last executing test programs: 8.602743396s ago: executing program 2 (id=87): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x54, r0, 0x1, 0x870bd2c, 0x25dfdbfc, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x54}}, 0x890) 8.524463798s ago: executing program 2 (id=88): syz_usb_connect$uac1(0x3, 0xd9, &(0x7f0000001880)=ANY=[@ANYBLOB="1201500200000008351215824000010203010902c70003010720080904000000010100000a240100000a0002"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 6.792713989s ago: executing program 2 (id=111): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109029e00010000100009040c0202c17f0c4f"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.254913812s ago: executing program 2 (id=152): syz_usb_connect$uac1(0x2, 0x77, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x60, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x3, 0x1, 0x7f, 0x30, 0x21, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe16, 0xf}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x608, 0x69, 0xf0, 0x93, {0x7, 0x25, 0x1, 0x4, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x4, 0x7, {0x7, 0x25, 0x1, 0x0, 0x1, 0xf}}}}}}}}]}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) syz_open_dev$MSR(0x0, 0x1, 0x0) 1.557698393s ago: executing program 4 (id=186): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.403265727s ago: executing program 3 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0xc020680) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x2, 0x0, 0x0, 0x0}) 1.333958998s ago: executing program 4 (id=190): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040), 0x2) 1.25054987s ago: executing program 4 (id=191): unshare(0x2c020600) unshare(0x2a020400) rt_sigtimedwait(&(0x7f0000000000)={[0xfffffffffffffff8]}, &(0x7f0000000040), &(0x7f00000000c0), 0x8) 1.143773363s ago: executing program 3 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, 0x0) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f0000000080)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x1, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 888.145368ms ago: executing program 0 (id=193): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x900000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002bf, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 887.912899ms ago: executing program 1 (id=194): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000040)='./file0\x00', 0x8001, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x330, &(0x7f0000000140)="$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") 711.456093ms ago: executing program 4 (id=195): syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b240605", @ANYRESHEX=0x0], 0x0) 683.696664ms ago: executing program 0 (id=196): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x2f89, r2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="22a2f99bb4baf0473c672144124c", 0xe}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @auto="6916019b4cb6e6b1"}, 0x40, 0x0, '\x00', @a}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) 616.394235ms ago: executing program 3 (id=197): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000010020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) 615.288885ms ago: executing program 1 (id=198): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x80000001}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44c, &(0x7f0000000340)="$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") io_uring_setup(0x289f, &(0x7f00000000c0)={0x0, 0x904b, 0x3000, 0x0, 0x2d6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x1, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 582.723926ms ago: executing program 0 (id=199): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)) open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) 498.174068ms ago: executing program 0 (id=200): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 450.823459ms ago: executing program 0 (id=201): socket(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') close(0x3) pread64(r0, &(0x7f0000000200)=""/9, 0x9, 0x6) 450.433289ms ago: executing program 0 (id=202): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474e, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) socket$inet6(0xa, 0x3, 0x87) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000000)=0x1f5, 0x4) syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x1, 0xa0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x2a, 0x7}, [@extension_unit={0xd, 0x24, 0xa, 0x6, 0x1, [0x0, 0x2]}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x402, 0x1, 0x2, 0x6, 0x2, 0xfffd, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xd, 0x4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfa, 0x6, 0x3, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0xec}}}}}}}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 450.288789ms ago: executing program 3 (id=203): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8}, 0x14) getpgrp(0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r2}, 0x14) symlink(0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f00000005c0)={@local, @empty, @void, {@llc={0x4, {@snap={0xaa, 0xaa, "7f", "f32a1c", 0x8848}}}}}, 0x0) 450.121089ms ago: executing program 1 (id=204): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ff) 395.756991ms ago: executing program 3 (id=205): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @auto="6916019b4cb6e6b1"}, 0x40, 0x0, '\x00', @a}) 369.295811ms ago: executing program 1 (id=206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x900000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002bf, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000070085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 314.820562ms ago: executing program 1 (id=207): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000070085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 314.635062ms ago: executing program 1 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) socket$inet6(0xa, 0x3, 0x5) 294.771433ms ago: executing program 3 (id=209): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x2f89, r2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="22a2f99bb4baf0473c672144124c", 0xe}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @auto="6916019b4cb6e6b1"}, 0x40, 0x0, '\x00', @a}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) 271.883563ms ago: executing program 2 (id=210): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x15}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x8, 0x0, &(0x7f0000000540)) 177.508076ms ago: executing program 4 (id=211): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 74.570908ms ago: executing program 2 (id=212): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x0) close_range(r0, r0, 0x2) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) writev(r0, 0x0, 0x0) 0s ago: executing program 4 (id=213): r0 = io_uring_setup(0x2a8a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') fstat(r1, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x8c) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000500)) lseek(r2, 0x1, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x3) fchmod(0xffffffffffffffff, 0x50) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): rocess permissive=1 [ 14.721905][ T28] audit: type=1400 audit(1785054519.233:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 22.038551][ T28] audit: type=1400 audit(1785054526.563:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.039614][ T279] cgroup: Unknown subsys name 'net' [ 22.061226][ T28] audit: type=1400 audit(1785054526.563:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.088470][ T28] audit: type=1400 audit(1785054526.593:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.088609][ T279] cgroup: Unknown subsys name 'devices' [ 22.232680][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.238322][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.340885][ T28] audit: type=1400 audit(1785054526.863:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.364107][ T28] audit: type=1400 audit(1785054526.873:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.388966][ T28] audit: type=1400 audit(1785054526.873:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.397330][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.421379][ T28] audit: type=1400 audit(1785054526.953:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.446808][ T28] audit: type=1400 audit(1785054526.953:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.478424][ T28] audit: type=1400 audit(1785054527.003:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.478829][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.504050][ T28] audit: type=1400 audit(1785054527.003:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.675418][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.682538][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.689921][ T287] device bridge_slave_0 entered promiscuous mode [ 23.698107][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.705420][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.712918][ T287] device bridge_slave_1 entered promiscuous mode [ 23.742012][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.749064][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.756514][ T288] device bridge_slave_0 entered promiscuous mode [ 23.764306][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.771468][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.778733][ T288] device bridge_slave_1 entered promiscuous mode [ 23.899728][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.906857][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.914366][ T292] device bridge_slave_0 entered promiscuous mode [ 23.924069][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.931178][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.938582][ T292] device bridge_slave_1 entered promiscuous mode [ 23.980422][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.987490][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.994809][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.001839][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.024580][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.031809][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.039318][ T294] device bridge_slave_0 entered promiscuous mode [ 24.046481][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.053552][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.061409][ T294] device bridge_slave_1 entered promiscuous mode [ 24.077095][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.084328][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.091800][ T289] device bridge_slave_0 entered promiscuous mode [ 24.098638][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.105791][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.113155][ T289] device bridge_slave_1 entered promiscuous mode [ 