last executing test programs: 8.108444772s ago: executing program 4 (id=10703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r4, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) 8.108048912s ago: executing program 4 (id=10705): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 8.089266374s ago: executing program 4 (id=10706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000f70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r4, 0x1, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 8.02417629s ago: executing program 4 (id=10709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) 8.02361398s ago: executing program 4 (id=10711): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000b40), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='environ\x00') preadv(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0) 7.997704182s ago: executing program 4 (id=10713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x40000000004) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 2.596073609s ago: executing program 1 (id=10784): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2.544536754s ago: executing program 1 (id=10785): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x35, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2f}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x0, 0x41}}}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x68, &(0x7f0000000300)=ANY=[@ANYBLOB="050f680004e3"]}) 2.347218331s ago: executing program 2 (id=10789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0xe) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002200)={0x50}, 0x50) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 2.335475652s ago: executing program 2 (id=10790): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006"], 0x4c}}, 0x0) 2.312076744s ago: executing program 3 (id=10791): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000133629fb8c30"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x2, @val=@tracing}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 2.311512304s ago: executing program 2 (id=10792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) 2.243920039s ago: executing program 3 (id=10793): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000011c0)="c8", &(0x7f0000001200), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) 2.23640874s ago: executing program 2 (id=10794): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 2.226634361s ago: executing program 3 (id=10795): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "5254abe2"}]}}, 0x0}, 0x0) 1.848475663s ago: executing program 2 (id=10796): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000015c0)={0x2c, &(0x7f00000012c0)={0x0, 0x0, 0x5, {0x5, 0x0, "612bd9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 864.285736ms ago: executing program 1 (id=10797): openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x820, &(0x7f00000006c0)=ANY=[@ANYBLOB='mod']) 732.144887ms ago: executing program 1 (id=10798): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r1, 0x0) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 666.579073ms ago: executing program 0 (id=10799): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) lstat(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 666.066963ms ago: executing program 1 (id=10800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) 651.465754ms ago: executing program 1 (id=10801): r0 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "b53a25"}}, 0x0, 0x0, 0x0}, 0x0) 639.555505ms ago: executing program 0 (id=10802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 588.47855ms ago: executing program 0 (id=10803): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 574.128791ms ago: executing program 0 (id=10804): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() prlimit64(r0, 0x2, &(0x7f00000002c0)={0xb, 0x5}, &(0x7f0000000400)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) get_robust_list(r0, &(0x7f0000000440)=0x0, &(0x7f0000000480)) 515.976396ms ago: executing program 0 (id=10805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) 244.451479ms ago: executing program 0 (id=10806): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_012={0x1, 0x0, 0x0, "bf"}, @local=@item_4={0x3, 0x2, 0x0, "6d1fa409"}, @main=@item_012={0x2, 0x0, 0x0, "1a79"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000680)={0xff, 0x0, 0x0, 0x0, 0x43f}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 212.617792ms ago: executing program 3 (id=10807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r4}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 176.909954ms ago: executing program 3 (id=10808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x3ff, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0xc0], 0x1, 0x200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0xfe, 0x5, 0x0, 0x3, 0xd, 0x0, 0x0, 0x7, 0x4, 0x0, 0xa6, 0x0, 0x1d75a7f2, 0x0, 0x0, 0x2, 0x8, 0x0, '\x00', 0x0, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 127.302779ms ago: executing program 3 (id=10809): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000080), 0x4) sendmmsg$unix(r3, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000540)="ce966893ffb05ffac67725c545826081671e1f50a2f88e2bbe535fe73b6b2333ad91d82dd7c4a8aa9173460b74355ef25afb06273a9681ef7a882a6a55ccb3d3f9a41fe75fbdd647210d3db8e24c9e2b121f6a5f0e4c9256f2c458b547799229a71603df174364af938e18e4b94f01d061ded21a45cdc1ed4a0ceff8e39388d28484123f0ba51b43bf9e07319beeaa63a38101a092397d4f8a7def986475167d66b6755c6262a4c38cfeb29e268f53", 0xaf}, {&(0x7f0000000600)="478497813717f9d817936bd52fe6e6a5a7cee00fcf6063fa6664fccca256fad90ea34e3c78ff04040a5d2c06318825713c5851503e153a331a93579725b8afbee3a827841febbdbf58470345d71ad620923c72ccc6bd4ffb5ff6ee6e9336efc0aa1080e0", 0x64}, {&(0x7f0000001480)="84a13f5db46521d1c680585a417396fa3a38c1036194db971226ddb9a710bbcf04ec5db1348729a48e71ebe5b6977b0d5c27b8991a0256aa96dc6fe189631dde4ef5c8edde469d61a4cd2a16bd7a17f104aac6755c389937c8a6bccb31793727f3bad854fb9e65d04cedaab0547ff72493128387cf385153f6bd2b9bebd164270a2a553631558dfa80fffab821efabc00067a714f433bc044452352b5874d698d1e4c66673dfa299c6ec391f011633bdc00a680a4cdd47bbca124d193178e377352d0225d8e7dbf859d91b9c99dd4d24b9a134ca2e693d01054cabf1d7c3a70b8e7a5045523e761ac7682351fa54", 0xffc6}, {&(0x7f0000000780)="0100f94945de15ae1b313eaa6869b3e26002c9d0d6c7f71ea65cc6e63e970913fdf880198807394b7254e54f274d4a18af84c893d9f8415cea7ad9def74b81ebcc00dabea85cc664b083d7a58a822bc720236070c9d1ed132adc1f41842a9404143a4b4d5fadbb81f57023a5e8396a50ebe5329990e52a0ff67e8174db0aab6dfe2e0eb2edf960", 0x87}], 0x4, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000d40)="c485ae5463e7373921aedf2b7f3ae0a8ca79444055ffcf6255979ed13acbb80c6c24ae23d9cd68c29e71179e603b5a7717414c78fd06b7e6fba140d99fb90339afecfcf70226b4c3cb279deade7ea2faac187730d9c71b13baa3785a902a13a2a6eaf38897f74e3f2d95b85e3ed05fcdf8b0f816609ec82877bb99096f1ea9cabeaca507ca87e4d1d4639bef", 0x8c}, {&(0x7f0000000e00)="8b98cc2669d0a84b16b18485e3b802e1a345a2f3c74c6e268b06dafc8d209377a5f6f4f27f66694c92d88c41c6c52719f4111a4789847b715f48d7bfdc03b4349a0943c963db4bc0333edc", 0x4b}], 0x2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="30000002b5371de60000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30, 0xc040041}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="893958bb763d38091e7e242e6b89748e3ae0e526db912907f759bc2da4327401b44bb9cbd9420fd576eeac9c46c7d3a21d84aa3bbb63db4454d363cb9d87a0a72ec46625171cadc7be01cdcfc4bd17e09d0ffe8e3d65175491881c81a2ef8257beea93031b11889c28a46ec4e5bd48f92f08a9b66a331e00e0b1d5e413b9b1b110fc3619d4ce658d63b1ebca69fca2afa68a8ac0d1339abf12ef5bc3aa5f10223527c3f42aa9d10b4459ed9a54e16836", 0xb0}], 0x1, &(0x7f0000001280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x5, 0x0) 0s ago: executing program 2 (id=10810): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fdatasync(r0) kernel console output (not intermixed with test programs): rb failed with result -19 [ 858.809247][T25891] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.10252' sets config #1 [ 858.866681][T12469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.877493][T12469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.887060][T12469] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 858.895879][T12469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.904450][T12469] usb 4-1: config 0 descriptor?? [ 858.907807][ T408] usbhid 2-1:0.0: can't add hid device: -71 [ 858.915036][ T408] usbhid: probe of 2-1:0.0 failed with error -71 [ 858.922353][ T408] usb 2-1: USB disconnect, device number 98 [ 859.157594][T16030] smartjoyplus 0003:6666:8801.025E: unknown main item tag 0x0 [ 859.165880][T16030] smartjoyplus 0003:6666:8801.025E: ignoring exceeding usage max [ 859.174596][T16030] smartjoyplus 0003:6666:8801.025E: usage index exceeded [ 859.181458][T16030] smartjoyplus 0003:6666:8801.025E: item 0 0 2 0 parsing failed [ 859.189067][T16030] smartjoyplus 0003:6666:8801.025E: parse failed [ 859.195273][T16030] smartjoyplus: probe of 0003:6666:8801.025E failed with error -22 [ 859.359175][T12467] usb 3-1: USB disconnect, device number 81 [ 859.447520][T16030] Bluetooth: hci0: command 0x1003 tx timeout [ 859.453389][ T2051] Bluetooth: hci0: sending frame failed (-49) [ 859.748901][T25932] EXT4-fs (loop1): 1 orphan inode deleted [ 859.754458][T25932] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,quota,resgid=0x0000000000000000,sysvgroups,bsddf,dioread_lock, [ 859.782758][T25932] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 859.792593][T25932] EXT4-fs (loop1): Remounting filesystem read-only [ 859.797124][T25903] syz.3.10257[25903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 859.798999][T25903] syz.3.10257[25903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 859.799236][T25932] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #16: comm syz.1.10269: mark_inode_dirty error [ 859.833275][T25932] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 859.842872][T25932] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #16: comm syz.1.10269: mark_inode_dirty error [ 859.858910][T25932] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 859.872164][T25932] EXT4-fs error (device loop1): ext4_punch_hole:4201: inode #16: comm syz.1.10269: mark_inode_dirty error [ 859.899690][T25382] EXT4-fs error (device loop1): ext4_map_blocks:600: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 860.069932][T25949] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.077139][T25949] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.084488][T25949] device bridge_slave_0 entered promiscuous mode [ 860.093399][T25949] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.100294][T25949] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.107652][T25949] device bridge_slave_1 entered promiscuous mode [ 860.126595][ T5052] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 860.160399][T25949] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.167256][T25949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.174327][T25949] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.181152][T25949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.205786][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 860.213458][T16030] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.220882][T16030] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.230534][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 860.238771][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.245594][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.267385][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 860.275420][T16030] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.282267][T16030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.289426][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 860.297231][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 860.308812][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 860.323650][T25949] device veth0_vlan entered promiscuous mode [ 860.330021][T12467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 860.337945][T12467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 860.345197][T12467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 860.358877][T25949] device veth1_macvtap entered promiscuous mode [ 860.365467][T12467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 860.382081][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 860.390144][T12469] uclogic 0003:256C:006D.025F: v1 buttonpad probing failed: -71 [ 860.398257][T12469] uclogic 0003:256C:006D.025F: failed probing parameters: -71 [ 860.405895][T12469] uclogic: probe of 0003:256C:006D.025F failed with error -71 [ 860.414529][T12469] usb 4-1: USB disconnect, device number 71 [ 860.429350][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 860.442456][ T24] kauditd_printk_skb: 23 callbacks suppressed [ 860.442468][ T24] audit: type=1400 audit(860.426:16449): avc: denied { mounton } for pid=25949 comm="syz-executor" path="/root/syzkaller.2Od1l4/syz-tmp" dev="sda1" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 860.472832][ T24] audit: type=1400 audit(860.426:16450): avc: denied { mount } for pid=25949 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 860.496047][ T24] audit: type=1400 audit(860.426:16451): avc: denied { mount } for pid=25949 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 860.517461][ T5052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.517477][ T5052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.517495][ T5052] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 860.517521][ T5052] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 860.517535][ T5052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.567835][ T5052] usb 5-1: config 0 descriptor?? [ 860.568158][ T24] audit: type=1400 audit(860.456:16452): avc: denied { mounton } for pid=25949 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 860.619353][ T9] device bridge_slave_1 left promiscuous mode [ 860.625483][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.633032][ T9] device bridge_slave_0 left promiscuous mode [ 860.639340][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.647555][ T9] device veth1_macvtap left promiscuous mode [ 860.653425][ T9] device veth0_vlan left promiscuous mode [ 860.720953][T25956] netlink: 'syz.1.10278': attribute type 27 has an invalid length. [ 860.736144][T25956] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.743179][T25956] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.784472][T25957] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.791368][T25957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.799954][T25957] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.806801][T25957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.820617][T25957] device veth0_vlan left promiscuous mode [ 860.826523][T25957] device veth0_vlan entered promiscuous mode [ 860.833636][T25957] device veth1_macvtap left promiscuous mode [ 860.840269][T25957] device veth1_macvtap entered promiscuous mode [ 860.846894][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 860.864581][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 860.872149][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 860.880605][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 860.881718][ T24] audit: type=1400 audit(860.866:16453): avc: denied { bind } for pid=25959 comm="syz.3.10279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 