last executing test programs: 4m15.989150009s ago: executing program 32 (id=900): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x1, 0x4f96, 0xe20, 0x42}) 4m12.48454411s ago: executing program 33 (id=1001): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000007c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m6.578064271s ago: executing program 34 (id=1157): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000018000000324901008200000001"], 0x50) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 4m2.128397945s ago: executing program 35 (id=1249): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000380)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x100000000000000) shutdown(r0, 0x0) 3m48.609279517s ago: executing program 36 (id=1571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x9100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/49}, 0x20) 3m39.311488547s ago: executing program 37 (id=1837): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x7}) 3m37.106776068s ago: executing program 38 (id=1900): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x169) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) stat(&(0x7f0000009600)='./file0\x00', &(0x7f00000096c0)) 3m15.612811527s ago: executing program 39 (id=2603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) getpgid(0x0) 2m50.143617915s ago: executing program 3 (id=3587): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000024c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x140, 0xb, 0xd0e0011, 0x0, 0xc6, 0x218, 0x1d8, 0x190, 0x218, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1, 0x0, 0x3b}, 0x0, 0x70, 0xd8, 0x2000000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x101, 0x0, 0xc, 'netbios-ns\x00', 'syz1\x00', {0x27ff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x6, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0) 2m50.143240955s ago: executing program 3 (id=3589): ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000000c0)={'\x00', 0x1ff, 0x0, 0x7f, 0x0, 0x401, 0x4, 0x2, '\x00', 0x59ac}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) 2m50.143071525s ago: executing program 3 (id=3590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='tlb_flush\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r2}, 0x10) 2m50.119212527s ago: executing program 3 (id=3591): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 2m50.108712268s ago: executing program 3 (id=3592): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0x26e}, {&(0x7f0000000a00)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae01084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed23a", 0x6b}], 0x2}, 0x8000) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r0) 2m50.016327177s ago: executing program 3 (id=3594): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) rmdir(&(0x7f0000000280)='./file2\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000200)={@id={0x2, 0x0, @c}}) 2m50.011911708s ago: executing program 40 (id=3594): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) rmdir(&(0x7f0000000280)='./file2\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000200)={@id={0x2, 0x0, @c}}) 2m33.447889584s ago: executing program 7 (id=4114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0xfc}}, 0x1c}}, 0x0) 2m33.403608039s ago: executing program 7 (id=4116): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x40000000, 0x4) write(r0, &(0x7f0000000000)="08001800000020a3", 0x8) recvmmsg(r0, &(0x7f0000006f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x4000002}], 0x1, 0x20, 0x0) 2m33.345235715s ago: executing program 7 (id=4118): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 2m33.268709722s ago: executing program 7 (id=4122): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000880)={[{@i_version}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x800, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 2m33.044943435s ago: executing program 7 (id=4129): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002000)={r0}, 0x4) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) 2m32.849853784s ago: executing program 7 (id=4139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) timer_gettime(0x0, 0x0) 2m32.812847248s ago: executing program 41 (id=4139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) timer_gettime(0x0, 0x0) 2m9.467047912s ago: executing program 6 (id=4751): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x4) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m8.466768773s ago: executing program 6 (id=4789): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@ll={0x11, 0x10, r2, 0x1, 0x2, 0x6, @multicast}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)='O', 0x1}, {&(0x7f00000000c0)="ff22a9449128addb00", 0x9}], 0x2}}], 0x1, 0x400c889) 2m8.449840634s ago: executing program 6 (id=4791): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000c00)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 2m8.387976621s ago: executing program 6 (id=4794): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@grpquota}, {@auto_da_alloc}, {@grpquota}]}, 0xfe, 0x572, &(0x7f0000000240)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x8000, 0x91) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m8.325720057s ago: executing program 6 (id=4797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fdf, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) sysinfo(&(0x7f00000004c0)=""/184) 2m8.112534098s ago: executing program 6 (id=4803): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x8, 0x0, &(0x7f0000000000)) 2m8.112247408s ago: executing program 42 (id=4803): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x8, 0x0, &(0x7f0000000000)) 1m1.067507213s ago: executing program 0 (id=6986): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x7, "ff00"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x2) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000180)={0xf0e4, 0x101, 0x8, 0x9, 0x2, "3ec44de7cab28dda"}) 1m1.053337655s ago: executing program 0 (id=6988): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x40, 0x3, 0x6, "e17a0268d9bc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f00000007c0)={0x40, 0x6, 0x2, "349d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 58.911955859s ago: executing program 0 (id=7035): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_lru_insertion\x00', r1, 0x0, 0xa3b}, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 58.889805171s ago: executing program 0 (id=7036): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 58.854103765s ago: executing program 0 (id=7038): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 58.834290987s ago: executing program 0 (id=7039): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200ee050a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 43.79880757s ago: executing program 43 (id=7039): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200ee050a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 27.367856904s ago: executing program 2 (id=7757): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 26.433212868s ago: executing program 2 (id=7792): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r1, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000880)) 24.966076284s ago: executing program 2 (id=7806): socket$inet(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000180)=0x400, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 24.935098107s ago: executing program 2 (id=7808): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 24.884441082s ago: executing program 2 (id=7810): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) 24.788028352s ago: executing program 2 (id=7813): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='\x00', 0xffffffffffffffff) 24.719191668s ago: executing program 44 (id=7813): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='\x00', 0xffffffffffffffff) 2.717398809s ago: executing program 5 (id=8414): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f00000102c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000016440)={0x2020}, 0x2020) 2.192070082s ago: executing program 1 (id=8438): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd65}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) 2.155151765s ago: executing program 5 (id=8439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000140), &(0x7f0000000100)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) 2.136191727s ago: executing program 5 (id=8440): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2.084480102s ago: executing program 5 (id=8442): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 2.048342386s ago: executing program 1 (id=8445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18) setitimer(0x2, 0x0, 0x0) 2.028350278s ago: executing program 5 (id=8447): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x4, 0x8, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ae0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 1.966625304s ago: executing program 1 (id=8451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x2, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.929516858s ago: executing program 9 (id=8455): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b12050200000000240012800b00010069703667726500001400028008000100", @ANYRES32=r2, @ANYBLOB="0800050003"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 1.91111879s ago: executing program 5 (id=8456): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x10}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x13, 0x6b39, 0x10, 0x11e, 0x9, 0x5, 0xbe, 0x8, 0x8, 0x1, 0x7, 0x1c}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.893902161s ago: executing program 9 (id=8457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = epoll_create1(0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 1.80896398s ago: executing program 1 (id=8460): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 1.728536848s ago: executing program 1 (id=8462): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x400, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1.654446935s ago: executing program 1 (id=8464): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x3, 0x1, 0x0, 0x1d, {0x9, 0x21, 0xf800, 0xdf, 0x1, {0x22, 0xb3}}, {{{0x9, 0x5, 0x81, 0x3, 0x9a24824d8b6ef257, 0x0, 0x0, 0xe}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ec0)={0x24, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001940)={0x24, 0x0, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002580)={0x2c, &(0x7f0000002300)={0x0, 0xf, 0xb3, {0xb3, 0xf, "64e9987e60b596d8e504685a568c7de481280342c0b938c30d9f5a55c0f18f9e1dcf1f3ada45b41867d3e650ee5c0ef6420a3dc24d58a8e3f024c1d78afc493a1438d1e58fd1b4d86e323d01148bc8f6c5312743d821c80d0ca15273f779f8d4cfca3113ff1ea969121bde2a9f0defb92428979a7bdc18f5659de54d780b91d87bea980fdb1a40ddd9ea0b7f718d6f74dc6cdf86e0149cd5c734f77539d16d4864a3a2b7b3c94b786a0c926db9877c118e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.239617217s ago: executing program 8 (id=8473): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0xff, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x10, 0x6}]}}]}}]}, 0x64}}, 0x24040084) 1.219210669s ago: executing program 8 (id=8474): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) 297.506101ms ago: executing program 4 (id=8482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 286.526272ms ago: executing program 8 (id=8483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000002}, 0x2c) 273.790503ms ago: executing program 4 (id=8484): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000280)="05", 0x5b6, 0x240458d1, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @broadcast}, 0x14) 255.017335ms ago: executing program 4 (id=8485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 234.391097ms ago: executing program 4 (id=8486): unshare(0x24060400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x2) pwritev2(r1, 0x0, 0x0, 0x5412, 0x0, 0x0) 228.978537ms ago: executing program 8 (id=8487): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 210.26748ms ago: executing program 4 (id=8488): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000daf000/0x1000)=nil, 0x1000) munlock(&(0x7f0000418000/0x3000)=nil, 0x3000) munlockall() 170.540494ms ago: executing program 8 (id=8489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002140), 0x802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000", @ANYRESHEX]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"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"}) 92.604162ms ago: executing program 9 (id=8490): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 79.985653ms ago: executing program 9 (id=8491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000300)={{0x1, 0x0, 0x80, {0x8080000, 0x2000}}, "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", "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"}) 61.819814ms ago: executing program 8 (id=8492): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) 40.896377ms ago: executing program 9 (id=8493): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(r2) 26.316398ms ago: executing program 4 (id=8494): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 0s ago: executing program 9 (id=8495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'netdevsim0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="020304000100090104006bd648c610112f01fe80000000000000000000000000002eff020000000000000000000000000001042088be"], 0x1043) kernel console output (not intermixed with test programs): size [ 241.738816][T15192] netem: change failed [ 241.765870][T15142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.773192][T15142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.795511][T15200] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 242.370293][T15244] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6441'. [ 242.545973][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 242.546011][ T28] audit: type=1400 audit(242.515:4965): avc: denied { validate_trans } for pid=15262 comm="syz.0.6451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 242.808307][ T28] audit: type=1400 audit(242.775:4966): avc: denied { getopt } for pid=15286 comm="syz.9.6463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 242.832826][ T39] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 242.856820][ T39] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 242.882681][ T39] usb 2-1: USB disconnect, device number 31 [ 242.887803][T15297] netlink: 'syz.5.6468': attribute type 4 has an invalid length. [ 242.889173][ T39] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 242.899019][T15297] netlink: 'syz.5.6468': attribute type 4 has an invalid length. [ 242.945870][ T28] audit: type=1400 audit(242.915:4967): avc: denied { mount } for pid=15301 comm="syz.9.6471" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 242.988062][T15309] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6474'. [ 243.000314][T15309] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6474'. [ 243.178210][ T28] audit: type=1400 audit(243.145:4968): avc: denied { remount } for pid=15326 comm="syz.5.6482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 243.224720][ T28] audit: type=1400 audit(243.165:4969): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 243.261092][ T28] audit: type=1400 audit(243.175:4970): avc: denied { mounton } for pid=15328 comm="syz.5.6483" path="/proc/634/task" dev="proc" ino=83165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 243.284434][ T28] audit: type=1400 audit(243.185:4971): avc: denied { associate } for pid=15330 comm="syz.5.6483" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 243.544335][T15349] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 243.565920][T15349] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 243.640279][T15359] _swap_info_get: Bad swap file entry 7800000000000001 [ 243.647274][T15359] _swap_info_get: Bad swap file entry 7800000000000001 [ 243.654199][T15359] _swap_info_get: Bad swap file entry 7800000000000001 [ 243.661192][T15359] _swap_info_get: Bad swap file entry 