last executing test programs: 13.886515787s ago: executing program 1 (id=57): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r0, 0x0) 13.837104678s ago: executing program 1 (id=59): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x1e) 5.308891654s ago: executing program 3 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) 4.840144484s ago: executing program 3 (id=134): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)='9', 0x1}], 0x1) 4.264958347s ago: executing program 3 (id=140): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x221, 0x0, [{}, {}, {0x0, 0x72, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0xfe}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {0x0, 0x7}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0xa4c, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {0x0, 0x4f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}, {}, {0x0, 0x2, 0x0, 0x9}]}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0xac}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x0, 0xc473cee6, 0xfffffff8, {0x7}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 3.905247784s ago: executing program 4 (id=145): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.901866205s ago: executing program 4 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/rndis.usb0/ifname\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='syzkaller0\n', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x460080, 0x50) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) write(r1, &(0x7f0000000400), 0x0) 3.65412384s ago: executing program 4 (id=148): socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) close(0x3) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0) exit(0x7f) pselect6(0x40, &(0x7f0000000280)={0x0, 0x20, 0x80000000000001, 0x0, 0x800, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x6, 0x6a9}, 0x0, 0x0) 3.515825233s ago: executing program 3 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) write(r0, &(0x7f0000000640)="700aaac6486c1664a1ab8699333f4970964c04a2582903c37bb07661648c9efd124f9697488c22f5753537a519a91e5dc6a3fef0de0b95cc92207c5daa319c894cf2eb71990aad03f4752eb04628116dedaacdfed65708c91f1ade15ba515253f01811a17717a6dd1db0cc48ee97259f6af0cccfd9a1209c886b2248ab", 0x7d) 3.445969775s ago: executing program 1 (id=151): futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) 3.20452116s ago: executing program 3 (id=152): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.109145412s ago: executing program 3 (id=153): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) close(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x3b61}], 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000"], 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) syz_usb_connect$midi(0x3, 0x56, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000200000040392ad43f4000010203010902440001010080010904000002010300000724010001160006240201"], 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000280)='c\x00', 0x0, 0x0, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x9, 0x0, 0xfffffbff, 0x0, r5, 0x8000, '\x00', 0x0, r6, 0x2, 0x5, 0x5}, 0x50) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r1, &(0x7f0000002cc0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0}}], 0x1, 0x24008804) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 2.816335508s ago: executing program 0 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ff8, 0x0, 0x0, 0x10, 0xd, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc964e3e2874df2cfc06c89f3d9e234b305d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1ef800", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x100, 0xa]}}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 2.780484889s ago: executing program 4 (id=155): request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000002380)={'syz', 0x2}, &(0x7f0000001840)='\xd9\xa4\x91T%\x1d\xfc\x111\x10\x14\x90\xa7\xce[\xe7\xd9*\xf7\x00\xf5[\xa9\x9c\xac\x19\x9e\xb9\xe2\xb7F\xbc7\x02\x96\x9cN7\\x%g\xce\xd4\xdc\x80\xb5\xc0:\x00\xc5&\xbd \x97\xd5\xa0\x84\xaa\x9e\xc1\xe5U\xe3iw-{\xfd\x8e=\x1c\x12?\x8c\x99\xf7\v\xd2\xe6\x9ct\x1a\x8b\xa3\xcf\x83{\x8a\xde\xe5zy\x84#u@\xb1-\xb4\xf7\xfe\xeb\t\x00\x00\x00\x1a\x92\xb8\x9d\x05\x1e\xab\xb2\xde\xe6\xc7\x16\xa2\x92*)i\b\xf7\xbb]\xbc\xa1\xc5Kj\xa6\xfe\xda\xe4\x9am.\xa2-\x99\x98Mq', 0x0) 2.680688191s ago: executing program 1 (id=156): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.580715604s ago: executing program 4 (id=157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x3, 0x3742, 0xffffff86, 0x401, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x6}, 0x50) ioperm(0x0, 0x9, 0x6) iopl(0x3) iopl(0xe) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 2.373954698s ago: executing program 0 (id=159): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x800000000000020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x90000008b}, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000001600)=0x200000000) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x28}}, 0x4040090) syz_io_uring_setup(0x4a71, 0x0, 0x0, &(0x7f0000000200), 0x0) munmap$IORING_OFF_CQ_RING(0x0, 0x9) syz_io_uring_complete(0x0, 0x0) 2.26940644s ago: executing program 2 (id=160): sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0x8001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000159e99eabc6934d95000288"], 0x48}}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) write(r1, &(0x7f0000000640)="700aaac6486c1664a1ab8699333f4970964c04a2582903c37bb07661648c9efd124f9697488c22f5753537a519a91e5dc6a3fef0de0b95cc92207c5daa319c894cf2eb71990aad03f4752eb04628116dedaacdfed65708c91f1ade15ba515253f01811a17717a6dd1db0cc48ee97259f6af0cccfd9a1209c886b2248ab86d279f8ee349b9fcf8a47e1251997ee35b8961d90070f39decaddce32e9f07fbace", 0x9f) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 2.179718122s ago: executing program 2 (id=161): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c0000000000000095000000000000001810", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11}, 0xa) 701.253095ms ago: executing program 0 (id=162): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 