860.907964][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 860.916179][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 860.927126][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 860.935827][ T24] audit: type=1400 audit(860.896:16454): avc: denied { create } for pid=25959 comm="syz.3.10279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 860.941776][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 860.967493][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 860.975785][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 860.984025][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 860.992287][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 861.000109][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 861.008602][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 861.016349][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 861.024286][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 861.032168][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 861.040166][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 861.048087][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 861.068107][ T5052] betop 0003:11C2:2208.0260: item fetching failed at offset 4/5 [ 861.081299][ T5052] betop 0003:11C2:2208.0260: parse failed [ 861.087433][ T5052] betop: probe of 0003:11C2:2208.0260 failed with error -22 [ 861.158498][T25976] device pim6reg1 entered promiscuous mode [ 861.215028][ T24] audit: type=1326 audit(861.196:16455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2752179ef9 code=0x7ffc0000 [ 861.238860][ T24] audit: type=1326 audit(861.196:16456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2752179ef9 code=0x7ffc0000 [ 861.262261][ T24] audit: type=1326 audit(861.226:16457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2752179ef9 code=0x7ffc0000 [ 861.290369][ T24] audit: type=1326 audit(861.226:16458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2752179ef9 code=0x7ffc0000 [ 861.317697][ T755] usb 5-1: USB disconnect, device number 100 [ 861.386659][ T5052] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 861.397009][T12469] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 861.526779][T16030] Bluetooth: hci0: command 0x1001 tx timeout [ 861.532764][ T2051] Bluetooth: hci0: sending frame failed (-49) [ 861.626581][ T5052] usb 2-1: Using ep0 maxpacket: 16 [ 861.746654][ T5052] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 861.796659][ T15] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 861.804175][T12469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.814988][T12469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.828428][T12469] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 861.837643][T12469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.846228][T12469] usb 4-1: config 0 descriptor?? [ 861.906665][ T5052] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 861.915548][ T5052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.923511][ T5052] usb 2-1: Product: syz [ 861.928012][ T5052] usb 2-1: Manufacturer: syz [ 861.932403][ T5052] usb 2-1: SerialNumber: syz [ 861.938157][ T5052] usb 2-1: config 0 descriptor?? [ 861.977578][ T5052] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 861.985322][ T5052] usb 2-1: Detected FT232RL [ 862.106600][T16030] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 862.186599][ T5052] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 862.196781][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.207526][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.217028][ T15] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 862.229634][ T15] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 862.238444][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.246927][ T15] usb 3-1: config 0 descriptor?? [ 862.316853][T12469] hid (null): bogus close delimiter [ 862.448444][ T5052] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 862.466637][T16030] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.480522][T16030] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.491029][T16030] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 862.499922][T16030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.508660][T16030] usb 5-1: config 0 descriptor?? [ 862.649701][T12467] usb 2-1: USB disconnect, device number 99 [ 862.659182][T12467] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 862.669217][T12467] ftdi_sio 2-1:0.0: device disconnected [ 862.757451][ T15] holtek_mouse 0003:04D9:A070.0262: item fetching failed at offset 1/5 [ 862.765666][ T15] holtek_mouse 0003:04D9:A070.0262: hid parse failed: -22 [ 862.772794][ T15] holtek_mouse: probe of 0003:04D9:A070.0262 failed with error -22 [ 862.836672][T12469] usb 4-1: string descriptor 0 read error: -71 [ 862.856665][T12469] uclogic 0003:256C:006D.0261: failed retrieving string descriptor #200: -71 [ 862.865247][T12469] uclogic 0003:256C:006D.0261: failed retrieving pen parameters: -71 [ 862.873549][T12469] uclogic 0003:256C:006D.0261: failed probing pen v2 parameters: -71 [ 862.881494][T12469] uclogic 0003:256C:006D.0261: failed probing parameters: -71 [ 862.888903][T12469] uclogic: probe of 0003:256C:006D.0261 failed with error -71 [ 862.897409][T12469] usb 4-1: USB disconnect, device number 72 [ 862.960199][ T5052] usb 3-1: USB disconnect, device number 82 [ 862.987740][T16030] logitech-hidpp-device 0003:046D:C086.0263: item fetching failed at offset 3/5 [ 862.996843][T16030] logitech-hidpp-device 0003:046D:C086.0263: hidpp_probe:parse failed [ 863.004846][T16030] logitech-hidpp-device: probe of 0003:046D:C086.0263 failed with error -22 [ 863.187831][T16030] usb 5-1: USB disconnect, device number 101 [ 863.218542][T25999] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 863.230298][T25999] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 863.240729][T25999] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz.1.10296: mark_inode_dirty error [ 863.252093][T25999] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 863.260262][T25999] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.10296: mark_inode_dirty error [ 863.277201][T25999] SELinux: security_context_str_to_sid(root) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 863.312653][T25949] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 863.333492][T25949] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 863.354752][T25949] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 863.376141][T25949] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 863.396500][T25949] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 863.417357][T25949] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 863.606605][T16030] Bluetooth: hci0: command 0x1009 tx timeout [ 863.726626][T12467] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 863.976575][ T5] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 864.146658][T12467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.156353][T12467] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 864.165659][T12467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.174557][T12467] usb 4-1: config 0 descriptor?? [ 864.226580][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 864.356709][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.367500][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.377354][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 864.390448][ T5] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 864.399470][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.411316][ T5] usb 5-1: config 0 descriptor?? [ 864.515700][T26027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10308'. [ 864.524812][T26027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10308'. [ 864.566058][T26030] xt_hashlimit: size too large, truncated to 1048576 [ 864.587739][T26028] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.594587][T26028] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.602858][T26028] device bridge_slave_0 entered promiscuous mode [ 864.612473][T26028] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.619703][T26028] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.627095][T26028] device bridge_slave_1 entered promiscuous mode [ 864.677961][T12467] lenovo 0003:17EF:6047.0264: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 864.705417][T26028] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.712280][T26028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.719385][T26028] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.726146][T26028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.757811][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 864.765462][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.773837][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.797607][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 864.805616][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.812468][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.820330][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 864.829790][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.836655][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.844736][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 864.852587][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 864.873078][T26028] device veth0_vlan entered promiscuous mode [ 864.879587][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 864.887726][ T5] ntrig 0003:1B96:000A.0265: unknown main item tag 0x0 [ 864.894415][ T5] ntrig 0003:1B96:000A.0265: unknown main item tag 0x0 [ 864.895153][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 864.909469][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 864.916598][ T5] ntrig 0003:1B96:000A.0265: unknown main item tag 0x0 [ 864.917248][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 864.923290][ T5] ntrig 0003:1B96:000A.0265: unknown main item tag 0x0 [ 864.937489][ T5] ntrig 0003:1B96:000A.0265: unknown main item tag 0x0 [ 864.939572][T26028] device veth1_macvtap entered promiscuous mode [ 864.951005][ T5] ntrig 0003:1B96:000A.0265: hidraw1: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 864.963483][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 864.981640][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 864.990497][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 865.106947][ T5] ntrig 0003:1B96:000A.0265: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 865.126661][T12467] lenovo 0003:17EF:6047.0264: Failed to switch middle button: -71 [ 865.146718][T12467] lenovo 0003:17EF:6047.0264: Fn-lock setting failed: -71 [ 865.169310][T26039] syz.2.10311[26039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 865.169359][T26039] syz.2.10311[26039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 865.180857][T12467] lenovo 0003:17EF:6047.0264: Sensitivity setting failed: -71 [ 865.201524][T26039] overlayfs: failed to resolve './file0': -2 [ 865.208215][T12467] usb 4-1: USB disconnect, device number 73 [ 865.217367][ T683] device bridge_slave_1 left promiscuous mode [ 865.223318][ T683] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.232210][ T683] device bridge_slave_0 left promiscuous mode [ 865.238356][ T683] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.248189][ T683] device veth1_macvtap left promiscuous mode [ 865.253993][ T683] device veth0_vlan left promiscuous mode [ 865.314594][ T5] usb 5-1: USB disconnect, device number 102 [ 865.411259][T26052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26052 comm=syz.2.10315 [ 865.648998][T26066] serio: Serial port ptm0 [ 865.663819][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 865.663833][ T24] audit: type=1326 audit(865.646:16494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26069 comm="syz.2.10323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2752179ef9 code=0x0 [ 865.917942][ T24] audit: type=1400 audit(865.906:16495): avc: denied { mounton } for pid=26091 comm="syz.4.10330" path="/proc/321/task" dev="proc" ino=153685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 866.396771][ T15] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 866.450172][T26100] device pim6reg1 entered promiscuous mode [ 866.558408][ T24] audit: type=1326 audit(866.546:16496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26105 comm="syz.2.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2752179ef9 code=0x7ffc0000 [ 866.591518][ T24] audit: type=1326 audit(866.546:16497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26105 comm="syz.2.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2752179ef9 code=0x7ffc0000 [ 866.615169][ T24] audit: type=1326 audit(866.566:16498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26105 comm="syz.2.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2752179ef9 code=0x7ffc0000 [ 866.639767][ T24] audit: type=1326 audit(866.566:16499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26105 comm="syz.2.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2752179ef9 code=0x7ffc0000 [ 866.681319][ T15] usb 5-1: Using ep0 maxpacket: 16 [ 866.696926][ T24] audit: type=1326 audit(866.566:16500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26105 comm="syz.2.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2752179ef9 code=0x7ffc0000 [ 866.733138][ T24] audit: type=1326 audit(866.566:16501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26105 comm="syz.2.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2752179ef9 code=0x7ffc0000 [ 866.762005][ T24] audit: type=1326 audit(866.566:16502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26105 comm="syz.2.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2752179ef9 code=0x7ffc0000 [ 866.785502][ T24] audit: type=1326 audit(866.566:16503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26105 comm="syz.2.