last executing test programs: 24.480265586s ago: executing program 0 (id=1): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8d0, &(0x7f0000000080)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c00a99176bffea999ec4947785a4b3392b470a878b010acc5fde3f7c39533b111d92aa1e3cd9504b4aec083a038cd1b944d504716e6b8463de9dc9743fbe9e0ef9396a932024b904283205650ea735ae7adac50b5efe5244d737dc9515a51775b2fafbc85c9c1c8f62872a466192aae714a90990e0b07aa2b92e463ad98"], 0x1, 0x25f, &(0x7f0000000840)="$eJzs3cFqE0EYB/Av2zSJvdizeFjw4qmobxAkghgQInvQk4HqpRVhe1k95TF8Bh/Jx8ipt0i7wbSpllqSTpP9/SDsx/4Z8s1lJ4GZ5OPjL0eHX08+z379iF6WRztiEqcR+5HFTtRa82t2XnfiokkAAJtmNBr3U/fACrWu3irL/ng3IrpXkuLn3TQFAAAAAAAAAADAql3a/9+z/x8AmsD+/+1Xlv3x3vzz22X2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpnM5mD2fXvFL3BwCs3tn6n1n/AaBRfP8HgOa52fqfpW4TAFihd+8/vOlnMRjleS9iOqmKqqivdf7q9XDwLD/XWYyaVlWxO6+Hg+d1ni/ne/PxL/6ad+Lpkzo/y16+HS7l3Thc9+QBAAAAAAAAAAAAAAAAAADgnjjI/9hf3J1WVbFT5wf/yuvqwu8DLJ3fb8ej9p1NAwAAAAAAAAAAAAAAAAAAADbaybfvR+Pj40/lFhadiLgHbWxg8SBuMaoXa26sG7Hut2hW0Wpf8wRI/WQCAAAAAAAAAAAAAAAAAIDmWRz6Td0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz+P//mxb/Pyr1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBm+B0AAP//Ai+I5w==") setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x11e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x20d008, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) pwrite64(r2, &(0x7f0000000840)="7bdcab992e", 0x5, 0x80) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8001, 0x0, 0x12, 0x1a, 0xd, "413bb93852f7d6a4ae6dddfbd1ce5d2948bf75a5a9000ff8eee5e737030fdf110ff4117660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229b0b00001402000000d300e60001001100000000000000000001", [0x8, 0xfffffffffffffffd]}) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x100000, 0x100000}]) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfda) sched_setscheduler(0x0, 0x6, &(0x7f00000001c0)=0x5) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PTRACER(0x59616d61, r5) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x200408cc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 23.601563593s ago: executing program 0 (id=13): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x399081a, &(0x7f0000000080)=ANY=[], 0xfd, 0x2cc, &(0x7f0000000140)="$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") fsopen(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42042, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{&(0x7f00000004c0)="8293", 0x2}], 0x1, 0x7ff, 0x5, 0x5) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x399081a, &(0x7f0000000080)=ANY=[], 0xfd, 0x2cc, &(0x7f0000000140)="$eJzs3T9rJGUYAPBn9l8mWuwiNorggBZW4aKlTVY5QUglrI2Ni5cD2Q0HOVjwRONV9wW0FMFPYWtn7TcQtBTsckVkZHZmsjveblzMP4m/X5M37zvPO8/7PrCp9snHrxxO7j1I4vHJL5GmSbT2Yi+eJjGIVtS+ipMAAG6Pp3kef+QR0S1/TzaO7LSuLisA4CqVf/9LN50LAHA9fvv+rS+G+/t3P8iyNF7qP5mNkog4fDIblevD+/FpTOMg7kQ/TiPyM+X4vff370YnKwzi9cPj2WjW2H/4e2zP43ejH4PV8btZqYofRRQ/u/FcZDG836236seLq+PfXBEfo1688dpS/jvRj58/iQcxjXtRxC7iv9zNsnfzb04+/6h4TRGftGK0NX+ush2Rt6+tKAAAAAAAAAAAAAAAAAAAAAAA3Ho7WZaU7Xvm/XuKqar/Tvt0vr6T1QbN/jxl/Fm/4LI/UB5Vi57jPL6t++vcybIsrx5cxHfi5U50bubUAAAAAAAAAAAAAAAAAAAA8N/y8LNHk/F0enB04UF7Mp7W3QDqr/X/2w33lmZejUeTcXv9hlubv2u520CR67kPR6cTl3At/zyIH7eLfNY8812VbzXT3vxWtxbF/bAKrwtzqad44Z2zDLNqqb7kyTgp37Wcc9oIT+ulH5Z37sXGaSRJY2Ze2+nBUT6/qNO8WdO0cZmLpd66V3ydFKfY6DaK0vSeX7n0Z57nmx3n7V/LGlUzybzFxma16FaDlQcsBumzdf9p/YZrPzLaF/3MAQAAAAAAAAAAAAAAAAAAVmt+cfpvHp8b2rqypAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgmi3+/389SCOiOfPM4LgKPu+ZatCLo4c3fEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+B/4KAAD//97ZRIM=") (async) fsopen(0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42042, 0x0) (async) pwritev2(r0, &(0x7f0000001ac0)=[{&(0x7f00000004c0)="8293", 0x2}], 0x1, 0x7ff, 0x5, 0x5) (async) 8.5512214s ago: executing program 32 (id=13): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x399081a, &(0x7f0000000080)=ANY=[], 0xfd, 0x2cc, &(0x7f0000000140)="$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") fsopen(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42042, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{&(0x7f00000004c0)="8293", 0x2}], 0x1, 0x7ff, 0x5, 0x5) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x399081a, &(0x7f0000000080)=ANY=[], 0xfd, 0x2cc, &(0x7f0000000140)="$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") (async) fsopen(0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42042, 0x0) (async) pwritev2(r0, &(0x7f0000001ac0)=[{&(0x7f00000004c0)="8293", 0x2}], 0x1, 0x7ff, 0x5, 0x5) (async) 5.891316295s ago: executing program 3 (id=251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x54, 0xc0, 0xf, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0xe0, 0x0, {0xa, 0x25, 0x25, 0x8, 0x1f, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0xc, 0x1, {0xa, 0x25, 0x25, 0x800, 0xf3, 0x3}}}}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xce1b}]}, 0x30}}, 0x4000000) syz_usb_control_io(r3, &(0x7f0000001e80)={0x2c, 0x0, &(0x7f0000001c80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040000}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 3.298222789s ago: executing program 1 (id=262): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000440)={0xe, {0x0, 0x4, 0x4c}}, 0xc) 2.87044929s ago: executing program 3 (id=263): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) 2.858746542s ago: executing program 3 (id=264): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f000048a000/0x2000)=nil, &(0x7f0000219000/0x1000)=nil, 0x2000, 0x1}) 1.942467526s ago: executing program 3 (id=268): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1.913797271s ago: executing program 3 (id=269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.821099306s ago: executing program 3 (id=271): r0 = inotify_init() r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1.394419557s ago: executing program 2 (id=280): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x300, 0x0, @void, @value=0x0}, 0x20) 1.344510025s ago: executing program 2 (id=283): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x0, 0xfffffffc}}}}}, 0x0) 1.314383811s ago: executing program 2 (id=285): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0xcbb) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 1.230878954s ago: executing program 2 (id=288): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/50, 0x7b}, {&(0x7f00000001c0)=""/73, 0x49}], 0x2, 0x1, 0x3) 1.13892683s ago: executing program 4 (id=291): r0 = socket(0x200000000000011, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1.13886996s ago: executing program 2 (id=292): unshare(0x22060400) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000280)=0xfffffffffffffe70) 1.060281273s ago: executing program 4 (id=293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000180)=0x68d, 0x4) 1.003694412s ago: executing program 4 (id=294): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x1, 0x0) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 868.570515ms ago: executing program 4 (id=295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0xc0032032, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000740)="440f20c03505000020440f22c0fb01c966bad104ed00000f23c00f21f866b846008ed00f23f80f01cbb8010000000f01c146a7b9670900000f3236660fc6b8730f0000c9b98f020000b8b9000000ba000000000f30460f01c8", 0x59}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x24008000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 754.506744ms ago: executing program 4 (id=296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x5) sendmmsg$inet(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="f9", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x7}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)="f1", 0x1}], 0x1, &(0x7f00000010c0)=ANY=[], 0x1358}}], 0x2, 0x4044044) 692.745544ms ago: executing program 4 (id=297): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) 425.768819ms ago: executing program 2 (id=302): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r4], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 257.170047ms ago: executing program 1 (id=309): r0 = gettid() capset(&(0x7f00000000c0)={0x20080522, r0}, 0x0) 184.70669ms ago: executing program 5 (id=310): syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010012000000000000000000000a20000000000a03000000000000000400070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c006c80080003400000000220000b80"], 0xe0}}, 0x0) 184.55969ms ago: executing program 1 (id=311): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = gettid() sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) 169.340362ms ago: executing program 5 (id=312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 156.945774ms ago: executing program 1 (id=313): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x2, 0x24}, 0x20) 100.719434ms ago: executing program 5 (id=314): syz_io_uring_setup(0x7aa3, &(0x7f0000000100)={0x0, 0x29a8, 0x1008, 0x2, 0x244}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 100.554093ms ago: executing program 1 (id=315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x80, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffa3c, 0x3f, 0x4, 0x80000001}}]}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x80}}, 0x20040054) 100.305064ms ago: executing program 5 (id=316): socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r3, 0x8) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r1, 0x4) 62.61278ms ago: executing program 5 (id=317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000500000008000300", @ANYRES8=r0], 0x1c}}, 0x0) 42.820573ms ago: executing program 1 (id=318): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="0000000060000000580012"], 0x78}}, 0x0) 0s ago: executing program 5 (id=319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0xa4, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x7, 0x5}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x70, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_gact={0x60, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x840000, 