701.016705ms ago: executing program 2 (id=163): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x0, 0x1524, &(0x7f0000000940)="$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") r2 = socket(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) accept$unix(r2, &(0x7f0000000000), &(0x7f0000000080)=0x6e) 611.616577ms ago: executing program 0 (id=164): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, 0x0) 536.168098ms ago: executing program 2 (id=165): keyctl$set_timeout(0xf, 0x0, 0x8000d) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000000) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff) write(r1, &(0x7f0000000600)="a0", 0x1) 465.30437ms ago: executing program 0 (id=166): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x7cb7562f2d67) 465.14778ms ago: executing program 2 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 211.345255ms ago: executing program 1 (id=168): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) 136.492577ms ago: executing program 2 (id=169): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x801, 0x0, 0x0, 0x0, &(0x7f0000000200)="8cac") madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 13.23761ms ago: executing program 0 (id=170): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/module/firmware_class/parameters/path\x00', 0x101002, 0x0) read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x204e) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) 13.09158ms ago: executing program 1 (id=171): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x28080, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") open(&(0x7f0000000b00)='./file0\x00', 0x6200, 0x2) 0s ago: executing program 4 (id=172): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 9.375005][ T107] udevd (107) used greatest stack depth: 22888 bytes left [ 14.427088][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 14.427104][ T30] audit: type=1400 audit(1786396600.930:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.439118][ T30] audit: type=1400 audit(1786396600.930:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.448059][ T30] audit: type=1400 audit(1786396600.930:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[14467]" dev="pipefs" ino=14467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.470521][ T30] audit: type=1400 audit(1786396600.940:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.491303][ T30] audit: type=1400 audit(1786396600.940:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. [ 22.040211][ T30] audit: type=1400 audit(1786396608.540:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.042621][ T277] cgroup: Unknown subsys name 'net' [ 22.069383][ T30] audit: type=1400 audit(1786396608.540:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.092144][ T30] audit: type=1400 audit(1786396608.580:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.092585][ T277] cgroup: Unknown subsys name 'devices' [ 22.233867][ T277] cgroup: Unknown subsys name 'hugetlb' [ 22.239761][ T277] cgroup: Unknown subsys name 'rlimit' [ 22.409987][ T30] audit: type=1400 audit(1786396608.910:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.433319][ T30] audit: type=1400 audit(1786396608.910:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.458286][ T30] audit: type=1400 audit(1786396608.910:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.470446][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.490433][ T30] audit: type=1400 audit(1786396608.990:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.509770][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.516911][ T30] audit: type=1400 audit(1786396608.990:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.551186][ T30] audit: type=1400 audit(1786396609.010:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.577503][ T30] audit: type=1400 audit(1786396609.010:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.108916][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.116191][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.123840][ T285] device bridge_slave_0 entered promiscuous mode [ 23.137142][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.144281][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.151826][ T285] device bridge_slave_1 entered promiscuous mode [ 23.184648][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.191760][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.199225][ T286] device bridge_slave_0 entered promiscuous mode [ 23.227493][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.234623][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.242144][ T286] device bridge_slave_1 entered promiscuous mode [ 23.309229][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.316473][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.324041][ T287] device bridge_slave_0 entered promiscuous mode [ 23.335371][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.342557][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.350067][ T287] device bridge_slave_1 entered promiscuous mode [ 23.394267][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.401362][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.408936][ T288] device bridge_slave_0 entered promiscuous mode [ 23.418843][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.425951][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.433442][ T288] device bridge_slave_1 entered promiscuous mode [ 23.450068][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.457205][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.464839][ T289] device bridge_slave_0 entered promiscuous mode [ 23.475228][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.482407][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.489876][ T289] device bridge_slave_1 entered promiscuous mode [ 