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2752179ef9 code=0x7ffc0000 [ 866.826686][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 866.930242][T26123] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 866.941124][T26123] EXT4-fs (loop3): 1 truncate cleaned up [ 866.946745][T26123] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue [ 867.006761][ T15] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 867.015653][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.023455][ T15] usb 5-1: Product: syz [ 867.027608][ T15] usb 5-1: Manufacturer: syz [ 867.032008][ T15] usb 5-1: SerialNumber: syz [ 867.037319][ T15] usb 5-1: config 0 descriptor?? [ 867.077637][ T15] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 867.279896][ T15] usb 5-1: USB disconnect, device number 103 [ 867.481693][T26133] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.488828][T26133] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.496222][T26133] device bridge_slave_0 entered promiscuous mode [ 867.503442][T26133] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.510319][T26133] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.517682][T26133] device bridge_slave_1 entered promiscuous mode [ 867.602826][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 867.610746][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 867.620513][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 867.629101][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 867.637213][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.644064][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.662180][T12467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 867.670587][T12467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 867.679161][T12467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 867.688361][T12467] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.695234][T12467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.703141][T12467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 867.711138][T12467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 867.730683][T12469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 867.745261][T12469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 867.753783][T12469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 867.763476][T12469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 867.772863][T26133] device veth0_vlan entered promiscuous mode [ 867.825377][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 867.836329][T26133] device veth1_macvtap entered promiscuous mode [ 867.850172][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 867.863041][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 867.888868][T12467] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 868.000286][ T683] tipc: Disabling bearer [ 868.006051][ T683] tipc: Left network mode [ 868.024254][T26154] syz.3.10355[26154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.024320][T26154] syz.3.10355[26154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.047363][T26154] syz.3.10355[26154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.066798][T26154] syz.3.10355[26154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.096587][T16030] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 868.266651][T12467] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.285066][T12467] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.295588][T12467] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 868.305185][T12467] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.316790][T12467] usb 2-1: config 0 descriptor?? [ 868.449931][T26182] attempt to access beyond end of device [ 868.449931][T26182] loop3: rw=0, want=240, limit=128 [ 868.476625][T16030] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 868.487745][T16030] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.498817][T16030] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.508396][T16030] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 868.521685][T16030] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 868.531990][T16030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.543646][T16030] usb 5-1: config 0 descriptor?? [ 868.589286][T26201] syz.0.10385[26201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.589360][T26201] syz.0.10385[26201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.637941][ T683] device bridge_slave_1 left promiscuous mode [ 868.655996][ T683] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.663643][ T683] device bridge_slave_0 left promiscuous mode [ 868.670116][ T683] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.679288][ T683] device veth1_macvtap left promiscuous mode [ 868.685211][ T683] device veth0_vlan left promiscuous mode [ 868.846596][ T5] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 868.956703][ T408] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 869.027581][T16030] thrustmaster 0003:044F:B653.0267: unbalanced delimiter at end of report description [ 869.037414][T16030] thrustmaster 0003:044F:B653.0267: parse failed [ 869.043631][T16030] thrustmaster: probe of 0003:044F:B653.0267 failed with error -22 [ 869.106818][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 869.156684][ T407] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 869.229645][T16030] usb 5-1: USB disconnect, device number 104 [ 869.239762][ T5] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 869.248189][ T5] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 869.256963][ T5] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 869.265788][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 869.275371][ T5] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 869.284992][T12467] usb 2-1: string descriptor 0 read error: -71 [ 869.291341][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 63488, setting to 1024 [ 869.302923][ T5] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 869.312801][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 869.325676][T12467] uclogic 0003:256C:006D.0266: failed retrieving string descriptor #200: -71 [ 869.326676][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.334237][ T5] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 869.345330][ T408] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 869.354101][T12467] uclogic 0003:256C:006D.0266: failed retrieving pen parameters: -71 [ 869.362909][ T408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.370685][T12467] uclogic 0003:256C:006D.0266: failed probing pen v2 parameters: -71 [ 869.379580][ T408] usb 4-1: config 0 descriptor?? [ 869.386756][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.399896][ T5] usb 3-1: config 0 descriptor?? [ 869.404736][T12467] uclogic 0003:256C:006D.0266: failed probing parameters: -71 [ 869.406683][ T407] usb 1-1: Using ep0 maxpacket: 32 [ 869.412091][T12467] uclogic: probe of 0003:256C:006D.0266 failed with error -71 [ 869.426072][T12467] usb 2-1: USB disconnect, device number 100 [ 869.658026][ T5] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 869.696667][ T407] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 869.705578][ T407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.713653][ T407] usb 1-1: Product: syz [ 869.717743][ T407] usb 1-1: Manufacturer: syz [ 869.722211][ T407] usb 1-1: SerialNumber: syz [ 869.727516][ T407] usb 1-1: config 0 descriptor?? [ 869.767342][ T407] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 869.863825][ T407] usb 3-1: USB disconnect, device number 83 [ 869.870335][ T408] keytouch 0003:0926:3333.0268: fixing up Keytouch IEC report descriptor [ 869.880368][ T408] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0268/input/input184 [ 869.891983][ T407] usblp0: removed [ 869.959106][ T408] keytouch 0003:0926:3333.0268: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 869.969028][T12469] usb 1-1: USB disconnect, device number 85 [ 870.046568][ T5] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 870.076609][ T755] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 870.090577][ T2416] usb 4-1: USB disconnect, device number 74 [ 870.296617][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 870.326668][ T755] usb 2-1: Using ep0 maxpacket: 32 [ 870.456712][ T755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.467520][ T755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.486660][ T755] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 870.495557][ T755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.504651][ T755] usb 2-1: config 0 descriptor?? [ 870.557284][ T755] hub 2-1:0.0: USB hub found [ 870.626649][ T5] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 870.635638][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.643442][ T5] usb 5-1: Product: syz [ 870.647638][ T5] usb 5-1: Manufacturer: syz [ 870.652028][ T5] usb 5-1: SerialNumber: syz [ 870.657256][ T5] usb 5-1: config 0 descriptor?? [ 870.697431][ T5] usb_ehset_test: probe of 5-1:0.0 failed with error -32 [ 870.766657][ T755] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 870.899620][ T5] usb 5-1: USB disconnect, device number 105 [ 870.906589][T12469] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 871.166607][T12469] usb 4-1: Using ep0 maxpacket: 16 [ 871.266647][ T755] usbhid 2-1:0.0: can't add hid device: -71 [ 871.272597][ T755] usbhid: probe of 2-1:0.0 failed with error -71 [ 871.316629][T12469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.327649][ T755] usb 2-1: USB disconnect, device number 101 [ 871.334289][T12469] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 871.347566][T12469] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 871.356408][T12469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.365058][T12469] usb 4-1: config 0 descriptor?? [ 871.381062][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 871.381074][ T24] audit: type=1400 audit(871.366:16533): avc: denied { create } for pid=26227 comm="syz.2.10387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 871.419242][ T24] audit: type=1400 audit(871.406:16534): avc: denied { setopt } for pid=26227 comm="syz.2.10387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 871.443736][ T24] audit: type=1400 audit(871.426:16535): avc: denied { listen } for pid=26229 comm="syz.4.10388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 871.463119][ T24] audit: type=1400 audit(871.426:16536): avc: denied { accept } for pid=26229 comm="syz.4.10388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 871.776568][ T5] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 871.854200][T12469] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0269/input/input185 [ 871.909165][ T24] audit: type=1400 audit(871.896:16537): avc: denied { create } for pid=26255 comm="syz.0.10399" dev="anon_inodefs" ino=154145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 871.932448][T12469] microsoft 0003:045E:07DA.0269: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 871.946086][ T24] audit: type=1400 audit(871.926:16538): avc: denied { ioctl } for pid=26255 comm="syz.0.10399" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=154145 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 872.026587][ T407] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 872.036607][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 872.167917][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.178119][ T5] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 872.187010][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.195754][ T5] usb 5-1: config 0 descriptor?? [ 872.246675][T12469] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 872.258984][ T408] usb 4-1: USB disconnect, device number 75 [ 872.266563][ T407] usb 2-1: Using ep0 maxpacket: 16 [ 872.386747][ T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.397491][ T407] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 872.410436][ T407] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 872.419497][ T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.428171][ T407] usb 2-1: config 0 descriptor?? [ 872.487253][T16030] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 872.506574][T12469] usb 1-1: Using ep0 maxpacket: 16 [ 872.726865][T16030] usb 3-1: Using ep0 maxpacket: 8 [ 872.772911][ T24] audit: type=1400 audit(872.756:16539): avc: denied { map } for pid=26261 comm="syz.3.10402" path="socket:[153503]" dev="sockfs" ino=153503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 872.796651][T12469] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 872.808825][T12469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.819204][T12469] usb 1-1: Product: syz [ 872.823180][T12469] usb 1-1: Manufacturer: syz [ 872.827670][T12469] usb 1-1: SerialNumber: syz [ 872.833042][T12469] usb 1-1: config 0 descriptor?? [ 872.846721][T16030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.864404][T16030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.874058][T16030] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 872.886764][T16030] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 872.895624][T16030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.904357][T16030] usb 3-1: config 0 descriptor?? [ 872.910244][ T407] microsoft 0003:045E:07DA.026A: unknown main item tag 0x0 [ 872.917391][ T407] microsoft 0003:045E:07DA.026A: unknown main item tag 0x0 [ 872.924392][ T407] microsoft 0003:045E:07DA.026A: unknown main item tag 0x0 [ 872.931480][ T407] microsoft 0003:045E:07DA.026A: unknown main item tag 0x0 [ 872.938576][ T407] microsoft 0003:045E:07DA.026A: unknown main item tag 0x0 [ 872.943853][ T5] usb 5-1: USB disconnect, device number 106 [ 872.945637][ T407] microsoft 0003:045E:07DA.026A: unknown main item tag 0x0 [ 872.962584][ T407] microsoft 0003:045E:07DA.026A: unknown main item tag 0x0 [ 872.971317][ T407] microsoft 0003:045E:07DA.026A: unknown main item tag 0x0 [ 872.979372][ T407] microsoft 0003:045E:07DA.026A: unknown main item tag 0x0 [ 872.986495][ T407] microsoft 0003:045E:07DA.026A: unknown main item tag 0x0 [ 872.998824][ T407] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.026A/input/input186 [ 873.079107][ T407] microsoft 0003:045E:07DA.026A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 873.116720][T12469] r8152 1-1:0.0: Unknown version 0x0000 [ 873.136648][ T755] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 873.317972][T12469] usb 1-1: USB disconnect, device number 86 [ 873.325754][ T2416] usb 2-1: USB disconnect, device number 102 [ 873.366971][ T5] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 873.396563][ T755] usb 4-1: Using ep0 maxpacket: 16 [ 873.397720][T16030] pyra 0003:1E7D:2C24.026B: unknown main item tag 0x0 [ 873.408309][T16030] pyra 0003:1E7D:2C24.026B: unknown global tag 0xc [ 873.414606][T16030] pyra 0003:1E7D:2C24.026B: item 0 0 1 12 parsing failed [ 873.421764][T16030] pyra 0003:1E7D:2C24.026B: parse failed [ 873.427276][T16030] pyra: probe of 0003:1E7D:2C24.026B failed with error -22 [ 873.596671][ T755] usb 4-1: config 1 interface 0 has no altsetting 0 [ 873.604607][ T2416] usb 3-1: USB disconnect, device number 84 [ 873.610627][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 873.736690][ T5] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 873.744624][ T5] usb 5-1: config 0 has no interface number 0 [ 873.750527][ T5] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 873.760051][ T755] usb 4-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 873.768938][ T5] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 873.778586][ T755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.786350][ T755] usb 4-1: Product: syz [ 873.790456][ T755] usb 4-1: Manufacturer: syz [ 873.794866][ T755] usb 4-1: SerialNumber: syz [ 873.927003][ T5] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 873.935970][ T5] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 873.943716][ T5] usb 5-1: Product: syz [ 873.947844][ T5] usb 5-1: SerialNumber: syz [ 873.953078][ T5] usb 5-1: config 0 descriptor?? [ 874.106712][T16030] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 874.117117][ T755] usbhid 4-1:1.0: can't add hid device: -22 [ 874.122905][ T755] usbhid: probe of 4-1:1.0 failed with error -22 [ 874.130277][ T755] usb 4-1: USB disconnect, device number 76 [ 874.237381][ T5] snd-usb-audio: probe of 5-1:0.2 failed with error -12 [ 874.256677][ T5] usb 5-1: USB disconnect, device number 107 [ 874.326939][T26289] futex_wake_op: syz.2.10413 tries to shift op by 144; fix this program [ 874.346580][T16030] usb 1-1: Using ep0 maxpacket: 16 [ 874.407497][ T24] audit: type=1326 audit(874.396:16540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26299 comm="syz.1.10416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3624b4ef9 code=0x7ffc0000 [ 874.443856][ T24] audit: type=1326 audit(874.396:16541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26299 comm="syz.1.10416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3624b4ef9 code=0x7ffc0000 [ 874.482290][ T24] audit: type=1326 