling of bearer rejected, failed to enable media [ 36.618430][ T717] input: syz0 as /devices/virtual/input/input11 [ 36.662380][ T721] input: syz0 as /devices/virtual/input/input12 [ 36.686338][ T30] audit: type=1400 audit(1786110223.201:227): avc: denied { execute } for pid=722 comm="syz.3.160" path="/24/cpu.stat" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.786970][ T727] tipc: Started in network mode [ 36.792014][ T727] tipc: Node identity 7f000001, cluster identity 4711 [ 36.798983][ T727] tipc: Enabling of bearer rejected, failed to enable media [ 36.877920][ T734] kvm: pic: level sensitive irq not supported [ 36.878076][ T734] kvm: pic: single mode not supported [ 36.884292][ T734] kvm: pic: level sensitive irq not supported [ 36.890266][ T734] kvm: pic: single mode not supported [ 36.896416][ T734] kvm: pic: level sensitive irq not supported [ 36.904553][ T734] kvm: pic: single mode not supported [ 36.911042][ T734] kvm: pic: level sensitive irq not supported [ 36.917952][ T734] kvm: pic: level sensitive irq not supported [ 36.924964][ T734] kvm: pic: level sensitive irq not supported [ 37.003614][ T745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'. [ 37.035238][ T745] bridge1: port 1(erspan0) entered blocking state [ 37.045433][ T745] bridge1: port 1(erspan0) entered disabled state [ 37.055941][ T745] device erspan0 entered promiscuous mode [ 37.062882][ T745] bridge1: port 1(erspan0) entered blocking state [ 37.069486][ T745] bridge1: port 1(erspan0) entered forwarding state [ 37.080411][ T745] bridge1: port 1(erspan0) entered disabled state [ 37.091407][ T745] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.099531][ T745] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.126892][ T756] fuse: Unknown parameter 'grou00000000000000000000' [ 37.466920][ T30] audit: type=1400 audit(1786110223.981:228): avc: denied { append } for pid=782 comm="syz.2.181" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.471566][ T783] EXT4-fs error: 166 callbacks suppressed [ 37.471620][ T783] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.182: Detected aborted journal [ 37.518878][ T783] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.182: Detected aborted journal [ 37.545808][ T783] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.182: Detected aborted journal [ 37.567709][ T783] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.182: Detected aborted journal [ 37.590258][ T783] EXT4-fs: 144 callbacks suppressed [ 37.590275][ T783] EXT4-fs (sda1): Remounting filesystem read-only [ 37.612710][ T793] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.184: Detected aborted journal [ 37.625465][ T783] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.182: Detected aborted journal [ 37.626068][ T792] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.183: Detected aborted journal [ 37.647507][ T783] EXT4-fs (sda1): Remounting filesystem read-only [ 37.647576][ T783] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.182: Detected aborted journal [ 37.647596][ T783] EXT4-fs (sda1): Remounting filesystem read-only [ 37.671849][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 37.683424][ T793] EXT4-fs (sda1): Remounting filesystem read-only [ 37.697915][ T793] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.184: Detected aborted journal [ 37.707228][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 37.722226][ T793] EXT4-fs (sda1): Remounting filesystem read-only [ 37.732111][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 37.738772][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 37.749697][ T795] EXT4-fs (sda1): Remounting filesystem read-only [ 37.749723][ T794] fuse: Unknown parameter 'grou00000000000000000000' [ 37.769691][ T792] EXT4-fs (sda1): Remounting filesystem read-only [ 37.835566][ T30] audit: type=1326 audit(1786110224.351:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.1.186" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0ff9f0d9 code=0x7ffc0000 [ 37.893056][ T801] kvm: MWAIT instruction emulated as NOP! [ 37.900525][ T30] audit: type=1326 audit(1786110224.381:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.1.186" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0ff9f0d9 code=0x7ffc0000 [ 37.925845][ T30] audit: type=1326 audit(1786110224.381:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.1.186" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0ff9f0d9 code=0x7ffc0000 [ 37.978422][ T798] kvm [792]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x100000080 [ 38.000240][ T798] kvm [792]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 38.014463][ T798] kvm [792]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x80 [ 38.159521][ T348] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 38.529552][ T348] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 38.537798][ T348] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.547980][ T348] usb 2-1: config 0 has no interface number 0 [ 38.554167][ T348] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 38.564247][ T348] usb 2-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.729564][ T348] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 38.738898][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.747090][ T348] usb 2-1: Product: syz [ 38.759132][ T348] usb 2-1: Manufacturer: syz [ 38.763981][ T348] usb 2-1: SerialNumber: syz [ 38.776328][ T348] usb 2-1: config 0 descriptor?? [ 38.781765][ T101] udevd[101]: worker [636] terminated by signal 7 (Bus error) [ 38.790260][ T101] udevd[101]: worker [636] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 38.839923][ T348] plusb: probe of 2-1:0.231 failed with error -22 [ 38.851297][ T101] udevd[101]: worker [637] terminated by signal 7 (Bus error) [ 38.858978][ T101] udevd[101]: worker [637] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.231' [ 39.049129][ T101] udevd[101]: worker [843] terminated by signal 7 (Bus error) [ 39.057483][ T101] udevd[101]: worker [843] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 39.080860][ T848] create_pit_timer: 27 callbacks suppressed [ 39.080874][ T848] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 39.097684][ T848] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 39.108364][ T848] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 39.123016][ T848] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 39.131528][ T848] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 39.139901][ T848] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 39.148512][ T848] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 39.156887][ T848] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 39.165383][ T848] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 39.174083][ T848] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 39.389481][ T39] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 39.423204][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 39.423280][ T30] audit: type=1400 audit(1786110225.941:240): avc: denied { mount } for pid=854 comm="syz.2.203" name="/" dev="pstore" ino=13875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 39.658467][ T30] audit: type=1400 audit(1786110226.171:241): avc: denied { write } for pid=864 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 39.799811][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 