last executing test programs: 6.528760141s ago: executing program 1 (id=5743): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2200054, &(0x7f0000000180), 0x4, 0x244, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0x8102, &(0x7f0000000080), 0x7, 0x50a, &(0x7f00000001c0)="$eJzs3d9rY1kdAPDvvW3mZ9d00Yd1wbW4K51FJ2m37m7xYXcF0acFdX2vpU1LadqUJp2dlkW6+AcIMqjgk0++CP4BgsyfIMKAvouKIs6M8+CLRm5yM9PExHZq0mDz+cBpzrkn937PScnNOTmX3AAm1lxEvBcR70bE6xFRzLeneYrjdsqe9/jRR2tZSqLZ/OBvSST5ts6xkvzxZr7btYj41tcj4mGz2Ru3fni0vVqtVvbzcrmxs1euHx7d3tpZ3axsVnaXlhbfWn57+c3lhXP37c6J/GxEvPPVP/3w+z/72ju/+uKHv1/5y63vJnn/o6cfw9R+TQqt16JjOiL2RxFsDKby/hSywr1xtwYAgNOk+Rjuc63xfzGmWqM5AAAA4DJpvjvTWrtpAgAAAJdWGhEzkaSl/FqAmUjTUql9De+n4kZardUbX9ioHeyuZ3URs1FIN7aqlYX8WuHZKCRZeTG/xrZTfqOnvBQRL0bEveL1Vrm0Vquuj/vLDwAAAJgQN3vm/0+K7fn/maQjbhwAAAAwPLPjbgAAAAAwcub/AAAAcPmZ/wMAAMCl9o33389Ss3P/6/U7hwfbtTu31yv17dLOwVpprba/V9qs1TZbv9m3c9rxqrXa3pdi9+BuuVGpN8r1w6OVndrBbmNlq+sW2AAAAMAFevGz93+XRMTxl6+3UiQRV/K6wpjbBozWc/2E5x+f5q6Moi3AxZoadwOAsZkedwOAsTHHB5JT6gdevPPr4bcFAAAYjflP96z/h/V/mBRu4QmTy/o/TK4+6/8uCYAJUTACgIk3+vX/ZvO5GgQAAAzdTCslaSlfC5yJNC2VIl5o3RagkGxsVSsLEfGJiPhtsXA1Ky+29kxOnTMAAAAAAAAAAAAAAAAAAAAAAAAAAG3NZhLNc3hynp0AAACAsYhI/5zk9/+aL7420/v9wJXkH8XWY0R8+JMPfnR3tdHYX8y2P3y6vfHjfPsbp3zZ4GbjAAAAMDrTz7KdeXpnHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw/T40UdrnXSRcf/6lYiY7Rd/Oq61Hq9FISJu/D2J6RP7JRExNYT4xx9HxEv94idZs2I2b0Vv/DQiro85/s0hxIdJdj87/7zX7/2Xxlzrsf/7bzpP/6uT57/sdHAyfuf8NzXg/PfCGWO8/OAX5YHxP454ebr/+acTPxkQ/9WBEa92lb7z7aOjQc9s/jRivu/nT9IVq9zY2SvXD49ub+2sblY2K7tLS4tvLb+9/ObyQnljq1rJ//aN8YPP/PJfrUzav/83BsSfPaX/rw3sf7d/Prj76JPtbKFf/Fuvdsefy+teGhA/zT/7Pp/ns/r5Tv64nT/plZ//5pU8+x8fWVn89QH9P+3/f+uM/X/9m9/7wxmfCgBcgPrh0fZqtVrZH3lmrn9VZ0R0Uc2QOX8mGfIBV4rt//tUdFd1hv7nP3I2lcqO0F2VDVvH/Rr+32TGd04CAABG49mg/wxP7lpwvzq6RgEAAAAAAAAAAAAAAAAAAMCEuYifE+uNeTyergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Ff/DgAA//+L5Mex") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x13, r1, 0x0) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) 6.382649864s ago: executing program 1 (id=5746): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5d, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x60}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) 5.929533151s ago: executing program 4 (id=5753): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)='7', 0x2, 0x0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 5.870323547s ago: executing program 4 (id=5755): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000002580)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r0, 0x7ffffb, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfd14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 5.020516438s ago: executing program 2 (id=5762): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.840042713s ago: executing program 4 (id=5764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000faffffffb703000008400000b70600000000feff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x2000, 0x0) 4.603865293s ago: executing program 3 (id=5766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.491239592s ago: executing program 0 (id=5742): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b7000000f9ffffffbca30000000000005403000020feffff720af0fff8ffffff71a4f0ff000000002f030000000000002e300600000000002604fdffffe3000014030000100000001e130000000000007a0a00fe00fcff1f0f31000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208ff0f0d2cd829e654400000a8000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bde22b09e64c106d5abdfa1ceb333ae64ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae300010000000000008189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6070ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd01dac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d550030511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a0083648785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e509cf07c1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867bf15e62c4dfd1590d64da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d32662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56399678f12205db653a536f0100e0eda300a43a13bd1b9f3343405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b1f000000546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94c4dab649692456463ca74aa6ad4bf50300000028143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc7644dabb3cef613ac2e482d980b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2cb8ae40c011de5db6405c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8ddf5f4da70000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6ecf078c900dca2cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af3421175e5600f43a1179484502009759a5c12ee64bf9264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5dc8d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed6231535900000000475509731cf23f7d693b4f67833f605a3a7d7aaa198d8861b8c048dc2259f819f3d55ae5bb018b46553203c2c15705e9e575d98de68843e35d97fe98a47c865ca3fed932"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe2c, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.200611707s ago: executing program 0 (id=5767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 4.062193978s ago: executing program 0 (id=5768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 4.061459048s ago: executing program 4 (id=5769): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$selinux_avc_hash_stats(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 3.919814651s ago: executing program 0 (id=5770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7a680300) 3.900350122s ago: executing program 1 (id=5771): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000001c0)) 3.743902815s ago: executing program 1 (id=5772): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0486c000000000000109022400011100000009040000010300000009210000000122050009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000004c0)={0x20, 0x7, 0x5, {0x5, 0x8, "f55148"}}, 0x0, 0x0, 0x0}, 0x0) 3.624214195s ago: executing program 0 (id=5773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x60b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 3.076799071s ago: executing program 3 (id=5774): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x27, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000009c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x120) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 2.755501698s ago: executing program 2 (id=5775): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc1}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc1}) 2.609210811s ago: executing program 3 (id=5776): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000b500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) keyctl$revoke(0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, &(0x7f0000000340)={0x3, 0x1, 0xcaf, 0x200, 0x5, 0x6df, 0x0, 0xc7}, 0x0, &(0x7f00000003c0), &(0x7f0000000540)={0x0}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r4 = io_uring_setup(0x70d9, &(0x7f0000000700)={0x0, 0xcff9, 0x2, 0x2, 0x269}) io_uring_enter(r4, 0x6df6, 0x0, 0xb, &(0x7f0000000000), 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sync_file_range(r4, 0x0, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'tunl0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000004c0)=@bridge_setlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}]}, 0x4c}}, 0x0) 2.575166504s ago: executing program 2 (id=5777): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000000)=""/68, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/86, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) 2.49522581s ago: executing program 2 (id=5778): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "860e0a31"}]}}, 0x0}, 0x0) 2.403363598s ago: executing program 4 (id=5779): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x0, 0x0, 0x1, "c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000480)={0x0, 0x0, 0x6, "127f93846b27"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.240181412s ago: executing program 3 (id=5780): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x98, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x9800}}, 0x26) 2.233258742s ago: executing program 3 (id=5781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 2.190966846s ago: executing program 3 (id=5782): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x100, 0xf7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0xf, 0x100, 0x10, 0x10, 0xc}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.796147129s ago: executing program 1 (id=5783): syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf20509050b02"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) 526.496576ms ago: executing program 0 (id=5784): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 511.256597ms ago: executing program 2 (id=5785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 460.622911ms ago: executing program 2 (id=5786): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, r3}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0xc018aec0, &(0x7f0000000140)={0x10000}) 153.476857ms ago: executing program 1 (id=5787): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x27, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000009c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x120) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 0s ago: executing program 4 (id=5788): socket$packet(0x11, 0x0, 0x300) mlockall(0x1) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffcff, 0x0, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) kernel console output (not intermixed with test programs): 0 audit(2000000755.825:4305): avc: denied { connect } for pid=21506 comm="syz.3.5312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2436.309647][ T30] audit: type=1400 audit(2000000755.825:4306): avc: denied { write } for pid=21506 comm="syz.3.5312" path="socket:[109406]" dev="sockfs" ino=109406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2436.435908][ T30] audit: type=1400 audit(2000000756.035:4307): avc: denied { read write } for pid=21512 comm="syz.3.5314" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2436.439447][ T20] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x4 [ 2436.469429][ T20] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x2 [ 2436.475778][ T30] audit: type=1400 audit(2000000756.035:4308): avc: denied { open } for pid=21512 comm="syz.3.5314" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2436.483302][ T20] hid-generic 0000:3000000:0000.0063: unknown main item tag 0x3 [ 2436.511355][ T20] hid-generic 0000:3000000:0000.0063: hidraw1: HID v0.00 Device [sy] on syz0 [ 2436.963934][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 2437.255858][ T301] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2437.275854][T15317] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2437.395797][ T9987] Bluetooth: hci0: command 0x1003 tx timeout [ 2437.402081][T21489] Bluetooth: hci0: sending frame failed (-49) [ 2437.636067][T15317] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2437.647115][T15317] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2437.665906][ T301] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2437.674067][ T301] usb 4-1: config 0 has no interface number 0 [ 2437.736009][T15317] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2437.745952][T15317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2437.754090][T15317] usb 2-1: SerialNumber: syz [ 2437.845912][ T301] usb 4-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=9b.0a [ 2437.858188][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2437.867214][ T301] usb 4-1: Product: syz [ 2437.871344][ T301] usb 4-1: Manufacturer: syz [ 2437.876364][ T301] usb 4-1: SerialNumber: syz [ 2437.882462][ T301] usb 4-1: config 0 descriptor?? [ 2437.927379][ T301] ftdi_sio 4-1:0.1: FTDI USB Serial Device converter detected [ 2437.935343][ T301] usb 4-1: Detected FT-X [ 2438.017341][T15317] usb 2-1: 0:2 : does not exist [ 2438.345879][ T301] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2438.365885][ T301] ftdi_sio 4-1:0.1: GPIO initialisation failed: -71 [ 2438.375965][ T301] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2438.386484][ T301] usb 4-1: USB disconnect, device number 86 [ 2438.395553][ T301] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2438.407093][ T301] ftdi_sio 4-1:0.1: device disconnected [ 2438.442619][ T9987] usb 2-1: USB disconnect, device number 81 [ 2438.590465][T21557] bridge0: port 1(bridge_slave_0) entered blocking state [ 2438.597876][T21557] bridge0: port 1(bridge_slave_0) entered disabled state [ 2438.606248][T21557] device bridge_slave_0 entered promiscuous mode [ 2438.614143][T21557] bridge0: port 2(bridge_slave_1) entered blocking state [ 2438.621177][T21557] bridge0: port 2(bridge_slave_1) entered disabled state [ 2438.629123][T21557] device bridge_slave_1 entered promiscuous mode [ 2438.772976][T21557] bridge0: port 2(bridge_slave_1) entered blocking state [ 2438.780424][T21557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2438.787916][T21557] bridge0: port 1(bridge_slave_0) entered blocking state [ 2438.796169][T21557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2438.848011][T11547] bridge0: port 1(bridge_slave_0) entered disabled state [ 2438.856933][T11547] bridge0: port 2(bridge_slave_1) entered disabled state [ 2438.867775][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2438.875596][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2438.893509][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2438.902773][T11547] bridge0: port 1(bridge_slave_0) entered blocking state [ 2438.911028][T11547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2438.926987][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2438.936364][T11547] bridge0: port 2(bridge_slave_1) entered blocking state [ 2438.943520][T11547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2438.994394][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2439.013436][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2439.058698][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2439.084274][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2439.096911][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2439.104992][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2439.117887][T21557] device veth0_vlan entered promiscuous mode [ 2439.142440][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2439.158667][T21557] device veth1_macvtap entered promiscuous mode [ 2439.180763][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2439.215406][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2439.289314][T21577] loop3: detected capacity change from 0 to 256 [ 2439.310256][T21579] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5333'. [ 2439.324299][T21579] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5333'. [ 2439.335147][T21579] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5333'. [ 2439.475777][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 2439.482068][T21489] Bluetooth: hci0: sending frame failed (-49) [ 2439.505059][T21582] binder: 21570:21582 ioctl c0306201 0 returned -14 [ 2440.355949][T21327] plantronics 0003:047F:FFFF.0060: timeout initializing reports [ 2440.738093][T21588] loop3: detected capacity change from 0 to 256 [ 2440.812865][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2440.812926][ T30] audit: type=1400 audit(2000000760.405:4332): avc: denied { mount } for pid=21587 comm="syz.3.5342" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 2440.846860][T20686] usb 5-1: USB disconnect, device number 76 [ 