last executing test programs: 2.50816467s ago: executing program 2 (id=711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) 2.492549321s ago: executing program 2 (id=712): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000140)=0x401, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 2.423913921s ago: executing program 2 (id=716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0xe4, @local, 0x9}, 0x1c) 2.407396431s ago: executing program 2 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000020100102505a1a4400000000001090244000101000000090400001602020000052406000005240000000d240f01060000000000000000090581032000000000090582020800000000090503020002"], 0x0) 1.249451245s ago: executing program 0 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.205988136s ago: executing program 4 (id=748): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) write(r1, &(0x7f0000000140)="240000001a005f0714f9f407000909000a000000000c00000000000008001e0000000000", 0x24) 1.191748195s ago: executing program 0 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {}, 0x2}}, 0x2e) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000240), &(0x7f00000004c0)=@udp6=r2}, 0x20) 1.187154655s ago: executing program 4 (id=750): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB="495b4360f2f87a498c831fbd175a58c445a74a731a"], 0xfc, 0x2ee, &(0x7f0000000440)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x2) 1.107657936s ago: executing program 0 (id=751): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff000300000800395032303030"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000044c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.069189986s ago: executing program 0 (id=752): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001380), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffc3c) 1.043188926s ago: executing program 0 (id=753): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x4081, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)='!', 0x1}], 0x5) 1.016384026s ago: executing program 4 (id=754): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) fallocate(r0, 0x3, 0x5000000, 0x8000c62) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, r0, 0x140000, 0x100100001, 0x0, 0x800}) 941.485506ms ago: executing program 0 (id=755): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 870.002487ms ago: executing program 4 (id=756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 754.561927ms ago: executing program 4 (id=759): pipe2(&(0x7f0000000040), 0x4000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000004fc0)={0x30, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x142, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 754.423207ms ago: executing program 4 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000dfff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 611.922807ms ago: executing program 1 (id=766): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x25, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES64, @ANYBLOB="000008000000000005c8317adf2028b9007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000fa00449a484b7055c5af70747d3a571cba6f4ad442d12c02a3ac2a2f6f03e367dfad5251279a0126e900fe7ef22557a16befedbbd068a54d71083b815bf416e9ad9258f4465c42121b5e252a970bb660a00b8df1e2b30a01b4761131fc856a1a16eeda5a494b4cd94bcaadd53f9cc37bcc7428f39dd0e7d4b9cb3c716ba2f39e2658cbbd3c8888cffcdb5fbb780f3c34e5cddc7e2e98ae72a5547a1b0ec4d48adc51"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000600)=ANY=[], 0x0) 558.559568ms ago: executing program 1 (id=767): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x2) sendmmsg(r0, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24044002) 558.362278ms ago: executing program 1 (id=768): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 555.747308ms ago: executing program 2 (id=769): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x1ffffff, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x20, 0x0, 0x10000) 510.373508ms ago: executing program 1 (id=770): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IIF={0x8, 0x3, r2}]}, 0x24}}, 0x0) 473.131978ms ago: executing program 1 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) tgkill(0x0, 0x0, 0x30) 443.214688ms ago: executing program 1 (id=772): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000680)=0x1f, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x1, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 341.292279ms ago: executing program 3 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) set_tid_address(0x0) 302.151579ms ago: executing program 3 (id=774): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000300)={0x1d, r1}, 0x48) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) 246.129009ms ago: executing program 3 (id=775): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x4) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) 186.595959ms ago: executing program 3 (id=776): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000001c0)=0x7) setuid(r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000001ac0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x29, 0x0, @empty, @private}}}}) 186.438599ms ago: executing program 3 (id=777): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc020660b, &(0x7f0000000180)={@desc={0x1, 0x0, @desc1}}) 3.76883ms ago: executing program 3 (id=778): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000001580)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "711e8f", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev}, {[], @time_exceed={0x9, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "bede78", 0x0, 0x0, 0x0, @dev, @loopback}}}}}}}, 0x0) 0s ago: executing program 2 (id=779): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write(r0, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x1fc0) kernel console output (not intermixed with test programs): EV_CHANGE): veth1_to_hsr: link becomes ready [ 22.358607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.366916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.375086][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.382939][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.391276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.399453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.407642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.415609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.423828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.431961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.440330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.453657][ T293] device veth0_vlan entered promiscuous mode [ 22.464211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.472331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.479992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.487608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.495766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.515633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.524043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.541214][ T293] device veth1_macvtap entered promiscuous mode [ 22.549133][ T294] device veth0_vlan entered promiscuous mode [ 22.555594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.564287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.571607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.579100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.594024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.602294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.610779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.618990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.635296][ T290] device veth0_vlan entered promiscuous mode [ 22.655596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.667114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.679148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.687343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.695712][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.709518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.717787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.728283][ T294] device veth1_macvtap entered promiscuous mode [ 22.743899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.752901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.775977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.790563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.800799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.808666][ T198] Bluetooth: hci0: Frame reassembly failed (-84) [ 22.808966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.834899][ T290] device veth1_macvtap entered promiscuous mode [ 22.842018][ T291] device veth0_vlan entered promiscuous mode [ 22.849039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.857220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.864931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.873611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.881916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.890757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.935659][ T331] loop1: detected capacity change from 0 to 2048 [ 22.937284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.957901][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.967592][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.976554][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.978377][ T331] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 22.985435][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.993270][ T331] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 23.001685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.015756][ T331] fs-verity: sha512 using implementation "sha512-avx2" [ 23.033267][ T291] device veth1_macvtap entered promiscuous mode [ 23.046470][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.053669][ T331] syz.1.9 (331) used greatest stack depth: 20616 bytes left [ 23.075285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.089970][ T292] EXT4-fs (loop1): unmounting filesystem. [ 23.091221][ T340] loop3: detected capacity change from 0 to 512 [ 23.096614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.111396][ T340] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 23.139725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.140126][ T340] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 23.162474][ T340] EXT4-fs (loop3): 1 truncate cleaned up [ 23.162625][ T344] loop0: detected capacity change from 0 to 512 [ 23.168040][ T340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 23.193205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.201469][ T345] SELinux: failed to load policy [ 23.259236][ T344] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 23.280468][ T344] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 23.297654][ T354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 23.314883][ T344] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 23.391453][ T290] EXT4-fs (loop0): unmounting filesystem. [ 23.539769][ T364] loop0: detected capacity change from 0 to 2048 [ 23.584146][ T364] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 23.618968][ T290] EXT4-fs (loop0): unmounting filesystem. [ 23.665402][ T350] loop1: detected capacity change from 0 to 40427 [ 23.684203][ T350] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 23.693365][ T350] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 23.736738][ T350] F2FS-fs (loop1): Found nat_bits in checkpoint [ 23.773163][ T297] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 23.775992][ T376] loop0: detected capacity change from 0 to 256 [ 23.794772][ T376] ======================================================= [ 23.794772][ T376] WARNING: The mand mount option has been deprecated and [ 23.794772][ T376] and is ignored by this kernel. Remove the mand [ 23.794772][ T376] option from the mount to silence this warning. [ 23.794772][ T376] ======================================================= [ 23.838890][ T350] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 23.846517][ T376] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 23.858506][ T350] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 23.969826][ T379] process 'syz.0.23' launched './file0' with NULL argv: empty string added [ 24.076212][ T385] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 24.126188][ T391] block device autoloading is deprecated and will be removed. [ 24.173095][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.199860][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.243241][ T297] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 24.263589][ T297] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 24.273187][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.281945][ T297] usb 5-1: config 0 descriptor?? [ 24.315852][ T402] SELinux: security_context_str_to_sid (ò‰b|€w±*a#UPÕ) failed with errno=-22 [ 24.363143][ T406] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.755381][ T297] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.764923][ T297] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.772245][ T297] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.780057][ T297] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.787872][ T297] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.795487][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.804504][ T297] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 24.820062][ T297] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 24.832379][ T327] Bluetooth: hci0: command 0x1003 tx timeout [ 24.838276][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 25.033022][ T425] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.204920][ T435] loop2: detected capacity change from 0 to 40427 [ 25.234081][ T435] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.294482][ T435] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.333117][ T24] usb 1-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 25.344867][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.352699][ T24] usb 1-1: Product: syz [ 25.367915][ T24] usb 1-1: Manufacturer: syz [ 25.372352][ T24] usb 1-1: SerialNumber: syz [ 25.378479][ T24] usb 1-1: config 0 descriptor?? [ 25.393085][ T425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.413100][ T425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.422678][ T425] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 25.432402][ T24] pl2303 1-1:0.0: required endpoints missing [ 25.453194][ T425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.472661][ T425] usb 2-1: config 0 descriptor?? [ 25.635287][ T24] usb 1-1: USB disconnect, device number 2 [ 25.662623][ T456] loop2: detected capacity change from 0 to 512 [ 25.694565][ T456] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 25.703982][ T456] ext4 filesystem being mounted at /13/bus supports timestamps until 2038 (0x7fffffff) [ 25.749104][ T293] EXT4-fs (loop2): unmounting filesystem. [ 25.964699][ T425] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 25.974014][ T425] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 25.981172][ T425] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 25.988844][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 25.988859][ T28] audit: type=1400 audit(1731320648.154:176): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.998289][ T425] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 26.024222][ T425] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 26.031140][ T425] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 26.034616][ T28] audit: type=1400 audit(1731320648.154:177): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.038127][ T425] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 26.068875][ T425] uclogic 0003:5543:0781.0002: No inputs registered, leaving [ 26.073049][ C0] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 26.086605][ T28] audit: type=1400 audit(1731320648.154:178): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.092726][ T425] uclogic 0003:5543:0781.0002: hidraw1: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 26.121818][ T294] EXT4-fs (loop3): unmounting filesystem. [ 26.213477][ T418] usb 2-1: USB disconnect, device number 2 [ 26.270192][ T297] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.433303][ T425] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.473126][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.523041][ T297] usb 3-1: Using ep0 maxpacket: 32 [ 26.643211][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 26.654248][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 26.665259][ T297] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 26.674211][ T425] usb 4-1: Using ep0 maxpacket: 32 [ 26.679302][ T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.688068][ T297] usb 3-1: config 0 descriptor?? [ 26.703131][ T464] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 