audit(874.416:16542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26299 comm="syz.1.10416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fd3624b4ef9 code=0x7ffc0000 [ 874.786566][T19031] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 875.786220][T26318] syz.4.10425[26318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 875.786269][T26318] syz.4.10425[26318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 875.916629][T16030] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 875.946546][T16030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.966857][T16030] usb 1-1: config 0 descriptor?? [ 875.986617][T16030] usb 1-1: can't set config #0, error -71 [ 875.996632][T16030] usb 1-1: USB disconnect, device number 87 [ 876.046542][ T407] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 876.283821][T26327] tipc: Cannot configure node identity twice [ 876.286554][ T407] usb 2-1: Using ep0 maxpacket: 32 [ 876.311738][T26331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10430'. [ 876.321109][T26331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10430'. [ 876.436581][ T5] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 876.566634][ T407] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 876.576071][ T407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.584002][ T407] usb 2-1: Product: syz [ 876.588090][ T407] usb 2-1: Manufacturer: syz [ 876.592411][ T407] usb 2-1: SerialNumber: syz [ 876.601534][ T407] usb 2-1: config 0 descriptor?? [ 876.636365][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 876.636378][ T24] audit: type=1400 audit(876.616:16546): avc: denied { mount } for pid=26362 comm="syz.0.10441" name="/" dev="ramfs" ino=154354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 876.666148][T26363] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=154355 [ 876.675616][T26363] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=154355 [ 876.686073][T26363] SELinux: Context $ is not valid (left unmapped). [ 876.693483][ T24] audit: type=1400 audit(876.676:16547): avc: denied { relabelto } for pid=26362 comm="syz.0.10441" name="file0" dev="overlay" ino=154355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="$" [ 876.717245][T19031] usb 3-1: device descriptor read/64, error -71 [ 876.725601][ T24] audit: type=1400 audit(876.706:16548): avc: denied { setattr } for pid=26362 comm="syz.0.10441" name="#169" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 876.748385][ T24] audit: type=1400 audit(876.706:16549): avc: denied { write open } for pid=26362 comm="syz.0.10441" name="#169" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 876.773028][ T24] audit: type=1400 audit(876.706:16550): avc: denied { link } for pid=26362 comm="syz.0.10441" name="#169" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 876.797252][ T24] audit: type=1400 audit(876.706:16551): avc: denied { associate } for pid=26362 comm="syz.0.10441" name="#169" dev="tmpfs" ino=169 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="$" [ 876.821841][ T24] audit: type=1400 audit(876.736:16552): avc: denied { unlink } for pid=26133 comm="syz-executor" name="file0" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="$" [ 876.855945][ T24] audit: type=1400 audit(876.736:16553): avc: denied { unmount } for pid=26133 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 876.875477][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.887135][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.896729][ T5] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 876.905930][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.918997][ T5] usb 5-1: config 0 descriptor?? [ 877.289871][ T24] audit: type=1404 audit(877.276:16554): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 877.316003][ T24] audit: type=1404 audit(877.286:16555): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 877.326642][T19031] usb 3-1: device descriptor read/all, error -71 [ 877.496935][ T5] hid (null): bogus close delimiter [ 877.666602][ T407] (unnamed net_device) (uninitialized): Assigned a random MAC address: f6:45:cd:81:e5:b3 [ 877.677954][ T407] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 877.685386][ T407] usb 2-1: USB disconnect, device number 103 [ 877.696596][T12469] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 877.726939][ T5] usb 5-1: language id specifier not provided by device, defaulting to English [ 877.898908][T26408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10458'. [ 878.086708][T12469] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.097692][T12469] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.107431][T12469] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 878.116328][T12469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.129737][T12469] usb 1-1: config 0 descriptor?? [ 878.158152][ T5] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.026C/input/input187 [ 878.172251][ T5] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.026C/input/input188 [ 878.186277][ T5] uclogic 0003:256C:006D.026C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 878.376240][ T5] usb 5-1: USB disconnect, device number 108 [ 878.446604][T19031] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 878.496729][ T407] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 878.572651][T26443] tipc: Started in network mode [ 878.577521][T26443] tipc: Own node identity d2fbd70a360b, cluster identity 4711 [ 878.584732][T26443] tipc: Enabled bearer , priority 0 [ 878.607619][T12469] petalynx 0003:18B1:0037.026D: collection stack underflow [ 878.614672][T12469] petalynx 0003:18B1:0037.026D: item 0 1 0 12 parsing failed [ 878.622592][T12469] petalynx 0003:18B1:0037.026D: parse failed [ 878.628664][T26442] tipc: Resetting bearer [ 878.628672][T12469] petalynx: probe of 0003:18B1:0037.026D failed with error -22 [ 878.651316][T26442] tipc: Disabling bearer [ 878.810131][ T408] usb 1-1: USB disconnect, device number 88 [ 878.846659][T19031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.866652][ T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.877448][T19031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.894764][ T407] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 878.910310][T19031] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 878.919440][ T407] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 878.928637][T19031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.937742][T19031] usb 3-1: config 0 descriptor?? [ 878.942616][ T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.954473][ T407] usb 2-1: config 0 descriptor?? [ 878.998269][T26453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10478'. [ 879.007219][T26453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10478'. [ 879.016896][T26453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10478'. [ 879.026429][T26453] netlink: 44214 bytes leftover after parsing attributes in process `syz.4.10478'. [ 879.052693][T26455] netlink: 'syz.4.10479': attribute type 27 has an invalid length. [ 879.080222][T26455] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.087327][T26455] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.147051][T26456] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.153928][T26456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.180296][T26456] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.187296][T26456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.202475][T26456] device veth0_vlan left promiscuous mode [ 879.217106][T26456] device veth0_vlan entered promiscuous mode [ 879.226181][T26456] device veth1_macvtap left promiscuous mode [ 879.238691][T26456] device veth1_macvtap entered promiscuous mode [ 879.246910][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 879.257192][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 879.265920][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 879.274709][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 879.288348][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 879.297126][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 879.305382][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 879.313746][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 879.322027][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 879.330438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 879.338681][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 879.346795][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 879.361075][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 879.370628][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 879.382027][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 879.390102][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 879.398249][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 879.406786][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 879.415793][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 879.417750][T19031] cp2112 0003:10C4:EA90.026E: item fetching failed at offset 5/7 [ 879.432236][T19031] cp2112 0003:10C4:EA90.026E: parse failed [ 879.438378][T19031] cp2112: probe of 0003:10C4:EA90.026E failed with error -22 [ 879.457712][ T407] plantronics 0003:047F:FFFF.026F: unknown main item tag 0x0 [ 879.474204][ T407] plantronics 0003:047F:FFFF.026F: No inputs registered, leaving [ 879.489388][ T407] plantronics 0003:047F:FFFF.026F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 879.636660][ T5052] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 879.644867][ T407] usb 3-1: USB disconnect, device number 86 [ 879.660257][ T2416] usb 2-1: USB disconnect, device number 104 [ 879.816576][ T5] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 879.996662][ T5052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.007540][ T5052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.017140][ T5052] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 880.025962][ T5052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.034811][ T5052] usb 1-1: config 0 descriptor?? [ 880.076566][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 880.126699][ T754] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 880.182285][T26499] SELinux: failed to load policy [ 880.396663][ T5] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 880.405766][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.413560][ T5] usb 5-1: Product: syz [ 880.417664][ T5] usb 5-1: Manufacturer: syz [ 880.422050][ T5] usb 5-1: SerialNumber: syz [ 880.427263][ T5] usb 5-1: config 0 descriptor?? [ 880.436583][ T2416] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 880.496640][ T754] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 880.507703][ T754] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 880.518778][ T754] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 880.527536][ T754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.546700][T26495] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 880.676581][ T2416] usb 3-1: Using ep0 maxpacket: 16 [ 880.686689][ T5] r8152 5-1:0.0: Unknown version 0x0000 [ 880.890247][T12469] usb 5-1: USB disconnect, device number 109 [ 880.957157][ T5052] hid-led 0003:27B8:01ED.0270: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 880.970151][ T5052] hid-led 0003:27B8:01ED.0270: ThingM blink(1) initialized [ 880.986678][ T2416] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 880.996430][ T2416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.006877][ T2416] usb 3-1: Product: syz [ 881.010840][ T2416] usb 3-1: Manufacturer: syz [ 881.015265][ T2416] usb 3-1: SerialNumber: syz [ 881.020764][ T2416] usb 3-1: config 0 descriptor?? [ 881.057242][ T2416] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 881.064862][ T2416] usb 3-1: Detected FT232H [ 881.161149][ T5052] usb 1-1: USB disconnect, device number 89 [ 881.276643][ T2416] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 881.551666][T26520] 9pnet: p9_errstr2errno: server reported unknown error ™^Pœ£—¯ÿÿÿ [ 881.717382][ T754] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 881.724936][ T754] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input189 [ 881.739216][T26532] netlink: 'syz.0.10511': attribute type 27 has an invalid length. [ 881.757865][ T2416] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 881.765971][ T754] usb 4-1: USB disconnect, device number 77 [ 881.771846][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 881.800101][T26532] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.807103][T26532] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.885947][T26535] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.892866][T26535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.902192][T26535] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.909072][T26535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.919093][ T24] kauditd_printk_skb: 72 callbacks suppressed [ 881.919107][ T24] audit: type=1326 audit(881.906:16628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26543 comm="syz.4.10515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5776d42ef9 code=0x7ffc0000 [ 881.925160][T26535] device veth0_vlan left promiscuous mode [ 881.954647][T26535] device veth0_vlan entered promiscuous mode [ 881.959352][ T5] usb 3-1: USB disconnect, device number 87 [ 881.962673][T26535] device veth1_macvtap left promiscuous mode [ 881.973321][T26535] device veth1_macvtap entered promiscuous mode [ 881.981264][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 881.991039][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 881.995290][ T5] ftdi_sio 3-1:0.0: device disconnected [ 882.004039][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 882.005319][ T24] audit: type=1326 audit(881.936:16629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26543 comm="syz.4.10515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f5776d42ef9 code=0x7ffc0000 [ 882.036020][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 882.045111][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 882.053898][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 882.062036][ T24] audit: type=1326 audit(881.936:16630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26543 comm="syz.4.10515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5776d42ef9 code=0x7ffc0000 [ 882.085927][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 882.094990][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 882.103785][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 882.112093][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 882.121197][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 882.129551][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 882.138841][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 882.146925][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 882.154942][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 882.162843][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 882.170821][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 882.178700][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 882.186961][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 882.194788][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 882.267255][ T24] audit: type=1400 audit(882.256:16631): avc: denied { read } for pid=26559 comm="syz.0.10522" dev="nsfs" ino=4026532454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 882.291133][ T24] audit: type=1400 audit(882.256:16632): avc: denied { open } for pid=26559 comm="syz.0.10522" path="net:[4026532454]" dev="nsfs" ino=4026532454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 882.296689][ T316] Bluetooth: hci0: Frame reassembly failed (-84) [ 882.325674][ T24] audit: type=1400 audit(882.256:16633): avc: denied { create } for pid=26559 comm="syz.0.10522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 882.346470][ T24] audit: type=1400 audit(882.306:16634): avc: denied { ioctl } for pid=26559 comm="syz.0.10522" path="socket:[155796]" dev="sockfs" ino=155796 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 882.460589][ T24] audit: type=1400 audit(882.446:16635): avc: denied { read } for pid=26573 comm="syz.3.10528" name="usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 882.496573][ T24] audit: type=1400 audit(882.466:16636): avc: denied { open } for pid=26573 comm="syz.3.10528" path="/dev/usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 882.537278][ T24] audit: type=1400 audit(882.466:16637): avc: denied { write } for pid=26573 comm="syz.3.10528" name="001" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 882.772684][T26600] device pim6reg1 entered promiscuous mode [ 882.986568][ T5052] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 883.043612][ T316] Trying to write to read-only block-device loop4 (partno 0) [ 883.051525][ T316] Trying to write to read-only block-device loop4 (partno 0) [ 883.059159][ T316] Trying to write to read-only block-device loop4 (partno 0) [ 883.066735][ T316] Trying to write to read-only block-device loop4 (partno 0) [ 883.074547][ T316] Trying to write to read-only block-device loop4 (partno 0) [ 883.082172][ T316] Trying to write to read-only block-device loop4 (partno 0) [ 883.089471][ T316] Trying to write to read-only block-device loop4 (partno 0) [ 883.097598][ T316] Trying to write to read-only block-device loop4 (partno 0) [ 883.226553][ T5052] usb 4-1: Using ep0 maxpacket: 8 [ 883.346663][ T5052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.357648][ T5052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.368145][ T5052] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 883.377028][ T5052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.386222][ T5052] usb 4-1: config 0 descriptor?? [ 883.868608][ T5052] saitek 0003:06A3:0CCD.0271: unknown main item tag 0x0 [ 883.878837][ T5052] saitek 0003:06A3:0CCD.0271: unknown main item tag 0x0 [ 883.895861][ T5052] saitek 0003:06A3:0CCD.0271: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.3-1/input0 [ 884.069463][ T5052] usb 4-1: USB disconnect, device number 78 [ 885.136638][ T2416] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 885.186590][T12467] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 885.496594][ T5052] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 885.536662][ T2416] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.547470][ T2416] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.557060][ T2416] usb 4-1: config 0 interface 0 has no altsetting 0 [ 885.563494][ T2416] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 885.572482][ T2416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.581469][ T2416] usb 4-1: config 0 descriptor?? [ 885.586638][T12467] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.597367][T12467] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.607243][T12467] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 885.616067][T12467] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.625348][T12467] usb 2-1: config 0 descriptor?? [ 885.736598][ T5052] usb 1-1: Using ep0 maxpacket: 8 [ 885.856641][ T5052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.869580][ T5052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.879356][ T5052] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 885.888385][ T5052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.900381][ T5052] usb 1-1: config 0 descriptor?? [ 885.916620][ T2416] usbhid 4-1:0.0: can't add hid device: -71 [ 885.922446][ T2416] usbhid: probe of 4-1:0.0 failed with error -71 [ 885.937363][ T2416] usb 4-1: USB disconnect, device number 79 [ 886.097493][T12467] petalynx 0003:18B1:0037.0272: collection stack underflow [ 886.104515][T12467] petalynx 0003:18B1:0037.0272: item 0 1 0 12 parsing failed [ 886.112010][T12467] petalynx 0003:18B1:0037.0272: parse failed [ 886.117890][T12467] petalynx: probe of 0003:18B1:0037.0272 failed with error -22 [ 886.298878][T12467] usb 2-1: USB disconnect, device number 105 [ 886.381004][ T5052] saitek 0003:06A3:0CCD.0273: unknown main item tag 0x0 [ 886.388536][ T5052] saitek 0003:06A3:0CCD.0273: unknown main item tag 0x0 [ 886.395343][ T5052] saitek 0003:06A3:0CCD.0273: item fetching failed at offset 2/11 [ 886.403475][ T5052] saitek 0003:06A3:0CCD.0273: parse failed [ 886.409292][ T5052] saitek: probe of 0003:06A3:0CCD.0273 failed with error -22 [ 886.583367][ T2416] usb 1-1: USB disconnect, device number 90 [ 887.076595][ T407] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 887.266981][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 887.266992][ T24] audit: type=1400 audit(887.256:16666): avc: denied { mount } for pid=26731 comm="syz.0.10592" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 887.306584][T16030] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 887.321063][T26737] device pim6reg1 entered promiscuous mode [ 887.387552][ T24] audit: type=1400 audit(887.376:16667): avc: denied { relabelfrom } for pid=26740 comm="syz.3.10596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 887.414373][ T24] audit: type=1400 audit(887.376:16668): avc: denied { relabelto } for pid=26740 comm="syz.3.10596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 887.446975][ T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.457990][ T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.467579][ T407] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 887.480251][ T407] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 887.489259][ T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.498017][ T407] usb 2-1: config 0 descriptor?? [ 887.546603][T16030] usb 3-1: Using ep0 maxpacket: 32 [ 887.570823][ T24] audit: type=1400 audit(887.556:16669): avc: denied { getopt } for pid=26753 comm="syz.3.10601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 887.586871][T26754] incfs_lookup_dentry err:-13 [ 887.594461][T26754] Error opening source file [ 887.604614][ T24] audit: type=1400 audit(887.556:16670): avc: denied { ioctl } for pid=26753 comm="syz.3.10601" path="/146/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 887.679738][T16030] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.696298][ T24] audit: type=1400 audit(887.676:16671): avc: denied { bind } for pid=26758 comm="syz.0.10603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 887.696542][T16030] usb 3-1: config 1 interface 0 has no altsetting 0 [ 887.730331][ T24] audit: type=1400 audit(887.706:16672): avc: denied { listen } for pid=26758 comm="syz.0.10603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 887.776573][ T24] audit: type=1400 audit(887.706:16673): avc: denied { write } for pid=26758 comm="syz.0.10603" path="socket:[156841]" dev="sockfs" ino=156841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 887.896873][T16030] usb 3-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.40 [ 887.905800][T16030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.926732][T16030] usb 3-1: Product: syz [ 887.930700][T16030] usb 3-1: Manufacturer: syz [ 887.935122][T16030] usb 3-1: SerialNumber: syz [ 887.967400][ T407] acrux 0003:1A34:0802.0274: item fetching failed at offset 3/5 [ 887.975414][ T407] acrux 0003:1A34:0802.0274: parse failed [ 887.997273][ T407] acrux: probe of 0003:1A34:0802.0274 failed with error -22 [ 888.146597][T12469] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 888.169001][ T2416] usb 2-1: USB disconnect, device number 106 [ 888.213572][T26757] F2FS-fs (loop3): Found nat_bits in checkpoint [ 888.257899][T26757] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 888.273900][ T24] audit: type=1400 audit(888.256:16674): avc: denied { write } for pid=26756 comm="syz.3.10602" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 888.295345][ T24] audit: type=1400 audit(888.256:16675): avc: denied { add_name } for pid=26756 comm="syz.3.10602" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 888.416919][T12469] usb 1-1: Using ep0 maxpacket: 32 [ 888.516682][T16030] usbhid 3-1:1.0: can't add hid device: -71 [ 888.522485][T16030] usbhid: probe of 3-1:1.0 failed with error -71 [ 888.538075][T16030] usb 3-1: USB disconnect, device number 88 [ 888.706738][T12469] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 888.718467][T12469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.726274][T12469] usb 1-1: Product: syz [ 888.731367][T12469] usb 1-1: Manufacturer: syz [ 888.737713][T12469] usb 1-1: SerialNumber: syz [ 888.747052][T12469] usb 1-1: config 0 descriptor?? [ 888.974744][T26786] netlink: 'syz.2.10611': attribute type 27 has an invalid length. [ 888.991582][T26786] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.044206][T26786] device veth0_vlan left promiscuous mode [ 889.050305][T26786] device veth0_vlan entered promiscuous mode [ 889.058660][T26786] device veth1_macvtap left promiscuous mode [ 889.064958][T26786] device veth1_macvtap entered promiscuous mode [ 889.075410][ T407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 889.083297][ T407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 889.090903][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 889.097991][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 889.107530][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 889.114838][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 889.123232][T16030] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.130088][T16030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.137359][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 889.145561][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 889.153665][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 889.161652][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 889.169588][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 889.178420][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 889.186348][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 889.194418][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 889.202274][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 889.210326][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 889.218419][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 889.226802][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 889.234903][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 889.236566][ T5] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 889.243446][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 889.258255][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 889.266117][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 889.274839][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 889.282740][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 889.290954][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 889.299085][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 889.306930][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 889.314586][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 889.321967][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 889.329237][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 889.337193][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 889.345117][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 889.353114][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 889.546658][ T2416] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 889.606709][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.616755][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 889.686694][T12469] (unnamed net_device) (uninitialized): Assigned a random MAC address: a6:86:b9:5a:1e:20 [ 889.696801][ T5] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 889.705630][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 889.715029][T12469] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 889.721712][T12469] usb 1-1: USB disconnect, device number 91 [ 889.727672][ T5] usb 2-1: SerialNumber: syz [ 889.756621][ T407] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 889.906706][ T2416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.917720][ T2416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.927924][ T2416] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 889.936617][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 889.936799][ T2416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.944183][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 889.952908][ T2416] usb 3-1: config 0 descriptor?? [ 889.987357][ T5] usb 2-1: 0:2 : does not exist [ 890.126705][ T407] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 890.135544][ T407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.144488][ T407] usb 4-1: config 0 descriptor?? [ 890.427865][T12469] usb 2-1: USB disconnect, device number 107 [ 890.437610][ T2416] samsung 0003:0419:0600.0275: collection stack underflow [ 890.444617][ T2416] samsung 0003:0419:0600.0275: item 0 2 0 12 parsing failed [ 890.452318][ T2416] samsung 0003:0419:0600.0275: parse failed [ 890.458385][ T2416] samsung: probe of 0003:0419:0600.0275 failed with error -22 [ 890.643077][ T5052] usb 3-1: USB disconnect, device number 89 [ 890.806619][ T2416] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 891.166628][ T2416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.181283][ T2416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.199909][ T2416] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 891.209171][ T2416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.219917][T26836] tipc: Enabled bearer , priority 0 [ 891.230467][ T2416] usb 1-1: config 0 descriptor?? [ 891.256717][T26835] tipc: Resetting bearer [ 891.282896][T26835] tipc: Disabling bearer [ 891.689478][T26853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26853 comm=syz.1.10640 [ 891.706917][ T2416] hid (null): unknown global tag 0xe [ 891.713076][ T2416] logitech-hidpp-device 0003:046D:C086.0276: unknown global tag 0xe [ 891.725742][ T2416] logitech-hidpp-device 0003:046D:C086.0276: item 0 1 1 14 parsing failed [ 891.734317][ T2416] logitech-hidpp-device 0003:046D:C086.0276: hidpp_probe:parse failed [ 891.742506][ T2416] logitech-hidpp-device: probe of 0003:046D:C086.0276 failed with error -22 [ 891.908705][T16030] usb 1-1: USB disconnect, device number 92 [ 892.148634][ T407] usb 4-1: Cannot set autoneg [ 892.153245][ T407] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 892.162489][ T407] usb 4-1: USB disconnect, device number 80 [ 892.616600][T12469] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 892.648998][ T24] kauditd_printk_skb: 37 callbacks suppressed [ 892.649016][ T24] audit: type=1400 audit(892.636:16713): avc: denied { bind } for pid=26895 comm="syz.3.10659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 892.696608][ T2416] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 892.726600][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 892.826592][T16030] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 