last executing test programs: 15.608812999s ago: executing program 2 (id=48): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xf) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 15.47075578s ago: executing program 2 (id=53): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.34662458s ago: executing program 2 (id=55): ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000009060102f0ffffff00000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 15.34635902s ago: executing program 2 (id=57): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) 15.037454785s ago: executing program 2 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000240)={0x7, 0x4d, 0x2}, 0x7) syz_usb_disconnect(r0) 14.745106068s ago: executing program 2 (id=66): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="dce4c739", 0x4}], 0x1}}], 0x1, 0x20000000) 14.689225973s ago: executing program 32 (id=66): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="dce4c739", 0x4}], 0x1}}], 0x1, 0x20000000) 4.818770314s ago: executing program 0 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 4.765334858s ago: executing program 0 (id=142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="6000330080080e00ffffffffffff0802110000002e68e8a3b755380001000000000037830602000005038f55aa297b"], 0x7c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 4.758203388s ago: executing program 0 (id=143): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect(0x3, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040f00a116700000102000109022a00010100c0000904000003ff000000032401070581020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c8000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000400)={0x0, 0x1, 0x8, "ebaa550303010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) 2.386685689s ago: executing program 3 (id=167): getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x101040a) 2.386479449s ago: executing program 3 (id=168): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB], 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cf000000000000000000000001000000000000000000040000"], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x80, &(0x7f0000000580)=""/128, 0x41100, 0x38, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000640)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x8198, 0xffffffffffffffff, 0x7, &(0x7f00000006c0)=[r6, r6, r6, r6], &(0x7f0000000700)=[{0x4, 0x5, 0x10, 0xc}, {0x4, 0x1, 0x8, 0x8}, {0x0, 0x2, 0x14, 0x7}, {0x3, 0x2, 0x2}, {0x4, 0x1, 0x4, 0xc}, {0x2, 0x5, 0x3}, {0x4, 0x4, 0xa, 0x1}], 0x10, 0x5}, 0x94) 1.786689347s ago: executing program 3 (id=178): socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x801) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cf0000"], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 1.438084214s ago: executing program 0 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}], {0x14}}, 0xcc}}, 0x0) 1.286333887s ago: executing program 3 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 1.286134337s ago: executing program 0 (id=185): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.281195478s ago: executing program 4 (id=186): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280000000000000029000000040000003c01020000000402000204"], 0x28}, 0xc0) 1.230052751s ago: executing program 0 (id=188): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff0000000705"], 0x0) 1.229901711s ago: executing program 4 (id=189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@newtfilter={0x50, 0x2c, 0x609, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 1.174664746s ago: executing program 4 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.174421096s ago: executing program 4 (id=193): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="510fdc7f383e19b5b7f159bf009b8ffd932eadfcdabb6190f1928520a7022201f281268e43aca35c86534f1faa23e48c46d6bb679d9330bb2c5a9e0527eedc16974eed7cc32fd6d6ca50819580aa28029a7eb9c7e2c7f4f8effae1f493d8f6218b4c26d8f8e2d4113c0ecd3175c9cfe5197b2eb062d2e56eea6a4523c257f1aee5a9a45d3a4db16cef050ce20d954e669dfa9452341924d651fa9ad574df2fa9fc446cf92c86192af6d424a84096efa13d1ec82ee45abeb3663bcf", 0xbb}], 0x1}}], 0x1, 0xc8009) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000180)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f000000000000000000000000000020000000"], 0x128}}, 0x0) 1.148572568s ago: executing program 3 (id=194): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000200010000001c000880050007"], 0x44}}, 0x0) 892.918918ms ago: executing program 3 (id=195): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e446, [{{0x9, 0x2, 0xffffffffffffffe1}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000f40)={[{0x8, 0x4e00, "155038aad51c1e2b"}]}) 685.104555ms ago: executing program 5 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 685.047025ms ago: executing program 5 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='localhost ./export_dir 2147483647 \\ 0 0 0\n', 0x2a) 684.959885ms ago: executing program 5 (id=200): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file2\x00', 0x180c8, &(0x7f0000002780)=ANY=[], 0x1, 0x242, &(0x7f00000028c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) 630.67161ms ago: executing program 4 (id=201): ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000009060102f0ffffff00000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) 630.481019ms ago: executing program 4 (id=202): syz_usb_connect(0x3, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040b113420000010102030109024a0001010080fa0904000008ffff0000070581020002000705820200020007058302000200070584034000010705"], 0x0) 630.419499ms ago: executing program 5 (id=203): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 341.773092ms ago: executing program 1 (id=204): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,iocharset=cp1251,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESOCT=0x0, @ANYBLOB="2dfd"], 0x1, 0x1535, &(0x7f0000001380)="$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") close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) 234.325061ms ago: executing program 1 (id=205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer], 0x0, 0x0, 0x0}) 146.699238ms ago: executing program 1 (id=206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 144.379248ms ago: executing program 1 (id=207): r0 = socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) 128.177339ms ago: executing program 1 (id=208): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x3ffffffe}], 0x1, 0x40002000, 0x0) 120.38099ms ago: executing program 1 (id=209): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e446, [{{0x9, 0x2, 0xffffffffffffffe1}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000f40)={[{0x8, 0x4e00, "155038aad51c1e2b"}]}) 12.176479ms ago: executing program 5 (id=210): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1080, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x0, 0xbed4, 0x8, 0x80000fe, 0x3, 0x0, 0x11000, 0x80000000, 0x2, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x8, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1003, 0x8, 0xffff, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x6, 0x84, 0x800100, 0x5, 0x255, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x7, 0x1, 0x0, 0xfffffffd, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=211): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): rocess permissive=1 [ 12.000484][ T24] audit: type=1400 audit(1788207784.970:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 19.174574][ T24] audit: type=1400 audit(1788207792.160:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.175668][ T271] cgroup: Unknown subsys name 'net' [ 19.197268][ T24] audit: type=1400 audit(1788207792.160:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.224530][ T24] audit: type=1400 audit(1788207792.200:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.224730][ T271] cgroup: Unknown subsys name 'devices' [ 19.339445][ T271] cgroup: Unknown subsys name 'hugetlb' [ 19.345194][ T271] cgroup: Unknown subsys name 'rlimit' [ 