0x3, 0x2, 0xfffffffb}}, @TCA_GACT_PARMS={0x4d, 0x2, {0x3, 0x7, 0x5, 0xd97e, 0xbac}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x3f, 0x3, 0x2}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x20044044) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 21.274169][ T30] audit: type=1400 audit(1776055247.831:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.278525][ T273] cgroup: Unknown subsys name 'net' [ 21.296903][ T30] audit: type=1400 audit(1776055247.831:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.324202][ T30] audit: type=1400 audit(1776055247.861:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.324740][ T273] cgroup: Unknown subsys name 'devices' [ 21.470399][ T273] cgroup: Unknown subsys name 'hugetlb' [ 21.476053][ T273] cgroup: Unknown subsys name 'rlimit' [ 21.706583][ T30] audit: type=1400 audit(1776055248.261:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.729904][ T30] audit: type=1400 audit(1776055248.261:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.754774][ T30] audit: type=1400 audit(1776055248.261:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.774335][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.786932][ T30] audit: type=1400 audit(1776055248.341:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.812487][ T30] audit: type=1400 audit(1776055248.341:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.841709][ T30] audit: type=1400 audit(1776055248.401:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.867339][ T30] audit: type=1400 audit(1776055248.401:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.867830][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.451161][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.458292][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.465806][ T281] device bridge_slave_0 entered promiscuous mode [ 22.474047][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.481180][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.488677][ T281] device bridge_slave_1 entered promiscuous mode [ 22.584905][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.592039][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.599570][ T282] device bridge_slave_0 entered promiscuous mode [ 22.619928][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.627067][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.634574][ T285] device bridge_slave_0 entered promiscuous mode [ 22.641442][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.648608][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.656122][ T282] device bridge_slave_1 entered promiscuous mode [ 22.673230][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.680365][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.687859][ T285] device bridge_slave_1 entered promiscuous mode [ 22.728922][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.736012][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.743697][ T283] device bridge_slave_0 entered promiscuous mode [ 22.761006][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.768269][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.775743][ T283] device bridge_slave_1 entered promiscuous mode [ 22.804251][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.811717][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.819420][ T284] device bridge_slave_0 entered promiscuous mode [ 22.826336][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.833442][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.840923][ T284] device bridge_slave_1 entered promiscuous mode [ 22.853370][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.860458][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.003792][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.010907][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.018242][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.025288][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.038419][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.045517][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.052838][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.059906][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.074210][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.081357][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.088683][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.095741][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.109165][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.116245][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.123595][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.130666][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.139851][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.147488][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.154991][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.162358][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.169864][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.177060][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.184436][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.191818][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.199160][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.207015][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.214556][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.248788][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.257271][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.265800][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.272904][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.280432][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.288826][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.296060][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.338975][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.346879][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.355438][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.364835][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.373356][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.380470][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.387934][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.397065][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.404247][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.411806][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.420115][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.427146][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.434613][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.442859][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.449930][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.457373][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.465820][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.472914][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.480292][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.488788][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.495855][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.503338][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.511420][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.519580][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.527571][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.559123][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.566815][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.574620][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.584586][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.592972][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.601428][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.610099][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.617155][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.624950][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.633092][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.641480][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.649850][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.657973][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.665058][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.672550][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.680948][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.689500][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.697523][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.706218][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.714456][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.729271][ T281] device veth0_vlan entered promiscuous mode [ 23.745883][ T283] device veth0_vlan entered promiscuous mode [ 23.753772][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.762170][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.771116][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.779417][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.787520][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.795882][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.804055][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.812537][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.821148][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.829673][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.838020][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.846091][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.854351][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.862088][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.869667][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.877136][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.886478][ T282] device veth0_vlan entered promiscuous mode [ 23.899000][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.907101][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.915668][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.923308][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.940604][ T282] device veth1_macvtap entered promiscuous mode [ 23.948227][ T281] device veth1_macvtap entered promiscuous mode [ 23.960267][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.968948][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.977121][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.985190][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.993631][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.002023][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.009829][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.018365][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.033180][ T284] device veth0_vlan entered promiscuous mode [ 24.043672][ T283] device veth1_macvtap entered promiscuous mode [ 24.052353][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.060701][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.069302][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.077199][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.085842][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.094689][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.103743][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.112247][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.120899][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.129437][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.137762][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.146359][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.154027][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.164455][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.172911][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.190937][ T285] device veth0_vlan entered promiscuous mode [ 24.199840][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.207978][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.216618][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.225158][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.233718][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.242212][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.250950][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.258684][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.279722][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 24.287944][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.319890][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.336689][ T284] device veth1_macvtap entered promiscuous mode [ 24.366837][ T285] device veth1_macvtap entered promiscuous mode [ 24.387654][ T310] loop1: detected capacity change from 0 to 2048 [ 24.394570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 24.409462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 24.418618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 24.429420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 24.438358][ T305] loop0: detected capacity change from 0 to 512 [ 24.451505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 24.460152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 24.469520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 24.478773][ T305] ======================================================= [ 24.478773][ T305] WARNING: The mand mount option has been deprecated and [ 24.478773][ T305] and is ignored by this kernel. Remove the mand [ 24.478773][ T305] option from the mount to silence this warning. [ 24.478773][ T305] ======================================================= [ 24.479043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 24.524345][ T310] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x000000000000002d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 24.548621][ T310] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 24.563956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.573245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.581984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.591691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.626790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.641119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.646408][ T310] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 24.663637][ T310] EXT4-fs (loop1): This should not happen!! Data will be lost [ 24.663637][ T310] [ 24.674402][ T310] EXT4-fs (loop1): Total free blocks count 0 [ 24.680610][ T310] EXT4-fs (loop1): Free/Dirty block details [ 24.686648][ T310] EXT4-fs (loop1): free_blocks=66060288 [ 24.692777][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.694981][ T310] EXT4-fs (loop1): dirty_blocks=16 [ 24.706556][ T310] EXT4-fs (loop1): Block reservation details [ 24.716408][ T310] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 24.725768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.763743][ T10] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 24.804338][ T10] EXT4-fs (loop1): This should not happen!! Data will be lost [ 24.804338][ T10] [ 24.820035][ T330] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.909343][ T335] loop1: detected capacity change from 0 to 512 [ 24.980935][ T335] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 24.998463][ T335] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.040250][ T335] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,dioread_nolock,abort,grpjquota=,lazytime,auto_da_alloc,mblk_io_submit,max_dir_size_kb=0x0000000000000100,min_batch_time=0x000000000000007a,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 25.067656][ T335] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 25.078151][ T302] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.095155][ T336] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 25.127959][ T340] loop5: detected capacity change from 0 to 7 [ 25.137019][ T305] syz.0.1 (305) used greatest stack depth: 22304 bytes left [ 25.152800][ T340] syz.3.10 (340) used greatest stack depth: 21824 bytes left [ 25.228949][ T345] fuse: Bad value for 'fd' [ 25.318123][ T302] usb 5-1: Using ep0 maxpacket: 32 [ 25.438194][ T302] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 25.464255][ T302] usb 5-1: config 0 has no interface number 0 [ 25.479138][ T302] usb 5-1: config 0 interface 184 has no altsetting 0 [ 25.651494][ T302] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 25.668963][ T302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.687144][ T302] usb 5-1: Product: syz [ 25.692789][ T302] usb 5-1: Manufacturer: syz [ 25.707549][ T302] usb 5-1: SerialNumber: syz [ 25.716169][ T302] usb 5-1: config 0 descriptor?? [ 25.768098][ T291] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.769630][ T302] smsc75xx v1.0.0 [ 25.819745][ T355] loop2: detected capacity change from 0 to 2048 [ 25.874529][ T355] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.019231][ T291] usb 2-1: Using ep0 maxpacket: 16 [ 26.028748][ T355] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 26.035555][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.148230][ T291] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1808, setting to 1024 [ 26.318190][ T291] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 0.40 [ 26.337439][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.347764][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 26.347780][ T30] audit: type=1400 audit(1776055252.901:145): avc: denied { create } for pid=368 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.357706][ T291] usb 2-1: Manufacturer: 痾驃䓫㱟祊ꕀ鬔⅐䴢g婮䝃ꎜ꼾盁ᘢ῅ꁹ貉䇢ꈮ⻫⇦켨悹ﰆ뤝炑퉦즅눗䀲겋ㇰ彗餏΁ᢧ쪏砸剢ꅺ扏耧頥뻖☈ꏾ떟晓п靦蕎韐㋬㒧뤹皅ﶲ槉Ӓ祼⋪꺗螙颟⯧㴀➭Ԭ涠鶋璮첱ꅞ鐩蟈䘌┥행ߟ錋핌䈨镝䍹뚏〷띠쨽䆿U堆迂ꮸ聆糝׊볬雩᥂큜듰籿㳆蔠聚 [ 26.408836][ T324] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 26.438748][ T324] loop4: detected capacity change from 0 to 16 [ 26.439595][ T30] audit: type=1400 audit(1776055252.991:146): avc: denied { name_bind } for pid=323 comm="syz.4.5" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 26.475331][ T324] erofs: (device loop4): mounted with root inode @ nid 36. [ 26.503230][ T291] usb 2-1: SerialNumber: ࠉ [ 26.778099][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.868230][ T291] usb 2-1: 1:1 : bogus bTerminalLink 8 [ 26.888155][ T291] usb 2-1: 2:1 : bogus bTerminalLink 0 [ 26.927967][ T291] usb 2-1: USB disconnect, device number 2 [ 26.958547][ T377] netlink: 'syz.3.21': attribute type 49 has an invalid length. [ 26.969084][ T375] loop3: detected capacity change from 0 to 512 [ 27.009540][ T302] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 27.028143][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 27.037122][ T379] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=379 comm=syz.4.22 [ 27.062703][ T302] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 27.075628][ T302] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 27.087064][ T302] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 27.094151][ T60] usb 3-1: no configurations [ 27.099061][ T60] usb 3-1: can't read configurations, error -22 [ 27.111634][ T302] usb 5-1: USB disconnect, device number 2 [ 27.169343][ T30] audit: type=1400 audit(1776055253.731:147): avc: denied { read } for pid=386 comm="syz.4.25" dev="nsfs" ino=4026532475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.192552][ T30] audit: type=1400 audit(1776055253.751:148): avc: denied { open } for pid=386 comm="syz.4.25" path="net:[4026532475]" dev="nsfs" ino=4026532475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.225766][ T387] loop4: detected capacity change from 0 to 2048 [ 27.243522][ T30] audit: type=1400 audit(1776055253.751:149): avc: denied { create } for pid=384 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.263170][ T30] audit: type=1400 audit(1776055253.801:150): avc: denied { create } for pid=391 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.268293][ T60] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.311442][ T392] loop3: detected capacity change from 0 to 4096 [ 27.320403][ T387] Alternate GPT is invalid, using primary GPT. [ 27.326698][ T387] loop4: p1 p2 p3 [ 27.376054][ T30] audit: type=1400 