last executing test programs: 7.746950132s ago: executing program 4 (id=1761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) waitid(0x0, r2, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.198715327s ago: executing program 4 (id=1766): clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x0, 0x0, 0x0, 0x2c43, 0xa00, 0x2800000000000, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x80100000001, 0x8, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f0000001180)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x3}}, {@time_offset={'time_offset', 0x3d, 0x7}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x1, 0x152b, &(0x7f0000001240)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/62, 0x3e, 0xa) 6.126275624s ago: executing program 4 (id=1768): r0 = socket(0x10, 0x803, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) exit(0x100000000000034) tkill(r1, 0x12) wait4(r1, 0x0, 0x8, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000006000000090000008100000002400000", @ANYRES32, @ANYBLOB='y\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000c613182bf2f0107f00000000000800000000000000e25c327d9695c49bf439901bc319aa75c1b87a16a4e95c953670ef0d5eb3bd559cc316697dcd5ef9fbfac9572af2f1e1e0f9c1e757c5cb48bcc500"/100], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x17, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100003c273ae0de58c4050f75c276cb52a550fb26c4e50323f8a0624536e0374ca821be204b19cac80adc915b7d00379638d18422943d6783474e415fb85227813525e351ad33c78058b9c11f08de11a78b305a019f9513a94b46de638e8b97ad90d51e3b20447c59d8590111f1ccc8f22b38e253ec0d41778c66a51d58cc9296b078e590141160a30f2702b898ab074c3f283db88bbcb8b5857925f95491bf94cfa919faed44fe01e219f5974131dadda8dfe4a8e6f80aa2992c720dd4fa01514f4914304a5f9d8e1aff18822a4576739ea64667e63f46ca2ec9b4f55af9fe16b9", @ANYRES32=r2, @ANYRES16], &(0x7f0000000000)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000800)=[{&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000000380)=""/82, 0x52}, {&(0x7f0000000880)=""/191, 0xbf}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f00000006c0)=""/105, 0x69}], 0x7, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) 5.080417445s ago: executing program 4 (id=1770): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) mkdir(0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mknod$loop(0x0, 0x20, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) 4.472355879s ago: executing program 2 (id=1772): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}], 0x2) 4.406768967s ago: executing program 2 (id=1773): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711829000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x3) fchdir(r3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x81, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000100b7040000000000008500000033000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0x2c) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000580)={0x4, 0x5b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071180d000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 4.406054767s ago: executing program 2 (id=1774): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0xff, 0x0) getdents64(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000100)=0x5) r2 = getpid() madvise(&(0x7f0000154000/0x3000)=nil, 0x3000, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, 0x0, 0x303, 0x4, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0xfd}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x2, 0x0, 0x8}]}, 0x10) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r7, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000080)=0x3, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 3.254262568s ago: executing program 4 (id=1778): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$bind(0x0, 0x0, 0x0, 0x141091, 0x0) mkdirat(r0, &(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) rmdir(&(0x7f00000005c0)='./file0\x00') chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x0, 0x13f) lseek(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setreuid(0xee01, 0xffffffffffffffff) fchdir(r5) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000500)=""/26, 0x1a, 0x40000000007) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2044d0, &(0x7f0000000000)={[{@user_xattr}, {@jqfmt_vfsv1}]}, 0x0, 0x4ab, &(0x7f0000000080)="$eJzs3DtsHEUfAPD/nu34+/KyCeGREMAQEBEPO3ECSYHEQ0KiAIQERSgPx4lCLjGKjYQjixgUhQYJIiFaBKJBUFNQUSGgQqKhgB5FipCbhFSH9m7vOJ99j1wuPj9+P2m9M3t7NzO7O7szO94NYMMaSf8kEVsj4o+IGIqIXP0KI+XZtYW5iX8W5iaSKBZf+ztJvxZXF+YmKqsm2XxLOdKfznIXknh2mXSnZ8+dyhcKk2ez+NjM6bfHpmfPPXHydP7E5InJM+NHjhw6eODwU+NPdqWct6V53f3e1J5dL75x6eWJo5fe/PnbpCbTteWo2wIdGoj5mm1S7+EupLCabKsJJ/1NV+3GxqVLBiNKFXWgVP+Hou/C9upnQ/HCBz3NHHBLFYvF4njjj+eLwDqWRK9zAPRG5UJ/deGzibQPvLgfvP5dea7cAUrLfS2byp2e/mpHdaCuf9tNcxFxdP765+kUS+5DAAB03w9p++fxcrtjcfsvF3fWrLc9GxsazsZSdkTE7RGxMyLuiCite1dE3H2D6Y/UxZe2f3KXOypYm9L239PZ2FZlytKtrDLcl8W2lco/kBw/WZjcn22TfTEwmMYPLPvrSZQGgeK3jxulP1LT/kunNP1KWzDLx+X+wcXfOZafyd90wTNX3o/Y3b9c+bMBvGwMa1dE7O4wjZOPfr1n8ZK+aqh1+ZtoPs7UluIXEY+U9/981JW/Imk+Pjn2vyhM7h+rHBVL/fLrxVcbpX9T5e+CdP9vXvb4r5Z/OKkdr51e8hObWqVx8c8PG/ZpRiKeiQ6O/03J64sSfzc/M3O9GLEpeWnJ8rM1N7gr8dL8QLn8+/YuX/93xH9b4p6ISA/ieyPivoi4P9t3D0TEgxGxt0n5f3r+obealL+n+z++KZ+h2tr/lf1QPhCqR0SrQN+pH79vlHx7579DpdC+bEk75792M9jhVgMAAIA1JRcRWyPJjVbDudzoaPl/+HfG5lxhanrmseNT75w5Vn5GYDgGcpU7XUNZPLL7n8PleKn3PV6aR5zP7pcezO4bf9r3/1J8dGKqcKzXhYcNbkuD+p/6q6/XuQNuuS6MowFrVLP6/+XhFcwIsOI6v/5rOcBa16IWe2EDrGOu4rBxLVf/z/cgH8DKa3z9n9Q0gHWuWsk/aWPlmse96h/eBNYeF3nYuFrX/1du1fuvgN5p/yn+1RJIkkVL4quI5t9Kep/nDgIfrY5sNA5ErtFHgzf6goieBPKrIxutApWKOnvuVH/bb7WYLZ7PFwq/f3czqff2vAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAt/wYAAP//gN/guA==") 3.245857296s ago: executing program 2 (id=1779): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x18, 0x1, 0x1, [r1]}}], 0x18}, 0x1001) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x20}]}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}]}, 0x4c}}, 0x0) 2.359257028s ago: executing program 2 (id=1783): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@grpid}, {@dioread_nolock}, {}, {@debug}, {@noauto_da_alloc}]}, 0x1, 0x5f2, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x78bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c11, 0x71a2b}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x9}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x3}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040042) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) munlockall() r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x50) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023892) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000700)={0x1, 0xfffffffe, 0x8, 0x2, 0xe, "48ddd2fc3315e74649166f22a39adc58fcb973"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x13ed, &(0x7f00000012c0)=ANY=[], 0x0) 1.953543791s ago: executing program 4 (id=1786): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffdfa, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x1800004, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x5521, &(0x7f00000079c0)="$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") syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x5557, &(0x7f0000006440)="$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") r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae000034aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a9eee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) socket$inet_udp(0x2, 0x2, 0x0) r2 = creat(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000040)={@local, @dev}, &(0x7f0000000140)=0x8) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x102, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)=0x10004) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="40008b91f6351f00f8ffffff0001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000080400300140012800b0001006772657461700000040002800a000100aaaaaaaaaabb0000"], 0x40}}, 0x20040080) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, 0xe3c, 0x7ffffffd) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x1) close(r4) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000000)=""/1) 1.303057957s ago: executing program 2 (id=1789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101083, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0xc0000000, 0x6, 0x4, 0x8b984, 0x9, 0x7, 0xa}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mknod$loop(0x0, 0x0, 0x1) syz_usb_connect$uac3(0x2, 0x92, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1201000000000008ca1506184800010203010902800003010b6007080b0001012630400904000000010130"], 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000c00)='./bus\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@metacopy_on}], [{@appraise_type}, {@smackfshat={'smackfshat', 0x3d, '/dev/kvm\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfsdef={'smackfsdef', 0x3d, '}!^)^\\,'}}]}) 770.714466ms ago: executing program 3 (id=1799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 733.022029ms ago: executing program 3 (id=1801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r0}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000003100)={{}, "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"}) r3 = socket(0x1e, 0x80004, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c10, &(0x7f0000000200)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c726f6469722c636f6465706167653d3836342c696f636861727365743d63703737352c73686f72746e616d653d6d697865640004000072746e616d653d77696e39352c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d302c757466383d302c6e6f6e756d7461696c3d302c696f636861727365743d63703835372c00"], 0x81, 0x29b, &(0x7f00000015c0)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r5, r4, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6a000) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r6, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r4, &(0x7f0000000000), 0x2400}]) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7041, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = dup3(r7, r3, 0x0) recvmmsg(r8, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) r9 = socket(0x1e, 0x4, 0x0) connect$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000003060208000000000000000001000006050001000700000005000100070000000900020073797a310000000005000100070000000900030073797a3100000000eafe4e36c56f632a171a5cae3268ba4c61640ed4b95e0933656df0a27266"], 0x44}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) sendfile(r9, r2, 0x0, 0x8010002b) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e22, @rand_addr=0x640100fd}, 0x10) dup2(r1, r1) 338.792274ms ago: executing program 1 (id=1828): r0 = socket$inet(0x2, 0x3, 0x8) r1 = socket$inet(0x2, 0x3, 0x6) dup3(r0, r1, 0x0) 310.302509ms ago: executing program 1 (id=1831): syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time_for_children\x00') 242.846536ms ago: executing program 1 (id=1833): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 242.260096ms ago: executing program 1 (id=1835): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) 242.192576ms ago: executing program 1 (id=1836): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc008e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29103"}, 0x48, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) 215.399031ms ago: executing program 1 (id=1840): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x3, 0xffffffb9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 128.581014ms ago: executing program 3 (id=1846): r0 = socket(0x11, 0x3, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000003c0), 0x4) 79.143875ms ago: executing program 0 (id=1847): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 78.891915ms ago: executing program 0 (id=1848): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x300}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) 78.732015ms ago: executing program 0 (id=1849): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 77.142514ms ago: executing program 0 (id=1850): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)) 63.450572ms ago: executing program 3 (id=1851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) sendmsg$inet6(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}, 0xc0c0) 48.359509ms ago: executing program 3 (id=1852): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x0) 2.97956ms ago: executing program 0 (id=1853): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 2.67386ms ago: executing program 3 (id=1854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x4000000, 0x6, 0x7, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}}, 0x20000000) 0s ago: executing program 0 (id=1855): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): ctory (invalid entries) [ 262.671222][ T3791] FAT-fs (loop3): Filesystem has been set read-only [ 262.844470][ T443] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 263.204324][ T443] usb 2-1: Using ep0 maxpacket: 16 [ 263.363907][ T443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.375740][ T443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.386309][ T443] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 263.400065][ T443] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 263.409326][ T443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.418875][ T443] usb 2-1: config 0 descriptor?? [ 264.725273][ T3822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1036'. [ 265.353730][ T443] usbhid 2-1:0.0: can't add hid device: -71 [ 265.360133][ T443] usbhid: probe of 2-1:0.0 failed with error -71 [ 265.405677][ T443] usb 2-1: USB disconnect, device number 26 [ 265.870380][ T3848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=3848 comm=syz.2.1042 [ 265.884878][ T3851] xt_CT: No such helper "pptp" [ 266.462411][ T3867] loop3: detected capacity change from 0 to 512 [ 267.407449][ T3875] loop2: detected capacity change from 0 to 512 [ 267.456184][ T3875] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 267.504863][ T3875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 267.513093][ T3875] System zones: 1-12 [ 267.535358][ T3875] EXT4-fs error (device loop2): ext4_iget_extra_inode:4597: inode #15: comm syz.2.1049: corrupted in-inode xattr [ 267.557976][ T3875] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1049: couldn't read orphan inode 15 (err -117) [ 267.576155][ T496] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 267.584822][ T3875] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,grpid,noauto_da_alloc,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 267.676892][ T30] audit: type=1400 audit(2000000195.100:617): avc: denied { getopt } for pid=3881 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 267.879507][ T3895] overlayfs: './file1' not a directory [ 268.245311][ T496] usb 5-1: Using ep0 maxpacket: 8 [ 268.446770][ T3907] loop2: detected capacity change from 0 to 256 [ 268.734390][ T496] usb 5-1: config index 0 descriptor too short (expected 8475, got 27) [ 268.756523][ T496] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 268.756552][ T496] usb 5-1: config 0 has no interface number 0 [ 268.756578][ T496] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 268.756601][ T496] usb 5-1: config 0 interface 200 has no altsetting 0 [ 269.190036][ T496] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.1a [ 269.207118][ T496] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.224076][ T496] usb 5-1: Product: syz [ 269.232516][ T496] usb 5-1: Manufacturer: syz [ 269.242706][ T496] usb 5-1: config 0 descriptor?? [ 269.260499][ T3929] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1063'. [ 269.269826][ T496] usb 5-1: can't set config #0, error -71 [ 269.279889][ T496] usb 5-1: USB disconnect, device number 24 [ 269.464683][ T3940] loop4: detected capacity change from 256 to 0 [ 269.630619][ T3942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=3942 comm=syz.4.1066 [ 269.653286][ T3948] loop3: detected capacity change from 0 to 128 [ 269.738384][ T3948] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 269.748869][ T3948] FAT-fs (loop3): Filesystem has been set read-only [ 269.961997][ T3959] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 270.535546][ T3973] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1075'. [ 270.624511][ T3983] loop2: detected capacity change from 256 to 0 [ 270.724430][ T496] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 270.851426][ T3994] netlink: 'syz.4.1078': attribute type 4 has an invalid length. [ 270.870166][ T3994] netlink: 'syz.4.1078': attribute type 4 has an invalid length. [ 271.094409][ T496] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.104748][ T496] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 271.113936][ T496] usb 1-1: config 1 has no interface number 1 [ 271.120114][ T496] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 271.129232][ T496] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 271.298194][ T496] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 271.313130][ T496] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.321431][ T496] usb 1-1: Product: syz [ 271.325980][ T496] usb 1-1: Manufacturer: syz [ 271.330691][ T496] usb 1-1: SerialNumber: syz [ 271.654437][ T496] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 271.666298][ T496] usb 1-1: 2:1 : format type 91 is not supported yet [ 271.699461][ T496] usb 1-1: USB disconnect, device number 28 [ 272.771847][ T4022] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1088'. [ 272.922832][ T30] audit: type=1400 audit(2000000200.340:618): avc: denied { create } for pid=4037 comm="syz.1.