7800000000000001 [ 243.872872][ T28] audit: type=1400 audit(243.835:4972): avc: denied { ioctl } for pid=15392 comm="syz.9.6509" path="socket:[82316]" dev="sockfs" ino=82316 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 243.901553][T15394] device ip6gretap0 entered promiscuous mode [ 243.902392][ T28] audit: type=1400 audit(243.865:4973): avc: denied { setopt } for pid=15392 comm="syz.9.6509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 243.940532][T15394] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 244.051886][T15414] device bridge0 entered promiscuous mode [ 244.057893][T15414] device macsec1 entered promiscuous mode [ 244.063824][T15414] bridge0: port 1(macsec1) entered blocking state [ 244.070942][T15414] bridge0: port 1(macsec1) entered disabled state [ 244.096228][T15414] device bridge0 left promiscuous mode [ 244.491627][T15481] overlayfs: failed to clone upperpath [ 244.526368][ T5187] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 244.535434][ T39] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 244.715307][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 244.721872][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.753212][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.777450][ T39] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.796581][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.814296][ T28] audit: type=1400 audit(244.775:4974): avc: denied { sys_module } for pid=15492 comm="syz.9.6555" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 244.839710][ T39] usb 6-1: config 0 descriptor?? [ 244.841495][ T5187] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.876617][ T5187] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 244.901671][ T5187] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.907983][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6561'. [ 244.921591][ T5187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.930411][T15505] sch_tbf: burst 0 is lower than device bridge7 mtu (1514) ! [ 244.952279][ T5187] usb 2-1: Product: syz [ 244.962375][ T5187] usb 2-1: Manufacturer: syz [ 244.972630][ T5187] usb 2-1: SerialNumber: syz [ 244.998165][ T5187] cdc_mbim 2-1:1.0: skipping garbage [ 245.199762][T15441] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.255565][ T39] HID 045e:07da: Invalid code 65791 type 1 [ 245.268169][ T39] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.004D/input/input54 [ 245.281221][ T39] microsoft 0003:045E:07DA.004D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 245.576131][T15530] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 245.623910][T15537] 9pnet_fd: Insufficient options for proto=fd [ 245.701645][T15549] xt_bpf: check failed: parse error [ 245.809391][T15441] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.820679][ T5187] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 245.828821][ T5187] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 246.017192][T15576] kvm: apic: phys broadcast and lowest prio [ 246.030175][ T5187] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 246.037344][ T5187] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 246.046646][ T5187] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 6a:24:ca:84:5f:6f [ 246.091551][ T39] usb 6-1: USB disconnect, device number 12 [ 246.138607][T15587] input: syz1 as /devices/virtual/input/input55 [ 246.251729][ T5179] usb 2-1: USB disconnect, device number 32 [ 246.261794][ T5179] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 246.728505][T15642] __vm_enough_memory: pid: 15642, comm: syz.5.6623, no enough memory for the allocation [ 247.372390][T15711] input: syz0 as /devices/virtual/input/input56 [ 247.415151][T15717] netlink: 'syz.2.6657': attribute type 2 has an invalid length. [ 247.423274][T15717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6657'. [ 247.447717][ T5187] kernel write not supported for file bpf-prog (pid: 5187 comm: kworker/0:10) [ 247.486907][ T5179] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 247.549965][T15734] device bridge0 entered promiscuous mode [ 247.555917][T15734] device macsec2 entered promiscuous mode [ 247.561860][T15734] bridge0: port 5(macsec2) entered blocking state [ 247.568932][T15734] bridge0: port 5(macsec2) entered disabled state [ 247.579094][T15734] device bridge0 left promiscuous mode [ 247.674154][T15749] xt_bpf: check failed: parse error [ 247.680754][ T5179] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.699420][ T5179] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 247.721076][ T5179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.736140][ T5179] usb 2-1: config 0 descriptor?? [ 247.765933][ T5187] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 247.956042][ T5187] usb 6-1: Using ep0 maxpacket: 32 [ 247.965814][ T5187] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 247.987941][ T5187] usb 6-1: config 0 has no interface number 0 [ 247.994272][ T5187] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 248.018388][ T5187] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 248.036039][ T5187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.054440][ T5187] usb 6-1: Product: syz [ 248.063625][ T5187] usb 6-1: Manufacturer: syz [ 248.076014][ T5187] usb 6-1: SerialNumber: syz [ 248.090662][ T5187] usb 6-1: config 0 descriptor?? [ 248.096211][T15727] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 248.122769][T15769] xt_hashlimit: size too large, truncated to 1048576 [ 248.150508][ T5179] keytouch 0003:0926:3333.004E: fixing up Keytouch IEC report descriptor [ 248.166733][ T5179] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.004E/input/input57 [ 248.259287][ T5179] keytouch 0003:0926:3333.004E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 248.306462][T15727] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 248.368905][T15698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.382845][T15698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.749693][ T39] usb 2-1: USB disconnect, device number 33 [ 248.786825][T15776] device bridge0 entered promiscuous mode [ 248.792945][T15776] device macsec2 entered promiscuous mode [ 248.799676][T15776] bridge0: port 1(macsec2) entered blocking state [ 248.806165][T15776] bridge0: port 1(macsec2) entered disabled state [ 248.814259][T15776] device bridge0 left promiscuous mode [ 248.937344][ T5187] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 248.949397][ T5187] asix: probe of 6-1:0.188 failed with error -71 [ 248.957841][ T5187] usb 6-1: USB disconnect, device number 13 [ 249.000356][T15808] netlink: 'syz.9.6699': attribute type 8 has an invalid length. [ 249.549480][T15856] netlink: 'syz.1.6718': attribute type 4 has an invalid length. [ 249.565097][T15856] netlink: 'syz.1.6718': attribute type 4 has an invalid length. [ 249.771134][T15882] input: syz1 as /devices/virtual/input/input58 [ 249.816960][ T39] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 249.833574][T15891] netem: change failed [ 249.871485][T15897] syz.1.6737[15897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.871571][T15897] syz.1.6737[15897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.888233][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 249.888257][ T28] audit: type=1400 audit(505.850:4988): avc: denied { mounton } for pid=15898 comm="syz.9.6738" path="/1385/file0" dev="tmpfs" ino=7198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 249.929436][ T28] audit: type=1400 audit(505.880:4989): avc: denied { watch_reads } for pid=15901 comm="syz.5.6739" path="/335/file0" dev="tmpfs" ino=1758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.989895][T15908] input: syz1 as /devices/virtual/input/input59 [ 250.012750][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.026824][ T39] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 250.038797][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.048090][ T39] usb 1-1: config 0 descriptor?? [ 250.137140][ T28] audit: type=1400 audit(506.090:4990): avc: denied { prog_load } for pid=15923 comm="syz.1.6750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.178759][ T28] audit: type=1400 audit(506.090:4991): avc: denied { ioctl } for pid=15927 comm="syz.5.6752" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 250.207721][ T28] audit: type=1400 audit(506.110:4992): avc: denied { bpf } for pid=15923 comm="syz.1.6750" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.232270][ T28] audit: type=1400 audit(506.110:4993): avc: denied { perfmon } for pid=15923 comm="syz.1.6750" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.257671][ T28] audit: type=1400 audit(506.120:4994): avc: denied { prog_run } for pid=15923 comm="syz.1.6750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.276448][ T28] audit: type=1400 audit(506.190:4995): avc: denied { map_create } for pid=15934 comm="syz.2.6755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.299072][ T28] audit: type=1400 audit(506.190:4996): avc: denied { map_read map_write } for pid=15934 comm="syz.2.6755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.319437][ T28] audit: type=1400 audit(506.220:4997): avc: denied { ioctl } for pid=15853 comm="syz.0.6717" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.482702][ T39] keytouch 0003:0926:3333.004F: fixing up Keytouch IEC report descriptor [ 250.495127][ T39] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.004F/input/input60 [ 250.582786][ T39] keytouch 0003:0926:3333.004F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 250.715870][T15857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.730753][T15857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.802329][T15983] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 250.850491][T15989] input: syz0 as /devices/virtual/input/input61 [ 250.867527][T15993] futex_wake_op: syz.5.6779 tries to shift op by 32; fix this program [ 250.891557][T15996] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6780'. [ 251.080061][ T5179] usb 1-1: USB disconnect, device number 25 [ 251.680896][T16065] device bridge0 entered promiscuous mode [ 251.697127][T16065] device macsec2 entered promiscuous mode [ 251.709009][T16065] bridge0: port 3(macsec2) entered blocking state [ 251.716152][T16065] bridge0: port 3(macsec2) entered disabled state [ 251.725513][T16071] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16071 comm=syz.2.6811 [ 251.741806][T16065] device bridge0 left promiscuous mode [ 251.859488][T16089] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6822'. [ 251.961077][T16107] syz.0.6831[16107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.961162][T16107] syz.0.6831[16107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.032367][T16117] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6835'. [ 252.059918][T16117] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6835'. [ 252.127870][T16127] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6840'. [ 252.142131][T16127] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6840'. [ 252.159193][T16127] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6840'. [ 252.168864][T16127] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6840'. [ 252.348221][ T5187] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 252.548302][ T5187] usb 3-1: Using ep0 maxpacket: 32 [ 252.555074][ T5187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.577076][ T5187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.597976][ T5187] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 252.617087][ T5187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.638653][ T5187] usb 3-1: config 0 descriptor?? [ 252.911449][T16178] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.925678][T16178] FAT-fs (loop3): unable to read boot sector [ 252.935467][T16180] netlink: 'syz.9.6863': attribute type 4 has an invalid length. [ 252.968525][ T547] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 252.980046][T16180] netlink: 'syz.9.6863': attribute type 4 has an invalid length. [ 253.028782][T16180] syz.9.6863 (16180) used greatest stack depth: 20736 bytes left [ 253.031701][T16185] overlayfs: failed to clone upperpath [ 253.052304][ T5187] koneplus 0003:1E7D:2D51.0050: invalid report_count -220209195 [ 253.068685][ T5187] koneplus 0003:1E7D:2D51.0050: item 0 4 1 9 parsing failed [ 253.080766][ T5187] koneplus 0003:1E7D:2D51.0050: parse failed [ 253.093328][ T5187] koneplus: probe of 0003:1E7D:2D51.0050 failed with error -22 [ 253.100978][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6867'. [ 253.125098][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6867'. [ 253.168581][ T547] usb 1-1: Using ep0 maxpacket: 32 [ 253.174873][ T547] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 253.191731][ T547] usb 1-1: config 0 has no interface number 0 [ 253.197893][ T547] usb 1-1: config 0 interface 196 has no altsetting 0 [ 253.231529][ T547] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 253.256663][ T547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.265155][ T547] usb 1-1: Product: syz [ 253.272933][ T547] usb 1-1: Manufacturer: syz [ 253.277698][ T547] usb 1-1: SerialNumber: syz [ 253.289144][ T5187] usb 3-1: USB disconnect, device number 33 [ 253.300549][ T547] usb 1-1: config 0 descriptor?? [ 253.323038][T16213] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 253.332200][T16213] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.510440][ T547] ipheth 1-1:0.196: Unable to find endpoints [ 253.525314][ T547] usb 1-1: USB disconnect, device number 26 [ 253.998208][T16279] netlink: 'syz.5.6908': attribute type 12 has an invalid length. [ 254.360330][T16309] netlink: 'syz.9.6921': attribute type 12 has an invalid length. [ 254.843440][T16360] IPv6: sit3: Disabled Multicast RS [ 255.166775][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 255.166792][ T28] audit: type=1400 audit(511.128:5097): avc: denied { create } for pid=16387 comm="syz.2.6956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 255.215102][ T28] audit: type=1400 audit(511.158:5098): avc: denied { sys_admin } for pid=16387 comm="syz.2.6956" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 255.236603][ T28] audit: type=1400 audit(511.168:5099): avc: denied { create } for pid=16392 comm="syz.9.6959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 255.299283][ T28] audit: type=1400 audit(511.228:5100): avc: denied { connect } for pid=16395 comm="syz.2.6960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.356823][ T28] audit: type=1400 audit(511.258:5101): avc: denied { mounton } for pid=16400 comm="syz.0.6962" path="/proc/2620/task" dev="proc" ino=87678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 255.399423][ T28] audit: type=1400 audit(511.258:5102): avc: denied { mount } for pid=16400 comm="syz.0.6962" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 255.428133][ T28] audit: type=1400 audit(511.288:5103): avc: denied { wake_alarm } for pid=16403 comm="syz.5.6963" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 255.469614][ T28] audit: type=1400 audit(511.318:5104): avc: denied { ioctl } for pid=16407 comm="syz.9.6964" path="socket:[87694]" dev="sockfs" ino=87694 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 255.539041][ T28] audit: type=1400 audit(511.318:5105): avc: denied { bind } for pid=16407 comm="syz.9.6964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 255.825454][ T28] audit: type=1400 audit(511.787:5106): avc: denied { remount } for pid=16421 comm="syz.2.6971" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 256.102503][T16439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16439 comm=syz.1.6979 [ 256.153900][T16444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16444 comm=syz.1.6982 [ 256.460298][ T5179] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 256.610402][ T547] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 256.640374][ T5179] usb 1-1: Using ep0 maxpacket: 16 [ 256.646965][ T5179] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 256.655388][ T5179] usb 1-1: config 1 has no interface number 0 [ 256.662012][ T5179] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 256.672455][ T5179] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 256.682542][ T5179] usb 1-1: config 1 interface 105 has no altsetting 0 [ 256.693124][ T5179] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 256.702556][ T5179] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.711094][ T5179] usb 1-1: Product: syz [ 256.715390][ T5179] usb 1-1: Manufacturer: syz [ 256.720254][ T5179] usb 1-1: SerialNumber: syz [ 256.729597][T16456] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.737669][T16456] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.791731][ T547] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.802894][ T547] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.813606][ T547] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.819715][T16508] hub 9-0:1.0: USB hub found [ 256.830687][ T547] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.832837][T16508] hub 9-0:1.0: 1 port detected [ 256.841316][ T547] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.860679][ T547] usb 2-1: config 0 descriptor?? [ 257.150415][T16456] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 257.168260][T16456] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 257.271968][ T547] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 257.292593][ T547] plantronics 0003:047F:FFFF.0051: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 257.319552][T16536] syz.5.7023[16536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.322271][T16536] syz.5.7023[16536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.580517][ T5179] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 257.806113][ T5179] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 257.818723][ T5179] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c6:0e:df:9e:de:5c [ 257.833838][ T5179] usb 1-1: USB disconnect, device number 27 [ 257.840344][ T5179] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 257.891260][ T5179] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 257.900955][ T5179] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 257.910463][ T5179] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 257.961039][ T5187] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 258.141105][ T5187] usb 6-1: Using ep0 maxpacket: 32 [ 258.147697][ T5187] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 258.156364][ T5187] usb 6-1: config 0 has no interface number 0 [ 258.164657][ T5187] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 258.174182][ T5187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.182706][ T5187] usb 6-1: Product: syz [ 258.187035][ T5187] usb 6-1: Manufacturer: syz [ 258.192222][ T5187] usb 6-1: SerialNumber: syz [ 258.201510][ T5187] usb 6-1: config 0 descriptor?? [ 258.208900][ T5187] smsc95xx v2.0.0 [ 258.609126][ T5187] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 258.622065][ T5187] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 259.032812][ T5187] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 259.050929][ T5187] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 259.086922][ T5187] usb 6-1: USB disconnect, device number 14 [ 259.452518][ T547] usb 2-1: USB disconnect, device number 34 [ 259.872294][ T5188] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 259.892260][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.062016][ T5188] usb 6-1: Using ep0 maxpacket: 16 [ 260.068388][ T5188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.079841][ T5188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.090461][ T5188] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.103886][ T5188] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 260.114121][ T5188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.128600][ T5188] usb 6-1: config 0 descriptor?? [ 260.204726][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 260.204745][ T28] audit: type=1400 audit(516.165:5171): avc: denied { bind } for pid=16639 comm="syz.1.7071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 260.250906][ T28] audit: type=1400 audit(516.185:5172): avc: denied { setopt } for pid=16639 comm="syz.1.7071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 260.382084][ T28] audit: type=1400 audit(516.335:5173): avc: denied { map } for pid=16645 comm="syz.9.7074" path="socket:[89103]" dev="sockfs" ino=89103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 260.537397][ T5188] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 260.560312][ T5188] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 260.570408][ T5188] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 260.590609][ T5188] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 260.598579][ T5188] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 260.606199][ T5188] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 260.613993][ T5188] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 260.621472][ T5188] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 260.629053][ T5188] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 260.637629][ T5188] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 260.648890][ T5188] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0052/input/input62 [ 260.723731][ T5188] microsoft 0003:045E:07DA.0052: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 260.741525][T16664] IPv6: sit4: Disabled Multicast RS [ 260.788441][ T5188] usb 6-1: USB disconnect, device number 15 [ 260.815500][T16668] fido_id[16668]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 260.871661][T16670] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.932862][ T547] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 261.142661][ T5188] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 261.169917][T16676] __nla_validate_parse: 4 callbacks suppressed [ 261.169938][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7086'. [ 261.505131][T16695] kvm [16694]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 261.542376][T16695] kvm [16694]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 261.614152][T16703] netlink: 'syz.9.7097': attribute type 12 has an invalid length. [ 261.690262][T16707] device veth2 entered promiscuous mode [ 261.849140][ T28] audit: type=1400 audit(517.804:5174): avc: denied { ioctl } for pid=16717 comm="syz.9.7104" path="socket:[89413]" dev="sockfs" ino=89413 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 261.906225][ T28] audit: type=1400 audit(517.804:5175): avc: denied { getopt } for pid=16717 comm="syz.9.7104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.299066][ T28] audit: type=1400 audit(518.254:5176): avc: denied { bind } for pid=16734 comm="syz.1.7112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.343174][ T28] audit: type=1400 audit(518.254:5177): avc: denied { listen } for pid=16734 comm="syz.1.7112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.393353][ T28] audit: type=1400 audit(518.254:5178): avc: denied { ioctl } for pid=16734 comm="syz.1.7112" path="socket:[88380]" dev="sockfs" ino=88380 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.477695][T16747] device ip6gre1 entered promiscuous mode [ 262.731766][ T28] audit: type=1400 audit(518.684:5179): avc: denied { write } for pid=16770 comm="syz.2.7128" name="/" dev="incremental-fs" ino=6625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.773646][ T28] audit: type=1400 audit(518.684:5180): avc: denied { add_name } for pid=16770 comm="syz.2.7128" name=".log" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.273614][ T5179] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 263.343659][ T5188] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 263.474828][ T5179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.493715][ T5179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.503577][ T5179] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.533814][ T5188] usb 6-1: Using ep0 maxpacket: 32 [ 263.540300][ T5188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.540638][ T5179] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.563784][ T5188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.580236][ T5179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.588516][ T5188] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 263.598155][ T5179] usb 3-1: config 0 descriptor?? [ 263.613515][ T5188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.636019][ T5188] usb 6-1: config 0 descriptor?? [ 264.007620][ T5179] plantronics 0003:047F:FFFF.0053: No inputs registered, leaving [ 264.028528][ T5179] plantronics 0003:047F:FFFF.0053: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 264.045669][ T5188] savu 0003:1E7D:2D5A.0054: hiddev97,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 264.271889][T16829] tipc: Started in network mode [ 264.284148][T16829] tipc: Node identity 4, cluster identity 4711 [ 264.304172][T16829] tipc: Node number set to 4 [ 264.585888][T16832] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7153'. [ 265.349404][ T39] usb 6-1: USB disconnect, device number 16 [ 265.649708][T16844] overlayfs: failed to clone upperpath [ 265.895837][T16860] input: syz0 as /devices/virtual/input/input63 [ 265.916085][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 265.916100][ T28] audit: type=1400 audit(521.872:5208): avc: denied { getopt } for pid=16861 comm="syz.5.7169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 265.916978][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7168'. [ 265.970807][ T28] audit: type=1400 audit(521.922:5209): avc: denied { create } for pid=16865 comm="syz.5.7170" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 266.004174][ T28] audit: type=1400 audit(521.942:5210): avc: denied { link } for pid=16865 comm="syz.5.7170" name="file1" dev="overlay" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 266.047446][ T28] audit: type=1400 audit(521.952:5211): avc: denied { setattr } for pid=16865 comm="syz.5.7170" name="#59" dev="tmpfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 266.127610][ T28] audit: type=1400 audit(521.952:5212): avc: denied { rename } for pid=16865 comm="syz.5.7170" name="#59" dev="tmpfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 266.177133][ T5180] usb 3-1: USB disconnect, device number 34 [ 266.205256][ T28] audit: type=1400 audit(522.042:5213): avc: denied { create } for pid=16877 comm="syz.1.7176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 266.266080][ T28] audit: type=1400 audit(522.042:5214): avc: denied { write } for pid=16877 comm="syz.1.7176" path="socket:[89709]" dev="sockfs" ino=89709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 266.333647][ T28] audit: type=1400 audit(522.102:5215): avc: denied { setopt } for pid=16877 comm="syz.1.7176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 266.407675][ T28] audit: type=1400 audit(522.362:5216): avc: denied { read write } for pid=16910 comm="syz.5.7190" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 266.436523][T16911] input: syz1 as /devices/virtual/input/input64 [ 266.449265][ T28] audit: type=1400 audit(522.382:5217): avc: denied { open } for pid=16910 comm="syz.5.7190" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 266.775414][ T5188] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 266.966552][ T5188] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 266.988328][ T5188] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 267.007516][ T5188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.027742][ T5188] usb 6-1: config 0 descriptor?? [ 267.385683][ T5180] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 267.444427][ T5188] uclogic 0003:2179:0053.0055: interface is invalid, ignoring [ 267.575831][ T5180] usb 3-1: Using ep0 maxpacket: 16 [ 267.582929][ T5180] usb 3-1: config 1 interface 0 has no altsetting 0 [ 267.597525][ T5180] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.40 [ 267.615833][ T5180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.634138][ T5180] usb 3-1: Product: à Œ [ 267.650943][ T5180] usb 3-1: Manufacturer: 䛽Ɤ뮥ꠅ횆⹭闪⌀긿磞稇픱∎쑴៾䀗㺋駞ဧ骜떑顿㶱燲텳ä—å»–ê„Ϣ雽é¬à¿±ç»´í€Šì”š [ 267.671297][ T5180] usb 3-1: SerialNumber: 旄儚䶰 [ 267.681841][ T39] usb 6-1: USB disconnect, device number 17 [ 267.891109][ T5180] usbhid 3-1:1.0: can't add hid device: -71 [ 267.908821][ T5180] usbhid: probe of 3-1:1.0 failed with error -71 [ 267.932274][ T5180] usb 3-1: USB disconnect, device number 35 [ 268.041513][T16969] block device autoloading is deprecated and will be removed. [ 268.414989][T16991] user requested TSC rate below hardware speed [ 268.531012][T17000] overlayfs: failed to clone lowerpath [ 268.686357][ T5180] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 268.876398][ T5180] usb 3-1: Using ep0 maxpacket: 16 [ 268.883326][ T5180] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.898091][ T5180] usb 3-1: config 0 interface 0 has no altsetting 0 [ 268.905103][ T5180] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 268.914773][ T5180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.928647][ T5180] usb 3-1: config 0 descriptor?? [ 269.064629][T17040] kvm: apic: phys broadcast and lowest prio [ 269.351911][ T5180] hid-generic 0003:1E71:2009.0056: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 269.446773][ T39] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 269.639690][ T39] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 269.657950][ T39] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.686815][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 269.693820][ T39] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 269.724166][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.739421][ T39] usb 6-1: config 0 descriptor?? [ 269.820752][ T5188] usb 3-1: USB disconnect, device number 36 [ 269.851487][T17075] overlayfs: failed to clone lowerpath [ 269.875959][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7265'. [ 270.137176][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 270.159584][ T39] hid-steam 0003:28DE:1102.0057: unknown main item tag 0x0 [ 270.177274][ T39] hid-steam 0003:28DE:1102.0057: unknown main item tag 0x0 [ 270.186982][ T39] hid-steam 0003:28DE:1102.0057: unknown main item tag 0x0 [ 270.202129][ T39] hid-steam 0003:28DE:1102.0057: unknown main item tag 0x0 [ 270.218266][ T39] hid-steam 0003:28DE:1102.0057: unknown main item tag 0x0 [ 270.234316][ T39] hid-steam 0003:28DE:1102.0057: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 270.361129][ T5180] usb 6-1: USB disconnect, device number 18 [ 270.617342][ T39] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 270.807382][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 270.813864][ T39] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 270.832207][ T39] usb 3-1: config 0 has no interface number 0 [ 270.849350][ T39] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 270.860479][ T39] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 270.899459][ T39] usb 3-1: config 0 interface 41 has no altsetting 0 [ 270.920379][ T39] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 270.941453][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.964465][ T39] usb 3-1: Product: syz [ 270.974482][ T39] usb 3-1: Manufacturer: syz [ 270.980247][ T39] usb 3-1: SerialNumber: syz [ 270.986198][ T39] usb 3-1: config 0 descriptor?? [ 270.991853][T17094] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.999498][T17094] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 271.237077][T17094] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 271.267646][T17094] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 271.597797][ T5188] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 271.681987][ T39] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 271.787854][ T5188] usb 2-1: Using ep0 maxpacket: 32 [ 271.794142][ T5188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.818444][ T5188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.837895][ T5188] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 271.857245][ T5188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.888716][ T5188] usb 2-1: config 0 descriptor?? [ 271.909052][ T5188] hub 2-1:0.0: USB hub found [ 272.096326][ T5188] hub 2-1:0.0: 1 port detected [ 272.284689][ T39] dm9601 3-1:0.41 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 272.302610][ T39] dm9601 3-1:0.41 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, c6:a0:cd:ca:b8:32 [ 272.333031][ T39] usb 3-1: USB disconnect, device number 37 [ 272.351979][ T39] dm9601 3-1:0.41 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 272.371052][T17147] xt_hashlimit: size too large, truncated to 1048576 [ 272.708019][ T5188] hub 2-1:0.0: activate --> -90 [ 272.840139][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 272.840156][ T28] audit: type=1400 audit(528.799:5231): avc: denied { relabelfrom } for pid=17164 comm="syz.2.7303" name="NETLINK" dev="sockfs" ino=90469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 272.880465][ T28] audit: type=1400 audit(528.829:5232): avc: denied { relabelto } for pid=17164 comm="syz.2.7303" name="NETLINK" dev="sockfs" ino=90469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 272.923848][ T5188] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 273.050321][ T28] audit: type=1400 audit(529.009:5233): avc: denied { relabelfrom } for pid=17188 comm="syz.5.7314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 273.076466][ T28] audit: type=1400 audit(529.029:5234): avc: denied { relabelto } for pid=17188 comm="syz.5.7314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 273.194433][T17208] sch_fq: defrate 4294967295 ignored. [ 273.238855][ T5188] usb 2-1: USB disconnect, device number 35 [ 273.509835][T17227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17227 comm=syz.2.7332 [ 273.563182][ T28] audit: type=1400 audit(529.519:5235): avc: denied { mounton } for pid=17230 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 273.613125][ T9105] bridge0: port 3(vlan2) entered disabled state [ 273.641244][ T9105] device vlan2 left promiscuous mode [ 273.652774][ T9105] device syz_tun left promiscuous mode [ 273.658628][ T9105] bridge0: port 3(vlan2) entered disabled state [ 273.670626][ T28] audit: type=1400 audit(529.628:5236): avc: denied { write } for pid=17244 comm="syz.9.7340" path="socket:[90696]" dev="sockfs" ino=90696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 273.774604][ T1006] tipc: Left network mode [ 273.780749][T17230] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.787995][T17230] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.798725][T17230] device bridge_slave_0 entered promiscuous mode [ 276.970742][T17230] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.977862][T17230] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.991030][T17230] device bridge_slave_1 entered promiscuous mode [ 277.035940][T17273] overlayfs: failed to clone lowerpath [ 277.041653][ T28] audit: type=1400 audit(532.987:5237): avc: denied { mount } for pid=17272 comm="syz.1.7351" name="/" dev="configfs" ino=14538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 277.074244][ T28] audit: type=1400 audit(533.017:5238): avc: denied { search } for pid=17272 comm="syz.1.7351" name="/" dev="configfs" ino=14538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.114537][ T28] audit: type=1400 audit(533.017:5239): avc: denied { setattr } for pid=17272 comm="syz.1.7351" name="/" dev="configfs" ino=14538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.148947][T17281] overlayfs: failed to clone upperpath [ 277.241616][ T28] audit: type=1400 audit(533.197:5240): avc: denied { mount } for pid=17295 comm="syz.9.7358" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 277.264611][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.290258][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.312413][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.322071][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.336937][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.344057][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.353126][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.362093][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.370538][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.377719][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.385971][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.400124][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.410068][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.429403][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.456613][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.460878][ T39] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 277.472303][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.472541][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.500197][ T1006] bridge0: port 4(macsec1) entered disabled state [ 277.507749][ T1006] device macsec1 left promiscuous mode [ 277.513870][ T1006] bridge0: port 4(macsec1) entered disabled state [ 277.522976][T17230] device veth0_vlan entered promiscuous mode [ 277.536867][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.546763][T17230] device veth1_macvtap entered promiscuous mode [ 277.573169][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.592098][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.608769][T17308] binder: 17307:17308 ioctl c0306201 200000001a80 returned -14 [ 277.662076][ T39] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 277.672957][ T1006] device bridge_slave_1 left promiscuous mode [ 277.680585][ T39] usb 2-1: config 1 has no interface number 1 [ 277.687364][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.707512][ T1006] device bridge_slave_0 left promiscuous mode [ 277.709357][ T39] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 277.724338][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.759141][ T1006] device veth1_macvtap left promiscuous mode [ 277.777901][ T1006] device veth0_vlan left promiscuous mode [ 277.784401][ T39] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 277.806710][T17337] loop8: detected capacity change from 0 to 128 [ 277.821002][ T39] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 277.832804][T17337] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 277.858960][ T39] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.879911][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.889414][ T39] usb 2-1: Product: syz [ 277.894232][ T39] usb 2-1: Manufacturer: syz [ 277.905445][ T39] usb 2-1: SerialNumber: syz [ 277.921430][T17337] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 277.942443][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 277.942460][ T28] audit: type=1400 audit(533.896:5248): avc: denied { mount } for pid=17336 comm="syz.8.7374" name="/" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 278.008085][ T28] audit: type=1400 audit(533.956:5249): avc: denied { unmount } for pid=17230 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 278.041088][ T1069] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 278.118689][T17350] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 278.126342][T17350] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 278.134200][T17350] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 278.142827][T17350] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 278.150764][T17350] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 278.179361][T17350] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 278.198196][T17350] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 278.216693][T17350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 278.239339][ T5188] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 278.267874][ T5188] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 278.333073][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7386'. [ 278.343220][ T39] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 278.351347][ T5188] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 278.582286][T17381] syz.5.7393[17381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.582383][T17381] syz.5.7393[17381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.611935][T17381] syz.5.7393[17381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.624574][T17381] syz.5.7393[17381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.833644][ T28] audit: type=1400 audit(534.786:5250): avc: denied { unmount } for pid=17395 comm="syz.5.7400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 279.349149][ T39] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 279.357462][ T5189] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 279.377465][ T39] usb 2-1: USB disconnect, device number 36 [ 279.396258][T17406] device bridge0 entered promiscuous mode [ 279.411175][T17406] bridge0: port 1(macsec1) entered blocking state [ 279.418350][T17406] bridge0: port 1(macsec1) entered disabled state [ 279.438723][T17406] device bridge0 left promiscuous mode [ 279.480878][T17408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17408 comm=syz.5.7404 [ 279.626010][ T28] audit: type=1400 audit(535.576:5251): avc: denied { nlmsg_read } for pid=17429 comm="syz.5.7414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.633204][T17430] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7414'. [ 279.695859][T17436] loop2: detected capacity change from 0 to 512 [ 279.719822][T17436] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 279.752270][T17436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a017c11c, mo2=0002] [ 279.762090][T17436] System zones: 1-12 [ 279.769019][T17436] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.7416: corrupted in-inode xattr [ 279.792282][T17436] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.7416: couldn't read orphan inode 15 (err -117) [ 279.811523][T17436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 280.014613][T17454] netlink: 'syz.1.7423': attribute type 13 has an invalid length. [ 280.029364][T17454] netlink: 'syz.1.7423': attribute type 17 has an invalid length. [ 280.061491][ T285] EXT4-fs (loop2): unmounting filesystem. [ 280.071072][T17454] device sit0 left promiscuous mode [ 280.089442][T17454] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 280.130795][T17454] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 280.141694][T17469] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7430'. [ 280.157955][T17454] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.323835][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7434'. [ 280.364810][T17485] incfs: Options parsing error. -22 [ 280.371966][T17485] incfs: mount failed -22 [ 280.382833][ T5189] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 280.392042][ T5189] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 280.565470][ T28] audit: type=1400 audit(536.515:5252): avc: denied { connect } for pid=17501 comm="syz.2.7444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 280.752335][ T5189] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 280.925643][ T28] audit: type=1400 audit(536.875:5253): avc: denied { remount } for pid=17554 comm="syz.2.7457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 280.957352][ T5189] usb 9-1: Using ep0 maxpacket: 16 [ 280.978116][ T5187] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 280.989036][ T5189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.000417][ T5189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.019415][ T5189] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 281.035972][ T5189] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 281.048068][ T5189] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.069995][ T5189] usb 9-1: config 0 descriptor?? [ 281.131498][ T28] audit: type=1400 audit(537.075:5254): avc: denied { attach_queue } for pid=17580 comm="syz.5.7462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 281.479769][ T5189] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 281.488195][ T5189] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 281.496748][ T5189] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 281.504384][ T5189] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 281.511824][ T5189] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 281.519401][ T5189] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 281.526950][ T5189] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 281.540969][ T5189] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 281.552077][ T5189] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 281.559721][ T5189] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 281.571990][ T5189] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0058/input/input65 [ 281.602961][T17704] block device autoloading is deprecated and will be removed. [ 281.610904][T17704] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.620786][T17704] FAT-fs (loop3): unable to read boot sector [ 281.654541][ T5189] microsoft 0003:045E:07DA.0058: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 281.746104][ T287] usb 9-1: USB disconnect, device number 5 [ 281.755506][ T28] audit: type=1400 audit(537.704:5255): avc: denied { bind } for pid=17720 comm="syz.9.7483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.777064][ T28] audit: type=1400 audit(537.704:5256): avc: denied { setopt } for pid=17720 comm="syz.9.7483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.797485][ T28] audit: type=1400 audit(537.724:5257): avc: denied { watch watch_reads } for pid=17722 comm="syz.9.7484" path="/1644/file1" dev="tmpfs" ino=8533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 282.131413][T17759] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 282.185062][T17772] xt_hashlimit: size too large, truncated to 1048576 [ 282.223127][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 282.434293][T17791] loop8: detected capacity change from 0 to 2048 [ 282.455052][T17791] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 282.651303][T17791] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 282.666662][T17791] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 282.679594][T17791] EXT4-fs (loop8): This should not happen!! Data will be lost [ 282.679594][T17791] [ 282.689820][T17791] EXT4-fs (loop8): Total free blocks count 0 [ 282.696739][T17791] EXT4-fs (loop8): Free/Dirty block details [ 282.702974][T17791] EXT4-fs (loop8): free_blocks=2415919104 [ 282.709329][T17791] EXT4-fs (loop8): dirty_blocks=8192 [ 282.724233][T17791] EXT4-fs (loop8): Block reservation details [ 282.734220][T17791] EXT4-fs (loop8): i_reserved_data_blocks=512 [ 282.851767][ T938] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 282.895729][T17816] loop2: detected capacity change from 0 to 1024 [ 282.914491][T17816] EXT4-fs: Ignoring removed nobh option [ 282.921514][T17816] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 282.957475][T17818] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.967244][T17818] FAT-fs (loop11): unable to read boot sector [ 282.974801][T17816] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 283.004780][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 283.004799][ T28] audit: type=1400 audit(538.954:5264): avc: denied { read write } for pid=17814 comm="syz.2.7526" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 283.042764][ T28] audit: type=1400 audit(538.954:5265): avc: denied { open } for pid=17814 comm="syz.2.7526" path="/1317/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 283.074667][T17816] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.7526: Allocating blocks 497-513 which overlap fs metadata [ 283.090779][T17816] EXT4-fs (loop2): pa ffff888118537bd0: logic 256, phys. 385, len 8 [ 283.099310][T17816] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 283.114869][ T28] audit: type=1400 audit(539.064:5266): avc: denied { setattr } for pid=17814 comm="syz.2.7526" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 283.211375][ T285] EXT4-fs (loop2): unmounting filesystem. [ 283.218612][ T28] audit: type=1400 audit(539.164:5267): avc: denied { load_policy } for pid=17834 comm="syz.5.7534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 