892.856572][T12469] usb 2-1: Using ep0 maxpacket: 8 [ 892.936729][ T2416] usb 3-1: Using ep0 maxpacket: 16 [ 892.976786][T12469] usb 2-1: config 0 has no interfaces? [ 892.982072][T12469] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 892.991188][T12469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.000116][T12469] usb 2-1: config 0 descriptor?? [ 893.056649][ T2416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.067403][ T2416] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 893.079992][ T2416] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 893.088906][ T2416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.097968][ T2416] usb 3-1: config 0 descriptor?? [ 893.106716][ T407] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 893.114206][T16030] usb 1-1: Using ep0 maxpacket: 16 [ 893.238851][ T5052] usb 2-1: USB disconnect, device number 108 [ 893.256622][T16030] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 893.265128][T16030] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 893.359619][ T24] audit: type=1400 audit(893.346:16714): avc: denied { mounton } for pid=26907 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 893.383258][ T407] usb 4-1: Using ep0 maxpacket: 16 [ 893.388388][ T24] audit: type=1400 audit(893.346:16715): avc: denied { mounton } for pid=26907 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 893.411419][ T314] tipc: Left network mode [ 893.423376][T26907] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.430516][T26907] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.437789][T26907] device bridge_slave_0 entered promiscuous mode [ 893.444586][T26907] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.451987][T26907] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.456767][T16030] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 893.459669][T26907] device bridge_slave_1 entered promiscuous mode [ 893.468017][T16030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.481727][T16030] usb 1-1: Product: syz [ 893.485646][T16030] usb 1-1: Manufacturer: syz [ 893.490197][T16030] usb 1-1: SerialNumber: syz [ 893.527050][ T407] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 893.537655][T26907] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.544505][T26907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.551623][T26907] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.558392][T26907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.566063][ T407] usb 4-1: config 0 has no interface number 0 [ 893.572111][ T407] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 893.581610][ T407] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 893.585532][ T2416] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0277/input/input190 [ 893.610429][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 893.618167][T19031] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.625192][T19031] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.634718][T12469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 893.642877][T12469] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.649765][T12469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.667968][ T2416] microsoft 0003:045E:07DA.0277: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 893.690947][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 893.698998][T19031] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.705856][T19031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.713229][ T407] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 893.722089][ T407] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 893.730209][ T407] usb 4-1: Product: syz [ 893.734180][ T407] usb 4-1: SerialNumber: syz [ 893.738745][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 893.747189][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 893.763749][T26907] device veth0_vlan entered promiscuous mode [ 893.769883][ T407] usb 4-1: config 0 descriptor?? [ 893.777969][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 893.786261][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 893.793845][T16030] r8152 1-1:1.0: Unknown version 0x0000 [ 893.800799][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 893.809471][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 893.820066][T26912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26912 comm=syz.1.10664 [ 893.824267][T26907] device veth1_macvtap entered promiscuous mode [ 893.840446][T16030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 893.857683][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 893.866385][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 893.878385][ T24] audit: type=1400 audit(893.866:16716): avc: denied { map } for pid=26913 comm="syz.1.10665" path="socket:[157415]" dev="sockfs" ino=157415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 893.912300][ T24] audit: type=1400 audit(893.896:16717): avc: denied { mounton } for pid=26907 comm="syz-executor" path="/root/syzkaller.Ghmdx1/syz-tmp" dev="sda1" ino=2184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 893.938127][ T24] audit: type=1400 audit(893.896:16718): avc: denied { mount } for pid=26907 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 893.963223][ T24] audit: type=1400 audit(893.926:16719): avc: denied { mounton } for pid=26907 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 893.993652][T26918] syz.4.10663[26918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 893.993703][T26918] syz.4.10663[26918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 894.005629][ T5] usb 1-1: USB disconnect, device number 93 [ 894.031487][ T2416] usb 3-1: USB disconnect, device number 90 [ 894.037855][T26918] syz.4.10663[26918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 894.037913][T26918] syz.4.10663[26918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 894.083469][ T24] audit: type=1326 audit(894.066:16720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="syz.1.10667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3624b4ef9 code=0x7ffc0000 [ 894.118854][ T407] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 894.127931][ T407] usb 4-1: USB disconnect, device number 81 [ 894.134459][ T24] audit: type=1326 audit(894.066:16721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="syz.1.10667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3624b4ef9 code=0x7ffc0000 [ 894.182530][ T24] audit: type=1326 audit(894.116:16722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26920 comm="syz.1.10667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fd3624b4ef9 code=0x7ffc0000 [ 894.301611][ T314] device bridge_slave_1 left promiscuous mode [ 894.308262][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.315644][ T314] device bridge_slave_0 left promiscuous mode [ 894.322152][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.331489][ T314] device veth1_macvtap left promiscuous mode [ 894.337473][ T314] device veth0_vlan left promiscuous mode [ 894.666527][T26946] syz.0.10676[26946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 894.666594][T26946] syz.0.10676[26946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 894.786553][T12469] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 894.886576][ T755] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 894.976621][ T15] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 895.157872][T26956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10681'. [ 895.166839][T12469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.177725][T12469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.187849][T12469] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 895.197004][T12469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.209230][T12469] usb 5-1: config 0 descriptor?? [ 895.216701][ T5] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 895.256657][ T755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.270643][ T755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.280518][ T755] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 895.289900][ T755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.299126][ T755] usb 4-1: config 0 descriptor?? [ 895.346624][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.357476][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.367083][ T15] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 895.376176][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.384708][ T15] usb 1-1: config 0 descriptor?? [ 895.596695][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 895.607524][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 895.617147][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 895.627944][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 895.778062][ T755] lg-g15 0003:046D:C222.0279: unknown main item tag 0x1 [ 895.784907][ T755] lg-g15 0003:046D:C222.0279: unbalanced collection at end of report description [ 895.794077][ T755] lg-g15: probe of 0003:046D:C222.0279 failed with error -22 [ 895.801532][ T5] usb 3-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 895.810394][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.821727][ T5] usb 3-1: Product: syz [ 895.825826][ T5] usb 3-1: Manufacturer: syz [ 895.830287][ T5] usb 3-1: SerialNumber: syz [ 895.835264][ T5] usb 3-1: config 0 descriptor?? [ 895.867557][ T15] samsung 0003:0419:0600.027A: unknown main item tag 0x0 [ 895.874413][ T15] samsung 0003:0419:0600.027A: unknown main item tag 0x0 [ 895.882350][ T5] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 895.892095][T12469] usb 5-1: string descriptor 0 read error: -22 [ 895.898153][ T15] samsung 0003:0419:0600.027A: item fetching failed at offset 2/5 [ 895.905847][ T15] samsung 0003:0419:0600.027A: parse failed [ 895.912131][ T5] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input191 [ 895.922448][ T15] samsung: probe of 0003:0419:0600.027A failed with error -22 [ 895.987923][ T407] usb 4-1: USB disconnect, device number 82 [ 896.088980][T19031] usb 1-1: USB disconnect, device number 94 [ 896.099866][ T408] usb 3-1: USB disconnect, device number 91 [ 896.105942][ T408] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 896.138035][T12469] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0278/input/input192 [ 896.150997][T12469] uclogic 0003:256C:006D.0278: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 896.341370][ T408] usb 5-1: USB disconnect, device number 110 [ 896.678599][T26981] device syzkaller0 entered promiscuous mode [ 896.765044][T26989] overlayfs: failed to resolve './file0': -2 [ 897.057187][T27033] syz.1.10714[27033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 897.057236][T27033] syz.1.10714[27033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 897.411505][T27047] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.10720: inline data xattr refers to an external xattr inode [ 897.437820][T27047] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.10720: couldn't read orphan inode 12 (err -117) [ 897.450076][T27047] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,data_err=ignore,norecovery,resuid=0x0000000000000000,prjquota,usrjquota=,debug_want_extra_isize=0x0000000000000008,resgid=0x0000000000000000,grpjquota=,,errors=continue [ 897.539446][T27055] bridge: RTM_NEWNEIGH with invalid ether address [ 897.553807][T27059] xt_hashlimit: size too large, truncated to 1048576 [ 897.797556][ T24] kauditd_printk_skb: 78 callbacks suppressed [ 897.797569][ T24] audit: type=1400 audit(897.786:16801): avc: denied { write } for pid=27071 comm="syz.0.10730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 897.797639][T27072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10730'. [ 897.803708][ T24] audit: type=1400 audit(897.786:16802): avc: denied { nlmsg_write } for pid=27071 comm="syz.0.10730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 897.906571][T12469] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 898.016751][ T5] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 898.148095][T12469] usb 4-1: Using ep0 maxpacket: 32 [ 898.156707][ T15] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 898.256584][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 898.263277][T27090] device syzkaller0 entered promiscuous mode [ 898.269353][T12469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.280433][T12469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.290227][T12469] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 898.299247][T12469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.307905][T12469] usb 4-1: config 0 descriptor?? [ 898.396565][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 898.456625][ T5] usb 3-1: config 1 interface 0 has no altsetting 0 [ 898.516588][ T15] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 898.524382][ T15] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.546631][ T15] usb 1-1: config 0 has no interface number 0 [ 898.552524][ T15] usb 1-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 898.580669][ T24] audit: type=1400 audit(898.566:16803): avc: denied { watch watch_reads } for pid=27093 comm="syz.1.10740" path="/92" dev="tmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 898.616647][ T5] usb 3-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 898.625485][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.633352][ T5] usb 3-1: Product: syz [ 898.637436][ T5] usb 3-1: Manufacturer: syz [ 898.641845][ T5] usb 3-1: SerialNumber: syz [ 898.676602][ T15] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 898.685451][ T15] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 898.693594][ T15] usb 1-1: Product: syz [ 898.697915][ T15] usb 1-1: SerialNumber: syz [ 898.703006][ T15] usb 1-1: config 0 descriptor?? [ 898.777458][T12469] greenasia 0003:0E8F:0012.027B: item fetching failed at offset 0/3 [ 898.785420][T12469] greenasia 0003:0E8F:0012.027B: parse failed [ 898.791449][T12469] greenasia: probe of 0003:0E8F:0012.027B failed with error -22 [ 898.966767][ T5] usbhid 3-1:1.0: can't add hid device: -22 [ 898.972653][ T5] usbhid: probe of 3-1:1.0 failed with error -22 [ 898.979894][ T5] usb 3-1: USB disconnect, device number 92 [ 898.987205][ T15] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 898.996961][ T408] usb 4-1: USB disconnect, device number 83 [ 898.997895][ T15] usb 1-1: USB disconnect, device number 95 [ 899.036574][T19031] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 899.136709][ T5052] Bluetooth: hci0: command 0x1003 tx timeout [ 899.142535][ T2051] Bluetooth: hci0: sending frame failed (-49) [ 899.296562][T19031] usb 2-1: Using ep0 maxpacket: 8 [ 899.426657][T19031] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.437642][T19031] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.447743][T19031] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 899.468095][T19031] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 899.478740][T19031] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 899.488488][T19031] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 899.522950][ T24] audit: type=1400 audit(899.506:16804): avc: denied { create } for pid=27106 comm="syz.3.10745" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 899.558683][T27109] device pim6reg1 entered promiscuous mode [ 899.686726][T19031] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 899.695662][T19031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.703455][T19031] usb 