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.164325][ T443] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 273.237414][ T4042] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1093'. [ 273.434678][ T443] usb 3-1: Using ep0 maxpacket: 16 [ 273.564589][ T443] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.744322][ T443] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.786250][ T30] audit: type=1400 audit(2000000201.210:619): avc: denied { create } for pid=4047 comm="syz.0.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 273.820994][ T4050] loop3: detected capacity change from 0 to 512 [ 273.837574][ T443] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 273.885773][ T443] usb 3-1: config 0 interface 0 has no altsetting 0 [ 273.904598][ T443] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 273.916747][ T4050] EXT4-fs (loop3): Test dummy encryption mode enabled [ 273.955103][ T4050] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 274.011519][ T868] udevd[868]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 274.043845][ T4063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=4063 comm=syz.4.1101 [ 274.065206][ T4054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=4054 comm=syz.0.1099 [ 274.078584][ T4050] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1097: bad orphan inode 131083 [ 274.093810][ T4050] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,journal_dev=0x0000000000000002,,errors=continue. Quota mode: none. [ 274.128650][ T443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.139053][ T443] usb 3-1: config 0 descriptor?? [ 274.319100][ T4076] netlink: 'syz.3.1097': attribute type 4 has an invalid length. [ 274.328280][ T4076] netlink: 'syz.3.1097': attribute type 4 has an invalid length. [ 274.740948][ T4078] overlayfs: './file1' not a directory [ 274.944372][ T443] usbhid 3-1:0.0: can't add hid device: -71 [ 274.950504][ T443] usbhid: probe of 3-1:0.0 failed with error -71 [ 274.969450][ T443] usb 3-1: USB disconnect, device number 21 [ 275.346143][ T4101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=4101 comm=syz.4.1113 [ 275.996981][ T4114] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1116'. [ 277.315563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 277.323955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.333942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 277.342355][ T487] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 277.344820][ T308] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 277.351128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.368278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.376830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.385644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.394144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.405725][ T4133] device syz_tun entered promiscuous mode [ 277.484961][ T1828] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 277.514304][ T579] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 277.544364][ T4141] overlayfs: './file1' not a directory [ 277.804538][ T308] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 277.815682][ T579] usb 3-1: Using ep0 maxpacket: 16 [ 277.828690][ T308] usb 4-1: config 179 has no interface number 0 [ 278.004126][ T308] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 278.039257][ T308] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 278.072972][ T308] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 278.084642][ T579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.106617][ T579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.128778][ T1828] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 278.135654][ T308] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 278.174303][ T579] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 278.187344][ T308] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 278.214383][ T579] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 278.223640][ T579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.231672][ T308] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 278.245029][ T579] usb 3-1: config 0 descriptor?? [ 278.250141][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.274400][ T4118] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 278.287864][ T4151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=4151 comm=syz.0.1127 [ 278.302158][ T308] xpad: probe of 4-1:179.65 failed with error -5 [ 278.365124][ T4154] loop0: detected capacity change from 256 to 0 [ 278.438777][ T30] audit: type=1400 audit(2000000205.860:620): avc: denied { map } for pid=4155 comm="syz.0.1129" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.463481][ T496] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 278.528621][ T1828] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 278.539307][ T1828] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 278.590576][ T1828] usb 4-1: USB disconnect, device number 34 [ 279.856448][ T375] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 282.764525][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 283.678335][ T4183] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1135'. [ 283.764558][ T579] usbhid 3-1:0.0: can't add hid device: -71 [ 283.776770][ T579] usbhid: probe of 3-1:0.0 failed with error -71 [ 283.937571][ T579] usb 3-1: USB disconnect, device number 22 [ 284.082896][ T4202] loop3: detected capacity change from 0 to 256 [ 284.318737][ T496] usb 5-1: device not accepting address 25, error -71 [ 284.370630][ T4215] xt_hashlimit: size too large, truncated to 1048576 [ 284.378559][ T4216] overlayfs: './file1' not a directory [ 285.314320][ T579] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 285.602419][ T30] audit: type=1400 audit(2000000213.020:621): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 285.714348][ T579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.725442][ T579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.735899][ T579] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 285.745267][ T579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.754902][ T579] usb 4-1: config 0 descriptor?? [ 286.245713][ T579] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x7 [ 286.263161][ T579] logitech-djreceiver 0003:046D:C71F.000B: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 286.275873][ T308] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 286.454010][ T1828] usb 4-1: USB disconnect, device number 35 [ 286.534288][ T308] usb 3-1: Using ep0 maxpacket: 16 [ 286.744471][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.803821][ T4256] binder: 4249:4256 ioctl c0306201 0 returned -14 [ 286.787292][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.872319][ T308] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.062970][ T308] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.115057][ T4258] x_tables: unsorted underflow at hook 2 [ 287.124188][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.133234][ T4258] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 287.135242][ T4260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.148074][ T4260] IPv6: NLM_F_CREATE should be set when creating new route [ 287.160467][ T308] usb 3-1: config 0 descriptor?? [ 287.163957][ T4258] SELinux: failed to load policy [ 287.183561][ T4258] tipc: Trying to set illegal importance in message [ 287.285284][ T4260] device batadv_slave_0 left promiscuous mode [ 287.324919][ T4260] device ip6gre1 left promiscuous mode [ 287.332033][ T4262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=4262 comm=syz.3.1158 [ 287.505590][ T496] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 287.781035][ T30] audit: type=1400 audit(2000000215.120:622): avc: denied { setattr } for pid=4269 comm="syz.1.1162" name="TIPC" dev="sockfs" ino=31427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 287.984340][ T1828] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 288.074399][ T496] usb 5-1: Using ep0 maxpacket: 8 [ 288.074407][ T308] usbhid 3-1:0.0: can't add hid device: -71 [ 288.074466][ T308] usbhid: probe of 3-1:0.0 failed with error -71 [ 288.094630][ T308] usb 3-1: USB disconnect, device number 23 [ 288.194423][ T496] usb 5-1: config 64 has an invalid interface number: 94 but max is 1 [ 288.202717][ T496] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 288.212961][ T496] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 2 [ 288.221967][ T496] usb 5-1: config 64 has no interface number 0 [ 288.228477][ T1828] usb 4-1: Using ep0 maxpacket: 16 [ 288.233785][ T496] usb 5-1: config 64 interface 94 altsetting 29 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 288.245004][ T496] usb 5-1: config 64 interface 94 altsetting 29 endpoint 0x9 has invalid wMaxPacketSize 0 [ 288.256457][ T496] usb 5-1: config 64 interface 94 has no altsetting 0 [ 288.344465][ T1828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.362798][ T1828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.383389][ T1828] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 288.407250][ T1828] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 288.417208][ T496] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5c, bcdDevice=10.18 [ 288.434448][ T496] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.442952][ T1828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.451642][ T496] usb 5-1: Product: syz [ 288.468293][ T1828] usb 4-1: config 0 descriptor?? [ 288.863217][ T496] usb 5-1: Manufacturer: syz [ 289.514510][ T496] usb 5-1: SerialNumber: syz [ 289.684345][ T308] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 290.054381][ T496] usb 5-1: Found UVC 0.00 device syz (8086:0b5c) [ 290.061120][ T496] usb 5-1: No valid video chain found. [ 290.075279][ T496] usb 5-1: USB disconnect, device number 27 [ 290.114434][ T308] usb 1-1: config 0 has no interfaces? [ 290.120255][ T308] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.129593][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.144994][ T308] usb 1-1: config 0 descriptor?? [ 290.431786][ T308] usb 1-1: USB disconnect, device number 29 [ 291.324361][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 291.526427][ T1828] usbhid 4-1:0.0: can't add hid device: -71 [ 291.537867][ T1828] usbhid: probe of 4-1:0.0 failed with error -71 [ 291.540717][ T30] audit: type=1400 audit(2000000218.960:623): avc: denied { ioctl } for pid=4293 comm="syz.2.1168" path="socket:[31478]" dev="sockfs" ino=31478 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 291.545633][ T1828] usb 4-1: USB disconnect, device number 36 [ 292.541208][ T4301] loop3: detected capacity change from 0 to 128 [ 292.609572][ T30] audit: type=1400 audit(2000000220.030:624): avc: denied { unmount } for pid=1708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 292.632227][ T4301] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 292.652814][ T4301] FAT-fs (loop3): Filesystem has been set read-only [ 292.720645][ T4303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=4303 comm=syz.0.1171 [ 292.744879][ T30] audit: type=1400 audit(2000000220.140:625): avc: denied { bind } for pid=4312 comm="syz.4.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.767093][ T30] audit: type=1400 audit(2000000220.140:626): avc: denied { setopt } for pid=4312 comm="syz.4.