23.544173][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.551508][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.558864][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.565941][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.666992][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.674116][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.681412][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.688487][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.697144][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.704412][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.711791][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.718979][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.729825][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.736918][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.744250][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.751438][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.767838][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.775051][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.782376][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.789551][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.806089][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.813560][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.820766][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.828552][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.836833][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.844216][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.851429][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.858962][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.866231][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.873602][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.881370][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.888990][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.918864][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.935707][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.944277][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.951529][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.959068][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.967417][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.974520][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.005346][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.014090][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.022758][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.029825][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.037535][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.046166][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.053266][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.060660][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.068759][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.076795][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.085055][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.092239][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.099694][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.108376][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.116015][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.123885][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.146966][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.154652][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.162357][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.170713][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.179176][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.186284][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.194009][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.202418][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.210556][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.217639][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.225195][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.233779][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.242504][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.250548][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.258703][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.266708][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.275151][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.282840][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.303308][ T285] device veth0_vlan entered promiscuous mode [ 24.322091][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.331453][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.340359][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.348648][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.357179][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.365357][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.372425][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.379914][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.388711][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.397171][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.404259][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.411771][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.420124][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.428255][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.436458][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.444766][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.453107][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.461146][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.469488][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.478511][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.487038][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.501490][ T289] device veth0_vlan entered promiscuous mode [ 24.511324][ T286] device veth0_vlan entered promiscuous mode [ 