2-1: Product: syz [ 899.707464][T19031] usb 2-1: Manufacturer: syz [ 899.711825][T19031] usb 2-1: SerialNumber: syz [ 899.936619][T12467] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 899.936686][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 900.006724][T19031] cdc_ncm 2-1:1.0: bind() failure [ 900.012556][T19031] cdc_ncm 2-1:1.1: bind() failure [ 900.018509][T19031] usb 2-1: USB disconnect, device number 109 [ 900.176552][T12467] usb 3-1: Using ep0 maxpacket: 32 [ 900.296659][T12467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.307595][T12467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.317860][T12467] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 900.327171][T12467] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.338972][T12467] usb 3-1: config 0 descriptor?? [ 900.459053][T27126] tipc: New replicast peer: 100.1.1.1 [ 900.464348][T27126] tipc: Enabled bearer , priority 10 [ 900.666562][ T5] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 900.786561][ T15] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 900.817492][T12467] hkems 0003:2006:0118.027C: unbalanced delimiter at end of report description [ 900.826443][T12467] hkems 0003:2006:0118.027C: parse failed [ 900.832317][T12467] hkems: probe of 0003:2006:0118.027C failed with error -22 [ 900.906632][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 901.026659][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.037532][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.037866][T19031] usb 3-1: USB disconnect, device number 93 [ 901.047122][ T5] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 901.047156][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.070770][ T5] usb 1-1: config 0 descriptor?? [ 901.156604][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.167439][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.176946][ T15] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 901.185794][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.194380][ T15] usb 2-1: config 0 descriptor?? [ 901.207183][ T5052] Bluetooth: hci0: command 0x1001 tx timeout [ 901.213040][ T2051] Bluetooth: hci0: sending frame failed (-49) [ 901.328565][T27138] device syzkaller0 entered promiscuous mode [ 901.335250][T27138] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 901.456607][ T5052] tipc: 32-bit node address hash set to ad7f0e4 [ 901.464010][ T24] audit: type=1400 audit(901.446:16805): avc: denied { read } for pid=27149 comm="syz.3.10764" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 901.486324][ T24] audit: type=1400 audit(901.446:16806): avc: denied { open } for pid=27149 comm="syz.3.10764" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 901.547622][ T5] lenovo 0003:17EF:6009.027D: item fetching failed at offset 1/5 [ 901.555604][ T5] lenovo 0003:17EF:6009.027D: hid_parse failed [ 901.561845][ T5] lenovo: probe of 0003:17EF:6009.027D failed with error -22 [ 901.653488][T27159] syz.3.10768[27159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 901.653555][T27159] syz.3.10768[27159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 901.676847][ T15] hid (null): unknown global tag 0xe [ 901.701851][ T15] logitech-hidpp-device 0003:046D:C086.027E: unknown global tag 0xe [ 901.711315][ T15] logitech-hidpp-device 0003:046D:C086.027E: item 0 1 1 14 parsing failed [ 901.719925][ T15] logitech-hidpp-device 0003:046D:C086.027E: hidpp_probe:parse failed [ 901.730727][ T15] logitech-hidpp-device: probe of 0003:046D:C086.027E failed with error -22 [ 901.777081][T12469] usb 1-1: USB disconnect, device number 96 [ 901.878112][ T408] usb 2-1: USB disconnect, device number 110 [ 902.008712][T27181] EXT4-fs (loop3): Test dummy encryption mode enabled [ 902.018238][T27181] EXT4-fs error (device loop3): ext4_fill_super:4955: inode #2: comm syz.3.10777: casefold flag without casefold feature [ 902.031022][T27181] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 902.040725][T27181] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue [ 902.053714][ T24] audit: type=1400 audit(902.036:16807): avc: denied { read append open } for pid=27179 comm="syz.3.10777" path=2F3138332F6275732F6D656D6F72792E63757272656E74202864656C6574656429 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 902.090956][ T24] audit: type=1400 audit(902.076:16808): avc: denied { map } for pid=27179 comm="syz.3.10777" path=2F3138332F6275732F6D656D6F72792E63757272656E74202864656C6574656429 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 902.117320][ T24] audit: type=1400 audit(902.076:16809): avc: denied { write } for pid=27179 comm="syz.3.10777" path=2F3138332F6275732F6D656D6F72792E63757272656E74202864656C6574656429 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 902.666548][ T15] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 902.699840][T27214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10790'. [ 902.721835][T27216] syz.2.10792[27216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 902.721882][T27216] syz.2.10792[27216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 902.734551][T27216] syz.2.10792[27216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 902.745967][T27216] syz.2.10792[27216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 902.746725][ T5] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 903.016676][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 903.026740][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.037910][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.047786][ T15] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 903.060909][ T15] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 903.069917][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.080327][ T15] usb 1-1: config 0 descriptor?? [ 903.096577][ T408] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 903.216707][ T5] usb 2-1: config 1 interface 0 has no altsetting 0 [ 903.296590][ T5052] Bluetooth: hci0: command 0x1009 tx timeout [ 903.376638][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 903.385518][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.393316][ T5] usb 2-1: Product: syz [ 903.397335][ T5] usb 2-1: Manufacturer: syz [ 903.401691][ T5] usb 2-1: SerialNumber: syz [ 903.416586][T12467] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 903.536692][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.547573][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.547934][ T15] plantronics 0003:047F:FFFF.027F: unknown main item tag 0x0 [ 903.557172][ T408] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 903.565265][ T15] plantronics 0003:047F:FFFF.027F: No inputs registered, leaving [ 903.573538][ T408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.589848][ T408] usb 4-1: config 0 descriptor?? [ 903.594901][ T15] plantronics 0003:047F:FFFF.027F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 903.726704][ T5] usbhid 2-1:1.0: can't add hid device: -22 [ 903.732582][ T5] usbhid: probe of 2-1:1.0 failed with error -22 [ 903.743350][ T5] usb 2-1: USB disconnect, device number 111 [ 903.776662][T12467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.787502][T12467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.797104][T12467] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 903.805882][T12467] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.814653][T12467] usb 3-1: config 0 descriptor?? [ 903.828078][T19031] usb 1-1: USB disconnect, device number 97 [ 904.067494][ T408] sony 0003:054C:0268.0280: unknown main item tag 0x0 [ 904.076049][ T408] sony 0003:054C:0268.0280: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 904.087866][ T408] sony 0003:054C:0268.0280: failed to claim input [ 904.235425][ T24] audit: type=1400 audit(904.216:16810): avc: denied { remount } for pid=27231 comm="syz.1.10797" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 904.235433][T27232] tmpfs: Unknown parameter 'mod' [ 904.278462][ T408] usb 4-1: USB disconnect, device number 84 [ 904.298673][T12467] cypress 0003:04B4:07B1.0281: unknown main item tag 0x6 [ 904.305573][T12467] cypress 0003:04B4:07B1.0281: item fetching failed at offset 4/5 [ 904.316294][T12467] cypress 0003:04B4:07B1.0281: parse failed [ 904.322699][T12467] cypress: probe of 0003:04B4:07B1.0281 failed with error -22 [ 904.323267][T27234] syz.1.10798[27234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 904.334076][T27234] syz.1.10798[27234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 904.468245][ T24] audit: type=1326 audit(904.456:16811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.0.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52046f6ef9 code=0x7ffc0000 [ 904.507004][ T408] usb 3-1: USB disconnect, device number 94 [ 904.514629][ T24] audit: type=1326 audit(904.456:16812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.0.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52046f6ef9 code=0x7ffc0000 [ 904.540334][ T24] audit: type=1326 audit(904.486:16813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.0.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52046f6ef9 code=0x7ffc0000 [ 904.563332][ T24] audit: type=1326 audit(904.486:16814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.0.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52046f6ef9 code=0x7ffc0000 [ 904.586456][ T24] audit: type=1326 audit(904.486:16815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.0.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52046f6ef9 code=0x7ffc0000 [ 904.615152][ T24] audit: type=1326 audit(904.486:16816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.0.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52046f6ef9 code=0x7ffc0000 [ 904.638715][ T24] audit: type=1326 audit(904.486:16817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.0.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52046f6ef9 code=0x7ffc0000 [ 904.661625][T19031] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 904.670482][ T24] audit: type=1326 audit(904.486:16818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.0.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52046f6ef9 code=0x7ffc0000 [ 904.693453][ T24] audit: type=1326 audit(904.486:16819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.0.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52046f6ef9 code=0x7ffc0000 [ 905.018430][ T5052] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 905.076720][T19031] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 905.085468][T19031] usb 2-1: config 0 has no interface number 0 [ 905.091659][T19031] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.102536][T19031] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.112212][T19031] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 905.121217][T19031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.190392][T19031] usb 2-1: config 0 descriptor?? [ 905.416638][ T5052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.429490][ T5052] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 905.442613][ T5052] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 905.451603][ T5052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.463830][ T5052] usb 1-1: config 0 descriptor?? [ 905.666869][T19031] hid (null): global environment stack underflow [ 905.676372][T19031] uclogic 0003:5543:0522.0282: global environment stack underflow [ 905.684467][T19031] uclogic 0003:5543:0522.0282: item 0 1 1 11 parsing failed [ 905.692864][T19031] uclogic 0003:5543:0522.0282: parse failed [ 905.698849][T19031] uclogic: probe of 0003:5543:0522.0282 failed with error -22 [ 1004.946524][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1004.953030][ C0] rcu: 0-...!: (9999 ticks this GP) idle=7be/1/0x4000000000000000 softirq=149209/149209 fqs=36 last_accelerate: ebb7/12c6 dyntick_enabled: 1 [ 1004.967205][ C0] (t=10000 jiffies g=165229 q=227) [ 1004.972273][ C0] rcu: rcu_preempt kthread starved for 9921 jiffies! g165229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1004.983398][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1004.993203][ C0] rcu: RCU grace-period kthread stack dump: [ 1004.998936][ C0] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 1005.007961][ C0] Call Trace: [ 1005.011109][ C0] __schedule+0xbe6/0x1330 [ 1005.015347][ C0] ? release_firmware_map_entry+0x18d/0x18d [ 1005.021072][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1005.026364][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 1005.031051][ C0] schedule+0x13d/0x1d0 [ 1005.035129][ C0] schedule_timeout+0x18c/0x360 [ 1005.039838][ C0] ? prepare_to_swait_event+0x39f/0x3e0 [ 1005.045201][ C0] ? console_conditional_schedule+0x10/0x10 [ 1005.050929][ C0] ? run_local_timers+0x160/0x160 [ 1005.055789][ C0] rcu_gp_kthread+0xefc/0x23a0 [ 1005.060392][ C0] ? dyntick_save_progress_counter+0x1c0/0x1c0 [ 1005.066376][ C0] ? rcu_barrier_callback+0x50/0x50 [ 1005.071411][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 1005.076108][ C0] ? __kasan_check_read+0x11/0x20 [ 1005.081119][ C0] ? __kthread_parkme+0xb9/0x1c0 [ 1005.085837][ C0] kthread+0x34b/0x3d0 [ 1005.089745][ C0] ? rcu_barrier_callback+0x50/0x50 [ 1005.094772][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1005.099199][ C0] ret_from_fork+0x1f/0x30 [ 1005.103488][ C0] NMI backtrace for cpu 0 [ 1005.107623][ C0] CPU: 0 PID: 27258 Comm: syz.3.10809 Tainted: G W 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 1005.118895][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1005.128800][ C0] Call Trace: [ 1005.131913][ C0] [ 1005.134610][ C0] dump_stack_lvl+0x1e2/0x24b [ 1005.139228][ C0] ? panic+0x812/0x812 [ 1005.143131][ C0] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1005.148428][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1005.153723][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 1005.158413][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1005.164310][ C0] dump_stack+0x15/0x17 [ 1005.168312][ C0] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 1005.174138][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1005.180024][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1005.185749][ C0] rcu_dump_cpu_stacks+0x199/0x2b0 [ 1005.190696][ C0] rcu_sched_clock_irq+0xf8a/0x1890 [ 1005.195731][ C0] ? rcutree_dead_cpu+0x340/0x340 [ 1005.200601][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 1005.205623][ C0] update_process_times+0x198/0x200 [ 1005.210664][ C0] tick_sched_timer+0x188/0x240 [ 1005.215340][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 1005.220725][ C0] __hrtimer_run_queues+0x3d7/0xa50 [ 1005.225758][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 1005.230703][ C0] ? clockevents_program_event+0x214/0x2c0 [ 1005.236348][ C0] ? ktime_get_update_offsets_now+0x266/0x280 [ 1005.242249][ C0] hrtimer_interrupt+0x39a/0x8b0 [ 1005.247032][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 1005.252749][ C0] asm_call_irq_on_stack+0xf/0x20 [ 1005.257610][ C0] [ 1005.260390][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 1005.265855][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1005.271699][ C0] RIP: 0010:tipc_node_distr_xmit+0x492/0x4d0 [ 1005.277580][ C0] Code: a6 d2 fc eb 05 e8 3e a6 d2 fc 48 c7 44 24 60 0e 36 e0 45 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 18 48 c7 04 08 00 00 00 00 44 08 08 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 c0 [ 1005.297018][ C0] RSP: 0018:ffffc90000fee920 EFLAGS: 00000246 [ 