2440.856660][T21588] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 2441.400270][ T461] device bridge_slave_1 left promiscuous mode [ 2441.410668][ T461] bridge0: port 2(bridge_slave_1) entered disabled state [ 2441.439520][T21588] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 198) [ 2441.451818][ T461] device bridge_slave_0 left promiscuous mode [ 2441.459790][ T461] bridge0: port 1(bridge_slave_0) entered disabled state [ 2441.486566][ T461] device veth1_macvtap left promiscuous mode [ 2441.493585][ T461] device veth0_vlan left promiscuous mode [ 2441.500707][ T30] audit: type=1400 audit(2000000761.095:4333): avc: denied { unmount } for pid=20789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 2441.556053][T20686] Bluetooth: hci0: command 0x1009 tx timeout [ 2441.609851][T21599] loop3: detected capacity change from 0 to 512 [ 2441.713650][T21599] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 2441.739419][T21599] ext4 filesystem being mounted at /53/bus supports timestamps until 2038 (0x7fffffff) [ 2441.755800][ T30] audit: type=1400 audit(2000000761.345:4334): avc: denied { read write } for pid=21598 comm="syz.3.5346" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2441.800582][ T30] audit: type=1400 audit(2000000761.345:4335): avc: denied { open } for pid=21598 comm="syz.3.5346" path="/53/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2441.827422][T15317] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2441.837013][ T30] audit: type=1400 audit(2000000761.345:4336): avc: denied { ioctl } for pid=21598 comm="syz.3.5346" path="/53/bus/file2" dev="loop3" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2441.907677][ T30] audit: type=1326 audit(2000000761.505:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff235f2dff9 code=0x7ffc0000 [ 2441.956049][ T30] audit: type=1326 audit(2000000761.505:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7ff235f2dff9 code=0x7ffc0000 [ 2441.980984][ T30] audit: type=1326 audit(2000000761.505:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff235f2dff9 code=0x7ffc0000 [ 2442.005457][ T30] audit: type=1326 audit(2000000761.525:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff235f2dff9 code=0x7ffc0000 [ 2442.075870][T15317] usb 2-1: Using ep0 maxpacket: 8 [ 2442.195931][T15317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2442.226249][ T30] audit: type=1326 audit(2000000761.825:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21614 comm="syz.3.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff235f2dff9 code=0x7ffc0000 [ 2442.305888][T15317] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2442.325386][T15317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2442.344349][T15317] usb 2-1: SerialNumber: syz [ 2442.351215][T15317] usb 2-1: config 0 descriptor?? [ 2442.407060][T15317] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 2442.414085][T15317] usb 2-1: No valid video chain found. [ 2442.491328][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5356'. [ 2442.609325][ T20] usb 2-1: USB disconnect, device number 82 [ 2442.843893][T21636] loop3: detected capacity change from 0 to 256 [ 2442.985701][T20686] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2444.025712][T20686] usb 5-1: Using ep0 maxpacket: 32 [ 2444.146476][T20686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2444.161057][T20686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2444.206510][T20686] usb 5-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 2444.216887][T20686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2444.237981][T20686] usb 5-1: config 0 descriptor?? [ 2444.285989][ T9987] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2444.361596][T21670] loop0: detected capacity change from 0 to 256 [ 2444.383241][T21672] loop3: detected capacity change from 0 to 256 [ 2444.535722][ T9987] usb 2-1: Using ep0 maxpacket: 8 [ 2445.516584][ T9987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2445.538371][ T9987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2445.552573][T20686] wacom 0003:056A:033E.0064: unknown main item tag 0x0 [ 2445.622508][T20686] wacom 0003:056A:033E.0064: unknown main item tag 0x0 [ 2445.630634][ T9987] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2445.665718][T20686] wacom 0003:056A:033E.0064: unknown main item tag 0x0 [ 2445.672792][T20686] wacom 0003:056A:033E.0064: unknown main item tag 0x0 [ 2445.680148][ T9987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2445.712876][T20686] wacom 0003:056A:033E.0064: unknown main item tag 0x0 [ 2445.724779][ T9987] usb 2-1: config 0 descriptor?? [ 2445.734537][T20686] wacom 0003:056A:033E.0064: Unknown device_type for 'HID 056a:033e'. Assuming pen. [ 2445.761161][T20686] wacom 0003:056A:033E.0064: hidraw0: USB HID vff.ff Device [HID 056a:033e] on usb-dummy_hcd.4-1/input0 [ 2445.801568][T20686] input: Wacom Intuos PT M 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:033E.0064/input/input79 [ 2445.867717][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 2445.867751][ T30] audit: type=1400 audit(2000000765.465:4388): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=2695 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2445.899819][T20686] usb 5-1: USB disconnect, device number 77 [ 2445.925756][ T30] audit: type=1400 audit(2000000765.465:4389): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2695 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2445.964835][ T30] audit: type=1400 audit(2000000765.545:4390): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2695 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2446.048126][T21683] bridge0: port 1(bridge_slave_0) entered blocking state [ 2446.055064][T21683] bridge0: port 1(bridge_slave_0) entered disabled state [ 2446.063504][T21683] device bridge_slave_0 entered promiscuous mode [ 2446.080456][T21683] bridge0: port 2(bridge_slave_1) entered blocking state [ 2446.087772][T21683] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.095964][T21683] device bridge_slave_1 entered promiscuous mode [ 2446.209771][ T9987] steelseries_srws1 0003:1038:1410.0065: unknown main item tag 0xd [ 2446.225697][ T9987] steelseries_srws1 0003:1038:1410.0065: item fetching failed at offset 6/7 [ 2446.234990][ T9987] steelseries_srws1 0003:1038:1410.0065: parse failed [ 2446.265762][ T9987] steelseries_srws1: probe of 0003:1038:1410.0065 failed with error -22 [ 2446.362958][T21690] netlink: 'syz.4.5382': attribute type 4 has an invalid length. [ 2446.372194][T21690] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5382'. [ 2446.399028][T21683] bridge0: port 2(bridge_slave_1) entered blocking state [ 2446.406164][T21683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2446.413572][T21683] bridge0: port 1(bridge_slave_0) entered blocking state [ 2446.414002][ T9987] usb 2-1: USB disconnect, device number 83 [ 2446.420629][T21683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2446.474133][T21692] syz.4.5383[21692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2446.474346][T21692] syz.4.5383[21692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2446.547062][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2446.584825][T11547] bridge0: port 1(bridge_slave_0) entered disabled state [ 2446.592931][T11547] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.602152][T21697] loop4: detected capacity change from 0 to 2048 [ 2446.614098][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2446.623235][T11547] bridge0: port 1(bridge_slave_0) entered blocking state [ 2446.631076][T11547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2446.648672][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2446.658540][T11547] bridge0: port 2(bridge_slave_1) entered blocking state [ 2446.666650][T11547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2446.677769][ T461] device bridge_slave_1 left promiscuous mode [ 2446.687778][ T461] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.698446][T21697] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2446.712915][ T461] device bridge_slave_0 left promiscuous mode [ 2446.719443][ T461] bridge0: port 1(bridge_slave_0) entered disabled state [ 2446.729560][ T461] device veth1_macvtap left promiscuous mode [ 2446.735564][ T461] device veth0_vlan left promiscuous mode [ 2446.745816][T21697] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5385: bg 0: block 234: padding at end of block bitmap is not set [ 2446.797539][T21697] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 2446.811057][T21697] EXT4-fs (loop4): This should not happen!! Data will be lost [ 2446.811057][T21697] [ 2446.993045][T21707] syz.4.5388[21707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2446.993216][T21707] syz.4.5388[21707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2447.047074][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2447.100619][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2447.120887][T21713] loop3: detected capacity change from 0 to 256 [ 2447.131016][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2447.141682][T21715] loop4: detected capacity change from 0 to 128 [ 2447.149071][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2447.203561][T21683] device veth0_vlan entered promiscuous mode [ 2447.229445][T21683] device veth1_macvtap entered promiscuous mode [ 2447.246760][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2447.258444][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2447.269111][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2447.279939][T21713] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2447.292918][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2447.309148][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2447.334579][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2447.347983][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2447.360574][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2447.369506][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2447.384800][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2447.394376][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2447.404732][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2447.414917][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2448.882190][ T668] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2449.028588][ T30] audit: type=1326 audit(2000000768.625:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21723 comm="syz.0.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a42b7ff9 code=0x7ffc0000 [ 2449.084741][ T30] audit: type=1326 audit(2000000768.655:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21723 comm="syz.0.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9a42b7ff9 code=0x7ffc0000 [ 2449.116229][ T30] audit: type=1326 audit(2000000768.655:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21723 comm="syz.0.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a42b7ff9 code=0x7ffc0000 [ 2449.157116][ T30] audit: type=1326 audit(2000000768.655:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21723 comm="syz.0.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9a42b7ff9 code=0x7ffc0000 [ 2449.237260][ T30] audit: type=1326 audit(2000000768.665:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21723 comm="syz.0.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a42b7ff9 code=0x7ffc0000 [ 2449.262278][ T30] audit: type=1326 audit(2000000768.665:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21723 comm="syz.0.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9a42b7ff9 code=0x7ffc0000 [ 2449.275892][ T668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2449.287042][ T30] audit: type=1326 audit(2000000768.665:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21723 comm="syz.0.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a42b7ff9 code=0x7ffc0000 [ 2449.348853][ T668] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2449.365415][ T668] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2449.383600][ T668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2449.394857][ T668] usb 4-1: config 0 descriptor?? [ 2449.405933][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.418477][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.430094][T21736] loop0: detected capacity change from 0 to 512 [ 2449.438731][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.447033][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.457831][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.465307][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.473306][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.481024][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.488815][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.490004][T21736] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 2449.496875][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.513157][T21736] EXT4-fs (loop0): 1 truncate cleaned up [ 2449.514229][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.521272][T21736] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,nodelalloc,sb=0x0000000000000003,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 2449.528648][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.558182][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.565463][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.574315][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.582538][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.590179][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.599112][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.607327][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.615057][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.622404][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.631154][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.641430][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.649262][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.658726][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.666731][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.674094][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.681432][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.688803][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.698203][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.706222][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.714740][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.722302][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.730121][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.737575][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.745402][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.753467][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.762253][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.770638][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.782093][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.791211][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.803950][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.813503][T14955] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2449.824004][T14955] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2449.868451][ T668] plantronics 0003:047F:FFFF.0067: No inputs registered, leaving [ 2449.889750][ T668] plantronics 0003:047F:FFFF.0067: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2449.956768][T21744] loop4: detected capacity change from 0 to 2048 [ 2449.980239][T21748] loop0: detected capacity change from 0 to 128 [ 2449.983217][T21746] loop2: detected capacity change from 0 to 256 [ 2449.997775][T21744] Alternate GPT