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.942779][ T4320] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 294.670182][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 294.701386][ T4335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 294.711218][ T4335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 294.775597][ T4341] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1182'. [ 296.643233][ T4347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=4347 comm=syz.3.1186 [ 296.693787][ T375] Bluetooth: hci0: command 0x1003 tx timeout [ 296.701453][ T2605] Bluetooth: hci0: sending frame failed (-49) [ 297.276286][ T4361] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1189'. [ 297.296922][ T4361] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 297.331678][ T4363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1190'. [ 297.352931][ T30] audit: type=1400 audit(2000000224.770:627): avc: denied { ioctl } for pid=4360 comm="syz.0.1189" path="/222/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 297.383606][ T4364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1189'. [ 297.697860][ T30] audit: type=1400 audit(2000000224.770:628): avc: denied { mount } for pid=4360 comm="syz.0.1189" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 298.080672][ T30] audit: type=1326 audit(2000000225.500:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc2665799 code=0x7ffc0000 [ 298.118467][ T4383] netlink: 'syz.1.1198': attribute type 27 has an invalid length. [ 298.126528][ T30] audit: type=1326 audit(2000000225.530:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc2665799 code=0x7ffc0000 [ 298.170306][ T30] audit: type=1326 audit(2000000225.530:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2cc2665799 code=0x7ffc0000 [ 298.201082][ T30] audit: type=1326 audit(2000000225.530:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc2665799 code=0x7ffc0000 [ 299.514329][ T375] Bluetooth: hci0: command 0x1001 tx timeout [ 299.520414][ T2605] Bluetooth: hci0: sending frame failed (-49) [ 299.527826][ T30] audit: type=1326 audit(2000000225.530:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc2665799 code=0x7ffc0000 [ 299.551489][ T30] audit: type=1326 audit(2000000225.530:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2cc2665799 code=0x7ffc0000 [ 299.577206][ T30] audit: type=1326 audit(2000000225.530:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc2665799 code=0x7ffc0000 [ 299.611297][ T30] audit: type=1326 audit(2000000225.530:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc2665799 code=0x7ffc0000 [ 299.646747][ T4383] device veth0_vlan left promiscuous mode [ 299.653010][ T4383] device veth0_vlan entered promiscuous mode [ 299.660929][ T4383] device veth1_macvtap left promiscuous mode [ 299.667944][ T4383] device veth1_macvtap entered promiscuous mode [ 299.677323][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.685923][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.693548][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.704663][ T375] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.726710][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.735545][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.743974][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.752527][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 299.762858][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.771788][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 299.780227][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.789057][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.797930][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.806688][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.815020][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.823318][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 299.830997][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.839456][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.848245][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.856828][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.866485][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.877834][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.888107][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.898586][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.908905][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.924689][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 299.935560][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.947142][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.957122][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.967397][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.018802][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.026880][ T308] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 300.033650][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 300.042884][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.050784][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 300.058425][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 300.066375][ T496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.074070][ T496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.081749][ T4390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1201'. [ 300.246467][ T4383] syz.1.1198 (4383) used greatest stack depth: 19712 bytes left [ 300.284327][ T308] usb 1-1: Using ep0 maxpacket: 16 [ 300.406418][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.418197][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.437193][ T308] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 300.479363][ T4414] devpts: called with bogus options [ 300.564121][ T308] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 300.689484][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.867659][ T308] usb 1-1: config 0 descriptor?? [ 301.306209][ T496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.314667][ T496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.334741][ T4433] loop3: detected capacity change from 0 to 16 [ 301.376879][ T4433] erofs: (device loop3): mounted with root inode @ nid 36. [ 301.396266][ T308] microsoft 0003:045E:07DA.000C: invalid report_count 65524 [ 301.405022][ T308] microsoft 0003:045E:07DA.000C: item 0 2 1 9 parsing failed [ 303.068579][ T496] Bluetooth: hci0: command 0x1009 tx timeout [ 303.106210][ T308] microsoft 0003:045E:07DA.000C: parse failed [ 303.112574][ T308] microsoft: probe of 0003:045E:07DA.000C failed with error -22 [ 303.144183][ T308] usb 1-1: USB disconnect, device number 30 [ 303.215612][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 303.215630][ T30] audit: type=1400 audit(2000000230.640:675): avc: denied { bind } for pid=4447 comm="syz.1.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.404465][ T579] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 303.894407][ T579] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.904616][ T579] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.973219][ T30] audit: type=1400 audit(2000000231.390:676): avc: denied { mount } for pid=4466 comm="syz.0.1223" name="/" dev="ramfs" ino=32090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 303.984568][ T579] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.041276][ T579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.082345][ T579] usb 5-1: SerialNumber: syz [ 304.124480][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.365486][ T579] usb 5-1: 0:2 : does not exist [ 304.442957][ T579] usb 5-1: USB disconnect, device number 28 [ 304.531416][ T30] audit: type=1400 audit(2000000231.950:677): avc: denied { watch } for pid=4478 comm="syz.1.1227" path="/246" dev="tmpfs" ino=1391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 305.115941][ T30] audit: type=1400 audit(2000000232.540:678): avc: denied { listen } for pid=4494 comm="syz.2.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 305.141439][ T30] audit: type=1400 audit(2000000232.560:679): avc: denied { connect } for pid=4494 comm="syz.2.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 305.542052][ T30] audit: type=1400 audit(2000000232.960:680): avc: denied { create } for pid=4503 comm="syz.0.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 305.806200][ T4521] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 305.815274][ T4521] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 306.109890][ T4524] loop3: detected capacity change from 0 to 512 [ 306.210537][ T4524] EXT4-fs (loop3): Test dummy encryption mode enabled [ 306.338065][ T4524] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 307.334346][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 307.394549][ T4528] overlayfs: missing 'workdir' [ 308.163459][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 308.175446][ T4531] device ip6gretap0 entered promiscuous mode [ 308.181586][ T4531] device macsec2 entered promiscuous mode [ 308.233253][ T4524] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1241: bad orphan inode 131083 [ 308.250272][ T4524] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,journal_dev=0x0000000000000002,,errors=continue. Quota mode: none. [ 308.411502][ T375] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 308.886856][ T4561] netlink: 'syz.3.1241': attribute type 4 has an invalid length. [ 309.353775][ T4569] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 309.362923][ T4569] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 310.566204][ T30] audit: type=1400 audit(2000000237.990:681): avc: denied { setopt } for pid=4585 comm="syz.3.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 310.566228][ T4586] x_tables: duplicate underflow at hook 1 [ 310.617820][ T4589] x_tables: duplicate entry at hook 3 [ 310.649067][ T4591] overlayfs: missing 'lowerdir' [ 311.532325][ T30] audit: type=1400 audit(2000000238.950:682): avc: denied { ioctl } for pid=4585 comm="syz.3.1259" path="socket:[32868]" dev="sockfs" ino=32868 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 311.644699][ T800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.864374][ T800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.876075][ T30] audit: type=1400 audit(2000000239.300:683): avc: denied { append } for pid=4623 comm="syz.0.1268" name="ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.220674][ T4626] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1269'. [ 312.317338][ T4633] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1271'. [ 312.454474][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.634479][ T800] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 312.749772][ T308] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 312.804192][ T4651] loop3: detected capacity change from 0 to 40427 [ 312.916435][ T4651] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 312.999756][ T4651] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 313.024382][ T308] usb 2-1: Using ep0 maxpacket: 16 [ 313.065610][ T4651] F2FS-fs (loop3): invalid crc value [ 313.096643][ T4651] F2FS-fs (loop3): Found nat_bits in checkpoint [ 313.134957][ T800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 313.176707][ T800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.187085][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.217626][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.220156][ T4651] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 313.227959][ T800] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 313.244672][ T308] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 313.250217][ T4651] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 313.258005][ T800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.284017][ T308] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 313.294787][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.297948][ T4651] xt_hashlimit: size too large, truncated to 1048576 [ 313.307206][ T800] usb 1-1: config 0 descriptor?? [ 313.319114][ T308] usb 2-1: config 0 descriptor?? [ 313.355712][ T800] hub 1-1:0.0: USB hub found [ 313.493236][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'. [ 313.574423][ T800] hub 1-1:0.0: 1 port detected [ 313.581364][ T4675] loop3: detected capacity change from 0 to 128 [ 313.592820][ T30] audit: type=1400 audit(2000000241.010:684): avc: denied { mount } for pid=4674 comm="syz.3.1280" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 313.609317][ T4675] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 313.623466][ T4675] FAT-fs (loop3): Filesystem has been set read-only [ 313.632761][ T4672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=4672 comm=syz.2.1281 [ 313.732425][ T30] audit: type=1400 audit(2000000241.130:685): avc: denied { connect } for pid=4680 comm="syz.2.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.754215][ T4683] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1284'. [ 313.955507][ T4693] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 314.184340][ T308] usbhid 2-1:0.0: can't add hid device: -71 [ 314.190732][ T308] usbhid: probe of 2-1:0.0 failed with error -71 [ 314.203282][ T308] usb 2-1: USB disconnect, device number 28 [ 314.243226][ T30] audit: type=1400 audit(2000000241.660:686): avc: denied { mount } for pid=4639 comm="syz.0.1273" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 314.265495][ T800] hub 1-1:0.0: activate --> -90 [ 314.467924][ T4699] SELinux: failed to load policy [ 314.482243][ T30] audit: type=1400 audit(2000000241.900:687): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 314.866349][ T308] usb 1-1: USB disconnect, device number 31 [ 315.023782][ T4721] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1295'. [ 315.032321][ T4710] xt_TCPMSS: Only works on TCP SYN packets [ 315.129636][ T4729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1296'. [ 315.896852][ T4750] loop3: detected capacity change from 0 to 512 [ 315.914332][ T496] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 315.928708][ T4750] EXT4-fs (loop3): Ignoring removed bh option [ 315.968096][ T4750] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 315.981289][ T4750] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.008472][ T4750] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.1305: iget: bad i_size value: 2533274857506816 [ 316.022494][ T4750] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.1305: iget: bad i_size value: 2533274857506816 [ 316.036099][ T4750] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.1305: iget: bad i_size value: 2533274857506816 [ 316.070267][ T4759] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1307'. [ 316.184321][ T308] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 316.334360][ T496] usb 3-1: not running at top speed; connect to a high speed hub [ 316.364304][ T800] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 316.424313][ T308] usb 1-1: Using ep0 maxpacket: 16 [ 316.434375][ T496] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 316.554457][ T308] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.565772][ T308] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.575691][ T308] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 316.588752][ T308] usb 1-1: config 0 interface 0 has no altsetting 0 [ 316.595560][ T308] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 316.604733][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.613470][ T308] usb 1-1: config 0 descriptor?? [ 316.624362][ T496] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.633917][ T496] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.641983][ T496] usb 3-1: Product: syz [ 316.646432][ T496] usb 3-1: Manufacturer: syz [ 316.651157][ T496] usb 3-1: SerialNumber: syz [ 316.724432][ T800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 316.736171][ T800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.746165][ T800] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 316.755679][ T800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.764691][ T800] usb 5-1: config 0 descriptor?? [ 316.804991][ T800] hub 5-1:0.0: USB hub found [ 316.994366][ T496] cdc_ncm 3-1:1.0: bind() failure [ 317.000443][ T496] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 317.007665][ T496] cdc_ncm 3-1:1.1: bind() failure [ 317.016556][ T496] usb 3-1: USB disconnect, device number 24 [ 317.024505][ T800] hub 5-1:0.0: 1 port detected [ 317.095713][ T308] hid (null): invalid report_size -75870778 [ 317.101841][ T308] hid (null): unknown global tag 0xd [ 317.107634][ T308] hid (null): invalid report_size 14173 [ 317.113292][ T308] hid (null): unknown global tag 0x48 [ 317.118696][ T308] hid (null): unknown global tag 0xd [ 317.124004][ T308] hid (null): unknown global tag 0xc [ 317.129658][ T308] hid (null): unknown global tag 0xc [ 317.135207][ T308] hid (null): unknown global tag 0xc [ 317.140664][ T308] hid (null): invalid report_size 58209 [ 317.296730][ T308] usb 1-1: USB disconnect, device number 32 [ 317.814464][ T308] hub 5-1:0.0: activate --> -90 [ 317.984864][ T4786] FAULT_INJECTION: forcing a failure. [ 317.984864][ T4786] name failslab, interval 1, probability 0, space 0, times 0 [ 317.998425][ T4786] CPU: 1 PID: 4786 Comm: syz.0.1313 Not tainted syzkaller #0 [ 318.006281][ T4786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.016651][ T4786] Call Trace: [ 318.020134][ T4786] [ 318.023084][ T4786] __dump_stack+0x21/0x30 [ 318.027795][ T4786] dump_stack_lvl+0x110/0x170 [ 318.032529][ T4786] ? show_regs_print_info+0x20/0x20 [ 318.037757][ T4786] ? __switch_to_asm+0x3a/0x60 [ 318.042723][ T4786] ? __schedule+0xb76/0x14c0 [ 318.047430][ T4786] dump_stack+0x15/0x20 [ 318.051613][ T4786] should_fail+0x3c1/0x510 [ 318.056130][ T4786] __should_failslab+0xa4/0xe0 [ 318.061067][ T4786] should_failslab+0x9/0x20 [ 318.065594][ T4786] slab_pre_alloc_hook+0x3b/0xe0 [ 318.070646][ T4786] ? __d_alloc+0x2d/0x6a0 [ 318.075010][ T4786] kmem_cache_alloc+0x44/0x260 [ 318.079799][ T4786] __d_alloc+0x2d/0x6a0 [ 318.084027][ T4786] d_alloc_pseudo+0x1d/0x70 [ 318.088548][ T4786] alloc_file_pseudo+0xe0/0x200 [ 318.093413][ T4786] ? alloc_empty_file_noaccount+0x80/0x80 [ 318.099327][ T4786] __anon_inode_getfd+0x26b/0x3d0 [ 318.104464][ T4786] ? anon_inode_getfd+0x40/0x40 [ 318.109530][ T4786] anon_inode_getfd+0x31/0x40 [ 318.114307][ T4786] __se_sys_fsopen+0x29b/0x330 [ 318.119085][ T4786] __x64_sys_fsopen+0x5b/0x70 [ 318.123866][ T4786] x64_sys_call+0x553/0x9a0 [ 318.128380][ T4786] do_syscall_64+0x4c/0xa0 [ 318.132813][ T4786] ? clear_bhb_loop+0x50/0xa0 [ 318.137652][ T4786] ? clear_bhb_loop+0x50/0xa0 [ 318.142433][ T4786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 318.148344][ T4786] RIP: 0033:0x7efd713b7799 [ 318.152877][ T4786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.172604][ T4786] RSP: 002b:00007efd6fdd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 318.181127][ T4786] RAX: ffffffffffffffda RBX: 00007efd71631180 RCX: 00007efd713b7799 [ 318.189199][ T4786] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 318.197186][ T4786] RBP: 00007efd6fdd0090 R08: 0000000000000000 R09: 0000000000000000 [ 318.205171][ T4786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.213152][ T4786] R13: 00007efd71631218 R14: 00007efd71631180 R15: 00007ffde3bd5408 [ 318.221150][ T4786] [ 318.646097][ T292] usb 5-1: USB disconnect, device number 29 [ 318.774308][ T308] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 319.064392][ T308] usb 3-1: device descriptor read/64, error -71 [ 319.474357][ T308] usb 3-1: device descriptor read/64, error -71 [ 319.744285][ T308] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 319.838694][ T4812] device syzkaller1 entered promiscuous mode [ 320.011776][ T4818] loop3: detected capacity change from 0 to 512 [ 320.018625][ T308] usb 3-1: device descriptor read/64, error -71 [ 320.221098][ T4830] netlink: 'syz.1.1325': attribute type 4 has an invalid length. [ 320.575923][ T4843] netlink: 'syz.1.1332': attribute type 9 has an invalid length. [ 320.584169][ T4843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1332'. [ 320.624301][ T308] usb 3-1: device descriptor read/64, error -71 [ 320.638739][ T4847] xt_CT: No such helper "syz0" [ 320.754361][ T308] usb usb3-port1: attempt power cycle [ 321.175494][ T4885] overlayfs: './file1' not a directory [ 321.239409][ T308] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 321.314445][ T292] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 321.504518][ T308] usb 3-1: device descriptor read/8, error -71 [ 321.634525][ T292] usb 1-1: device descriptor read/64, error -71 [ 321.713981][ T4889] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1350'. [ 321.764449][ T308] usb 3-1: device descriptor read/8, error -71 [ 322.872275][ T292] usb 1-1: device descriptor read/64, error -71 [ 323.270395][ T4909] loop3: detected capacity change from 0 to 40427 [ 323.555194][ T292] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 324.200166][ T4930] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1362'. [ 324.574278][ T800] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 324.664324][ T579] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 324.957276][ T4957] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 324.974474][ T800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.986431][ T800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.997016][ T800] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 325.007150][ T4963] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.014906][ T800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.015753][ T4953] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1367'. [ 325.023664][ T800] usb 5-1: config 0 descriptor?? [ 325.074361][ T579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 325.086314][ T579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 325.115331][ T579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 325.116349][ T4973] binder: 4970:4973 ioctl c0306201 0 returned -14 [ 325.125470][ T579] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 325.145381][ T4973] binder: 4970:4973 ioctl c0306201 200000000240 returned -11 [ 325.145669][ T579] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 325.162575][ T579] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.172004][ T579] usb 2-1: config 0 descriptor?? [ 325.194432][ T4929] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 325.226099][ T4977] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1374'. [ 325.428528][ T4990] overlayfs: './file1' not a directory [ 325.539599][ T800] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 325.561604][ T800] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 326.011311][ T4995] overlayfs: './file1' not a directory [ 326.077577][ T4995] loop3: detected capacity change from 0 to 512 [ 326.184507][ T800] cp2112 0003:10C4:EA90.000E: error requesting version [ 326.194314][ T800] cp2112: probe of 0003:10C4:EA90.000E failed with error -32 [ 326.727602][ T5000] overlayfs: missing 'lowerdir' [ 327.181741][ T5012] loop3: detected capacity change from 0 to 4096 [ 327.226257][ T292] usb 5-1: USB disconnect, device number 30 [ 327.266587][ T5012] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 327.274890][ T5007] fido_id[5007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 327.284348][ T579] usbhid 2-1:0.0: can't add hid device: -71 [ 327.301677][ T5012] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #15: comm syz.3.1381: corrupted inode contents [ 327.309236][ T579] usbhid: probe of 2-1:0.0 failed with error -71 [ 327.341304][ T579] usb 2-1: USB disconnect, device number 29 [ 327.359951][ T5024] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1386'. [ 327.410327][ T5012] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #15: comm syz.3.1381: mark_inode_dirty error [ 327.469781][ T30] audit: type=1400 audit(2000000007.680:688): avc: denied { map } for pid=5011 comm="syz.3.1381" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 327.503473][ T5012] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #15: comm syz.3.1381: corrupted inode contents [ 327.544490][ T5012] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.1381: mark_inode_dirty error [ 327.609139][ T5042] overlayfs: './file1' not a directory [ 328.127016][ T579] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 328.444333][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.536913][ T5012] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #15: comm syz.3.1381: corrupted inode contents [ 328.554980][ T5012] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.1381: mark_inode_dirty error [ 328.642000][ T5045] overlayfs: './file1' not a directory [ 328.650013][ T5012] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #15: comm syz.3.1381: corrupted inode contents [ 328.679871][ T5012] EXT4-fs error (device loop3): ext4_truncate:4310: inode #15: comm syz.3.1381: mark_inode_dirty error [ 328.764640][ T5012] EXT4-fs error (device loop3) in ext4_setattr:5657: Corrupt filesystem [ 328.934402][ T579] usb 2-1: Using ep0 maxpacket: 16 [ 329.054416][ T579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.065804][ T579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.076096][ T579] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 329.089659][ T579] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 329.098905][ T579] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.108414][ T579] usb 2-1: config 0 descriptor?? [ 329.133346][ T30] audit: type=1400 audit(2000000009.340:689): avc: denied { unlink } for pid=5011 comm="syz.3.1381" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.156667][ T5050] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #15: comm syz.3.1381: corrupted inode contents [ 329.230803][ T284] EXT4-fs warning (device loop3): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 329.378702][ T5022] UDC core: couldn't find an available UDC or it's busy: -16 [ 329.400682][ T5022] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 329.472184][ T5022] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1385'. [ 329.612134][ T5070] bridge0: port 3(syz_tun) entered disabled state [ 329.621559][ T5070] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.629356][ T5070] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.849044][ T5022] UDC core: couldn't find an available UDC or it's busy: -16 [ 329.857510][ T5022] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 330.258887][ T5076] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1400'. [ 330.754488][ T579] usbhid 2-1:0.0: can't add hid device: -71 [ 330.765168][ T579] usbhid: probe of 2-1:0.0 failed with error -71 [ 331.439969][ T5093] overlayfs: './file1' not a directory [ 331.570565][ T579] usb 2-1: USB disconnect, device number 30 [ 331.817223][ T5103] overlayfs: './file0' not a directory [ 331.985222][ T5107] overlayfs: './file1' not a directory [ 331.991653][ T5107] FAULT_INJECTION: forcing a failure. [ 331.991653][ T5107] name failslab, interval 1, probability 0, space 0, times 0 [ 332.004399][ T5107] CPU: 1 PID: 5107 Comm: syz.4.1405 Not tainted syzkaller #0 [ 332.012069][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.022326][ T5107] Call Trace: [ 332.025714][ T5107] [ 332.028656][ T5107] __dump_stack+0x21/0x30 [ 332.033061][ T5107] dump_stack_lvl+0x110/0x170 [ 332.037752][ T5107] ? show_regs_print_info+0x20/0x20 [ 332.042972][ T5107] ? vfs_write+0xc72/0xfd0 [ 332.047488][ T5107] dump_stack+0x15/0x20 [ 332.051866][ T5107] should_fail+0x3c1/0x510 [ 332.056310][ T5107] __should_failslab+0xa4/0xe0 [ 332.061479][ T5107] should_failslab+0x9/0x20 [ 332.066094][ T5107] slab_pre_alloc_hook+0x3b/0xe0 [ 332.071230][ T5107] ? prepare_creds+0x2f/0x640 [ 332.076059][ T5107] kmem_cache_alloc+0x44/0x260 [ 332.080846][ T5107] prepare_creds+0x2f/0x640 [ 332.085633][ T5107] __sys_setreuid+0x108/0x980 [ 332.090420][ T5107] __x64_sys_setreuid+0x5a/0x70 [ 332.095288][ T5107] x64_sys_call+0x92e/0x9a0 [ 332.100025][ T5107] do_syscall_64+0x4c/0xa0 [ 332.104459][ T5107] ? clear_bhb_loop+0x50/0xa0 [ 332.109243][ T5107] ? clear_bhb_loop+0x50/0xa0 [ 332.114036][ T5107] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 332.120003][ T5107] RIP: 0033:0x7f92a8d88799 [ 332.124461][ T5107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.144085][ T5107] RSP: 002b:00007f92a77a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 332.152605][ T5107] RAX: ffffffffffffffda RBX: 00007f92a9002180 RCX: 00007f92a8d88799 [ 332.160685][ T5107] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 000000000000ee01 [ 332.168688][ T5107] RBP: 00007f92a77a1090 R08: 0000000000000000 R09: 0000000000000000 [ 332.176685][ T5107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.184680][ T5107] R13: 00007f92a9002218 R14: 00007f92a9002180 R15: 00007ffd44b88538 [ 332.192863][ T5107] [ 332.347858][ T5114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 332.357620][ T5114] overlayfs: './file1' not a directory [ 332.606798][ T5120] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1411'. [ 332.673439][ T5121] netlink: 'syz.1.1410': attribute type 4 has an invalid length. [ 332.682833][ T5121] netlink: 'syz.1.1410': attribute type 4 has an invalid length. [ 333.202687][ T5134] 9pnet: Insufficient options for proto=fd [ 333.395702][ T5147] overlayfs: './file1' not a directory [ 333.524387][ T579] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 333.994343][ T292] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 334.045152][ T579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 334.164300][ T579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.265106][ T579] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 334.284389][ T579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.306854][ T292] usb 2-1: Using ep0 maxpacket: 16 [ 334.312226][ T579] usb 4-1: config 0 descriptor?? [ 334.596840][ T579] hub 4-1:0.0: USB hub found [ 334.742802][ T292] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 334.764355][ T292] usb 2-1: config 0 has no interface number 0 [ 334.770582][ T292] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 334.794270][ T292] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 334.814411][ T579] hub 4-1:0.0: 1 port detected [ 334.964630][ T292] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 334.987259][ T292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.191281][ T292] usb 2-1: Product: syz [ 336.042973][ T30] audit: type=1400 audit(2000000015.510:690): avc: denied { mount } for pid=5164 comm="syz.0.1425" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 336.091362][ T292] usb 2-1: Manufacturer: syz [ 336.154822][ T292] usb 2-1: SerialNumber: syz [ 336.173816][ T292] usb 2-1: config 0 descriptor?? [ 336.214350][ T5150] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 336.227018][ T579] usb 4-1: USB disconnect, device number 37 [ 336.254363][ T800] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 336.265700][ T5150] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 336.290013][ T5172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 336.367519][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 336.386089][ T5175] 9pnet: Insufficient options for proto=fd [ 336.437427][ T30] audit: type=1400 audit(2000000016.650:691): avc: denied { setattr } for pid=5169 comm="syz.0.1426" name="HCI" dev="sockfs" ino=34250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 336.465161][ T5177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 336.475863][ T30] audit: type=1400 audit(2000000016.690:692): avc: denied { read } for pid=5176 comm="syz.3.1429" path="socket:[35129]" dev="sockfs" ino=35129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 336.514369][ T292] asix: probe of 2-1:0.251 failed with error -71 [ 336.593307][ T292] usb 2-1: USB disconnect, device number 31 [ 336.711858][ T5187] loop3: detected capacity change from 0 to 256 [ 337.412212][ T5199] loop3: detected capacity change from 0 to 512 [ 337.500653][ T5199] EXT4-fs (loop3): 1 truncate cleaned up [ 337.508690][ T5199] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: none. [ 337.704284][ T6] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 337.735065][ T5213] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1436: bg 0: block 7: invalid block bitmap [ 337.775415][ T5213] incfs: Can't find or create .index dir in ./file0 [ 337.782234][ T5213] incfs: mount failed -28 [ 337.844304][ T443] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 337.927758][ T5215] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 337.941344][ T5215] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 337.950915][ T5215] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 337.984296][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 338.017223][ T5217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1444'. [ 338.075423][ T5219] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1443'. [ 338.114268][ T443] usb 3-1: Using ep0 maxpacket: 8 [ 338.114417][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.131445][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.159584][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 338.208599][ T6] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 338.231012][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.250768][ T6] usb 2-1: config 0 descriptor?? [ 338.264321][ T443] usb 3-1: config index 0 descriptor too short (expected 8475, got 27) [ 338.277317][ T443] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 338.294342][ T443] usb 3-1: config 0 has no interface number 0 [ 338.302037][ T443] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 338.315044][ T443] usb 3-1: config 0 interface 200 has no altsetting 0 [ 338.341204][ T5241] overlayfs: missing 'lowerdir' [ 338.497978][ T30] audit: type=1400 audit(2000000018.710:693): avc: denied { create } for pid=5202 comm="syz.1.1438" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 338.634378][ T443] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.1a [ 338.643481][ T443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.684434][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 338.703698][ T443] usb 3-1: Product: syz [ 338.713839][ T443] usb 3-1: Manufacturer: syz [ 338.719675][ T375] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 338.727723][ T30] audit: type=1400 audit(2000000018.710:694): avc: denied { mounton } for pid=5202 comm="syz.1.1438" path="/293/file0" dev="tmpfs" ino=1645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 338.741039][ T443] usb 3-1: SerialNumber: syz [ 338.787973][ T443] usb 3-1: config 0 descriptor?? [ 338.964326][ T375] usb 5-1: Using ep0 maxpacket: 32 [ 339.065037][ T6] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 339.072557][ T6] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 339.081997][ T6] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 339.089527][ T6] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 339.097219][ T6] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 339.104615][ T6] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 339.116188][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000F/input/input15 [ 339.127874][ T375] usb 5-1: unable to get BOS descriptor or descriptor too short [ 339.145554][ T443] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input16 [ 339.206100][ T6] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 339.207997][ T443] usb 3-1: USB disconnect, device number 29 [ 339.219342][ T375] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 339.235638][ T375] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 33109, setting to 1024 [ 339.277141][ T292] usb 2-1: USB disconnect, device number 32 [ 339.284344][ T1828] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 339.403278][ T5255] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1454'. [ 339.412829][ T5255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1454'. [ 339.422981][ T5255] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1454'. [ 339.432434][ T5255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1454'. [ 339.444339][ T375] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 339.459975][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.468220][ T375] usb 5-1: Product: syz [ 339.472573][ T375] usb 5-1: Manufacturer: syz [ 339.477435][ T375] usb 5-1: SerialNumber: syz [ 339.554282][ T1828] usb 4-1: Using ep0 maxpacket: 8 [ 339.734387][ T1828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.617112][ T30] audit: type=1400 audit(2000000020.830:695): avc: denied { unlink } for pid=282 comm="syz-executor" name="file0" dev="tmpfs" ino=1645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 340.638504][ T1828] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 340.656326][ T1828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.670090][ T1828] usb 4-1: config 0 descriptor?? [ 340.927695][ T375] usb 5-1: USB disconnect, device number 31 [ 340.935533][ T292] usb 4-1: USB disconnect, device number 38 [ 341.145658][ T868] udevd[868]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 341.469902][ T5282] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1463'. [ 341.482858][ T5282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.759476][ T5288] loop3: detected capacity change from 0 to 512 [ 341.797349][ T5293] netlink: 'syz.1.1467': attribute type 11 has an invalid length. [ 341.797602][ T5288] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1466: Directory hole found for htree index block 0 [ 341.827208][ T5288] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 341.835606][ T5288] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000009,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000000005,grpid,,,errors=continue. Quota mode: writeback. [ 341.872925][ T5288] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1466: Directory hole found for htree index block 0 [ 342.184196][ T5314] overlayfs: filesystem on './cgroup' not supported [ 342.194425][ T30] audit: type=1400 audit(2000000022.400:696): avc: denied { remount } for pid=5313 comm="syz.0.1473" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 342.224331][ T1828] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 342.584429][ T1828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 342.596306][ T1828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.606317][ T1828] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 342.615649][ T1828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.630469][ T1828] usb 3-1: config 0 descriptor?? [ 342.675021][ T1828] hub 3-1:0.0: USB hub found [ 342.884391][ T1828] hub 3-1:0.0: 1 port detected [ 342.984294][ T375] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 342.997242][ T5340] loop3: detected capacity change from 0 to 512 [ 343.014378][ T443] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 343.040081][ T5340] EXT4-fs (loop3): Test dummy encryption mode enabled [ 343.047216][ T5340] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 343.058294][ T5340] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1483: bad orphan inode 131083 [ 343.069312][ T5340] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,journal_dev=0x0000000000000002,,errors=continue. Quota mode: none. [ 343.240997][ T5347] netlink: 'syz.3.1483': attribute type 4 has an invalid length. [ 343.250832][ T5347] netlink: 'syz.3.1483': attribute type 4 has an invalid length. [ 343.445266][ T443] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 343.455975][ T443] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 343.468656][ T443] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 343.482187][ T443] usb 5-1: config 220 has no interface number 2 [ 343.484328][ T375] usb 2-1: Using ep0 maxpacket: 16 [ 343.488932][ T443] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 343.507501][ T443] usb 5-1: config 220 interface 0 has no altsetting 0 [ 343.514571][ T443] usb 5-1: config 220 interface 76 has no altsetting 0 [ 343.521771][ T443] usb 5-1: config 220 interface 1 has no altsetting 0 [ 343.604345][ T375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.615562][ T375] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 343.628652][ T375] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 343.637757][ T375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.654915][ T375] usb 2-1: config 0 descriptor?? [ 343.704317][ T443] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 343.713567][ T443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.721985][ T443] usb 5-1: Product: syz [ 343.726601][ T443] usb 5-1: Manufacturer: syz [ 343.731295][ T443] usb 5-1: SerialNumber: syz [ 343.896275][ T496] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 343.904083][ T496] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 343.924373][ T496] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 343.975616][ T5333] netlink: 'syz.4.1480': attribute type 4 has an invalid length. [ 343.983691][ T5333] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1480'. [ 344.003791][ T5365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5365 comm=syz.3.1490 [ 344.114404][ T443] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 344.120861][ T443] usb 5-1: No valid video chain found. [ 344.126548][ T443] usb 5-1: selecting invalid altsetting 0 [ 344.132689][ T5369] loop3: detected capacity change from 0 to 40427 [ 344.178607][ T5369] F2FS-fs (loop3): invalid crc value [ 344.185646][ T5369] F2FS-fs (loop3): Found nat_bits in checkpoint [ 344.205650][ T443] usb 5-1: USB disconnect, device number 32 [ 344.217657][ T5369] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 344.224707][ T5369] F2FS-fs (loop3): Start checkpoint disabled! [ 344.231408][ T5369] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 344.282039][ T3739] attempt to access beyond end of device [ 344.282039][ T3739] loop3: rw=2049, want=40976, limit=40427 [ 344.354395][ T496] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 344.394647][ T496] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 344.774390][ T1828] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 344.935974][ T5396] netlink: 'syz.4.1496': attribute type 4 has an invalid length. [ 344.956117][ T5396] netlink: 'syz.4.1496': attribute type 4 has an invalid length. [ 345.104507][ T1828] usb 3-1: USB disconnect, device number 30 [ 345.335791][ T5405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5405 comm=syz.3.1501 [ 345.393403][ T5409] loop3: detected capacity change from 0 to 512 [ 345.425954][ T5409] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1502: invalid indirect mapped block 256 (level 2) [ 345.440820][ T5409] EXT4-fs (loop3): 2 truncates cleaned up [ 345.447121][ T5409] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 345.706635][ T5403] SELinux: failed to load policy [ 345.718719][ T5403] overlayfs: './file0' not a directory [ 345.792181][ T5426] device batadv_slave_0 entered promiscuous mode [ 345.799391][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1508'. [ 345.811359][ T5426] device batadv_slave_0 left promiscuous mode [ 345.824467][ T375] usbhid 2-1:0.0: can't add hid device: -71 [ 345.830594][ T375] usbhid: probe of 2-1:0.0 failed with error -71 [ 346.181652][ T375] usb 2-1: USB disconnect, device number 33 [ 346.221532][ T5432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1510'. [ 346.316688][ T5434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5434 comm=syz.2.1512 [ 346.706734][ T5455] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1519'. [ 346.732374][ T5463] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1520'. [ 346.774357][ T443] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 346.796596][ T800] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 346.808494][ T800] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 346.824527][ T800] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 346.934748][ T800] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 347.024303][ T443] usb 3-1: Using ep0 maxpacket: 32 [ 347.137482][ T5481] loop3: detected capacity change from 0 to 2048 [ 347.174361][ T443] usb 3-1: config 0 has no interfaces? [ 347.186210][ T5478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5478 comm=syz.0.1524 [ 347.216373][ T30] audit: type=1400 audit(2000000027.430:697): avc: denied { write } for pid=5483 comm="syz.4.1526" path="socket:[36978]" dev="sockfs" ino=36978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 347.251710][ T5481] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 347.269294][ T5481] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.384449][ T443] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 347.393896][ T443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.402012][ T443] usb 3-1: Product: syz [ 347.406658][ T443] usb 3-1: Manufacturer: syz [ 347.411732][ T443] usb 3-1: SerialNumber: syz [ 347.420625][ T443] usb 3-1: config 0 descriptor?? [ 347.644358][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 347.757677][ T5493] 9pnet: Could not find request transport: 8øÄ8H ž"=0x000000000000000b [ 347.763717][ T30] audit: type=1400 audit(2000000027.970:698): avc: denied { mounton } for pid=5492 comm="syz.1.1528" path="/301/file0" dev="tmpfs" ino=1689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 347.797977][ T292] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 347.848637][ T5500] overlayfs: missing 'lowerdir' [ 348.800564][ T292] usb 4-1: Using ep0 maxpacket: 16 [ 348.842807][ T5505] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1531'. [ 349.374457][ T292] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.793924][ T292] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.930813][ T443] usb 3-1: USB disconnect, device number 31 [ 349.967598][ T5527] FAULT_INJECTION: forcing a failure. [ 349.967598][ T5527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.980785][ T5527] CPU: 1 PID: 5527 Comm: syz.0.1536 Not tainted syzkaller #0 [ 349.988376][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.998462][ T5527] Call Trace: [ 350.001763][ T5527] [ 350.004708][ T5527] __dump_stack+0x21/0x30 [ 350.009207][ T5527] dump_stack_lvl+0x110/0x170 [ 350.013912][ T5527] ? show_regs_print_info+0x20/0x20 [ 350.019438][ T5527] dump_stack+0x15/0x20 [ 350.023623][ T5527] should_fail+0x3c1/0x510 [ 350.028176][ T5527] should_fail_usercopy+0x1a/0x20 [ 350.033235][ T5527] _copy_to_user+0x20/0x90 [ 350.037672][ T5527] simple_read_from_buffer+0xe9/0x160 [ 350.043176][ T5527] proc_fail_nth_read+0x1a6/0x220 [ 350.048407][ T5527] ? proc_fault_inject_write+0x310/0x310 [ 350.054237][ T5527] ? security_file_permission+0x83/0xa0 [ 350.059988][ T5527] ? proc_fault_inject_write+0x310/0x310 [ 350.065739][ T5527] vfs_read+0x28d/0xc40 [ 350.069921][ T5527] ? kernel_read+0x1f0/0x1f0 [ 350.074560][ T5527] ? __kasan_check_write+0x14/0x20 [ 350.079701][ T5527] ? mutex_lock+0x9b/0x1c0 [ 350.084143][ T5527] ? wait_for_completion_killable_timeout+0x10/0x10 [ 350.090753][ T5527] ? __fget_files+0x2c4/0x320 [ 350.095632][ T5527] ? __fdget_pos+0x2d2/0x380 [ 350.100249][ T5527] ? ksys_read+0x71/0x250 [ 350.104601][ T5527] ksys_read+0x149/0x250 [ 350.108957][ T5527] ? vfs_write+0xfd0/0xfd0 [ 350.113499][ T5527] ? debug_smp_processor_id+0x17/0x20 [ 350.118893][ T5527] __x64_sys_read+0x7b/0x90 [ 350.123526][ T5527] x64_sys_call+0x96d/0x9a0 [ 350.128052][ T5527] do_syscall_64+0x4c/0xa0 [ 350.132511][ T5527] ? clear_bhb_loop+0x50/0xa0 [ 350.137222][ T5527] ? clear_bhb_loop+0x50/0xa0 [ 350.142006][ T5527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 350.147964][ T5527] RIP: 0033:0x7efd71377fce [ 350.152578][ T5527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 350.172486][ T5527] RSP: 002b:00007efd6fe11fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.181254][ T5527] RAX: ffffffffffffffda RBX: 00007efd6fe126c0 RCX: 00007efd71377fce [ 350.189266][ T5527] RDX: 000000000000000f RSI: 00007efd6fe120a0 RDI: 0000000000000003 [ 350.197367][ T5527] RBP: 00007efd6fe12090 R08: 0000000000000000 R09: 0000000000000000 [ 