1005.302915][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff920001fdd30 [ 1005.310824][ C0] RDX: ffffc90002a23000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1005.318626][ C0] RBP: ffffc90000feea30 R08: ffffffff8498ef0d R09: ffffed1021ade8b2 [ 1005.326522][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000feec00 [ 1005.334343][ C0] R13: ffff88810d6f4500 R14: dffffc0000000000 R15: ffffc90000feec00 [ 1005.342152][ C0] ? tipc_sk_rcv+0x4cd/0x1e30 [ 1005.346668][ C0] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 1005.351692][ C0] ? _raw_spin_trylock_bh+0xf9/0x190 [ 1005.356818][ C0] ? _raw_spin_trylock+0x1a0/0x1a0 [ 1005.361762][ C0] tipc_sk_rcv+0x177d/0x1e30 [ 1005.366186][ C0] ? __stack_depot_save+0x468/0x4d0 [ 1005.371222][ C0] ? kasan_set_track+0x5d/0x70 [ 1005.375818][ C0] ? kasan_set_track+0x4b/0x70 [ 1005.380420][ C0] ? kasan_set_free_info+0x23/0x40 [ 1005.385367][ C0] ? __kasan_slab_free+0x11/0x20 [ 1005.390150][ C0] ? slab_free_freelist_hook+0xc0/0x190 [ 1005.395522][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 1005.400230][ C0] ? kfree_skbmem+0x104/0x170 [ 1005.404724][ C0] ? tipc_sk_rcv+0x1b52/0x1e30 [ 1005.409325][ C0] ? tipc_node_xmit+0x34b/0xe30 [ 1005.414011][ C0] ? tipc_sk_filter_rcv+0x1da8/0x3e00 [ 1005.419215][ C0] ? tipc_sk_rcv+0x8a1/0x1e30 [ 1005.423730][ C0] ? tipc_node_distr_xmit+0x36a/0x4d0 [ 1005.428938][ C0] ? tipc_sk_backlog_rcv+0x18b/0x210 [ 1005.434057][ C0] ? __fput+0x33d/0x7b0 [ 1005.438060][ C0] ? ____fput+0x15/0x20 [ 1005.442047][ C0] ? __skb_queue_purge+0x180/0x180 [ 1005.446992][ C0] ? kfree_skbmem+0x104/0x170 [ 1005.451508][ C0] ? bpf_trace_run2+0xf4/0x280 [ 1005.456104][ C0] tipc_node_xmit+0x34b/0xe30 [ 1005.460618][ C0] ? kfree_skbmem+0x104/0x170 [ 1005.465142][ C0] ? __bpf_trace_kmem_free+0x6f/0x90 [ 1005.470253][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 1005.475633][ C0] ? kfree_skbmem+0x104/0x170 [ 1005.480149][ C0] ? __traceiter_kmem_cache_free+0x2e/0x50 [ 1005.485789][ C0] ? kmem_cache_free+0x1c0/0x1e0 [ 1005.490559][ C0] ? kfree_skbmem+0x104/0x170 [ 1005.495078][ C0] tipc_node_xmit_skb+0x153/0x1b0 [ 1005.499936][ C0] ? __skb_queue_purge+0x180/0x180 [ 1005.504884][ C0] ? trace_tipc_sk_rej_msg+0x2b/0x6f0 [ 1005.510089][ C0] tipc_sk_rcv+0x1c0b/0x1e30 [ 1005.514522][ C0] ? __skb_queue_purge+0x180/0x180 [ 1005.519467][ C0] tipc_node_xmit+0x34b/0xe30 [ 1005.523976][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 1005.528836][ C0] ? __kernel_text_address+0x9b/0x110 [ 1005.534054][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 1005.539424][ C0] ? __kasan_check_write+0x14/0x20 [ 1005.544373][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1005.549668][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 1005.554351][ C0] tipc_sk_filter_rcv+0x1da8/0x3e00 [ 1005.559486][ C0] ? tipc_sk_dump+0xf50/0xf50 [ 1005.563984][ C0] ? __kasan_check_write+0x14/0x20 [ 1005.568932][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 1005.573793][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 1005.578570][ C0] tipc_sk_rcv+0x8a1/0x1e30 [ 1005.582917][ C0] ? kfree_skbmem+0x104/0x170 [ 1005.587440][ C0] ? __skb_queue_purge+0x180/0x180 [ 1005.592367][ C0] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 1005.597580][ C0] tipc_node_xmit+0x34b/0xe30 [ 1005.602090][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 1005.607476][ C0] tipc_node_distr_xmit+0x36a/0x4d0 [ 1005.612503][ C0] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 1005.617540][ C0] ? __kasan_check_write+0x14/0x20 [ 1005.622484][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1005.627778][ C0] ? __tipc_shutdown+0xe7c/0x1510 [ 1005.632639][ C0] tipc_sk_backlog_rcv+0x18b/0x210 [ 1005.637588][ C0] ? tipc_sk_timeout+0xab0/0xab0 [ 1005.642383][ C0] __release_sock+0x148/0x410 [ 1005.646876][ C0] release_sock+0x65/0x1b0 [ 1005.651126][ C0] tipc_release+0xb6b/0x1440 [ 1005.655551][ C0] sock_close+0xdf/0x270 [ 1005.659629][ C0] ? sock_mmap+0xa0/0xa0 [ 1005.663710][ C0] __fput+0x33d/0x7b0 [ 1005.667534][ C0] ____fput+0x15/0x20 [ 1005.671348][ C0] task_work_run+0x129/0x190 [ 1005.675776][ C0] exit_to_user_mode_loop+0xbf/0xd0 [ 1005.680810][ C0] syscall_exit_to_user_mode+0xa2/0x1a0 [ 1005.686190][ C0] do_syscall_64+0x40/0x70 [ 1005.690445][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1005.696166][ C0] RIP: 0033:0x7f110f4b1ef9 [ 1005.700427][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.719863][ C0] RSP: 002b:00007f110e12f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.728111][ C0] RAX: 00000000000203a0 RBX: 00007f110f64df80 RCX: 00007f110f4b1ef9 [ 1005.735915][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 1005.743729][ C0] RBP: 00007f110f51f93e R08: 0000000000000000 R09: 0000000000000000 [ 1005.751537][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.759352][ C0] R13: 0000000000000000 R14: 00007f110f64df80 R15: 00007ffd8fcee328 [ 1057.696409][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.3.10809:27257] [ 1057.704637][ C1] Modules linked in: [ 1057.708379][ C1] CPU: 1 PID: 27257 Comm: syz.3.10809 Tainted: G W 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 1057.719653][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1057.729586][ C1] RIP: 0010:kvm_wait+0xfc/0x150 [ 1057.734244][ C1] Code: 38 f0 75 26 41 f7 c7 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d 15 56 d5 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d 06 56 d5 03 fb f4 <4c> 89 7c 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 49 c7 04 [ 1057.754284][ C1] RSP: 0018:ffffc9000110f9e0 EFLAGS: 00000246 [ 1057.760188][ C1] RAX: 0000000000000003 RBX: 1ffff92000221f40 RCX: ffffffff8150b334 [ 1057.767998][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc9000110fa20 [ 1057.775809][ C1] RBP: ffffc9000110fa90 R08: dffffc0000000000 R09: ffffed1021ade8b2 [ 1057.783620][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1057.791434][ C1] R13: ffff88810d6f4588 R14: 0000000000000003 R15: 0000000000000246 [ 1057.799246][ C1] FS: 0000555556646500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1057.808023][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1057.814432][ C1] CR2: 0000001b33e1aff8 CR3: 0000000132bae000 CR4: 00000000003506a0 [ 1057.822247][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1057.830059][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1057.837865][ C1] Call Trace: [ 1057.840988][ C1] [ 1057.843693][ C1] ? show_regs+0x58/0x60 [ 1057.847788][ C1] ? watchdog_timer_fn+0x471/0x590 [ 1057.852707][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 1057.857834][ C1] ? __hrtimer_run_queues+0x3d7/0xa50 [ 1057.863039][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 1057.867991][ C1] ? clockevents_program_event+0x214/0x2c0 [ 1057.873627][ C1] ? ktime_get_update_offsets_now+0x266/0x280 [ 1057.879528][ C1] ? hrtimer_interrupt+0x39a/0x8b0 [ 1057.884485][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 1057.890380][ C1] ? asm_call_irq_on_stack+0xf/0x20 [ 1057.895401][ C1] [ 1057.898215][ C1] ? sysvec_apic_timer_interrupt+0x85/0xe0 [ 1057.903828][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1057.909822][ C1] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 1057.915894][ C1] ? kvm_wait+0xfc/0x150 [ 1057.919971][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1057.925957][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 1057.930914][ C1] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 1057.937006][ C1] __pv_queued_spin_lock_slowpath+0x72f/0xc70 [ 1057.942893][ C1] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 1057.949143][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 1057.953912][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1057.958947][ C1] ? memset+0x35/0x40 [ 1057.962763][ C1] lock_sock_nested+0x92/0x300 [ 1057.967395][ C1] ? locks_remove_posix+0x610/0x610 [ 1057.972392][ C1] ? sock_init_data+0xc0/0xc0 [ 1057.976912][ C1] ? __kasan_check_read+0x11/0x20 [ 1057.981785][ C1] tipc_release+0x57/0x1440 [ 1057.986111][ C1] sock_close+0xdf/0x270 [ 1057.990187][ C1] ? sock_mmap+0xa0/0xa0 [ 1057.994265][ C1] __fput+0x33d/0x7b0 [ 1057.998093][ C1] ____fput+0x15/0x20 [ 1058.001902][ C1] task_work_run+0x129/0x190 [ 1058.006330][ C1] exit_to_user_mode_loop+0xbf/0xd0 [ 1058.011363][ C1] syscall_exit_to_user_mode+0xa2/0x1a0 [ 1058.016744][ C1] do_syscall_64+0x40/0x70 [ 1058.021019][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1058.026724][ C1] RIP: 0033:0x7f110f4b1ef9 [ 1058.030981][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.050424][ C1] RSP: 002b:00007ffd8fcee488 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1058.058665][ C1] RAX: 0000000000000000 RBX: 00007f110f64fa80 RCX: 00007f110f4b1ef9 [ 1058.066473][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1058.074285][ C1] RBP: 00007f110f64fa80 R08: 0000000000000006 R09: 00007ffd8fcee77f [ 1058.082095][ C1] R10: 00000000005f9eb0 R11: 0000000000000246 R12: 00000000000dd204 [ 1058.089910][ C1] R13: 00007ffd8fcee590 R14: 0000000000000032 R15: ffffffffffffffff [ 1058.097735][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1058.103891][ C0] NMI backtrace for cpu 0 [ 1058.103899][ C0] CPU: 0 PID: 27258 Comm: syz.3.10809 Tainted: G W 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 1058.103906][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1058.103910][ C0] RIP: 0010:preempt_count_add+0x76/0x1a0 [ 1058.103922][ C0] Code: c1 e8 03 42 0f b6 04 38 84 c0 0f 85 f2 00 00 00 83 3d ed aa bf 05 00 75 11 65 8b 05 70 5f b9 7e 0f b6 c0 3d f5 00 00 00 73 6e <65> 8b 05 5f 5f b9 7e 25 ff ff ff 7f 39 d8 75 57 4c 8b 75 08 4c 89 [ 1058.103927][ C0] RSP: 0018:ffffc90000fee978 EFLAGS: 00000293 [ 1058.103935][ C0] RAX: 0000000000000002 RBX: 0000000000000201 RCX: ffffffff8708b903 [ 1058.103941][ C0] RDX: ffffc90002a23000 RSI: 000000000003ffff RDI: 0000000000000201 [ 1058.103947][ C0] RBP: ffffc90000fee990 R08: ffffffff84990d81 R09: ffffed1021ade8b1 [ 1058.103952][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920001fdd34 [ 1058.103957][ C0] R13: ffff88810d6f4588 R14: 0000000077f168a7 R15: dffffc0000000000 [ 1058.103963][ C0] FS: 00007f110e12f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1058.103968][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1058.103973][ C0] CR2: 0000001b33e1cff8 CR3: 0000000132bae000 CR4: 00000000003506b0 [ 1058.103978][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1058.103984][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1058.103986][ C0] Call Trace: [ 1058.103989][ C0] [ 1058.103992][ C0] ? show_regs+0x58/0x60 [ 1058.103996][ C0] ? nmi_cpu_backtrace+0x133/0x160 [ 1058.104000][ C0] ? preempt_count_add+0x76/0x1a0 [ 1058.104004][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1058.104007][ C0] ? nmi_handle+0xa8/0x280 [ 1058.104011][ C0] ? preempt_count_add+0x76/0x1a0 [ 1058.104014][ C0] ? default_do_nmi+0x69/0x160 [ 1058.104018][ C0] ? exc_nmi+0xad/0x100 [ 1058.104021][ C0] ? end_repeat_nmi+0x16/0x31 [ 1058.104025][ C0] ? tipc_sk_lookup+0x511/0x650 [ 1058.104029][ C0] ? preempt_count_add+0x76/0x1a0 [ 1058.104033][ C0] ? preempt_count_add+0x76/0x1a0 [ 1058.104037][ C0] ? preempt_count_add+0x76/0x1a0 [ 1058.104040][ C0] [ 1058.104043][ C0] _raw_spin_trylock_bh+0x6e/0x190 [ 1058.104047][ C0] ? _raw_spin_trylock+0x1a0/0x1a0 [ 1058.104050][ C0] tipc_sk_rcv+0x4c2/0x1e30 [ 1058.104054][ C0] ? __stack_depot_save+0x468/0x4d0 [ 1058.104058][ C0] ? kasan_set_track+0x5d/0x70 [ 1058.104061][ C0] ? kasan_set_track+0x4b/0x70 [ 1058.104065][ C0] ? kasan_set_free_info+0x23/0x40 [ 1058.104068][ C0] ? __kasan_slab_free+0x11/0x20 [ 1058.104073][ C0] ? slab_free_freelist_hook+0xc0/0x190 [ 1058.104077][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 1058.104080][ C0] ? kfree_skbmem+0x104/0x170 [ 1058.104084][ C0] ? tipc_sk_rcv+0x1b52/0x1e30 [ 1058.104088][ C0] ? tipc_node_xmit+0x34b/0xe30 [ 1058.104092][ C0] ? tipc_sk_filter_rcv+0x1da8/0x3e00 [ 1058.104095][ C0] ? tipc_sk_rcv+0x8a1/0x1e30 [ 1058.104099][ C0] ? tipc_node_distr_xmit+0x36a/0x4d0 [ 1058.104103][ C0] ? tipc_sk_backlog_rcv+0x18b/0x210 [ 1058.104106][ C0] ? __fput+0x33d/0x7b0 [ 1058.104110][ C0] ? ____fput+0x15/0x20 [ 1058.104114][ C0] ? __skb_queue_purge+0x180/0x180 [ 1058.104117][ C0] ? kfree_skbmem+0x104/0x170 [ 1058.104121][ C0] ? bpf_trace_run2+0xf4/0x280 [ 1058.104124][ C0] tipc_node_xmit+0x34b/0xe30 [ 1058.104128][ C0] ? kfree_skbmem+0x104/0x170 [ 1058.104131][ C0] ? __bpf_trace_kmem_free+0x6f/0x90 [ 1058.104136][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 1058.104139][ C0] ? kfree_skbmem+0x104/0x170 [ 1058.104143][ C0] ? __traceiter_kmem_cache_free+0x2e/0x50 [ 1058.104147][ C0] ? kmem_cache_free+0x1c0/0x1e0 [ 1058.104150][ C0] ? kfree_skbmem+0x104/0x170 [ 1058.104154][ C0] tipc_node_xmit_skb+0x153/0x1b0 [ 1058.104158][ C0] ? __skb_queue_purge+0x180/0x180 [ 1058.104162][ C0] ? trace_tipc_sk_rej_msg+0x2b/0x6f0 [ 1058.104166][ C0] tipc_sk_rcv+0x1c0b/0x1e30 [ 1058.104169][ C0] ? __skb_queue_purge+0x180/0x180 [ 1058.104173][ C0] tipc_node_xmit+0x34b/0xe30 [ 1058.104177][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 1058.104180][ C0] ? __kernel_text_address+0x9b/0x110 [ 1058.104184][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 1058.104188][ C0] ? __kasan_check_write+0x14/0x20 [ 1058.104192][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1058.104196][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 1058.104200][ C0] tipc_sk_filter_rcv+0x1da8/0x3e00 [ 1058.104203][ C0] ? tipc_sk_dump+0xf50/0xf50 [ 1058.104207][ C0] ? __kasan_check_write+0x14/0x20 [ 1058.104211][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 1058.104215][ C0] ? kmem_cache_free+0xa9/0x1e0 [ 1058.104218][ C0] tipc_sk_rcv+0x8a1/0x1e30 [ 1058.104222][ C0] ? kfree_skbmem+0x104/0x170 [ 1058.104225][ C0] ? __skb_queue_purge+0x180/0x180 [ 1058.104229][ C0] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 1058.104233][ C0] tipc_node_xmit+0x34b/0xe30 [ 1058.104237][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 1058.104240][ C0] tipc_node_distr_xmit+0x36a/0x4d0 [ 1058.104244][ C0] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 1058.104248][ C0] ? __kasan_check_write+0x14/0x20 [ 1058.104252][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1058.104255][ C0] ? __tipc_shutdown+0xe7c/0x1510 [ 1058.104260][ C0] tipc_sk_backlog_rcv+0x18b/0x210 [ 1058.104264][ C0] ? tipc_sk_timeout+0xab0/0xab0 [ 1058.104268][ C0] __release_sock+0x148/0x410 [ 1058.104271][ C0] release_sock+0x65/0x1b0 [ 1058.104275][ C0] tipc_release+0xb6b/0x1440 [ 1058.104278][ C0] sock_close+0xdf/0x270 [ 1058.104281][ C0] ? sock_mmap+0xa0/0xa0 [ 1058.104284][ C0] __fput+0x33d/0x7b0 [ 1058.104288][ C0] ____fput+0x15/0x20 [ 1058.104291][ C0] task_work_run+0x129/0x190 [ 1058.104295][ C0] exit_to_user_mode_loop+0xbf/0xd0 [ 1058.104299][ C0] syscall_exit_to_user_mode+0xa2/0x1a0 [ 1058.104302][ C0] do_syscall_64+0x40/0x70 [ 1058.104306][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1058.104310][ C0] RIP: 0033:0x7f110f4b1ef9 [ 1058.104321][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.104325][ C0] RSP: 002b:00007f110e12f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1058.104334][ C0] RAX: 00000000000203a0 RBX: 00007f110f64df80 RCX: 00007f110f4b1ef9 [ 1058.104339][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 1058.104344][ C0] RBP: 00007f110f51f93e R08: 0000000000000000 R09: 0000000000000000 [ 1058.104349][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.104354][ C0] R13: 0000000000000000 R14: 00007f110f64df80 R15: 00007ffd8fcee328