is invalid, using primary GPT. [ 2450.004046][T21744] loop4: p1 p2 p3 [ 2450.017491][T21748] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2450.028644][T21748] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2450.032585][T21746] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 2450.221859][T21756] loop4: detected capacity change from 0 to 256 [ 2451.472379][T20686] usb 4-1: USB disconnect, device number 87 [ 2451.545903][ T301] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2452.355755][T20686] Bluetooth: hci0: command 0x1003 tx timeout [ 2452.362360][T21489] Bluetooth: hci0: sending frame failed (-49) [ 2454.435866][ T9987] Bluetooth: hci0: command 0x1001 tx timeout [ 2454.442271][T21489] Bluetooth: hci0: sending frame failed (-49) [ 2456.515752][ T9987] Bluetooth: hci0: command 0x1009 tx timeout [ 2457.314554][T21786] loop3: detected capacity change from 0 to 256 [ 2457.330571][T21783] loop2: detected capacity change from 0 to 2048 [ 2457.435548][T21794] loop3: detected capacity change from 0 to 256 [ 2457.451336][T21783] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2457.467170][T21783] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 2457.484857][T21783] fs-verity: sha256 using implementation "sha256-avx2" [ 2457.553193][T21801] loop4: detected capacity change from 0 to 512 [ 2457.565218][T21802] loop2: detected capacity change from 0 to 2048 [ 2457.580116][T21801] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2457.593496][T21801] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 2457.633123][T21802] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2457.647675][T21802] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 2457.687107][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2457.687142][ T30] audit: type=1400 audit(2000000777.285:4414): avc: denied { compute_member } for pid=21808 comm="syz.4.5423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2457.718071][ T668] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2457.798266][T21813] loop2: detected capacity change from 0 to 512 [ 2457.854219][T21813] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2457.869722][T21821] binfmt_misc: register: failed to install interpreter file ./file/file0 [ 2457.878483][T21813] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 2457.955730][ T668] usb 2-1: Using ep0 maxpacket: 32 [ 2458.075789][ T668] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2458.095687][ T668] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2458.223320][T21815] loop4: detected capacity change from 0 to 40427 [ 2458.235835][ T668] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2458.244973][ T668] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2458.254108][ T668] usb 2-1: Product: syz [ 2458.259831][ T668] usb 2-1: Manufacturer: syz [ 2458.276814][T21815] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2458.284571][T21815] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2458.326887][ T668] hub 2-1:4.0: USB hub found [ 2458.340150][T21815] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2458.478263][T21815] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2458.486593][T21815] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2458.500684][T21823] loop3: detected capacity change from 0 to 40427 [ 2458.529919][T21823] F2FS-fs (loop3): invalid crc value [ 2458.533321][T21830] loop2: detected capacity change from 0 to 256 [ 2458.546423][T21823] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2458.576577][T21830] exfat: Deprecated parameter 'namecase' [ 2458.582213][T21830] exfat: Deprecated parameter 'utf8' [ 2458.588524][ T668] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 2458.598227][T21830] exfat: Deprecated parameter 'namecase' [ 2458.619838][T21830] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 2458.665095][ T30] audit: type=1400 audit(2000000778.255:4415): avc: denied { append } for pid=21829 comm="syz.2.5430" path="/7/file0/cpu.stat" dev="loop2" ino=1049760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2458.693428][T21823] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 2458.708123][T21823] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2458.714540][ T30] audit: type=1400 audit(2000000778.285:4416): avc: denied { map } for pid=21829 comm="syz.2.5430" path="/7/file0/cpu.stat" dev="loop2" ino=1049760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2458.738782][T21823] attempt to access beyond end of device [ 2458.738782][T21823] loop3: rw=2049, want=40976, limit=40427 [ 2458.753446][ T30] audit: type=1400 audit(2000000778.335:4417): avc: denied { remove_name } for pid=21822 comm="syz.3.5429" name="file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2458.777832][ T30] audit: type=1400 audit(2000000778.335:4418): avc: denied { rmdir } for pid=21822 comm="syz.3.5429" name="file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2458.847025][T21837] loop2: detected capacity change from 0 to 512 [ 2458.885993][T21837] EXT4-fs (loop2): filesystem is read-only [ 2458.906796][ T318] usb 2-1: USB disconnect, device number 84 [ 2458.915917][T21837] EXT4-fs (loop2): filesystem is read-only [ 2458.921818][T21837] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2458.944572][T21837] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.5432: bad orphan inode 16 [ 2458.955942][T21837] ext4_test_bit(bit=15, block=3) = 0 [ 2458.961163][T21837] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 2459.056079][T21842] loop2: detected capacity change from 0 to 128 [ 2459.097162][T21842] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 2459.150428][T21842] attempt to access beyond end of device [ 2459.150428][T21842] loop2: rw=3, want=6952, limit=128 [ 2459.162772][T21842] attempt to access beyond end of device [ 2459.162772][T21842] loop2: rw=2051, want=7894, limit=128 [ 2459.223827][T21849] loop3: detected capacity change from 0 to 256 [ 2459.255698][ T301] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2459.271435][T21851] loop2: detected capacity change from 0 to 512 [ 2459.316701][T21851] EXT4-fs (loop2): Ignoring removed orlov option [ 2459.327150][T21851] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2459.354776][T21858] loop3: detected capacity change from 0 to 128 [ 2459.361982][T21851] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.5437: casefold flag without casefold feature [ 2459.376410][T21851] EXT4-fs (loop2): Remounting filesystem read-only [ 2459.383642][T21851] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5437: couldn't read orphan inode 15 (err -117) [ 2459.396478][T21851] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,quota,grpjquota=,inode_readahead_blks=0x0000000004000000,. Quota mode: writeback. [ 2459.437857][ T30] audit: type=1400 audit(2000000779.035:4419): avc: denied { setattr } for pid=21850 comm="syz.2.5437" path="/10/file1/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2459.505747][ T301] usb 5-1: Using ep0 maxpacket: 16 [ 2459.541170][ T30] audit: type=1400 audit(2000000779.135:4420): avc: denied { validate_trans } for pid=21867 comm="syz.3.5445" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2459.675951][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2459.688249][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2459.702489][ T301] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 2459.715919][ T668] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2459.718767][ T301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2459.738832][ T301] usb 5-1: config 0 descriptor?? [ 2459.755793][T14955] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2459.855820][ T58] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 2459.965849][ T668] usb 2-1: Using ep0 maxpacket: 16 [ 2460.085907][ T668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2460.100340][ T668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2460.114831][ T668] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 2460.124658][T14955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2460.137096][ T668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2460.147764][T14955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2460.165734][T14955] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 2460.175584][ T668] usb 2-1: config 0 descriptor?? [ 2460.181086][T14955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2460.192709][T14955] usb 3-1: config 0 descriptor?? [ 2460.207968][ T301] hid-rmi 0003:17EF:6085.0068: item fetching failed at offset 1/5 [ 2460.216513][ T301] hid-rmi 0003:17EF:6085.0068: parse failed [ 2460.222323][ T301] hid-rmi: probe of 0003:17EF:6085.0068 failed with error -22 [ 2460.235929][ T58] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2460.249011][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2460.260875][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2460.270770][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2460.285428][ T58] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 2460.294647][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2460.305209][ T58] usb 4-1: config 0 descriptor?? [ 2460.422577][T21840] loop4: detected capacity change from 0 to 512 [ 2460.489908][T21840] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2460.501895][T21840] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 2460.536610][ T20] usb 5-1: USB disconnect, device number 78 [ 2460.642940][T21875] bridge0: port 1(bridge_slave_0) entered blocking state [ 2460.650104][T21875] bridge0: port 1(bridge_slave_0) entered disabled state [ 2460.658895][T21875] device bridge_slave_0 entered promiscuous mode [ 2460.667284][T21875] bridge0: port 2(bridge_slave_1) entered blocking state [ 2460.674497][T21875] bridge0: port 2(bridge_slave_1) entered disabled state [ 2460.684264][T21875] device bridge_slave_1 entered promiscuous mode [ 2460.694024][T14955] sony 0003:054C:0268.0069: unbalanced delimiter at end of report description [ 2460.706450][ T668] samsung 0003:0419:0001.006A: item fetching failed at offset 3/5 [ 2460.716489][T14955] sony 0003:054C:0268.0069: parse failed [ 2460.723540][ T668] samsung 0003:0419:0001.006A: parse failed [ 2460.729956][T14955] sony: probe of 0003:054C:0268.0069 failed with error -22 [ 2460.737513][ T668] samsung: probe of 0003:0419:0001.006A failed with error -22 [ 2460.788170][ T58] hid-rmi 0003:17EF:6085.006B: unknown main item tag 0x0 [ 2460.796331][ T58] hid-rmi 0003:17EF:6085.006B: unknown main item tag 0x0 [ 2460.804421][ T58] hid-rmi 0003:17EF:6085.006B: item fetching failed at offset 2/5 [ 2460.813654][ T58] hid-rmi 0003:17EF:6085.006B: parse failed [ 2460.819693][ T58] hid-rmi: probe of 0003:17EF:6085.006B failed with error -22 [ 2460.887361][T21875] bridge0: port 2(bridge_slave_1) entered blocking state [ 2460.895235][T21875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2460.901253][ T58] usb 3-1: USB disconnect, device number 77 [ 2460.902598][T21875] bridge0: port 1(bridge_slave_0) entered blocking state [ 2460.916831][T21875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2460.936648][T14955] usb 2-1: USB disconnect, device number 85 [ 2460.981630][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 2460.990444][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 2461.005570][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2461.014137][ T301] usb 4-1: USB disconnect, device number 88 [ 2461.014390][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2461.041674][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2461.050912][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state [ 2461.058002][ T7211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2461.074333][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2461.084999][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state [ 2461.093590][ T7211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2461.120925][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2461.133807][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2461.183294][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2461.213759][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2461.232738][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2461.241294][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2461.260007][T21875] device veth0_vlan entered promiscuous mode [ 2461.279062][ T30] audit: type=1400 audit(2000000780.875:4421): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2461.317159][ T30] audit: type=1400 audit(2000000780.875:4422): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=24 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2461.318024][T21885] loop4: detected capacity change from 0 to 512 [ 2461.348214][ T30] audit: type=1400 audit(2000000780.875:4423): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=24 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2461.358845][T21875] device veth1_macvtap entered promiscuous mode [ 2461.382467][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2461.402067][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2461.403021][T21885] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2461.428065][T21885] EXT4-fs (loop4): failed to initialize system zone (-117) [ 2461.436287][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2461.442328][T21885] EXT4-fs (loop4): mount failed [ 2461.666991][ T7211] device bridge_slave_1 left promiscuous mode [ 2461.675888][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 2461.711981][ T7211] device bridge_slave_0 left promiscuous mode [ 2461.719099][T21907] loop4: detected capacity change from 0 to 512 [ 2461.734704][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 2461.756290][ T7211] device veth1_macvtap left promiscuous mode [ 2461.763563][ T7211] device veth0_vlan left promiscuous mode [ 2461.804155][T21907] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.5458: inode #1: comm syz.4.5458: iget: illegal inode # [ 2461.849004][T21907] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5458: error while reading EA inode 1 err=-117 [ 2461.876394][T21907] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.5458: inode #1: comm syz.4.5458: iget: illegal inode # [ 2461.891358][ T58] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2461.922302][T21907] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5458: error while reading EA inode 1 err=-117 [ 2461.948497][T21907] EXT4-fs (loop4): 1 orphan inode deleted [ 2461.960946][T21907] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 2462.035785][T21907] syz.4.5458[21907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2462.035964][T21907] syz.4.5458[21907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2462.055678][T14955] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2462.078207][T21904] loop0: detected capacity change from 0 to 40427 [ 2462.122866][T21557] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 2462.146390][T21904] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 2462.147153][T21557] EXT4-fs error (device loop4): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 2462.152757][T21904] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 2462.164742][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 2462.180047][T21904] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 2462.186064][T21557] EXT4-fs error (device loop4): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 2462.272246][T21904] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 2462.281513][T21904] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2462.295940][ T58] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 2462.304711][ T58] usb 2-1: config 0 has no interface number 0 [ 2462.324772][T14955] usb 4-1: Using ep0 maxpacket: 32 [ 2462.343599][T21875] attempt to access beyond end of device [ 2462.343599][T21875] loop0: rw=2049, want=45104, limit=40427 [ 2462.465938][ T58] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2462.485156][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2462.493811][ T58] usb 2-1: Product: syz [ 2462.498135][ T58] usb 2-1: Manufacturer: syz [ 2462.502754][ T58] usb 2-1: SerialNumber: syz [ 2462.521659][ T58] usb 2-1: config 0 descriptor?? [ 2462.579997][ T58] smsc95xx v2.0.0 [ 2462.585892][ T9987] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2462.605864][T14955] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2462.625146][T14955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2462.639156][T14955] usb 4-1: Product: syz [ 2462.643517][T14955] usb 4-1: Manufacturer: syz [ 2462.661054][T14955] usb 4-1: SerialNumber: syz [ 2462.672853][T14955] usb 4-1: config 0 descriptor?? [ 2462.756709][T21924] bridge0: port 1(bridge_slave_0) entered blocking state [ 2462.764238][T21924] bridge0: port 1(bridge_slave_0) entered disabled state [ 2462.770582][T21933] loop0: detected capacity change from 0 to 256 [ 2462.772986][T21924] device bridge_slave_0 entered promiscuous mode [ 2462.792314][T21924] bridge0: port 2(bridge_slave_1) entered blocking state [ 2462.801502][T21924] bridge0: port 2(bridge_slave_1) entered disabled state [ 2462.812685][T21924] device bridge_slave_1 entered promiscuous mode [ 2462.985882][ T9987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2462.998511][ T9987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2463.015787][ T58] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2463.026832][ T9987] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2463.030038][ T58] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2463.052707][ T9987] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 2463.062948][ T9987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2463.072651][ T9987] usb 3-1: config 0 descriptor?? [ 2463.072942][T21924] bridge0: port 2(bridge_slave_1) entered blocking state [ 2463.084545][T21924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2463.092015][T21924] bridge0: port 1(bridge_slave_0) entered blocking state [ 2463.099732][T21924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2463.872074][T11547] bridge0: port 1(bridge_slave_0) entered disabled state [ 2463.898446][T11547] bridge0: port 2(bridge_slave_1) entered disabled state [ 2464.087149][ T7211] device bridge_slave_1 left promiscuous mode [ 2464.093497][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 2464.103448][ T7211] device bridge_slave_0 left promiscuous mode [ 2464.110463][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 2464.122328][ T7211] device veth1_macvtap left promiscuous mode [ 2464.125883][T14955] (unnamed net_device) (uninitialized): Assigned a random MAC address: e6:4d:ed:e7:94:44 [ 2464.129587][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2464.129635][ T30] audit: type=1400 audit(2000000783.715:4447): avc: denied { read } for pid=21939 comm="syz.0.5470" name="uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2464.141019][ T7211] device veth0_vlan left promiscuous mode [ 2464.152814][ T30] audit: type=1400 audit(2000000783.715:4448): avc: denied { open } for pid=21939 comm="syz.0.5470" path="/dev/uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2464.212202][ T30] audit: type=1400 audit(2000000783.765:4449): avc: denied { ioctl } for pid=21939 comm="syz.0.5470" path="/dev/uinput" dev="devtmpfs" ino=166 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2464.244340][ T9987] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 2464.251928][ T9987] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 2464.260542][ T9987] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 2464.270216][ T9987] prodikeys 0003:041E:2801.006C: item fetching failed at offset 4/5 [ 2464.283925][ T9987] prodikeys 0003:041E:2801.006C: hid parse failed [ 2464.290695][ T58] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 2464.291280][ T9987] prodikeys: probe of 0003:041E:2801.006C failed with error -22 [ 2464.314947][ T58] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 2464.335775][ T58] usb 2-1: USB disconnect, device number 86 [ 2464.356754][ T30] audit: type=1400 audit(2000000783.955:4450): avc: denied { unmount } for pid=21875 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2464.501374][ T668] usb 3-1: USB disconnect, device number 78 [ 2464.624550][T14955] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 2464.646466][T14955] usb 4-1: USB disconnect, device number 89 [ 2464.700056][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2464.713640][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2464.750505][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2464.762314][T21948] loop3: detected capacity change from 0 to 1024 [ 2464.769626][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2464.786372][T11547] bridge0: port 1(bridge_slave_0) entered blocking state [ 2464.794947][T11547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2464.818979][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2464.847495][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2464.848157][T21948] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 2464.876980][T11547] bridge0: port 2(bridge_slave_1) entered blocking state [ 2464.891496][T11547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2464.980488][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2465.012067][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2465.032694][T21957] loop3: detected capacity change from 0 to 512 [ 2465.043365][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2465.087132][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2465.088092][T21957] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2465.172082][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2465.198823][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2465.213363][T21957] EXT4-fs (loop3): 1 truncate cleaned up [ 2465.248714][T21957] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2465.271994][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2465.286582][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2465.329307][T21924] device veth0_vlan entered promiscuous mode [ 2465.346094][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2465.370754][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2465.417091][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2465.432029][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2465.451404][T21924] device veth1_macvtap entered promiscuous mode [ 2465.458334][ T30] audit: type=1400 audit(2000000785.055:4451): avc: denied { write } for pid=21956 comm="syz.3.5475" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2465.481697][T21968] netlink: 'syz.1.5481': attribute type 5 has an invalid length. [ 2465.490393][T21968] netlink: 'syz.1.5481': attribute type 4 has an invalid length. [ 2465.504732][T21968] netlink: 'syz.1.5481': attribute type 5 has an invalid length. [ 2465.514288][ T30] audit: type=1400 audit(2000000785.075:4452): avc: denied { add_name } for pid=21956 comm="syz.3.5475" name="#df" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2465.532128][T21968] netlink: 'syz.1.5481': attribute type 1 has an invalid length. [ 2465.555270][T21968] netlink: 'syz.1.5481': attribute type 1 has an invalid length. [ 2465.556319][ T30] audit: type=1400 audit(2000000785.075:4453): avc: denied { remove_name } for pid=21956 comm="syz.3.5475" name="#df" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2465.570881][T21968] bridge0: port 1(bridge_slave_0) entered disabled state [ 2465.599389][ T30] audit: type=1400 audit(2000000785.075:4454): avc: denied { rename } for pid=21956 comm="syz.3.5475" name="#df" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2465.605851][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2465.651741][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2465.659706][T14955] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2465.660271][ T30] audit: type=1400 audit(2000000785.075:4455): avc: denied { unlink } for pid=21956 comm="syz.3.5475" name="#df" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2465.676965][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2465.691029][ T30] audit: type=1400 audit(2000000785.075:4456): avc: denied { unlink } for pid=21956 comm="syz.3.5475" name="#e0" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2465.763547][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2465.789535][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2465.920549][T21972] loop4: detected capacity change from 0 to 512 [ 2466.020436][T21976] input: syz0 as /devices/virtual/input/input83 [ 2466.048823][T21972] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.5467: iget: bad extended attribute block 128 [ 2466.062018][T14955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2466.081397][T21972] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5467: couldn't read orphan inode 16 (err -117) [ 2466.085773][T14955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2466.103772][T14955] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2466.112843][T14955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2466.122515][T21972] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2466.137016][T14955] usb 3-1: config 0 descriptor?? [ 2466.143455][T21972] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 2466.178095][T21972] EXT4-fs error (device loop4): ext4_lookup:1856: inode #16: comm syz.4.5467: iget: bad extended attribute block 128 [ 2466.459704][T21980] bridge0: port 1(bridge_slave_0) entered blocking state [ 2466.475659][T21980] bridge0: port 1(bridge_slave_0) entered disabled state [ 2466.486085][T21980] device bridge_slave_0 entered promiscuous mode [ 2466.503349][T21980] bridge0: port 2(bridge_slave_1) entered blocking state [ 2466.517288][T21980] bridge0: port 2(bridge_slave_1) entered disabled state [ 2466.536789][T21980] device bridge_slave_1 entered promiscuous mode [ 2466.556850][ T7211] device bridge_slave_1 left promiscuous mode [ 2466.562988][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 2466.571650][ T7211] device bridge_slave_0 left promiscuous mode [ 2466.578247][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 2466.588456][ T7211] device veth1_macvtap left promiscuous mode [ 2466.594364][ T7211] device veth0_vlan left promiscuous mode [ 2466.601038][ T668] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2466.618218][T14955] zydacron 0003:13EC:0006.006D: unknown main item tag 0x0 [ 2466.635947][T14955] zydacron 0003:13EC:0006.006D: unknown main item tag 0x0 [ 2466.644390][T14955] zydacron 0003:13EC:0006.006D: unknown main item tag 0x0 [ 2466.652379][T14955] zydacron 0003:13EC:0006.006D: unknown main item tag 0x0 [ 2466.659692][T14955] zydacron 0003:13EC:0006.006D: item fetching failed at offset 4/5 [ 2466.668540][T14955] zydacron 0003:13EC:0006.006D: parse failed [ 2466.674944][T14955] zydacron: probe of 0003:13EC:0006.006D failed with error -22 [ 2466.851044][ T301] usb 3-1: USB disconnect, device number 79 [ 2466.965831][ T668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2466.977670][ T668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2466.987855][ T668] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 2466.998816][ T668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2467.009050][ T668] usb 2-1: config 0 descriptor?? [ 2467.125428][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2467.135209][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2467.147838][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2467.158100][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2467.168209][T11547] bridge0: port 1(bridge_slave_0) entered blocking state [ 2467.175135][T11547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2467.188627][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2467.198564][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2467.207733][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2467.220365][T11547] bridge0: port 2(bridge_slave_1) entered blocking state [ 2467.230115][T11547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2467.254509][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2467.264273][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2467.277228][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2467.287218][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2467.314538][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2467.324625][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2467.347490][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2467.357310][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2467.366268][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2467.378036][T21980] device veth0_vlan entered promiscuous mode [ 2467.406689][T21980] device veth1_macvtap entered promiscuous mode [ 2467.416390][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2467.439646][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2467.449711][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2467.467492][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2467.477294][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2467.560894][ T668] hid-rmi 0003:06CB:81A7.006E: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 2467.717351][T22019] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5500'. [ 2467.728828][T22019] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5500'. [ 2467.787580][ T668] usb 2-1: USB disconnect, device number 87 [ 2467.904715][T22025] binder: 22011:22025 ioctl c0306201 0 returned -14 [ 2468.673888][ T58] kernel write not supported for file bpf-prog (pid: 58 comm: kworker/1:2) [ 2468.705960][ T668] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2469.065909][ T668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2469.085683][ T668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2469.105914][T20686] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2469.106264][ T668] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 2469.145759][ T668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2469.157893][ T668] usb 2-1: config 0 descriptor?? [ 2469.495807][T20686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2469.525673][T20686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2469.545739][T20686] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 2469.575704][T20686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2469.598270][T22058] loop0: detected capacity change from 0 to 128 [ 2469.600289][T20686] usb 3-1: config 0 descriptor?? [ 2469.659851][ T668] hid-rmi 0003:06CB:81A7.006F: unknown main item tag 0x0 [ 2469.679177][ T668] hid-rmi 0003:06CB:81A7.006F: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 2469.958278][ T301] usb 2-1: USB disconnect, device number 88 [ 2470.129191][T20686] samsung 0003:0419:0600.0070: item fetching failed at offset 4/5 [ 2470.148270][T20686] samsung 0003:0419:0600.0070: parse failed [ 2470.155585][T20686] samsung: probe of 0003:0419:0600.0070 failed with error -22 [ 2470.165458][T22077] loop0: detected capacity change from 0 to 256 [ 2470.279478][T22038] loop3: detected capacity change from 0 to 131072 [ 2470.380701][T20686] usb 3-1: USB disconnect, device number 80 [ 2470.389087][T22038] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 2470.401151][T22038] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2470.413122][T22038] F2FS-fs (loop3): invalid crc value [ 2470.423770][T22038] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2470.538952][ T668] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2470.915950][ T668] usb 5-1: Using ep0 maxpacket: 16 [ 2471.156877][T22038] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2471.185997][T22038] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 2471.244725][T22088] loop2: detected capacity change from 0 to 512 [ 2471.337514][T22088] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2471.356152][T22098] loop0: detected capacity change from 0 to 256 [ 2471.364824][T22088] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 2471.396200][ T668] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2471.415793][ T668] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2471.428388][ T668] usb 5-1: Product: syz [ 2471.434300][ T668] usb 5-1: Manufacturer: syz [ 2471.438999][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2471.439039][ T30] audit: type=1400 audit(2000000791.025:4461): avc: denied { getopt } for pid=22097 comm="syz.0.5530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2471.439959][ T668] usb 5-1: SerialNumber: syz [ 2471.480495][T22088] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.5526: Directory hole found for htree leaf block 0 [ 2471.495505][ T668] usb 5-1: config 0 descriptor?? [ 2471.537874][ T668] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 2471.546796][ T668] usb 5-1: Detected FT232H [ 2471.642909][T22107] loop0: detected capacity change from 0 to 256 [ 2471.765780][ T668] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2471.825908][ T301] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2472.046999][ T30] audit: type=1326 audit(2000000791.645:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.3.