24.130284][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.137339][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.144609][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.151645][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.253106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.260812][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.268081][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.275445][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.282879][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.314833][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.323050][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.330061][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.337445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.345902][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.352968][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.371303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.379425][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.401868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.409477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.417098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.424868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.433188][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.440227][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.448878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.457339][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.464406][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.472261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.489603][ T288] device veth0_vlan entered promiscuous mode [ 24.499841][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.508339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.516788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.524298][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.531868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.539953][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.546979][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.570558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.579072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.587373][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.594501][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.602057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.623247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.631195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.639077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.647116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.656509][ T288] device veth1_macvtap entered promiscuous mode [ 24.672565][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.680473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.687939][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.695718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.704281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.712639][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.719687][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.727128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.735426][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.742460][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.749904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.763236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.770698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.782165][ T292] device veth0_vlan entered promiscuous mode [ 24.795932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.803973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.812138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.820130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.828315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.836535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.845150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.853525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.861920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.870123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.882087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.890264][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.902921][ T287] device veth0_vlan entered promiscuous mode [ 24.913808][ T292] device veth1_macvtap entered promiscuous mode [ 24.921966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.929790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.937712][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.946118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.953761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.969696][ T294] device veth0_vlan entered promiscuous mode [ 24.980970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.989299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.997753][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.004793][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.012409][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.020658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.029193][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.036217][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.043686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.052055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.060259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.068122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.076037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.084088][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.092051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.100139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.108551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.116811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.124959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.133135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.141515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.149124][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.156573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.170477][ T287] device veth1_macvtap entered promiscuous mode [ 25.181717][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.188917][ T289] device veth0_vlan entered promiscuous mode [ 25.197996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.206862][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.215267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.223904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.235474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.243916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.251879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.259795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.267323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.284896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.293043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.301317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.309450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.317925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.326306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.336315][ T294] device veth1_macvtap entered promiscuous mode [ 25.357336][ T289] device veth1_macvtap entered promiscuous mode [ 25.365133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.372974][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.381181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.389309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.418463][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.420069][ T317] input: syz1 as /devices/virtual/input/input4 [ 25.431335][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.445536][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.455727][ T320] loop4: detected capacity change from 0 to 128 [ 25.461355][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.471074][ T320] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 25.491280][ T320] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 25.519027][ T320] EXT4-fs (loop4): unmounting filesystem. [ 25.543596][ T307] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.551181][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.559489][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.568417][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.577292][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.610597][ T330] loop2: detected capacity change from 0 to 512 [ 25.633030][ T333] loop0: detected capacity change from 0 to 1024 [ 25.651273][ T330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 25.667842][ T333] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 25.700862][ T330] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.712374][ T333] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 25.747661][ T333] jbd2_journal_init_inode: Cannot locate journal superblock [ 25.763280][ T333] EXT4-fs (loop0): Could not load journal inode [ 25.771831][ T294] EXT4-fs (loop2): unmounting filesystem. [ 25.820983][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 25.827246][ T307] usb 4-1: config index 0 descriptor too short (expected 158, got 36) [ 25.845762][ T307] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 25.865964][ T307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.882353][ T307] usb 4-1: config 0 has no interface number 0 [ 25.949934][ T307] usb 4-1: config 0 interface 12 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 25.962990][ T307] usb 4-1: config 0 interface 12 has no altsetting 0 [ 25.978999][ T307] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 25.988098][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.996144][ T307] usb 4-1: Product: syz [ 26.000325][ T307] usb 4-1: Manufacturer: syz [ 26.150260][ T307] usb 4-1: SerialNumber: syz [ 26.155612][ T307] usb 4-1: config 0 descriptor?? [ 26.211064][ T59] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.221175][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.400953][ T59] usb 1-1: Using ep0 maxpacket: 8 [ 26.407440][ T59] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.415967][ T59] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 49, changing to 9 [ 26.426991][ T59] usb 1-1: config 1 interface 0 has no altsetting 0 [ 26.435042][ T59] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 26.442288][ T6] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 26.444146][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.452802][ T6] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 26.460381][ T59] usb 1-1: Product: syz [ 26.469583][ T6] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 26.473458][ T59] usb 1-1: Manufacturer: syz [ 26.484024][ T6] usb 3-1: config 220 has no interface number 2 [ 26.488372][ T59] usb 1-1: SerialNumber: syz [ 26.494926][ T6] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 26.512773][ T6] usb 3-1: config 220 interface 0 has no altsetting 0 [ 26.519600][ T6] usb 3-1: config 220 interface 76 has no altsetting 0 [ 26.526665][ T6] usb 3-1: config 220 interface 1 has no altsetting 0 [ 26.537434][ T6] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 26.546533][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.554626][ T6] usb 3-1: Product: syz [ 26.558815][ T6] usb 3-1: Manufacturer: syz [ 26.588176][ T6] usb 3-1: SerialNumber: syz [ 26.595921][ T307] usb 4-1: USB disconnect, device number 2 [ 26.671000][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.719325][ T59] usbhid 1-1:1.0: can't add hid device: -71 [ 26.725377][ T59] usbhid: probe of 1-1:1.0 failed with error -71 [ 26.751563][ T59] usb 1-1: USB disconnect, device number 2 [ 26.853822][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 26.880960][ T39] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32 [ 26.912671][ T39] usb 2-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 26.932151][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.950338][ T39] usb 2-1: Product: syz [ 26.960426][ T39] usb 2-1: Manufacturer: syz [ 26.965327][ T39] usb 2-1: SerialNumber: syz [ 26.978725][ T367] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 27.194451][ T39] usb 2-1: USB disconnect, device number 2 [ 27.240279][ T6] usb 3-1: selecting invalid altsetting 0 [ 27.246242][ T6] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 27.253326][ T6] usb 3-1: No valid video chain found. [ 27.274461][ T6] usb 3-1: USB disconnect, device number 2 [ 27.367629][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 27.367644][ T28] audit: type=1400 audit(1785054531.893:121): avc: denied { read } for pid=394 comm="syz.3.23" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 27.442010][ T382] udevd[382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.518516][ T28] audit: type=1400 audit(1785054531.893:122): avc: denied { open } for pid=394 comm="syz.3.23" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 27.628700][ T28] audit: type=1400 audit(1785054531.933:123): avc: denied { ioctl } for pid=394 comm="syz.3.23" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 27.775392][ T28] audit: type=1400 audit(1785054531.963:124): avc: denied { create } for pid=400 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.873194][ T28] audit: type=1400 audit(1785054531.993:125): avc: denied { write } for pid=400 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.914078][ T426] loop1: detected capacity change from 0 to 1024 [ 27.939838][ T426] EXT4-fs: Ignoring removed oldalloc option [ 27.954573][ T28] audit: type=1400 audit(1785054532.093:126): avc: denied { write } for pid=408 comm="syz.3.30" name="igmp" dev="proc" ino=4026532320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 27.978283][ T426] EXT4-fs: Ignoring removed oldalloc option [ 27.993453][ T426] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.021083][ T28] audit: type=1400 audit(1785054532.103:127): avc: denied { read } for pid=408 comm="syz.3.30" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 28.058562][ T426] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.092397][ T28] audit: type=1400 audit(1785054532.103:128): avc: denied { open } for pid=408 comm="syz.3.30" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 28.135195][ T287] EXT4-fs (loop1): unmounting filesystem. [ 28.171887][ T28] audit: type=1326 audit(1785054532.153:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=414 comm="syz.2.32" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf7479de99 code=0x0 [ 28.224519][ T28] audit: type=1400 audit(1785054532.613:130): avc: denied { write } for pid=425 comm="syz.1.36" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.409813][ T436] loop1: detected capacity change from 0 to 1024 [ 28.426063][ T440] 9pnet_fd: Insufficient options for proto=fd [ 28.432514][ T436] ======================================================= [ 28.432514][ T436] WARNING: The mand mount option has been deprecated and [ 28.432514][ T436] and is ignored by this kernel. Remove the mand [ 28.432514][ T436] option from the mount to silence this warning. [ 28.432514][ T436] ======================================================= [ 28.478593][ T436] EXT4-fs: Ignoring removed oldalloc option [ 28.488749][ T436] EXT4-fs: Ignoring removed bh option [ 28.519299][ T447] input: syz1 as /devices/virtual/input/input5 [ 28.543215][ T436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.554653][ T436] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.598118][ T452] loop2: detected capacity change from 0 to 512 [ 28.636419][ T436] EXT4-fs error (device loop1): swap_inode_boot_loader:378: comm syz.1.42: inode #5: comm syz.1.42: iget: illegal inode # [ 28.672027][ T452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.694525][ T452] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.758392][ T287] EXT4-fs (loop1): unmounting filesystem. [ 28.819260][ T294] EXT4-fs (loop2): unmounting filesystem. [ 29.040965][ T59] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.336938][ T497] loop2: detected capacity change from 0 to 128 [ 29.359330][ T497] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.368170][ T497] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.378623][ T59] usb 1-1: Using ep0 maxpacket: 8 [ 29.392317][ T59] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 29.408479][ T59] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.420113][ T294] EXT4-fs (loop2): unmounting filesystem. [ 29.426690][ T59] usb 1-1: config 0 has no interface number 0 [ 29.433629][ T59] usb 1-1: config 0 interface 52 has no altsetting 0 [ 29.440461][ T59] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 29.449917][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.461439][ T59] usb 1-1: config 0 descriptor?? [ 29.490011][ T466] syz.3.49 (466) used greatest stack depth: 21320 bytes left [ 29.515709][ T500] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.733032][ T506] loop1: detected capacity change from 0 to 2048 [ 29.763567][ T506] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 29.772880][ T506] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.969689][ T514] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 30.607427][ T287] EXT4-fs (loop1): unmounting filesystem. [ 30.654425][ T539] loop1: detected capacity change from 0 to 256 [ 30.671432][ T539] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 30.682287][ T539] exFAT-fs (loop1): Filesystem has been set read-only [ 30.689358][ T539] exFAT-fs (loop1): failed to load upcase table [ 30.691020][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.696311][ T539] exFAT-fs (loop1): failed to recognize exfat type [ 30.767262][ T547] capability: warning: `syz.1.80' uses deprecated v2 capabilities in a way that may be insecure [ 30.807129][ T549] netlink: 'syz.1.82': attribute type 12 has an invalid length. [ 30.815028][ T549] netlink: 'syz.1.82': attribute type 29 has an invalid length. [ 30.822991][ T549] netlink: 148 bytes leftover after parsing attributes in process `syz.1.82'. [ 31.165736][ T565] loop1: detected capacity change from 0 to 128 [ 31.187055][ T565] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 31.198452][ T565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 31.208511][ T565] ext2 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.210950][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 31.235657][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 544, setting to 64 [ 31.247969][ T6] usb 4-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 31.257126][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.265285][ T6] usb 4-1: Product: syz [ 31.269495][ T6] usb 4-1: Manufacturer: syz [ 31.274137][ T6] usb 4-1: SerialNumber: syz [ 31.297988][ T287] EXT4-fs (loop1): unmounting filesystem. [ 31.430986][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.660960][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 31.668255][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.684110][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.705805][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.727360][ T39] usb 3-1: string descriptor 0 read error: -22 [ 31.739914][ T39] usb 3-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 31.784259][ T578] syz.1.93 (578) used greatest stack depth: 21248 bytes left [ 31.795987][ T6] usb 4-1: MIDIStreaming interface descriptor not found [ 31.833408][ T6] usb 4-1: USB disconnect, device number 3 [ 31.853766][ T586] loop0: detected capacity change from 0 to 512 [ 31.855803][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.862067][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.887789][ T59] usb 1-1: USB disconnect, device number 3 [ 31.887911][ T586] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 32.250664][ T6] usb 3-1: USB disconnect, device number 3 [ 32.288639][ T593] input: syz1 as /devices/virtual/input/input6 [ 32.410693][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 32.410710][ T28] audit: type=1400 audit(1785054536.873:174): avc: denied { read append } for pid=589 comm="syz.0.100" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.530269][ T28] audit: type=1400 audit(1785054536.873:175): avc: denied { open } for pid=589 comm="syz.0.100" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.620642][ T28] audit: type=1400 audit(1785054537.023:176): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.651368][ T28] audit: type=1400 audit(1785054537.133:177): avc: denied { mounton } for pid=600 comm="syz.4.104" path="/36/file0" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.221075][ T28] audit: type=1400 audit(1785054537.543:178): avc: denied { write } for pid=613 comm="syz.3.109" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.472438][ T59] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.661038][ T59] usb 3-1: Using ep0 maxpacket: 32 [ 33.667463][ T59] usb 3-1: config index 0 descriptor too short (expected 158, got 36) [ 33.675799][ T59] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 33.684015][ T59] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.694703][ T59] usb 3-1: config 0 has no interface number 0 [ 33.704433][ T630] loop3: detected capacity change from 0 to 512 [ 33.720871][ T630] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.731017][ T59] usb 3-1: config 0 interface 12 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 33.736992][ T630] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.758909][ T630] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.767913][ T28] audit: type=1400 audit(1785054538.293:179): avc: denied { write } for pid=639 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.832300][ T59] usb 3-1: config 0 interface 12 has no altsetting 0 [ 33.995024][ T59] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 34.008169][ T630] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.021263][ T28] audit: type=1400 audit(1785054538.323:180): avc: denied { nlmsg_write } for pid=639 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.149165][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.329027][ T630] EXT4-fs (loop3): 1 truncate cleaned up [ 34.363272][ T630] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 34.375893][ T59] usb 3-1: Product: syz [ 34.385250][ T59] usb 3-1: Manufacturer: syz [ 34.403774][ T28] audit: type=1400 audit(1785054538.873:181): avc: denied { create } for pid=652 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.462195][ T59] usb 3-1: SerialNumber: syz [ 34.481970][ T59] usb 3-1: config 0 descriptor?? [ 34.493591][ T28] audit: type=1400 audit(1785054538.933:182): avc: denied { mount } for pid=624 comm="syz.3.113" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.515403][ T28] audit: type=1400 audit(1785054539.003:183): avc: denied { read append } for pid=624 comm="syz.3.113" path="/15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.519732][ T288] EXT4-fs (loop3): unmounting filesystem. [ 34.611399][ T664] loop3: detected capacity change from 0 to 128 [ 34.640336][ T664] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 34.650467][ T664] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.757560][ T288] EXT4-fs (loop3): unmounting filesystem. [ 34.814317][ T675] loop0: detected capacity change from 0 to 1024 [ 34.857543][ T675] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.956173][ T59] usb 3-1: USB disconnect, device number 4 [ 35.274216][ T289] EXT4-fs (loop0): unmounting filesystem. [ 35.936403][ T713] loop0: detected capacity change from 0 to 128 [ 36.082482][ T713] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.114032][ T713] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.582187][ T289] EXT4-fs (loop0): unmounting filesystem. [ 36.759252][ T745] loop1: detected capacity change from 0 to 2048 [ 36.824837][ T752] Dead loop on virtual device ip6_vti0, fix it urgently! [ 36.845761][ T745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.391113][ T623] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 37.406622][ T777] loop0: detected capacity change from 0 to 128 [ 37.439094][ T777] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.448312][ T777] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.463277][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 37.463290][ T28] audit: type=1400 audit(1785054541.993:195): avc: denied { create } for pid=776 comm="syz.0.167" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.492794][ T777] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 37.493114][ T28] audit: type=1400 audit(1785054541.993:196): avc: denied { write } for pid=776 comm="syz.0.167" name="encrypted_dir" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.523239][ T28] audit: type=1400 audit(1785054541.993:197): avc: denied { add_name } for pid=776 comm="syz.0.167" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.527627][ T777] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 37.553933][ T780] fscrypt: loop0: 3 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 14 [ 37.592211][ T289] EXT4-fs (loop0): unmounting filesystem. [ 37.601977][ T623] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 105, changing to 4 [ 37.626572][ T623] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1544, setting to 1023 [ 37.649266][ T623] usb 3-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 37.659857][ T623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.667909][ T623] usb 3-1: Product: syz [ 37.685931][ T789] dummy_hcd dummy_hcd.0: remove, state 4 [ 37.691771][ T789] usb usb1: USB disconnect, device number 1 [ 37.702499][ T789] dummy_hcd dummy_hcd.0: stopped [ 37.704433][ T623] usb 3-1: Manufacturer: syz [ 37.730675][ T789] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 38.132564][ T623] usb 3-1: SerialNumber: syz [ 38.162307][ T287] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 38.210466][ T28] audit: type=1400 audit(1785054542.733:198): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.240220][ T287] EXT4-fs (loop1): unmounting filesystem. [ 39.028935][ T830] loop1: detected capacity change from 0 to 128 [ 39.049105][ T623] usb 3-1: USB disconnect, device number 5 [ 39.062671][ T833] loop0: detected capacity change from 0 to 128 [ 39.093587][ T833] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.104442][ T833] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.115655][ T837] loop1: detected capacity change from 0 to 512 [ 39.136372][ T289] EXT4-fs (loop0): unmounting filesystem. [ 39.163018][ T837] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.208831][ T837] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.198: bad orphan inode 131083 [ 39.234305][ T837] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.283094][ T287] EXT4-fs (loop1): unmounting filesystem. [ 39.293922][ T852] loop3: detected capacity change from 0 to 128 [ 39.314908][ T852] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.366632][ T852] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.438093][ T288] EXT4-fs (loop3): unmounting filesystem. [ 39.491251][ T28] audit: type=1400 audit(1785054543.933:199): avc: denied { read write } for pid=861 comm="syz.1.208" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.620281][ T28] audit: type=1400 audit(1785054543.933:200): avc: denied { open } for pid=861 