24.520428][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.529009][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.537351][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.545860][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.554045][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.562279][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.570359][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.581382][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.588995][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.596619][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.604717][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.612578][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.620924][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.636130][ T285] device veth1_macvtap entered promiscuous mode [ 24.645120][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.653484][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.662160][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.675726][ T286] device veth1_macvtap entered promiscuous mode [ 24.686380][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.694642][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.703071][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.711060][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.719510][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.727100][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.735746][ T288] device veth0_vlan entered promiscuous mode [ 24.743558][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.752127][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.767449][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.777034][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.785553][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.795064][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.803676][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.813529][ T289] device veth1_macvtap entered promiscuous mode [ 24.826826][ T288] device veth1_macvtap entered promiscuous mode [ 24.838993][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.847421][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.856268][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.864923][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.873568][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.887829][ T287] device veth0_vlan entered promiscuous mode [ 24.899163][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.907707][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.916159][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.923982][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.932093][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 24.948724][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.965924][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.978859][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.987478][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.003327][ T287] device veth1_macvtap entered promiscuous mode [ 25.017240][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.023917][ T313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.028267][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.050632][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.059599][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.068419][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.077111][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.105090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.116599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.126439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.137095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.207803][ T324] UDC core: couldn't find an available UDC or it's busy: -19 [ 25.302476][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.511821][ T318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.561762][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 25.742035][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 25.771773][ T318] usb 3-1: Using ep0 maxpacket: 32 [ 25.801744][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.831884][ T310] usb 4-1: config 4 interface 0 has no altsetting 0 [ 25.891797][ T318] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 25.903164][ T318] usb 3-1: config 0 interface 0 has no altsetting 0 [ 25.909966][ T318] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 25.919606][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.939928][ T318] usb 3-1: config 0 descriptor?? [ 26.084682][ T310] usb 4-1: string descriptor 0 read error: -22 [ 26.105976][ T310] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 26.116133][ T310] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 26.161826][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.179786][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 26.190009][ T26] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.361847][ T26] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 26.371083][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 26.379407][ T26] usb 1-1: Product: syz [ 26.383829][ T26] usb 1-1: Manufacturer: syz [ 26.388453][ T26] usb 1-1: SerialNumber: syz [ 26.422571][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.653665][ T26] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 26.664764][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 26.763892][ T318] hid-generic 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 26.772171][ T318] hid-generic 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 26.780429][ T318] hid-generic 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 26.788364][ T42] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 26.796793][ T318] hid-generic 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 26.804796][ T42] usb 5-1: config 0 has no interface number 0 [ 26.811004][ T318] hid-generic 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 26.818982][ T42] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 26.831583][ T318] hid-generic 0003:1B1C:1C09.0001: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 26.843635][ T42] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 26.854529][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.881407][ T42] usb 5-1: config 0 descriptor?? [ 26.889956][ T318] usb 1-1: USB