last executing test programs: 3m56.623964382s ago: executing program 32 (id=2296): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m54.989861954s ago: executing program 33 (id=2314): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) 3m52.808761125s ago: executing program 34 (id=2331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 3m52.007234268s ago: executing program 35 (id=2341): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r0, 0x4, 0x20400) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x1) 3m50.836044914s ago: executing program 36 (id=2351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20a42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="66b99a0300000f32c1f0fc0f20400fc73e0e00b88a008ee03e0fc732660f3880bf0090f20f43b5db00f30fc73266b9670200000f32", 0x35}], 0x1, 0x7, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d07, 0x0, 0x3}]}) 3m24.309083314s ago: executing program 9 (id=2625): quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000300)=""/228}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) 3m24.241301362s ago: executing program 9 (id=2626): socket(0x2, 0x80805, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) 3m24.158840327s ago: executing program 9 (id=2628): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffde8, 0x2, {{0x1, 0x9, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0xe, 0x3, 0x9, {0xa2d9, 0x204, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3m23.614355707s ago: executing program 9 (id=2634): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f0000000380)='./file0/../file0\x00', 0x9) 3m23.601398115s ago: executing program 9 (id=2635): mremap(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x80, 0x140) openat$incfs(r3, 0x0, 0x800, 0x80) open(&(0x7f00000000c0)='./file0\x00', 0x143940, 0x96) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x2, 0x9}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x7, &(0x7f0000000100)=[{0x75, 0x0, 0x6, 0x4c7b}, {0x4, 0x8, 0x3, 0x5}, {0xff, 0x8, 0xe, 0x8}, {0x4000, 0x0, 0x9, 0xffffff01}, {0x3, 0x7, 0x5, 0x3ff}, {0x5, 0xfd, 0x74, 0x2}, {0x6, 0xe, 0x5, 0x8001}]}) 3m23.088051831s ago: executing program 9 (id=2637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="450f3466ba400066b8f2ff66ef3b110f7f7f410f1ec566ba2100ec6642351826f3400f7ee73e0f011b8f4838ede60e0f01df", 0x32}], 0xaaaa983, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000140)="020000", 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m23.087830431s ago: executing program 37 (id=2637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="450f3466ba400066b8f2ff66ef3b110f7f7f410f1ec566ba2100ec6642351826f3400f7ee73e0f011b8f4838ede60e0f01df", 0x32}], 0xaaaa983, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000140)="020000", 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m22.517104796s ago: executing program 8 (id=2642): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0xffffffffffffffff, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 3m22.423830829s ago: executing program 8 (id=2643): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f0000000380)='./file0/../file0\x00', 0x9) 3m22.362994458s ago: executing program 8 (id=2644): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r0, 0x4, 0x20400) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x1) 3m22.305868508s ago: executing program 8 (id=2645): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f0000000380)='./file0/../file0\x00', 0x9) 3m22.26264232s ago: executing program 8 (id=2647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) sendfile(r3, r3, 0x0, 0x20000023896) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 3m21.845936184s ago: executing program 8 (id=2650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m21.765648849s ago: executing program 38 (id=2650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m21.719411561s ago: executing program 6 (id=2653): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f0000000380)='./file0/../file0\x00', 0x9) 3m21.669917022s ago: executing program 6 (id=2654): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x2f, 0x9, 0x0, &(0x7f0000000640)="c1dfb080cd21d30809", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m21.545366909s ago: executing program 6 (id=2655): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r0, 0x4, 0x20400) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x1) 3m21.532542447s ago: executing program 6 (id=2656): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f0000000380)='./file0/../file0\x00', 0x9) 3m21.488304878s ago: executing program 6 (id=2657): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@ifindex, 0x1d, 0x1, 0x8, &(0x7f0000000340)=[0x0], 0x1, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@cgroup=r1, r0, 0xd, 0x20, 0x0, @void, @void, @void, @value=r4, r3}, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) getsockopt$inet6_int(r6, 0x29, 0x3e, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}]}, 0xa4}}, 0x4000000) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1c, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3m21.349934903s ago: executing program 6 (id=2658): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0xff) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380), 0x1000a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m21.304942455s ago: executing program 39 (id=2658): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0xff) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380), 0x1000a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m7.546751649s ago: executing program 5 (id=2840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m7.451836142s ago: executing program 5 (id=2841): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0x4048010) 3m7.278954891s ago: executing program 5 (id=2843): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000002780)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0x0, 0x7}) 3m6.381986346s ago: executing program 5 (id=2855): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m6.2911652s ago: executing program 5 (id=2857): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m6.186003891s ago: executing program 5 (id=2858): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0x4, 0x9000, 0x72e, 0x0, 0x7}) 3m6.082231142s ago: executing program 40 (id=2858): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0x4, 0x9000, 0x72e, 0x0, 0x7}) 54.96820097s ago: executing program 1 (id=5389): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 54.91429819s ago: executing program 1 (id=5391): setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000002004e21e00000010000000000000000000000000000000000000000000000000000000000000000000006"], 0x210) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x200000b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x28100, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x10, 0x0, 0x3fb}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000090) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, &(0x7f0000000400)={0x2, [0x0, 0x0]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0xa, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0xffffffffffffffff, 0xd, 0x0, 0xd4e2, 0x6], 0x0, 0x302240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 54.828520414s ago: executing program 1 (id=5393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc) 54.80451228s ago: executing program 1 (id=5394): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 54.80390715s ago: executing program 1 (id=5395): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0\x00') 54.657883523s ago: executing program 1 (id=5399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa902, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000001c0)="dbe366b90000004066b80000000066ba008000000f30440f20c066350d000000440f22c08139a583f00fc1a68c1d0f001765260f23030f017415f0833004b8ff0f8ec8", 0x43}], 0x1, 0x15, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400d0}, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 54.620309716s ago: executing program 41 (id=5399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa902, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000001c0)="dbe366b90000004066b80000000066ba008000000f30440f20c066350d000000440f22c08139a583f00fc1a68c1d0f001765260f23030f017415f0833004b8ff0f8ec8", 0x43}], 0x1, 0x15, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400d0}, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.739650291s ago: executing program 7 (id=5858): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 9.712876176s ago: executing program 7 (id=5859): ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x7709, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 9.645830754s ago: executing program 7 (id=5860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000080)=""/50, 0x32}], 0x2, 0x8, 0x10) 8.386135573s ago: executing program 7 (id=5867): dup(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000900)={0x40, 0xd, 0x4, "728f0154"}, 0x0, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x5b}, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000600)={0x20, 0x3, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.979158538s ago: executing program 0 (id=5893): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x760, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x88700, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 3.919597317s ago: executing program 2 (id=5894): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 3.845518713s ago: executing program 2 (id=5895): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4972, &(0x7f0000006680)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900049000000000000000e5ffff0800040000000000000000", 0x39}], 0x1) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 3.315942117s ago: executing program 7 (id=5897): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f00000005c0)={0x0, 0xe, 0x4, "d4c58c73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.917537104s ago: executing program 2 (id=5900): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2e41d16cd5f466b822000f00d0460f06f245dd48f526263ef2a585f6b92e030000b800000000ba008000000f3041ab0fc73a0fc71f", 0x35}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.776528968s ago: executing program 2 (id=5903): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0xb0, 0x80000, 0x7ffd}) 2.050576715s ago: executing program 3 (id=5906): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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") gettid() timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.049061385s ago: executing program 4 (id=5907): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.836666246s ago: executing program 0 (id=5908): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x115) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.719392284s ago: executing program 4 (id=5909): write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r0, 0x2000000000000091, &(0x7f0000000200)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1.631311199s ago: executing program 0 (id=5910): socket$pppl2tp(0x18, 0x1, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.619311086s ago: executing program 0 (id=5911): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.602224823s ago: executing program 0 (id=5912): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, 0x0, 0x0, 0x8000c61) 1.576289848s ago: executing program 0 (id=5913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2e41d16cd5f466b822000f00d0460f06f245dd48f526263ef2a585f6b92e030000b800000000ba008000000f3041ab0fc73a0fc71f", 0x35}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.575566628s ago: executing program 3 (id=5914): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000010340)={[{@dioread_nolock}, {@orlov}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@dioread_nolock}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$FIBMAP(r0, 0x1, 0x0) 1.547024563s ago: executing program 4 (id=5915): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4972, &(0x7f0000006680)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$inet6(0xa, 0x805, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900049000000000000000e5ffff0800040000000000000000", 0x39}], 0x1) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 900.169585ms ago: executing program 2 (id=5917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 417.189387ms ago: executing program 7 (id=5918): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x2000000000000091, &(0x7f0000000200)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 372.391628ms ago: executing program 4 (id=5919): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x115) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 344.698793ms ago: executing program 3 (id=5920): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r0, 0x0, 0x0) 245.922915ms ago: executing program 2 (id=5921): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab05010300010102030109022400010000"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 217.5737ms ago: executing program 4 (id=5922): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0xfffffffc, 0x14c0348, 0xc0be, 0x2, 0xf296, 0x2e64, 0x0, 0x0, 0x10, 0x3}}, 0x50) 171.103312ms ago: executing program 3 (id=5923): socket$pppl2tp(0x18, 0x1, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 104.453829ms ago: executing program 3 (id=5924): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 104.054549ms ago: executing program 3 (id=5925): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) r0 = open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6) fallocate(r0, 0x8, 0x0, 0x10000) 0s ago: executing program 4 (id=5926): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x8000000000009, 0xfffffffffffffffd, 0x0, 0x10003, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x3, 0x400, 0x80, 0x89, 0x0, 0xa, 0x8d], 0x100000, 0x250047}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): 3:046D:CA03.0001: unknown main item tag 0x0 [ 948.160470][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.175422][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.190385][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.205323][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.220237][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.235590][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.249459][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.264370][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.279365][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.294277][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.309118][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.324320][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.339127][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.354014][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.369185][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.386266][ T3921] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 948.407380][ T3921] logitech 0003:046D:CA03.0001: hidraw0: USB HID v0.0a Device [HID 046d:ca03] on usb-dummy_hcd.3-1/input0 [ 948.442784][ T3921] logitech 0003:046D:CA03.0001: no inputs found [ 948.481962][ T3921] usb 4-1: USB disconnect, device number 12 [ 948.605821][T18042] fido_id[18042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 949.578423][ T28] audit: type=1400 audit(2000000884.139:2429): avc: denied { create } for pid=18106 comm="syz.1.5153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 949.626467][T18109] SELinux: ebitmap: truncated map [ 949.648458][T18109] SELinux: failed to load policy [ 950.309524][T18148] SELinux: ebitmap: map size 536870913 does not match my size 64 (high bit was 1088) [ 950.331279][T18148] SELinux: failed to load policy [ 950.399027][T18155] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 950.426277][T18155] SELinux: failed to load policy [ 950.645864][T18173] kvm: pic: non byte write [ 950.951696][ T288] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 951.143650][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.181803][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.209218][ T288] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 951.228878][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.269206][ T288] usb 1-1: config 0 descriptor?? [ 951.354232][T18226] SELinux: ebitmap: truncated map [ 951.381152][T18226] SELinux: failed to load policy [ 951.683334][ T288] hkems 0003:2006:0118.0002: unknown main item tag 0x0 [ 951.704361][ T288] hkems 0003:2006:0118.0002: unknown main item tag 0x0 [ 951.730304][ T288] hkems 0003:2006:0118.0002: unknown main item tag 0x0 [ 951.759054][T18252] overlayfs: failed to resolve './file0': -2 [ 951.766461][ T288] hkems 0003:2006:0118.0002: unknown main item tag 0x0 [ 951.795907][ T288] hkems 0003:2006:0118.0002: unknown main item tag 0x0 [ 951.818776][ T288] hkems 0003:2006:0118.0002: unknown main item tag 0x0 [ 951.843229][ T288] hkems 0003:2006:0118.0002: unknown main item tag 0x0 [ 951.876210][ T288] hkems 0003:2006:0118.0002: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.0-1/input0 [ 951.893766][T18263] syz.4.5204 uses obsolete (PF_INET,SOCK_PACKET) [ 951.909985][ T28] audit: type=1400 audit(2000000886.469:2430): avc: denied { append } for pid=18262 comm="syz.4.5204" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 951.913277][ T288] hkems 0003:2006:0118.0002: no inputs found [ 951.989067][ T288] hkems 0003:2006:0118.0002: force feedback init failed [ 952.009265][ T288] usb 1-1: USB disconnect, device number 14 [ 952.077902][T18267] fido_id[18267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 952.201727][ T656] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 952.402669][ T656] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.424303][ T656] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 952.436725][ T656] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 952.461700][ T656] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.471247][ T656] usb 5-1: Product: syz [ 952.481614][ T656] usb 5-1: Manufacturer: syz [ 952.486261][ T656] usb 5-1: SerialNumber: syz [ 952.519862][T18276] SELinux: ebitmap: truncated map [ 952.559850][T18276] SELinux: failed to load policy [ 952.699466][T18292] binder: BINDER_SET_CONTEXT_MGR already set [ 952.704721][ T656] usb 5-1: 0:2 : does not exist [ 952.714147][ T656] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 952.716918][T18292] binder: 18290:18292 ioctl 4018620d 200000004a80 returned -16 [ 952.740104][ T656] usb 5-1: USB disconnect, device number 14 [ 952.820447][T18295] SELinux: ebitmap: truncated map [ 952.840784][T18295] SELinux: failed to load policy [ 953.024899][T18312] fuse: Unknown parameter 'user_i00000000000000000000' [ 953.328933][T18344] fuse: Unknown parameter 'user_i00000000000000000000' [ 953.581620][ T60] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 953.791620][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 953.798677][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.845282][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.853234][T18366] overlayfs: failed to resolve './file1': -2 [ 953.867266][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 953.901407][ T60] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 953.923352][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.946672][ T60] usb 5-1: config 0 descriptor?? [ 954.072359][T18381] fuse: Unknown parameter 'user_i00000000000000000000' [ 954.361137][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.375234][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.391909][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.409814][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.420487][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.427900][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.437388][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.444769][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.454803][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.462171][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.471127][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.479735][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.492593][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.501871][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.511133][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.519544][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.527262][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.539976][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.547604][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.557416][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.565010][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.573779][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.581400][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.595066][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.602640][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.610944][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.619174][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.626797][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.635232][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.642882][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.650170][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.659267][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.666804][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.674194][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.681450][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.688958][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.696817][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.704536][ T60] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 954.718029][ T60] logitech 0003:046D:CA03.0003: hidraw0: USB HID v0.0a Device [HID 046d:ca03] on usb-dummy_hcd.4-1/input0 [ 954.736120][ T60] logitech 0003:046D:CA03.0003: no inputs found [ 954.758301][ T60] usb 5-1: USB disconnect, device number 15 [ 954.785283][T18404] fido_id[18404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 954.879850][T18415] overlayfs: failed to resolve './file1': -2 [ 954.951404][T18425] overlayfs: failed to resolve './file1': -2 [ 954.976977][T18422] SELinux: ebitmap: truncated map [ 954.994777][T18422] SELinux: failed to load policy [ 955.327681][T18461] overlayfs: failed to resolve './file1': -2 [ 955.451501][T18471] fuse: Unknown parameter 'user_id00000000000000000000' [ 955.475695][T18473] overlayfs: unrecognized mount option "/file0" or missing value [ 955.671624][ T60] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 955.871639][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 955.888015][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.899314][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.909752][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 955.922976][ T60] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 955.936536][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.949093][ T60] usb 3-1: config 0 descriptor?? [ 956.043626][T18531] binder: 18530:18531 ioctl c0306201 0 returned -14 [ 956.322483][T18545] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 956.342816][T18545] SELinux: failed to load policy [ 956.366957][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.370571][T18551] binder: 18548:18551 ioctl c0306201 0 returned -14 [ 956.380921][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.395269][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.406329][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.423638][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.430906][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.440277][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.448857][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.456387][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.465974][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.474856][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.491597][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.500226][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.508322][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.515812][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.523653][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.530871][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.548241][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.571904][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.579361][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.587097][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.594543][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5311'. [ 956.603943][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.624780][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.632306][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.639663][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.647240][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.656772][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.664929][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.673987][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.681304][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.688689][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.696000][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.703312][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.710503][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.717978][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.725323][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.732614][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.739932][ T60] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 956.749268][ T60] logitech 0003:046D:CA03.0004: hidraw0: USB HID v0.0a Device [HID 046d:ca03] on usb-dummy_hcd.2-1/input0 [ 956.760820][ T60] logitech 0003:046D:CA03.0004: no inputs found [ 956.770050][ T60] usb 3-1: USB disconnect, device number 17 [ 956.848019][T18574] fido_id[18574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 957.074289][T18603] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 957.083236][T18603] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 957.101600][ T28] audit: type=1400 audit(2000000891.659:2431): avc: denied { map } for pid=18604 comm="syz.4.5323" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 957.169264][T18613] overlayfs: failed to resolve './file0': -2 [ 957.351758][T18635] overlayfs: missing 'lowerdir' [ 957.611692][ T335] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 957.671624][ T656] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 957.679327][ T60] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 957.791618][ T335] usb 1-1: Using ep0 maxpacket: 32 [ 957.807980][ T335] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 957.816212][ T335] usb 1-1: config 0 has no interface number 0 [ 957.825878][ T335] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 957.835341][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.843433][ T335] usb 1-1: Product: syz [ 957.847792][ T335] usb 1-1: Manufacturer: syz [ 957.852484][ T335] usb 1-1: SerialNumber: syz [ 957.858531][ T335] usb 1-1: config 0 descriptor?? [ 957.871475][ T335] smsc95xx v2.0.0 [ 957.881659][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 957.887807][ T656] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.899014][ T656] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 957.909145][ T60] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 957.922208][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.930458][ T60] usb 5-1: Product: syz [ 957.933369][ T656] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 957.946752][ T60] usb 5-1: Manufacturer: syz [ 957.951366][ T60] usb 5-1: SerialNumber: syz [ 957.956318][ T656] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.965740][ T656] usb 3-1: Product: syz [ 957.969980][ T656] usb 3-1: Manufacturer: syz [ 957.975398][ T656] usb 3-1: SerialNumber: syz [ 958.184059][ T656] usb 3-1: 0:2 : does not exist [ 958.193412][ T656] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 958.206540][ T656] usb 3-1: USB disconnect, device number 18 [ 958.277144][ T335] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 958.295653][ T335] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 958.341526][T18676] overlayfs: missing 'lowerdir' [ 958.423597][ T3855] udevd[3855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 958.885657][T18710] overlayfs: missing 'lowerdir' [ 959.011619][ T990] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 959.201887][ T990] usb 3-1: Using ep0 maxpacket: 32 [ 959.208505][ T990] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 959.217019][ T990] usb 3-1: config 0 has no interface number 0 [ 959.224913][ T990] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 959.234315][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.242723][ T990] usb 3-1: Product: syz [ 959.246972][ T990] usb 3-1: Manufacturer: syz [ 959.251927][ T990] usb 3-1: SerialNumber: syz [ 959.266822][ T990] usb 3-1: config 0 descriptor?? [ 959.274633][ T990] smsc95xx v2.0.0 [ 959.582290][ T60] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 959.592736][ T60] usb 5-1: USB disconnect, device number 16 [ 959.675587][ T990] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 959.690678][ T990] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 959.714466][ T335] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 959.726536][ T335] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 959.747925][ T335] usb 1-1: USB disconnect, device number 15 [ 959.852648][T18736] fuse: Unknown parameter '0x0000000000000003' [ 959.954961][T18742] overlayfs: missing 'workdir' [ 959.973925][T18744] overlayfs: failed to resolve './file0': -2 [ 960.009084][T18746] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 960.106612][T18749] overlayfs: failed to resolve './file0': -2 [ 960.511054][T18778] overlayfs: missing 'workdir' [ 960.563926][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5387'. [ 960.614048][T18787] overlayfs: failed to resolve './file0': -2 [ 961.159958][T18817] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.167317][T18817] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.176308][T18817] device bridge_slave_0 entered promiscuous mode [ 961.184001][T18817] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.191202][T18817] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.217607][T18817] device bridge_slave_1 entered promiscuous mode [ 961.307126][ T990] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 961.320575][T18817] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.327658][T18817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.335000][T18817] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.342071][T18817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.356676][ T990] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 961.366773][ T990] usb 3-1: USB disconnect, device number 19 [ 961.403696][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 961.415672][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.423425][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.434111][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 961.454516][T12009] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.461709][T12009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.506713][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 961.521057][T12009] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.528229][T12009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.551365][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 961.573605][T18866] fuse: Unknown parameter '0x0000000000000003' [ 961.579921][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 961.611720][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 961.626241][T18817] device veth0_vlan entered promiscuous mode [ 961.634735][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 961.644186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 961.652068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 961.678653][T18817] device veth1_macvtap entered promiscuous mode [ 961.688277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 961.717506][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 961.733927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 962.020031][T18899] fuse: Unknown parameter '0x0000000000000003' [ 962.181637][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 962.366703][T18904] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 962.376588][T18904] SELinux: failed to load policy [ 962.381615][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 962.387951][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 962.411667][ T24] usb 5-1: config 0 has no interface number 0 [ 962.439678][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 962.462959][ T5064] device bridge_slave_1 left promiscuous mode [ 962.464736][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.469120][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.501596][ T24] usb 5-1: Product: syz [ 962.514485][ T24] usb 5-1: Manufacturer: syz [ 962.519397][ T5064] device bridge_slave_0 left promiscuous mode [ 962.526767][ T24] usb 5-1: SerialNumber: syz [ 962.528990][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.542570][ T24] usb 5-1: config 0 descriptor?? [ 962.559173][ T24] smsc95xx v2.0.0 [ 962.564756][ T5064] device veth1_macvtap left promiscuous mode [ 962.581726][ T5064] device veth0_vlan left promiscuous mode [ 962.959362][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 962.970185][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 964.160787][T19000] binder: 18998:19000 ioctl 4018620d 0 returned -22 [ 964.541630][ T60] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 964.586593][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 964.598227][ T24] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 964.607286][ T24] usb 5-1: USB disconnect, device number 17 [ 964.722830][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 964.732962][ T3921] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 964.740812][ T60] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 964.750800][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 964.760938][ T60] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 964.781791][ T60] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 964.791034][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.799188][ T60] usb 1-1: Product: syz [ 964.803400][ T60] usb 1-1: Manufacturer: syz [ 964.808306][ T60] usb 1-1: SerialNumber: syz [ 964.814667][ T60] usb 1-1: config 0 descriptor?? [ 964.820846][ T60] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 964.942834][ T3921] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.953216][ T3921] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.964472][ T3921] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 964.973655][ T3921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.981782][ T3921] usb 8-1: Product: syz [ 964.986167][ T3921] usb 8-1: Manufacturer: syz [ 964.990830][ T3921] usb 8-1: SerialNumber: syz [ 965.030477][ T60] scsi host1: usb-storage 1-1:0.0 [ 965.038583][ T60] usb 1-1: USB disconnect, device number 16 [ 965.214074][ T3921] usb 8-1: 0:2 : does not exist [ 965.225287][ T3921] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 965.251389][ T3921] usb 8-1: USB disconnect, device number 2 [ 965.345411][T19037] kvm: pic: non byte write [ 965.685576][ T28] audit: type=1400 audit(2000000900.249:2432): avc: denied { append } for pid=19049 comm="syz.3.5480" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 965.841643][ T60] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 966.032815][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 966.043635][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 966.075960][ T60] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 966.085484][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.093689][ T60] usb 1-1: Product: syz [ 966.098077][ T60] usb 1-1: Manufacturer: syz [ 966.102917][ T60] usb 1-1: SerialNumber: syz [ 966.316288][ T60] usb 1-1: 0:2 : does not exist [ 966.324262][T19072] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3925378237 (3925378237 ns) > initial count (201937708 ns). Using initial count to start timer. [ 966.355165][ T60] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 966.373092][ T60] usb 1-1: USB disconnect, device number 17 [ 966.592604][ T2466] udevd[2466]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 966.784795][T19086] binder: 19085:19086 ioctl c0306201 0 returned -14 [ 966.817610][T19089] overlayfs: failed to resolve './file1': -2 [ 967.121725][ T60] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 967.155375][T19120] binder: 19119:19120 ioctl c0306201 0 returned -14 [ 967.312779][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 967.323781][ T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 967.334397][ T60] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 967.344878][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.353146][ T60] usb 4-1: Product: syz [ 967.357459][ T60] usb 4-1: Manufacturer: syz [ 967.362625][ T60] usb 4-1: SerialNumber: syz [ 967.491608][ T24] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 967.571877][ T60] usb 4-1: 0:2 : does not exist [ 967.579459][ T60] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 967.600774][ T60] usb 4-1: USB disconnect, device number 13 [ 967.682880][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 967.696455][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 967.706549][T19158] binder: BINDER_SET_CONTEXT_MGR already set [ 967.712749][T19158] binder: 19157:19158 ioctl 4018620d 200000004a80 returned -16 [ 967.722184][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 967.734894][ T990] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 967.745304][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.755403][ T24] usb 5-1: Product: syz [ 967.759582][ T24] usb 5-1: Manufacturer: syz [ 967.765363][ T24] usb 5-1: SerialNumber: syz [ 967.921665][ T990] usb 3-1: Using ep0 maxpacket: 32 [ 967.928082][ T990] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 967.936226][ T990] usb 3-1: config 2 has no interface number 0 [ 967.942445][ T990] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 967.952504][ T990] usb 3-1: config 2 interface 88 has no altsetting 0 [ 967.960727][ T990] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 967.970016][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.979136][ T24] usb 5-1: 0:2 : does not exist [ 967.980359][ T990] usb 3-1: Product: syz [ 967.988260][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 967.988320][ T990] usb 3-1: Manufacturer: syz [ 968.000634][ T990] usb 3-1: SerialNumber: syz [ 968.009403][ T24] usb 5-1: USB disconnect, device number 18 [ 968.015366][T19148] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 968.181683][ T60] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 968.225419][T19148] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 968.361634][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 968.367993][ T60] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 968.376383][ T60] usb 1-1: config 0 has no interface number 0 [ 968.384328][ T60] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 968.393851][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.402041][ T60] usb 1-1: Product: syz [ 968.406266][ T60] usb 1-1: Manufacturer: syz [ 968.410907][ T60] usb 1-1: SerialNumber: syz [ 968.420597][ T60] usb 1-1: config 0 descriptor?? [ 968.428176][ T60] smsc95xx v2.0.0 [ 968.562805][T19196] SELinux: ebitmap: truncated map [ 968.574325][T19196] SELinux: failed to load policy [ 968.581691][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 968.781603][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 968.787941][ T24] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 968.806955][ T24] usb 8-1: config 0 has no interface number 0 [ 968.815501][ T24] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 968.827575][ T60] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 968.844306][ T24] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 968.855193][ T60] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 968.866026][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.874422][ T24] usb 8-1: Product: syz [ 968.878937][ T24] usb 8-1: Manufacturer: syz [ 968.888475][ T24] usb 8-1: SerialNumber: syz [ 968.896015][T19204] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 968.899035][ T24] usb 8-1: config 0 descriptor?? [ 968.909514][T19204] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 968.911307][T19194] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 969.134626][T19194] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 969.243154][ T990] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 969.253583][ T990] asix: probe of 3-1:2.88 failed with error -71 [ 969.268544][ T990] usb 3-1: USB disconnect, device number 20 [ 969.274548][ T19] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 969.462742][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.472921][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 969.483831][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 969.493538][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.501810][ T19] usb 5-1: Product: syz [ 969.506198][ T19] usb 5-1: Manufacturer: syz [ 969.511198][ T19] usb 5-1: SerialNumber: syz [ 969.722873][ T19] usb 5-1: 0:2 : does not exist [ 969.729891][ T19] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 969.780806][ T19] usb 5-1: USB disconnect, device number 19 [ 970.084191][ T60] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 970.095718][ T60] smsc95xx: probe of 1-1:0.67 failed with error -32 [ 970.107390][ T60] usb 1-1: USB disconnect, device number 18 [ 970.331629][ T19] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 970.519690][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.535333][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 970.555630][ T19] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 970.576222][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.588997][ T19] usb 3-1: Product: syz [ 970.603580][ T19] usb 3-1: Manufacturer: syz [ 970.608405][ T19] usb 3-1: SerialNumber: syz [ 970.747957][ T24] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 970.763638][ T24] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 970.782451][ T24] asix: probe of 8-1:0.188 failed with error -71 [ 970.799057][ T24] usb 8-1: USB disconnect, device number 3 [ 970.822625][ T19] usb 3-1: 0:2 : does not exist [ 970.830482][ T19] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 970.898777][ T19] usb 3-1: USB disconnect, device number 21 [ 970.941657][ T990] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 971.132024][ T990] usb 4-1: Using ep0 maxpacket: 16 [ 971.157724][ T990] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 971.169358][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.189301][ T990] usb 4-1: Product: syz [ 971.193696][ T990] usb 4-1: Manufacturer: syz [ 971.198289][ T990] usb 4-1: SerialNumber: syz [ 971.641765][ T19] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 971.852988][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 971.861093][ T19] usb 5-1: unable to get BOS descriptor or descriptor too short [ 971.872020][ T19] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 971.880311][ T19] usb 5-1: config 0 has no interface number 0 [ 971.886676][ T19] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 971.898488][ T19] usb 5-1: config 0 interface 88 has no altsetting 0 [ 971.910301][ T19] usb 5-1: string descriptor 0 read error: -22 [ 971.920960][ T19] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 971.930428][ T19] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 971.939989][ T19] usb 5-1: config 0 descriptor?? [ 971.947797][ T19] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input4 [ 971.961105][ T28] audit: type=1400 audit(2000000906.519:2433): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=3028 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 971.986044][ T28] audit: type=1400 audit(2000000906.519:2434): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3028 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 972.010147][ T28] audit: type=1400 audit(2000000906.519:2435): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3028 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 972.158581][ T19] usb 5-1: USB disconnect, device number 20 [ 972.381654][ T3921] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 972.561623][ T3921] usb 8-1: Using ep0 maxpacket: 32 [ 972.568834][ T3921] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 972.577345][ T3921] usb 8-1: config 0 has no interface number 0 [ 972.583559][ T3921] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 972.595302][ T3921] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 972.609478][ T3921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.622821][ T3921] usb 8-1: Product: syz [ 972.627028][ T3921] usb 8-1: Manufacturer: syz [ 972.631730][ T3921] usb 8-1: SerialNumber: syz [ 972.660199][ T3921] usb 8-1: config 0 descriptor?? [ 972.673651][T19331] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 972.839815][ T990] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 972.852199][ T990] usb 4-1: USB disconnect, device number 14 [ 972.884317][T19331] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 972.981684][ T19] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 973.172681][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.191604][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 973.209562][ T19] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 973.224017][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.241624][ T19] usb 3-1: Product: syz [ 973.254141][ T19] usb 3-1: Manufacturer: syz [ 973.258774][ T19] usb 3-1: SerialNumber: syz [ 973.479229][ T19] usb 3-1: 0:2 : does not exist [ 973.486441][ T19] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 973.497720][ T19] usb 3-1: USB disconnect, device number 22 [ 973.702367][ T2466] udevd[2466]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 974.471613][ T60] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 974.497249][ T3921] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 974.507557][ T3921] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 974.518179][ T3921] asix: probe of 8-1:0.188 failed with error -71 [ 974.525562][ T3921] usb 8-1: USB disconnect, device number 4 [ 974.651630][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 974.658246][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 974.666682][ T60] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 974.674778][ T60] usb 5-1: config 0 has no interface number 0 [ 974.680877][ T60] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 974.692022][ T60] usb 5-1: config 0 interface 88 has no altsetting 0 [ 974.700581][ T60] usb 5-1: string descriptor 0 read error: -22 [ 974.706830][ T60] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 974.715893][ T60] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 974.725651][ T60] usb 5-1: config 0 descriptor?? [ 974.731834][ T60] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input5 [ 974.761644][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 974.939114][ T60] usb 5-1: USB disconnect, device number 21 [ 974.939156][ C1] usb_acecad 5-1:0.88: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 974.954087][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 974.960247][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.971314][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.981792][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 974.995092][ T24] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 975.004284][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.014603][ T24] usb 3-1: config 0 descriptor?? [ 975.306837][T19426] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3925378237 (3925378237 ns) > initial count (201937708 ns). Using initial count to start timer. [ 975.351629][ T491] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 975.422381][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.429414][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.436866][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.443968][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.450972][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.458559][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.465667][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.472688][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.479656][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.486672][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.493785][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.500795][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.508012][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.515091][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.522136][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.529153][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.536148][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.543215][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.550227][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.557640][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.564819][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.571912][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.578972][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.585985][ T491] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.596098][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.603049][ T491] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 975.611949][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.618969][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.626411][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.633461][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.640501][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.647525][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.654649][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.662333][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.669328][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.676386][ T491] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 975.685653][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.692670][ T491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.700652][ T491] usb 4-1: Product: syz [ 975.704888][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.711891][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.718852][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.725908][ T491] usb 4-1: Manufacturer: syz [ 975.730612][ T491] usb 4-1: SerialNumber: syz [ 975.735586][ T24] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 975.744588][ T24] a4tech 0003:09DA:000A.0005: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.2-1/input0 [ 975.757911][ T24] usb 3-1: USB disconnect, device number 23 [ 975.779574][T19433] fido_id[19433]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 975.885722][T19440] device syzkaller0 entered promiscuous mode [ 975.890502][T19441] overlayfs: missing 'lowerdir' [ 975.946585][ T491] usb 4-1: 0:2 : does not exist [ 975.953681][ T491] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 975.965515][ T491] usb 4-1: USB disconnect, device number 15 [ 976.172935][ T2466] udevd[2466]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 976.261607][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 976.285119][T19477] overlayfs: missing 'lowerdir' [ 976.300299][T19479] loop0: detected capacity change from 0 to 512 [ 976.309601][T19479] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 976.321541][T19479] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.5631: invalid indirect mapped block 83886080 (level 1) [ 976.336043][T19479] EXT4-fs (loop0): Remounting filesystem read-only [ 976.342760][T19479] EXT4-fs (loop0): 1 orphan inode deleted [ 976.348639][T19479] EXT4-fs (loop0): 1 truncate cleaned up [ 976.354319][T19479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 976.373622][T11875] EXT4-fs (loop0): unmounting filesystem. [ 976.446194][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.457304][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.475406][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 976.489073][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 976.499181][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.508529][ T24] usb 5-1: config 0 descriptor?? [ 976.612103][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5635'. [ 976.620993][T19491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5635'. [ 976.918242][ T24] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 976.929867][ T24] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 977.061772][ T19] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 977.262670][ T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.272854][ T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 977.283651][ T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 977.292844][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.300945][ T19] usb 4-1: Product: syz [ 977.305140][ T19] usb 4-1: Manufacturer: syz [ 977.309821][ T19] usb 4-1: SerialNumber: syz [ 977.401616][ T24] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 977.518443][ T19] usb 4-1: 0:2 : does not exist [ 977.525312][ T19] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 977.536356][ T19] usb 4-1: USB disconnect, device number 16 [ 977.582693][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.592852][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 977.603354][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 977.612641][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.620685][ T24] usb 3-1: Product: syz [ 977.624979][ T24] usb 3-1: Manufacturer: syz [ 977.629583][ T24] usb 3-1: SerialNumber: syz [ 977.742308][ T2466] udevd[2466]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 977.837837][ T24] usb 3-1: 0:2 : does not exist [ 977.845550][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 977.857056][ T24] usb 3-1: USB disconnect, device number 24 [ 978.062041][ T2466] udevd[2466]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 978.161653][ T3921] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 978.216390][T19535] overlayfs: failed to resolve './file0': -2 [ 978.341608][ T3921] usb 1-1: Using ep0 maxpacket: 32 [ 978.351081][ T3921] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 978.359333][ T3921] usb 1-1: config 2 has no interface number 0 [ 978.365621][ T3921] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 978.376531][ T3921] usb 1-1: config 2 interface 88 has no altsetting 0 [ 978.389331][ T3921] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 978.399640][ T3921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.407704][ T3921] usb 1-1: Product: syz [ 978.411935][ T3921] usb 1-1: Manufacturer: syz [ 978.416586][ T3921] usb 1-1: SerialNumber: syz [ 978.422268][T19522] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 978.486902][T19547] loop2: detected capacity change from 0 to 2048 [ 978.503419][T19547] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 978.521882][ T19] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 978.567065][ T28] audit: type=1400 audit(2000000913.129:2436): avc: denied { map } for pid=19546 comm="syz.2.5657" path="/548/file0/hugetlb.2MB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 978.594904][T19547] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5657: bg 0: block 234: padding at end of block bitmap is not set [ 978.606968][ T28] audit: type=1400 audit(2000000913.159:2437): avc: denied { write } for pid=19546 comm="syz.2.5657" path="/548/file0/hugetlb.2MB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 978.609460][T19547] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 978.646441][T19547] EXT4-fs (loop2): This should not happen!! Data will be lost [ 978.646441][T19547] [ 978.648505][T19522] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 978.656222][T19547] EXT4-fs (loop2): Total free blocks count 0 [ 978.675849][T19547] EXT4-fs (loop2): Free/Dirty block details [ 978.681926][T19547] EXT4-fs (loop2): free_blocks=0 [ 978.686886][T19547] EXT4-fs (loop2): dirty_blocks=5136 [ 978.692213][T19547] EXT4-fs (loop2): Block reservation details [ 978.698366][T19547] EXT4-fs (loop2): i_reserved_data_blocks=321 [ 978.762139][T12009] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 978.762698][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.789902][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.811614][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 978.824919][ T19] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 978.834204][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.843440][ T19] usb 4-1: config 0 descriptor?? [ 978.859340][T19555] overlayfs: missing 'lowerdir' [ 978.962094][ T24] usb 5-1: USB disconnect, device number 22 [ 979.191618][ T990] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 979.252615][ T19] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 979.262107][ T19] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 979.371668][ T990] usb 3-1: Using ep0 maxpacket: 32 [ 979.378176][ T990] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 979.387146][ T990] usb 3-1: config 0 has no interface number 0 [ 979.393392][ T990] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 979.405845][ T990] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 979.415011][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.423043][ T990] usb 3-1: Product: syz [ 979.427213][ T990] usb 3-1: Manufacturer: syz [ 979.431882][ T990] usb 3-1: SerialNumber: syz [ 979.437132][ T990] usb 3-1: config 0 descriptor?? [ 979.442395][T19560] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 979.474667][ T24] usb 4-1: USB disconnect, device number 17 [ 979.651875][T19560] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 979.675772][T19570] overlayfs: failed to resolve './file0': -2 [ 979.690925][ T3921] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 979.701377][ T3921] asix: probe of 1-1:2.88 failed with error -71 [ 979.708590][ T3921] usb 1-1: USB disconnect, device number 19 [ 980.351657][ T3921] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 980.532675][ T3921] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.543748][ T3921] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.553684][ T3921] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 980.566751][ T3921] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 980.587893][T19590] binder_alloc: 19589: binder_alloc_buf, no vma [ 980.589613][ T3921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.609932][ T3921] usb 8-1: config 0 descriptor?? [ 980.881713][ T2182] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 980.961638][ T19] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 981.018298][ T3921] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 981.027420][ T3921] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 981.062613][ T2182] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 981.073041][ T2182] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 981.083397][ T2182] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 981.092508][ T2182] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.100521][ T2182] usb 5-1: Product: syz [ 981.105219][ T2182] usb 5-1: Manufacturer: syz [ 981.109815][ T2182] usb 5-1: SerialNumber: syz [ 981.141618][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 981.147864][ T19] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 981.156040][ T19] usb 1-1: config 2 has no interface number 0 [ 981.162179][ T19] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 981.172116][ T19] usb 1-1: config 2 interface 88 has no altsetting 0 [ 981.180382][ T19] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 981.189838][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.198101][ T19] usb 1-1: Product: syz [ 981.202278][ T19] usb 1-1: Manufacturer: syz [ 981.206871][ T19] usb 1-1: SerialNumber: syz [ 981.212774][T19596] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 981.263093][ T990] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 981.273433][ T990] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 981.283926][ T990] asix: probe of 3-1:0.188 failed with error -71 [ 981.291317][ T990] usb 3-1: USB disconnect, device number 25 [ 981.317783][ T2182] usb 5-1: 0:2 : does not exist [ 981.324524][ T2182] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 981.335554][ T2182] usb 5-1: USB disconnect, device number 23 [ 981.421075][T19596] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 981.542202][ T2466] udevd[2466]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 981.984739][T19611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5677'. [ 981.994759][T19611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5677'. [ 982.003892][T19611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5677'. [ 982.012989][T19611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5677'. [ 982.022019][T19611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5677'. [ 982.031114][T19611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5677'. [ 982.040127][T19611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5677'. [ 982.049360][T19611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5677'. [ 982.058348][T19611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5677'. [ 982.067481][T19611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5677'. [ 982.259262][ T19] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 982.269667][ T19] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 982.280967][ T19] asix: probe of 1-1:2.88 failed with error -71 [ 982.289161][ T19] usb 1-1: USB disconnect, device number 20 [ 982.409426][T19623] binder_alloc: 19622: binder_alloc_buf, no vma [ 982.701647][ T656] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 982.881717][ T656] usb 5-1: Using ep0 maxpacket: 16 [ 982.890010][ T656] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 982.899467][ T656] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.907831][ T656] usb 5-1: Product: syz [ 982.912180][ T656] usb 5-1: Manufacturer: syz [ 982.921527][ T656] usb 5-1: SerialNumber: syz [ 982.981763][ T19] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 983.051658][ T288] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 983.094215][T19644] loop7: detected capacity change from 0 to 512 [ 983.104424][T19644] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 983.116608][T19644] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #16: comm syz.7.5691: invalid indirect mapped block 83886080 (level 1) [ 983.133633][T19644] EXT4-fs (loop7): Remounting filesystem read-only [ 983.140353][T19644] EXT4-fs (loop7): 1 orphan inode deleted [ 983.146676][T19644] EXT4-fs (loop7): 1 truncate cleaned up [ 983.152408][T19644] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 983.161708][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 983.167115][ T2182] usb 8-1: USB disconnect, device number 5 [ 983.175641][ T19] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 983.184899][ T19] usb 3-1: config 0 has no interface number 0 [ 983.186358][T18817] EXT4-fs (loop7): unmounting filesystem. [ 983.191643][ T19] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 983.218639][ T19] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 983.229256][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.237582][ T19] usb 3-1: Product: syz [ 983.244378][ T19] usb 3-1: Manufacturer: syz [ 983.249065][ T19] usb 3-1: SerialNumber: syz [ 983.253924][ T288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.264741][ T288] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 983.277405][ T19] usb 3-1: config 0 descriptor?? [ 983.291803][T19629] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 983.301353][ T288] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 983.321688][ T288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.329731][ T288] usb 1-1: Product: syz [ 983.335493][ T656] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 983.344094][ T288] usb 1-1: Manufacturer: syz [ 983.348169][ T656] usb 5-1: USB disconnect, device number 24 [ 983.350918][ T288] usb 1-1: SerialNumber: syz [ 983.491619][ T990] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 983.502176][T19629] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 983.568065][ T288] usb 1-1: 0:2 : does not exist [ 983.575494][ T288] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 983.599651][ T288] usb 1-1: USB disconnect, device number 21 [ 983.671600][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 983.678082][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.710836][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.731359][ T990] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 983.740889][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.755468][T19654] binder_alloc: 19653: binder_alloc_buf, no vma [ 983.757950][ T990] usb 4-1: config 0 descriptor?? [ 983.773897][ T990] hub 4-1:0.0: USB hub found [ 983.865177][T19659] loop4: detected capacity change from 0 to 1024 [ 983.886494][T19659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 983.975366][ T990] hub 4-1:0.0: 1 port detected [ 984.894318][T10768] EXT4-fs (loop4): unmounting filesystem. [ 984.967489][T19684] loop4: detected capacity change from 0 to 1024 [ 984.986703][T19684] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 984.999791][ T28] audit: type=1400 audit(2000000919.559:2438): avc: denied { setattr } for pid=19683 comm="syz.4.5703" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 985.006861][T19688] loop7: detected capacity change from 0 to 256 [ 985.031845][T19684] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.5703: Allocating blocks 497-513 which overlap fs metadata [ 985.046626][ T990] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 985.047752][ T24] usb 4-1: USB disconnect, device number 18 [ 