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdababd1ff9 code=0x7ffc0000 [ 2472.075689][ T301] usb 2-1: Using ep0 maxpacket: 16 [ 2472.081916][ T30] audit: type=1326 audit(2000000791.665:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.3.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fdababd1ff9 code=0x7ffc0000 [ 2472.144157][ T30] audit: type=1326 audit(2000000791.665:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.3.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdababd1ff9 code=0x7ffc0000 [ 2472.199503][ T30] audit: type=1326 audit(2000000791.675:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.3.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdababd1ff9 code=0x7ffc0000 [ 2472.245930][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2472.260271][ T668] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2472.270935][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2472.292222][ T301] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2472.312268][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.338413][ T301] usb 2-1: config 0 descriptor?? [ 2472.382956][ T30] audit: type=1400 audit(2000000791.975:4466): avc: denied { setopt } for pid=22132 comm="syz.2.5544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2472.476704][T20686] usb 5-1: USB disconnect, device number 79 [ 2472.488420][T20686] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2472.506554][T20686] ftdi_sio 5-1:0.0: device disconnected [ 2472.735813][ T668] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2472.805699][ T9987] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2472.869818][ T301] hid-multitouch 0003:1FD2:6007.0071: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 2472.975770][ T668] usb 4-1: Using ep0 maxpacket: 16 [ 2473.065725][ T9987] usb 3-1: Using ep0 maxpacket: 16 [ 2473.071136][ T58] usb 2-1: USB disconnect, device number 89 [ 2473.095926][ T668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2473.115742][ T668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2473.130328][ T668] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 2473.205818][ T9987] usb 3-1: config 0 has no interfaces? [ 2473.300625][ T668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2473.317424][ T668] usb 4-1: config 0 descriptor?? [ 2473.375888][ T9987] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2473.395387][ T9987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2473.414219][ T9987] usb 3-1: Product: syz [ 2473.418584][ T9987] usb 3-1: Manufacturer: syz [ 2473.424010][ T9987] usb 3-1: SerialNumber: syz [ 2473.436745][ T9987] r8152-cfgselector 3-1: config 0 descriptor?? [ 2473.440431][T22144] binder: 22140:22144 ioctl c0306201 0 returned -14 [ 2473.541691][T22139] loop0: detected capacity change from 0 to 40427 [ 2473.655170][T22139] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2473.695813][ T9987] r8152-cfgselector 3-1: Unknown version 0x6c60 [ 2473.798046][ T668] cp2112 0003:10C4:EA90.0072: unknown main item tag 0x0 [ 2473.815438][ T668] cp2112 0003:10C4:EA90.0072: unknown main item tag 0x0 [ 2473.827897][ T668] cp2112 0003:10C4:EA90.0072: unknown main item tag 0x0 [ 2473.851230][ T668] cp2112 0003:10C4:EA90.0072: unknown main item tag 0x0 [ 2473.851308][T22139] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2473.867733][ T668] cp2112 0003:10C4:EA90.0072: unknown main item tag 0x0 [ 2473.901335][ T9987] r8152-cfgselector 3-1: USB disconnect, device number 81 [ 2473.916467][ T668] cp2112 0003:10C4:EA90.0072: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 2474.039126][T21875] attempt to access beyond end of device [ 2474.039126][T21875] loop0: rw=2049, want=45104, limit=40427 [ 2474.055821][ T668] cp2112 0003:10C4:EA90.0072: Part Number: 0x00 Device Version: 0x00 [ 2474.587440][ T668] cp2112 0003:10C4:EA90.0072: error requesting SMBus config [ 2474.609349][ T668] cp2112: probe of 0003:10C4:EA90.0072 failed with error -71 [ 2474.640488][ T668] usb 4-1: USB disconnect, device number 90 [ 2475.310471][T22168] loop2: detected capacity change from 0 to 8192 [ 2475.565743][T14955] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2475.916511][T22200] loop2: detected capacity change from 0 to 2048 [ 2475.945807][T14955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2475.958163][T14955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2476.010329][T22200] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 2476.032040][T22200] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 2476.123737][T14955] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2476.133173][T14955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2476.142720][T14955] usb 5-1: config 0 descriptor?? [ 2476.631020][T14955] cp2112 0003:10C4:EA90.0073: unknown main item tag 0x0 [ 2476.658929][T14955] cp2112 0003:10C4:EA90.0073: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 2476.769257][ T30] audit: type=1400 audit(2000000796.365:4467): avc: denied { name_bind } for pid=22216 comm="syz.2.5573" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 2476.845834][T14955] cp2112 0003:10C4:EA90.0073: Part Number: 0x82 Device Version: 0xFE [ 2476.941511][ T30] audit: type=1400 audit(2000000796.535:4468): avc: denied { getopt } for pid=22220 comm="syz.2.5576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2477.275810][T14955] cp2112 0003:10C4:EA90.0073: error setting SMBus config [ 2477.288178][T14955] cp2112: probe of 0003:10C4:EA90.0073 failed with error -71 [ 2477.317461][T14955] usb 5-1: USB disconnect, device number 80 [ 2477.730148][T22240] loop3: detected capacity change from 0 to 256 [ 2477.776187][T22240] exfat: Deprecated parameter 'namecase' [ 2477.782762][T22240] exfat: Deprecated parameter 'utf8' [ 2477.789940][T22240] exfat: Deprecated parameter 'namecase' [ 2477.795120][T22242] loop4: detected capacity change from 0 to 256 [ 2477.806373][T22240] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2477.806740][ T9987] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2477.977607][T14955] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2478.485780][T14955] usb 2-1: Using ep0 maxpacket: 16 [ 2478.885880][T14955] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2478.901079][T14955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2478.914892][T14955] usb 2-1: Product: syz [ 2478.919795][T14955] usb 2-1: Manufacturer: syz [ 2478.924869][T14955] usb 2-1: SerialNumber: syz [ 2478.931552][T14955] r8152-cfgselector 2-1: config 0 descriptor?? [ 2479.086136][ T9987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2479.097418][ T9987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2479.108658][ T9987] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2479.122770][ T9987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2479.144549][ T9987] usb 3-1: config 0 descriptor?? [ 2479.337961][T14955] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2479.363350][T22268] loop0: detected capacity change from 0 to 512 [ 2479.400880][T22268] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2479.415146][T22268] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 2479.438597][ T30] audit: type=1400 audit(2000000799.035:4469): avc: denied { mounton } for pid=22267 comm="syz.0.5595" path="/30/file0/bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2479.501003][ T30] audit: type=1400 audit(2000000799.085:4470): avc: denied { rmdir } for pid=21875 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2479.526046][ T30] audit: type=1400 audit(2000000799.085:4471): avc: denied { unlink } for pid=21875 comm="syz-executor" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2479.551937][ T30] audit: type=1400 audit(2000000799.095:4472): avc: denied { unlink } for pid=21875 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2479.556015][T14955] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2479.606141][T14955] r8152-cfgselector 2-1: bad CDC descriptors [ 2479.609497][ T9987] lg-g15 0003:046D:C222.0074: unknown main item tag 0x0 [ 2479.619383][ T9987] lg-g15 0003:046D:C222.0074: unknown main item tag 0x0 [ 2479.626464][ T9987] lg-g15 0003:046D:C222.0074: unknown main item tag 0x0 [ 2479.626796][T14955] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2479.633738][ T9987] lg-g15 0003:046D:C222.0074: unknown main item tag 0x0 [ 2479.650053][ T9987] lg-g15 0003:046D:C222.0074: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 2479.668496][T14955] r8152-cfgselector 2-1: USB disconnect, device number 90 [ 2479.996545][T22277] loop0: detected capacity change from 0 to 8192 [ 2480.012486][ T318] usb 3-1: USB disconnect, device number 82 [ 2481.477588][ T30] audit: type=1326 audit(2000000801.075:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22294 comm="syz.4.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc186dd0ff9 code=0x7ffc0000 [ 2481.534655][ T30] audit: type=1326 audit(2000000801.075:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22294 comm="syz.4.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc186dd0ff9 code=0x7ffc0000 [ 2481.562681][ T30] audit: type=1326 audit(2000000801.075:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22294 comm="syz.4.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc186dd0ff9 code=0x7ffc0000 [ 2481.588597][ T30] audit: type=1326 audit(2000000801.075:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22294 comm="syz.4.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc186dd0ff9 code=0x7ffc0000 [ 2481.906799][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2481.906832][ T30] audit: type=1400 audit(2000000801.505:4502): avc: denied { append } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=25 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2481.969453][ T30] audit: type=1400 audit(2000000801.545:4503): avc: denied { compute_member } for pid=22300 comm="syz.2.5607" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2482.199059][ T318] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2482.334569][ T30] audit: type=1400 audit(2000000801.705:4504): avc: denied { create } for pid=22307 comm="syz.1.5610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2482.432009][ T30] audit: type=1400 audit(2000000801.725:4505): avc: denied { bind } for pid=22307 comm="syz.1.5610" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2482.586535][ T30] audit: type=1400 audit(2000000801.725:4506): avc: denied { node_bind } for pid=22307 comm="syz.1.5610" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2482.613873][ T318] usb 5-1: Using ep0 maxpacket: 16 [ 2482.791342][ T30] audit: type=1400 audit(2000000801.735:4507): avc: denied { setopt } for pid=22307 comm="syz.1.5610" laddr=172.20.20.170 lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2482.817581][ T30] audit: type=1400 audit(2000000801.735:4508): avc: denied { connect } for pid=22307 comm="syz.1.5610" laddr=172.20.20.170 lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2482.848721][ T30] audit: type=1400 audit(2000000801.745:4509): avc: denied { write } for pid=22307 comm="syz.1.5610" path="socket:[114330]" dev="sockfs" ino=114330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2482.881845][ T30] audit: type=1400 audit(2000000801.905:4510): avc: denied { create } for pid=22307 comm="syz.1.5610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2482.904128][ T30] audit: type=1400 audit(2000000801.915:4511): avc: denied { setopt } for pid=22307 comm="syz.1.5610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2482.927032][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2483.021191][T22321] syz.1.5614[22321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2483.021360][T22321] syz.1.5614[22321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2483.197252][T14955] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2483.219758][ T318] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2483.229933][ T318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2483.242275][ T318] usb 5-1: Product: syz [ 2483.246948][ T318] usb 5-1: Manufacturer: syz [ 2483.251782][ T318] usb 5-1: SerialNumber: syz [ 2483.261431][ T318] usb 5-1: config 0 descriptor?? [ 2483.316875][ T318] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2483.485787][T14955] usb 3-1: Using ep0 maxpacket: 16 [ 2483.527044][ T9987] usb 5-1: USB disconnect, device number 81 [ 2483.605857][T14955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2483.618900][T14955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2483.631913][T14955] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 2483.641679][T14955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2483.660721][T14955] usb 3-1: config 0 descriptor?? [ 2484.138479][T14955] cp2112 0003:10C4:EA90.0075: unknown main item tag 0x0 [ 2484.155751][T14955] cp2112 0003:10C4:EA90.0075: unknown main item tag 0x0 [ 2484.164400][T14955] cp2112 0003:10C4:EA90.0075: unknown main item tag 0x0 [ 2484.195976][T14955] cp2112 0003:10C4:EA90.0075: unknown main item tag 0x0 [ 2484.203523][T14955] cp2112 0003:10C4:EA90.0075: unknown main item tag 0x0 [ 2484.240537][T14955] cp2112 0003:10C4:EA90.0075: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 2484.385833][T14955] cp2112 0003:10C4:EA90.0075: Part Number: 0x00 Device Version: 0x00 [ 2484.459269][T22341] loop4: detected capacity change from 0 to 2048 [ 2484.487212][T22343] loop0: detected capacity change from 0 to 256 [ 2484.557674][T22341] EXT4-fs (loop4): Ignoring removed orlov option [ 2484.609499][T22341] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 2484.736647][T14955] cp2112 0003:10C4:EA90.0075: error requesting SMBus config [ 2484.759623][T14955] cp2112: probe of 0003:10C4:EA90.0075 failed with error -71 [ 2484.772024][T14955] usb 3-1: USB disconnect, device number 83 [ 2485.435381][T22350] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 2485.474331][T22350] EXT4-fs (loop4): Remounting filesystem read-only [ 2485.662640][T22359] loop0: detected capacity change from 0 to 256 [ 2485.695719][ T301] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2485.722217][T22363] syz.2.5630[22363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2485.722470][T22363] syz.2.5630[22363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2486.653643][T22377] loop4: detected capacity change from 0 to 256 [ 2487.975778][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 2487.975822][ T30] audit: type=1400 audit(2000000807.565:4547): avc: denied { create } for pid=22378 comm="syz.2.5635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2488.132081][ T30] audit: type=1400 audit(2000000807.605:4548): avc: denied { mount } for pid=22373 comm="syz.4.5627" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 2488.225938][ T30] audit: type=1400 audit(2000000807.765:4549): avc: denied { unmount } for pid=21924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 2488.300537][ T30] audit: type=1400 audit(2000000807.895:4550): avc: denied { read } for pid=22386 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2488.322928][ T301] usb 2-1: device descriptor read/all, error -71 [ 2488.355814][ T30] audit: type=1400 audit(2000000807.895:4551): avc: denied { open } for pid=22386 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2488.382883][ T30] audit: type=1400 audit(2000000807.895:4552): avc: denied { mounton } for pid=22386 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2488.483350][T22386] bridge0: port 1(bridge_slave_0) entered blocking state [ 2488.490535][T22386] bridge0: port 1(bridge_slave_0) entered disabled state [ 2488.499964][T22386] device bridge_slave_0 entered promiscuous mode [ 2488.515211][T22386] bridge0: port 2(bridge_slave_1) entered blocking state [ 2488.522592][T22386] bridge0: port 2(bridge_slave_1) entered disabled state [ 2488.531179][T22386] device bridge_slave_1 entered promiscuous mode [ 2488.685568][T22391] loop2: detected capacity change from 0 to 256 [ 2488.705792][ T301] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2488.740219][T22386] bridge0: port 2(bridge_slave_1) entered blocking state [ 2488.747205][T22386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2488.755045][T22386] bridge0: port 1(bridge_slave_0) entered blocking state [ 2488.763031][T22386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2488.880479][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2488.891355][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2488.900991][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2488.912865][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2488.926530][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2489.244529][ T7211] device bridge_slave_1 left promiscuous mode [ 2489.259235][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 2489.274631][ T7211] device bridge_slave_0 left promiscuous mode [ 2489.287327][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 2489.318291][ T7211] device veth1_macvtap left promiscuous mode [ 2489.328570][ T7211] device veth0_vlan left promiscuous mode [ 2489.695772][ T301] usb 2-1: Using ep0 maxpacket: 16 [ 2489.815887][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2489.858207][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2489.895742][ T301] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 2489.925544][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2489.935837][ T301] usb 2-1: config 0 descriptor?? [ 2489.946685][T22400] loop2: detected capacity change from 0 to 2048 [ 2489.987020][T22400] EXT4-fs (loop2): Ignoring removed orlov option [ 2490.000208][T22400] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 2490.036225][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2490.074301][T22386] device veth0_vlan entered promiscuous mode [ 2490.095737][ T20] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2490.104837][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2490.131352][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2490.195828][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2490.245862][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2490.340907][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2490.349854][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 2490.361048][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2490.386183][T22386] device veth1_macvtap entered promiscuous mode [ 2490.419096][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2490.431044][ T301] cp2112 0003:10C4:EA90.0076: unknown main item tag 0x0 [ 2490.445578][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2490.446551][ T301] cp2112 0003:10C4:EA90.0076: unknown main item tag 0x0 [ 2490.467608][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2490.474176][ T301] cp2112 0003:10C4:EA90.0076: unknown main item tag 0x0 [ 2490.483387][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2490.498601][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2490.507505][ T301] cp2112 0003:10C4:EA90.0076: unknown main item tag 0x0 [ 2490.514627][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2490.525076][ T301] cp2112 0003:10C4:EA90.0076: unknown main item tag 0x0 [ 2490.532383][ T20] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2490.544328][ T301] cp2112 0003:10C4:EA90.0076: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 2490.549225][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2490.556892][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2490.583054][ T20] usb 5-1: config 0 descriptor?? [ 2490.618752][ T30] audit: type=1400 audit(2000000810.215:4553): avc: denied { mounton } for pid=22386 comm="syz-executor" path="/root/syzkaller.bw5Erz/syz-tmp" dev="sda1" ino=2190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2490.670320][ T30] audit: type=1400 audit(2000000810.245:4554): avc: denied { mount } for pid=22386 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2490.695849][ T301] cp2112 0003:10C4:EA90.0076: Part Number: 0x00 Device Version: 0x00 [ 2490.721782][ T30] audit: type=1400 audit(2000000810.245:4555): avc: denied { mount } for pid=22386 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2490.744248][ T30] audit: type=1400 audit(2000000810.245:4556): avc: denied { mounton } for pid=22386 comm="syz-executor" path="/root/syzkaller.bw5Erz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2490.859572][T22407] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 2490.875024][T22407] EXT4-fs (loop2): Remounting filesystem read-only [ 2490.905784][ T301] cp2112 0003:10C4:EA90.0076: error requesting SMBus config [ 2490.917095][ T301] cp2112: probe of 0003:10C4:EA90.0076 failed with error -71 [ 2490.937300][ T301] usb 2-1: USB disconnect, device number 92 [ 2490.985826][ T9987] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2491.088236][ T20] savu 0003:1E7D:2D5A.0077: item fetching failed at offset 2/5 [ 2491.126612][ T20] savu 0003:1E7D:2D5A.0077: parse failed [ 2491.132733][ T20] savu: probe of 0003:1E7D:2D5A.0077 failed with error -22 [ 2491.345041][ T20] usb 5-1: USB disconnect, device number 82 [ 2491.356158][ T9987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2491.367831][ T9987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2491.380400][ T9987] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 2491.390990][ T9987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2491.402026][ T9987] usb 4-1: config 0 descriptor?? [ 2491.497403][T22418] loop0: detected capacity change from 0 to 1024 [ 2491.528517][T22418] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 2491.538096][T22418] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2491.545039][T22418] EXT4-fs error (device loop0): ext4_free_blocks:6225: comm syz.0.5644: Freeing blocks not in datazone - block = 0, count = 4096 [ 2491.559153][T22418] EXT4-fs (loop0): 1 orphan inode deleted [ 2491.564760][T22418] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2491.757072][T22427] loop0: detected capacity change from 0 to 1024 [ 2491.778223][T22427] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2491.791529][T22427] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x000000000000b930,commit=0x0000000000000005,user_xattr,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 2491.897852][ T9987] belkin 0003:1020:0006.0078: item fetching failed at offset 4/5 [ 2491.913494][T22430] loop2: detected capacity change from 0 to 256 [ 2491.916249][ T9987] belkin 0003:1020:0006.0078: parse failed [ 2491.935988][ T9987] belkin: probe of 0003:1020:0006.0078 failed with error -22 [ 2491.994813][T22434] loop4: detected capacity change from 0 to 256 [ 2492.661813][ T58] usb 4-1: USB disconnect, device number 91 [ 2493.041542][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 2493.041577][ T30] audit: type=1400 audit(2000000812.635:4599): avc: denied { create } for pid=22444 comm="syz.4.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2493.085413][ T30] audit: type=1400 audit(2000000812.665:4600): avc: denied { setopt } for pid=22444 comm="syz.4.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2493.107144][ T30] audit: type=1400 audit(2000000812.665:4601): avc: denied { map_read map_write } for pid=22444 comm="syz.4.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2493.127651][ T30] audit: type=1400 audit(2000000812.675:4602): avc: denied { unmount } for pid=21683 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2493.151118][ T30] audit: type=1400 audit(2000000812.705:4603): avc: denied { ioctl } for pid=22442 comm="syz.1.5654" path="socket:[114653]" dev="sockfs" ino=114653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2493.287229][ T30] audit: type=1400 audit(2000000812.885:4604): avc: denied { validate_trans } for pid=22454 comm="syz.1.5661" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2493.333277][ T30] audit: type=1400 audit(2000000812.925:4605): avc: denied { create } for pid=22452 comm="syz.4.5659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2493.383557][ T30] audit: type=1400 audit(2000000812.955:4606): avc: denied { read } for pid=22452 comm="syz.4.5659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2493.436242][ T30] audit: type=1400 audit(2000000812.975:4607): avc: denied { write } for pid=22452 comm="syz.4.5659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2493.596541][ T30] audit: type=1400 audit(2000000813.195:4608): avc: denied { confidentiality } for pid=22450 comm="syz.2.5660" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 2494.454901][T22465] loop4: detected capacity change from 0 to 40427 [ 2494.616813][T22465] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2494.645479][T22465] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2494.675325][T22465] F2FS-fs (loop4): invalid crc value [ 2494.713469][T22465] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2495.496228][T22465] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2495.503778][T22465] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2495.577865][T22505] loop3: detected capacity change from 0 to 1024 [ 2495.677197][T22505] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 2495.695367][T22507] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22507 comm=syz.1.5681 [ 2495.716348][ T7211] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2495.737042][ T7211] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2495.752136][T22505] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000000006,mblk_io_submit,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,inlinecrypt,bsddf,,errors=continue. Quota mode: none. [ 2496.173706][T22533] loop3: detected capacity change from 0 to 256 [ 2496.565849][ T301] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2497.345722][ T301] usb 5-1: Using ep0 maxpacket: 16 [ 2497.625843][ T301] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2497.634898][ T301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2497.655719][ T301] usb 5-1: Product: syz [ 2497.659864][ T301] usb 5-1: Manufacturer: syz [ 2497.664296][ T301] usb 5-1: SerialNumber: syz [ 2497.688416][ T301] r8152-cfgselector 5-1: config 0 descriptor?? [ 2497.946270][ T301] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2498.075702][ T58] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2498.086114][T11656] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2498.165865][ T301] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2498.172407][ T301] r8152-cfgselector 5-1: bad CDC descriptors [ 2498.195829][ T301] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2498.203301][ T301] r8152-cfgselector 5-1: USB disconnect, device number 83 [ 2498.405847][T11656] usb 4-1: Using ep0 maxpacket: 16 [ 2498.537139][ T58] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2498.537262][T11656] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2498.737192][ T58] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2498.737275][T11656] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2498.756197][T11656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2498.764771][T11656] usb 4-1: Product: syz [ 2498.769113][T11656] usb 4-1: Manufacturer: syz [ 2498.773760][T11656] usb 4-1: SerialNumber: syz [ 2498.778423][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2498.794711][ T58] usb 3-1: Product: syz [ 2498.800154][T11656] usb 4-1: config 0 descriptor?? [ 2498.805476][ T58] usb 3-1: Manufacturer: syz [ 2498.815324][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 2498.815379][ T30] audit: type=1400 audit(2000000818.405:4662): avc: denied { create } for pid=22600 comm="syz.4.5717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2498.846401][ T58] usb 3-1: SerialNumber: syz [ 2498.868202][T11656] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2498.922006][T22603] loop4: detected capacity change from 0 to 256 [ 2499.106483][ T301] usb 4-1: USB disconnect, device number 92 [ 2499.263184][ T30] audit: type=1326 audit(2000000818.855:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22607 comm="syz.1.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e0023ff9 code=0x7ffc0000 [ 2499.289765][ T30] audit: type=1326 audit(2000000818.855:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22607 comm="syz.1.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e0023ff9 code=0x7ffc0000 [ 2499.317522][ T30] audit: type=1326 audit(2000000818.855:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22607 comm="syz.1.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70e0023ff9 code=0x7ffc0000 [ 2499.341908][ T30] audit: type=1326 audit(2000000818.855:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22607 comm="syz.1.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e0023ff9 code=0x7ffc0000 [ 2499.373228][ T30] audit: type=1326 audit(2000000818.855:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22607 comm="syz.1.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e0023ff9 code=0x7ffc0000 [ 2499.398604][ T30] audit: type=1326 audit(2000000818.855:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22607 comm="syz.1.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70e0023ff9 code=0x7ffc0000 [ 2499.424574][ T30] audit: type=1326 audit(2000000818.865:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22607 comm="syz.1.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e0023ff9 code=0x7ffc0000 [ 2499.449227][ T30] audit: type=1326 audit(2000000818.865:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22607 comm="syz.1.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e0023ff9 code=0x7ffc0000 [ 2499.474129][ T30] audit: type=1326 audit(2000000818.865:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22607 comm="syz.1.