disconnect, device number 2 [ 26.899041][ T318] usblp0: removed [ 27.134862][ T318] usb 5-1: USB disconnect, device number 2 [ 27.300310][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 27.300325][ T30] audit: type=1400 audit(1786396613.800:145): avc: denied { read } for pid=374 comm="syz.1.23" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.328748][ T30] audit: type=1400 audit(1786396613.800:146): avc: denied { open } for pid=374 comm="syz.1.23" path="net:[4026532298]" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.351890][ T30] audit: type=1400 audit(1786396613.800:147): avc: denied { write } for pid=374 comm="syz.1.23" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 27.401102][ T30] audit: type=1400 audit(1786396613.900:148): avc: denied { prog_load } for pid=378 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.419968][ T30] audit: type=1400 audit(1786396613.900:149): avc: denied { bpf } for pid=378 comm="syz.0.25" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.440620][ T30] audit: type=1400 audit(1786396613.900:150): avc: denied { perfmon } for pid=378 comm="syz.0.25" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.611749][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.661495][ T30] audit: type=1400 audit(1786396614.160:151): avc: denied { prog_run } for pid=382 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.700268][ T30] audit: type=1400 audit(1786396614.200:152): avc: denied { map_create } for pid=386 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.719835][ T30] audit: type=1400 audit(1786396614.200:153): avc: denied { map_read map_write } for pid=386 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.817827][ T30] audit: type=1400 audit(1786396614.320:154): avc: denied { create } for pid=395 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.994520][ T318] usb 4-1: USB disconnect, device number 2 [ 28.021002][ T406] loop3: detected capacity change from 0 to 1024 [ 28.054892][ T406] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.081888][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.094831][ T406] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 28.114106][ T404] loop4: detected capacity change from 0 to 40427 [ 28.136440][ T406] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.36: missing EA_INODE flag [ 28.148410][ T406] EXT4-fs (loop3): Remounting filesystem read-only [ 28.155138][ T406] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.36: error while reading EA inode 11 err=-117 [ 28.168207][ T404] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 28.173666][ T406] EXT4-fs (loop3): Remounting filesystem read-only [ 28.176147][ T404] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 28.184012][ T406] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 28.215612][ T404] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.252370][ T404] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 28.259466][ T404] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 28.260234][ T318] usb 3-1: USB disconnect, device number 2 [ 28.273361][ T26] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 28.300057][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.361460][ T26] usb 2-1: Product: syz [ 28.380284][ T26] usb 2-1: Manufacturer: syz [ 28.395114][ T26] usb 2-1: SerialNumber: syz [ 28.452326][ T26] pl2303 2-1:1.0: required endpoints missing [ 28.581924][ T416] loop2: detected capacity change from 0 to 40427 [ 28.605306][ T416] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 28.653556][ T318] usb 2-1: USB disconnect, device number 2 [ 28.696981][ T404] attempt to access beyond end of device [ 28.696981][ T404] loop4: rw=2049, want=40432, limit=40427 [ 28.953370][ T432] loop0: detected capacity change from 0 to 40427 [ 28.978815][ T432] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 29.206148][ T457] Zero length message leads to an empty skb [ 29.286113][ T461] loop1: detected capacity change from 0 to 1024 [ 29.319663][ T461] EXT4-fs (loop1): Ignoring removed orlov option [ 29.328191][ T461] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: writeback. [ 29.409926][ T306] Bluetooth: hci0: Frame reassembly failed (-90) [ 29.416680][ T468] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.424076][ T468] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.430975][ T468] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.201733][ T318] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 30.655577][ T495] loop3: detected capacity change from 0 to 40427 [ 30.727445][ T495] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 30.735485][ T495] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 30.746503][ T495] F2FS-fs (loop3): invalid crc value [ 30.860733][ T495] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.893470][ T495] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 30.900582][ T495] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 30.991880][ T318] usb 5-1: Using ep0 maxpacket: 8 [ 31.331901][ T318] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 31.340859][ T318] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 31.424588][ T318] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 31.461727][ T310] Bluetooth: hci0: command 0x1003 tx timeout [ 31.467964][ T470] Bluetooth: hci0: sending frame failed (-49) [ 31.475166][ T318] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 31.485212][ T318] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 31.498233][ T318] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 31.509561][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.826056][ T529] loop0: detected capacity change from 0 to 40427 [ 31.833374][ T527] loop3: detected capacity change from 0 to 40427 [ 31.892294][ T529] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 31.892817][ T527] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 31.900079][ T529] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 31.927580][ T529] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.944083][ T534] UDC core: couldn't find an available UDC or it's