19.451761][ T24] audit: type=1400 audit(1788207792.440:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.474910][ T24] audit: type=1400 audit(1788207792.440:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.487113][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.499727][ T24] audit: type=1400 audit(1788207792.440:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.531280][ T24] audit: type=1400 audit(1788207792.500:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.556689][ T24] audit: type=1400 audit(1788207792.500:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.592082][ T24] audit: type=1400 audit(1788207792.580:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.617627][ T24] audit: type=1400 audit(1788207792.580:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.617672][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.077063][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.084438][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.091826][ T279] device bridge_slave_0 entered promiscuous mode [ 20.099426][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.106449][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.113825][ T279] device bridge_slave_1 entered promiscuous mode [ 20.182361][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.189455][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.196692][ T280] device bridge_slave_0 entered promiscuous mode [ 20.203592][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.210667][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.217923][ T280] device bridge_slave_1 entered promiscuous mode [ 20.263762][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.270843][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.278237][ T282] device bridge_slave_0 entered promiscuous mode [ 20.286097][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.293143][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.300514][ T282] device bridge_slave_1 entered promiscuous mode [ 20.371466][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.378542][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.385884][ T286] device bridge_slave_0 entered promiscuous mode [ 20.395051][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.402295][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.409814][ T286] device bridge_slave_1 entered promiscuous mode [ 20.448024][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.455162][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.462498][ T281] device bridge_slave_0 entered promiscuous mode [ 20.469583][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.476611][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.483875][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.490893][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.504848][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.511949][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.519294][ T281] device bridge_slave_1 entered promiscuous mode [ 20.572420][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.579494][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.586934][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.594021][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.624055][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.631124][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.638405][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.645423][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.664560][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.671629][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.678887][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.685898][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.700113][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.707160][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.714419][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.721589][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.730497][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.737793][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.745124][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.752583][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.760004][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.767455][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.774781][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.781959][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.789437][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.796793][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.803992][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.823595][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.831002][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.838447][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.846581][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.853612][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.861556][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.869765][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.876780][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.891884][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.900148][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.907166][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.914614][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.922923][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.930093][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.937432][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.945415][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.965716][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.975079][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.985868][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.000045][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.007656][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.015305][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.029192][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.037391][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.044435][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.052233][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.060646][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.067669][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.075149][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.083282][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.090312][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.097623][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.105836][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.112902][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.123311][ T279] device veth0_vlan entered promiscuous mode [ 21.135642][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.143596][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.151896][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.160557][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.168694][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.176127][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.190391][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.198585][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.206405][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.215024][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.223225][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.230252][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.237659][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.246363][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.254648][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.261687][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.269013][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.277056][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.286649][ T279] device veth1_macvtap entered promiscuous mode [ 