39.815749][ T39] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 39.832394][ T39] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 39.849438][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.869052][ T101] udevd[101]: worker [846] terminated by signal 7 (Bus error) [ 39.879053][ T101] udevd[101]: worker [846] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 39.889300][ T852] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 39.941062][ T101] udevd[101]: worker [887] terminated by signal 7 (Bus error) [ 39.948730][ T101] udevd[101]: worker [887] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 39.967849][ T101] udevd[101]: worker [888] terminated by signal 7 (Bus error) [ 39.976399][ T101] udevd[101]: worker [888] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 39.988777][ T890] fuse: Unknown parameter 'group_i00000000000000000000' [ 40.064880][ T897] process 'syz.4.218' launched '/dev/fd/5' with NULL argv: empty string added [ 40.074088][ T30] audit: type=1400 audit(1786110226.591:242): avc: denied { execute_no_trans } for pid=896 comm="syz.4.218" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.499593][ T901] kvm [900]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 40.513735][ T901] kvm [900]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 40.523291][ T901] kvm [900]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 40.904641][ T26] usb 2-1: USB disconnect, device number 3 [ 41.457032][ T931] tipc: Enabling of bearer rejected, failed to enable media [ 41.498210][ T30] audit: type=1400 audit(1786110228.011:243): avc: denied { watch watch_reads } for pid=932 comm="syz.2.230" path="/62/file1" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.807804][ T963] tipc: Enabling of bearer rejected, failed to enable media [ 42.006346][ T30] audit: type=1400 audit(1786110228.521:244): avc: denied { name_bind } for pid=974 comm="syz.2.246" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 42.140148][ T983] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 42.169633][ T307] usb 4-1: USB disconnect, device number 4 [ 42.366401][ T30] audit: type=1400 audit(1786110228.881:245): avc: denied { write } for pid=995 comm="syz.2.254" name="snmp" dev="proc" ino=4026532610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.483145][ T994] EXT4-fs error: 190 callbacks suppressed [ 42.483165][ T994] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.253: Detected aborted journal [ 42.515782][ T1006] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.258: Detected aborted journal [ 42.527285][ T994] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.253: Detected aborted journal [ 42.535755][ T1005] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.257: Detected aborted journal [ 42.569634][ T1005] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.257: Detected aborted journal [ 42.581300][ T1006] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.258: Detected aborted journal [ 42.605005][ T994] EXT4-fs: 179 callbacks suppressed [ 42.605020][ T994] EXT4-fs (sda1): Remounting filesystem read-only [ 42.621351][ T1006] EXT4-fs (sda1): Remounting filesystem read-only [ 42.641125][ T1010] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.259: Detected aborted journal [ 42.653237][ T30] audit: type=1400 audit(1786110229.171:246): avc: denied { read } for pid=1006 comm="syz.3.258" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.656200][ T1007] kvm [1005]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 42.688420][ T1010] EXT4-fs (sda1): Remounting filesystem read-only [ 42.695315][ T994] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.253: Detected aborted journal [ 42.718069][ T1010] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.259: Detected aborted journal [ 42.755078][ T994] EXT4-fs (sda1): Remounting filesystem read-only [ 42.761969][ T1010] EXT4-fs (sda1): Remounting filesystem read-only [ 42.819767][ T1007] kvm [1005]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 42.831239][ T1016] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.260: Detected aborted journal [ 42.864552][ T1016] EXT4-fs (sda1): Remounting filesystem read-only [ 42.890233][ T1016] EXT4-fs (sda1): Remounting filesystem read-only [ 42.927286][ T1018] EXT4-fs (sda1): Remounting filesystem read-only [ 42.945393][ T1018] EXT4-fs (sda1): Remounting filesystem read-only [ 42.967194][ T1019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 43.000455][ T1019] bridge1: port 1(erspan0) entered blocking state [ 43.015801][ T1019] bridge1: port 1(erspan0) entered disabled state [ 43.032967][ T1019] device erspan0 entered promiscuous mode [ 43.046071][ T1019] bridge1: port 1(erspan0) entered blocking state [ 43.052651][ T1019] bridge1: port 1(erspan0) entered forwarding state [ 43.096261][ T1022] EXT4-fs (sda1): Remounting filesystem read-only [ 43.159854][ T1025] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 43.230973][ T1025] syz.2.262 (1025) used greatest stack depth: 21736 bytes left [ 43.332011][ T1034] fuse: Bad value for 'user_id' [ 43.466257][ T1045] tipc: Enabling of bearer rejected, failed to enable media [ 43.692541][ T1053] kvm [1052]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 43.711746][ T1053] kvm [1052]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 43.751150][ T1053] APIC base relocation is unsupported by KVM [ 43.866866][ T1060] kvm [1059]: vcpu0, guest rIP: 0x9136 disabled perfctr wrmsr: 0xc1 data 0x6000003d [ 43.890659][ T1060] kvm [1059]: vcpu0, guest rIP: 0x9136 disabled perfctr wrmsr: 0xc2 data 0x6000003c [ 43.909517][ T1060] kvm [1059]: vcpu0, guest rIP: 0x9136 ignored wrmsr: 0x11e data 0x600000e0 [ 44.266095][ T1060] kvm [1059]: vcpu0, guest rIP: 0x9136 disabled perfctr wrmsr: 0x186 data 0x60000078 [ 44.279673][ T1060] kvm [1059]: vcpu0, guest rIP: 0x9136 disabled perfctr wrmsr: 0x187 data 0x60000077 [ 44.298391][ T1060] kvm [1059]: vcpu0, guest rIP: 0x9136 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x60000025, nop [ 44.540997][ T1081] tipc: Enabling of bearer rejected, failed to enable media [ 45.032160][ T1104] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 45.341681][ T1114] kvm [1113]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc1 data 0x400 [ 45.363592][ T1114] kvm [1113]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc2 data 0x400 [ 45.401884][ T1114] kvm [1113]: vcpu0, guest rIP: 0x912c ignored wrmsr: 0x11e data 0x400 [ 45.462833][ T1114] kvm [1113]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x186 data 0xb8004200000400 [ 45.484126][ T1114] kvm [1113]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x187 data 0xb8004200000400 [ 45.504859][ T1124] fuse: Bad value for 'fd' [ 45.618890][ T1133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'. [ 45.636176][ T1133] bridge1: port 1(erspan0) entered blocking state [ 45.829519][ T1133] bridge1: port 1(erspan0) entered disabled state [ 45.906779][ T1133] device erspan0 entered promiscuous mode [ 45.967434][ T1133] bridge1: port 1(erspan0) entered blocking state [ 45.973962][ T1133] bridge1: port 1(erspan0) entered forwarding state [ 46.086625][ T30] audit: type=1400 audit(1786110232.601:247): avc: denied { create } for pid=1140 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 46.757948][ T1179] tipc: Enabling of bearer rejected, failed to enable media [ 