busy: -19 [ 31.975564][ T529] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 31.982816][ T529] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.388205][ T529] attempt to access beyond end of device [ 32.388205][ T529] loop0: rw=2049, want=40432, limit=40427 [ 32.410398][ T529] syz.0.80 (529) used greatest stack depth: 22240 bytes left [ 32.453805][ T538] loop3: detected capacity change from 0 to 131072 [ 32.492726][ T538] F2FS-fs (loop3): invalid crc value [ 32.550009][ T538] F2FS-fs (loop3): Found nat_bits in checkpoint [ 32.585481][ T543] loop2: detected capacity change from 0 to 40427 [ 32.585979][ T538] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 32.599291][ T538] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 32.632832][ T543] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 32.640722][ T543] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 32.649847][ T543] F2FS-fs (loop2): invalid crc value [ 32.672131][ T543] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.717998][ T543] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 32.725150][ T543] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 33.250137][ T318] usb 5-1: USB disconnect, device number 3 [ 33.384762][ T581] loop0: detected capacity change from 0 to 512 [ 33.399573][ T583] loop4: detected capacity change from 0 to 512 [ 33.452454][ T583] EXT4-fs (loop4): Ignoring removed oldalloc option [ 33.456630][ T581] ======================================================= [ 33.456630][ T581] WARNING: The mand mount option has been deprecated and [ 33.456630][ T581] and is ignored by this kernel. Remove the mand [ 33.456630][ T581] option from the mount to silence this warning. [ 33.456630][ T581] ======================================================= [ 33.580205][ T581] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 33.592429][ T581] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.623180][ T583] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 33.661729][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 33.661748][ T30] audit: type=1400 audit(1786396620.150:201): avc: denied { read } for pid=580 comm="syz.0.99" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 33.712311][ T30] audit: type=1400 audit(1786396620.150:202): avc: denied { setattr } for pid=580 comm="syz.0.99" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.042916][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 34.049459][ T470] Bluetooth: hci0: sending frame failed (-49) [ 34.606005][ T30] audit: type=1400 audit(1786396621.100:203): avc: denied { create } for pid=599 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.687932][ T30] audit: type=1400 audit(1786396621.190:204): avc: denied { setopt } for pid=599 comm="syz.4.104" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.081796][ T30] audit: type=1400 audit(1786396621.530:205): avc: denied { setopt } for pid=608 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.120601][ T611] loop3: detected capacity change from 0 to 4096 [ 35.174385][ T611] EXT4-fs (loop3): Test dummy encryption mode enabled [ 35.211270][ T611] EXT4-fs (loop3): Test dummy encryption mode enabled [ 35.234566][ T611] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 35.312202][ T318] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.344826][ T30] audit: type=1400 audit(1786396621.850:206): avc: denied { create } for pid=610 comm="syz.3.103" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.370477][ T611] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 35.601734][ T318] usb 3-1: Using ep0 maxpacket: 8 [ 35.622187][ T629] loop4: detected capacity change from 0 to 512 [ 35.674033][ T633] loop0: detected capacity change from 0 to 4096 [ 35.690425][ T629] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,i_version,errors=remount-ro,journal_ioprio=0x0000000000000005,. Quota mode: writeback. [ 35.707905][ T633] EXT4-fs (loop0): Test dummy encryption mode enabled [ 35.723401][ T633] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 35.732944][ T629] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.832157][ T633] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 35.840515][ T633] System zones: 0-5 [ 35.844678][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 35.857068][ T633] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 35.882528][ T318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.895783][ T318] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 35.905089][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.940883][ T318] usb 3-1: config 0 descriptor?? [ 35.948436][ T30] audit: type=1400 audit(1786396622.450:207): avc: denied { getopt } for pid=628 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.969964][ T629] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 205 vs 206 free clusters [ 36.005066][ T629] EXT4-fs (loop4): Remounting filesystem read-only [ 36.028183][ T30] audit: type=1400 audit(1786396622.520:208): avc: denied { rename } for pid=628 comm="syz.4.113" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.298809][ T643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 36.384947][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 36.531473][ T318] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0002/input/input4 [ 36.652360][ T318] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.be Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 36.666215][ T30] audit: type=1400 audit(1786396623.170:209): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=629 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.775390][ T318] usb 3-1: USB disconnect, device number 3 [ 36.798291][ T30] audit: type=1400 audit(1786396623.190:210): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=629 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.894262][ T653] fido_id[653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 37.464217][ T667] loop3: detected capacity change from 0 to 1024 [ 37.604491][ T667] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 37.644981][ T667] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 