21.298437][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.306095][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.314732][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.330471][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.338549][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.346426][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.354868][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.363162][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.371237][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.379257][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.387462][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.395854][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.404255][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.414610][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.423099][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.436282][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.444986][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.459336][ T286] device veth0_vlan entered promiscuous mode [ 21.465913][ T282] device veth0_vlan entered promiscuous mode [ 21.476064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.484327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.492374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.500723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.508806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.516265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.523742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.531157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.545186][ T281] device veth0_vlan entered promiscuous mode [ 21.553302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.561655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.569987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.577797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.586328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.594633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.604343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.611998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.621004][ T282] device veth1_macvtap entered promiscuous mode [ 21.633648][ T286] device veth1_macvtap entered promiscuous mode [ 21.634065][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 21.647087][ T281] device veth1_macvtap entered promiscuous mode [ 21.655718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.664286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.672930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.681104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.689604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.700774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.708835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.722876][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.734178][ T280] device veth0_vlan entered promiscuous mode [ 21.742702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.750335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.757873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.766273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.774809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.783317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.791809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.800175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.809061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.817500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.838230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.849963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.858977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.867504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.887637][ T280] device veth1_macvtap entered promiscuous mode [ 21.906593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.925929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.936249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.955081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.966103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.982235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.995448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.007886][ T309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 22.030711][ T308] loop4: p1 < > p4 [ 22.045856][ T308] loop4: p4 size 8388608 extends beyond EOD, truncated [ 22.888212][ T318] ====================================================== [ 22.888212][ T318] WARNING: the mand mount option is being deprecated and [ 22.888212][ T318] will be removed in v5.15! [ 22.888212][ T318] ====================================================== [ 22.926533][ T316] udevd[316]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 22.943050][ T302] udevd[302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 23.099705][ T336] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 23.254234][ T318] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 23.265768][ T302] udevd[302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 23.276709][ T316] udevd[316]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 23.343991][ T318] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,minixdf,grpjquota=,journal_ioprio=0x0000000000000006,errors=remount-ro,nomblk_io_submit,noinit_itable,nogrpid, [ 23.432118][ T318] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.046554][ T318] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4: bg 0: block 112: padding at end of block bitmap is not set [ 24.179006][ T24] kauditd_printk_skb: 60 callbacks suppressed [ 24.179016][ T24] audit: type=1400 audit(1788207797.170:134): avc: denied { write } for pid=352 comm="syz.4.14" name="usb_gadget" dev="configfs" ino=12740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 24.239404][ T318] EXT4-fs (loop3): Remounting filesystem read-only [ 24.269593][ T24] audit: type=1400 audit(1788207797.200:135): avc: denied { add_name } for pid=352 comm="syz.4.14" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 24.290068][ T24] audit: type=1400 audit(1788207797.200:136): avc: denied { create } for pid=352 comm="syz.4.14" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 24.777312][ T24] audit: type=1400 audit(1788207797.200:137): avc: denied { create } for pid=352 comm="syz.4.14" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 24.800202][ T24] audit: type=1400 audit(1788207797.200:138): avc: denied { write } for pid=352 comm="syz.4.14" name="report_desc" dev="configfs" ino=14952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 24.978281][ T24] audit: type=1400 audit(1788207797.200:139): avc: denied { open } for pid=352 comm="syz.4.14" path="/2/config/usb_gadget/g1/functions/hid.usb0/report_desc" dev="configfs" ino=14952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 25.058226][ T24] audit: type=1400 audit(1788207797.200:140): avc: denied { create } for pid=352 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 25.139104][ T24] audit: type=1400 audit(1788207797.210:141): avc: denied { setopt } for pid=352 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 25.255754][ T370] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 25.378355][ T24] audit: type=1400 audit(1788207797.210:142): avc: denied { bind } for pid=352 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 25.452870][ T373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 25.510067][ T373] device vlan2 entered promiscuous mode [ 25.533865][ T373] device dummy0 entered promiscuous mode [ 25.564438][ T24] audit: type=1400 audit(1788207797.210:143): avc: denied { map } for pid=352 comm="syz.4.14" path="socket:[14953]" dev="sockfs" ino=14953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 25.885671][ T386] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 25.891131][ T351] Zero length message leads to an empty skb [ 25.918229][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.927490][ T390] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 