26.713051][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 26.734100][ T297] hub 3-1:0.0: USB hub found [ 26.833114][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.844053][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.853748][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.864688][ T425] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 26.873949][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.883766][ T425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.892648][ T425] usb 4-1: config 0 descriptor?? [ 26.898789][ T479] loop1: detected capacity change from 0 to 2048 [ 26.914559][ T479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 26.927125][ T479] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.928611][ T28] audit: type=1400 audit(1731320649.094:179): avc: denied { map } for pid=478 comm="syz.1.63" path="/16/file2/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.943025][ T479] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 26.975957][ T6] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 26.983986][ T479] EXT4-fs (loop1): This should not happen!! Data will be lost [ 26.983986][ T479] [ 26.993503][ T479] EXT4-fs (loop1): Total free blocks count 0 [ 26.999261][ T479] EXT4-fs (loop1): Free/Dirty block details [ 27.005114][ T479] EXT4-fs (loop1): free_blocks=2415919104 [ 27.010664][ T479] EXT4-fs (loop1): dirty_blocks=16 [ 27.015704][ T479] EXT4-fs (loop1): Block reservation details [ 27.021427][ T479] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 27.027335][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 27.036251][ T24] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 27.044485][ T24] usb 1-1: Product: syz [ 27.048693][ T24] usb 1-1: Manufacturer: syz [ 27.048909][ T198] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 27.053931][ T24] usb 1-1: config 0 descriptor?? [ 27.073264][ T297] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 27.165578][ T28] audit: type=1400 audit(1731320649.334:180): avc: denied { remount } for pid=489 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 27.193218][ T297] usbhid 3-1:0.0: can't add hid device: -71 [ 27.199443][ T297] usbhid: probe of 3-1:0.0 failed with error -71 [ 27.243313][ T297] usb 3-1: USB disconnect, device number 2 [ 27.253232][ T6] usb 5-1: device firmware changed [ 27.258373][ T19] usb 5-1: USB disconnect, device number 2 [ 27.360043][ T501] loop1: detected capacity change from 0 to 128 [ 27.367543][ T501] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 27.377035][ T28] audit: type=1400 audit(1731320649.544:181): avc: denied { mount } for pid=500 comm="syz.1.71" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.402456][ T425] savu 0003:1E7D:2D5A.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 27.422828][ T501] syz.1.71: attempt to access beyond end of device [ 27.422828][ T501] loop1: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 27.435870][ T501] syz.1.71: attempt to access beyond end of device [ 27.435870][ T501] loop1: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 27.435883][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 27.465822][ T28] audit: type=1400 audit(1731320649.634:182): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.532138][ T28] audit: type=1400 audit(1731320649.694:183): avc: denied { mount } for pid=505 comm="syz.2.73" name="/" dev="configfs" ino=13719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 27.555364][ T28] audit: type=1400 audit(1731320649.694:184): avc: denied { read } for pid=505 comm="syz.2.73" name="/" dev="configfs" ino=13719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 27.578891][ T24] kovaplus 0003:1E7D:2D50.0004: item fetching failed at offset 5/7 [ 27.592995][ T28] audit: type=1400 audit(1731320649.694:185): avc: denied { open } for pid=505 comm="syz.2.73" path="/17/file0" dev="configfs" ino=13719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 27.615819][ T24] kovaplus 0003:1E7D:2D50.0004: parse failed [ 27.621657][ T24] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -22 [ 27.665878][ T514] syz.1.76[514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.665941][ T514] syz.1.76[514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.675315][ T6] usb 4-1: USB disconnect, device number 2 [ 27.700117][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.709137][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.717175][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 27.724523][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.731682][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.739107][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.746371][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.753632][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.760840][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.768197][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.775594][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.782901][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.789490][ T24] usb 1-1: USB disconnect, device number 3 [ 27.791121][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.803242][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.810486][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.817776][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.828651][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.835880][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.845425][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.852774][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.860022][ T19] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 27.869208][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.876510][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.884413][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.891573][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.899235][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 27.906750][ T19] usb 5-1: config 0 descriptor?? [ 27.912559][ T295] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 28.383605][ T19] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 28.393247][ T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0006/input/input4 [ 28.435964][ T528] device erspan1 entered promiscuous mode [ 28.477554][ T19] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 28.503163][ T295] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.589983][ T19] usb 5-1: USB disconnect, device number 3 [ 28.723030][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.743192][ T295] usb 4-1: Using ep0 maxpacket: 16 [ 28.863042][ T295] usb 4-1: config 0 has no interfaces? [ 28.952002][ T544] Zero length message leads to an empty skb [ 29.023182][ T295] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 29.032147][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.040248][ T295] usb 4-1: Product: syz [ 29.044389][ T295] usb 4-1: Manufacturer: syz [ 29.048799][ T295] usb 4-1: SerialNumber: syz [ 29.053976][ T295] r8152-cfgselector 4-1: config 0 descriptor?? [ 29.083102][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.094081][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.103737][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 29.112657][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.114779][ T550] loop4: detected capacity change from 0 to 128 [ 29.121937][ T6] usb 3-1: config 0 descriptor?? [ 29.263070][ T488] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.515100][ T297] usb 4-1: USB disconnect, device number 3 [ 29.591221][ T564] syz.4.99 (564) used greatest stack depth: 20176 bytes left [ 29.604631][ T6] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 29.611426][ T6] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 29.620498][ T6] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 29.627514][ T488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.638500][ T6] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 29.645761][ T488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.656376][ T6] lg-g15 0003:046D:C222.0007: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 29.667511][ T488] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 29.677615][ T488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.686079][ T488] usb 2-1: config 0 descriptor?? [ 29.807720][ T297] usb 3-1: USB disconnect, device number 3 [ 29.933040][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 29.963238][ T488] usb 2-1: string