283.218777][T17835] SELinux: failed to load policy [ 283.281742][T17841] loop2: detected capacity change from 0 to 2048 [ 283.351508][T17841] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 283.606579][ T28] audit: type=1400 audit(539.554:5268): avc: denied { connect } for pid=17866 comm="syz.1.7545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.707001][T17841] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 283.722459][T17841] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 283.735484][T17841] EXT4-fs (loop2): This should not happen!! Data will be lost [ 283.735484][T17841] [ 283.747708][T17841] EXT4-fs (loop2): Total free blocks count 0 [ 283.755997][T17841] EXT4-fs (loop2): Free/Dirty block details [ 283.762838][T17841] EXT4-fs (loop2): free_blocks=2415919104 [ 283.773961][T17841] EXT4-fs (loop2): dirty_blocks=8192 [ 283.779437][T17841] EXT4-fs (loop2): Block reservation details [ 283.790862][T17841] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 283.805113][T17887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.959807][ T1029] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 284.194688][ T28] audit: type=1400 audit(540.143:5269): avc: denied { write } for pid=17915 comm="syz.9.7566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 284.219429][T17918] loop8: detected capacity change from 0 to 512 [ 284.226684][T17918] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 284.244488][T17918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a017c11c, mo2=0002] [ 284.252744][T17918] System zones: 1-12 [ 284.258219][T17918] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2195: inode #15: comm syz.8.7567: corrupted in-inode xattr [ 284.271737][T17918] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.7567: couldn't read orphan inode 15 (err -117) [ 284.283921][T17918] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 284.294246][ T5188] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 284.384253][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 284.401725][ T28] audit: type=1326 audit(540.343:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17925 comm="syz.9.7570" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f014798f6c9 code=0x0 [ 284.458760][T17230] EXT4-fs (loop8): unmounting filesystem. [ 284.485805][ T5188] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.499131][ T5188] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.508319][ T5188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.517240][ T5188] usb 3-1: Product: syz [ 284.521406][ T5188] usb 3-1: Manufacturer: syz [ 284.526030][ T5188] usb 3-1: SerialNumber: syz [ 285.538640][ T5188] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 285.551097][ T5188] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 285.567757][ T5188] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 285.671911][ T28] audit: type=1400 audit(541.613:5271): avc: denied { getopt } for pid=17981 comm="syz.5.7596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 285.740082][ T5188] cdc_ncm 3-1:1.0: setting tx_max = 136 [ 285.756070][ T5188] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 285.774208][ T5188] usb 3-1: USB disconnect, device number 38 [ 285.813272][ T5188] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 286.555340][ T287] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 286.733968][T18115] loop8: detected capacity change from 0 to 256 [ 286.735331][ T287] usb 3-1: Using ep0 maxpacket: 16 [ 286.753615][T18115] FAT-fs (loop8): bogus number of FAT sectors [ 286.759781][ T287] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.770229][T18115] FAT-fs (loop8): Can't find a valid FAT filesystem [ 286.774924][ T287] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.780160][T18118] syz.1.7656[18118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.788913][ T287] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.792095][T18118] syz.1.7656[18118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.808693][ T287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.832917][ T287] usb 3-1: Product: syz [ 286.837657][ T287] usb 3-1: Manufacturer: syz [ 286.842548][ T287] usb 3-1: SerialNumber: syz [ 287.040539][T18148] syz.9.7670[18148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.040640][T18148] syz.9.7670[18148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.256158][ T287] usb 3-1: 0:2 : does not exist [ 287.285535][ T28] audit: type=1400 audit(543.222:5272): avc: denied { ioctl } for pid=18175 comm="syz.1.7683" path="socket:[95251]" dev="sockfs" ino=95251 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 287.545770][ T5180] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 287.664472][ T287] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 287.683838][ T287] usb 3-1: USB disconnect, device number 39 [ 287.736970][ T5180] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 287.745470][ T5180] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 287.840238][ T5180] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 287.872012][ T5180] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.891761][ T5180] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.901341][ T28] audit: type=1400 audit(543.831:5273): avc: denied { compute_member } for pid=18209 comm="syz.8.7691" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 287.929796][ T5180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.929894][T17277] udevd[17277]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 287.941406][ T5180] usb 6-1: config 0 descriptor?? [ 287.963039][T18177] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 288.214330][T18230] futex_wake_op: syz.8.7700 tries to shift op by 32; fix this program [ 288.391632][ T28] audit: type=1400 audit(544.331:5274): avc: denied { mounton } for pid=18247 comm="syz.2.7708" path="/1325/file0" dev="tmpfs" ino=6986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 288.395216][ T5180] plantronics 0003:047F:FFFF.0059: unknown main item tag 0xd [ 288.426474][ T5180] plantronics 0003:047F:FFFF.0059: No inputs registered, leaving [ 288.444395][ T5180] plantronics 0003:047F:FFFF.0059: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 288.630826][T18270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.644569][T17643] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 288.656214][T17643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.676832][T17643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.678347][ T5180] usb 6-1: USB disconnect, device number 19 [ 288.693917][T17643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.702546][T17643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.712810][T17643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.742957][T18268] loop2: detected capacity change from 0 to 40427 [ 288.763373][T18268] F2FS-fs (loop2): invalid crc value [ 288.789257][T18268] F2FS-fs (loop2): Found nat_bits in checkpoint [ 288.828696][T18268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 288.903102][ T28] audit: type=1400 audit(544.841:5275): avc: denied { write } for pid=18267 comm="syz.2.7716" path="/1328/file0/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 288.926838][ T285] syz-executor: attempt to access beyond end of device [ 288.926838][ T285] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 288.941798][ T28] audit: type=1400 audit(544.841:5276): avc: denied { ioctl } for pid=18267 comm="syz.2.7716" path="/1328/file0/file1" dev="loop2" ino=10 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 289.060505][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7729'. [ 289.087139][T18298] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 289.098857][T18298] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 289.173345][T18309] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 289.200605][T18313] netlink: 'syz.2.7723': attribute type 4 has an invalid length. [ 289.217136][T18313] netlink: 'syz.2.7723': attribute type 4 has an invalid length. [ 289.307452][T18321] kvm [18320]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 289.315383][ T5180] kernel write not supported for file /uinput (pid: 5180 comm: kworker/1:10) [ 289.342284][ T28] audit: type=1326 audit(545.281:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18327 comm="syz.1.7741" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c05f8f6c9 code=0x0 [ 289.477351][T18343] loop2: detected capacity change from 0 to 1024 [ 289.503595][ T28] audit: type=1400 audit(545.441:5278): avc: denied { relabelfrom } for pid=18344 comm="syz.5.7747" name="NETLINK" dev="sockfs" ino=95093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 289.503619][T18345] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 289.538196][ T28] audit: type=1400 audit(545.441:5279): avc: denied { relabelto } for pid=18344 comm="syz.5.7747" name="NETLINK" dev="sockfs" ino=95093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:bsdpty_device_t:s0" [ 289.568515][T18343] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 289.605173][T18343] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm syz.2.7746: lblock 0 mapped to illegal pblock 0 (length 1) [ 289.628350][T18343] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 3: comm syz.2.7746: lblock 3 mapped to illegal pblock 3 (length 3) [ 289.649363][T18343] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 289.672278][T18343] EXT4-fs (loop2): This should not happen!! Data will be lost [ 289.672278][T18343] [ 289.686984][T18358] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: block 3: comm syz.2.7746: lblock 3 mapped to illegal pblock 3 (length 1) [ 289.717705][T17643] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:201: lblock 8 mapped to illegal pblock 8 (length 8) [ 289.720694][T18351] loop8: detected capacity change from 0 to 40427 [ 289.743961][T18351] F2FS-fs (loop8): invalid crc value [ 289.751986][T17643] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 289.764303][T18351] F2FS-fs (loop8): Found nat_bits in checkpoint [ 289.764594][T17643] EXT4-fs (loop2): This should not happen!! Data will be lost [ 289.764594][T17643] [ 289.782501][ T285] EXT4-fs (loop2): unmounting filesystem. [ 289.815264][T18351] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 289.886104][T18351] syz.8.7749: attempt to access beyond end of device [ 289.886104][T18351] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 289.978956][ T28] audit: type=1400 audit(545.920:5280): avc: denied { map } for pid=18381 comm="syz.5.7760" path="socket:[95766]" dev="sockfs" ino=95766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 290.002230][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 290.011808][ T28] audit: type=1400 audit(545.930:5281): avc: denied { read accept } for pid=18381 comm="syz.5.7760" path="socket:[95766]" dev="sockfs" ino=95766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 290.093645][T18389] incfs: Options parsing error. -22 [ 290.099122][T18389] incfs: mount failed -22 [ 290.197636][T18397] loop5: detected capacity change from 512 to 64 [ 290.217113][ T28] audit: type=1400 audit(546.150:5282): avc: denied { unmount } for pid=11562 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 290.246788][T18408] syz.8.7772[18408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.246889][T18408] syz.8.7772[18408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.324089][ T28] audit: type=1400 audit(546.260:5283): avc: denied { read } for pid=18418 comm="syz.5.7777" path="socket:[96365]" dev="sockfs" ino=96365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.531117][T18444] overlayfs: upper fs does not support tmpfile. [ 290.664423][T18454] netlink: 'syz.5.7790': attribute type 13 has an invalid length. [ 290.677331][T18454] netlink: 'syz.5.7790': attribute type 17 has an invalid length. [ 290.744132][T18454] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 290.774937][T18454] device bridge1 left promiscuous mode [ 292.402562][ T1057] tipc: Left network mode [ 292.479205][T18497] kvm [18496]: vcpu2, guest rIP: 0x9137 Unhandled WRMSR(0xc1) = 0x4000 [ 292.498446][T18497] kvm [18496]: vcpu2, guest rIP: 0x9137 Unhandled WRMSR(0xc2) = 0x4000 [ 292.523735][T18497] kvm [18496]: vcpu2, guest rIP: 0x9137 Unhandled WRMSR(0x11e) = 0x4000 [ 292.548627][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 292.570207][T18497] kvm [18496]: vcpu2, guest rIP: 0x9137 Unhandled WRMSR(0x186) = 0x4000 [ 292.593396][T18501] syz.9.7815[18501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.593520][T18501] syz.9.7815[18501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.606445][T18497] kvm [18496]: vcpu2, guest rIP: 0x9137 Unhandled WRMSR(0x187) = 0x4000 [ 292.756922][T18504] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.764629][T18504] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.772556][T18504] device bridge_slave_0 entered promiscuous mode [ 292.781679][T18504] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.789089][T18504] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.796824][T18504] device bridge_slave_1 entered promiscuous mode [ 292.837835][ T5179] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 292.857617][ T5179] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.996162][T18504] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.003274][T18504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.010770][T18504] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.018078][T18504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.071369][ T1057] device veth1_macvtap left promiscuous mode [ 293.082039][ T1057] device veth0_vlan left promiscuous mode [ 293.412352][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.420209][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.427828][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.449996][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.460220][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.469329][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.476791][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.497566][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.507908][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.516605][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.517903][T18549] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7831'. [ 293.523696][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.533868][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.548450][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.557296][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.565713][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.581865][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.590646][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.604549][T18504] device veth0_vlan entered promiscuous mode [ 293.614004][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.617926][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 293.617941][ T28] audit: type=1400 audit(549.559:5296): avc: denied { read } for pid=18550 comm="syz.8.7832" name="/" dev="configfs" ino=14538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 293.629599][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.680105][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.691422][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.693764][ T28] audit: type=1400 audit(549.599:5297): avc: denied { open } for pid=18550 comm="syz.8.7832" path="/" dev="configfs" ino=14538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 293.726764][T17654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.735411][T17654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.750409][T18504] device veth1_macvtap entered promiscuous mode [ 293.758905][ T287] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 293.779302][T17604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.790519][T17604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.799308][T17604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.821058][T17604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.830840][T17604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.918207][ T1057] Bluetooth: hci0: Frame reassembly failed (-84) [ 293.951352][ T287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.980587][ T287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.991395][ T287] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.005752][ T287] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.021701][ T287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.037037][T18594] xt_hashlimit: size too large, truncated to 1048576 [ 294.041191][ T287] usb 6-1: config 0 descriptor?? [ 294.050063][ T28] audit: type=1400 audit(549.988:5298): avc: denied { setopt } for pid=18595 comm="syz.8.7851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 294.102879][T18599] loop4: detected capacity change from 0 to 256 [ 294.197210][T18611] loop8: detected capacity change from 0 to 4096 [ 294.212006][T18611] EXT4-fs (loop8): Test dummy encryption mode enabled [ 294.241181][T18611] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 294.282681][ T28] audit: type=1400 audit(550.228:5299): avc: denied { create } for pid=18610 comm="syz.8.7856" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 294.311548][T17230] EXT4-fs (loop8): unmounting filesystem. [ 294.319152][ T28] audit: type=1400 audit(550.238:5300): avc: denied { write } for pid=18610 comm="syz.8.7856" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 294.340605][ T28] audit: type=1400 audit(550.238:5301): avc: denied { add_name } for pid=18610 comm="syz.8.7856" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 294.458179][ T287] plantronics 0003:047F:FFFF.005B: unknown main item tag 0xd [ 294.463514][T18623] loop8: detected capacity change from 0 to 512 [ 294.471409][ T287] plantronics 0003:047F:FFFF.005B: No inputs registered, leaving [ 294.484076][ T287] plantronics 0003:047F:FFFF.005B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 294.531938][T18623] EXT4-fs (loop8): 1 orphan inode deleted [ 294.545719][T18623] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 294.555045][ T1057] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 294.575250][ T1057] EXT4-fs error (device loop8): ext4_release_dquot:6839: comm kworker/u4:107: Failed to release dquot type 1 [ 294.605140][T17230] EXT4-fs (loop8): unmounting filesystem. [ 294.675861][ T28] audit: type=1400 audit(550.618:5302): avc: denied { set_context_mgr } for pid=18650 comm="syz.8.7875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 294.784998][ T28] audit: type=1400 audit(550.728:5303): avc: denied { ioctl } for pid=18660 comm="syz.8.7878" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 294.811802][ T5187] usb 6-1: USB disconnect, device number 20 [ 294.900746][ T28] audit: type=1400 audit(550.848:5304): avc: denied { mount } for pid=18674 comm="syz.8.7885" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 295.144390][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7902'. [ 295.153622][T18711] device bridge_slave_1 entered promiscuous mode [ 295.161460][T18709] netlink: 'syz.8.7901': attribute type 2 has an invalid length. [ 295.169561][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7902'. [ 295.327555][T18731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7911'. [ 295.523206][T18753] loop8: detected capacity change from 0 to 256 [ 295.537938][T18757] loop4: detected capacity change from 0 to 256 [ 295.568733][T18753] syz.8.7922: attempt to access beyond end of device [ 295.568733][T18753] loop8: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 295.919981][ T287] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 295.990158][ T1202] Bluetooth: hci0: command 0x1003 tx timeout [ 295.996333][T10211] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 296.025586][ T5180] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 296.038800][ T5180] hid-generic 0000:0000:0000.005C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 296.110071][ T287] usb 9-1: Using ep0 maxpacket: 16 [ 296.119115][ T287] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 296.153062][ T287] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.163534][ T287] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.229630][ T287] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.260368][ T287] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.308875][ T287] usb 9-1: Product: syz [ 296.315921][ T287] usb 9-1: Manufacturer: syz [ 296.326017][ T287] usb 9-1: SerialNumber: syz [ 296.664310][T19026] loop4: detected capacity change from 0 to 4096 [ 296.677574][T19026] EXT4-fs (loop4): Test dummy encryption mode enabled [ 296.702868][T19026] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 296.749213][ T287] usb 9-1: 0:2 : does not exist [ 296.769106][T18504] EXT4-fs (loop4): unmounting filesystem. [ 297.433830][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7969'. [ 297.481811][T19080] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 297.489738][T19080] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 297.497351][T19080] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 297.505508][T19080] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 297.513877][T19080] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 297.521668][T19080] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 297.529801][T19080] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 297.537862][T19080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.560357][ T287] usb 9-1: USB disconnect, device number 6 [ 297.569831][ T5179] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 297.591766][ T5179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5179 comm=kworker/1:9 [ 297.605923][T19085] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 297.874289][T19118] netlink: 176 bytes leftover after parsing attributes in process `syz.9.7987'. [ 298.077698][T19120] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7990'. [ 298.091055][ T5180] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 298.141066][ T5179] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 298.212401][ T287] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 298.271091][ T5180] usb 2-1: Using ep0 maxpacket: 16 [ 298.283487][ T5180] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 298.294528][ T5180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 298.318449][ T5180] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 298.335889][ T5180] usb 2-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 298.345918][ T5180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.355555][ T5179] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 298.369668][ T5180] usb 2-1: config 0 descriptor?? [ 298.374709][ T5179] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 298.383978][ T5179] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 298.394460][ T5179] usb 5-1: config 220 has no interface number 2 [ 298.401825][ T5179] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 298.415203][ T5179] usb 5-1: config 220 interface 0 has no altsetting 0 [ 298.422145][ T5179] usb 5-1: config 220 interface 76 has no altsetting 0 [ 298.429082][ T5179] usb 5-1: config 220 interface 1 has no altsetting 0 [ 298.437966][ T5179] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 298.459936][ T5179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.468137][ T5179] usb 5-1: Product: syz [ 298.472423][ T5179] usb 5-1: Manufacturer: syz [ 298.477118][ T5179] usb 5-1: SerialNumber: syz [ 298.686778][ T5179] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 298.693566][ T5179] usb 5-1: No valid video chain found. [ 298.699123][ T5179] usb 5-1: selecting invalid altsetting 0 [ 298.707594][ T5179] usb 5-1: USB disconnect, device number 12 [ 298.721501][ T5187] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 298.805749][ T5180] lg-g15 0003:046D:C22E.005D: hidraw0: USB HID v0.01 Device [HID 046d:c22e] on usb-dummy_hcd.1-1/input0 [ 298.903609][ T5187] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 298.912622][ T5187] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.922972][ T5187] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 298.932044][ T5187] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.948430][ T5187] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 298.957990][ T5187] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 298.966139][ T5187] usb 9-1: Product: syz [ 298.970583][ T5187] usb 9-1: Manufacturer: syz [ 298.977556][ T5187] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 299.014186][ T5187] usb 2-1: USB disconnect, device number 37 [ 299.037346][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 299.037364][ T28] audit: type=1400 audit(554.976:5391): avc: denied { read } for pid=19162 comm="syz.9.8009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.187718][ T5179] usb 9-1: USB disconnect, device number 7 [ 299.214010][ T28] audit: type=1400 audit(555.156:5392): avc: denied { read write } for pid=19165 comm="syz.4.8010" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 299.237940][ T28] audit: type=1400 audit(555.156:5393): avc: denied { open } for pid=19165 comm="syz.4.8010" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 299.262719][ T28] audit: type=1400 audit(555.176:5394): avc: denied { mount } for pid=19165 comm="syz.4.8010" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 299.297271][ T28] audit: type=1400 audit(555.236:5395): avc: denied { unmount } for pid=18504 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 299.428958][ T28] audit: type=1400 audit(555.366:5396): avc: denied { getopt } for pid=19180 comm="syz.4.8017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 299.593391][ T28] audit: type=1400 audit(555.536:5397): avc: denied { append } for pid=19193 comm="syz.1.8023" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 299.638099][ T28] audit: type=1400 audit(555.576:5398): avc: denied { create } for pid=19195 comm="syz.1.8024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 299.660873][T19199] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8025'. [ 299.661046][ T28] audit: type=1400 audit(555.596:5399): avc: denied { read } for pid=19195 comm="syz.1.8024" dev="nsfs" ino=4026532492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 299.705030][ T28] audit: type=1400 audit(555.596:5400): avc: denied { open } for pid=19195 comm="syz.1.8024" path="net:[4026532492]" dev="nsfs" ino=4026532492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 301.174193][T19312] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.213445][T19312] FAT-fs (loop19): unable to read boot sector [ 301.677447][T19342] syz.5.8088 (19342) used greatest stack depth: 19616 bytes left [ 301.714770][ T5187] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 301.922967][ T5187] usb 9-1: Using ep0 maxpacket: 32 [ 301.937486][ T5187] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 301.963817][ T5187] usb 9-1: config 0 has no interface number 0 [ 301.985907][ T5187] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 302.005401][ T5187] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.025603][ T5187] usb 9-1: Product: syz [ 302.029975][ T5187] usb 9-1: Manufacturer: syz [ 302.054837][ T5187] usb 9-1: SerialNumber: syz [ 302.060819][ T5187] usb 9-1: config 0 descriptor?? [ 302.076646][ T5187] smsc95xx v2.0.0 [ 302.470105][ T5187] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 302.481430][ T5187] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 302.583388][ T5180] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 302.607771][T19397] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8114'. [ 302.725848][T19412] device bridge0 entered promiscuous mode [ 302.731759][T19412] device macsec1 entered promiscuous mode [ 302.738144][T19412] bridge0: port 1(macsec1) entered blocking state [ 302.744835][T19412] bridge0: port 1(macsec1) entered disabled state [ 302.752771][T19412] device bridge0 left promiscuous mode [ 302.774417][ T5180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.787221][ T5180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.801740][ T5180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.816773][ T5180] usb 2-1: Product: syz [ 302.825433][ T5180] usb 2-1: Manufacturer: syz [ 302.832056][ T5180] usb 2-1: SerialNumber: syz [ 302.873421][ T5179] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 302.892520][ T5187] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 302.904312][ T5187] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 302.912079][ T5187] usb 9-1: USB disconnect, device number 8 [ 303.054678][ T5179] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.077905][ T5179] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 303.089815][ T5179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.108585][ T5179] usb 5-1: config 0 descriptor?? [ 303.526636][T19451] xt_bpf: check failed: parse error [ 303.704980][T19466] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8145'. [ 303.819876][ T5179] usbhid 5-1:0.0: can't add hid device: -71 [ 303.826247][ T5179] usbhid: probe of 5-1:0.0 failed with error -71 [ 303.833877][ T5179] usb 5-1: USB disconnect, device number 13 [ 303.848041][ T5180] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 303.854648][ T5180] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 303.862838][ T5180] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 303.874105][ T5187] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 304.048754][ T5180] cdc_ncm 2-1:1.0: setting tx_max = 136 [ 304.055994][ T5180] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 304.071641][ T5180] usb 2-1: USB disconnect, device number 38 [ 304.071768][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 304.071781][ T28] audit: type=1400 audit(560.003:5436): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 304.078087][ T5180] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 304.087748][ T5187] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 304.106712][ T28] audit: type=1400 audit(560.023:5437): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.117062][ T5187] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 304.125780][ T28] audit: type=1400 audit(560.023:5438): avc: denied { read } for pid=141 comm="dhcpcd" name="n28" dev="tmpfs" ino=19775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.147023][ T5187] usb 6-1: config 0 interface 0 has no altsetting 0 [ 304.169601][ T28] audit: type=1400 audit(560.023:5439): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=19775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.186372][ T5187] usb 6-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 304.190146][ T28] audit: type=1400 audit(560.023:5440): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=19775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.211114][ T5187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.252031][ T5187] usb 6-1: config 0 descriptor?? [ 304.258534][T19456] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 304.317906][ T28] audit: type=1400 audit(560.253:5441): avc: denied { bind } for pid=19508 comm="syz.9.8164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 304.364881][T19515] overlayfs: failed to clone upperpath [ 304.374206][ T5179] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 304.384500][T19517] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8168'. [ 304.467385][T19456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.476187][T19456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.486120][ T5187] usbhid 6-1:0.0: can't add hid device: -71 [ 304.492395][ T5187] usbhid: probe of 6-1:0.0 failed with error -71 [ 304.511347][ T5187] usb 6-1: USB disconnect, device number 21 [ 304.554271][ T5179] usb 5-1: Using ep0 maxpacket: 8 [ 304.560725][ T5179] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 304.570027][ T5179] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 304.587570][ T5179] usb 5-1: config 135 has no interface number 0 [ 304.600405][ T5179] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 304.615123][ T5179] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 304.629002][ T5179] usb 5-1: config 135 interface 230 has no altsetting 0 [ 304.637866][ T5179] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 304.647330][ T5179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.655615][ T5179] usb 5-1: Product: syz [ 304.659934][ T5179] usb 5-1: Manufacturer: syz [ 304.664878][ T5179] usb 5-1: SerialNumber: syz [ 304.867068][ T28] audit: type=1400 audit(560.803:5442): avc: denied { getopt } for pid=19548 comm="syz.9.8184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 305.114551][ T5187] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 305.122276][ T5189] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 305.304613][ T5187] usb 6-1: Using ep0 maxpacket: 32 [ 305.311062][ T5189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.322259][ T5187] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 305.335276][ T5189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.345127][ T5187] usb 6-1: config 0 interface 0 has no altsetting 0 [ 305.351869][ T5187] usb 6-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 305.361585][ T5187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.370213][ T5189] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 305.383207][ T5187] usb 6-1: config 0 descriptor?? [ 305.388359][ T5189] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 305.397204][ T5189] usb 9-1: Manufacturer: syz [ 305.402619][ T5187] hub 6-1:0.0: USB hub found [ 305.412488][ T5189] usb 9-1: config 0 descriptor?? [ 305.485547][ T28] audit: type=1400 audit(561.423:5443): avc: denied { mounton } for pid=19562 comm="syz.1.8189" path="/1189/file0" dev="tmpfs" ino=6230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 305.603004][ T5187] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 305.807926][ T5187] usbhid 6-1:0.0: can't add hid device: -71 [ 305.813991][ T5187] usbhid: probe of 6-1:0.0 failed with error -71 [ 305.855327][ T5187] usb 6-1: USB disconnect, device number 22 [ 305.996117][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 306.227889][ T5189] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.005E/input/input72 [ 306.239564][ T28] audit: type=1400 audit(562.172:5444): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1875 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.262189][ T5189] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.005E/input/input73 [ 306.273021][ T28] audit: type=1400 audit(562.172:5445): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1875 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.296984][ T5189] input: syz Touch Strip as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.005E/input/input74 [ 306.310204][ T5189] input: syz Dial as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.005E/input/input75 [ 306.338259][ T5189] uclogic 0003:256C:006D.005E: input,hiddev96,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.8-1/input0 [ 306.443200][ T5187] usb 9-1: USB disconnect, device number 9 [ 306.685306][ T5189] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 306.886630][ T5189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.904344][ T5189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.916326][ T5189] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 306.926360][ T5189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.943272][ T5189] usb 2-1: config 0 descriptor?? [ 306.988230][ T39] usb 5-1: USB disconnect, device number 14 [ 307.325648][ T5179] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 307.358633][ T5189] petalynx 0003:18B1:0037.005F: unknown main item tag 0x0 [ 307.367746][ T5189] petalynx 0003:18B1:0037.005F: item fetching failed at offset 3/5 [ 307.377621][ T5189] petalynx 0003:18B1:0037.005F: parse failed [ 307.383892][ T5189] petalynx: probe of 0003:18B1:0037.005F failed with error -22 [ 307.426399][T19660] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8233'. [ 307.468441][T19667] xt_hashlimit: size too large, truncated to 1048576 [ 307.515872][ T5179] usb 9-1: Using ep0 maxpacket: 16 [ 307.522254][ T5179] usb 9-1: config index 0 descriptor too short (expected 17170, got 18) [ 307.531119][ T5179] usb 9-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 307.552031][ T5179] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 307.569168][ T5188] usb 2-1: USB disconnect, device number 39 [ 307.571323][ T5179] usb 9-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 307.585660][ T5179] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.594324][ T5179] usb 9-1: Product: syz [ 307.621785][ T5179] usb 9-1: Manufacturer: syz [ 307.631594][ T5179] usb 9-1: SerialNumber: syz [ 307.644341][ T5179] usb 9-1: config 0 descriptor?? [ 307.657514][ T5179] ums-freecom 9-1:0.0: USB Mass Storage device detected [ 307.884133][ T5179] usb 9-1: USB disconnect, device number 10 [ 307.898730][T19695] loop4: detected capacity change from 0 to 512 [ 307.916091][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.926869][T19695] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 307.979195][T19695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 307.997793][T19695] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.8247: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 308.020285][T19695] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 12: comm syz.4.8247: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 308.042275][T19695] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.8247: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 308.064757][T19695] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 14: comm syz.4.8247: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 308.086302][T19695] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 15: comm syz.4.8247: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 308.113826][T19695] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz.4.8247: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 308.135742][T19695] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 17: comm syz.4.8247: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 308.158744][T19695] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 18: comm syz.4.8247: lblock 23 mapped to illegal pblock 18 (length 1) [ 308.183701][T19695] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 19: comm syz.4.8247: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 308.217315][T19695] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 20: comm syz.4.8247: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 308.804013][T18504] EXT4-fs (loop4): unmounting filesystem. [ 308.988968][T19751] loop4: detected capacity change from 0 to 512 [ 309.014449][T19751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 309.046554][T19751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 309.056717][T19751] EXT4-fs: Ignoring removed i_version option [ 309.071190][T19751] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c099, mo2=0002] [ 309.106321][T19751] System zones: 1-12 [ 309.116092][T19751] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.8268: inode #1: comm syz.4.8268: iget: illegal inode # [ 309.136743][T19751] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.8268: error while reading EA inode 1 err=-117 [ 309.157055][T19751] EXT4-fs (loop4): 1 orphan inode deleted [ 309.167312][T19751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 309.219515][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 309.219533][ T28] audit: type=1400 audit(565.151:5458): avc: denied { setattr } for pid=19750 comm="syz.4.8268" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.298666][ T28] audit: type=1400 audit(565.151:5459): avc: denied { create } for pid=19750 comm="syz.4.8268" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 309.340329][ T28] audit: type=1400 audit(565.151:5460): avc: denied { read open } for pid=19750 comm="syz.4.8268" path="/83/file0/file0/file2" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 309.371480][T18504] EXT4-fs (loop4): unmounting filesystem. [ 309.389123][ T28] audit: type=1400 audit(565.191:5461): avc: denied { mount } for pid=19762 comm="syz.1.8273" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 309.420990][T19769] input: syz1 as /devices/virtual/input/input76 [ 309.462205][T19774] xt_bpf: check failed: parse error [ 309.510093][T19780] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8281'. [ 309.546400][ T28] audit: type=1400 audit(565.471:5462): avc: denied { ioctl } for pid=19783 comm="syz.9.8283" path="socket:[101385]" dev="sockfs" ino=101385 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 309.572221][ T28] audit: type=1400 audit(565.511:5463): avc: denied { bind } for pid=19783 comm="syz.9.8283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 309.576869][ T5189] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 309.598271][ T28] audit: type=1400 audit(565.511:5464): avc: denied { read } for pid=19783 comm="syz.9.8283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 309.650651][ T28] audit: type=1400 audit(565.551:5465): avc: denied { setopt } for pid=19783 comm="syz.9.8283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 309.723721][T19791] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 309.771236][ T28] audit: type=1400 audit(565.700:5467): avc: denied { create } for pid=19796 comm="syz.9.8287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 309.806572][ T28] audit: type=1400 audit(565.700:5468): avc: denied { getopt } for pid=19796 comm="syz.9.8287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 309.827725][ T5189] usb 2-1: Using ep0 maxpacket: 8 [ 309.833489][T19802] binder: 19794:19802 ioctl c0306201 200000000480 returned -14 [ 309.844392][ T5189] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 309.857508][ T5189] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.874584][ T5189] usb 2-1: config 0 has no interface number 0 [ 309.885590][ T5189] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 309.895443][ T5189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.903634][ T5189] usb 2-1: Product: syz [ 309.908017][ T5189] usb 2-1: Manufacturer: syz [ 309.912653][ T5189] usb 2-1: SerialNumber: syz [ 309.922278][ T5189] usb 2-1: config 0 descriptor?? [ 309.930009][ T5189] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 309.936438][ T5189] usb 2-1: No valid video chain found. [ 309.974802][T19807] netlink: 'syz.8.8292': attribute type 4 has an invalid length. [ 310.117395][T19825] tmpfs: Unknown parameter 'i' [ 310.297135][ T39] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 310.407475][T19842] netlink: 'syz.4.8307': attribute type 12 has an invalid length. [ 310.442204][T19846] loop4: detected capacity change from 0 to 512 [ 310.455620][T19846] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 310.466382][T19846] EXT4-fs (loop4): Test dummy encryption mode enabled [ 310.475688][T19846] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.8310: casefold flag without casefold feature [ 310.478585][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.489916][T19846] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.8310: couldn't read orphan inode 15 (err -117) [ 310.512613][T19846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 310.517468][ T39] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 310.543068][T19846] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 310.546248][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.561202][T19858] device bridge0 entered promiscuous mode [ 310.567143][T19858] device macsec1 entered promiscuous mode [ 310.568460][T18504] EXT4-fs (loop4): unmounting filesystem. [ 310.573713][T19858] bridge0: port 1(macsec1) entered blocking state [ 310.586067][T19858] bridge0: port 1(macsec1) entered disabled state [ 310.586492][ T39] usb 9-1: config 0 descriptor?? [ 310.606538][T19858] device bridge0 left promiscuous mode [ 310.675543][ T5180] usb 2-1: USB disconnect, device number 40 [ 310.893276][T19879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8324'. [ 310.951332][T19887] netlink: 84 bytes leftover after parsing attributes in process `syz.9.8328'. [ 310.998807][T19893] overlayfs: failed to clone upperpath [ 311.036705][ T39] keytouch 0003:0926:3333.0060: fixing up Keytouch IEC report descriptor [ 311.059455][ T39] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0060/input/input77 [ 311.090237][T19899] loop4: detected capacity change from 0 to 512 [ 311.137340][T19899] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 311.153181][ T39] keytouch 0003:0926:3333.0060: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 311.179311][T18504] EXT4-fs (loop4): unmounting filesystem. [ 311.847393][T19972] overlayfs: failed to clone upperpath [ 311.859756][T19972] overlayfs: failed to clone lowerpath [ 311.866034][T19972] overlayfs: failed to clone upperpath [ 311.988008][ T5188] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 312.068149][ T5179] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 312.199856][ T5188] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.221808][ T5188] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.246090][ T5188] usb 2-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 312.248141][ T5179] usb 6-1: Using ep0 maxpacket: 16 [ 312.265507][ T5188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.274404][ T5179] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 312.283647][ T5188] usb 2-1: Product: syz [ 312.293350][ T5188] usb 2-1: Manufacturer: syz [ 312.298322][ T5179] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.304693][ T5188] usb 2-1: SerialNumber: syz [ 312.319000][ T5179] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.349767][ T5179] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.369441][ T5179] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.377765][ T5179] usb 6-1: Product: syz [ 312.402658][ T5179] usb 6-1: Manufacturer: syz [ 312.407429][ T5179] usb 6-1: SerialNumber: syz [ 312.721438][T20003] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8381'. [ 312.827506][ T5179] usb 6-1: 0:2 : does not exist [ 312.832837][ T5180] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 313.020168][ T5180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.052187][ T5180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.062496][ T5180] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 313.072297][ T5180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.085998][ T5180] usb 5-1: config 0 descriptor?? [ 313.098268][T20026] futex_wake_op: syz.9.8392 tries to shift op by -1; fix this program [ 313.124002][ T287] usb 9-1: USB disconnect, device number 11 [ 313.518716][ T287] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 313.533208][ T5188] cdc_ncm 2-1:1.0: bind() failure [ 313.539761][ T5188] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 313.546663][ T5188] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 313.554764][ T5188] usb 2-1: USB disconnect, device number 41 [ 313.646715][ T5179] usb 6-1: USB disconnect, device number 23 [ 313.708820][ T287] usb 9-1: Using ep0 maxpacket: 8 [ 313.714165][ T5180] usb 5-1: string descriptor 0 read error: -22 [ 313.721850][ T287] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.732096][ T287] usb 9-1: config 0 has no interfaces? [ 313.737659][ T287] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 313.747049][ T287] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.756031][ T287] usb 9-1: config 0 descriptor?? [ 313.916367][ T5180] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0061/input/input78 [ 313.930842][ T5180] uclogic 0003:256C:006D.0061: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 313.973861][ T547] usb 9-1: USB disconnect, device number 12 [ 314.130883][ T5180] usb 5-1: USB disconnect, device number 15 [ 314.254222][T20059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8406'. [ 314.267650][T20059] device vlan3 entered promiscuous mode [ 314.273817][T20059] device gretap0 entered promiscuous mode [ 314.390361][T20063] incfs_lookup_dentry err:-13 [ 314.395403][T20063] incfs: Can't find or create .index dir in ./bus [ 314.402402][T20063] incfs: mount failed -13 [ 314.603407][T20079] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 314.734627][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 314.734644][ T28] audit: type=1400 audit(570.668:5490): avc: denied { relabelfrom } for pid=20083 comm="syz.8.8417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 314.765361][ T28] audit: type=1400 audit(570.698:5491): avc: denied { relabelto } for pid=20083 comm="syz.8.8417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 314.789210][T20090] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 314.831421][ T28] audit: type=1400 audit(570.768:5492): avc: denied { map } for pid=20095 comm="syz.8.8422" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.072167][T20129] syz.1.8438[20129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.072271][T20129] syz.1.8438[20129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.133622][ T28] audit: type=1400 audit(571.068:5493): avc: denied { unmount } for pid=11562 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 315.252121][T20150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20150 comm=syz.5.8447 [ 315.446471][T20178] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 315.456623][T20178] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 315.494259][ T28] audit: type=1326 audit(571.428:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20183 comm="syz.8.