26.118244][ T395] exfat: Deprecated parameter 'namecase' [ 26.128409][ T395] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 26.201555][ T401] fuse: Unknown parameter 'grou00000000000000000000' [ 26.418780][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.456299][ T25] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 26.483012][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.515162][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.543387][ T25] usb 4-1: config 0 descriptor?? [ 26.800860][ T413] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 26.944389][ T415] tipc: Started in network mode [ 26.976736][ T415] tipc: Own node identity 7f000001, cluster identity 4711 [ 27.009254][ T415] tipc: New replicast peer: 127.0.0.1 [ 27.038304][ T415] tipc: Enabled bearer , priority 10 [ 27.089321][ T416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.30'. [ 27.107330][ T25] usb 4-1: USB disconnect, device number 2 [ 27.147425][ T415] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 27.147425][ T415] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 27.147425][ T415] [ 27.286087][ T415] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 27.298065][ T415] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e0406018, mo2=0002] [ 27.306102][ T415] System zones: 0-1, 15-15, 18-18, 34-34 [ 27.312652][ T415] EXT4-fs (loop4): orphan cleanup on readonly fs [ 27.319125][ T415] EXT4-fs warning (device loop4): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 27.334728][ T415] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 27.341614][ T415] EXT4-fs (loop4): 1 truncate cleaned up [ 27.347287][ T415] EXT4-fs (loop4): mounted filesystem without journal. Opts: noacl,dioread_nolock,,errors=continue [ 27.398513][ T415] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 28.145185][ T456] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 28.158207][ T20] tipc: 32-bit node address hash set to 100007f [ 28.406820][ T460] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 28.416486][ T460] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.418017][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.543428][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.550684][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.574585][ T480] binder: 479:480 ioctl c0306201 200000000680 returned -14 [ 28.693766][ T487] EXT4-fs (loop2): Ignoring removed nobh option [ 28.716700][ T487] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue [ 28.739204][ T487] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.868329][ T487] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz.2.57: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 29.006867][ T499] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27 [ 29.023149][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.030419][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.040236][ T499] EXT4-fs error (device loop2): ext4_dirty_inode:6181: inode #2: comm syz.2.57: mark_inode_dirty error [ 29.052207][ T499] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27 [ 29.069329][ T499] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.57: mark_inode_dirty error [ 29.258376][ T5] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 29.267107][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.277287][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 29.286311][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.330159][ T24] kauditd_printk_skb: 68 callbacks suppressed [ 29.330169][ T24] audit: type=1400 audit(1788207802.320:211): avc: denied { mounton } for pid=513 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 29.396350][ T513] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.403661][ T513] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.411380][ T513] device bridge_slave_0 entered promiscuous mode [ 29.418688][ T513] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.425730][ T513] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.433431][ T513] device bridge_slave_1 entered promiscuous mode [ 29.460471][ T508] EXT4-fs (loop4): Ignoring removed nobh option [ 29.475213][ T508] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.508059][ T508] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 29.526791][ T513] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.533934][ T513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.541264][ T513] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.548312][ T513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.557075][ T508] EXT4-fs (loop4): 1 truncate cleaned up [ 29.563137][ T508] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue [ 29.610661][ T24] audit: type=1400 audit(1788207802.600:212): avc: denied { read append open } for pid=507 comm="syz.4.65" path="/14/bus/cpuset.effective_cpus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.638723][ T24] audit: type=1400 audit(1788207802.630:213): avc: denied { write } for pid=507 comm="syz.4.65" name="cpuset.effective_cpus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.661744][ T24] audit: type=1400 audit(1788207802.630:214): avc: denied { ioctl } for pid=507 comm="syz.4.65" path="/14/bus/cpuset.effective_cpus" dev="loop4" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.688985][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.689136][ T15] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.704801][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.762302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.773038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.789560][ T5] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 29.799640][ T5] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 29.807751][ T5] usb 2-1: Product: syz [ 29.812623][ T5] usb 2-1: Manufacturer: syz [ 29.813749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.826330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.834774][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.841862][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.849568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.859569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.860833][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 29.867833][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.878044][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 29.879911][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.902291][ T5] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 29.926984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.950497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.983054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.034290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.053144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.065495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.070872][ T54] usb 2-1: USB disconnect, device number 2 [ 30.099139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.116726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.126344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.141187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.156809][ T513] device veth0_vlan entered promiscuous mode [ 30.180120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.192349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.209534][ T513] device veth1_macvtap entered promiscuous mode [ 30.219055][ T112] device bridge_slave_1 left promiscuous mode [ 30.225192][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.242890][ T112] device bridge_slave_0 left promiscuous mode [ 30.258308][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.268185][ T15] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 30.280861][ T112] device veth1_macvtap left promiscuous mode [ 30.281606][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.286891][ T112] device veth0_vlan left promiscuous mode [ 30.316319][ T15] usb 1-1: Product: syz [ 30.325514][ T15] usb 1-1: Manufacturer: syz [ 30.325867][ T24] audit: type=1400 