audit(1776055253.931:151): avc: denied { create } for pid=398 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 27.405379][ T392] EXT4-fs (loop3): Test dummy encryption mode enabled [ 27.422627][ T30] audit: type=1400 audit(1776055253.981:152): avc: denied { name_bind } for pid=398 comm="syz.1.28" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.444730][ T392] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 27.459439][ T392] System zones: 0-5 [ 27.467669][ T392] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 27.487605][ T30] audit: type=1400 audit(1776055254.021:153): avc: denied { append } for pid=402 comm="syz.1.30" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.510438][ T318] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 27.523569][ T30] audit: type=1400 audit(1776055254.081:154): avc: denied { create } for pid=402 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.542464][ T303] udevd[303]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 27.554589][ T308] udevd[308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 27.568191][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 27.576871][ T307] udevd[307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 27.608175][ T60] usb 3-1: no configurations [ 27.612841][ T60] usb 3-1: can't read configurations, error -22 [ 27.624781][ T60] usb usb3-port1: attempt power cycle [ 27.651138][ T392] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 27.928132][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.935728][ T302] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.038111][ T60] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.128293][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 28.168206][ T60] usb 3-1: no configurations [ 28.172868][ T60] usb 3-1: can't read configurations, error -22 [ 28.308235][ T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.328133][ T302] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 28.337246][ T302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.345548][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.353270][ T60] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 28.378993][ T302] usb 2-1: config 0 descriptor?? [ 28.431352][ T415] loop4: detected capacity change from 0 to 131072 [ 28.441797][ T415] F2FS-fs (loop4): Mismatch start address, segment0(512) cp_blkaddr(1140851200) [ 28.448961][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.461345][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 28.478183][ T6] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 28.482216][ T415] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 28.498196][ T60] usb 3-1: no configurations [ 28.502847][ T60] usb 3-1: can't read configurations, error -22 [ 28.509862][ T6] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 28.523335][ T415] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.528882][ T60] usb usb3-port1: unable to enumerate USB device [ 28.576801][ T415] F2FS-fs (loop4): recover fsync data on readonly fs [ 28.584029][ T415] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 28.591332][ T415] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955 [ 28.708175][ T6] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 28.727563][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.735982][ T6] usb 4-1: Product: syz [ 28.748149][ T6] usb 4-1: Manufacturer: syz [ 28.752931][ T6] usb 4-1: SerialNumber: syz [ 28.859226][ T302] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 28.880814][ T302] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input4 [ 28.974402][ T302] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 29.078104][ C0] usb 2-1: input irq status -75 received [ 29.128824][ T6] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 29.168533][ T6] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 29.208323][ T6] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 29.216497][ T6] usb 4-1: USB disconnect, device number 2 [ 29.261422][ T291] usb 2-1: USB disconnect, device number 3 [ 29.794451][ T434] loop4: detected capacity change from 0 to 128 [ 29.819481][ T434] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value [ 29.958123][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 30.078111][ T359] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.338570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 30.387466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 30.396100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 30.404517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 30.413184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 30.427184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 30.436557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 30.445984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 30.498195][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 30.518552][ T359] usb 2-1: Using ep0 maxpacket: 16 [ 30.618236][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.630387][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.640261][ T6] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 30.649488][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.658738][ T359] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1808, setting to 1024 [ 30.672592][ T6] usb 3-1: config 0 descriptor?? [ 30.738092][ T302] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.868170][ T359] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 0.40 [ 30.877299][ T359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.887596][ T359] usb 2-1: Manufacturer: 痾驃䓫㱟祊ꕀ鬔⅐䴢g婮䝃ꎜ꼾盁ᘢ῅ꁹ貉䇢ꈮ⻫⇦켨悹ﰆ뤝炑퉦즅눗䀲겋ㇰ彗餏΁ᢧ쪏砸剢ꅺ扏耧頥뻖☈ꏾ떟晓п靦蕎韐㋬㒧뤹皅ﶲ槉Ӓ祼⋪꺗螙颟⯧㴀➭Ԭ涠鶋璮첱ꅞ鐩蟈䘌┥행ߟ錋핌䈨镝䍹뚏〷띠쨽䆿U堆迂ꮸ聆糝׊볬雩᥂큜듰籿㳆蔠聚 [ 30.921905][ T359] usb 2-1: SerialNumber: ࠉ [ 30.960363][ T458] input: syz1 as /devices/virtual/input/input5 [ 30.978158][ T302] usb 4-1: Using ep0 maxpacket: 16 [ 31.098236][ T302] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.110415][ T302] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.120572][ T302] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 31.133870][ T302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 31.140713][ T302] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 31.153386][ T6] savu 0003:1E7D:2D5A.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 31.165446][ T302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.189573][ T302] usb 4-1: config 0 descriptor?? [ 31.278192][ T359] usb 2-1: 1:1 : bogus bTerminalLink 8 [ 31.298158][ T359] usb 2-1: 2:1 : bogus bTerminalLink 0 [ 31.328154][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.336497][ T359] usb 2-1: USB disconnect, device number 4 [ 31.418424][ T426] UDC core: couldn't find an available UDC or it's busy: -16 [ 31.425936][ T426] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 31.442177][ T60] usb 3-1: USB disconnect, device number 6 [ 31.456213][ T473] netlink: 80 bytes leftover after parsing attributes in process `syz.2.51'. [ 31.480255][ T475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=475 comm=syz.2.52 [ 31.568125][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 31.688154][ T6] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 31.705859][ T6] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 31.730894][ T6] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 31.755647][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 31.775330][ T6] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 31.796065][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.824465][ T6] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 31.851653][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.879183][ T6] usb 5-1: config 0 descriptor?? [ 32.018114][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.139934][ T6] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 32.160074][ T6] usb 5-1: USB disconnect, device number 3 [ 32.177272][ T6] usblp0: removed [ 32.428134][ T302] usbhid 4-1:0.0: can't add hid device: -71 [ 32.434300][ T302] usbhid: probe of 4-1:0.0 failed with error -71 [ 32.453180][ T302] usb 4-1: USB disconnect, device number 3 [ 32.521556][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 32.521573][ T30] audit: type=1400 audit(1776055259.081:188): avc: denied { write } for pid=493 comm="syz.3.61" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.588264][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.599523][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.607629][ T26] usb 2-1: Product: syz [ 32.612182][ T26] usb 2-1: Manufacturer: syz [ 32.616873][ T26] usb 2-1: SerialNumber: syz [ 32.678118][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 32.928121][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 33.058205][ T6] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 33.068916][ T6] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 33.077956][ T6] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 33.088719][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.098748][ T6] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 33.108673][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 33.121960][ T6] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 33.133776][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.149031][ T6] usb 5-1: config 0 descriptor?? [ 33.217609][ T30] audit: type=1400 audit(1776055259.771:189): avc: denied { read } for pid=536 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.421240][ T6] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 33.600751][ T30] audit: type=1400 audit(1776055260.161:190): avc: denied { mount } for pid=466 comm="syz.4.50" name="/" dev="ramfs" ino=16248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 33.644567][ T30] audit: type=1400 audit(1776055260.181:191): avc: denied { execute } for pid=466 comm="syz.4.50" path="/file1" dev="ramfs" ino=16249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 33.668232][ T359] usb 5-1: USB disconnect, device number 4 [ 33.676706][ T359] usblp0: removed [ 33.705825][ T30] audit: type=1400 audit(1776055260.181:192): avc: denied { read write } for pid=466 comm="syz.4.50" name="lp0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 33.738278][ T26] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 33.747274][ T26] cdc_ncm 2-1:1.0: dwNtbInMaxSize=60 is too small. Using 2048 [ 33.753024][ T30] audit: type=1400 audit(1776055260.181:193): avc: denied { open } for pid=466 comm="syz.4.50" path="/dev/usb/lp0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 33.765316][ T26] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 33.825904][ T545] mmap: syz.3.81 (545) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 33.888663][ T30] audit: type=1400 audit(1776055260.451:194): avc: denied { ioctl } for pid=546 comm="syz.3.82" path="socket:[16260]" dev="sockfs" ino=16260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.189913][ T26] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 34.235580][ T30] audit: type=1400 audit(1776055260.791:195): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.257437][ T26] usb 2-1: USB disconnect, device number 5 [ 34.281349][ T26] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 34.311110][ T30] audit: type=1400 audit(1776055260.811:196): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.375153][ T30] audit: type=1400 audit(1776055260.811:197): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=1139 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.567452][ T581] capability: warning: `syz.2.88' uses 32-bit capabilities (legacy support in use) [ 34.972268][ T608] netlink: 'syz.2.94': attribute type 12 has an invalid length. [ 35.319790][ T644] tipc: Started in network mode [ 35.324740][ T644] tipc: Node identity ac14140f, cluster identity 4711 [ 35.348705][ T644] tipc: New replicast peer: 255.224.255.255 [ 35.358380][ T644] tipc: Enabled bearer , priority 10 [ 35.643545][ T651] device syzkaller0 entered promiscuous mode [ 36.008093][ T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.133528][ T669] netlink: 'syz.4.117': attribute type 12 has an invalid length. [ 36.142775][ T669] netlink: 'syz.4.117': attribute type 29 has an invalid length. [ 36.151142][ T669] netlink: 148 bytes leftover after parsing attributes in process `syz.4.117'. [ 36.163938][ T669] Zero length message leads to an empty skb [ 36.231383][ T681] netlink: 44 bytes leftover after parsing attributes in process `syz.2.123'. [ 36.338860][ T691] netlink: 64 bytes leftover after parsing attributes in process `syz.2.127'. [ 36.358117][ T691] netlink: 64 bytes leftover after parsing attributes in process `syz.2.127'. [ 36.388179][ T26] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 36.408116][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.419143][ T696] netlink: 28 bytes leftover after parsing attributes in process `syz.4.129'. [ 36.438095][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.458300][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 36.498307][ T291] tipc: Node number set to 2886997007 [ 36.588144][ T26] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 36.607401][ T26] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 36.620737][ T26] usb 2-1: Manufacturer: syz [ 36.632166][ T26] usb 2-1: config 0 descriptor?? [ 37.269143][ T26] appleir 0003:05AC:8243.0003: item fetching failed at offset 0/1 [ 37.277249][ T26] appleir 0003:05AC:8243.0003: parse failed [ 37.300505][ T26] appleir: probe of 0003:05AC:8243.0003 failed with error -22 [ 37.470809][ T6] usb 2-1: USB disconnect, device number 6 [ 37.490024][ T738] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 37.508838][ T738] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 37.517237][ T738] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 37.579141][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 37.579156][ T30] audit: type=1400 audit(1776055264.141:226): avc: denied { create } for pid=744 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 37.847673][ T30] audit: type=1400 audit(1776055264.401:227): avc: denied { read write } for pid=761 comm="syz.2.156" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.882540][ T30] audit: type=1400 audit(1776055264.401:228): avc: denied { open } for pid=761 comm="syz.2.156" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.921735][ T30] audit: type=1400 audit(1776055264.401:229): avc: denied { ioctl } for pid=761 comm="syz.2.156" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.014641][ T30] audit: type=1400 audit(1776055264.571:230): avc: denied { read write } for pid=767 comm="syz.3.159" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 38.068104][ T30] audit: type=1400 audit(1776055264.571:231): avc: denied { open } for pid=767 comm="syz.3.159" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 38.114010][ T30] audit: type=1400 audit(1776055264.651:232): avc: denied { write } for pid=769 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.144266][ T30] audit: type=1400 audit(1776055264.651:233): avc: denied { nlmsg_write } for pid=769 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.468156][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 38.828992][ T783] netlink: 'syz.3.164': attribute type 3 has an invalid length. [ 38.874424][ T30] audit: type=1326 audit(1776055265.431:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=786 comm="syz.3.166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ee6257819 code=0x0 [ 38.907249][ T30] audit: type=1326 audit(1776055265.461:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=788 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49ee02819 code=0x7ffc0000 [ 38.998222][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.007330][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.059418][ T26] usb 5-1: Product: syz [ 39.063671][ T26] usb 5-1: Manufacturer: syz [ 39.069299][ T26] usb 5-1: SerialNumber: syz [ 39.485067][ T825] netlink: 'syz.1.180': attribute type 4 has an invalid length. [ 39.701120][ T841] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 39.745518][ T832] usb usb1: usbfs: process 832 (syz.1.180) did not claim interface 63 before use [ 39.771819][ T846] binder: 845:846 ioctl c0306201 2000000004c0 returned -14 [ 40.068093][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.208333][ T26] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 40.216153][ T26] cdc_ncm 5-1:1.0: dwNtbInMaxSize=60 is too small. Using 2048 [ 40.235606][ T26] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 40.389617][ T283] syz-executor (283) used greatest stack depth: 21760 bytes left [ 40.415423][ T860] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.422660][ T860] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.430388][ T860] device bridge_slave_0 entered promiscuous mode [ 40.438271][ T6] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 40.446439][ T6] usb 4-1: config 0 has no interface number 0 [ 40.452883][ T860] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.453298][ T6] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.460938][ T860] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.470951][ T6] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.481120][ T860] device bridge_slave_1 entered promiscuous mode [ 40.487926][ T6] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 40.502410][ T26] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 40.504004][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.528793][ T6] usb 4-1: config 0 descriptor?? [ 40.540657][ T26] usb 5-1: USB disconnect, device number 5 [ 40.546994][ T26] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 40.607286][ T860] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.614431][ T860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.621806][ T860] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.628881][ T860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.636547][ T291] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.663220][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.671941][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.679864][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.693141][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.701632][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.708726][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.718863][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.727225][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.734334][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.753451][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.762012][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.783524][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.796963][ T860] device veth0_vlan entered promiscuous mode [ 40.804760][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.814097][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.821947][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.840445][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.849535][ T860] device veth1_macvtap entered promiscuous mode [ 40.861184][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.876083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.914465][ T8] device bridge_slave_1 left promiscuous mode [ 40.921559][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.929657][ T8] device bridge_slave_0 left promiscuous mode [ 40.935956][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.944980][ T8] device veth1_macvtap left promiscuous mode [ 40.952096][ T8] device veth0_vlan left promiscuous mode [ 40.998178][ T291] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 41.009311][ T6] prodikeys 0003:041E:2801.0004: collection stack underflow [ 41.010255][ T291] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.018370][ T6] prodikeys 0003:041E:2801.0004: item 0 1 0 12 parsing failed [ 41.029531][ T291] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 41.055706][ T6] prodikeys 0003:041E:2801.0004: hid parse failed [ 41.077310][ T6] prodikeys: probe of 