350.205676][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.213928][ T5527] R13: 00007efd71631038 R14: 00007efd71630fa0 R15: 00007ffde3bd5408 [ 350.221926][ T5527] [ 350.392218][ T5529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5529 comm=syz.2.1537 [ 350.443157][ T292] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.452971][ T292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.474332][ T292] usb 4-1: can't set config #1, error -71 [ 350.484373][ T292] usb 4-1: USB disconnect, device number 39 [ 350.604487][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 350.604508][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 350.623676][ T5555] loop3: detected capacity change from 0 to 256 [ 350.697569][ T5555] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119dbd0) [ 350.708373][ T5555] exFAT-fs (loop3): invalid boot region [ 350.713966][ T5555] exFAT-fs (loop3): failed to recognize exfat type [ 350.848723][ T443] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 351.634359][ T443] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 351.644602][ T443] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 351.684301][ T443] usb 5-1: config 0 has no interface number 1 [ 351.690475][ T443] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 351.784395][ T443] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 351.888738][ T5565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1548'. [ 352.134424][ T5563] cgroup: Setting release_agent not allowed [ 352.141138][ T5563] fuse: Bad value for 'fd' [ 352.146225][ T5563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1548'. [ 352.504536][ T443] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 352.524059][ T443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.560350][ T443] usb 5-1: Product: syz [ 353.519217][ T443] usb 5-1: Manufacturer: syz [ 353.534274][ T443] usb 5-1: SerialNumber: syz [ 353.555609][ T443] usb 5-1: config 0 descriptor?? [ 353.557646][ T30] audit: type=1400 audit(2000000033.770:699): avc: denied { ioctl } for pid=5567 comm="syz.4.1550" path="socket:[37321]" dev="sockfs" ino=37321 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 353.578358][ T443] usb 5-1: can't set config #0, error -71 [ 354.558582][ T443] usb 5-1: USB disconnect, device number 33 [ 355.324320][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 355.616493][ T30] audit: type=1400 audit(2000000035.830:700): avc: denied { watch_reads } for pid=5580 comm="syz.2.1554" path="/225/file0" dev="tmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 355.671705][ T30] audit: type=1400 audit(2000000035.860:701): avc: denied { associate } for pid=5567 comm="syz.4.1550" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 355.695477][ T30] audit: type=1400 audit(2000000035.860:702): avc: denied { append } for pid=5567 comm="syz.4.1550" name="pfkey" dev="proc" ino=4026532606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 355.732334][ T30] audit: type=1400 audit(2000000035.940:703): avc: denied { accept } for pid=5580 comm="syz.2.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 355.752711][ T800] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 355.762045][ T30] audit: type=1400 audit(2000000035.940:704): avc: denied { write } for pid=5580 comm="syz.2.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 356.052157][ T5587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5587 comm=syz.4.1555 [ 356.218076][ T30] audit: type=1400 audit(2000000035.940:705): avc: denied { read } for pid=5580 comm="syz.2.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 356.254168][ T5593] xt_hashlimit: size too large, truncated to 1048576 [ 356.371254][ T800] usb 4-1: Using ep0 maxpacket: 16 [ 356.436269][ T5599] 9pnet: Insufficient options for proto=fd [ 356.514634][ T800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.837234][ T800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.911106][ T800] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 356.924710][ T800] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 356.934027][ T800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.944169][ T800] usb 4-1: config 0 descriptor?? [ 356.964362][ T800] usb 4-1: can't set config #0, error -71 [ 356.970744][ T800] usb 4-1: USB disconnect, device number 40 [ 357.166873][ T1828] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 357.206017][ T30] audit: type=1400 audit(2000000037.420:706): avc: denied { mounton } for pid=5621 comm="syz.1.1567" path="/307/file0" dev="tmpfs" ino=1724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 357.448109][ T5622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5622 comm=syz.1.1567 [ 357.584350][ T1828] usb 5-1: Using ep0 maxpacket: 16 [ 357.884293][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 357.984352][ T1828] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.996142][ T1828] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.007423][ T1828] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 358.021323][ T1828] usb 5-1: config 0 interface 0 has no altsetting 0 [ 358.028409][ T1828] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 358.038007][ T375] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 358.045872][ T1828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.056155][ T1828] usb 5-1: config 0 descriptor?? [ 358.115448][ T30] audit: type=1400 audit(2000000038.330:707): avc: denied { create } for pid=5644 comm="syz.0.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 358.135971][ T30] audit: type=1400 audit(2000000038.330:708): avc: denied { create } for pid=5644 comm="syz.0.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 358.284268][ T375] usb 2-1: Using ep0 maxpacket: 32 [ 358.404307][ T375] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 358.412837][ T375] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 358.421959][ T375] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.432567][ T375] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 358.442036][ T375] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 358.451428][ T375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.461098][ T375] usb 2-1: config 0 descriptor?? [ 358.704685][ T5634] UDC core: couldn't find an available UDC or it's busy: -16 [ 358.712476][ T5634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 358.720187][ T5634] UDC core: couldn't find an available UDC or it's busy: -16 [ 358.727649][ T5634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 358.735516][ T5634] UDC core: couldn't find an available UDC or it's busy: -16 [ 358.743089][ T5634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 358.751272][ T5634] UDC core: couldn't find an available UDC or it's busy: -16 [ 358.758795][ T5634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 358.766538][ T5634] UDC core: couldn't find an available UDC or it's busy: -16 [ 358.776147][ T5634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 358.785019][ T800] usb 2-1: USB disconnect, device number 34 [ 358.805288][ T5656] xt_limit: Overflow, try lower: 65536/2147483648 [ 358.940542][ T5660] overlayfs: './file1' not a directory [ 358.953531][ T5660] loop3: detected capacity change from 0 to 512 [ 359.389216][ T5673] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4376 (8752 ns) > initial count (48 ns). Using initial count to start timer. [ 359.405519][ T800] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 359.515053][ T5677] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1582'. [ 361.025099][ T800] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x78, skipping [ 361.044316][ T800] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 361.053405][ T800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.094531][ T5667] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 361.102216][ T5667] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 361.135705][ T800] usb 1-1: invalid MIDI in EP 0 [ 361.141292][ T800] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 361.154347][ T1828] usbhid 5-1:0.0: can't add hid device: -71 [ 361.160662][ T1828] usbhid: probe of 5-1:0.0 failed with error -71 [ 361.170677][ T1828] usb 5-1: USB disconnect, device number 34 [ 361.341880][ T800] usb 1-1: USB disconnect, device number 35 [ 361.348110][ T443] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 361.384293][ T496] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 361.544338][ T1828] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 361.674365][ T496] usb 3-1: Using ep0 maxpacket: 8 [ 361.814400][ T496] usb 3-1: config index 0 descriptor too short (expected 8475, got 27) [ 361.823317][ T496] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 361.832573][ T496] usb 3-1: config 0 has no interface number 0 [ 361.839977][ T496] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 361.851102][ T496] usb 3-1: config 0 interface 200 has no altsetting 0 [ 361.954470][ T1828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 361.967439][ T1828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.978899][ T1828] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 361.989130][ T1828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.037795][ T1828] usb 5-1: config 0 descriptor?? [ 362.064391][ T496] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.1a [ 362.074057][ T496] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.082877][ T1828] hub 5-1:0.0: USB hub found [ 362.088118][ T496] usb 3-1: Product: syz [ 362.092274][ T496] usb 3-1: Manufacturer: syz [ 362.097113][ T496] usb 3-1: SerialNumber: syz [ 362.102453][ T496] usb 3-1: config 0 descriptor?? [ 362.110184][ T5709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5709 comm=syz.1.1592 [ 362.142801][ T5713] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1593'. [ 362.222186][ T5726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1595'. [ 362.284510][ T443] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 362.293450][ T443] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 362.300974][ T1828] hub 5-1:0.0: 1 port detected [ 362.306081][ T443] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 362.317818][ T443] usb 4-1: config 220 has no interface number 2 [ 362.324079][ T443] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 362.337529][ T443] usb 4-1: config 220 interface 0 has no altsetting 0 [ 362.344344][ T443] usb 4-1: config 220 interface 76 has no altsetting 0 [ 362.351206][ T443] usb 4-1: config 220 interface 1 has no altsetting 0 [ 362.364445][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.619763][ T496] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input17 [ 363.703976][ T496] usb 3-1: USB disconnect, device number 32 [ 363.815357][ T443] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 363.824761][ T443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.833075][ T443] usb 4-1: Product: syz [ 363.837413][ T443] usb 4-1: Manufacturer: syz [ 363.842361][ T443] usb 4-1: SerialNumber: syz [ 364.004427][ T375] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 364.036934][ T5744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5744 comm=syz.2.1601 [ 364.234924][ T443] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 364.241733][ T443] usb 4-1: No valid video chain found. [ 364.248703][ T443] usb 4-1: selecting invalid altsetting 0 [ 364.276406][ T375] usb 2-1: device descriptor read/64, error -71 [ 364.360001][ T443] usb 4-1: USB disconnect, device number 41 [ 364.396606][ T5760] overlayfs: './file1' not a directory [ 364.856001][ T375] usb 2-1: device descriptor read/64, error -71 [ 365.289629][ T443] usb 5-1: USB disconnect, device number 35 [ 365.709744][ T375] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 365.768638][ T5776] loop3: detected capacity change from 0 to 256 [ 365.835012][ T5776] exfat: Deprecated parameter 'namecase' [ 365.854325][ T5776] exfat: Deprecated parameter 'namecase' [ 365.899368][ T5776] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 365.955343][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 365.955361][ T30] audit: type=1400 audit(2000000046.170:711): avc: denied { append } for pid=5775 comm="syz.3.1611" path="/300/file0/file0/freezer.parent_freezing" dev="loop3" ino=1048666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 365.984260][ T375] usb 2-1: device descriptor read/64, error -71 [ 366.025022][ T30] audit: type=1400 audit(2000000046.170:712): avc: denied { map } for pid=5775 comm="syz.3.1611" path="/300/file0/file0/freezer.parent_freezing" dev="loop3" ino=1048666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 366.151584][ T5778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5778 comm=syz.0.1613 [ 366.238459][ T5785] 9pnet: Insufficient options for proto=fd [ 366.434275][ T375] usb 2-1: device descriptor read/64, error -71 [ 366.452583][ T5797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1619'. [ 366.472307][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1619'. [ 366.564399][ T375] usb usb2-port1: attempt power cycle [ 366.788746][ T5807] overlayfs: './file1' not a directory [ 368.013038][ T5812] loop3: detected capacity change from 0 to 512 [ 368.296689][ T5812] EXT4-fs (loop3): 1 truncate cleaned up [ 368.302453][ T5812] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 369.077177][ T5822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5822 comm=syz.2.1625 [ 369.407545][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 369.424782][ T579] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.425377][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 369.433599][ T30] audit: type=1400 audit(2000000049.640:713): avc: denied { bind } for pid=5854 comm="syz.3.