985.062006][T19688] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 985.074678][T10768] EXT4-fs (loop4): unmounting filesystem. [ 985.218070][T19697] binder_alloc: 19696: binder_alloc_buf, no vma [ 985.239522][ T28] audit: type=1400 audit(2000000919.799:2439): avc: denied { write } for pid=19698 comm="syz.7.5708" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 985.471842][ T28] audit: type=1400 audit(2000000920.019:2440): avc: denied { create } for pid=19698 comm="syz.7.5708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 985.492874][ T28] audit: type=1400 audit(2000000920.019:2441): avc: denied { setattr } for pid=19698 comm="syz.7.5708" name="" dev="pipefs" ino=175735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 985.981660][ T656] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 986.151128][ T19] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 986.163044][ T19] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 986.173667][ T19] asix: probe of 3-1:0.188 failed with error -71 [ 986.182370][ T19] usb 3-1: USB disconnect, device number 26 [ 986.255180][ T656] usb 4-1: Using ep0 maxpacket: 16 [ 986.264318][ T656] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 986.279612][ T656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.288510][ T656] usb 4-1: Product: syz [ 986.292732][ T656] usb 4-1: Manufacturer: syz [ 986.297434][ T656] usb 4-1: SerialNumber: syz [ 986.421948][T19724] loop2: detected capacity change from 0 to 2048 [ 986.449602][T19724] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 986.540461][T19727] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.548103][T19727] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.556912][T19724] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5716: bg 0: block 234: padding at end of block bitmap is not set [ 986.558184][T19727] device bridge_slave_0 entered promiscuous mode [ 986.571859][T19724] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 986.578626][T19727] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.597437][T19727] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.603780][T19724] EXT4-fs (loop2): This should not happen!! Data will be lost [ 986.603780][T19724] [ 986.606859][T19727] device bridge_slave_1 entered promiscuous mode [ 986.619198][T19724] EXT4-fs (loop2): Total free blocks count 0 [ 986.628561][T19724] EXT4-fs (loop2): Free/Dirty block details [ 986.634955][T19724] EXT4-fs (loop2): free_blocks=0 [ 986.640668][T19724] EXT4-fs (loop2): dirty_blocks=3088 [ 986.647159][T19724] EXT4-fs (loop2): Block reservation details [ 986.654251][T19724] EXT4-fs (loop2): i_reserved_data_blocks=193 [ 986.673871][T19735] loop7: detected capacity change from 0 to 1024 [ 986.681420][T19731] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1024 with error 28 [ 986.716167][ T656] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 986.734986][ T656] usb 4-1: USB disconnect, device number 19 [ 986.744360][T19735] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 986.778388][T19727] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.785451][T19727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.792973][T19727] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.799984][T19727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.834415][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 986.842141][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.849524][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.859075][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 986.867710][T12009] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.874759][T12009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.885500][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 986.893814][T12009] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.900848][T12009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.912966][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 986.921887][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 986.937607][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 986.948709][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 986.956997][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 986.964668][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 986.973149][T19727] device veth0_vlan entered promiscuous mode [ 986.985582][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 986.994809][T19727] device veth1_macvtap entered promiscuous mode [ 987.004747][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 987.014948][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 987.051999][ T19] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 987.091729][ T491] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 987.231220][T19749] loop3: detected capacity change from 0 to 1024 [ 987.243133][T19749] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 987.255392][ T19] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.265696][ T19] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 987.272806][ T491] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.274821][ T19] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 987.285291][ T491] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 987.297804][ T19] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40 [ 987.307633][ T491] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 987.314201][ T19] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.323358][ T491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.330996][ T288] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 987.338853][ T491] usb 3-1: Product: syz [ 987.346835][ T19] usb 8-1: Product: syz [ 987.350640][ T491] usb 3-1: Manufacturer: syz [ 987.355034][ T19] usb 8-1: Manufacturer: syz [ 987.359366][ T491] usb 3-1: SerialNumber: syz [ 987.364567][ T19] usb 8-1: SerialNumber: syz [ 987.521799][ T3921] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 987.552830][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.563928][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.574068][ T288] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 987.576939][ T491] usb 3-1: 0:2 : does not exist [ 987.594369][T19735] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.5718: inode #1073741824: comm syz.7.5718: iget: illegal inode # [ 987.596111][ T491] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 987.608602][ T288] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 987.625187][ T288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.625390][T19735] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.5718: error while reading EA inode 1073741824 err=-117 [ 987.634901][ T288] usb 5-1: config 0 descriptor?? [ 987.667369][ T491] usb 3-1: USB disconnect, device number 27 [ 987.721733][ T656] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 987.730724][ T3921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.741284][ T3921] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 987.750568][ T3921] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 987.766286][ T3921] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40 [ 987.775752][ T3921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.784043][ T3921] usb 4-1: Product: syz [ 987.788332][ T3921] usb 4-1: Manufacturer: syz [ 987.801765][ T3921] usb 4-1: SerialNumber: syz [ 987.862592][ T5064] device bridge_slave_1 left promiscuous mode [ 987.868790][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.876750][ T5064] device bridge_slave_0 left promiscuous mode [ 987.883008][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.891511][ T5064] device veth1_macvtap left promiscuous mode [ 987.897660][ T5064] device veth0_vlan left promiscuous mode [ 987.903552][ T656] usb 1-1: Using ep0 maxpacket: 32 [ 987.909756][ T656] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 987.918600][ T656] usb 1-1: config 0 has no interface number 0 [ 987.928679][ T19] usb 8-1: 1:1 : no or invalid class specific endpoint descriptor [ 987.929942][ T656] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 987.947887][ T19] usb 8-1: 1:1 : unsupported sample bitwidth 3 in 138 bytes [ 987.948202][ T656] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 987.955657][ T19] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 987.976821][ T19] usb 8-1: unit 6 not found! [ 987.982093][ T656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.988551][ T19] usb 8-1: USB disconnect, device number 6 [ 987.991610][ T656] usb 1-1: Product: syz [ 988.000209][ T656] usb 1-1: Manufacturer: syz [ 988.007634][ T656] usb 1-1: SerialNumber: syz [ 988.019705][T19749] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.5720: inode #1073741824: comm syz.3.5720: iget: illegal inode # [ 988.034890][ T656] usb 1-1: config 0 descriptor?? [ 988.034966][T19749] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.5720: error while reading EA inode 1073741824 err=-117 [ 988.040664][T19753] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 988.055478][ T288] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 988.075642][ T288] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 988.202082][ T2464] udevd[2464]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 988.266877][ T491] usb 5-1: USB disconnect, device number 25 [ 988.279699][T19753] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 988.289660][T19759] overlayfs: failed to resolve './file0': -2 [ 988.408661][ T28] audit: type=1400 audit(2000000922.969:2442): avc: denied { connect } for pid=19748 comm="syz.3.5720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 988.408915][T19749] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.5720: corrupted xattr block 113 [ 988.453587][T19749] device veth0 entered promiscuous mode [ 988.460426][T19749] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.5720: corrupted xattr block 113 [ 988.472961][T19749] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3852: comm syz.3.5720: Allocating blocks 497-513 which overlap fs metadata [ 988.489787][T19748] device veth0 left promiscuous mode [ 988.498758][ T3921] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 988.506913][ T3921] usb 4-1: 1:1 : unsupported sample bitwidth 3 in 138 bytes [ 988.514349][ T3921] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 988.524550][ T3921] usb 4-1: unit 6 not found! [ 988.532620][ T3921] usb 4-1: USB disconnect, device number 20 [ 988.638833][T18817] EXT4-fs (loop7): unmounting filesystem. [ 988.752889][ T3855] udevd[3855]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 989.042344][T11716] EXT4-fs (loop3): unmounting filesystem. [ 989.203889][T19787] loop3: detected capacity change from 0 to 512 [ 989.220712][T19787] EXT4-fs: Ignoring removed bh option [ 989.264160][T19787] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 989.273755][T19787] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 989.307876][T11716] EXT4-fs (loop3): unmounting filesystem. [ 989.468996][T19799] loop2: detected capacity change from 0 to 1024 [ 989.499898][T19799] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 990.015632][ T656] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 990.063332][ T656] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 990.120629][ T656] asix: probe of 1-1:0.188 failed with error -71 [ 990.281965][ T656] usb 1-1: USB disconnect, device number 22 [ 990.619730][T11426] EXT4-fs (loop2): unmounting filesystem. [ 990.767529][T19815] overlayfs: failed to resolve './file0': -2 [ 990.801617][ T3921] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 991.003607][ T3921] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.039884][ T3921] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 991.126710][ T3921] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 991.148940][ T3921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.158747][ T3921] usb 8-1: Product: syz [ 991.164680][ T3921] usb 8-1: Manufacturer: syz [ 991.189977][ T3921] usb 8-1: SerialNumber: syz [ 991.424989][ T3921] usb 8-1: 0:2 : does not exist [ 991.448422][ T3921] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 991.633372][ T3921] usb 8-1: USB disconnect, device number 7 [ 991.676380][T19836] loop4: detected capacity change from 0 to 1024 [ 991.697411][T19836] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 991.717771][T19841] loop0: detected capacity change from 0 to 1024 [ 991.772415][T19841] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 991.806830][T11875] EXT4-fs (loop0): unmounting filesystem. [ 992.351670][ T28] audit: type=1400 audit(2000000926.889:2443): avc: denied { create } for pid=19855 comm="syz.7.5750" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 992.865103][T19727] EXT4-fs (loop4): unmounting filesystem. [ 992.873562][ T28] audit: type=1400 audit(2000000926.899:2444): avc: denied { mounton } for pid=19855 comm="syz.7.5750" path="/76/file0" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 992.905241][T19861] loop0: detected capacity change from 0 to 1024 [ 992.931234][T19868] loop4: detected capacity change from 0 to 1024 [ 992.952559][T19870] loop2: detected capacity change from 0 to 1024 [ 992.960363][T19861] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 992.973896][T19868] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 993.020116][T19870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 994.962255][T19727] EXT4-fs (loop4): unmounting filesystem. [ 994.996658][T11426] EXT4-fs (loop2): unmounting filesystem. [ 995.009284][T19895] loop7: detected capacity change from 0 to 16 [ 995.025752][T19895] erofs: (device loop7): mounted with root inode @ nid 36. [ 995.061634][ T19] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 995.141622][ T990] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 995.241603][ T491] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 995.252594][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.262772][ T19] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 995.271945][ T19] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 995.292778][ T19] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40 [ 995.301958][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.310067][ T19] usb 1-1: Product: syz [ 995.314504][ T19] usb 1-1: Manufacturer: syz [ 995.319128][ T19] usb 1-1: SerialNumber: syz [ 995.324948][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.336250][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.346251][ T990] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 995.359850][ T990] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 995.369130][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.378302][ T990] usb 4-1: config 0 descriptor?? [ 995.412790][T19902] loop7: detected capacity change from 0 to 1024 [ 995.421596][ T491] usb 5-1: Using ep0 maxpacket: 16 [ 995.429831][ T491] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 995.435107][T19902] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 995.439189][ T491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.456026][ T491] usb 5-1: Product: syz [ 995.460231][ T491] usb 5-1: Manufacturer: syz [ 995.465028][ T491] usb 5-1: SerialNumber: syz [ 995.474359][T19902] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3852: comm syz.7.5766: Allocating blocks 257-513 which overlap fs metadata [ 995.496378][T18817] EXT4-fs (loop7): unmounting filesystem. [ 995.552178][T19861] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.5751: inode #1073741824: comm syz.0.5751: iget: illegal inode # [ 995.566299][T19861] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.5751: error while reading EA inode 1073741824 err=-117 [ 995.612649][T19908] __nla_validate_parse: 10 callbacks suppressed [ 995.612665][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5768'. [ 995.631631][T19908] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 995.794722][ T990] usbhid 4-1:0.0: can't add hid device: -71 [ 995.800729][ T990] usbhid: probe of 4-1:0.0 failed with error -71 [ 995.808068][ T990] usb 4-1: USB disconnect, device number 21 [ 995.831614][T19861] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.5751: corrupted xattr block 113 [ 995.845191][T19861] device veth0 entered promiscuous mode [ 995.852059][T19861] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.5751: corrupted xattr block 113 [ 995.865214][T19858] device veth0 left promiscuous mode [ 995.873293][ T19] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 995.877890][ T491] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 995.881718][ T19] usb 1-1: 1:1 : unsupported sample bitwidth 3 in 138 bytes [ 995.891777][ T491] usb 5-1: USB disconnect, device number 26 [ 995.908210][ T19] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 995.917801][T19911] loop2: detected capacity change from 0 to 256 [ 995.918615][ T19] usb 1-1: unit 6 not found! [ 995.935820][T19911] FAT-fs (loop2): Directory bread(block 64) failed [ 995.942801][T19911] FAT-fs (loop2): Directory bread(block 65) failed [ 995.949490][ T19] usb 1-1: USB disconnect, device number 23 [ 995.949529][T19911] FAT-fs (loop2): Directory bread(block 66) failed [ 995.962682][T19911] FAT-fs (loop2): Directory bread(block 67) failed [ 995.969211][T19911] FAT-fs (loop2): Directory bread(block 68) failed [ 995.975880][T19911] FAT-fs (loop2): Directory bread(block 69) failed [ 995.982704][T19911] FAT-fs (loop2): Directory bread(block 70) failed [ 995.989244][T19911] FAT-fs (loop2): Directory bread(block 71) failed [ 995.996467][T19911] FAT-fs (loop2): Directory bread(block 72) failed [ 996.003217][T19911] FAT-fs (loop2): Directory bread(block 73) failed [ 996.314130][T19917] loop3: detected capacity change from 0 to 512 [ 996.320725][T19917] EXT4-fs: Ignoring removed nobh option [ 996.326683][T19917] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 996.337436][T19917] EXT4-fs (loop3): 1 truncate cleaned up [ 996.343227][T19917] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 996.357247][ T28] audit: type=1400 audit(2000000930.919:2445): avc: denied { create } for pid=19916 comm="syz.3.5771" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 996.400824][T11716] EXT4-fs (loop3): unmounting filesystem. [ 996.473662][T19921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5773'. [ 996.482941][T19921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5773'. [ 996.491983][T19921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5773'. [ 996.501005][T19921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5773'. [ 996.510121][T19921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5773'. [ 996.519197][T19921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5773'. [ 996.521094][T11875] EXT4-fs (loop0): unmounting filesystem. [ 996.528201][T19921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5773'. [ 996.528273][T19921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5773'. [ 996.552095][T19921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5773'. [ 996.609675][T19931] loop4: detected capacity change from 0 to 16 [ 996.616827][T19931] erofs: (device loop4): mounted with root inode @ nid 36. [ 996.681605][ T19] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 996.831615][ T491] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 996.861690][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 996.868204][ T19] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 996.891491][ T19] usb 4-1: config 0 has no interface number 0 [ 996.900659][ T19] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 996.913569][ T19] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 996.923011][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.931157][ T19] usb 4-1: Product: syz [ 996.936494][ T19] usb 4-1: Manufacturer: syz [ 996.941246][ T19] usb 4-1: SerialNumber: syz [ 996.950348][ T19] usb 4-1: config 0 descriptor?? [ 996.955865][T19922] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 997.031613][ T491] usb 8-1: Using ep0 maxpacket: 32 [ 997.052283][ T491] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.071698][ T491] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.092320][ T491] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 997.101467][ T491] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.114317][ T491] usb 8-1: config 0 descriptor?? [ 997.121237][ T491] hub 8-1:0.0: USB hub found [ 997.167252][T19922] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 997.325045][ T491] hub 8-1:0.0: 1 port detected [ 997.361615][ T990] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 997.391669][ T3921] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 997.593396][ T3921] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.606132][ T3921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 997.619520][ T3921] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 997.630212][ T3921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.640136][ T3921] usb 1-1: Product: syz [ 997.645370][ T3921] usb 1-1: Manufacturer: syz [ 997.650827][ T3921] usb 1-1: SerialNumber: syz [ 997.946728][ T3921] usb 1-1: 0:2 : does not exist [ 997.960217][ T3921] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 998.066793][ T3921] usb 1-1: USB disconnect, device number 24 [ 998.097115][ T491] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 998.215273][ T4020] usb 8-1: USB disconnect, device number 8 [ 998.221420][ T656] usb 8-1: Failed to suspend device, error -19 [ 998.231653][ T990] usb 3-1: Using ep0 maxpacket: 16 [ 998.240346][ T990] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 998.249607][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.258204][ T990] usb 3-1: Product: syz [ 998.262498][ T990] usb 3-1: Manufacturer: syz [ 998.267124][ T990] usb 3-1: SerialNumber: syz [ 998.365235][ T19] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 998.375498][ T19] asix: probe of 4-1:0.188 failed with error -32 [ 998.533705][T19952] loop0: detected capacity change from 0 to 16 [ 998.540784][T19952] erofs: (device loop0): mounted with root inode @ nid 36. [ 998.673638][T19954] loop7: detected capacity change from 0 to 512 [ 998.680595][T19954] EXT4-fs: Ignoring removed bh option [ 998.687873][ T990] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 998.705772][ T990] usb 3-1: USB disconnect, device number 28 [ 998.714376][T19954] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 998.723423][T19954] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 998.754100][T18817] EXT4-fs (loop7): unmounting filesystem. [ 999.213059][T19982] device syzkaller0 entered promiscuous mode [ 999.239410][T19983] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 999.309534][T19988] loop4: detected capacity change from 0 to 512 [ 999.316128][T19988] EXT4-fs: Ignoring removed bh option [ 999.343612][T19988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 999.343685][T19988] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 999.364439][T19727] EXT4-fs (loop4): unmounting filesystem. [ 999.452381][ T990] usb 4-1: USB disconnect, device number 22 [ 1000.005314][T20002] loop7: detected capacity change from 0 to 16 [ 1000.017569][T20003] loop4: detected capacity change from 0 to 16 [ 1000.338745][ T4020] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1000.347912][T20003] erofs: (device loop4): mounted with root inode @ nid 36. [ 1000.357635][T20002] erofs: (device loop7): mounted with root inode @ nid 36. [ 1000.694029][T20003] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 1000.705397][T20003] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 1000.791628][T20000] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 1000.802708][T20000] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1001.330855][ T19] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1001.381653][ T4020] usb 1-1: Using ep0 maxpacket: 32 [ 1001.388573][ T4020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.402472][ T4020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.418142][ T4020] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1001.427278][ T4020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.502138][ T4020] usb 1-1: config 0 descriptor?? [ 1001.507373][T20017] loop4: detected capacity change from 0 to 1024 [ 1001.514534][ T4020] hub 1-1:0.0: USB hub found [ 1001.548638][T20017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1001.561657][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 1001.567931][ T19] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1001.737725][ T4020] hub 1-1:0.0: 1 port detected [ 1002.340823][ T19] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.351028][ T19] usb 3-1: config 0 has no interface number 0 [ 1002.357215][ T19] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1002.370281][ T19] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1002.379501][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.388588][ T19] usb 3-1: config 0 descriptor?? [ 1002.395493][ T19] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 1002.409068][ T656] usb 3-1: USB disconnect, device number 29 [ 1002.430465][ T4020] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 1002.434731][T20031] loop2: detected capacity change from 0 to 16 [ 1002.446147][T19727] EXT4-fs (loop4): unmounting filesystem. [ 1002.454607][T20031] erofs: (device loop2): mounted with root inode @ nid 36. [ 1002.463510][ T4020] usb 1-1: USB disconnect, device number 25 [ 1002.601768][T20036] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1002.808333][T20050] loop4: detected capacity change from 0 to 1024 [ 1002.841287][T20050] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1002.970764][T20067] loop0: detected capacity change from 0 to 512 [ 1002.987151][T20067] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.5820: inode has both inline data and extents flags [ 1003.003144][T20067] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.5820: couldn't read orphan inode 15 (err -117) [ 1003.021434][T20067] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1003.119015][T11875] EXT4-fs (loop0): unmounting filesystem. [ 1003.133967][T20078] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1003.151662][ T19] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1003.337706][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.347946][ T19] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1003.348177][T20094] loop3: detected capacity change from 0 to 512 [ 1003.357214][ T19] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1003.365889][T20094] EXT4-fs: Ignoring removed nobh option [ 1003.382190][T20094] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1003.392368][ T19] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40 [ 1003.393827][T20094] EXT4-fs (loop3): 1 truncate cleaned up [ 1003.401412][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.401437][ T19] usb 5-1: Product: syz [ 1003.407438][T20094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1003.415657][ T19] usb 5-1: Manufacturer: syz [ 1003.439126][ T19] usb 5-1: SerialNumber: syz [ 1003.452551][T11716] EXT4-fs (loop3): unmounting filesystem. [ 1003.468063][T20097] loop3: detected capacity change from 0 to 512 [ 1003.474859][T20097] EXT4-fs: Ignoring removed nobh option [ 1003.480968][T20097] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1003.492487][T20097] EXT4-fs (loop3): 1 truncate cleaned up [ 1003.498231][T20097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1003.518747][T11716] EXT4-fs (loop3): unmounting filesystem. [ 1003.524618][ T4020] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1003.655269][T20050] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.5812: inode #1073741824: comm syz.4.5812: iget: illegal inode # [ 1003.669753][T20050] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.5812: error while reading EA inode 1073741824 err=-117 [ 1003.721637][ T4020] usb 3-1: Using ep0 maxpacket: 16 [ 1003.728037][ T4020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.749849][ T4020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.769487][ T4020] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1003.796759][ T4020] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 1003.814688][ T4020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.827066][ T4020] usb 3-1: config 0 descriptor?? [ 1003.913578][T20111] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1003.981685][ T656] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1004.037937][T20050] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.5812: corrupted xattr block 113 [ 1004.052160][T20050] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.5812: corrupted xattr block 113 [ 1004.070155][ T19] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 1004.078223][ T19] usb 5-1: 1:1 : unsupported sample bitwidth 3 in 138 bytes [ 1004.085593][ T19] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1004.108096][ T19] usb 5-1: unit 6 not found! [ 1004.138200][ T19] usb 5-1: USB disconnect, device number 27 [ 1004.201615][ T656] usb 1-1: Using ep0 maxpacket: 8 [ 1004.208228][ T656] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1004.216897][ T656] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.227239][ T656] usb 1-1: config 0 has no interfaces? [ 1004.234372][ T656] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1004.244967][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.252137][ T656] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1004.260388][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.267559][ T656] usb 1-1: Product: syz [ 1004.271986][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.279021][ T656] usb 1-1: Manufacturer: syz [ 1004.283935][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.290938][ T656] usb 1-1: SerialNumber: syz [ 1004.296219][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.303584][ T656] usb 1-1: config 0 descriptor?? [ 1004.309017][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.317252][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.324545][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.331794][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.338908][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.346194][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.353425][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.360468][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.367747][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.374934][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.382276][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.389409][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.396684][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.411244][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.424903][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.439570][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.455332][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.469997][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.480255][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.487504][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.494507][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.501488][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.508500][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.515516][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.522561][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.529539][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.536562][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.544122][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.551113][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.558221][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.565191][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.572192][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.579151][ T4020] a4tech 0003:09DA:000A.000A: unknown main item tag 0x0 [ 1004.587027][ T656] usb 1-1: USB disconnect, device number 26 [ 1004.593285][ T4020] a4tech 0003:09DA:000A.000A: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.2-1/input0 [ 1004.616908][ T4020] usb 3-1: USB disconnect, device number 30 [ 1004.628625][T20123] fido_id[20123]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1004.727289][T19727] EXT4-fs (loop4): unmounting filesystem. [ 1004.824964][T20131] __nla_validate_parse: 11 callbacks suppressed [ 1004.824990][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1004.865708][T20129] loop4: detected capacity change from 0 to 40427 [ 1004.871909][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1004.872200][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1004.872258][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1004.882180][T20129] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1004.905733][T20129] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1004.914113][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1004.924112][T20129] F2FS-fs (loop4): invalid crc value [ 1004.929772][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1004.939227][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1004.948387][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1004.958546][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1004.968046][T20129] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1005.009676][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1005.051985][T20129] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1005.063667][T20129] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1005.162426][T19727] syz-executor: attempt to access beyond end of device [ 1005.162426][T19727] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1005.196589][T20145] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1005.307237][T20150] loop7: detected capacity change from 0 to 1024 [ 1005.351601][ T656] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1005.362785][T20150] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1005.499291][T18817] EXT4-fs (loop7): unmounting filesystem. [ 1005.554720][ T656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.577630][T20164] loop7: detected capacity change from 0 to 1024 [ 1005.581236][ T656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.600997][T20164] EXT4-fs: Ignoring removed orlov option [ 1005.620055][T20164] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1005.631848][ T656] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1005.661620][ T656] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1005.667402][T20164] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1005.679893][ T656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.706147][T18817] EXT4-fs (loop7): unmounting filesystem. [ 1005.712997][ T656] usb 3-1: config 0 descriptor?? [ 1005.742390][T20168] loop7: detected capacity change from 0 to 16 [ 1005.761711][T20168] erofs: (device loop7): mounted with root inode @ nid 36. [ 1005.776279][ T28] audit: type=1400 audit(2000000940.339:2446): avc: denied { map } for pid=20167 comm="syz.7.5857" path="/109/file2/file1" dev="loop7" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1006.177919][ T656] usbhid 3-1:0.0: can't add hid device: -71 [ 1006.184103][ T656] usbhid: probe of 3-1:0.0 failed with error -71 [ 1006.192362][ T656] usb 3-1: USB disconnect, device number 31 [ 1006.441104][T20185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1007.070794][T20194] loop2: detected capacity change from 0 to 1024 [ 1007.113449][T20197] loop4: detected capacity change from 0 to 1024 [ 1007.130770][T20194] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1007.151526][T20197] EXT4-fs: Ignoring removed orlov option [ 1007.171480][T20197] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1007.209546][T20210] loop3: detected capacity change from 0 to 512 [ 1007.213540][T20197] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1007.216189][T20210] EXT4-fs: Ignoring removed nobh option [ 1007.254852][T20210] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1007.273095][T19727] EXT4-fs (loop4): unmounting filesystem. [ 1007.280473][T20210] EXT4-fs (loop3): 1 truncate cleaned up [ 1007.286396][T20210] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1007.316384][T11716] EXT4-fs (loop3): unmounting filesystem. [ 1007.341620][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1007.562377][T20221] loop0: detected capacity change from 0 to 16 [ 1008.203252][T20221] erofs: (device loop0): mounted with root inode @ nid 36. [ 1008.237018][T20221] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 1008.248265][T20221] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 1009.191642][ T288] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1009.342672][ T28] audit: type=1400 audit(2000000943.899:2447): avc: denied { mounton } for pid=20228 comm="syz.4.5877" path="/32/file0" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1009.422842][ T288] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.438479][ T288] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1009.447882][ T288] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1009.470088][ T288] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40 [ 1009.479254][ T288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.487802][ T288] usb 3-1: Product: syz [ 1009.492168][ T288] usb 3-1: Manufacturer: syz [ 1009.496772][ T288] usb 3-1: SerialNumber: syz [ 1009.531640][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1009.538307][ T24] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1009.547081][ T24] usb 8-1: config 0 has no interface number 0 [ 1009.554908][ T24] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1009.564152][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.572332][ T24] usb 8-1: Product: syz [ 1009.576535][ T24] usb 8-1: Manufacturer: syz [ 1009.581134][ T24] usb 8-1: SerialNumber: syz [ 1009.586429][ T24] usb 8-1: config 0 descriptor?? [ 1009.592368][ T24] smsc95xx v2.0.0 [ 1009.710429][T20194] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.5866: inode #1073741824: comm syz.2.5866: iget: illegal inode # [ 1009.724513][T20194] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.5866: error while reading EA inode 1073741824 err=-117 [ 1009.831645][ T19] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1009.844048][T20237] __nla_validate_parse: 11 callbacks suppressed [ 1009.844064][T20237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5880'. [ 1009.976522][T20194] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.5866: corrupted xattr block 113 [ 1009.989961][T20194] device veth0 entered promiscuous mode [ 1009.993892][ T24] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1009.996883][T20194] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.5866: corrupted xattr block 113 [ 1010.006534][ T24] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1010.018970][T20194] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3852: comm syz.2.5866: Allocating blocks 497-513 which overlap fs metadata [ 1010.041218][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 1010.057292][T20191] device veth0 left promiscuous mode [ 1010.066228][ T19] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1010.075475][ T288] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 1010.083440][ T288] usb 3-1: 1:1 : unsupported sample bitwidth 3 in 138 bytes [ 1010.090734][ T288] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1010.100158][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.108309][ T19] usb 4-1: Product: syz [ 1010.112499][ T19] usb 4-1: Manufacturer: syz [ 1010.117178][ T19] usb 4-1: SerialNumber: syz [ 1010.122671][ T288] usb 3-1: unit 6 not found! [ 1010.130344][ T288] usb 3-1: USB disconnect, device number 32 [ 1010.185922][T20249] loop4: detected capacity change from 0 to 1024 [ 1010.203313][T20249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1010.215528][T20249] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.5885: Allocating blocks 257-513 which overlap fs metadata [ 1010.235691][T19727] EXT4-fs (loop4): unmounting filesystem. [ 1010.252233][ T3921] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1010.260218][T20254] loop4: detected capacity change from 0 to 1024 [ 1010.272951][T20254] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1010.359963][ T2465] udevd[2465]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1010.443359][ T3921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.454838][ T3921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.477642][ T3921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1010.524849][ T3921] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1010.535737][ T3921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.572780][ T3921] usb 1-1: config 0 descriptor?? [ 1010.832730][ T24] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1010.862084][T11426] EXT4-fs (loop2): unmounting filesystem. [ 1010.879007][ T24] smsc95xx: probe of 8-1:0.67 failed with error -32 [ 1010.990372][ T3921] usbhid 1-1:0.0: can't add hid device: -71 [ 1011.009538][ T3921] usbhid: probe of 1-1:0.0 failed with error -71 [ 1011.032177][ T3921] usb 1-1: USB disconnect, device number 27 [ 1011.218556][ T19] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 1011.226101][T19727] EXT4-fs (loop4): unmounting filesystem. [ 1011.246850][ T19] usb 4-1: USB disconnect, device number 23 [ 1011.425774][T20273] loop2: detected capacity change from 0 to 1024 [ 1011.432985][T20273] EXT4-fs: Ignoring removed orlov option [ 1011.439139][T20273] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1011.453419][T20273] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1011.477988][T20273] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3852: comm syz.2.5891: Allocating blocks 497-513 which overlap fs metadata [ 1011.492106][T20273] EXT4-fs (loop2): Remounting filesystem read-only [ 1011.498826][T20273] EXT4-fs (loop2): pa ffff8881175401f8: logic 131104, phys. 177, len 21 [ 1011.507217][T20273] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 1011.517475][T20273] EXT4-fs (loop2): Remounting filesystem read-only [ 1011.524692][ T28] audit: type=1400 audit(2000000946.089:2448): avc: denied { ioctl } for pid=20272 comm="syz.2.5891" path="/584/file1/file1" dev="loop2" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1011.551644][ T491] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1011.558452][T11426] EXT4-fs (loop2): unmounting filesystem. [ 1011.735284][T20287] loop3: detected capacity change from 0 to 1024 [ 1011.763755][T20287] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1011.791717][ T491] usb 5-1: Using ep0 maxpacket: 16 [ 1011.944610][ T491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.004659][T20287] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3852: comm syz.3.5896: Allocating blocks 257-513 which overlap fs metadata [ 1012.122789][ T491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.161038][ T491] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1012.200738][ T491] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 1012.235630][T11716] EXT4-fs (loop3): unmounting filesystem. [ 1012.244506][ T491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.281143][ T491] usb 5-1: config 0 descriptor?? [ 1012.288508][ T24] usb 8-1: USB disconnect, device number 9 [ 1012.611642][ T19] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1012.749125][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.762762][T20305] loop3: detected capacity change from 0 to 40427 [ 1012.766316][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.772687][T20305] F2FS-fs (loop3): fault_injection options not supported [ 1012.776385][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.783455][T20305] F2FS-fs (loop3): fault_type options not supported [ 1012.790656][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.797763][T20305] F2FS-fs (loop3): invalid crc value [ 1012.804232][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.809769][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.816507][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.827209][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1012.834076][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1012.843741][T20305] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1012.850586][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.857746][ T19] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1012.863895][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.879894][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.882899][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.887292][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.902228][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.907159][ T19] usb 1-1: Product: syz [ 1012.913596][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.915258][ T19] usb 1-1: Manufacturer: syz [ 1012.920717][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.926492][ T19] usb 1-1: SerialNumber: syz [ 1012.932965][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.937949][T20305] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1012.944505][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.959136][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.966366][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.973578][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.980626][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.987866][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1012.994985][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.002319][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.009273][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.016593][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.024041][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.031114][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.038313][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.045552][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.058691][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.066029][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.073117][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1013.078530][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.081629][ T288] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1013.085902][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.100181][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.107467][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.118575][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.126468][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.136492][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.143798][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.150766][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.153735][ T19] usb 1-1: 0:2 : does not exist [ 1013.157943][ T24] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1013.172323][ T491] a4tech 0003:09DA:000A.000B: unknown main item tag 0x0 [ 1013.173585][ T19] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1013.179802][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.194934][ T491] a4tech 0003:09DA:000A.000B: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.4-1/input0 [ 1013.205512][ T19] usb 1-1: USB disconnect, device number 28 [ 1013.213018][T11716] syz-executor: attempt to access beyond end of device [ 1013.213018][T11716] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1013.213916][ T24] usb 8-1: config 0 descriptor?? [ 1013.240282][ T491] usb 5-1: USB disconnect, device number 28 [ 1013.280576][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.287717][T20312] fido_id[20312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1013.306373][ T24] hub 8-1:0.0: USB hub found [ 1013.311112][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.321299][ T288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1013.334494][ T288] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1013.343651][ T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.355618][ T288] usb 3-1: config 0 descriptor?? [ 1013.400021][T20314] loop3: detected capacity change from 0 to 1024 [ 1013.413090][T20314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1013.432381][T11716] EXT4-fs (loop3): unmounting filesystem. [ 1013.452349][ T2466] udevd[2466]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1013.508650][ T24] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1013.612093][T20320] loop3: detected capacity change from 0 to 40427 [ 1013.623203][T20320] F2FS-fs (loop3): fault_injection options not supported [ 1013.630355][T20320] F2FS-fs (loop3): fault_type options not supported [ 1013.650450][T20320] F2FS-fs (loop3): invalid crc value [ 1013.663515][T20320] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1013.701679][T20320] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1013.721838][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 1013.733100][ T24] usbhid: probe of 8-1:0.0 failed with error -71 [ 1013.734759][T20329] loop0: detected capacity change from 0 to 512 [ 1013.762295][T20329] EXT4-fs: Ignoring removed nobh option [ 1013.769894][ T288] usbhid 3-1:0.0: can't add hid device: -71 [ 1013.779609][ T288] usbhid: probe of 3-1:0.0 failed with error -71 [ 1013.785132][ T24] usb 8-1: USB disconnect, device number 10 [ 1013.788280][ T288] usb 3-1: USB disconnect, device number 33 [ 1013.798322][T20329] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1013.820472][T20329] EXT4-fs (loop0): 1 truncate cleaned up [ 1013.829494][T20329] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1013.868429][T11875] EXT4-fs (loop0): unmounting filesystem. [ 1013.905377][T20333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5910'. [ 1013.969954][T11716] syz-executor: attempt to access beyond end of device [ 1013.969954][T11716] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1014.083036][T20348] loop3: detected capacity change from 0 to 1024 [ 1014.089922][T20348] EXT4-fs: Ignoring removed orlov option [ 1014.096396][T20348] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1014.123067][T20348] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1014.146079][T20348] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3852: comm syz.3.5914: Allocating blocks 497-513 which overlap fs metadata [ 1014.161354][T20348] EXT4-fs (loop3): Remounting filesystem read-only [ 1014.168701][T20348] EXT4-fs (loop3): pa ffff888138a40000: logic 131104, phys. 177, len 21 [ 1014.177133][T20348] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 1014.190090][T20348] EXT4-fs (loop3): Remounting filesystem read-only [ 1015.185639][T20364] loop4: detected capacity change from 0 to 512 [ 1015.192442][T20364] EXT4-fs: Ignoring removed nobh option [ 1015.206666][T11716] EXT4-fs (loop3): unmounting filesystem. [ 1015.208496][T20364] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1015.237962][T20364] EXT4-fs (loop4): 1 truncate cleaned up [ 1015.253580][T20364] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1015.273267][T20367] loop3: detected capacity change from 0 to 512 [ 1015.299600][T20367] EXT4-fs: Ignoring removed nobh option [ 1015.307357][T20367] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1015.328219][T19727] EXT4-fs (loop4): unmounting filesystem. [ 1015.340165][T20367] EXT4-fs (loop3): 1 truncate cleaned up [ 1015.347149][T20367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1015.361168][T20373] loop4: detected capacity change from 0 to 128 [ 1015.375724][T11716] EXT4-fs (loop3): unmounting filesystem. [ 1015.385101][T20373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1015.408843][T20373] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1015.456218][ T28] audit: type=1400 audit(2000000950.019:2449): avc: denied { append } for pid=20372 comm="syz.4.5922" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1015.462836][T20371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.481208][ T28] audit: type=1400 audit(2000000950.049:2450): avc: denied { map } for pid=20372 comm="syz.4.5922" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1015.487518][T20371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.515578][T20383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1015.519929][T20371] device bridge_slave_0 entered promiscuous mode [ 1015.540967][T20383] ================================================================== [ 1015.545139][T20371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.549060][T20383] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0 [ 1015.556204][T20371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.563985][T20383] Read of size 18446744073709551588 at addr ffff88811e668040 by task syz.3.5925/20383 [ 1015.564015][T20383] [ 1015.564023][T20383] CPU: 0 PID: 20383 Comm: syz.3.5925 Tainted: G W syzkaller #0 [ 1015.571639][T20371] device bridge_slave_1 entered promiscuous mode [ 1015.580647][T20383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1015.580664][T20383] Call Trace: [ 1015.580670][T20383] [ 1015.580677][T20383] __dump_stack+0x21/0x24 [ 1015.583161][ T491] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1015.591990][T20383] dump_stack_lvl+0x110/0x170 [ 1015.592031][T20383] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1015.636349][T20383] ? kasan_save_alloc_info+0x25/0x30 [ 1015.641671][T20383] ? ext4_xattr_block_set+0x9d5/0x3260 [ 1015.647194][T20383] ? ext4_xattr_set+0x242/0x320 [ 1015.652095][T20383] ? ext4_xattr_trusted_set+0x3c/0x50 [ 1015.657494][T20383] ? ext4_xattr_set_entry+0x979/0x21d0 [ 1015.662915][T20371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.663063][T20383] print_address_description+0x71/0x200 [ 1015.670076][T20371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.675611][T20383] print_report+0x4a/0x60 [ 1015.675650][T20383] kasan_report+0x122/0x150 [ 1015.675670][T20383] ? ext4_xattr_set_entry+0x979/0x21d0 [ 1015.675694][T20383] ? ext4_xattr_set_entry+0x979/0x21d0 [ 1015.683035][T20371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.687190][T20383] kasan_check_range+0x249/0x2a0 [ 1015.691719][T20371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.697122][T20383] ? ext4_xattr_set_entry+0x979/0x21d0 [ 1015.722614][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1015.727253][T20383] memmove+0x2d/0x70 [ 1015.727285][T20383] ext4_xattr_set_entry+0x979/0x21d0 [ 1015.744013][T20383] ext4_xattr_block_set+0xad3/0x3260 [ 1015.749315][T20383] ? __kasan_check_write+0x14/0x20 [ 1015.754439][T20383] ? iput+0x620/0x670 [ 1015.758624][T20383] ? ext4_xattr_block_find+0x310/0x310 [ 1015.764185][T20383] ext4_xattr_set_handle+0x1338/0x1570 [ 1015.769754][T20383] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 1015.775931][T20383] ? __kasan_check_read+0x11/0x20 [ 1015.780954][T20383] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 1015.786758][T20383] ext4_xattr_set+0x242/0x320 [ 1015.791438][T20383] ? __kasan_kmalloc+0x95/0xb0 [ 1015.796276][T20383] ? __kmalloc_node+0xb2/0x1e0 [ 1015.801025][T20383] ? __cfi_ext4_xattr_set+0x10/0x10 [ 1015.806213][T20383] ? selinux_inode_setxattr+0x5cf/0xbf0 [ 1015.811743][T20383] ext4_xattr_trusted_set+0x3c/0x50 [ 1015.816927][T20383] ? __cfi_ext4_xattr_trusted_set+0x10/0x10 [ 1015.822807][T20383] __vfs_setxattr+0x3f2/0x440 [ 1015.827649][T20383] __vfs_setxattr_noperm+0x12a/0x5e0 [ 1015.832852][ T491] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.832949][T20383] __vfs_setxattr_locked+0x212/0x230 [ 1015.843098][ T491] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1015.848283][T20383] vfs_setxattr+0x167/0x2e0 [ 1015.848318][T20383] ? __cfi_vfs_setxattr+0x10/0x10 [ 1015.859954][ T491] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1015.861714][T20383] ? __kasan_check_write+0x14/0x20 [ 1015.861744][T20383] setxattr+0x346/0x360 [ 1015.861768][T20383] ? path_setxattr+0x290/0x290 [ 1015.867178][ T491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.875906][T20383] ? __mnt_want_write+0x1e6/0x260 [ 1015.875942][T20383] ? mnt_want_write+0x220/0x300 [ 1015.875958][T20383] path_setxattr+0x147/0x290 [ 1015.881393][ T491] usb 3-1: Product: syz [ 1015.885201][T20383] ? simple_xattr_list_add+0x120/0x120 [ 1015.885233][T20383] ? __kasan_check_write+0x14/0x20 [ 1015.885250][T20383] ? fpregs_restore_userregs+0x128/0x260 [ 1015.885268][T20383] __x64_sys_lsetxattr+0xc2/0xe0 [ 1015.885286][T20383] x64_sys_call+0x8b7/0x9a0 [ 1015.885306][T20383] do_syscall_64+0x4c/0xa0 [ 1015.885326][T20383] ? clear_bhb_loop+0x30/0x80 [ 1015.890535][ T491] usb 3-1: Manufacturer: syz [ 1015.898035][T20383] ? clear_bhb_loop+0x30/0x80 [ 1015.898070][T20383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1015.903354][ T491] usb 3-1: SerialNumber: syz [ 1015.907904][T20383] RIP: 0033:0x7f473699c799 [ 1015.907924][T20383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.916537][ T491] usb 3-1: config 0 descriptor?? [ 1015.916610][T20383] RSP: 002b:00007f4737931028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1016.008830][T20383] RAX: ffffffffffffffda RBX: 00007f4736c15fa0 RCX: 00007f473699c799 [ 1016.016784][T20383] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 1016.024756][T20383] RBP: 00007f4736a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1016.032739][T20383] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 1016.040791][T20383] R13: 00007f4736c16038 R14: 00007f4736c15fa0 R15: 00007ffc8b3bcbb8 [ 1016.048753][T20383] [ 1016.051757][T20383] [ 1016.054067][T20383] Allocated by task 20383: [ 1016.058469][T20383] kasan_set_track+0x4b/0x70 [ 1016.063059][T20383] kasan_save_alloc_info+0x25/0x30 [ 1016.068203][T20383] __kasan_kmalloc+0x95/0xb0 [ 1016.072884][T20383] __kmalloc_node_track_caller+0xb1/0x1e0 [ 1016.078600][T20383] kmemdup+0x2b/0x60 [ 1016.082652][T20383] ext4_xattr_block_set+0x9d5/0x3260 [ 1016.087955][T20383] ext4_xattr_set_handle+0x1338/0x1570 [ 1016.093414][T20383] ext4_xattr_set+0x242/0x320 [ 1016.098081][T20383] ext4_xattr_trusted_set+0x3c/0x50 [ 1016.103459][T20383] __vfs_setxattr+0x3f2/0x440 [ 1016.108142][T20383] __vfs_setxattr_noperm+0x12a/0x5e0 [ 1016.113422][T20383] __vfs_setxattr_locked+0x212/0x230 [ 1016.118699][T20383] vfs_setxattr+0x167/0x2e0 [ 1016.123216][T20383] setxattr+0x346/0x360 [ 1016.127381][T20383] path_setxattr+0x147/0x290 [ 1016.132077][T20383] __x64_sys_lsetxattr+0xc2/0xe0 [ 1016.137032][T20383] x64_sys_call+0x8b7/0x9a0 [ 1016.141563][T20383] do_syscall_64+0x4c/0xa0 [ 1016.146012][T20383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1016.152026][T20383] [ 1016.154361][T20383] Last potentially related work creation: [ 1016.160078][T20383] kasan_save_stack+0x3a/0x60 [ 1016.164786][T20383] __kasan_record_aux_stack+0xb6/0xc0 [ 1016.170197][T20383] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1016.176008][T20383] kvfree_call_rcu+0x8b/0x7c0 [ 1016.180759][T20383] drop_sysctl_table+0x2f5/0x430 [ 1016.185816][T20383] unregister_sysctl_table+0x75/0x120 [ 1016.191191][T20383] unregister_net_sysctl_table+0x15/0x20 [ 1016.196886][T20383] neigh_sysctl_unregister+0x78/0x90 [ 1016.202207][T20383] inetdev_event+0x862/0x10e0 [ 1016.206913][T20383] raw_notifier_call_chain+0xa1/0x110 [ 1016.212373][T20383] unregister_netdevice_many+0x102c/0x18e0 [ 1016.218305][T20383] default_device_exit_batch+0x9dc/0xa70 [ 1016.223931][T20383] cleanup_net+0x635/0xb10 [ 1016.228517][T20383] process_one_work+0x71f/0xc40 [ 1016.233366][T20383] worker_thread+0xa29/0x11e0 [ 1016.238029][T20383] kthread+0x281/0x320 [ 1016.242103][T20383] ret_from_fork+0x1f/0x30 [ 1016.246514][T20383] [ 1016.248851][T20383] Second to last potentially related work creation: [ 1016.255432][T20383] kasan_save_stack+0x3a/0x60 [ 1016.260206][T20383] __kasan_record_aux_stack+0xb6/0xc0 [ 1016.265608][T20383] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1016.271519][T20383] kvfree_call_rcu+0x8b/0x7c0 [ 1016.276224][T20383] drop_sysctl_table+0x2f5/0x430 [ 1016.281182][T20383] unregister_sysctl_table+0x75/0x120 [ 1016.286555][T20383] unregister_net_sysctl_table+0x15/0x20 [ 1016.292271][T20383] neigh_sysctl_unregister+0x78/0x90 [ 1016.297537][T20383] addrconf_ifdown+0x1690/0x1950 [ 1016.302541][T20383] addrconf_notify+0x39f/0xe40 [ 1016.307317][T20383] raw_notifier_call_chain+0xa1/0x110 [ 1016.312675][T20383] unregister_netdevice_many+0x102c/0x18e0 [ 1016.318462][T20383] ip6_tnl_exit_batch_net+0x3d8/0x430 [ 1016.323865][T20383] cleanup_net+0x635/0xb10 [ 1016.328257][T20383] process_one_work+0x71f/0xc40 [ 1016.333083][T20383] worker_thread+0xa29/0x11e0 [ 1016.337848][T20383] kthread+0x281/0x320 [ 1016.341999][T20383] ret_from_fork+0x1f/0x30 [ 1016.346419][T20383] [ 1016.348722][T20383] The buggy address belongs to the object at ffff88811e668000 [ 1016.348722][T20383] which belongs to the cache kmalloc-1k of size 1024 [ 1016.362756][T20383] The buggy address is located 64 bytes inside of [ 1016.362756][T20383] 1024-byte region [ffff88811e668000, ffff88811e668400) [ 1016.376022][T20383] [ 1016.378335][T20383] The buggy address belongs to the physical page: [ 1016.384726][T20383] page:ffffea0004799a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e668 [ 1016.394956][T20383] head:ffffea0004799a00 order:3 compound_mapcount:0 compound_pincount:0 [ 1016.403269][T20383] flags: 0x4000000000010200(slab|head|zone=1) [ 1016.409331][T20383] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 1016.417891][T20383] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1016.426447][T20383] page dumped because: kasan: bad access detected [ 1016.433108][T20383] page_owner tracks the page as allocated [ 1016.438799][T20383] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 154, tgid 154 (dhcpcd), ts 5496103797, free_ts 0 [ 1016.458584][T20383] post_alloc_hook+0x1f5/0x210 [ 1016.463355][T20383] prep_new_page+0x1c/0x110 [ 1016.468034][T20383] get_page_from_freelist+0x2d12/0x2d80 [ 1016.473580][T20383] __alloc_pages+0x1d9/0x480 [ 1016.478171][T20383] alloc_slab_page+0x6e/0xf0 [ 1016.482765][T20383] new_slab+0x98/0x3d0 [ 1016.486918][T20383] ___slab_alloc+0x6bd/0xb20 [ 1016.491497][T20383] __slab_alloc+0x5e/0xa0 [ 1016.495807][T20383] __kmem_cache_alloc_node+0x203/0x2c0 [ 1016.501259][T20383] __kmalloc+0xa1/0x1e0 [ 1016.505412][T20383] load_elf_binary+0x264/0x2800 [ 1016.510320][T20383] bprm_execve+0x79b/0x1450 [ 1016.514897][T20383] do_execveat_common+0x915/0xa70 [ 1016.519908][T20383] __x64_sys_execve+0x92/0xb0 [ 1016.524591][T20383] x64_sys_call+0x98/0x9a0 [ 1016.529067][T20383] do_syscall_64+0x4c/0xa0 [ 1016.533925][T20383] page_owner free stack trace missing [ 1016.539371][T20383] [ 1016.541751][T20383] Memory state around the buggy address: [ 1016.547488][T20383] ffff88811e667f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1016.555725][T20383] ffff88811e667f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1016.563861][T20383] >ffff88811e668000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1016.571906][T20383] ^ [ 1016.578060][T20383] ffff88811e668080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1016.586141][T20383] ffff88811e668100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1016.594183][T20383] ================================================================== [ 1016.603808][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.607867][ T28] audit: type=1400 audit(2000000951.169:2451): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1016.611957][T19727] EXT4-fs (loop4): unmounting filesystem. [ 1016.633791][ T28] audit: type=1400 audit(2000000951.169:2452): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1016.660013][T20383] Disabling lock debugging due to kernel taint [ 1016.660470][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.675414][ T28] audit: type=1400 audit(2000000951.169:2453): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1016.697113][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1016.703387][ T28] audit: type=1400 audit(2000000951.169:2454): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1016.707096][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1016.726527][ T28] audit: type=1400 audit(2000000951.169:2455): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1016.736206][T12009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.755371][ T28] audit: type=1400 audit(2000000951.169:2456): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1016.761746][T12009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.786241][T11716] EXT4-fs (loop3): unmounting filesystem. [ 1016.793092][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1016.798579][ T28] audit: type=1400 audit(2000000951.169:2457): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1016.807134][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1016.837745][T12009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.844839][T12009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.852928][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1016.863839][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1016.872386][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1016.880721][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1016.902704][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1016.911363][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1016.925027][T20371] device veth0_vlan entered promiscuous mode [ 1016.934793][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1016.943280][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1016.958860][T20371] device veth1_macvtap entered promiscuous mode [ 1016.966924][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1016.975078][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1016.982948][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1016.991215][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1017.000683][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1017.018275][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1017.026842][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1017.035539][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1017.044239][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1017.060160][ T28] audit: type=1400 audit(2000000951.619:2458): avc: denied { mount } for pid=20371 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1017.272272][ T5064] device bridge_slave_1 left promiscuous mode [ 1017.278445][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.286109][ T5064] device bridge_slave_0 left promiscuous mode [ 1017.292287][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.300153][ T5064] device veth1_macvtap left promiscuous mode [ 1017.306223][ T5064] device veth0_vlan left promiscuous mode [ 1018.265481][ T3921] usb 3-1: USB disconnect, device number 34