audit(1788207803.310:215): avc: denied { name_bind } for pid=531 comm="syz.3.71" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 30.330397][ T15] usb 1-1: SerialNumber: syz [ 30.453500][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.505921][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.528341][ T24] audit: type=1400 audit(1788207803.510:216): avc: denied { create } for pid=534 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.572091][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.610468][ T24] audit: type=1400 audit(1788207803.510:217): avc: denied { setopt } for pid=534 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.667323][ T24] audit: type=1400 audit(1788207803.510:218): avc: denied { write } for pid=534 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.667478][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.698956][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.700376][ T541] binder: BINDER_SET_CONTEXT_MGR already set [ 30.713285][ T541] binder: 540:541 ioctl 4018620d 200000004a80 returned -16 [ 30.779015][ T545] loop0: [ 30.822936][ T550] cgroup: syz.5.76 (550) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 30.844571][ T550] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 30.909756][ T557] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 31.608102][ T15] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 31.617771][ T24] audit: type=1400 audit(1788207804.600:219): avc: denied { bind } for pid=568 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.744285][ T24] audit: type=1326 audit(1788207804.730:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=568 comm="syz.4.83" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe8bbac159 code=0x0 [ 31.800434][ T54] usb 1-1: USB disconnect, device number 2 [ 32.328147][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.366857][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.377020][ T15] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.398218][ T15] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 32.408249][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.428265][ T15] usb 4-1: config 0 descriptor?? [ 32.468589][ T570] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 32.538876][ T570] F2FS-fs (loop4): invalid crc value [ 32.578506][ T54] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 32.611798][ T570] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.712619][ T596] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue [ 32.727902][ T570] F2FS-fs (loop4): recover fsync data on readonly fs [ 32.748076][ T596] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.760597][ T570] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 32.767276][ T570] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 32.774821][ T570] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 32.938074][ T54] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.950151][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 32.963166][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 32.973556][ T54] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 32.996695][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.010729][ T54] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 33.029055][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.068050][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.075478][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.098049][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.105478][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.112925][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.120498][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.127893][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.135334][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.142789][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.150218][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.157613][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.164439][ T616] xt_hashlimit: size too large, truncated to 1048576 [ 33.166143][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.179171][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.186568][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.194154][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.201742][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.209160][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.216550][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.224521][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.231960][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.239421][ T54] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 33.248496][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.255884][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.263362][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.271391][ T54] usb 1-1: Product: syz [ 33.275546][ T54] usb 1-1: Manufacturer: syz [ 33.280197][ T15] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 33.288006][ T54] usb 1-1: SerialNumber: syz [ 33.293591][ T15] hid-generic 0003:0457:07DA.0001: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 33.309936][ T15] usb 4-1: USB disconnect, device number 3 [ 33.367497][ T618] fido_id[618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 33.419645][ T622] EXT4-fs (loop1): Ignoring removed bh option [ 33.432032][ T622] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,grpid,auto_da_alloc,nodioread_nolock,bh,,errors=continue [ 33.447363][ T622] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.461037][ T622] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: block 3: comm syz.1.101: lblock 3 mapped to illegal pblock 3 (length 3) [ 33.475505][ T622] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 33.478201][ T301] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 33.487958][ T622] EXT4-fs (loop1): This should not happen!! Data will be lost [ 33.487958][ T622] [ 33.507694][ T622] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: block 3: comm syz.1.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 33.521890][ T622] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: block 3: comm syz.1.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 33.536022][ T622] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: block 3: comm syz.1.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 33.550664][ T622] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: block 3: comm syz.1.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 33.564983][ T622] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: block 3: comm syz.1.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 33.579281][ T622] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: block 3: comm syz.1.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 33.593553][ T622] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: block 3: comm syz.1.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 33.607703][ T622] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: block 3: comm syz.1.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 33.622876][ T622] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: block 3: comm syz.1.