37.653660][ T667] System zones: 0-1, 3-8 [ 37.662528][ T667] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,nodioread_nolock,noquota,debug,norecovery,nodelalloc,,errors=continue. Quota mode: none. [ 37.715393][ T667] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.840094][ T667] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #15: block 3: comm syz.3.121: lblock 3 mapped to illegal pblock 3 (length 1) [ 37.854986][ T667] EXT4-fs error (device loop3): ext4_ext_remove_space:2944: inode #15: comm syz.3.121: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 38.048988][ T684] loop4: detected capacity change from 0 to 8192 [ 38.421054][ T692] kernel profiling enabled (shift: 9) [ 38.489919][ T694] loop0: detected capacity change from 0 to 128 [ 38.555987][ T694] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 38.587204][ T700] loop4: detected capacity change from 0 to 512 [ 38.599099][ T694] System zones: 1-3, 19-19, 35-36 [ 38.623533][ T700] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 38.639694][ T700] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 38.650546][ T694] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 38.666549][ T700] EXT4-fs (loop4): 1 truncate cleaned up [ 38.674709][ T700] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000009,bsddf,nomblk_io_submit,data_err=ignore,errors=remount-ro,. Quota mode: none. [ 38.720369][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 38.720385][ T30] audit: type=1400 audit(1786396625.220:227): avc: denied { remount } for pid=693 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.789350][ T700] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.137: Invalid inode table block 3351985148 in block_group 0 [ 38.809425][ T30] audit: type=1400 audit(1786396625.270:228): avc: denied { append } for pid=699 comm="syz.4.137" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.842179][ T700] EXT4-fs (loop4): Remounting filesystem read-only [ 38.908530][ T30] audit: type=1400 audit(1786396625.270:229): avc: denied { map } for pid=699 comm="syz.4.137" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.924460][ T315] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.367112][ T727] using random self ethernet address [ 39.386193][ T727] using random host ethernet address [ 39.398681][ T728] loop0: detected capacity change from 0 to 128 [ 39.546227][ T728] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 39.615207][ T728] System zones: 1-3, 19-19, 35-36 [ 39.631120][ T728] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 39.649689][ T728] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.712654][ T315] usb 3-1: device descriptor read/64, error -71 [ 39.981798][ T30] audit: type=1400 audit(1786396626.470:230): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.425083][ T318] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 40.664888][ T30] audit: type=1400 audit(1786396627.170:231): avc: denied { bind } for pid=749 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.871809][ T318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.907561][ T318] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 40.936612][ T30] audit: type=1400 audit(1786396627.360:232): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 41.379878][ T30] audit: type=1400 audit(1786396627.500:233): avc: denied { create } for pid=762 comm="syz.2.160" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 41.482152][ T318] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 41.595149][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.699114][ T315] usb 3-1: device descriptor read/64, error -71 [ 42.382457][ T318] usb 4-1: Product: syz [ 42.386686][ T318] usb 4-1: Manufacturer: syz [ 42.391302][ T318] usb 4-1: SerialNumber: syz [ 42.497551][ T776] binder: 775:776 ioctl c0306201 0 returned -14 [ 42.519774][ T776] loop2: detected capacity change from 0 to 256 [ 42.538600][ T30] audit: type=1400 audit(1786396629.040:234): avc: denied { write } for pid=777 comm="syz.0.162" path="socket:[18463]" dev="sockfs" ino=18463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.584382][ T776] exfat: Unknown parameter '' [ 42.669593][ T30] audit: type=1400 audit(1786396629.170:235): avc: denied { accept } for pid=775 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 43.257962][ T798] ================================================================== [ 43.266087][ T798] BUG: KASAN: slab-out-of-bounds in firmware_param_path_get+0x348/0x350 [ 43.274474][ T798] Write of size 1 at addr ffff8881284d9fff by task syz.0.170/798 [ 43.282228][ T798] [ 43.284575][ T798] CPU: 1 PID: 798 Comm: syz.0.170 Not tainted syzkaller #0 [ 43.292158][ T798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.302513][ T798] Call Trace: [ 43.305828][ T798] [ 43.308782][ T798] __dump_stack+0x21/0x30 [ 43.313151][ T798] dump_stack_lvl+0x110/0x170 [ 43.318292][ T798] ? show_regs_print_info+0x20/0x20 [ 43.323527][ T798] ? load_image+0x3f0/0x3f0 [ 43.328073][ T798] print_address_description+0x7f/0x2c0 [ 43.333658][ T798] ? firmware_param_path_get+0x348/0x350 [ 43.339327][ T798] kasan_report+0x10f/0x150 [ 43.344294][ T798] ? firmware_param_path_get+0x348/0x350 [ 43.349968][ T798] __asan_report_store1_noabort+0x17/0x20 [ 43.355729][ T798] firmware_param_path_get+0x348/0x350 [ 43.361239][ T798] param_attr_show+0x150/0x1b0 [ 43.366068][ T798] ? module_destroy_params+0x100/0x100 [ 43.371972][ T798] ? param_attr_store+0x320/0x320 [ 43.377034][ T798] module_attr_show+0x56/0x70 [ 43.381752][ T798] sysfs_kf_seq_show+0x266/0x3d0 [ 43.386729][ T798] kernfs_seq_show+0x119/0x160 [ 43.391540][ T798] seq_read_iter+0x472/0xce0 [ 43.396533][ T798] kernfs_fop_read_iter+0x146/0x460 [ 43.401775][ T798] vfs_read+0x6c0/0xc20 [ 43.405973][ T798] ? kernel_read+0x1f0/0x1f0 [ 43.410603][ T798] ? wait_for_completion_killable_timeout+0x10/0x10 [ 43.417237][ T798] ? __fget_files+0x2e1/0x340 [ 43.422373][ T798] ? __fdget_pos+0x2d2/0x380 [ 43.426996][ T798] ? ksys_read+0x70/0x260 [ 43.431371][ T798] ksys_read+0x14a/0x260 [ 43.435780][ T798] ? vfs_write+0xfd0/0xfd0 [ 43.440298][ T798] ? __kasan_check_write+0x14/0x20 [ 43.445450][ T798] ? switch_fpu_return+0x15d/0x2c0 [ 43.451019][ T798] __x64_sys_read+0x7b/0x90 [ 43.455558][ T798] x64_sys_call+0x96d/0x9a0 [ 43.460140][ T798] do_syscall_64+0x4c/0xa0 [ 43.464588][ T798] ? clear_bhb_loop+0x50/0xa0 [ 43.469301][ T798] ? clear_bhb_loop+0x50/0xa0 [ 43.474389][ T798] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.480357][ T798] RIP: 0033:0x7f7ff250e0d9 [ 43.484837][ T798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.504848][ T798] RSP: 002b:00007f7ff0f67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.513307][ T798] RAX: ffffffffffffffda RBX: 00007f7ff2795fa0 RCX: 00007f7ff250e0d9 [ 43.521445][ T798] RDX: 000000000000204e RSI: 0000200000002440 RDI: 0000000000000003 [ 43.529836][ T798] RBP: 00007f7ff25a5024 R08: 0000000000000000 R09: 0000000000000000 [ 43.537853][ T798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.545866][ T798] R13: 00007f7ff2796038 R14: 00007f7ff2795fa0 R15: 00007ffc2b873be8 [ 43.554257][ T798] [ 43.557329][ T798] [ 43.559674][ T798] Allocated by task 289: [ 43.563934][ T798] __kasan_kmalloc+0xd4/0x100 [ 43.568654][ T798] __kmalloc+0x13d/0x2c0 [ 43.572930][ T798] kvmalloc_node+0x211/0x320 [ 43.577548][ T798] alloc_netdev_mqs+0x8d/0xe20 [ 43.582344][ T798] rtnl_create_link+0x2da/0x9d0 [ 43.587219][ T798] veth_newlink+0x2e1/0xe20 [ 43.591756][ T798] rtnl_newlink+0x137f/0x1900 [ 43.596466][ T798] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 43.601430][ T798] netlink_rcv_skb+0x1e9/0x430 [ 43.606309][ T798] rtnetlink_rcv+0x1c/0x20 [ 43.610756][ T798] netlink_unicast+0x86c/0xa30 [ 43.615551][ T798] netlink_sendmsg+0x879/0xb80 [ 43.620383][ T798] __sys_sendto+0x46d/0x620 [ 43.625054][ T798] __x64_sys_sendto+0xe5/0x100 [ 43.629874][ T798] x64_sys_call+0x178/0x9a0 [ 43.634420][ T798] do_syscall_64+0x4c/0xa0 [ 43.638866][ T798] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.644789][ T798] [ 43.647130][ T798] The buggy address belongs to the object at ffff8881284d8000 [ 43.647130][ T798] which belongs to the cache kmalloc-4k of size 4096 [ 43.661206][ T798] The buggy address is located 4095 bytes to the right of [ 43.661206][ T798] 4096-byte region [ffff8881284d8000, ffff8881284d9000) [ 43.675213][ T798] The buggy address belongs to the page: [ 43.680877][ T798] page:ffffea0004a13600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1284d8 [ 43.691140][ T798] head:ffffea0004a13600 order:3 compound_mapcount:0 compound_pincount:0 [ 43.699571][ T798] flags: 0x4000000000010200(slab|head|zone=1) [ 43.705789][ T798] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043380 [ 43.714578][ T798] raw: 0000000000000000 0000000080040004 00000001ffffffff 0000000000000000 [ 43.723172][ T798] page dumped because: kasan: bad access detected [ 43.729600][ T798] page_owner tracks the page as allocated [ 43.735347][ T798] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 289, ts 23514717816, free_ts 0 [ 43.753526][ T798] post_alloc_hook+0x192/0x1b0 [ 43.758326][ T798] prep_new_page+0x1c/0x110 [ 43.762862][ T798] get_page_from_freelist+0x2c3a/0x2cd0 [ 43.768455][ T798] __alloc_pages+0x1a2/0x460 [ 43.773070][ T798] new_slab+0xa0/0x4d0 [ 43.777243][ T798] ___slab_alloc+0x3ac/0x840 [ 43.781876][ T798] __slab_alloc+0x49/0x90 [ 43.786321][ T798] __kmalloc_track_caller+0x169/0x2c0 [ 43.791723][ T798] kmemdup+0x26/0x60 [ 43.795636][ T798] __addrconf_sysctl_register+0xb6/0x3e0 [ 43.801563][ T798] addrconf_sysctl_register+0x147/0x1a0 [ 43.807132][ T798] ipv6_add_dev+0xc09/0x1150 [ 43.811828][ T798] addrconf_notify+0x582/0xe00 [ 43.816632][ T798] raw_notifier_call_chain+0x90/0x100 [ 43.822140][ T798] call_netdevice_notifiers+0x119/0x190 [ 43.827713][ T798] register_netdevice+0x110a/0x1490 [ 43.832937][ T798] page_owner free stack trace missing [ 43.838319][ T798] [ 43.840688][ T798] Memory state around the buggy address: [ 43.846337][ T798] ffff8881284d9e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.854507][ T798] ffff8881284d9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.862586][ T798] >ffff8881284d9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.870663][ T798] ^ [ 43.878665][ T798] ffff8881284da000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.886746][ T798] ffff8881284da080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.894826][ T798] ================================================================== [ 43.902934][ T798] Disabling lock debugging due to kernel taint [ 43.924708][ T30] audit: type=1400 audit(1786396630.430:236): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 43.967337][ T799] loop1: detected capacity change from 0 to 1024 [ 44.005943][ T318] usb 4-1: USB disconnect, device number 3 [ 44.038763][ T30] audit: type=1400 audit(1786396630.430:237): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.092825][ T799] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.097993][ T30] audit: type=1400 audit(1786396630.430:238): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.130822][ T30] audit: type=1400 audit(1786396630.430:239): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.152319][ T30] audit: type=1400 audit(1786396630.430:240): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.173049][ T30] audit: type=1400 audit(1786396630.430:241): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.196002][ T30] audit: type=1400 audit(1786396630.430:242): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.232242][ T535] udevd[535]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.270396][ T799] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.171: Invalid inode table block 0 in block_group 0 [ 44.367585][ T805] loop4: detected capacity change from 0 to 128 [ 44.414347][ T805] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.425354][ T805] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.460047][ T30] audit: type=1400 audit(1786396630.960:243): avc: denied { append } for pid=804 comm="syz.4.172" path="/39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_wait_time_recursive" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1