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f70e0023ff9 code=0x7ffc0000 [ 2499.766057][T22615] loop3: detected capacity change from 0 to 256 [ 2499.816550][T22615] FAT-fs (loop3): Unrecognized mount option "umask=00000010000000000000005±å" or missing value [ 2500.069953][T22636] loop3: detected capacity change from 0 to 256 [ 2500.179420][ T58] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2500.186038][ T58] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 2500.193590][ T58] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2500.367833][ T58] cdc_ncm 3-1:1.0: setting tx_max = 72 [ 2500.381483][ T58] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2500.401411][ T58] usb 3-1: USB disconnect, device number 84 [ 2500.408749][ T58] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2501.114227][T22651] syz.4.5736[22651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2501.114491][T22651] syz.4.5736[22651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2501.341789][T22657] loop4: detected capacity change from 0 to 256 [ 2501.621346][T22660] loop2: detected capacity change from 0 to 2048 [ 2502.382242][ T58] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2502.449656][T22660] Alternate GPT is invalid, using primary GPT. [ 2502.630827][T22660] loop2: p1 p2 p3 [ 2503.016984][ T58] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 2503.064685][ T58] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2503.088145][T22672] bridge0: port 1(bridge_slave_0) entered blocking state [ 2503.095170][T22672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2503.104465][T22672] device bridge_slave_0 entered promiscuous mode [ 2503.111357][T14955] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2503.120604][T22683] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5748'. [ 2503.131107][T22672] bridge0: port 2(bridge_slave_1) entered blocking state [ 2503.138494][T22672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2503.147091][T22672] device bridge_slave_1 entered promiscuous mode [ 2503.160622][ T58] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2503.183493][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2503.203135][ T58] usb 4-1: SerialNumber: syz [ 2503.365783][T14955] usb 2-1: Using ep0 maxpacket: 16 [ 2503.434422][T22700] loop2: detected capacity change from 0 to 1024 [ 2503.453598][T22672] bridge0: port 2(bridge_slave_1) entered blocking state [ 2503.460701][T22672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2503.464947][T22698] loop4: detected capacity change from 0 to 8192 [ 2503.468060][T22672] bridge0: port 1(bridge_slave_0) entered blocking state [ 2503.481171][T22672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2503.487915][ T58] usb 4-1: 0:2 : does not exist [ 2503.493093][T14955] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 2503.507850][T22700] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 2503.509247][T14955] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 2503.518198][T22700] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 2503.534896][T14955] usb 2-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2503.548918][T14955] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2503.552691][T22700] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2503.571295][T22698] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2503.588315][T22700] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2503.600218][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2503.607689][T22700] System zones: 0-1, 3-36 [ 2503.615083][T22700] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2503.636338][ T461] bridge0: port 1(bridge_slave_0) entered disabled state [ 2503.646712][T14955] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2503.669185][ T58] usb 4-1: USB disconnect, device number 93 [ 2503.676179][T14955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2503.677238][ T461] bridge0: port 2(bridge_slave_1) entered disabled state [ 2503.691623][T14955] usb 2-1: SerialNumber: syz [ 2503.715499][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2503.723773][T22677] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2503.733934][T22677] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2503.744305][ T461] bridge0: port 1(bridge_slave_0) entered blocking state [ 2503.751284][ T461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2503.771840][ T7211] device bridge_slave_1 left promiscuous mode [ 2503.779173][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 2503.790506][ T7211] device bridge_slave_0 left promiscuous mode [ 2503.798357][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 2503.811802][ T7211] device veth1_macvtap left promiscuous mode [ 2503.818872][ T7211] device veth0_vlan left promiscuous mode [ 2503.962290][T22677] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2503.979898][T22677] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2504.149925][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2504.159400][ T461] bridge0: port 2(bridge_slave_1) entered blocking state [ 2504.166468][ T461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2504.253529][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2504.263631][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2504.284551][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2504.305440][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2504.306876][T22720] loop3: detected capacity change from 0 to 128 [ 2504.357541][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2504.367369][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2504.385520][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2504.395462][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2504.406698][T22672] device veth0_vlan entered promiscuous mode [ 2504.417129][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2504.426369][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2504.451639][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2504.461705][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2504.474494][T22672] device veth1_macvtap entered promiscuous mode [ 2504.476106][T14955] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 2504.495906][ T20] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2504.511449][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2504.512479][T14955] usb 2-1: USB disconnect, device number 93 [ 2504.526814][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2504.546390][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2504.577155][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2504.594752][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2504.628651][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2504.628689][ T30] audit: type=1400 audit(2000000824.225:4697): avc: denied { mounton } for pid=22672 comm="syz-executor" path="/root/syzkaller.nVd61p/syz-tmp" dev="sda1" ino=2192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2504.716899][ T30] audit: type=1400 audit(2000000824.255:4698): avc: denied { mount } for pid=22672 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2504.787433][ T30] audit: type=1400 audit(2000000824.265:4699): avc: denied { mount } for pid=22672 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2504.811084][ T30] audit: type=1400 audit(2000000824.265:4700): avc: denied { mounton } for pid=22672 comm="syz-executor" path="/root/syzkaller.nVd61p/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2504.839628][ T30] audit: type=1400 audit(2000000824.265:4701): avc: denied { mounton } for pid=22672 comm="syz-executor" path="/root/syzkaller.nVd61p/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=115623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2504.869013][ T30] audit: type=1400 audit(2000000824.275:4702): avc: denied { mounton } for pid=22672 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2504.893428][ T30] audit: type=1400 audit(2000000824.275:4703): avc: denied { mounton } for pid=22672 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2504.955970][ T20] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 2504.964197][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2504.975730][ T30] audit: type=1400 audit(2000000824.275:4704): avc: denied { mount } for pid=22672 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2505.035777][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2505.049316][T22732] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2505.067695][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2505.095712][ T20] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2505.104679][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.140574][ T20] usb 3-1: config 0 descriptor?? [ 2505.156154][T22718] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2505.232039][T22738] netlink: 'syz.0.5768': attribute type 4 has an invalid length. [ 2505.240654][T22738] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5768'. [ 2505.344587][T22740] loop0: detected capacity change from 0 to 2048 [ 2505.412513][T22740] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2505.438801][T22740] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 2505.454963][T22740] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 2505.467358][T22740] EXT4-fs (loop0): This should not happen!! Data will be lost [ 2505.467358][T22740] [ 2505.480991][T22740] EXT4-fs (loop0): Total free blocks count 0 [ 2505.487672][T22740] EXT4-fs (loop0): Free/Dirty block details [ 2505.493559][T22740] EXT4-fs (loop0): free_blocks=2415919104 [ 2505.496003][T14955] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2505.499825][T22740] EXT4-fs (loop0): dirty_blocks=48 [ 2505.511802][T22740] EXT4-fs (loop0): Block reservation details [ 2505.518185][T22740] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 2505.533389][T22748] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 2505.548119][T22748] EXT4-fs (loop0): This should not happen!! Data will be lost [ 2505.548119][T22748] [ 2505.658369][ T20] plantronics 0003:047F:FFFF.0079: unknown main item tag 0xd [ 2505.673222][ T20] plantronics 0003:047F:FFFF.0079: No inputs registered, leaving [ 2505.693362][ T20] plantronics 0003:047F:FFFF.0079: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2505.705731][ T58] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2505.865839][T14955] usb 5-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 2505.903125][T14955] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2505.920036][ T20] usb 3-1: USB disconnect, device number 85 [ 2505.995859][T14955] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2506.005203][T14955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2506.013689][T14955] usb 5-1: SerialNumber: syz [ 2506.065878][ T58] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2506.077274][ T58] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2506.087638][ T58] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 2506.097023][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.147674][ T30] audit: type=1400 audit(2000000825.745:4705): avc: denied { read write } for pid=22752 comm="syz.3.5774" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2506.151102][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.171619][ T30] audit: type=1400 audit(2000000825.745:4706): avc: denied { open } for pid=22752 comm="syz.3.5774" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2506.180337][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.210713][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.218289][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.225968][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.234306][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.242175][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.249486][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.257553][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.264839][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.272196][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.279533][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.286997][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.294469][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.298060][T14955] usb 5-1: 0:2 : does not exist [ 2506.301741][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.313764][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.321326][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.328625][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.335831][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.343369][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.350745][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.358957][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.367467][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.376822][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.384402][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.392657][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.400984][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.409010][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.417308][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.424765][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.432571][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.441379][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.449577][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.457380][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.464968][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.470526][T14955] usb 5-1: USB disconnect, device number 84 [ 2506.472341][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.488767][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.496181][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.497370][T22755] loop2: detected capacity change from 0 to 128 [ 2506.503571][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.503640][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.525464][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.532724][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.540063][ T301] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2506.551204][T22755] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2506.554249][ T301] hid-generic 0000:0000:0000.007A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2506.574250][T22755] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2506.621217][T22758] loop3: detected capacity change from 0 to 256 [ 2506.638885][ T58] logitech-hidpp-device 0003:046D:C086.007B: item fetching failed at offset 2/5 [ 2506.649768][ T58] logitech-hidpp-device 0003:046D:C086.007B: hidpp_probe:parse failed [ 2506.658144][ T58] logitech-hidpp-device: probe of 0003:046D:C086.007B failed with error -22 [ 2506.856613][ T58] usb 2-1: USB disconnect, device number 94 [ 2506.989678][T22772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5781'. [ 2507.075877][ T301] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2507.095758][ T20] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2507.295822][T20686] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2507.345735][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 2507.445987][ T301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2507.457553][ T301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2507.467471][ T301] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 2507.476455][ T301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2507.485779][ T301] usb 3-1: config 0 descriptor?? [ 2507.635888][ T20] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2507.645287][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2507.653288][ T9987] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2507.660774][ T20] usb 5-1: Product: syz [ 2507.664798][ T20] usb 5-1: Manufacturer: syz [ 2507.669457][T20686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2507.680794][ T20] usb 5-1: SerialNumber: syz [ 2507.687121][ T20] usb 5-1: config 0 descriptor?? [ 2507.835940][T20686] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2507.844919][T20686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2507.852794][T20686] usb 4-1: Product: syz [ 2507.856844][T20686] usb 4-1: Manufacturer: syz [ 2507.861265][T20686] usb 4-1: SerialNumber: syz [ 2507.915793][ T9987] usb 2-1: Using ep0 maxpacket: 16 [ 2507.958878][ T301] itetech 0003:258A:6A88.007C: unknown main item tag 0x0 [ 2507.967562][ T301] itetech 0003:258A:6A88.007C: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 2508.045841][ T9987] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 2508.053891][ T9987] usb 2-1: config 0 has no interface number 0 [ 2508.059936][ T9987] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2508.069489][ T9987] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2508.157395][ T301] usb 3-1: USB disconnect, device number 86 [ 2508.196081][ T9987] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2508.205353][ T9987] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2508.213215][ T9987] usb 2-1: Product: syz [ 2508.217518][ T9987] usb 2-1: SerialNumber: syz [ 2508.223457][ T9987] usb 2-1: config 0 descriptor?? [ 2508.399679][ T20] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 2508.497815][ T9987] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 2508.506771][ T9987] usb 2-1: USB disconnect, device number 95 [ 2508.617164][ T20] usb 5-1: USB disconnect, device number 85 [ 2508.985891][T20686] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2508.996307][T20686] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 2509.011748][T20686] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 2509.131334][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.150396][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.175347][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.203866][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.212793][T20686] cdc_ncm 4-1:1.0: setting tx_max = 72 [ 2509.233076][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.241929][T20686] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 2509.272848][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.284230][T20686] usb 4-1: USB disconnect, device number 94 [ 2509.299545][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.316497][T20686] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 2509.326086][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.333426][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.351537][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.365757][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.383516][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.393643][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.415747][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.434605][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.452405][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.462515][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.481124][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.494353][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.509565][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.525053][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.539393][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.565972][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.586174][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.606028][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.622933][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.639151][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.655936][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.671129][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.687716][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.713948][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.742605][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.768240][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.786867][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.803836][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.819295][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.836143][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.866626][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.883303][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.900512][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.917823][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.935584][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.953953][ T20] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2509.973614][T20686] ================================================================== [ 2509.981948][T20686] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 2509.989974][T20686] Read of size 8 at addr ffff88810eda4c70 by task kworker/0:4/20686 [ 2509.998162][T20686] [ 2510.000332][T20686] CPU: 0 PID: 20686 Comm: kworker/0:4 Tainted: G W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 2510.011620][T20686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2510.021790][T20686] Workqueue: events free_work [ 2510.027103][T20686] Call Trace: [ 2510.030225][T20686] [ 2510.033174][T20686] dump_stack_lvl+0x151/0x1c0 [ 2510.037700][T20686] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2510.043511][T20686] ? panic+0x760/0x760 [ 2510.047501][T20686] ? queue_work_on+0x12e/0x170 [ 2510.052358][T20686] print_address_description+0x87/0x3b0 [ 2510.058585][T20686] kasan_report+0x179/0x1c0 [ 2510.063695][T20686] ? __kasan_check_write+0x14/0x20 [ 2510.068805][T20686] ? __list_del_entry_valid+0xa6/0x120 [ 2510.074110][T20686] ? __list_del_entry_valid+0xa6/0x120 [ 2510.079485][T20686] __asan_report_load8_noabort+0x14/0x20 [ 2510.084956][T20686] __list_del_entry_valid+0xa6/0x120 [ 2510.090428][T20686] process_one_work+0x458/0xc10 [ 2510.095648][T20686] worker_thread+0xad5/0x12a0 [ 2510.100187][T20686] ? _raw_spin_lock+0x1b0/0x1b0 [ 2510.104953][T20686] kthread+0x421/0x510 [ 2510.108839][T20686] ? worker_clr_flags+0x180/0x180 [ 2510.113710][T20686] ? kthread_blkcg+0xd0/0xd0 [ 2510.118132][T20686] ret_from_fork+0x1f/0x30 [ 2510.122401][T20686] [ 2510.125253][T20686] [ 2510.127423][T20686] Allocated by task 20686: [ 2510.132217][T20686] ____kasan_kmalloc+0xdb/0x110 [ 2510.137397][T20686] __kasan_kmalloc+0x9/0x10 [ 2510.141826][T20686] __kmalloc+0x13a/0x270 [ 2510.147722][T20686] kvmalloc_node+0x1f0/0x4d0 [ 2510.152236][T20686] alloc_netdev_mqs+0x8c/0xc90 [ 2510.156835][T20686] alloc_etherdev_mqs+0x33/0x40 [ 2510.162128][T20686] usbnet_probe+0x1fc/0x2840 [ 2510.166620][T20686] usb_probe_interface+0x5b6/0xa90 [ 2510.171568][T20686] really_probe+0x28d/0x970 [ 2510.175912][T20686] __driver_probe_device+0x1a0/0x310 [ 2510.181215][T20686] driver_probe_device+0x54/0x3d0 [ 2510.186223][T20686] __device_attach_driver+0x2c5/0x470 [ 2510.191645][T20686] bus_for_each_drv+0x183/0x200 [ 2510.196588][T20686] __device_attach+0x312/0x510 [ 2510.201274][T20686] device_initial_probe+0x1a/0x20 [ 2510.206448][T20686] bus_probe_device+0xbe/0x1e0 [ 2510.211047][T20686] device_add+0xb60/0xf10 [ 2510.215571][T20686] usb_set_configuration+0x190f/0x1e80 [ 2510.221043][T20686] usb_generic_driver_probe+0x8b/0x150 [ 2510.226340][T20686] usb_probe_device+0x144/0x260 [ 2510.231024][T20686] really_probe+0x28d/0x970 [ 2510.235979][T20686] __driver_probe_device+0x1a0/0x310 [ 2510.242075][T20686] driver_probe_device+0x54/0x3d0 [ 2510.246944][T20686] __device_attach_driver+0x2c5/0x470 [ 2510.252217][T20686] bus_for_each_drv+0x183/0x200 [ 2510.256906][T20686] __device_attach+0x312/0x510 [ 2510.261753][T20686] device_initial_probe+0x1a/0x20 [ 2510.266686][T20686] bus_probe_device+0xbe/0x1e0 [ 2510.271558][T20686] device_add+0xb60/0xf10 [ 2510.275721][T20686] usb_new_device+0x1038/0x1c00 [ 2510.280405][T20686] hub_event+0x2def/0x4770 [ 2510.284855][T20686] process_one_work+0x6bb/0xc10 [ 2510.289538][T20686] worker_thread+0xad5/0x12a0 [ 2510.294662][T20686] kthread+0x421/0x510 [ 2510.299025][T20686] ret_from_fork+0x1f/0x30 [ 2510.303547][T20686] [ 2510.305731][T20686] Freed by task 20686: [ 2510.309974][T20686] kasan_set_track+0x4b/0x70 [ 2510.314398][T20686] kasan_set_free_info+0x23/0x40 [ 2510.319178][T20686] ____kasan_slab_free+0x126/0x160 [ 2510.324648][T20686] __kasan_slab_free+0x11/0x20 [ 2510.329242][T20686] slab_free_freelist_hook+0xbd/0x190 [ 2510.334451][T20686] kfree+0xc8/0x220 [ 2510.338360][T20686] kvfree+0x35/0x40 [ 2510.342210][T20686] netdev_freemem+0x3f/0x60 [ 2510.346533][T20686] netdev_release+0x7f/0xb0 [ 2510.350873][T20686] device_release+0x95/0x1c0 [ 2510.355436][T20686] kobject_put+0x178/0x260 [ 2510.359773][T20686] put_device+0x1f/0x30 [ 2510.363937][T20686] free_netdev+0x34f/0x440 [ 2510.368230][T20686] usbnet_disconnect+0x245/0x390 [ 2510.373861][T20686] usb_unbind_interface+0x1fa/0x8c0 [ 2510.380794][T20686] device_release_driver_internal+0x50b/0x7d0 [ 2510.390057][T20686] device_release_driver+0x19/0x20 [ 2510.396213][T20686] bus_remove_device+0x2f8/0x360 [ 2510.401203][T20686] device_del+0x663/0xe90 [ 2510.405449][T20686] usb_disable_device+0x380/0x720 [ 2510.410314][T20686] usb_disconnect+0x32a/0x890 [ 2510.415043][T20686] hub_event+0x1d42/0x4770 [ 2510.419832][T20686] process_one_work+0x6bb/0xc10 [ 2510.424636][T20686] worker_thread+0xe02/0x12a0 [ 2510.429134][T20686] kthread+0x421/0x510 [ 2510.433039][T20686] ret_from_fork+0x1f/0x30 [ 2510.437294][T20686] [ 2510.439461][T20686] Last potentially related work creation: [ 2510.445102][T20686] kasan_save_stack+0x3b/0x60 [ 2510.449791][T20686] __kasan_record_aux_stack+0xd3/0xf0 [ 2510.455016][T20686] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2510.460646][T20686] insert_work+0x56/0x320 [ 2510.464818][T20686] __queue_work+0x92a/0xcd0 [ 2510.469145][T20686] queue_work_on+0x105/0x170 [ 2510.473780][T20686] usbnet_link_change+0xeb/0x100 [ 2510.478917][T20686] usbnet_probe+0x1dcb/0x2840 [ 2510.483511][T20686] usb_probe_interface+0x5b6/0xa90 [ 2510.488460][T20686] really_probe+0x28d/0x970 [ 2510.492893][T20686] __driver_probe_device+0x1a0/0x310 [ 2510.498015][T20686] driver_probe_device+0x54/0x3d0 [ 2510.502871][T20686] __device_attach_driver+0x2c5/0x470 [ 2510.508167][T20686] bus_for_each_drv+0x183/0x200 [ 2510.513423][T20686] __device_attach+0x312/0x510 [ 2510.518018][T20686] device_initial_probe+0x1a/0x20 [ 2510.522968][T20686] bus_probe_device+0xbe/0x1e0 [ 2510.527558][T20686] device_add+0xb60/0xf10 [ 2510.531839][T20686] usb_set_configuration+0x190f/0x1e80 [ 2510.537127][T20686] usb_generic_driver_probe+0x8b/0x150 [ 2510.542425][T20686] usb_probe_device+0x144/0x260 [ 2510.547282][T20686] really_probe+0x28d/0x970 [ 2510.551988][T20686] __driver_probe_device+0x1a0/0x310 [ 2510.557107][T20686] driver_probe_device+0x54/0x3d0 [ 2510.561975][T20686] __device_attach_driver+0x2c5/0x470 [ 2510.567183][T20686] bus_for_each_drv+0x183/0x200 [ 2510.572386][T20686] __device_attach+0x312/0x510 [ 2510.576980][T20686] device_initial_probe+0x1a/0x20 [ 2510.582275][T20686] bus_probe_device+0xbe/0x1e0 [ 2510.586888][T20686] device_add+0xb60/0xf10 [ 2510.591049][T20686] usb_new_device+0x1038/0x1c00 [ 2510.596103][T20686] hub_event+0x2def/0x4770 [ 2510.600421][T20686] process_one_work+0x6bb/0xc10 [ 2510.605110][T20686] worker_thread+0xad5/0x12a0 [ 2510.609621][T20686] kthread+0x421/0x510 [ 2510.613533][T20686] ret_from_fork+0x1f/0x30 [ 2510.617978][T20686] [ 2510.620489][T20686] The buggy address belongs to the object at ffff88810eda4000 [ 2510.620489][T20686] which belongs to the cache kmalloc-4k of size 4096 [ 2510.634379][T20686] The buggy address is located 3184 bytes inside of [ 2510.634379][T20686] 4096-byte region [ffff88810eda4000, ffff88810eda5000) [ 2510.647835][T20686] The buggy address belongs to the page: [ 2510.653324][T20686] page:ffffea00043b6800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10eda0 [ 2510.664611][T20686] head:ffffea00043b6800 order:3 compound_mapcount:0 compound_pincount:0 [ 2510.672772][T20686] flags: 0x4000000000010200(slab|head|zone=1) [ 2510.678703][T20686] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 2510.687124][T20686] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 2510.696197][T20686] page dumped because: kasan: bad access detected [ 2510.702467][T20686] page_owner tracks the page as allocated [ 2510.708007][T20686] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 15159, ts 1982229710912, free_ts 1982187597398 [ 2510.729273][T20686] post_alloc_hook+0x1a3/0x1b0 [ 2510.733876][T20686] prep_new_page+0x1b/0x110 [ 2510.738219][T20686] get_page_from_freelist+0x3550/0x35d0 [ 2510.744382][T20686] __alloc_pages+0x27e/0x8f0 [ 2510.748800][T20686] new_slab+0x9a/0x4e0 [ 2510.753421][T20686] ___slab_alloc+0x39e/0x830 [ 2510.757945][T20686] __slab_alloc+0x4a/0x90 [ 2510.762848][T20686] kmem_cache_alloc_trace+0x142/0x210 [ 2510.768041][T20686] kobject_uevent_env+0x269/0x700 [ 2510.773207][T20686] kobject_uevent+0x1f/0x30 [ 2510.777522][T20686] net_rx_queue_update_kobjects+0x213/0x490 [ 2510.784239][T20686] netdev_register_kobject+0x231/0x320 [ 2510.790524][T20686] register_netdevice+0xde9/0x1390 [ 2510.796514][T20686] veth_newlink+0x72e/0xe20 [ 2510.801230][T20686] rtnl_newlink+0x14c7/0x2050 [ 2510.805922][T20686] rtnetlink_rcv_msg+0x951/0xc40 [ 2510.810864][T20686] page last free stack trace: [ 2510.815370][T20686] free_unref_page_prepare+0x7c8/0x7d0 [ 2510.820768][T20686] free_unref_page+0xe8/0x750 [ 2510.825805][T20686] __free_pages+0x61/0xf0 [ 2510.829969][T20686] __free_slab+0xec/0x1d0 [ 2510.834543][T20686] __unfreeze_partials+0x165/0x1a0 [ 2510.840040][T20686] put_cpu_partial+0xc4/0x120 [ 2510.845232][T20686] __slab_free+0x1c8/0x290 [ 2510.850917][T20686] ___cache_free+0x109/0x120 [ 2510.855739][T20686] qlink_free+0x4d/0x90 [ 2510.860081][T20686] qlist_free_all+0x44/0xb0 [ 2510.864632][T20686] kasan_quarantine_reduce+0x15a/0x180 [ 2510.870268][T20686] __kasan_slab_alloc+0x2f/0xe0 [ 2510.874972][T20686] slab_post_alloc_hook+0x53/0x2c0 [ 2510.879900][T20686] kmem_cache_alloc_trace+0xf9/0x210 [ 2510.885024][T20686] kset_create_and_add+0x5c/0x2b0 [ 2510.890001][T20686] netdev_register_kobject+0x1a6/0x320 [ 2510.895314][T20686] [ 2510.897460][T20686] Memory state around the buggy address: [ 2510.903042][T20686] ffff88810eda4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2510.911019][T20686] ffff88810eda4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2510.919087][T20686] >ffff88810eda4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2510.927846][T20686] ^ [ 2510.936025][T20686] ffff88810eda4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2510.943925][T20686] ffff88810eda4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2510.952148][T20686] ================================================================== [ 2510.960042][T20686] Disabling lock debugging due to kernel taint [ 2510.997861][ T20] hid-generic 0000:0000:0000.007D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2511.317427][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2511.317462][ T30] audit: type=1400 audit(2000000830.915:4710): avc: denied { ioctl } for pid=22791 comm="syz.4.5788" path="net:[4026532327]" dev="nsfs" ino=4026532327 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1