0003:041E:2801.0004 failed with error -22 [ 41.128192][ T291] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 41.137422][ T291] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 41.146685][ T291] usb 3-1: Manufacturer: syz [ 41.154200][ T291] usb 3-1: config 0 descriptor?? [ 41.161417][ T921] device syzkaller0 entered promiscuous mode [ 41.212934][ T412] usb 4-1: USB disconnect, device number 4 [ 41.457783][ T26] usb 3-1: USB disconnect, device number 7 [ 41.498107][ T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 41.588097][ T302] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 41.868217][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.879483][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.889619][ T6] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 41.898834][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.908006][ T6] usb 5-1: config 0 descriptor?? [ 41.958201][ T302] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 41.967351][ T302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.978667][ T302] usb 6-1: config 0 descriptor?? [ 42.022717][ T959] device syzkaller0 entered promiscuous mode [ 42.070984][ T961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.225'. [ 42.118129][ T412] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 42.128163][ C0] syz_tun: tun_net_xmit 58 [ 42.153756][ T971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 42.284424][ T984] device syzkaller0 entered promiscuous mode [ 42.358104][ T412] usb 4-1: Using ep0 maxpacket: 8 [ 42.378894][ T6] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 42.400868][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input6 [ 42.478212][ T412] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 42.487919][ T412] usb 4-1: config 0 has no interface number 0 [ 42.494573][ T412] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.505713][ T6] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 42.518952][ T412] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 42.528086][ T412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.540252][ T412] usb 4-1: config 0 descriptor?? [ 42.658123][ T291] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 42.698130][ T302] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 42.780102][ T359] usb 4-1: USB disconnect, device number 5 [ 42.864266][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 42.864283][ T30] audit: type=1400 audit(1776055269.421:259): avc: denied { bind } for pid=1014 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.890597][ T30] audit: type=1400 audit(1776055269.421:260): avc: denied { connect } for pid=1014 comm="syz.3.250" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.008198][ C0] syz_tun: tun_net_xmit 58 [ 43.038184][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.049338][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.059521][ T291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.072917][ T291] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.078463][ T302] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 43.083178][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.096647][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.102501][ T291] usb 2-1: config 0 descriptor?? [ 43.128109][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.137942][ T302] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.150896][ T302] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.160128][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.178345][ T302] usb 3-1: config 0 descriptor?? [ 43.308096][ T885] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.599239][ T291] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 43.608779][ T291] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 43.659078][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.666579][ T412] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 43.674508][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.681990][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.689604][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.697056][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.704562][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.712103][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.718392][ T885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 43.719630][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.734655][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.742197][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.749758][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.757164][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.764637][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.772116][ T302] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.779784][ T302] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 43.788901][ T302] plantronics 0003:047F:FFFF.0007: hiddev97,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 43.978338][ T885] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 43.987517][ T885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.995638][ T885] usb 4-1: Product: syz [ 43.999894][ T885] usb 4-1: Manufacturer: syz [ 44.004513][ T885] usb 4-1: SerialNumber: syz [ 44.263651][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.270904][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.324010][ T302] usb 6-1: USB disconnect, device number 2 [ 44.568881][ T6] usb 5-1: USB disconnect, device number 6 [ 44.738162][ T302] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 44.919603][ T291] usb 3-1: USB disconnect, device number 8 [ 45.108193][ T302] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.119181][ T302] usb 6-1: config 0 has no interfaces? [ 45.124683][ T302] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 45.133868][ T302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.142644][ T302] usb 6-1: config 0 descriptor?? [ 45.358138][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 45.431351][ T1051] process 'syz.5.254' launched './file0' with NULL argv: empty string added [ 45.482758][ T291] usb 6-1: USB disconnect, device number 3 [ 45.488725][ T30] audit: type=1400 audit(1776055272.041:261): avc: denied { setopt } for pid=1060 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.516363][ T412] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 45.523891][ T30] audit: type=1400 audit(1776055272.041:262): avc: denied { bind } for pid=1060 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.527963][ T412] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.718167][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.728779][ T302] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 45.736308][ T60] usb 5-1: config 0 has no interfaces? [ 45.741870][ T60] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 45.751019][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.759789][ T60] usb 5-1: config 0 descriptor?? [ 45.838153][ T359] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 45.921405][ T1019] syz.3.251 (1019) used greatest stack depth: 20064 bytes left [ 45.968155][ T302] usb 3-1: Using ep0 maxpacket: 16 [ 45.999415][ T60] usb 5-1: USB disconnect, device number 7 [ 46.010551][ T885] usb 4-1: USB disconnect, device number 6 [ 46.088175][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.099239][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.109069][ T302] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 46.118166][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.118298][ T359] usb 2-1: device firmware changed [ 46.131999][ T6] usb 2-1: USB disconnect, device number 7 [ 46.138485][ T302] usb 3-1: config 0 descriptor?? [ 46.228648][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.288268][ T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 46.620148][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.627742][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.635397][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.642965][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.650521][ T6] usb 2-1: config 0 has no interfaces? [ 46.656213][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.663658][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.671152][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.678633][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.686046][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.693595][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.701096][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.708636][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.716118][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.723684][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.731223][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.740624][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.748102][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.756125][ T6] usb 2-1: SerialNumber: syz [ 46.760978][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.768603][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.776191][ T30] audit: type=1400 audit(1776055273.331:263): avc: denied { create } for pid=1074 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.776919][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.803479][ T6] usb 2-1: config 0 descriptor?? [ 46.808606][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.816382][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.819043][ T1057] UDC core: couldn't find an available UDC or it's busy: -16 [ 46.824244][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.839115][ T1075] fuse: root generation should be zero [ 46.844666][ T1057] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 46.852662][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.869504][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.884687][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.900341][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.910712][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.928156][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.941979][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.955181][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.955428][ T30] audit: type=1400 audit(1776055273.511:264): avc: denied { read } for pid=1085 comm="syz.4.272" path="socket:[19662]" dev="sockfs" ino=19662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.963455][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 46.993877][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.001525][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.009366][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.016813][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.024471][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.032092][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.039702][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.050027][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.058228][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.071051][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.081125][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.088738][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.096193][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.104084][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.111685][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.119282][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.129657][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.137165][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.144937][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.152530][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.160155][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.167698][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.175477][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.183078][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.193154][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.200757][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.208339][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.215779][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.227328][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.228225][ T885] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 47.242000][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.252616][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.260169][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.267665][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.275471][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.286191][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.293706][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.301370][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.308882][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.316361][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.323891][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.331358][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.338863][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.346296][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.354217][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.361866][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.370920][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.378558][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.386744][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.394278][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.401722][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.409191][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.416613][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.439277][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.451823][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.467069][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.482479][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.498120][ C0] syz_tun: tun_net_xmit 54 [ 47.508171][ T885] usb 4-1: Using ep0 maxpacket: 8 [ 47.510789][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.528478][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.532513][ T30] audit: type=1400 audit(1776055274.091:265): avc: denied { mounton } for pid=1114 comm="syz.2.285" path="/83/file0" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 47.543927][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.599811][ T30] audit: type=1400 audit(1776055274.161:266): avc: denied { write } for pid=1122 comm="syz.2.288" name="ptype" dev="proc" ino=4026532626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 47.628683][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.643839][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.651938][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.658528][ T885] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 47.667827][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.678891][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.684326][ T885] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 47.686676][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.703099][ T885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 47.704777][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.721244][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.728941][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.731450][ T885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 47.737322][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.747639][ T885] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 47.767425][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.777879][ T885] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 47.784267][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.788661][ T885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.805710][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.817433][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.825273][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.833313][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.840854][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.848486][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.856066][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.868321][ T30] audit: type=1400 audit(1776055274.431:267): avc: denied { listen } for pid=1135 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.887807][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.895613][ T30] audit: type=1400 audit(1776055274.431:268): avc: denied { getopt } for pid=1126 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.915266][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.922956][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.930809][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.938753][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.946265][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.953838][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.961466][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.969228][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.976882][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.984579][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.992121][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 47.999716][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.007213][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.015002][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.022523][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.030223][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.037697][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.051293][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.058865][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.066380][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.077402][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.085105][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.092792][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.100351][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.107844][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.115362][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.123145][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.134803][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.142370][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.149904][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.157396][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.164992][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.172506][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.180036][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.187520][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.195026][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.202519][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.210026][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.217470][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.224915][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.232468][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.239918][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.247344][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.254818][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.262258][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.269873][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.277303][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.284754][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.292240][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.299880][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.307296][ T302] hid-generic 0003:0458:5016.0009: unknown main item tag 0x0 [ 48.368146][ C0] syz_tun: tun_net_xmit 54 [ 48.469242][ T30] audit: type=1400 audit(1776055275.031:269): avc: denied { getopt } for pid=1165 comm="syz.5.