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a58f6c9 code=0x7ffc0000 [ 315.518845][ T28] audit: type=1326 audit(571.448:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20183 comm="syz.8.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a58f6c9 code=0x7ffc0000 [ 315.543149][ T28] audit: type=1326 audit(571.448:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20183 comm="syz.8.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115a58f6c9 code=0x7ffc0000 [ 315.571296][ T28] audit: type=1326 audit(571.448:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20183 comm="syz.8.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a58f6c9 code=0x7ffc0000 [ 315.598051][ T28] audit: type=1326 audit(571.448:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20183 comm="syz.8.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a58f6c9 code=0x7ffc0000 [ 315.621411][ T5180] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 315.639396][ T28] audit: type=1326 audit(571.478:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20183 comm="syz.8.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115a58f6c9 code=0x7ffc0000 [ 315.841455][ T5180] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.854955][ T5180] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.864466][ T5179] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 315.872346][ T5180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.880933][ T5180] usb 6-1: Product: syz [ 315.885705][ T5180] usb 6-1: Manufacturer: syz [ 315.890679][ T5180] usb 6-1: SerialNumber: syz [ 316.060015][ T5179] usb 2-1: Using ep0 maxpacket: 8 [ 316.071305][ T5179] usb 2-1: unable to get BOS descriptor or descriptor too short [ 316.090348][ T5179] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.108410][ T5179] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 57943, setting to 1024 [ 316.119795][ T5179] usb 2-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 316.133171][ T5179] usb 2-1: config 1 interface 0 has no altsetting 0 [ 316.141452][ T5179] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 316.150701][ T5179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.158897][ T5179] usb 2-1: Product: syz [ 316.163432][ T5179] usb 2-1: Manufacturer: syz [ 316.168104][ T5179] usb 2-1: SerialNumber: syz [ 316.912454][ T5180] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 316.920903][ T5180] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 316.928454][ T5180] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 317.114130][ T5180] cdc_ncm 6-1:1.0: setting tx_max = 136 [ 317.131801][ T5180] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 317.158546][ T5180] usb 6-1: USB disconnect, device number 24 [ 317.165596][ T5180] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 317.186782][ T5179] steelseries_srws1 0003:1038:1410.0062: invalid report_count 58840 [ 317.206564][ T5179] steelseries_srws1 0003:1038:1410.0062: item 0 2 1 9 parsing failed [ 317.229390][ T5179] steelseries_srws1 0003:1038:1410.0062: parse failed [ 317.236798][ T5179] steelseries_srws1: probe of 0003:1038:1410.0062 failed with error -22 [ 317.250430][T20257] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 317.258508][T20257] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 317.262520][ T5179] ================================================================== [ 317.266403][T20257] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 317.274380][ T5179] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 317.274414][ T5179] Read of size 8 at addr ffff88811c9fecf0 by task kworker/1:9/5179 [ 317.274430][ T5179] [ 317.274436][ T5179] CPU: 1 PID: 5179 Comm: kworker/1:9 Not tainted syzkaller #0 [ 317.274454][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.274467][ T5179] Workqueue: events_long br_fdb_cleanup [ 317.282166][T20257] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 317.289770][ T5179] [ 317.289780][ T5179] Call Trace: [ 317.297974][T20257] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 317.300074][ T5179] [ 317.300084][ T5179] __dump_stack+0x21/0x24 [ 317.308256][T20257] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 317.318269][ T5179] dump_stack_lvl+0xee/0x150 [ 317.318298][ T5179] ? __cfi_dump_stack_lvl+0x8/0x8 [ 317.318319][ T5179] ? __list_del_entry_valid+0xa6/0x130 [ 317.331262][T20257] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 317.331669][ T5179] print_address_description+0x71/0x200 [ 317.334485][T20257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.337300][ T5179] print_report+0x4a/0x60 [ 317.337324][ T5179] kasan_report+0x122/0x150 [ 317.404269][ T5179] ? __list_del_entry_valid+0xa6/0x130 [ 317.409915][ T5179] __asan_report_load8_noabort+0x14/0x20 [ 317.415549][ T5179] __list_del_entry_valid+0xa6/0x130 [ 317.421093][ T5179] process_one_work+0x4b9/0xc40 [ 317.426381][ T5179] worker_thread+0xa29/0x11f0 [ 317.431308][ T5179] kthread+0x281/0x320 [ 317.435452][ T5179] ? __cfi_worker_thread+0x10/0x10 [ 317.440645][ T5179] ? __cfi_kthread+0x10/0x10 [ 317.445400][ T5179] ret_from_fork+0x1f/0x30 [ 317.449953][ T5179] [ 317.453098][ T5179] [ 317.455508][ T5179] Allocated by task 5180: [ 317.459836][ T5179] kasan_set_track+0x4b/0x70 [ 317.464517][ T5179] kasan_save_alloc_info+0x25/0x30 [ 317.469839][ T5179] __kasan_kmalloc+0x95/0xb0 [ 317.474805][ T5179] __kmalloc_node+0xb2/0x1e0 [ 317.479943][ T5179] kvmalloc_node+0x294/0x480 [ 317.486641][ T5179] alloc_netdev_mqs+0x8d/0xf90 [ 317.491510][ T5179] alloc_etherdev_mqs+0x37/0x40 [ 317.496622][ T5179] usbnet_probe+0x20c/0x2780 [ 317.501290][ T5179] usb_probe_interface+0x610/0xaf0 [ 317.506385][ T5179] really_probe+0x2cb/0x960 [ 317.511217][ T5179] __driver_probe_device+0x198/0x280 [ 317.516507][ T5179] driver_probe_device+0x54/0x3e0 [ 317.521532][ T5179] __device_attach_driver+0x2e9/0x4a0 [ 317.526985][ T5179] bus_for_each_drv+0x183/0x210 [ 317.531911][ T5179] __device_attach+0x2a2/0x400 [ 317.536973][ T5179] device_initial_probe+0x1a/0x20 [ 317.542070][ T5179] bus_probe_device+0xc0/0x1f0 [ 317.547084][ T5179] device_add+0xb4d/0xef0 [ 317.551669][ T5179] usb_set_configuration+0x19c2/0x1f10 [ 317.557477][ T5179] usb_generic_driver_probe+0x91/0x150 [ 317.563191][ T5179] usb_probe_device+0x159/0x270 [ 317.568207][ T5179] really_probe+0x2cb/0x960 [ 317.572860][ T5179] __driver_probe_device+0x198/0x280 [ 317.578229][ T5179] driver_probe_device+0x54/0x3e0 [ 317.583355][ T5179] __device_attach_driver+0x2e9/0x4a0 [ 317.588750][ T5179] bus_for_each_drv+0x183/0x210 [ 317.594403][ T5179] __device_attach+0x2a2/0x400 [ 317.599622][ T5179] device_initial_probe+0x1a/0x20 [ 317.604870][ T5179] bus_probe_device+0xc0/0x1f0 [ 317.609828][ T5179] device_add+0xb4d/0xef0 [ 317.614409][ T5179] usb_new_device+0xa70/0x1520 [ 317.619338][ T5179] hub_event+0x2850/0x4350 [ 317.624014][ T5179] process_one_work+0x71f/0xc40 [ 317.628875][ T5179] worker_thread+0xa29/0x11f0 [ 317.633657][ T5179] kthread+0x281/0x320 [ 317.637748][ T5179] ret_from_fork+0x1f/0x30 [ 317.642385][ T5179] [ 317.644975][ T5179] Freed by task 5180: [ 317.649509][ T5179] kasan_set_track+0x4b/0x70 [ 317.654254][ T5179] kasan_save_free_info+0x31/0x50 [ 317.659752][ T5179] ____kasan_slab_free+0x132/0x180 [ 317.665004][ T5179] __kasan_slab_free+0x11/0x20 [ 317.670041][ T5179] slab_free_freelist_hook+0xc2/0x190 [ 317.675826][ T5179] __kmem_cache_free+0xb7/0x1b0 [ 317.680788][ T5179] kfree+0x6f/0xf0 [ 317.684648][ T5179] kvfree+0x35/0x40 [ 317.688544][ T5179] netdev_freemem+0x3f/0x60 [ 317.693316][ T5179] netdev_release+0x7f/0xb0 [ 317.698202][ T5179] device_release+0xa4/0x1d0 [ 317.702879][ T5179] kobject_put+0x19d/0x280 [ 317.707290][ T5179] put_device+0x1f/0x30 [ 317.711447][ T5179] free_netdev+0x392/0x490 [ 317.715892][ T5179] usbnet_disconnect+0x25a/0x3b0 [ 317.720920][ T5179] usb_unbind_interface+0x223/0x8d0 [ 317.726126][ T5179] device_release_driver_internal+0x508/0x820 [ 317.732275][ T5179] device_release_driver+0x19/0x20 [ 317.737459][ T5179] bus_remove_device+0x2ee/0x350 [ 317.742483][ T5179] device_del+0x6a4/0xeb0 [ 317.746930][ T5179] usb_disable_device+0x3a8/0x750 [ 317.751948][ T5179] usb_disconnect+0x31e/0x860 [ 317.756857][ T5179] hub_event+0x1a78/0x4350 [ 317.761355][ T5179] process_one_work+0x71f/0xc40 [ 317.766201][ T5179] worker_thread+0xd2e/0x11f0 [ 317.771048][ T5179] kthread+0x281/0x320 [ 317.775192][ T5179] ret_from_fork+0x1f/0x30 [ 317.779737][ T5179] [ 317.782259][ T5179] Last potentially related work creation: [ 317.788160][ T5179] kasan_save_stack+0x3a/0x60 [ 317.792896][ T5179] __kasan_record_aux_stack+0xb6/0xc0 [ 317.798366][ T5179] kasan_record_aux_stack_noalloc+0xb/0x10 [ 317.804361][ T5179] insert_work+0x51/0x300 [ 317.809116][ T5179] __queue_work+0x9b1/0xd30 [ 317.813606][ T5179] queue_work_on+0xd2/0x140 [ 317.818179][ T5179] usbnet_link_change+0x189/0x1b0 [ 317.823299][ T5179] usbnet_probe+0x1d55/0x2780 [ 317.827969][ T5179] usb_probe_interface+0x610/0xaf0 [ 317.833070][ T5179] really_probe+0x2cb/0x960 [ 317.837880][ T5179] __driver_probe_device+0x198/0x280 [ 317.843485][ T5179] driver_probe_device+0x54/0x3e0 [ 317.848526][ T5179] __device_attach_driver+0x2e9/0x4a0 [ 317.854035][ T5179] bus_for_each_drv+0x183/0x210 [ 317.858993][ T5179] __device_attach+0x2a2/0x400 [ 317.864267][ T5179] device_initial_probe+0x1a/0x20 [ 317.869374][ T5179] bus_probe_device+0xc0/0x1f0 [ 317.874455][ T5179] device_add+0xb4d/0xef0 [ 317.879308][ T5179] usb_set_configuration+0x19c2/0x1f10 [ 317.884967][ T5179] usb_generic_driver_probe+0x91/0x150 [ 317.890614][ T5179] usb_probe_device+0x159/0x270 [ 317.895653][ T5179] really_probe+0x2cb/0x960 [ 317.900215][ T5179] __driver_probe_device+0x198/0x280 [ 317.905597][ T5179] driver_probe_device+0x54/0x3e0 [ 317.911093][ T5179] __device_attach_driver+0x2e9/0x4a0 [ 317.917358][ T5179] bus_for_each_drv+0x183/0x210 [ 317.922388][ T5179] __device_attach+0x2a2/0x400 [ 317.927291][ T5179] device_initial_probe+0x1a/0x20 [ 317.932565][ T5179] bus_probe_device+0xc0/0x1f0 [ 317.937622][ T5179] device_add+0xb4d/0xef0 [ 317.942221][ T5179] usb_new_device+0xa70/0x1520 [ 317.947153][ T5179] hub_event+0x2850/0x4350 [ 317.951692][ T5179] process_one_work+0x71f/0xc40 [ 317.956730][ T5179] worker_thread+0xa29/0x11f0 [ 317.961532][ T5179] kthread+0x281/0x320 [ 317.965625][ T5179] ret_from_fork+0x1f/0x30 [ 317.970032][ T5179] [ 317.972351][ T5179] The buggy address belongs to the object at ffff88811c9fe000 [ 317.972351][ T5179] which belongs to the cache kmalloc-4k of size 4096 [ 317.986744][ T5179] The buggy address is located 3312 bytes inside of [ 317.986744][ T5179] 4096-byte region [ffff88811c9fe000, ffff88811c9ff000) [ 318.000604][ T5179] [ 318.003016][ T5179] The buggy address belongs to the physical page: [ 318.009420][ T5179] page:ffffea0004727e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c9f8 [ 318.019753][ T5179] head:ffffea0004727e00 order:3 compound_mapcount:0 compound_pincount:0 [ 318.028268][ T5179] flags: 0x4000000000010200(slab|head|zone=1) [ 318.034347][ T5179] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380 [ 318.043071][ T5179] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 318.051736][ T5179] page dumped because: kasan: bad access detected [ 318.058357][ T5179] page_owner tracks the page as allocated [ 318.064170][ T5179] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 102, tgid 102 (udevd), ts 290319964568, free_ts 290261729996 [ 318.086907][ T5179] post_alloc_hook+0x1f5/0x210 [ 318.091861][ T5179] prep_new_page+0x1c/0x110 [ 318.096372][ T5179] get_page_from_freelist+0x2c7b/0x2cf0 [ 318.101995][ T5179] __alloc_pages+0x1c3/0x450 [ 318.106661][ T5179] alloc_slab_page+0x6e/0xf0 [ 318.111589][ T5179] new_slab+0x98/0x3d0 [ 318.115818][ T5179] ___slab_alloc+0x6bd/0xb20 [ 318.120396][ T5179] __slab_alloc+0x5e/0xa0 [ 318.124734][ T5179] __kmem_cache_alloc_node+0x203/0x2c0 [ 318.130329][ T5179] kmalloc_trace+0x29/0xb0 [ 318.134950][ T5179] kobject_uevent_env+0x287/0x730 [ 318.140070][ T5179] kobject_synth_uevent+0x520/0xaf0 [ 318.145345][ T5179] uevent_store+0x25/0x70 [ 318.149714][ T5179] dev_attr_store+0x6c/0x90 [ 318.154377][ T5179] sysfs_kf_write+0x137/0x150 [ 318.159151][ T5179] kernfs_fop_write_iter+0x312/0x470 [ 318.164870][ T5179] page last free stack trace: [ 318.169636][ T5179] free_unref_page_prepare+0x742/0x750 [ 318.175103][ T5179] free_unref_page+0x8f/0x530 [ 318.179932][ T5179] __free_pages+0x67/0x100 [ 318.184426][ T5179] __free_slab+0xca/0x1a0 [ 318.188868][ T5179] __unfreeze_partials+0x160/0x190 [ 318.193988][ T5179] put_cpu_partial+0xa9/0x100 [ 318.198891][ T5179] __slab_free+0x1c4/0x280 [ 318.203314][ T5179] ___cache_free+0xbf/0xd0 [ 318.207731][ T5179] qlist_free_all+0xc6/0x140 [ 318.212601][ T5179] kasan_quarantine_reduce+0x14a/0x170 [ 318.218154][ T5179] __kasan_slab_alloc+0x24/0x80 [ 318.223188][ T5179] slab_post_alloc_hook+0x4f/0x2d0 [ 318.228309][ T5179] kmem_cache_alloc_lru+0x104/0x280 [ 318.233859][ T5179] new_inode_pseudo+0x8f/0x1f0 [ 318.238793][ T5179] new_inode+0x28/0x1e0 [ 318.242933][ T5179] __debugfs_create_file+0x14e/0x510 [ 318.248292][ T5179] [ 318.250745][ T5179] Memory state around the buggy address: [ 318.256591][ T5179] ffff88811c9feb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.265361][ T5179] ffff88811c9fec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.273777][ T5179] >ffff88811c9fec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.281833][ T5179] ^ [ 318.289698][ T5179] ffff88811c9fed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.297875][ T5179] ffff88811c9fed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.306105][ T5179] ================================================================== [ 318.314332][ T5179] Disabling lock debugging due to kernel taint [ 318.321508][ T5188] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 318.351576][ T287] usb 2-1: USB disconnect, device number 42 [ 318.631266][ T39] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 318.831418][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 318.837830][ T39] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 318.853230][ T39] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 318.863413][ T39] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 318.877440][ T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.886744][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 318.894788][ T39] usb 5-1: SerialNumber: syz [ 318.900491][T20255] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.112009][ T39] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 319.121777][ T39] usb 5-1: USB disconnect, device number 16 [ 319.282002][ T5189] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!