46.784708][ T1181] device erspan0 left promiscuous mode [ 46.791202][ T1181] bridge1: port 1(erspan0) entered disabled state [ 46.805495][ T1183] device syzkaller0 entered promiscuous mode [ 46.957455][ T1188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'. [ 47.426184][ T1203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=1203 comm=syz.3.326 [ 47.501265][ T1207] EXT4-fs error: 177 callbacks suppressed [ 47.501283][ T1207] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.328: Detected aborted journal [ 47.526304][ T1207] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.328: Detected aborted journal [ 47.639508][ T1204] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.327: Detected aborted journal [ 47.672270][ T1204] EXT4-fs: 169 callbacks suppressed [ 47.672288][ T1204] EXT4-fs (sda1): Remounting filesystem read-only [ 47.726595][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 47.759457][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 47.770225][ T1211] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.329: Detected aborted journal [ 47.807319][ T1211] EXT4-fs (sda1): Remounting filesystem read-only [ 47.809658][ T1212] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.330: Detected aborted journal [ 47.822944][ T1211] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.329: Detected aborted journal [ 47.838167][ T1211] EXT4-fs (sda1): Remounting filesystem read-only [ 47.855892][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 47.890514][ T1217] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.331: Detected aborted journal [ 47.898263][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 47.913853][ T1212] EXT4-fs (sda1): Remounting filesystem read-only [ 47.924452][ T1217] EXT4-fs (sda1): Remounting filesystem read-only [ 47.942663][ T1218] EXT4-fs (sda1): Remounting filesystem read-only [ 47.950871][ T1212] EXT4-fs (sda1): Remounting filesystem read-only [ 47.958039][ T1218] EXT4-fs (sda1): Remounting filesystem read-only [ 47.958310][ T1217] EXT4-fs (sda1): Remounting filesystem read-only [ 47.985727][ T1219] device syzkaller0 entered promiscuous mode [ 49.120957][ T1235] tipc: Started in network mode [ 49.126033][ T1235] tipc: Node identity 7f000001, cluster identity 4711 [ 49.170456][ T1235] tipc: Enabling of bearer rejected, failed to enable media [ 49.296364][ T1232] kvm [1231]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 49.320876][ T1232] kvm [1231]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 49.333946][ T1232] kvm [1231]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 49.469495][ T1265] end_swap_bio_write: 6 callbacks suppressed [ 49.469517][ T1265] Write-error on swap-device (8:0:788008) Aug 7 13:43:56 syzkaller kern.alert kernel: [ 49.469517][ T1265] Write-error on swap-device (8:0:788008) [ 49.515147][ T1265] Write-error on swap-device (8:0:788016) [ 49.521578][ T1265] Write-error on swap-device (8:0:788024) [ 49.527809][ T1265] Write-error on swap-device (8:0:788032) [ 49.534230][ T1265] Write-error on swap-device (8:0:788040) Aug 7 13:43:56 syzkaller kern.alert kernel: [ 49.515147][ T1265] Write-error on swap-device (8:0:788016) Aug 7 13:43:56 syzkaller kern.alert kernel: [ 49.521578][ T1265][ 49.569811][ T1265] Write-error on swap-device (8:0:788048) Write-error on swap-device (8:0:788024) Aug 7 13:43:56 syzkaller kern.alert kernel: [ 49.527809][ T1265] Write-error on swap-device (8:0:788032) Aug 7 13:43:56 syzkaller kern.alert kernel: [ 49.534230][ T1265] Write-error on swap-device (8:0:788040) [ 49.659121][ T1265] Write-error on swap-device (8:0:788056) Aug 7 13:43:56 syzkaller kern.alert kernel: [ 49.569811][ T1265] Write-error on swap-device (8:0:788048) Aug 7 13:43:56 syzkaller kern.alert kernel: [ 49.659121][ T1265] Write-error on swap-device (8:0:788056) [ 49.769970][ T1265] Write-error on swap-device (8:0:788064) [ 49.830622][ T1265] Write-error on swap-device (8:0:787600) [ 49.836482][ T1265] Write-error on swap-device (8:0:787608) Aug 7 13:43:56 syzkaller kern.alert kernel: [ 49.769970][ T1265] Write-error on swap-device (8:0:788064) Aug 7 13:43:56 syzkaller kern.alert kernel: [ 49.830622][ T1265] Write-error on swap-device (8:0:787600) Aug 7 13:43:56 syzkaller kern.alert kernel: [ 49.836482][ T1265] Write-error on swap-device (8:0:787608) [ 49.877054][ T1272] device syzkaller0 entered promiscuous mode [ 50.577378][ T1293] kvm [1292]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc1 data 0x400 [ 50.588490][ T1293] kvm [1292]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc2 data 0x400 [ 50.617209][ T1293] kvm [1292]: vcpu0, guest rIP: 0x912c ignored wrmsr: 0x11e data 0x400 [ 50.634061][ T1293] kvm [1292]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x186 data 0xb8004200000400 [ 50.647636][ T1293] kvm [1292]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x187 data 0xb8004200000400 [ 50.939707][ T1313] input: syz1 as /devices/virtual/input/input15 [ 50.953117][ T1308] device syzkaller0 entered promiscuous mode [ 52.064084][ T1351] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 52.073421][ T1351] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 52.438538][ T1356] device syzkaller0 entered promiscuous mode [ 52.513672][ T1364] EXT4-fs error: 156 callbacks suppressed [ 52.513689][ T1364] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.379: Detected aborted journal [ 52.532544][ T1364] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.379: Detected aborted journal [ 52.546426][ T1367] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.378: Detected aborted journal [ 52.551539][ T1368] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.380: Detected aborted journal [ 52.563081][ T1367] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.378: Detected aborted journal [ 52.604879][ T1370] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.381: Detected aborted journal [ 52.620740][ T1370] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.381: Detected aborted journal [ 52.661022][ T1359] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.376: Detected aborted journal [ 52.726663][ T1376] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.383: Detected aborted journal [ 52.749537][ T1376] EXT4-fs: 137 callbacks suppressed [ 52.749553][ T1376] EXT4-fs (sda1): Remounting filesystem read-only [ 52.762275][ T1376] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.383: Detected aborted journal [ 52.774251][ T1378] EXT4-fs (sda1): Remounting filesystem read-only [ 52.781332][ T1376] EXT4-fs (sda1): Remounting filesystem read-only [ 52.789024][ T1378] EXT4-fs (sda1): Remounting filesystem read-only [ 52.812171][ T1378] EXT4-fs (sda1): Remounting filesystem read-only [ 52.821495][ T1380] EXT4-fs (sda1): Remounting filesystem read-only [ 52.829846][ T1381] fuse: Unknown parameter 'use00000000000000000000' [ 52.838915][ T1380] EXT4-fs (sda1): Remounting filesystem read-only [ 52.859596][ T1378] EXT4-fs (sda1): Remounting filesystem read-only [ 52.876831][ T1384] EXT4-fs (sda1): Remounting filesystem read-only [ 52.883551][ T1378] EXT4-fs (sda1): Remounting filesystem read-only [ 52.899490][ T1065] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 52.951188][ T1393] input: syz1 as /devices/virtual/input/input16 [ 52.964066][ T1397] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 53.260046][ T1410] futex_wake_op: syz.4.395 tries to shift op by -1; fix this program [ 53.269632][ T1065] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 53.277855][ T1065] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.289518][ T1065] usb 3-1: config 0 has no interface number 0 [ 53.295691][ T1065] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 53.307621][ T1065] usb 3-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.348763][ T1415] fuse: Unknown parameter 'use00000000000000000000' [ 53.438483][ T30] audit: type=1326 audit(1786110239.951:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.400" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb96ec0d9 code=0x7ffc0000 [ 53.474529][ T30] audit: type=1326 audit(1786110239.951:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.400" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb96ec0d9 code=0x7ffc0000 [ 53.501277][ T30] audit: type=1326 audit(1786110239.951:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.400" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb96ec0d9 code=0x7ffc0000 [ 53.526598][ T1065] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 53.535975][ T1065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.545135][ T1065] usb 3-1: Product: syz [ 53.549711][ T1065] usb 3-1: Manufacturer: syz [ 53.554520][ T1065] usb 3-1: SerialNumber: syz [ 53.567972][ T1065] usb 3-1: config 0 descriptor?? [ 53.573585][ T101] udevd[101]: worker [933] terminated by signal 7 (Bus error) [ 53.581188][ T101] udevd[101]: worker [933] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 53.591696][ T30] audit: type=1326 audit(1786110239.951:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.400" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8fb96ec0d9 code=0x7ffc0000 [ 53.616546][ T1371] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 53.624967][ T30] audit: type=1326 audit(1786110239.951:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.400" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb96ec0d9 code=0x7ffc0000 [ 53.652204][ T1065] plusb: probe of 3-1:0.231 failed with error -22 [ 53.667449][ T101] udevd[101]: worker [886] terminated by signal 7 (Bus error) [ 53.675502][ T30] audit: type=1326 audit(1786110239.951:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.400" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb96ec0d9 code=0x7ffc0000 [ 53.700752][ T101] udevd[101]: worker [886] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.231' [ 53.731832][ T101] udevd[101]: worker [1427] terminated by signal 7 (Bus error) [ 53.739655][ T30] audit: type=1326 audit(1786110239.951:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.400" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb96ec0d9 code=0x7ffc0000 [ 53.764699][ T101] udevd[101]: worker [1427] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 53.775270][ T185] EXT4-fs warning: 21 callbacks suppressed [ 53.775285][ T185] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1083: inode #121: lblock 0: comm crond: error -5 reading directory block [ 53.826859][ T30] audit: type=1326 audit(1786110239.951:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.400" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f8fb96ec0d9 code=0x7ffc0000 [ 53.866187][ T30] audit: type=1326 audit(1786110239.951:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.400" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb96ec0d9 code=0x7ffc0000 [ 53.913107][ T30] audit: type=1326 audit(1786110239.951:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.4.400" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8fb96ec0d9 code=0x7ffc0000 [ 53.977690][ T1447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 54.012133][ T1447] bridge1: port 1(erspan0) entered disabled state [ 54.044344][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.073595][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.136761][ T1460] device syzkaller0 entered promiscuous mode [ 54.237160][ T1473] loop4: detected capacity change from 0 to 512 [ 54.334027][ T1473] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 54.351783][ T1473] ext4 filesystem being mounted at /120/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.340852][ T1503] device syzkaller0 entered promiscuous mode [ 55.555698][ T307] usb 3-1: USB disconnect, device number 2 [ 55.571511][ T1516] loop2: detected capacity change from 0 to 512 [ 55.642309][ T1516] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.435: inode has both inline data and extents flags [ 55.655970][ T1516] EXT4-fs (loop2): Remounting filesystem read-only [ 55.662787][ T1516] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.435: couldn't read orphan inode 15 (err -117) [ 55.675048][ T1516] EXT4-fs (loop2): Remounting filesystem read-only [ 55.681841][ T1516] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,usrquota,errors=remount-ro,grpid,. Quota mode: writeback. [ 55.709837][ T1516] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.435: Directory hole found for htree leaf block 0 [ 55.724003][ T1516] EXT4-fs (loop2): Remounting filesystem read-only [ 55.733562][ T1516] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.435: Directory hole found for htree leaf block 0 [ 55.747595][ T1516] EXT4-fs (loop2): Remounting filesystem read-only [ 55.789441][ T58] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 55.822342][ T1532] loop2: detected capacity change from 0 to 512 [ 55.879296][ T1532] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 55.892608][ T1532] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.899655][ T302] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 56.004315][ T1544] device syzkaller0 entered promiscuous mode [ 56.159516][ T58] usb 2-1: config index 0 descriptor too short (expected 8251, got 59) [ 56.178047][ T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.215968][ T58] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 56.329582][ T58] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.348856][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 56.365459][ T58] usb 2-1: SerialNumber: syz [ 56.380748][ T101] udevd[101]: worker [1428] terminated by signal 7 (Bus error) [ 56.388618][ T101] udevd[101]: worker [1428] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 56.420658][ T58] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 56.447538][ T101] udevd[101]: worker [1570] terminated by signal 7 (Bus error) [ 56.457429][ T101] udevd[101]: worker [1570] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0' [ 56.679621][ T307] usb 2-1: USB disconnect, device number 4 [ 56.799496][ T302] usb 4-1: Using ep0 maxpacket: 32 [ 56.930078][ T302] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 56.939050][ T302] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 56.947900][ T302] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 56.962191][ T302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.973939][ T302] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 56.989494][ T302] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.005818][ T302] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.015183][ T302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.032736][ T302] usb 4-1: config 0 descriptor?? [ 57.056716][ T1586] loop2: detected capacity change from 0 to 2048 [ 57.100612][ T1586] loop2: p2 p3 < > p4 < p5 > [ 57.105409][ T1586] loop2: partition table partially beyond EOD, truncated [ 57.120361][ T1586] loop2: p3 start 4225 is beyond EOD, truncated [ 57.285178][ T302] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.306541][ T1604] loop1: detected capacity change from 0 to 512 [ 57.319538][ T302] usb 4-1: USB disconnect, device number 5 [ 57.349700][ T302] usblp0: removed [ 57.443288][ T1604] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.464647][ T1604] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.588178][ T1601] EXT4-fs error: 205 callbacks suppressed [ 57.588196][ T1601] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.466: Detected aborted journal [ 57.681786][ T1603] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.467: Detected aborted journal [ 57.749549][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 57.761836][ T1617] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.471: Detected aborted journal [ 57.791028][ T277] EXT4-fs: 178 callbacks suppressed [ 57.791046][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 57.803848][ T1601] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.466: Detected aborted journal [ 57.814929][ T1617] EXT4-fs (sda1): Remounting filesystem read-only [ 57.829873][ T1617] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.471: Detected aborted journal [ 57.845043][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 57.857346][ T1601] EXT4-fs (sda1): Remounting filesystem read-only [ 57.872094][ T1617] EXT4-fs (sda1): Remounting filesystem read-only [ 57.887228][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 57.952019][ T1601] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.466: Detected aborted journal [ 57.967127][ T1620] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 57.984893][ T1601] EXT4-fs (sda1): Remounting filesystem read-only [ 58.000376][ T1601] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.466: Detected aborted journal [ 58.023278][ T1601] EXT4-fs (sda1): Remounting filesystem read-only [ 58.030545][ T1617] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.471: Detected aborted journal [ 58.047926][ T1617] EXT4-fs (sda1): Remounting filesystem read-only [ 58.055872][ T1601] EXT4-fs (sda1): Remounting filesystem read-only [ 58.070275][ T1601] EXT4-fs (sda1): Remounting filesystem read-only [ 58.403620][ T1635] device syzkaller0 entered promiscuous mode [ 58.464221][ T1643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 58.477106][ T1643] device erspan0 left promiscuous mode [ 58.482986][ T1643] bridge1: port 1(erspan0) entered disabled state [ 58.494200][ T1643] bridge2: port 1(erspan0) entered blocking state [ 58.501293][ T1643] bridge2: port 1(erspan0) entered disabled state [ 58.508606][ T1643] device erspan0 entered promiscuous mode [ 58.515036][ T1643] bridge2: port 1(erspan0) entered blocking state [ 58.521546][ T1643] bridge2: port 1(erspan0) entered forwarding state [ 58.530235][ T1646] bridge2: port 1(erspan0) entered disabled state [ 58.557136][ T1650] fuse: Unknown parameter 'user_id00000000000000000000' [ 58.564344][ T302] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 58.583302][ T1646] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.598871][ T1646] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.633540][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 58.633556][ T30] audit: type=1326 audit(1786110245.151:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.3.486" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd861de0d9 code=0x0 [ 58.673316][ T1654] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 58.689516][ T1654] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 58.730908][ T1665] device syzkaller0 entered promiscuous mode [ 59.059497][ T1065] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 59.299438][ T1065] usb 3-1: Using ep0 maxpacket: 32 [ 59.419480][ T1065] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 59.427984][ T1065] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 59.436704][ T1065] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 59.445931][ T1065] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 59.456179][ T1065] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 59.466034][ T1065] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 59.485467][ T1065] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 59.494679][ T1065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.509835][ T1065] usb 3-1: config 0 descriptor?? [ 59.551787][ T1686] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 59.760652][ T1065] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 59.771568][ T1709] device syzkaller0 entered promiscuous mode [ 59.789222][ T1065] usb 3-1: USB disconnect, device number 3 [ 59.805373][ T1065] usblp0: removed [ 59.873543][ T1714] loop0: detected capacity change from 0 to 512 [ 60.061446][ T1714] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.098405][ T1714] ext4 filesystem being mounted at /88/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.369558][ T1065] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 60.379442][ T6] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 60.609447][ T1065] usb 3-1: Using ep0 maxpacket: 32 [ 60.739511][ T6] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 60.749654][ T1065] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 60.751490][ T6] usb 5-1: config 0 has no interface number 0 [ 60.767957][ T1065] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 60.776821][ T1065] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 60.787839][ T1065] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.789790][ T6] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 60.798455][ T1065] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 60.818877][ T1065] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 60.829010][ T6] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.833254][ T1065] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 60.851790][ T1065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.865728][ T1065] usb 3-1: config 0 descriptor?? [ 61.009549][ T6] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 61.019984][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.028021][ T6] usb 5-1: Product: syz [ 61.032337][ T6] usb 5-1: Manufacturer: syz [ 61.036962][ T6] usb 5-1: SerialNumber: syz [ 61.049550][ T6] usb 5-1: config 0 descriptor?? [ 61.056373][ T101] udevd[101]: worker [1572] terminated by signal 7 (Bus error) [ 61.064109][ T101] udevd[101]: worker [1572] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 61.089568][ T1716] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.110196][ T6] plusb: probe of 5-1:0.231 failed with error -22 [ 61.121334][ T1065] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 61.134723][ T101] udevd[101]: worker [1590] terminated by signal 7 (Bus error) [ 61.144818][ T101] udevd[101]: worker [1590] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.231' [ 61.184751][ T101] udevd[101]: worker [1596] terminated by signal 7 (Bus error) [ 61.204351][ T101] udevd[101]: worker [1596] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 61.314715][ T30] audit: type=1400 audit(1786110247.831:273): avc: denied { read write } for pid=1675 comm="syz.2.494" name="lp0" dev="devtmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 