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.477297][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 369.503212][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 369.513616][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 369.524740][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.535708][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.558374][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 369.564229][ T5861] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 369.569696][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 369.577440][ T5861] loop3: detected capacity change from 0 to 512 [ 369.671295][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 369.696744][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1636'. [ 369.714411][ T443] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 369.743351][ T30] audit: type=1400 audit(2000000049.950:714): avc: denied { create } for pid=5854 comm="syz.3.1636" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 369.743719][ T30] audit: type=1400 audit(2000000049.950:715): avc: denied { associate } for pid=5854 comm="syz.3.1636" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 369.834662][ T30] audit: type=1400 audit(2000000049.950:716): avc: denied { mounton } for pid=5854 comm="syz.3.1636" path="/305/file0" dev="tmpfs" ino=1713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 369.922713][ T443] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 370.031710][ T5861] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1636: inode has both inline data and extents flags [ 370.048619][ T5861] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1636: couldn't read orphan inode 15 (err -117) [ 370.083315][ T5861] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 370.260954][ T30] audit: type=1400 audit(2000000050.470:717): avc: denied { rmdir } for pid=284 comm="syz-executor" name="file0" dev="tmpfs" ino=1713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 370.266811][ T5873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5873 comm=syz.2.1641 [ 370.684325][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 370.931156][ T800] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 371.015257][ T800] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 371.063232][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1647'. [ 371.145410][ T5901] xt_hashlimit: size too large, truncated to 1048576 [ 371.193110][ T30] audit: type=1400 audit(2000000051.400:718): avc: denied { watch } for pid=5895 comm="syz.2.1647" path="/243/file0" dev="tmpfs" ino=1400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 372.172167][ T800] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 372.298606][ T800] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 372.317023][ T5915] loop3: detected capacity change from 0 to 512 [ 372.517322][ T5915] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 372.864235][ T5915] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 372.924561][ T800] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 372.977172][ T5915] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.244319][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 373.442284][ T5939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1653'. [ 373.511917][ T5928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5928 comm=syz.1.1657 [ 373.609861][ T30] audit: type=1400 audit(2000000053.820:719): avc: denied { execute } for pid=5953 comm="syz.4.1662" name="file1" dev="tmpfs" ino=1897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 373.632738][ T30] audit: type=1400 audit(2000000053.820:720): avc: denied { execute_no_trans } for pid=5953 comm="syz.4.1662" path="/340/file1" dev="tmpfs" ino=1897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 374.348526][ T487] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 375.444316][ T487] usb 5-1: Using ep0 maxpacket: 16 [ 375.570589][ T487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.633631][ T487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.635662][ T6001] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:e000:b001:3911:0:5efe:253.127.26.154 [ 375.653694][ T487] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 375.678308][ T5989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5989 comm=syz.3.1671 [ 375.684030][ T487] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 375.691326][ T30] audit: type=1400 audit(2000000055.890:721): avc: denied { ioctl } for pid=6004 comm="syz.0.1676" path="socket:[38573]" dev="sockfs" ino=38573 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 375.712466][ T487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.776520][ T487] usb 5-1: config 0 descriptor?? [ 375.801310][ T6011] overlayfs: missing 'lowerdir' [ 375.837319][ T30] audit: type=1400 audit(2000000056.050:722): avc: denied { setopt } for pid=5995 comm="syz.2.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 375.856859][ T6015] loop3: detected capacity change from 0 to 512 [ 376.444313][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 376.899490][ T5954] UDC core: couldn't find an available UDC or it's busy: -16 [ 376.914352][ T5954] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 376.947881][ T6015] EXT4-fs (loop3): Test dummy encryption mode enabled [ 376.985168][ T6015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 376.996471][ T6024] binder: 6023:6024 ioctl c0306201 0 returned -14 [ 377.030399][ T6024] binder: 6023:6024 ioctl c0306201 200000000240 returned -11 [ 377.052373][ T6015] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1681: bad orphan inode 131083 [ 377.064542][ T6015] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,journal_dev=0x0000000000000002,,errors=continue. Quota mode: none. [ 377.111243][ T6031] device syzkaller1 entered promiscuous mode [ 377.428883][ T6041] netlink: 'syz.3.1681': attribute type 4 has an invalid length. [ 377.457232][ T6041] netlink: 'syz.3.1681': attribute type 4 has an invalid length. [ 377.664709][ T487] usbhid 5-1:0.0: can't add hid device: -71 [ 377.670874][ T487] usbhid: probe of 5-1:0.0 failed with error -71 [ 377.680064][ T487] usb 5-1: USB disconnect, device number 36 [ 377.723668][ T579] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 377.834753][ T6] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 378.144447][ T579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 378.246073][ T579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.345640][ T579] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 378.402233][ T579] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.515288][ T579] usb 2-1: config 0 descriptor?? [ 378.715686][ T579] hub 2-1:0.0: USB hub found [ 378.974689][ T579] hub 2-1:0.0: 1 port detected [ 379.011737][ T6070] overlayfs: './file1' not a directory [ 379.148695][ T6071] loop3: detected capacity change from 0 to 512 [ 379.364281][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 379.484286][ T6] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 379.500207][ T6] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 379.509847][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.525420][ T6] usb 3-1: config 0 descriptor?? [ 379.664373][ T579] hub 2-1:0.0: activate --> -90 [ 379.814299][ T6] usb 3-1: string descriptor 0 read error: -71 [ 379.836989][ T6] usb 3-1: bad CDC descriptors [ 379.848198][ T6080] loop3: detected capacity change from 0 to 512 [ 379.871087][ T6] usb 3-1: USB disconnect, device number 33 [ 379.955211][ T6080] EXT4-fs (loop3): 1 truncate cleaned up [ 379.962114][ T6080] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 380.176020][ T1828] usb 2-1: USB disconnect, device number 38 [ 380.424274][ T6] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 380.574310][ T487] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 380.664296][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 380.784397][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.795045][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.071282][ T487] usb 3-1: Using ep0 maxpacket: 8 [ 381.086897][ T6120] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1537 sclass=netlink_xfrm_socket pid=6120 comm=syz.0.1711 [ 381.099946][ T6120] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1537 sclass=netlink_xfrm_socket pid=6120 comm=syz.0.1711 [ 381.112967][ T6120] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1537 sclass=netlink_xfrm_socket pid=6120 comm=syz.0.1711 [ 381.125947][ T6120] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1537 sclass=netlink_xfrm_socket pid=6120 comm=syz.0.1711 [ 381.138857][ T6120] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1537 sclass=netlink_xfrm_socket pid=6120 comm=syz.0.1711 [ 381.152047][ T6120] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1537 sclass=netlink_xfrm_socket pid=6120 comm=syz.0.1711 [ 381.164961][ T6120] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1537 sclass=netlink_xfrm_socket pid=6120 comm=syz.0.1711 [ 381.177841][ T6120] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1537 sclass=netlink_xfrm_socket pid=6120 comm=syz.0.1711 [ 381.190908][ T6120] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1537 sclass=netlink_xfrm_socket pid=6120 comm=syz.0.1711 [ 381.203854][ T6120] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1537 sclass=netlink_xfrm_socket pid=6120 comm=syz.0.1711 [ 381.224368][ T487] usb 3-1: config index 0 descriptor too short (expected 8475, got 27) [ 381.232872][ T487] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 381.241241][ T375] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 381.249398][ T487] usb 3-1: config 0 has no interface number 0 [ 381.256381][ T487] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 381.266509][ T6] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.275818][ T487] usb 3-1: config 0 interface 200 has no altsetting 0 [ 381.282886][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.291736][ T6] usb 4-1: Product: syz [ 381.296401][ T6] usb 4-1: Manufacturer: syz [ 381.301444][ T6] usb 4-1: SerialNumber: syz [ 381.449528][ T487] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.1a [ 381.462292][ T487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.483970][ T487] usb 3-1: Product: syz [ 381.492519][ T487] usb 3-1: Manufacturer: syz [ 381.500353][ T487] usb 3-1: SerialNumber: syz [ 381.514334][ T375] usb 5-1: Using ep0 maxpacket: 16 [ 382.329596][ T487] usb 3-1: config 0 descriptor?? [ 382.394466][ T375] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 382.402877][ T375] usb 5-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 382.413216][ T375] usb 5-1: config 0 has no interface number 0 [ 382.419596][ T6] usb 4-1: 0:2 : does not exist [ 382.507893][ T6] usb 4-1: USB disconnect, device number 42 [ 382.575274][ T6105] UDC core: couldn't find an available UDC or it's busy: -16 [ 382.582799][ T6105] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 382.584385][ T375] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 382.599812][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.599839][ T375] usb 5-1: Product: syz [ 382.599852][ T375] usb 5-1: Manufacturer: syz [ 382.616811][ T375] usb 5-1: SerialNumber: syz [ 382.621959][ T375] usb 5-1: config 0 descriptor?? [ 382.624266][ T579] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 382.665086][ T375] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 382.671481][ T375] usb 5-1: No valid video chain found. [ 382.695086][ T487] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input18 [ 382.710124][ T487] usb 3-1: USB disconnect, device number 34 [ 382.864296][ T6] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 382.914343][ T579] usb 1-1: device descriptor read/64, error -71 [ 382.924881][ T443] usb 5-1: USB disconnect, device number 37 [ 383.144307][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 383.264375][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.275660][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.285809][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 383.299913][ T6] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 383.309654][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.324282][ T579] usb 1-1: device descriptor read/64, error -71 [ 383.324737][ T6] usb 4-1: config 0 descriptor?? [ 383.524263][ T443] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 383.604301][ T579] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 383.774249][ T443] usb 2-1: Using ep0 maxpacket: 16 [ 383.874274][ T579] usb 1-1: device descriptor read/64, error -71 [ 383.894284][ T443] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.914240][ T443] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.074444][ T443] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.084005][ T443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.092355][ T443] usb 2-1: Product: syz [ 384.097277][ T443] usb 2-1: Manufacturer: syz [ 384.101993][ T443] usb 2-1: SerialNumber: syz [ 384.124460][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 384.130435][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 384.145364][ T6] usb 4-1: USB disconnect, device number 43 [ 384.264370][ T579] usb 1-1: device descriptor read/64, error -71 [ 384.385409][ T579] usb usb1-port1: attempt power cycle [ 384.474354][ T443] usb 2-1: 0:2 : does not exist [ 384.596546][ T443] usb 2-1: USB disconnect, device number 39 [ 384.701085][ T6194] overlayfs: './file1' not a directory [ 384.956882][ T579] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 385.184683][ T579] usb 1-1: device descriptor read/8, error -71 [ 385.404308][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 385.824307][ T579] usb 1-1: device descriptor read/8, error -71 [ 386.062292][ T6215] overlayfs: './file1' not a directory [ 386.314334][ T292] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 386.364443][ T579] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 386.624645][ T579] usb 1-1: config 116 has an invalid interface descriptor of length 4, skipping [ 386.643592][ T579] usb 1-1: config 116 has 0 interfaces, different from the descriptor's value: 1 [ 386.682224][ T579] usb 1-1: New USB device found, idVendor=1199, idProduct=9001, bcdDevice=51.a2 [ 387.061624][ T579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.084439][ T292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.104305][ T292] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 387.148589][ T6] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 387.294415][ T292] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.326289][ T6204] UDC core: couldn't find an available UDC or it's busy: -16 [ 387.344282][ T292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.352590][ T292] usb 3-1: Product: syz [ 387.357280][ T6204] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 387.369129][ T30] audit: type=1400 audit(2000000067.580:723): avc: denied { connect } for pid=6227 comm="syz.1.