comm="syz.1.208" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.760273][ T871] loop3: detected capacity change from 0 to 128 [ 39.781397][ T848] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 39.793134][ T848] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 39.801639][ T848] CPU: 1 PID: 848 Comm: syz.0.202 Not tainted syzkaller #0 [ 39.808844][ T848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 39.818907][ T848] RIP: 0010:dummy_udc_start+0xbb/0x1d0 [ 39.824404][ T848] Code: 00 00 ff 24 c5 00 6c e3 85 e8 21 02 25 fe eb 13 e8 1a 02 25 fe eb 0c e8 13 02 25 fe eb 05 e8 0c 02 25 fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 a6 8c 6a fe 4d 8b 36 4c 89 f7 e8 [ 39.844020][ T848] RSP: 0018:ffffc9001122f7e8 EFLAGS: 00010246 [ 39.850103][ T848] RAX: 0000000000000000 RBX: ffff888114bca010 RCX: 0000000000080000 [ 39.858088][ T848] RDX: ffffc900015ea000 RSI: 000000000000079d RDI: 000000000000079e [ 39.866068][ T848] RBP: ffffc9001122f810 R08: ffff88810feda880 R09: 0000000000000004 [ 39.874742][ T848] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 39.882724][ T848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 39.890790][ T848] FS: 00007fab167556c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 39.899732][ T848] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.906327][ T848] CR2: 00007fab16753fd0 CR3: 0000000132019000 CR4: 00000000003506a0 [ 39.914310][ T848] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.922287][ T848] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.930264][ T848] Call Trace: [ 39.933546][ T848] [ 39.936481][ T848] ? __cfi_dummy_udc_start+0x10/0x10 [ 39.941822][ T848] gadget_bind_driver+0x3c5/0x990 [ 39.946869][ T848] ? __cfi_gadget_bind_driver+0x10/0x10 [ 39.952438][ T848] really_probe+0x2d7/0x9a0 [ 39.956958][ T848] ? __kasan_check_write+0x14/0x20 [ 39.962087][ T848] __driver_probe_device+0x193/0x270 [ 39.967387][ T848] driver_probe_device+0x54/0x3e0 [ 39.972428][ T848] __driver_attach+0x41a/0x5d0 [ 39.977214][ T848] bus_for_each_dev+0x18c/0x200 [ 39.982088][ T848] ? __cfi___driver_attach+0x10/0x10 [ 39.987471][ T848] ? __cfi_bus_for_each_dev+0x10/0x10 [ 39.992861][ T848] ? _raw_spin_unlock+0x4c/0x70 [ 39.997726][ T848] ? klist_add_tail+0x1e5/0x220 [ 40.002594][ T848] driver_attach+0x42/0x50 [ 40.007040][ T848] bus_add_driver+0x322/0x560 [ 40.011745][ T848] driver_register+0x335/0x440 [ 40.016526][ T848] usb_gadget_register_driver_owner+0xf8/0x270 [ 40.022702][ T848] raw_ioctl+0x112c/0x3180 [ 40.027185][ T848] ? ioctl_has_perm+0x3a6/0x4f0 [ 40.032066][ T848] ? __cfi_raw_ioctl+0x10/0x10 [ 40.036853][ T848] ? has_cap_mac_admin+0x370/0x370 [ 40.041986][ T848] ? handle_mm_fault+0x18d8/0x26b0 [ 40.047119][ T848] ? selinux_file_ioctl+0x3ad/0x4c0 [ 40.052338][ T848] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 40.057903][ T848] ? __fget_files+0x2d1/0x330 [ 40.062602][ T848] ? security_file_ioctl+0x95/0xc0 [ 40.067737][ T848] ? __cfi_raw_ioctl+0x10/0x10 [ 40.072520][ T848] __se_sys_ioctl+0x12f/0x1b0 [ 40.077218][ T848] __x64_sys_ioctl+0x7b/0x90 [ 40.081818][ T848] x64_sys_call+0x58b/0x9a0 [ 40.086335][ T848] do_syscall_64+0x4c/0xa0 [ 40.090775][ T848] ? clear_bhb_loop+0x30/0x80 [ 40.095459][ T848] ? clear_bhb_loop+0x30/0x80 [ 40.100145][ T848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.106067][ T848] RIP: 0033:0x7fab1579db2b [ 40.110537][ T848] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 40.130243][ T848] RSP: 002b:00007fab16752f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.138667][ T848] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007fab1579db2b [ 40.146653][ T848] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000a [ 40.154758][ T848] RBP: 00007fab16753fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 40.162745][ T848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.170720][ T848] R13: 0000200000000100 R14: 0000000000000003 R15: 0000000000000000 [ 40.178706][ T848] [ 40.181729][ T848] Modules linked in: [ 40.185966][ T848] ---[ end trace 0000000000000000 ]--- [ 40.191541][ T848] RIP: 0010:dummy_udc_start+0xbb/0x1d0 [ 40.197014][ T848] Code: 00 00 ff 24 c5 00 6c e3 85 e8 21 02 25 fe eb 13 e8 1a 02 25 fe eb 0c e8 13 02 25 fe eb 05 e8 0c 02 25 fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 a6 8c 6a fe 4d 8b 36 4c 89 f7 e8 [ 40.216760][ T28] audit: type=1400 audit(1785054544.413:201): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 40.216780][ T848] RSP: 0018:ffffc9001122f7e8 EFLAGS: 00010246 [ 40.216801][ T848] RAX: 0000000000000000 RBX: ffff888114bca010 RCX: 0000000000080000 [ 40.252871][ T848] RDX: ffffc900015ea000 RSI: 000000000000079d RDI: 000000000000079e [ 40.260883][ T848] RBP: ffffc9001122f810 R08: ffff88810feda880 R09: 0000000000000004 [ 40.268991][ T848] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 40.277032][ T848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 40.285144][ T848] FS: 00007fab167556c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.294396][ T848] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.301018][ T848] CR2: 00007fab16753fd0 CR3: 0000000132019000 CR4: 00000000003526a0 [ 40.302190][ T871] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.308999][ T848] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.309014][ T848] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.309027][ T848] Kernel panic - not syncing: Fatal exception [ 40.309150][ T848] Kernel Offset: disabled [ 40.343949][ T848] Rebooting in 86400 seconds..