61.382032][ T30] audit: type=1400 audit(1786110247.831:274): avc: denied { open } for pid=1675 comm="syz.2.494" path="/dev/usb/lp0" dev="devtmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 61.419131][ T348] usb 3-1: USB disconnect, device number 4 [ 61.429418][ C1] usblp0: nonzero read bulk status received: -108 [ 61.436076][ T1676] usblp0: error -108 reading from printer [ 61.442114][ T1748] usblp0: error -19 reading from printer [ 61.968252][ T1754] loop0: detected capacity change from 0 to 131072 [ 61.983625][ T1754] F2FS-fs (loop0): invalid crc value [ 62.009321][ T1754] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.045726][ T1754] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 62.055029][ T1754] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 62.089474][ T1065] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 62.115803][ T30] audit: type=1400 audit(1786110248.631:275): avc: denied { create } for pid=1753 comm="syz.0.519" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.138957][ T30] audit: type=1400 audit(1786110248.651:276): avc: denied { read write } for pid=1753 comm="syz.0.519" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.161925][ T30] audit: type=1400 audit(1786110248.651:277): avc: denied { open } for pid=1753 comm="syz.0.519" path="/91/file1/file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.359471][ T1065] usb 3-1: Using ep0 maxpacket: 8 [ 62.532048][ T1065] usb 3-1: unable to get BOS descriptor or descriptor too short [ 62.591676][ T1784] EXT4-fs error: 126 callbacks suppressed [ 62.591692][ T1784] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.528: Detected aborted journal [ 62.613239][ T1784] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.528: Detected aborted journal [ 62.615532][ T1789] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.530: Detected aborted journal [ 62.624859][ T1065] usb 3-1: config 7 has an invalid interface number: 171 but max is 0 [ 62.643901][ T1784] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.528: Detected aborted journal [ 62.655545][ T1784] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.528: Detected aborted journal [ 62.666826][ T1065] usb 3-1: config 7 has no interface number 0 [ 62.671711][ T1789] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.530: Detected aborted journal [ 62.673654][ T1065] usb 3-1: config 7 interface 171 has no altsetting 0 [ 62.693609][ T1789] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.530: Detected aborted journal [ 62.708224][ T1784] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.528: Detected aborted journal [ 62.727272][ T1789] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.530: Detected aborted journal [ 62.738607][ T1789] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.530: Detected aborted journal [ 62.839477][ T1065] usb 3-1: string descriptor 0 read error: -71 [ 62.845869][ T1065] usb 3-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=29.5c [ 62.857105][ T1748] usblp0: removed [ 62.879043][ T1796] EXT4-fs: 124 callbacks suppressed [ 62.879059][ T1796] EXT4-fs (sda1): Remounting filesystem read-only [ 62.884455][ T1065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.908217][ T307] usb 5-1: USB disconnect, device number 2 [ 62.915452][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 62.926439][ T1789] EXT4-fs (sda1): Remounting filesystem read-only [ 62.937286][ T1797] EXT4-fs (sda1): Remounting filesystem read-only [ 62.939730][ T1065] usb 3-1: can't set config #7, error -71 [ 62.952326][ T1797] EXT4-fs (sda1): Remounting filesystem read-only [ 62.963500][ T1796] EXT4-fs (sda1): Remounting filesystem read-only [ 62.968872][ T1065] usb 3-1: USB disconnect, device number 5 [ 62.973357][ T1797] EXT4-fs (sda1): Remounting filesystem read-only [ 62.984268][ T101] udevd[101]: worker [1573] terminated by signal 7 (Bus error) [ 63.002108][ T101] udevd[101]: worker [1573] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 63.003498][ T1799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 63.024542][ T1797] EXT4-fs (sda1): Remounting filesystem read-only [ 63.044314][ T1797] EXT4-fs (sda1): Remounting filesystem read-only [ 63.067070][ T1797] EXT4-fs (sda1): Remounting filesystem read-only [ 63.197960][ T1812] fuse: Unknown parameter '00000000000000000003' [ 63.302583][ T30] audit: type=1400 audit(1786110249.821:278): avc: denied { search } for pid=1818 comm="syz.2.537" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 63.447887][ T1838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 63.469038][ T30] audit: type=1326 audit(1786110249.981:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1839 comm="syz.3.547" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd861de0d9 code=0x7ffc0000 [ 63.501986][ T30] audit: type=1326 audit(1786110249.981:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1839 comm="syz.3.547" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd861de0d9 code=0x7ffc0000 [ 63.555899][ T1845] fuse: Unknown parameter '00000000000000000003' [ 63.564318][ T1846] end_swap_bio_write: 1282 callbacks suppressed [ 63.564335][ T1846] Write-error on swap-device (8:0:795128) Aug 7 13:44:10 syzkaller kern.alert kernel: [ 63.564335][ T1846] Write-error on swap-device (8:0:795128) [ 63.591104][ T1846] Write-error on swap-device (8:0:795136) [ 63.597299][ T30] audit: type=1326 audit(1786110250.021:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1839 comm="syz.3.547" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd861de0d9 code=0x7ffc0000 Aug 7 13:44:10 syzkaller kern.alert kernel: [ 63.591104][ T1846] Write-error on swap-device (8:0:795136) [ 63.648078][ T1852] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 63.668180][ T1854] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.676295][ T1854] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.768093][ T1872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 63.888690][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 63.888707][ T30] audit: type=1400 audit(1786110250.401:293): avc: denied { unlink } for pid=288 comm="syz-executor" name="file4" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.900916][ T1889] device erspan0 left promiscuous mode [ 63.929732][ T1889] bridge2: port 1(erspan0) entered disabled state [ 64.078942][ T1912] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 64.246105][ T1937] KVM: debugfs: duplicate directory 1937-4 [ 64.303516][ T1947] fuse: Unknown parameter '00000000000000000003' [ 64.335276][ T1950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 64.561237][ T1971] kvm: pic: level sensitive irq not supported [ 64.561321][ T1971] kvm: pic: non byte read [ 64.571844][ T30] audit: type=1400 audit(1786110251.081:294): avc: denied { watch } for pid=1970 comm="syz.4.594" path="/159/file0" dev="tmpfs" ino=900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.598042][ T1971] kvm: pic: level sensitive irq not supported [ 64.598111][ T1971] kvm: pic: non byte read [ 64.690168][ T1981] fuse: Unknown parameter '00000000000000000003' [ 64.711436][ T1983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 65.791278][ T30] audit: type=1400 audit(1786110252.311:295): avc: denied { setcurrent } for pid=2032 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.111013][ T2049] Write-error