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 33.888177][ T301] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.078163][ T301] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 34.087731][ T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.096498][ T301] usb 6-1: Product: syz [ 34.101556][ T301] usb 6-1: Manufacturer: syz [ 34.106369][ T301] usb 6-1: SerialNumber: syz [ 34.238989][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 34.251342][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.251342][ T9] [ 34.383094][ T632] loop0: [ 34.391347][ T301] usb 6-1: USB disconnect, device number 2 [ 34.504166][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 34.504200][ T24] audit: type=1400 audit(1788207807.490:229): avc: denied { read } for pid=634 comm="syz.1.104" name="inject" dev="tracefs" ino=7472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 34.888080][ T54] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 34.916951][ T24] audit: type=1400 audit(1788207807.900:230): avc: denied { write } for pid=648 comm="syz.4.111" name="fib_trie" dev="proc" ino=4026532515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 35.196972][ T527] usb 1-1: USB disconnect, device number 3 [ 35.202952][ T24] audit: type=1400 audit(1788207808.180:231): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 35.248053][ T301] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 35.258354][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.269981][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.279949][ T54] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.293429][ T54] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 35.302742][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.313701][ T54] usb 4-1: config 0 descriptor?? [ 35.798589][ T664] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 35.819342][ T24] audit: type=1400 audit(1788207808.810:232): avc: denied { mount } for pid=663 comm="syz.4.117" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 35.898261][ T301] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.908739][ T301] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 35.918522][ T301] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 35.928394][ T301] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 35.992587][ T659] F2FS-fs (loop0): fault_injection options not supported [ 36.003266][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.008084][ T659] F2FS-fs (loop0): fault_type options not supported [ 36.010949][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.018012][ T659] F2FS-fs (loop0): invalid crc value [ 36.025419][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.038250][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.040094][ T659] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.045749][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.059628][ T301] usb 6-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 36.068727][ T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 36.076892][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.079088][ T659] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 36.084631][ T301] usb 6-1: Product: syz [ 36.096828][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.104805][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.112915][ T301] usb 6-1: Manufacturer: syz [ 36.118071][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 36.121012][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.125926][ T282] attempt to access beyond end of device [ 36.125926][ T282] loop0: rw=2049, want=45104, limit=40427 [ 36.134371][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.151995][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.188108][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.195538][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.203340][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.211011][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.218447][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.226766][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.234250][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.241749][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.249191][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.256708][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.264184][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.271673][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.279107][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.286564][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.294023][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.301476][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.308927][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.316320][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.333932][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.341397][ T54] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 36.359632][ T54] hid-generic 0003:0457:07DA.0002: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 36.395849][ T54] usb 4-1: USB disconnect, device number 4 [ 36.407195][ T301] usb 6-1: USB disconnect, device number 3 [ 36.414399][ T675] fido_id[675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 36.479465][ T678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.118'. [ 36.505383][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 36.638086][ T25] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 36.646252][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 36.657334][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 36.667336][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 36.678594][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 36.688718][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 36.701814][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 36.710851][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.438037][ T328] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.599901][ T24] audit: type=1400 audit(1788207810.590:233): avc: denied { create } for pid=703 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.625987][ T24] audit: type=1400 audit(1788207810.610:234): avc: denied { create } for pid=705 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 37.798064][ T328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.809820][ T328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.820075][ T328] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 37.829350][ T328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.843458][ T328] usb 1-1: config 0 descriptor?? [ 37.908081][ T392] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.328688][ T328] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 38.336234][ T328] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 38.388084][ T392] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 38.397196][ T392] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 38.405303][ T392] usb 4-1: Product: syz [ 38.409658][ T392] usb 4-1: SerialNumber: syz [ 38.414747][ T392] usb 4-1: config 0 descriptor?? [ 38.528626][ T24] audit: type=1400 audit(1788207811.520:235): avc: denied { create } for pid=694 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.548231][ T328] cp2112 0003:10C4:EA90.0003: error requesting version [ 38.555158][ T24] audit: type=1400 audit(1788207811.520:236): avc: denied { connect } for pid=694 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.575274][ T328] cp2112: probe of 0003:10C4:EA90.0003 failed with error -71 [ 38.584121][ T328] usb 1-1: USB disconnect, device number 4 [ 38.596491][ T721] fido_id[721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 38.795014][ T54] usb 5-1: USB disconnect, device number 2 [ 38.797630][ T24] audit: type=1400 audit(1788207811.780:237): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 39.048784][ T24] audit: type=1400 audit(1788207812.040:238): avc: denied { mounton } for pid=726 comm="syz.0.140" path="/proc/69/task" dev="proc" ino=16691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 39.088400][ T727] loop0: p3 < > p4 < > [ 39.092669][ T727] loop0: partition table partially beyond EOD, truncated [ 39.099947][ T727] loop0: p3 start 4284289 is beyond EOD, truncated [ 39.192827][ T316] udevd[316]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 39.201203][ T54] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.488039][ T328] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.578099][ T54] usb 5-1: config index 0 descriptor too short (expected 69, got 51) [ 39.586232][ T54] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.623061][ T24] audit: type=1400 audit(1788207812.610:239): avc: denied { unmount } for pid=513 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 39.673061][ T743] netlink: 68 bytes leftover after parsing attributes in process `syz.5.147'. [ 39.750937][ T24] audit: type=1400 audit(1788207812.740:240): avc: denied { mount } for pid=746 comm="syz.5.149" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.773067][ T54] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 39.776062][ T24] audit: type=1400 audit(1788207812.770:241): avc: denied { unmount } for pid=513 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.782430][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.810116][ T54] usb 5-1: Product: syz [ 39.814261][ T54] usb 5-1: Manufacturer: syz [ 39.818869][ T54] usb 5-1: SerialNumber: syz [ 39.928046][ T328] usb 1-1: config 0 has no interfaces? [ 39.933677][ T328] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 39.942864][ T328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.955505][ T328] usb 1-1: config 0 descriptor?? [ 39.960572][ T392] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 40.123592][ T24] audit: type=1400 audit(1788207813.110:242): avc: denied { create } for pid=749 comm="syz.5.