descriptor 0 read error: -71 [ 30.063044][ T488] usbhid 2-1:0.0: can't add hid device: -71 [ 30.068900][ T488] usbhid: probe of 2-1:0.0 failed with error -71 [ 30.076442][ T488] usb 2-1: USB disconnect, device number 3 [ 30.327522][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.721256][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.734571][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.745415][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.756167][ T24] usb 5-1: config 0 descriptor?? [ 31.798140][ T590] loop1: detected capacity change from 0 to 512 [ 31.835256][ T590] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 31.844142][ T590] ext4 filesystem being mounted at /37/bus supports timestamps until 2038 (0x7fffffff) [ 31.878309][ T292] EXT4-fs (loop1): unmounting filesystem. [ 32.008890][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 32.008905][ T28] audit: type=1400 audit(1731320654.174:199): avc: denied { create } for pid=605 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.040715][ T28] audit: type=1400 audit(1731320654.204:200): avc: denied { ioctl } for pid=605 comm="syz.2.116" path="socket:[17060]" dev="sockfs" ino=17060 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.065292][ T28] audit: type=1400 audit(1731320654.204:201): avc: denied { write } for pid=605 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.103057][ T488] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.183046][ T295] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.264082][ T24] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 32.271532][ T24] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 32.298663][ T24] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 32.324560][ T599] loop3: detected capacity change from 0 to 131072 [ 32.331412][ T599] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 32.339474][ T599] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 32.347531][ T425] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.355348][ T599] F2FS-fs (loop3): Found nat_bits in checkpoint [ 32.390543][ T599] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 32.397559][ T599] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 32.417567][ T28] audit: type=1400 audit(1731320654.584:202): avc: denied { link } for pid=598 comm="syz.3.114" name="file1" dev="loop3" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 32.440559][ T295] usb 2-1: Using ep0 maxpacket: 32 [ 32.473058][ T488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.489307][ T488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.499240][ T488] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 32.508524][ T488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.519832][ T488] usb 1-1: config 0 descriptor?? [ 32.553537][ T24] usb 5-1: USB disconnect, device number 4 [ 32.563209][ T295] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 32.571118][ T295] usb 2-1: config 0 has no interface number 0 [ 32.637957][ T28] audit: type=1400 audit(1731320654.804:203): avc: denied { create } for pid=617 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.657734][ T28] audit: type=1400 audit(1731320654.804:204): avc: denied { ioctl } for pid=617 comm="syz.3.120" path="socket:[17077]" dev="sockfs" ino=17077 ioctlcmd=0x48df scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.733144][ T295] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 32.733154][ T425] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.733177][ T295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.742364][ T425] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.752448][ T295] usb 2-1: Product: syz [ 32.772608][ T295] usb 2-1: Manufacturer: syz [ 32.777005][ T295] usb 2-1: SerialNumber: syz [ 32.783216][ T295] usb 2-1: config 0 descriptor?? [ 32.823968][ T295] smsc95xx v2.0.0 [ 32.843151][ T425] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 32.852095][ T425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.860012][ T425] usb 3-1: SerialNumber: syz [ 33.014274][ T488] wacom 0003:056A:00D0.0009: unknown main item tag 0x0 [ 33.021090][ T488] wacom 0003:056A:00D0.0009: unknown main item tag 0x0 [ 33.028342][ T488] wacom 0003:056A:00D0.0009: unknown main item tag 0x0 [ 33.035161][ T488] wacom 0003:056A:00D0.0009: unknown main item tag 0x0 [ 33.041793][ T488] wacom 0003:056A:00D0.0009: unknown main item tag 0x0 [ 33.048823][ T488] wacom 0003:056A:00D0.0009: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 33.059131][ T488] wacom 0003:056A:00D0.0009: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0 [ 33.070706][ T488] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.0009/input/input5 [ 33.107380][ T624] loop4: detected capacity change from 0 to 512 [ 33.124800][ T624] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.133811][ T624] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 33.133897][ T425] usb 3-1: 0:2 : does not exist [ 33.147175][ T28] audit: type=1400 audit(1731320655.314:205): avc: denied { read } for pid=623 comm="syz.4.122" path="/11/file0/file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.162754][ T425] usb 3-1: USB disconnect, device number 4 [ 33.190156][ T291] EXT4-fs (loop4): unmounting filesystem. [ 33.203835][ T28] audit: type=1400 audit(1731320655.374:206): avc: denied { create } for pid=627 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.227155][ T28] audit: type=1400 audit(1731320655.384:207): avc: denied { write } for pid=627 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.234470][ T24] usb 1-1: USB disconnect, device number 4 [ 33.252257][ T28] audit: type=1400 audit(1731320655.384:208): avc: denied { read } for pid=627 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.302204][ T634] loop4: detected capacity change from 0 to 256 [ 33.309043][ T634] exfat: Deprecated parameter 'namecase' [ 33.317826][ T634] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x533ce680, utbl_chksum : 0xe619d30d) [ 33.783142][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 33.857962][ T665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=665 comm=syz.0.139 [ 33.903197][ T295] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 33.914222][ T295] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 33.933105][ T425] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.943825][ T295] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 33.954586][ T295] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 33.962293][ T295] usb 2-1: USB disconnect, device number 4 [ 34.183035][ T425] usb 3-1: Using ep0 maxpacket: 16 [ 34.193212][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.204061][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.213669][ T24] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 34.222511][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.231064][ T24] usb 5-1: config 0 descriptor?? [ 34.416785][ T690] loop1: detected capacity change from 0 to 512 [ 34.424230][ T690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee11c, mo2=0002] [ 34.431987][ T690] System zones: 1-12 [ 34.436295][ T690] EXT4-fs (loop1): orphan cleanup on readonly fs [ 34.442475][ T690] EXT4-fs error (device loop1): __ext4_iget:5057: inode #11: block 393240: comm syz.1.151: invalid block [ 34.443111][ T295] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 34.454466][ T690] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.151: couldn't read orphan inode 11 (err -117) [ 34.472772][ T690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.483046][ T425] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 34.491978][ T425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.499897][ T425] usb 3-1: Product: syz [ 34.504094][ T425] usb 3-1: Manufacturer: syz [ 34.508569][ T425] usb 3-1: SerialNumber: syz [ 34.513695][ T425] usb 3-1: config 0 descriptor?? [ 34.523543][ T292] EXT4-fs (loop1): unmounting filesystem. [ 34.663092][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.663129][ T328] Bluetooth: hci0: command 0x1003 tx timeout [ 34.704125][ T709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.159'. [ 34.728133][ T24] hid-rmi 0003:06CB:81A7.000A: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 34.757060][ T6] usb 3-1: USB disconnect, device number 5 [ 34.823077][ T295] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.833580][ T295] usb 1-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.846434][ T295] usb 1-1: config 1 interface 0 has no altsetting 0 [ 34.926699][ T39] usb 5-1: USB disconnect, device number 5 [ 35.003121][ T488] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.010894][ T295] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 35.019886][ T295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.027697][ T295] usb 1-1: Product: syz [ 35.031628][ T295] usb 1-1: Manufacturer: syz [ 35.036150][ T295] usb 1-1: SerialNumber: syz [ 35.053156][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.253095][ T488] usb 2-1: Using ep0 maxpacket: 32 [ 35.323137][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 35.373145][ T488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.383976][ T488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.393569][ T488] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 35.402480][ T488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.411235][ T488] usb 2-1: config 0 descriptor?? [ 35.452320][ T723] loop4: detected capacity change from 0 to 256 [ 35.453686][ T488] hub 2-1:0.0: USB hub found [ 35.463082][ T24] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 35.466195][ T723] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 35.477474][ T24] usb 4-1: config 0 has no interface number 0 [ 35.494910][ T24] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 173 [ 35.538187][ T425] usb 1-1: USB disconnect, device number 5 [ 35.553062][ T39] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.633122][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 35.642019][ T24] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 35.649925][ T24] usb 4-1: Product: syz [ 35.653929][ T24] usb 4-1: SerialNumber: syz [ 35.658876][ T24] usb 4-1: config 0 descriptor?? [ 35.663079][ T488] hub 2-1:0.0: 1 port detected [ 35.683100][ T715] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 35.843149][ T39] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 35.945118][ T24] usb 4-1: invalid MIDI in EP 0 [ 35.952335][ T24] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 35.965196][ T502] udevd[502]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.096725][ T732] incfs: iterate_incfs_dir / -22 [ 36.148223][ T488] usb 4-1: USB disconnect, device number 4 [ 36.313092][ T295] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 36.533128][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 36.542048][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.633151][ T295] usb 2-1: USB disconnect, device number 5 [ 36.643040][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 36.787999][ T758] syz.3.181 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.893047][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 36.896839][ T774] capability: warning: `syz.3.189' uses 32-bit capabilities (legacy support in use) [ 37.006601][ T792] loop3: detected capacity change from 0 to 1024 [ 37.014039][ T792] EXT4-fs: Ignoring removed orlov option [ 37.020157][ T792] EXT4-fs (loop3): Test dummy encryption mode enabled [ 37.033187][ T39] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 37.038191][ T792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.041280][ T39] usb 3-1: No valid video chain found. [ 37.058906][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 37.058921][ T28] audit: type=1400 audit(1731320659.070:240): avc: denied { create } for pid=791 comm="syz.3.197" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.073408][ T792] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 37.091709][ T28] audit: type=1400 audit(1731320659.100:241): avc: denied { write } for pid=799 comm="syz.0.199" name="packet" dev="proc" ino=4026532353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 37.116517][ T294] EXT4-fs (loop3): unmounting filesystem. [ 37.133686][ T803] netlink: 'syz.0.201': attribute type 10 has an invalid length. [ 37.165197][ T28] audit: type=1400 audit(1731320659.180:242): avc: denied { write } for pid=804 comm="syz.3.200" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.185117][ T809] SELinux: failed to load policy [ 37.203067][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 37.212118][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.223004][ T24] usb 5-1: Product: syz [ 37.227045][ T24] usb 5-1: Manufacturer: syz [ 37.231481][ T24] usb 5-1: SerialNumber: syz [ 37.236000][ T28] audit: type=1400 audit(1731320659.240:243): avc: denied { ioctl } for pid=812 comm="syz.3.204" path="socket:[18701]" dev="sockfs" ino=18701 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.262063][ T24] r8152-cfgselector 5-1: config 0 descriptor?? [ 37.275379][ T39] usb 3-1: USB disconnect, device number 6 [ 37.286705][ T28] audit: type=1400 audit(1731320659.300:244): avc: denied { bind } for pid=814 comm="syz.0.206" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.305431][ T817] loop3: detected capacity change from 0 to 256 [ 37.310554][ T28] audit: type=1400 audit(1731320659.300:245): avc: denied { node_bind } for pid=814 comm="syz.0.206" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 37.357312][ T28] audit: type=1400 audit(1731320659.370:246): avc: denied { create } for pid=823 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.364485][ T817] FAT-fs (loop3): Directory bread(block 64) failed [ 37.382832][ T817] FAT-fs (loop3): Directory bread(block 65) failed [ 37.390555][ T817] FAT-fs (loop3): Directory bread(block 66) failed [ 37.401712][ T817] FAT-fs (loop3): Directory bread(block 67) failed [ 37.410875][ T817] FAT-fs (loop3): Directory bread(block 68) failed [ 37.418304][ T817] FAT-fs (loop3): Directory bread(block 69) failed [ 37.427132][ T817] FAT-fs (loop3): Directory bread(block 70) failed [ 37.433708][ T817] FAT-fs (loop3): Directory bread(block 71) failed [ 37.442357][ T817] FAT-fs (loop3): Directory bread(block 72) failed [ 37.448977][ T817] FAT-fs (loop3): Directory bread(block 73) failed [ 37.575703][ T847] loop3: detected capacity change from 0 to 4096 [ 37.582154][ T847] EXT4-fs: Ignoring removed nobh option [ 37.589076][ T847] EXT4-fs: Ignoring removed i_version option [ 37.597426][ T847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.619335][ T294] EXT4-fs (loop3): unmounting filesystem. [ 37.733105][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 37.739240][ T24] r8152-cfgselector 5-1: bad CDC descriptors [ 37.763242][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 37.771329][ T24] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 37.783507][ T39] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.803302][ T855] incfs: Options parsing error. -22 [ 37.808355][ T855] incfs: mount failed -22 [ 37.813149][ T425] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.923078][ T297] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.933413][ T28] audit: type=1400 audit(1731320659.950:247): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.955706][ T28] audit: type=1400 audit(1731320659.950:248): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.977665][ T28] audit: type=1400 audit(1731320659.950:249): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.033060][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 38.123114][ T418] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.173065][ T297] usb 4-1: Using ep0 maxpacket: 8 [ 38.193160][ T425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.203964][ T425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.213734][ T425] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.226483][ T425] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.235308][ T425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.244910][ T425] usb 2-1: config 0 descriptor?? [ 38.293974][ T297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.305018][ T297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.314900][ T297] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 38.323787][ T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.332170][ T297] usb 4-1: config 0 descriptor?? [ 38.337098][ T39] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 38.346049][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.353811][ T39] usb 1-1: Product: syz [ 38.357748][ T39] usb 1-1: Manufacturer: syz [ 38.362174][ T39] usb 1-1: SerialNumber: syz [ 38.367405][ T39] usb 1-1: config 0 descriptor?? [ 38.403962][ T39] usb_ehset_test: probe of 1-1:0.0 failed with error -32 [ 38.503141][ T418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.513923][ T418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.523441][ T418] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 38.532258][ T418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.533026][ T295] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 38.541502][ T418] usb 3-1: config 0 descriptor?? [ 38.604261][ T39] usb 1-1: USB disconnect, device number 6 [ 38.713970][ T425] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 38.721396][ T425] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 38.730453][ T425] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 38.783043][ T295] usb 5-1: Using ep0 maxpacket: 8 [ 38.804362][ T297] logitech 0003:046D:C24F.000C: unknown main item tag 0x3 [ 38.811551][ T297] logitech 0003:046D:C24F.000C: item fetching failed at offset 3/5 [ 38.819474][ T297] logitech 0003:046D:C24F.000C: parse failed [ 38.825429][ T297] logitech: probe of 0003:046D:C24F.000C failed with error -22 [ 38.903114][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.913916][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.923622][ T295] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 38.932663][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.941525][ T295] usb 5-1: config 0 descriptor?? [ 38.993847][ T6] usb 2-1: USB disconnect, device number 6 [ 39.007386][ T297] usb 4-1: USB disconnect, device number 5 [ 39.015497][ T418] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 39.160213][ T869] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 39.213151][ T877] hub 6-0:1.0: USB hub found [ 39.216295][ T6] usb 3-1: USB disconnect, device number 7 [ 39.217848][ T877] hub 6-0:1.0: 1 port detected [ 39.423985][ T295] kone 0003:1E7D:2CED.000E: collection stack underflow [ 39.430800][ T295] kone 0003:1E7D:2CED.000E: item 0 4 0 12 parsing failed [ 39.438149][ T295] kone 0003:1E7D:2CED.000E: parse failed [ 39.443784][ T295] kone: probe of 0003:1E7D:2CED.000E failed with error -22 [ 39.630838][ T297] usb 5-1: USB disconnect, device number 7 [ 39.773349][ T917] loop3: detected capacity change from 0 to 128 [ 39.781980][ T917] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.790550][ T917] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038 (0x7fffffff) [ 39.808940][ T294] EXT4-fs (loop3): unmounting filesystem. [ 39.823722][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.033022][ T418] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.433073][ T418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.443884][ T425] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.451343][ T418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.453047][ T6] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 40.461193][ T418] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 40.477083][ T418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.496353][ T418] usb 3-1: config 0 descriptor?? [ 40.525692][ T944] loop1: detected capacity change from 0 to 128 [ 40.532462][ T944] EXT4-fs (loop1): Test dummy encryption mode enabled [ 40.540867][ T944] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 40.551342][ T944] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038 (0x7fffffff) [ 40.574625][ T292] EXT4-fs (loop1): unmounting filesystem. [ 40.654226][ T953] loop1: detected capacity change from 0 to 128 [ 40.661473][ T953] EXT4-fs (loop1): Test dummy encryption mode enabled [ 40.669583][ T953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 40.678171][ T953] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038 (0x7fffffff) [ 40.690296][ T953] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 40.704394][ T292] EXT4-fs (loop1): unmounting filesystem. [ 40.731902][ T959] syz.1.269[959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.731960][ T959] syz.1.269[959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.746178][ T959] hub 9-0:1.0: USB hub found [ 40.761635][ T959] hub 9-0:1.0: 1 port detected [ 40.823115][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.833976][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.843620][ T6] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 40.852641][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.853080][ T425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.861922][ T6] usb 5-1: config 0 descriptor?? [ 40.874857][ T425] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.888845][ T425] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.897803][ T425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.910810][ T425] usb 1-1: config 0 descriptor?? [ 41.034392][ T418] logitech-djreceiver 0003:046D:C71B.000F: unknown main item tag 0x0 [ 41.238475][ T418] usb 3-1: USB disconnect, device number 8 [ 41.353313][ T6] hid (null): report_id 0 is invalid [ 41.359427][ T6] hid-generic 0003:1B1C:1C03.0010: report_id 0 is invalid [ 41.366432][ T6] hid-generic 0003:1B1C:1C03.0010: item 0 0 1 8 parsing failed [ 41.374018][ T6] hid-generic: probe of 0003:1B1C:1C03.0010 failed with error -22 [ 41.394015][ T425] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 41.401615][ T425] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 41.411549][ T425] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 41.561489][ T6] usb 5-1: USB disconnect, device number 8 [ 41.673371][ T418] usb 1-1: USB disconnect, device number 7 [ 41.783655][ T984] loop2: detected capacity change from 0 to 512 [ 41.794605][ T984] EXT4-fs (loop2): 1 truncate cleaned up [ 41.800085][ T984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 41.817383][ T293] EXT4-fs (loop2): unmounting filesystem. [ 41.863017][ T327] Bluetooth: hci0: command 0x1003 tx timeout [ 41.868920][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.097101][ T1025] loop4: detected capacity change from 0 to 512 [ 42.112607][ T1029] loop2: detected capacity change from 0 to 256 [ 42.121922][ T1025] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.136013][ T1031] SELinux: policydb version -795592283 does not match my version range 15-33 [ 42.145412][ T1031] SELinux: failed to load policy [ 42.145656][ T1025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 42.159721][ T1029] FAT-fs (loop2): Directory bread(block 64) failed [ 42.172363][ T1025] System zones: 1-12 [ 42.176244][ T1029] FAT-fs (loop2): Directory bread(block 65) failed [ 42.190649][ T1025] EXT4-fs (loop4): 1 truncate cleaned up [ 42.196461][ T1029] FAT-fs (loop2): Directory bread(block 66) failed [ 42.203065][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 42.203079][ T28] audit: type=1326 audit(1731320664.210:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1019 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f227d77e719 code=0x7ffc0000 [ 42.208700][ T1029] FAT-fs (loop2): Directory bread(block 67) failed [ 42.209764][ T28] audit: type=1326 audit(1731320664.220:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f227d71a099 code=0x7ffc0000 [ 42.247218][ T1025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.287559][ T28] audit: type=1326 audit(1731320664.220:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227d77e719 code=0x7ffc0000 [ 42.299483][ T1029] FAT-fs (loop2): Directory bread(block 68) failed [ 42.310808][ T28] audit: type=1326 audit(1731320664.220:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227d77e719 code=0x7ffc0000 [ 42.341400][ T28] audit: type=1400 audit(1731320664.250:282): avc: denied { name_bind } for pid=1035 comm="syz.0.302" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.341433][ T28] audit: type=1400 audit(1731320664.250:283): avc: denied { node_bind } for pid=1035 comm="syz.0.302" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 42.341504][ T1029] FAT-fs (loop2): Directory bread(block 69) failed [ 42.341559][ T1029] FAT-fs (loop2): Directory bread(block 70) failed [ 42.341581][ T1029] FAT-fs (loop2): Directory bread(block 71) failed [ 42.341619][ T1029] FAT-fs (loop2): Directory bread(block 72) failed [ 42.341640][ T1029] FAT-fs (loop2): Directory bread(block 73) failed [ 42.387049][ T28] audit: type=1400 audit(1731320664.400:284): avc: denied { map } for pid=1024 comm="syz.4.297" path="/28/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.395003][ T291] EXT4-fs (loop4): unmounting filesystem. [ 42.502035][ T28] audit: type=1400 audit(1731320664.510:285): avc: denied { bind } for pid=1047 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.538463][ T28] audit: type=1400 audit(1731320664.510:286): avc: denied { listen } for pid=1047 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.561676][ T28] audit: type=1400 audit(1731320664.510:287): avc: denied { accept } for pid=1047 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.646343][ T1034] loop3: detected capacity change from 0 to 40427 [ 42.689201][ T1068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 42.701829][ T1034] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.745933][ T1076] loop4: detected capacity change from 0 to 1024 [ 42.794426][ T1076] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.804147][ T1034] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 42.843572][ T291] EXT4-fs (loop4): unmounting filesystem. [ 42.923016][ T39] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 43.114633][ T1119] loop4: detected capacity change from 0 to 1024 [ 43.127592][ T1119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.143333][ T1119] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.178159][ T1119] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 43.180517][ T1122] loop3: detected capacity change from 0 to 256 [ 43.192284][ T1119] System zones: 0-1, 3-36 [ 43.201302][ T1122] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 43.203459][ T1119] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.252749][ T1122] exFAT-fs (loop3): hint_cluster is invalid (17) [ 43.262032][ T1119] capability: warning: `syz.4.334' uses deprecated v2 capabilities in a way that may be insecure [ 43.273268][ T1122] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 43.281074][ T1122] exFAT-fs (loop3): Filesystem has been set read-only [ 43.287979][ T19] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 43.304254][ T1122] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 43.319424][ T291] EXT4-fs (loop4): unmounting filesystem. [ 43.333059][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.352630][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.389786][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.399187][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.418032][ T39] usb 3-1: config 0 descriptor?? [ 43.505748][ T1137] loop4: detected capacity change from 0 to 128 [ 43.515822][ T1137] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 43.533009][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 43.540251][ T1137] syz.4.342: attempt to access beyond end of device [ 43.540251][ T1137] loop4: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 43.553382][ T1137] syz.4.342: attempt to access beyond end of device [ 43.553382][ T1137] loop4: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 43.603925][ T1139] input: syz0 as /devices/virtual/input/input8 [ 43.609980][ T1139] input: failed to attach handler leds to device input8, error: -6 [ 43.653140][ T19] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 43.661383][ T19] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 43.671481][ T19] usb 2-1: config 135 has no interface number 0 [ 43.677628][ T19] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 43.733115][ T425] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.843119][ T19] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 43.852234][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.860091][ T19] usb 2-1: Product: syz [ 43.864130][ T19] usb 2-1: Manufacturer: syz [ 43.868448][ T19] usb 2-1: SerialNumber: syz [ 43.903079][ T295] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.904248][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 43.914100][ T19] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 43.918472][ T39] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 43.924021][ T19] usb 2-1: No valid video chain found. [ 43.937777][ T39] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 44.027694][ T1164] loop4: detected capacity change from 0 to 512 [ 44.044888][ T1164] EXT4-fs error (device loop4): ext4_acquire_dquot:6787: comm syz.4.353: Failed to acquire dquot type 0 [ 44.056319][ T1164] EXT4-fs (loop4): Remounting filesystem read-only [ 44.062891][ T1164] EXT4-fs (loop4): 1 orphan inode deleted [ 44.068806][ T1164] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.077787][ T1164] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038 (0x7fffffff) [ 44.088633][ T1164] EXT4-fs error (device loop4): ext4_acquire_dquot:6787: comm syz.4.353: Failed to acquire dquot type 0 [ 44.100014][ T1164] EXT4-fs (loop4): Remounting filesystem read-only [ 44.106647][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.117447][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.127092][ T425] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.137150][ T19] usb 2-1: USB disconnect, device number 7 [ 44.140016][ T425] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 44.154280][ T425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.154743][ T291] EXT4-fs (loop4): unmounting filesystem. [ 44.163079][ T425] usb 4-1: config 0 descriptor?? [ 44.203652][ T6] usb 3-1: USB disconnect, device number 9 [ 44.245147][ T1174] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 44.263167][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.274147][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.283923][ T295] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 44.292816][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.305193][ T295] usb 1-1: config 0 descriptor?? [ 44.310336][ T488] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 44.353275][ T19] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 44.407051][ T1176] loop4: detected capacity change from 0 to 40427 [ 44.414847][ T1176] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 44.421710][ T1176] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 44.429773][ T1176] F2FS-fs (loop4): fault_injection options not supported [ 44.437599][ T1176] F2FS-fs (loop4): invalid crc value [ 44.444201][ T1176] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.479056][ T1176] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 44.486012][ T1176] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.504823][ T1176] syz.4.358: attempt to access beyond end of device [ 44.504823][ T1176] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 44.645773][ T425] prodikeys 0003:041E:2801.0013: unexpected long global item [ 44.653432][ T1185] loop4: detected capacity change from 0 to 128 [ 44.654781][ T425] prodikeys 0003:041E:2801.0013: hid parse failed [ 44.666065][ T425] prodikeys: probe of 0003:041E:2801.0013 failed with error -22 [ 44.669780][ T1185] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 44.682125][ T1185] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038 (0x7fffffff) [ 44.697901][ T1185] fscrypt (loop4, inode 12): Unsupported encryption flags (0x08) [ 44.711502][ T291] EXT4-fs (loop4): unmounting filesystem. [ 44.784949][ T295] hid-steam 0003:28DE:1142.0014: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 44.863507][ T425] usb 4-1: USB disconnect, device number 6 [ 44.986558][ T6] usb 1-1: USB disconnect, device number 8 [ 45.203066][ T295] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 45.404483][ T1211] loop3: detected capacity change from 0 to 512 [ 45.415501][ T1211] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.424355][ T1211] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038 (0x7fffffff) [ 45.441716][ T294] EXT4-fs (loop3): unmounting filesystem. [ 45.443017][ T295] usb 3-1: Using ep0 maxpacket: 16 [ 45.460667][ T1216] loop3: detected capacity change from 0 to 128 [ 45.467352][ T1216] FAT-fs (loop3): Unrecognized mount option "/dev/ppp" or missing value [ 45.542472][ T1224] loop3: detected capacity change from 0 to 512 [ 45.555585][ T1224] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.565343][ T295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.578948][ T1226] SELinux: truncated policydb string identifier [ 45.586062][ T1226] SELinux: failed to load policy [ 45.592052][ T1224] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.606249][ T1224] EXT4-fs (loop3): 1 truncate cleaned up [ 45.611759][ T1224] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.645499][ T294] EXT4-fs (loop3): unmounting filesystem. [ 45.753066][ T295] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 45.766119][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.787466][ T295] usb 3-1: Product: syz [ 45.791556][ T295] usb 3-1: Manufacturer: syz [ 45.796316][ T295] usb 3-1: SerialNumber: syz [ 45.803386][ T295] usb 3-1: config 0 descriptor?? [ 45.929294][ T1277] netlink: 116 bytes leftover after parsing attributes in process `syz.3.399'. [ 45.944382][ T333] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.983215][ T1283] loop3: detected capacity change from 0 