on swap-device (8:0:795872) [ 66.136064][ T2049] Write-error on swap-device (8:0:795880) Aug 7 13:44:12 syzkaller kern.alert kernel: [ 66.111013][ T2049] Write-error on swap-device (8:0:795872) Aug[ 66.152500][ T2049] Write-error on swap-device (8:0:795888) 7 13:44:12 syzkaller kern.alert kernel: [ 66.136064][ T2049] Write-error on swap-device (8:0:795880) Aug 7 13:44:12 syzkaller kern.alert kernel: [ 66.152500][ T2049] Write-error on swap-device (8:0:795888) [ 66.178855][ T2049] Write-error on swap-device (8:0:795896) Aug 7 13:44:12 syzkaller kern.alert kernel: [ 66.178855][ T2049] Write-error on swap-device ([ 66.193021][ T2049] Write-error on swap-device (8:0:795904) 8:0:795896) Aug 7 13:44:12 syzkaller kern.alert kernel: [ [ 66.204128][ T2049] Write-error on swap-device (8:0:795912) 66.193021][ T2049] Write-error on swap-device (8:0:795904) Aug 7 13:44:12 syzkaller kern.alert kernel: [ 66.204128][ T2049] Write-error on swap-device (8:0:795912) [ 66.226972][ T2049] Write-error on swap-device (8:0:795920) Aug 7 13:44:12 syzkaller kern.alert kernel: [ 66.226972][ T2049] Write-error [ 66.239603][ T2049] Write-error on swap-device (8:0:795928) on swap-device (8:0:795920) Aug 7 13:44:12 syzkaller kern.alert kernel: [ 66.239603][ T2049] Write-error on swap-device (8:0:795928) [ 66.411454][ T2073] fuse: Unknown parameter 'fd00000000000000000003' [ 66.988432][ T2103] loop0: detected capacity change from 0 to 128 [ 66.999531][ T302] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.015804][ T2105] loop1: detected capacity change from 0 to 128 [ 67.060016][ T2105] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.072461][ T2105] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.082972][ T30] audit: type=1400 audit(1786110253.601:296): avc: denied { mount } for pid=2104 comm="syz.1.641" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 67.121184][ T30] audit: type=1400 audit(1786110253.641:297): avc: denied { mounton } for pid=2104 comm="syz.1.641" path="/97/bus/file0" dev="loop1" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 67.144631][ T432] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.146884][ T30] audit: type=1400 audit(1786110253.661:298): avc: denied { remount } for pid=2104 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 67.175407][ T2105] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.239617][ T302] usb 5-1: Using ep0 maxpacket: 32 [ 67.359854][ T302] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 67.368336][ T302] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 67.377377][ T302] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 67.386814][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.397357][ T302] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 67.407803][ T302] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 67.424596][ T302] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 67.434134][ T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.450147][ T302] usb 5-1: config 0 descriptor?? [ 67.605872][ T2140] EXT4-fs error: 252 callbacks suppressed [ 67.605889][ T2140] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.654: Detected aborted journal [ 67.624350][ T2140] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.654: Detected aborted journal [ 67.644303][ T2136] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.653: Detected aborted journal [ 67.663046][ T2142] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.655: Detected aborted journal [ 67.675316][ T2142] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.655: Detected aborted journal [ 67.696290][ T2090] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.636: Detected aborted journal [ 67.730534][ T302] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 67.747538][ T1801] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 67.761221][ T302] usb 5-1: USB disconnect, device number 3 [ 67.771347][ T1801] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 67.785544][ T302] usblp0: removed [ 67.792065][ T2145] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.657: Detected aborted journal [ 67.803735][ T1801] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 67.819088][ T2146] loop3: detected capacity change from 0 to 128 [ 67.830324][ T30] audit: type=1400 audit(1786110254.351:299): avc: denied { write } for pid=2147 comm="syz.0.656" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 67.900542][ T2150] EXT4-fs: 228 callbacks suppressed [ 67.900559][ T2150] EXT4-fs (sda1): Remounting filesystem read-only [ 67.913971][ T2150] EXT4-fs (sda1): Remounting filesystem read-only [ 67.932484][ T2153] EXT4-fs (sda1): Remounting filesystem read-only [ 67.939886][ T2153] EXT4-fs (sda1): Remounting filesystem read-only [ 67.948072][ T2154] loop2: detected capacity change from 0 to 256 [ 67.972172][ T2150] EXT4-fs (sda1): Remounting filesystem read-only [ 67.996476][ T30] audit: type=1400 audit(1786110254.511:300): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 68.035751][ T2156] EXT4-fs (sda1): Remounting filesystem read-only [ 68.043415][ T2156] EXT4-fs (sda1): Remounting filesystem read-only [ 68.062357][ T2158] EXT4-fs (sda1): Remounting filesystem read-only [ 68.070548][ T2158] EXT4-fs (sda1): Remounting filesystem read-only [ 68.080800][ T2158] EXT4-fs (sda1): Remounting filesystem read-only [ 68.274267][ T30] audit: type=1400 audit(1786110254.791:301): avc: denied { mount } for pid=2172 comm="syz.2.666" name="/" dev="ramfs" ino=33020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.296549][ T30] audit: type=1400 audit(1786110254.791:302): avc: denied { mounton } for pid=2172 comm="syz.2.666" path="/146/file0" dev="ramfs" ino=33020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 68.319167][ T302] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.365294][ T2177] loop2: detected capacity change from 0 to 8192 [ 68.423285][ T2177] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.453896][ T2179] overlayfs: failed to set xattr on upper [ 68.459771][ T2179] overlayfs: ...falling back to index=off,metacopy=off. [ 68.466885][ T2179] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 68.561894][ T302] usb 5-1: Using ep0 maxpacket: 32 [ 68.679912][ T302] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 68.699844][ T302] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 68.723932][ T302] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 68.807242][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.844878][ T302] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 68.875482][ T302] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.919592][ T302] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 68.941662][ T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.059827][ T302] usb 5-1: config 0 descriptor?? [ 69.248599][ T2243] netlink: 204 bytes leftover after parsing attributes in process `syz.0.697'. [ 69.320276][ T302] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 69.604949][ T302] usb 5-1: USB disconnect, device number 4 [ 69.609448][ C0] usblp0: nonzero read bulk status received: -71 [ 69.617178][ T2252] usblp0: error -71 reading from printer [ 69.623731][ T2091] usblp0: error -19 reading from printer [ 69.755389][ T2262] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 69.795773][ T2262] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 