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.526658][ T302] hid-generic 0003:0458:5016.0009: hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 48.568692][ T302] usb 3-1: USB disconnect, device number 9 [ 48.605290][ T6] usb 2-1: USB disconnect, device number 8 [ 48.622836][ T1175] fido_id[1175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 48.776079][ T1193] netlink: 84 bytes leftover after parsing attributes in process `syz.1.318'. [ 48.829172][ T1197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.319'. [ 48.838817][ T1197] netlink: 24 bytes leftover after parsing attributes in process `syz.5.319'. [ 48.847856][ T1197] ================================================================== [ 48.855945][ T1197] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 48.864290][ T1197] Read of size 8 at addr ffff888110eec5c0 by task syz.5.319/1197 [ 48.872048][ T1197] [ 48.874401][ T1197] CPU: 1 PID: 1197 Comm: syz.5.319 Not tainted syzkaller #0 [ 48.881750][ T1197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 48.891849][ T1197] Call Trace: [ 48.895271][ T1197] [ 48.898267][ T1197] __dump_stack+0x21/0x30 [ 48.902653][ T1197] dump_stack_lvl+0x110/0x170 [ 48.907374][ T1197] ? show_regs_print_info+0x20/0x20 [ 48.912629][ T1197] ? load_image+0x3e0/0x3e0 [ 48.917174][ T1197] print_address_description+0x7f/0x2c0 [ 48.922755][ T1197] ? tc_setup_flow_action+0x870/0x3240 [ 48.928252][ T1197] kasan_report+0xf1/0x140 [ 48.932713][ T1197] ? tc_setup_flow_action+0x870/0x3240 [ 48.938213][ T1197] __asan_report_load8_noabort+0x14/0x20 [ 48.943891][ T1197] tc_setup_flow_action+0x870/0x3240 [ 48.949257][ T1197] mall_replace_hw_filter+0x2cc/0x8b0 [ 48.954665][ T1197] ? pcpu_block_update_hint_alloc+0x8c4/0xc50 [ 48.960771][ T1197] ? mall_set_parms+0x520/0x520 [ 48.965659][ T1197] ? tcf_exts_destroy+0xb0/0xb0 [ 48.970550][ T1197] ? pcpu_alloc+0x1170/0x16e0 [ 48.975263][ T1197] ? mall_set_parms+0x1e8/0x520 [ 48.980153][ T1197] mall_change+0x544/0x760 [ 48.984599][ T1197] ? __kasan_check_write+0x14/0x20 [ 48.989758][ T1197] ? mall_get+0xa0/0xa0 [ 48.993951][ T1197] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 48.999878][ T1197] tc_new_tfilter+0x12e5/0x18e0 [ 49.004767][ T1197] ? tcf_gate_entry_destructor+0x20/0x20 [ 49.010433][ T1197] ? security_capable+0x87/0xb0 [ 49.015326][ T1197] ? ns_capable+0x8c/0xf0 [ 49.019688][ T1197] ? netlink_net_capable+0x125/0x160 [ 49.025009][ T1197] ? tcf_gate_entry_destructor+0x20/0x20 [ 49.030672][ T1197] rtnetlink_rcv_msg+0x871/0xce0 [ 49.035655][ T1197] ? rtnetlink_bind+0x80/0x80 [ 49.038526][ T302] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 49.040369][ T1197] ? avc_has_perm_noaudit+0x391/0x490 [ 49.053322][ T1197] ? memcpy+0x56/0x70 [ 49.057352][ T1197] ? avc_has_perm_noaudit+0x30b/0x490 [ 49.062766][ T1197] ? arch_stack_walk+0xee/0x140 [ 49.067703][ T1197] ? avc_denied+0x1b0/0x1b0 [ 49.072250][ T1197] ? stack_trace_save+0xa6/0xf0 [ 49.077149][ T1197] ? avc_has_perm+0x163/0x250 [ 49.081868][ T1197] ? avc_has_perm_noaudit+0x490/0x490 [ 49.087322][ T1197] ? x64_sys_call+0x4b/0x9a0 [ 49.092036][ T1197] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 49.097456][ T1197] netlink_rcv_skb+0x1f5/0x440 [ 49.102260][ T1197] ? rtnetlink_bind+0x80/0x80 [ 49.107013][ T1197] ? netlink_ack+0xb50/0xb50 [ 49.111651][ T1197] ? __netlink_lookup+0x387/0x3b0 [ 49.116720][ T1197] rtnetlink_rcv+0x1c/0x20 [ 49.121178][ T1197] netlink_unicast+0x876/0xa40 [ 49.125986][ T1197] netlink_sendmsg+0x879/0xb80 [ 49.130804][ T1197] ? netlink_getsockopt+0x530/0x530 [ 49.136047][ T1197] ? do_futex+0xde8/0x2800 [ 49.140510][ T1197] ? security_socket_sendmsg+0x82/0xa0 [ 49.146014][ T1197] ? netlink_getsockopt+0x530/0x530 [ 49.151404][ T1197] ____sys_sendmsg+0x5b7/0x8f0 [ 49.156241][ T1197] ? __sys_sendmsg_sock+0x40/0x40 [ 49.161312][ T1197] ? import_iovec+0x7c/0xb0 [ 49.165853][ T1197] ___sys_sendmsg+0x236/0x2e0 [ 49.170575][ T1197] ? __sys_sendmsg+0x280/0x280 [ 49.175386][ T1197] ? sock_show_fdinfo+0xa0/0xa0 [ 49.180289][ T1197] ? __fdget+0x1a1/0x230 [ 49.184579][ T1197] __x64_sys_sendmsg+0x206/0x2f0 [ 49.189556][ T1197] ? ___sys_sendmsg+0x2e0/0x2e0 [ 49.194449][ T1197] ? __kasan_check_write+0x14/0x20 [ 49.199593][ T1197] ? switch_fpu_return+0x15d/0x2c0 [ 49.204730][ T1197] x64_sys_call+0x4b/0x9a0 [ 49.209165][ T1197] do_syscall_64+0x4c/0xa0 [ 49.213599][ T1197] ? clear_bhb_loop+0x50/0xa0 [ 49.218315][ T1197] ? clear_bhb_loop+0x50/0xa0 [ 49.223015][ T1197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.228932][ T1197] RIP: 0033:0x7f74355ae819 [ 49.233374][ T1197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.253004][ T1197] RSP: 002b:00007f7434009028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.261440][ T1197] RAX: ffffffffffffffda RBX: 00007f7435827fa0 RCX: 00007f74355ae819 [ 49.269431][ T1197] RDX: 0000000020044044 RSI: 0000200000000580 RDI: 0000000000000004 [ 49.277422][ T1197] RBP: 00007f7435644c91 R08: 0000000000000000 R09: 0000000000000000 [ 49.285415][ T1197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.293403][ T1197] R13: 00007f7435828038 R14: 00007f7435827fa0 R15: 00007fff96d8e218 [ 49.301425][ T1197] [ 49.304468][ T1197] [ 49.306806][ T1197] Allocated by task 1197: [ 49.311148][ T1197] __kasan_kmalloc+0xda/0x110 [ 49.315948][ T1197] __kmalloc+0x13d/0x2c0 [ 49.320284][ T1197] tcf_idr_create+0x5f/0x790 [ 49.324971][ T1197] tcf_idr_create_from_flags+0x61/0x70 [ 49.330465][ T1197] tcf_gact_init+0x342/0x570 [ 49.335075][ T1197] tcf_action_init_1+0x3ff/0x6b0 [ 49.340031][ T1197] tcf_action_init+0x233/0x7a0 [ 49.344819][ T1197] tcf_exts_validate+0x24a/0x580 [ 49.349899][ T1197] mall_set_parms+0x48/0x520 [ 49.354510][ T1197] mall_change+0x478/0x760 [ 49.358969][ T1197] tc_new_tfilter+0x12e5/0x18e0 [ 49.363840][ T1197] rtnetlink_rcv_msg+0x871/0xce0 [ 49.368818][ T1197] netlink_rcv_skb+0x1f5/0x440 [ 49.373600][ T1197] rtnetlink_rcv+0x1c/0x20 [ 49.378038][ T1197] netlink_unicast+0x876/0xa40 [ 49.382824][ T1197] netlink_sendmsg+0x879/0xb80 [ 49.387614][ T1197] ____sys_sendmsg+0x5b7/0x8f0 [ 49.392403][ T1197] ___sys_sendmsg+0x236/0x2e0 [ 49.397103][ T1197] __x64_sys_sendmsg+0x206/0x2f0 [ 49.402060][ T1197] x64_sys_call+0x4b/0x9a0 [ 49.406494][ T1197] do_syscall_64+0x4c/0xa0 [ 49.410937][ T1197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.416849][ T1197] [ 49.419212][ T1197] The buggy address belongs to the object at ffff888110eec500 [ 49.419212][ T1197] which belongs to the cache kmalloc-192 of size 192 [ 49.433300][ T1197] The buggy address is located 0 bytes to the right of [ 49.433300][ T1197] 192-byte region [ffff888110eec500, ffff888110eec5c0) [ 49.446953][ T1197] The buggy address belongs to the page: [ 49.452620][ T1197] page:ffffea000443bb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110eec [ 49.463019][ T1197] flags: 0x4000000000000200(slab|zone=1) [ 49.468710][ T1197] raw: 4000000000000200 0000000000000000 0000000100000001 ffff888100042c00 [ 49.477344][ T1197] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 49.486073][ T1197] page dumped because: kasan: bad access detected [ 49.492507][ T1197] page_owner tracks the page as allocated [ 49.498252][ T1197] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 115, ts 5713310675, free_ts 0 [ 49.513287][ T1197] post_alloc_hook+0x192/0x1b0 [ 49.518078][ T1197] prep_new_page+0x1c/0x110 [ 49.522602][ T1197] get_page_from_freelist+0x2d3a/0x2dc0 [ 49.528168][ T1197] __alloc_pages+0x1a2/0x460 [ 49.532776][ T1197] new_slab+0xa1/0x4d0 [ 49.536891][ T1197] ___slab_alloc+0x381/0x810 [ 49.541497][ T1197] __slab_alloc+0x49/0x90 [ 49.545857][ T1197] kmem_cache_alloc_trace+0x146/0x270 [ 49.551280][ T1197] kernfs_fop_open+0x343/0xb30 [ 49.556092][ T1197] do_dentry_open+0x834/0x1010 [ 49.560881][ T1197] vfs_open+0x73/0x80 [ 49.564880][ T1197] path_openat+0x26a6/0x2f20 [ 49.569490][ T1197] do_filp_open+0x1e2/0x410 [ 49.574014][ T1197] do_sys_openat2+0x15e/0x7f0 [ 49.578713][ T1197] __x64_sys_openat+0x136/0x160 [ 49.583585][ T1197] x64_sys_call+0x219/0x9a0 [ 49.588104][ T1197] page_owner free stack trace missing [ 49.593484][ T1197] [ 49.595817][ T1197] Memory state around the buggy address: [ 49.601460][ T1197] ffff888110eec480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 49.609547][ T1197] ffff888110eec500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.617823][ T1197] >ffff888110eec580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 49.626393][ T1197] ^ [ 49.632586][ T1197] ffff888110eec600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.640683][ T1197] ffff888110eec680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 49.648874][ T1197] ================================================================== [ 49.656961][ T1197] Disabling lock debugging due to kernel taint [ 49.675359][ T30] audit: type=1400 audit(1776055276.231:270): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.723991][ T30] audit: type=1400 audit(1776055276.261:271): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.745707][ T30] audit: type=1400 audit(1776055276.261:272): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.780232][ T30] audit: type=1400 audit(1776055276.261:273): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.800874][ T30] audit: type=1400 audit(1776055276.261:274): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.821636][ T30] audit: type=1400 audit(1776055276.261:275): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.844623][ T30] audit: type=1400 audit(1776055276.261:276): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.898080][ T302] usb 3-1: Using ep0 maxpacket: 16 [ 49.963943][ T885] usb 4-1: USB disconnect, device number 7 [ 50.018272][ T302] usb 3-1: config 0 has no interfaces? [ 50.098153][ T302] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 50.107633][ T302] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 50.115714][ T302] usb 3-1: Manufacturer: syz [ 50.121110][ T302] usb 3-1: config 0 descriptor?? [ 51.406434][ T885] usb 3-1: USB disconnect, device number 10