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 387.375126][ T292] usb 3-1: Manufacturer: syz [ 387.399723][ T496] usb 1-1: USB disconnect, device number 39 [ 387.404094][ T292] usb 3-1: SerialNumber: syz [ 387.465202][ T292] cdc_mbim 3-1:1.0: skipping garbage [ 387.514328][ T6] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 387.527918][ T6] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 387.545242][ T6] usb 4-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 387.566959][ T6] usb 4-1: config 220 has no interface number 2 [ 387.581679][ T6] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 387.607605][ T6] usb 4-1: config 220 interface 0 has no altsetting 0 [ 387.617931][ T6] usb 4-1: config 220 interface 76 has no altsetting 0 [ 387.625081][ T6] usb 4-1: config 220 interface 1 has no altsetting 0 [ 388.300118][ T6208] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 388.760367][ T6] usb 4-1: string descriptor 0 read error: -71 [ 388.777911][ T6] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 388.802268][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.844400][ T6] usb 4-1: can't set config #220, error -71 [ 388.861618][ T6] usb 4-1: USB disconnect, device number 44 [ 389.061581][ T6263] overlayfs: './file1' not a directory [ 389.195672][ T579] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 389.309656][ T6208] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 389.394476][ T292] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 389.443631][ T6265] netlink: 'syz.1.1754': attribute type 16 has an invalid length. [ 389.454488][ T800] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 389.516889][ T292] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 389.584780][ T6256] loop3: detected capacity change from 0 to 40427 [ 389.654281][ T579] usb 5-1: Using ep0 maxpacket: 16 [ 390.019418][ T800] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 390.054824][ T6256] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 390.062605][ T6256] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 390.091462][ T6265] netlink: 'syz.1.1754': attribute type 17 has an invalid length. [ 390.100718][ T6256] F2FS-fs (loop3): invalid crc value [ 390.124521][ T579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.146700][ T6256] F2FS-fs (loop3): Found nat_bits in checkpoint [ 390.165489][ T292] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, fa:83:3f:06:bb:35 [ 390.184489][ T496] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 390.192150][ T579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.202605][ T496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 390.221334][ T30] audit: type=1400 audit(2000000070.430:724): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 390.263682][ T579] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.277844][ T30] audit: type=1400 audit(2000000070.460:725): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.309971][ T579] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 390.324583][ T6256] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 390.347278][ T6256] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 390.378133][ T579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.390835][ T579] usb 5-1: config 0 descriptor?? [ 390.404967][ T30] audit: type=1400 audit(2000000070.460:726): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=12360 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 390.419132][ T496] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 390.428874][ T30] audit: type=1400 audit(2000000070.460:727): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=12360 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 390.467333][ T30] audit: type=1400 audit(2000000070.460:728): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=12360 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 390.554881][ T6283] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 390.585915][ T6283] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 390.774518][ T30] audit: type=1400 audit(2000000070.570:729): avc: denied { read } for pid=6278 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.850204][ T30] audit: type=1400 audit(2000000070.570:730): avc: denied { open } for pid=6278 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.929209][ T30] audit: type=1400 audit(2000000070.570:731): avc: denied { getattr } for pid=6278 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.958637][ T496] usb 3-1: USB disconnect, device number 35 [ 390.970061][ T496] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 391.026206][ T30] audit: type=1400 audit(2000000070.650:732): avc: denied { ioctl } for pid=6249 comm="syz.4.1750" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.051987][ T579] usbhid 5-1:0.0: can't add hid device: -71 [ 391.058924][ T579] usbhid: probe of 5-1:0.0 failed with error -71 [ 391.079035][ T579] usb 5-1: USB disconnect, device number 38 [ 392.155917][ T487] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.729156][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 393.729174][ T30] audit: type=1400 audit(2000000073.940:742): avc: denied { read write } for pid=6305 comm="syz.1.1760" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.765937][ T30] audit: type=1400 audit(2000000073.940:743): avc: denied { open } for pid=6305 comm="syz.1.1760" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 395.294759][ T6358] netlink: 'syz.2.1771': attribute type 4 has an invalid length. [ 396.597612][ T6377] overlayfs: './file1' not a directory [ 396.818375][ T6381] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 397.274787][ T6387] overlayfs: './file1' not a directory [ 397.995220][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 398.378405][ T6] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 398.661017][ T6416] kvm [6415]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0 [ 398.670280][ T6416] kvm [6415]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0 [ 398.682022][ T6416] kvm [6415]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111 [ 398.866359][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.877525][ T6] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 398.907217][ T6430] loop3: detected capacity change from 0 to 128 [ 398.911322][ T6428] xt_hashlimit: size too large, truncated to 1048576 [ 398.946501][ T6430] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 398.959073][ T6430] FAT-fs (loop3): Filesystem has been set read-only [ 398.966367][ T292] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 398.981842][ T6430] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 399.052061][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 399.071431][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.077953][ T6440] device syzkaller0 entered promiscuous mode [ 399.079764][ T6] usb 5-1: Product: syz [ 399.079780][ T6] usb 5-1: Manufacturer: syz [ 399.079793][ T6] usb 5-1: SerialNumber: syz [ 399.100020][ T30] audit: type=1400 audit(2000000847.571:744): avc: denied { relabelfrom } for pid=6439 comm="syz.3.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 399.122430][ T30] audit: type=1400 audit(2000000847.571:745): avc: denied { relabelto } for pid=6439 comm="syz.3.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 399.176762][ T6] cdc_mbim 5-1:1.0: skipping garbage [ 399.214118][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 399.283317][ T6450] loop3: detected capacity change from 0 to 256 [ 399.357174][ T292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.368526][ T6404] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 399.372514][ T292] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.585538][ T292] usb 3-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.48 [ 399.597906][ T292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.619620][ T292] usb 3-1: Product: syz [ 399.624331][ T292] usb 3-1: Manufacturer: syz [ 399.643080][ T292] usb 3-1: SerialNumber: syz [ 399.977585][ T6560] ================================================================== [ 399.985804][ T6560] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 399.994078][ T6560] Read of size 8 at addr ffff88812bb127c0 by task syz.3.1854/6560 [ 400.001913][ T6560] [ 400.004348][ T6560] CPU: 0 PID: 6560 Comm: syz.3.1854 Not tainted syzkaller #0 [ 400.012358][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.022569][ T6560] Call Trace: [ 400.025967][ T6560] [ 400.028929][ T6560] __dump_stack+0x21/0x30 [ 400.033291][ T6560] dump_stack_lvl+0x110/0x170 [ 400.038005][ T6560] ? show_regs_print_info+0x20/0x20 [ 400.043245][ T6560] ? load_image+0x3e0/0x3e0 [ 400.047905][ T6560] print_address_description+0x7f/0x2c0 [ 400.053489][ T6560] ? tc_setup_flow_action+0x870/0x3240 [ 400.058989][ T6560] kasan_report+0xf1/0x140 [ 400.063546][ T6560] ? tc_setup_flow_action+0x870/0x3240 [ 400.069135][ T6560] __asan_report_load8_noabort+0x14/0x20 [ 400.075173][ T6560] tc_setup_flow_action+0x870/0x3240 [ 400.080713][ T6560] mall_replace_hw_filter+0x2cc/0x8b0 [ 400.086084][ T6560] ? pcpu_block_update_hint_alloc+0x8c4/0xc50 [ 400.092155][ T6560] ? mall_set_parms+0x520/0x520 [ 400.097176][ T6560] ? tcf_exts_destroy+0xb0/0xb0 [ 400.102043][ T6560] ? pcpu_alloc+0x1170/0x16e0 [ 400.106716][ T6560] ? mall_set_parms+0x1e8/0x520 [ 400.111711][ T6560] mall_change+0x544/0x760 [ 400.116381][ T6560] ? __kasan_check_write+0x14/0x20 [ 400.121773][ T6560] ? mall_get+0xa0/0xa0 [ 400.125932][ T6560] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 400.128325][ T292] usb 3-1: BAAD SPEAKERPHONE c_chmask mismatch [ 400.131923][ T6560] tc_new_tfilter+0x12e5/0x18e0 [ 400.131959][ T6560] ? tcf_gate_entry_destructor+0x20/0x20 [ 400.138334][ T292] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 400.142984][ T6560] ? security_capable+0x87/0xb0 [ 400.143014][ T6560] ? ns_capable+0x8c/0xf0 [ 400.157123][ T292] usb 3-1: USB disconnect, device number 36 [ 400.160603][ T6560] ? netlink_net_capable+0x125/0x160 [ 400.176294][ T6560] ? tcf_gate_entry_destructor+0x20/0x20 [ 400.181944][ T6560] rtnetlink_rcv_msg+0x871/0xce0 [ 400.186980][ T6560] ? rtnetlink_bind+0x80/0x80 [ 400.191652][ T6560] ? avc_has_perm_noaudit+0x391/0x490 [ 400.197024][ T6560] ? memcpy+0x56/0x70 [ 400.201000][ T6560] ? avc_has_perm_noaudit+0x30b/0x490 [ 400.206361][ T6560] ? arch_stack_walk+0xee/0x140 [ 400.211203][ T6560] ? avc_denied+0x1b0/0x1b0 [ 400.215698][ T6560] ? stack_trace_save+0xa6/0xf0 [ 400.220781][ T6560] ? avc_has_perm+0x163/0x250 [ 400.225599][ T6560] ? avc_has_perm_noaudit+0x490/0x490 [ 400.230978][ T6560] ? x64_sys_call+0x4b/0x9a0 [ 400.235580][ T6560] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 400.240975][ T6560] netlink_rcv_skb+0x1f5/0x440 [ 400.245741][ T6560] ? rtnetlink_bind+0x80/0x80 [ 400.250423][ T6560] ? netlink_ack+0xb50/0xb50 [ 400.255041][ T6560] ? __netlink_lookup+0x387/0x3b0 [ 400.260064][ T6560] rtnetlink_rcv+0x1c/0x20 [ 400.264469][ T6560] netlink_unicast+0x876/0xa40 [ 400.269226][ T6560] netlink_sendmsg+0x879/0xb80 [ 400.274000][ T6560] ? netlink_getsockopt+0x530/0x530 [ 400.279187][ T6560] ? do_futex+0xde8/0x2800 [ 400.283596][ T6560] ? security_socket_sendmsg+0x82/0xa0 [ 400.289068][ T6560] ? netlink_getsockopt+0x530/0x530 [ 400.294339][ T6560] ____sys_sendmsg+0x5b7/0x8f0 [ 400.299118][ T6560] ? __sys_sendmsg_sock+0x40/0x40 [ 400.304136][ T6560] ? import_iovec+0x7c/0xb0 [ 400.308630][ T6560] ___sys_sendmsg+0x236/0x2e0 [ 400.313313][ T6560] ? __sys_sendmsg+0x280/0x280 [ 400.318069][ T6560] ? sock_show_fdinfo+0xa0/0xa0 [ 400.322931][ T6560] ? __fdget+0x1a1/0x230 [ 400.327170][ T6560] __x64_sys_sendmsg+0x206/0x2f0 [ 400.332100][ T6560] ? ___sys_sendmsg+0x2e0/0x2e0 [ 400.336945][ T6560] ? __kasan_check_write+0x14/0x20 [ 400.342066][ T6560] ? switch_fpu_return+0x15d/0x2c0 [ 400.347172][ T6560] x64_sys_call+0x4b/0x9a0 [ 400.351612][ T6560] do_syscall_64+0x4c/0xa0 [ 400.356020][ T6560] ? clear_bhb_loop+0x50/0xa0 [ 400.360682][ T6560] ? clear_bhb_loop+0x50/0xa0 [ 400.365350][ T6560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.371231][ T6560] RIP: 0033:0x7f970d0ac799 [ 400.375647][ T6560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.395255][ T6560] RSP: 002b:00007f970bb07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.403747][ T6560] RAX: ffffffffffffffda RBX: 00007f970d325fa0 RCX: 00007f970d0ac799 [ 400.412177][ T6560] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 400.420249][ T6560] RBP: 00007f970d142bd9 R08: 0000000000000000 R09: 0000000000000000 [ 400.428327][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.436520][ T6560] R13: 00007f970d326038 R14: 00007f970d325fa0 R15: 00007fffc21d29f8 [ 400.444532][ T6560] [ 400.447572][ T6560] [ 400.449918][ T6560] Allocated by task 6560: [ 400.454438][ T6560] __kasan_kmalloc+0xda/0x110 [ 400.459145][ T6560] __kmalloc+0x13d/0x2c0 [ 400.463501][ T6560] tcf_idr_create+0x5f/0x790 [ 400.468121][ T6560] tcf_idr_create_from_flags+0x61/0x70 [ 400.473610][ T6560] tcf_gact_init+0x342/0x570 [ 400.478228][ T6560] tcf_action_init_1+0x3ff/0x6b0 [ 400.483369][ T6560] tcf_action_init+0x233/0x7a0 [ 400.488174][ T6560] tcf_exts_validate+0x24a/0x580 [ 400.493145][ T6560] mall_set_parms+0x48/0x520 [ 400.497775][ T6560] mall_change+0x478/0x760 [ 400.502231][ T6560] tc_new_tfilter+0x12e5/0x18e0 [ 400.507104][ T6560] rtnetlink_rcv_msg+0x871/0xce0 [ 400.512255][ T6560] netlink_rcv_skb+0x1f5/0x440 [ 400.517048][ T6560] rtnetlink_rcv+0x1c/0x20 [ 400.521499][ T6560] netlink_unicast+0x876/0xa40 [ 400.526392][ T6560] netlink_sendmsg+0x879/0xb80 [ 400.531181][ T6560] ____sys_sendmsg+0x5b7/0x8f0 [ 400.535967][ T6560] ___sys_sendmsg+0x236/0x2e0 [ 400.540762][ T6560] __x64_sys_sendmsg+0x206/0x2f0 [ 400.545707][ T6560] x64_sys_call+0x4b/0x9a0 [ 400.550131][ T6560] do_syscall_64+0x4c/0xa0 [ 400.554627][ T6560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.560630][ T6560] [ 400.562972][ T6560] The buggy address belongs to the object at ffff88812bb12700 [ 400.562972][ T6560] which belongs to the cache kmalloc-192 of size 192 [ 400.577045][ T6560] The buggy address is located 0 bytes to the right of [ 400.577045][ T6560] 192-byte region [ffff88812bb12700, ffff88812bb127c0) [ 400.590781][ T6560] The buggy address belongs to the page: [ 400.596426][ T6560] page:ffffea0004aec480 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12bb12 [ 400.606788][ T6560] flags: 0x4000000000000200(slab|zone=1) [ 400.612547][ T6560] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100042c00 [ 400.621510][ T6560] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 400.630100][ T6560] page dumped because: kasan: bad access detected [ 400.636521][ T6560] page_owner tracks the page as allocated [ 400.642231][ T6560] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 2159, ts 163308253391, free_ts 163297904679 [ 400.658641][ T6560] post_alloc_hook+0x192/0x1b0 [ 400.663413][ T6560] prep_new_page+0x1c/0x110 [ 400.667913][ T6560] get_page_from_freelist+0x2d3a/0x2dc0 [ 400.673458][ T6560] __alloc_pages+0x1a2/0x460 [ 400.678135][ T6560] new_slab+0xa1/0x4d0 [ 400.682288][ T6560] ___slab_alloc+0x381/0x810 [ 400.686891][ T6560] __slab_alloc+0x49/0x90 [ 400.691218][ T6560] kmem_cache_alloc_trace+0x146/0x270 [ 400.696587][ T6560] alloc_pipe_info+0xe7/0x4b0 [ 400.701451][ T6560] fifo_open+0x11e/0xab0 [ 400.705715][ T6560] do_dentry_open+0x834/0x1010 [ 400.710509][ T6560] vfs_open+0x73/0x80 [ 400.714615][ T6560] path_openat+0x26a6/0x2f20 [ 400.719310][ T6560] do_filp_open+0x1e2/0x410 [ 400.723900][ T6560] do_sys_openat2+0x15e/0x7f0 [ 400.728665][ T6560] __x64_sys_openat+0x136/0x160 [ 400.733521][ T6560] page last free stack trace: [ 400.738199][ T6560] free_unref_page_prepare+0x542/0x550 [ 400.743939][ T6560] free_unref_page+0xae/0x540 [ 400.748707][ T6560] __free_pages+0x6c/0x100 [ 400.753125][ T6560] free_pages+0x82/0x90 [ 400.757367][ T6560] tlb_finish_mmu+0x258/0x310 [ 400.762043][ T6560] exit_mmap+0x43b/0x8b0 [ 400.766288][ T6560] __mmput+0x93/0x320 [ 400.770444][ T6560] mmput+0x50/0x150 [ 400.774250][ T6560] do_exit+0x9f2/0x27e0 [ 400.778491][ T6560] do_group_exit+0x141/0x310 [ 400.783252][ T6560] __x64_sys_exit_group+0x3f/0x40 [ 400.788536][ T6560] x64_sys_call+0x832/0x9a0 [ 400.793131][ T6560] do_syscall_64+0x4c/0xa0 [ 400.797642][ T6560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.803717][ T6560] [ 400.806038][ T6560] Memory state around the buggy address: [ 400.811761][ T6560] ffff88812bb12680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 400.820090][ T6560] ffff88812bb12700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.828148][ T6560] >ffff88812bb12780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 400.836199][ T6560] ^ [ 400.842351][ T6560] ffff88812bb12800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.850408][ T6560] ffff88812bb12880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 400.858463][ T6560] ================================================================== [ 400.866642][ T6560] Disabling lock debugging due to kernel taint [ 400.875047][ T6582] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 400.887446][ T30] audit: type=1400 audit(2000000849.451:746): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.974219][ T6] cdc_mbim 5-1:1.0: bind() failure [ 400.980629][ T6] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 400.987808][ T6] cdc_ncm 5-1:1.1: bind() failure [ 400.994239][ T6] usb 5-1: USB disconnect, device number 39 [ 401.203672][ T6580] xt_hashlimit: size too large, truncated to 1048576 [ 402.871546][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 404.090555][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!