69.806823][ T2266] overlayfs: failed to clone lowerpath [ 69.854285][ T2272] loop2: detected capacity change from 0 to 16 [ 69.898738][ T2272] erofs: (device loop2): mounted with root inode @ nid 36. [ 69.931440][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 69.931457][ T30] audit: type=1400 audit(1786110256.451:306): avc: denied { ioctl } for pid=2271 comm="syz.2.707" path="/159/bus/file2" dev="loop2" ino=89 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.988014][ T2284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 70.181812][ T30] audit: type=1400 audit(1786110256.701:307): avc: denied { mount } for pid=2298 comm="syz.3.718" name="/" dev="ramfs" ino=33708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.217056][ T30] audit: type=1400 audit(1786110256.731:308): avc: denied { remount } for pid=2301 comm="syz.3.719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.279559][ T302] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.349448][ T307] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 70.519441][ T302] usb 5-1: Using ep0 maxpacket: 8 [ 70.555565][ T2310] loop0: detected capacity change from 0 to 16 [ 70.570694][ T2310] erofs: (device loop0): mounted with root inode @ nid 36. [ 70.609439][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 70.625525][ T2312] UDC core: couldn't find an available UDC or it's busy: -16 [ 70.633156][ T2312] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.679536][ T302] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.729468][ T307] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 70.737943][ T307] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 70.746665][ T307] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 70.755714][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.763439][ T302] usb 5-1: config 7 has an invalid interface number: 171 but max is 0 [ 70.765401][ T307] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.774603][ T302] usb 5-1: config 7 has no interface number 0 [ 70.783272][ T307] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.790460][ T302] usb 5-1: config 7 interface 171 has no altsetting 0 [ 70.802667][ T307] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 70.818392][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.827468][ T307] usb 3-1: config 0 descriptor?? [ 71.016167][ T2090] usblp0: removed [ 71.029602][ T302] usb 5-1: string descriptor 0 read error: -71 [ 71.037215][ T302] usb 5-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=29.5c [ 71.048504][ T302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.064191][ T101] udevd[101]: worker [2108] terminated by signal 7 (Bus error) [ 71.072217][ T101] udevd[101]: worker [2108] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 71.082907][ T302] usb 5-1: can't set config #7, error -71 [ 71.092701][ T302] usb 5-1: USB disconnect, device number 5 [ 71.098949][ T307] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 71.114027][ T2322] syz.1.728 uses obsolete (PF_INET,SOCK_PACKET) [ 71.137067][ T307] usb 3-1: USB disconnect, device number 6 [ 71.169783][ T307] usblp0: removed [ 71.291769][ T2341] device erspan0 left promiscuous mode [ 71.297722][ T2341] bridge1: port 1(erspan0) entered disabled state [ 71.368702][ T2350] xt_hashlimit: size too large, truncated to 1048576 [ 71.589529][ T2357] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 71.601845][ T2357] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 71.616249][ T2357] overlayfs: overlapping lowerdir path [ 71.639409][ T307] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 71.755377][ T2366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=2366 comm=syz.3.744 [ 71.889436][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 71.940761][ T30] audit: type=1400 audit(1786110258.461:309): avc: denied { write } for pid=2379 comm="syz.4.751" name="c.1" dev="configfs" ino=15107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.983730][ T30] audit: type=1400 audit(1786110258.481:310): avc: denied { add_name } for pid=2379 comm="syz.4.751" name="ecm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.019500][ T307] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 72.038047][ T307] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 72.048133][ T307] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 72.058003][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.075754][ T307] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.091368][ T307] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.104619][ T307] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.129409][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.159630][ T307] usb 3-1: config 0 descriptor?? [ 72.177629][ T2388] capability: warning: `syz.0.754' uses deprecated v2 capabilities in a way that may be insecure SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 72.399511][ T30] audit: type=1400 audit(1786110258.911:311): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14111]" dev="pipefs" ino=14111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 72.430296][ T307] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.640975][ T2393] EXT4-fs error: 212 callbacks suppressed [ 72.640991][ T2393] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.753: Detected aborted journal [ 72.657902][ T2393] EXT4-fs error (device sda1) in ext4_evict_inode:260: Journal has aborted [ 72.666669][ T2393] EXT4-fs error (device sda1): ext4_wait_block_bitmap:572: comm syz.1.753: Cannot read block bitmap - block_group = 4, block_bitmap = 133 [ 72.689042][ T2374] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.748: Detected aborted journal [ 72.699945][ T2393] EXT4-fs error (device sda1): ext4_discard_preallocations:5142: comm syz.1.753: Error -5 reading block bitmap for 4 [ 72.705860][ T302] usb 3-1: USB disconnect, device number 7 [ 72.722101][ T302] usblp0: removed [ 72.730320][ T2374] EXT4-fs error (device sda1) in ext4_evict_inode:260: Journal has aborted [ 72.731606][ T2393] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.753: Detected aborted journal [ 72.739300][ T2374] EXT4-fs error (device sda1): ext4_wait_block_bitmap:572: comm syz.3.748: Cannot read block bitmap - block_group = 4, block_bitmap = 133 [ 72.741649][ T2291] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.714: Detected aborted journal [ 72.774171][ T2413] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.765: Detected aborted journal [ 72.785847][ T8] tipc: Left network mode [ 72.797146][ T286] syz-executor (286) used greatest stack depth: 20760 bytes left [ 73.340450][ T8] device bridge_slave_1 left promiscuous mode [ 73.346611][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.354184][ T8] device bridge_slave_0 left promiscuous mode [ 73.360383][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.368386][ T8] device veth1_macvtap left promiscuous mode [ 73.374459][ T8] device veth0_vlan left promiscuous mode [ 74.110859][ T8] tipc: Left network mode [ 74.740325][ T8] device bridge_slave_1 left promiscuous mode [ 74.746457][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.753928][ T8] device bridge_slave_0 left promiscuous mode [ 74.760144][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.768041][ T8] device veth1_macvtap left promiscuous mode [ 74.774123][ T8] device veth0_vlan left promiscuous mode