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.138166][ T54] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8201 device_setup=1 to enable and report any issues to g@b4.vu [ 40.167679][ T54] usb 5-1: USB disconnect, device number 3 [ 40.212510][ T735] udc-core: couldn't find an available UDC or it's busy [ 40.219576][ T735] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.228641][ T328] usb 1-1: USB disconnect, device number 5 [ 40.388948][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.398052][ T392] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.488053][ T392] usb 2-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 40.499696][ T392] usb 2-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 40.508843][ T392] usb 2-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.521901][ T392] usb 2-1: config 66 interface 0 has no altsetting 0 [ 40.636957][ T25] usb 4-1: USB disconnect, device number 5 [ 40.670572][ T760] xt_hashlimit: size too large, truncated to 1048576 [ 40.698551][ T328] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.708198][ T392] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 40.720781][ T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.739780][ T392] usb 2-1: Product: syz [ 40.744325][ T392] usb 2-1: Manufacturer: syz [ 40.750739][ T392] usb 2-1: SerialNumber: syz [ 40.797184][ T24] audit: type=1400 audit(1788207813.780:243): avc: denied { mount } for pid=755 comm="syz.5.152" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.969221][ T24] audit: type=1400 audit(1788207813.960:244): avc: denied { unmount } for pid=513 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 41.058165][ T328] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.091387][ T328] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 41.122901][ T392] usb 2-1: USB disconnect, device number 3 [ 41.181537][ T24] audit: type=1326 audit(1788207814.170:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=769 comm="syz.5.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a362d159 code=0x7ffc0000 [ 41.206378][ T24] audit: type=1326 audit(1788207814.170:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=769 comm="syz.5.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a362d159 code=0x7ffc0000 [ 41.231166][ T328] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 0.00 [ 41.240303][ T328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 41.248510][ T328] usb 1-1: Product: syz [ 41.252908][ T328] usb 1-1: Manufacturer: syz [ 41.261449][ T24] audit: type=1326 audit(1788207814.170:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=769 comm="syz.5.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a362d159 code=0x7ffc0000 [ 41.287791][ T24] audit: type=1326 audit(1788207814.170:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=769 comm="syz.5.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f40a362d159 code=0x7ffc0000 [ 41.640025][ T800] /dev/md0: Can't open blockdev [ 41.668040][ T392] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 42.169319][ T819] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.185316][ T819] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.197109][ T819] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.210307][ T819] EXT4-fs (loop4): 1 truncate cleaned up [ 42.216002][ T819] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,quota,,errors=continue [ 42.299486][ T392] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1536, setting to 64 [ 42.468131][ T392] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 42.477271][ T392] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.485551][ T392] usb 6-1: Product: syz [ 42.489915][ T392] usb 6-1: Manufacturer: syz [ 42.494568][ T392] usb 6-1: SerialNumber: syz [ 42.528744][ T54] usb 1-1: USB disconnect, device number 6 [ 42.652528][ T830] erofs: (device loop4): mounted with root inode @ nid 36. [ 42.685929][ T834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.185'. [ 42.898633][ T392] usb 6-1: MIDIStreaming interface descriptor not found [ 42.973952][ T392] usb 6-1: USB disconnect, device number 4 [ 43.318014][ T54] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.358091][ T328] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.608047][ T392] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 43.668189][ T328] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 43.668483][ T879] exfat: Deprecated parameter 'namecase' [ 43.681898][ T879] exfat: Deprecated parameter 'namecase' [ 43.698092][ T54] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 43.706507][ T54] usb 1-1: config 1 interface 1 altsetting 0 has an invalid endpoint with address 0x73, skipping [ 43.720327][ T879] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 43.758110][ T328] usb 4-1: config index 0 descriptor too short (expected 65505, got 72) [ 43.772927][ T882] binder: 881:882 ioctl 4018620d 0 returned -22 [ 43.788786][ T884] device syzkaller0 entered promiscuous mode [ 43.795455][ T884] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 43.838058][ T328] usb 4-1: config index 1 descriptor too short (expected 65505, got 72) [ 43.918110][ T54] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 43.920886][ T328] usb 4-1: config index 2 descriptor too short (expected 65505, got 72) [ 43.927163][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.927172][ T54] usb 1-1: Product: syz [ 43.927188][ T54] usb 1-1: Manufacturer: syz [ 43.942345][ T892] binder: BINDER_SET_CONTEXT_MGR already set [ 43.943586][ T54] usb 1-1: SerialNumber: syz [ 43.947829][ T892] binder: 891:892 ioctl 4018620d 200000004a80 returned -16 [ 43.979375][ T392] usb 5-1: config index 0 descriptor too short (expected 74, got 72) [ 43.987481][ T392] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.991535][ T894] ================================================================== [ 43.998085][ T392] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 44.005635][ T894] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x62b/0x6e0 [ 44.016339][ T392] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 44.025193][ T894] Read of size 1 at addr ffff88810ae0a3d8 by task syz.5.211/894 [ 44.025196][ T894] [ 44.025217][ T894] CPU: 0 PID: 894 Comm: syz.5.211 Not tainted syzkaller #0 [ 44.025222][ T894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.025230][ T894] Call Trace: [ 44.025249][ T894] __dump_stack+0x21/0x24 [ 44.025258][ T894] dump_stack_lvl+0x1a7/0x208 [ 44.025268][ T894] ? show_regs_print_info+0x18/0x18 [ 44.025277][ T894] ? thaw_kernel_threads+0x220/0x220 [ 44.025289][ T894] print_address_description+0x7f/0x2c0 [ 44.025301][ T894] ? xfrm_policy_inexact_list_reinsert+0x62b/0x6e0 [ 44.025310][ T894] kasan_report+0x100/0x140 [ 44.025319][ T894] ? xfrm_policy_inexact_list_reinsert+0x62b/0x6e0 [ 44.025338][ T894] __asan_report_load1_noabort+0x14/0x20 [ 44.038593][ T328] usb 4-1: config index 3 descriptor too short (expected 65505, got 72) [ 44.045791][ T894] xfrm_policy_inexact_list_reinsert+0x62b/0x6e0 [ 44.128063][ T328] usb 4-1: config index 4 descriptor too short (expected 65505, got 72) [ 44.131088][ T894] xfrm_policy_inexact_insert_node+0x954/0xb60 [ 44.131105][ T894] ? xfrm_user_rcv_msg+0x54d/0x7e0 [ 44.150620][ T894] ? netlink_rcv_skb+0x1e9/0x430 [ 44.155531][ T894] ? netlink_unicast+0x86c/0xa30 [ 44.160445][ T894] ? netlink_sendmsg+0x949/0xb70 [ 44.165362][ T894] xfrm_policy_inexact_alloc_chain+0x540/0xb40 [ 44.171498][ T894] xfrm_policy_inexact_insert+0x6a/0x1190 [ 44.177195][ T894] ? __kasan_check_write+0x14/0x20 [ 44.182297][ T894] ? _raw_spin_lock_bh+0x94/0xf0 [ 44.187240][ T894] xfrm_policy_insert+0x12c/0x9c0 [ 44.192249][ T894] xfrm_add_policy+0x4e1/0x840 [ 44.197006][ T894] ? xfrm_dump_sa_done+0xc0/0xc0 [ 44.201931][ T894] xfrm_user_rcv_msg+0x54d/0x7e0 [ 44.206877][ T894] ? stack_trace_save+0xa6/0xf0 [ 44.211715][ T894] ? xfrm_netlink_rcv+0x90/0x90 [ 44.216563][ T894] ? selinux_nlmsg_lookup+0x22a/0x430 [ 44.218143][ T392] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 44.221927][ T894] netlink_rcv_skb+0x1e9/0x430 [ 44.221938][ T894] ? xfrm_netlink_rcv+0x90/0x90 [ 44.221955][ T894] ? netlink_ack+0xb30/0xb30 [ 44.231094][ T328] usb 4-1: config index 5 descriptor too short (expected 65505, got 72) [ 44.235745][ T894] ? mutex_trylock+0xb0/0xb0 [ 44.235756][ T894] ? __netlink_lookup+0x387/0x3b0 [ 44.235773][ T894] xfrm_netlink_rcv+0x72/0x90 [ 44.240691][ T392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.245181][ T894] netlink_unicast+0x86c/0xa30 [ 44.245198][ T894] netlink_sendmsg+0x949/0xb70 [ 44.254467][ T392] usb 5-1: Product: syz [ 44.258078][ T894] ? schedule_preempt_disabled+0x20/0x20 [ 44.258089][ T894] ? netlink_getsockopt+0x530/0x530 [ 44.258101][ T894] ? security_socket_sendmsg+0x82/0xa0 [ 44.258113][ T894] ? netlink_getsockopt+0x530/0x530 [ 44.258123][ T894] ____sys_sendmsg+0x5be/0x8f0 [ 44.258133][ T894] ? __sys_sendmsg_sock+0x40/0x40 [ 44.258151][ T894] ? import_iovec+0x7c/0xb0 [ 44.263516][ T392] usb 5-1: Manufacturer: syz [ 44.267810][ T894] ___sys_sendmsg+0x236/0x2e0 [ 44.267826][ T894] ? __sys_sendmsg+0x280/0x280 [ 44.276057][ T392] usb 5-1: SerialNumber: syz [ 44.280520][ T894] ? __fdget+0x1a1/0x230 [ 44.280531][ T894] __x64_sys_sendmsg+0x201/0x2d0 [ 44.280542][ T894] ? __kasan_check_write+0x14/0x20 [ 44.280550][ T894] ? ___sys_sendmsg+0x2e0/0x2e0 [ 44.280566][ T894] ? __kasan_check_read+0x11/0x20 [ 44.328077][ T328] usb 4-1: config index 6 descriptor too short (expected 65505, got 72) [ 44.329582][ T894] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 44.381474][ T894] do_syscall_64+0x31/0x40 [ 44.385898][ T894] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.391793][ T894] RIP: 0033:0x7f40a362d159 [ 44.396191][ T894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.408094][ T328] usb 4-1: config index 7 descriptor too short (expected 65505, got 72) [ 44.415838][ T894] RSP: 002b:00007f40a2086028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.415852][ T894] RAX: ffffffffffffffda RBX: 00007f40a38b4fa0 RCX: 00007f40a362d159 [ 44.415868][ T894] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003 [ 44.448462][ T894] RBP: 00007f40a36c4024 R08: 0000000000000000 R09: 0000000000000000 [ 44.456424][ T894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.464384][ T894] R13: 00007f40a38b5038 R14: 00007f40a38b4fa0 R15: 00007fff29688268 [ 44.472338][ T894] [ 44.474645][ T894] Allocated by task 894: [ 44.478877][ T894] __kasan_kmalloc+0xd4/0x100 [ 44.483533][ T894] __kmalloc+0x19f/0x330 [ 44.487755][ T894] sk_prot_alloc+0xb2/0x340 [ 44.492473][ T894] sk_alloc+0x38/0x4e0 [ 44.496520][ T894] pfkey_create+0x12a/0x650 [ 44.501011][ T894] __sock_create+0x38d/0x770 [ 44.505577][ T894] __sys_socket+0xec/0x190 [ 44.509968][ T894] __x64_sys_socket+0x7a/0x90 [ 44.514621][ T894] do_syscall_64+0x31/0x40 [ 44.519030][ T894] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.524914][ T894] [ 44.527230][ T894] The buggy address belongs to the object at ffff88810ae0a000 [ 44.527230][ T894] which belongs to the cache kmalloc-1k of size 1024 [ 44.541276][ T894] The buggy address is located 984 bytes inside of [ 44.541276][ T894] 1024-byte region [ffff88810ae0a000, ffff88810ae0a400) [ 44.547336][ T392] usb 5-1: USB disconnect, device number 4 [ 44.554626][ T894] The buggy address belongs to the page: [ 44.554652][ T894] page:ffffea00042b8200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ae08 [ 44.554665][ T894] head:ffffea00042b8200 order:3 compound_mapcount:0 compound_pincount:0 [ 44.554687][ T894] flags: 0x4000000000010200(slab|head) [ 44.578175][ T328] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 44.584711][ T894] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 44.584722][ T894] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 44.584727][ T894] page dumped because: kasan: bad access detected [ 44.584741][ T894] page_owner tracks the page as allocated [ 44.590281][ T328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.599191][ T894] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 1856111382, free_ts 0 [ 44.599205][ T894] prep_new_page+0x176/0x190 [ 44.599214][ T894] get_page_from_freelist+0x225f/0x23f0 [ 44.599222][ T894] __alloc_pages_nodemask+0x29a/0x640 [ 44.599238][ T894] new_slab+0x84/0x3f0 [ 44.609320][ T328] usb 4-1: Product: syz [ 44.616388][ T894] ___slab_alloc+0x2f8/0x4c0 [ 44.622995][ T328] usb 4-1: Manufacturer: syz [ 44.628561][ T894] __slab_alloc+0x63/0xa0 [ 44.628571][ T894] __kmalloc+0x1f9/0x330 [ 44.628580][ T894] blk_stat_alloc_callback+0x91/0x210 [ 44.628590][ T894] blk_mq_init_allocated_queue+0x8e/0x1850 [ 44.628606][ T894] blk_mq_init_queue+0x6e/0xd0 [ 44.636828][ T328] usb 4-1: SerialNumber: syz [ 44.654412][ T894] scsi_mq_alloc_queue+0x42/0x140 [ 44.654420][ T894] scsi_alloc_sdev+0x611/0x920 [ 44.654428][ T894] scsi_probe_and_add_lun+0x17d/0x3370 [ 44.654435][ T894] __scsi_scan_target+0x1d2/0xbf0 [ 44.654443][ T894] scsi_scan_host_selected+0x34e/0x600 [ 44.654450][ T894] scsi_scan_host+0x39e/0x670 [ 44.654454][ T894] page_owner free stack trace missing [ 44.654456][ T894] [ 44.654468][ T894] Memory state around the buggy address: [ 44.760801][ T894] ffff88810ae0a280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 44.768852][ T894] ffff88810ae0a300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 44.776894][ T894] >ffff88810ae0a380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 44.784948][ T894] ^ [ 44.791862][ T894] ffff88810ae0a400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.799899][ T894] ffff88810ae0a480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.807931][ T894] ================================================================== [ 44.815983][ T894] Disabling lock debugging due to kernel taint [ 44.898075][ T527] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 45.088150][ T54] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8201 device_setup=1 to enable and report any issues to g@b4.vu [ 45.112841][ T54] usb 1-1: USB disconnect, device number 7 [ 45.188090][ T527] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 45.268111][ T527] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 45.348078][ T527] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 45.428103][ T527] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 45.508074][ T527] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 45.588195][ T527] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 45.668083][ T527] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 45.748078][ T527] usb 2-1: config index 6 descriptor too short (expected 65505, got 72) [ 45.828063][ T527] usb 2-1: config index 7 descriptor too short (expected 65505, got 72) [ 45.988080][ T527] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 45.997175][ T527] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.005185][ T527] usb 2-1: Product: syz [ 46.009372][ T527] usb 2-1: Manufacturer: syz [ 46.013959][ T527] usb 2-1: SerialNumber: syz [ 46.096224][ T527] usb 4-1: USB disconnect, device number 6 [ 46.865496][ T527] usb 2-1: USB disconnect, device number 4