to 256 [ 46.000595][ T1283] FAT-fs (loop3): Directory bread(block 64) failed [ 46.007627][ T1283] FAT-fs (loop3): Directory bread(block 65) failed [ 46.014145][ T1283] FAT-fs (loop3): Directory bread(block 66) failed [ 46.020612][ T1283] FAT-fs (loop3): Directory bread(block 67) failed [ 46.023014][ T6] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 46.027156][ T1283] FAT-fs (loop3): Directory bread(block 68) failed [ 46.040681][ T1283] FAT-fs (loop3): Directory bread(block 69) failed [ 46.047162][ T1283] FAT-fs (loop3): Directory bread(block 70) failed [ 46.053733][ T1283] FAT-fs (loop3): Directory bread(block 71) failed [ 46.060094][ T1283] FAT-fs (loop3): Directory bread(block 72) failed [ 46.066810][ T1283] FAT-fs (loop3): Directory bread(block 73) failed [ 46.119969][ T333] kworker/u4:5: attempt to access beyond end of device [ 46.119969][ T333] loop3: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 46.135414][ T1271] loop1: detected capacity change from 0 to 40427 [ 46.164325][ T1271] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.184127][ T1292] loop3: detected capacity change from 0 to 512 [ 46.204749][ T1292] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.213679][ T1292] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038 (0x7fffffff) [ 46.221793][ T1271] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 46.249629][ T294] EXT4-fs (loop3): unmounting filesystem. [ 46.283016][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 46.316045][ T1303] loop3: detected capacity change from 0 to 512 [ 46.334745][ T1303] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.343916][ T1303] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038 (0x7fffffff) [ 46.354726][ T1303] EXT4-fs error (device loop3): ext4_acquire_dquot:6787: comm syz.3.409: Failed to acquire dquot type 0 [ 46.372459][ T294] EXT4-fs (loop3): unmounting filesystem. [ 46.383098][ T295] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 46.389347][ T295] usb 3-1: No valid video chain found. [ 46.403154][ T6] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.416851][ T295] usb 3-1: USB disconnect, device number 10 [ 46.423935][ T6] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.448762][ T1317] loop1: detected capacity change from 0 to 256 [ 46.458196][ T1317] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 46.509696][ T1324] loop3: detected capacity change from 0 to 1024 [ 46.516261][ T1324] EXT4-fs: Ignoring removed bh option [ 46.524945][ T1324] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 46.532883][ T1324] System zones: 0-1, 3-12 [ 46.537754][ T1324] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.553090][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 46.561994][ T6] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 46.563138][ T294] EXT4-fs (loop3): unmounting filesystem. [ 46.570176][ T6] usb 1-1: Product: syz [ 46.579720][ T6] usb 1-1: Manufacturer: syz [ 46.623786][ T6] hub 1-1:4.0: USB hub found [ 46.873740][ T488] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 46.883067][ T6] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 47.143039][ T425] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 47.203157][ T6] usb 1-1: USB disconnect, device number 9 [ 47.233265][ T488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.244344][ T488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.253945][ T488] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 47.262753][ T488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.271946][ T488] usb 4-1: config 0 descriptor?? [ 47.563076][ T425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.574216][ T425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.583820][ T425] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 47.592836][ T425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.600183][ T1343] binder: 1342:1343 ioctl c0306201 20000680 returned -14 [ 47.601647][ T425] usb 3-1: config 0 descriptor?? [ 47.774489][ T488] logitech-djreceiver 0003:046D:C70E.0015: unbalanced collection at end of report description [ 47.785296][ T488] logitech-djreceiver 0003:046D:C70E.0015: logi_dj_probe: parse failed [ 47.793677][ T488] logitech-djreceiver: probe of 0003:046D:C70E.0015 failed with error -22 [ 47.831201][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 47.831218][ T28] audit: type=1400 audit(1731320669.840:373): avc: denied { getopt } for pid=1363 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.993693][ T488] usb 4-1: USB disconnect, device number 7 [ 48.023328][ T328] Bluetooth: hci0: command 0x1003 tx timeout [ 48.033380][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.074079][ T1378] syz.4.450[1378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.074153][ T1378] syz.4.450[1378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.086914][ T425] wacom 0003:056A:00D0.0016: unknown main item tag 0x0 [ 48.105430][ T425] wacom 0003:056A:00D0.0016: unknown main item tag 0x0 [ 48.112273][ T425] wacom 0003:056A:00D0.0016: unknown main item tag 0x0 [ 48.119238][ T425] wacom 0003:056A:00D0.0016: unknown main item tag 0x0 [ 48.126125][ T425] wacom 0003:056A:00D0.0016: unknown main item tag 0x0 [ 48.133294][ T425] wacom 0003:056A:00D0.0016: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 48.135676][ T28] audit: type=1400 audit(1731320670.150:374): avc: denied { read } for pid=1379 comm="syz.4.451" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 48.143203][ T297] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 48.173901][ T39] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 48.181236][ T28] audit: type=1400 audit(1731320670.180:375): avc: denied { open } for pid=1379 comm="syz.4.451" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 48.181271][ T28] audit: type=1400 audit(1731320670.180:376): avc: denied { ioctl } for pid=1379 comm="syz.4.451" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 48.231926][ T425] wacom 0003:056A:00D0.0016: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.2-1/input0 [ 48.243500][ T425] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D0.0016/input/input9 [ 48.256076][ T28] audit: type=1400 audit(1731320670.270:377): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=719 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.278309][ T28] audit: type=1400 audit(1731320670.270:378): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=719 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.323396][ T28] audit: type=1400 audit(1731320670.340:379): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=719 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.352574][ T425] usb 3-1: USB disconnect, device number 11 [ 48.503033][ T297] usb 1-1: Using ep0 maxpacket: 16 [ 48.513021][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 48.529198][ T1385] loop3: detected capacity change from 0 to 512 [ 48.544948][ T1385] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 48.555477][ T1385] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 48.565979][ T1385] EXT4-fs error (device loop3): ext4_acquire_dquot:6787: comm syz.3.440: Failed to acquire dquot type 0 [ 48.577182][ T1385] EXT4-fs (loop3): Remounting filesystem read-only [ 48.583686][ T1385] EXT4-fs (loop3): 1 orphan inode deleted [ 48.589330][ T1385] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 48.598365][ T1385] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038 (0x7fffffff) [ 48.612385][ T28] audit: type=1400 audit(1731320670.620:380): avc: denied { create } for pid=1384 comm="syz.3.440" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.615595][ T1385] EXT4-fs error (device loop3): ext4_acquire_dquot:6787: comm syz.3.440: Failed to acquire dquot type 0 [ 48.643339][ T297] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.643540][ T1385] EXT4-fs (loop3): Remounting filesystem read-only [ 48.678134][ T294] EXT4-fs (loop3): unmounting filesystem. [ 48.843204][ T39] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 48.848955][ T1412] loop2: detected capacity change from 0 to 256 [ 48.852102][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.866266][ T297] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 48.871361][ T1412] FAT-fs (loop2): Directory bread(block 64) failed [ 48.878745][ T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.882393][ T1412] FAT-fs (loop2): Directory bread(block 65) failed [ 48.890362][ T297] usb 1-1: Product: syz [ 48.897118][ T1412] FAT-fs (loop2): Directory bread(block 66) failed [ 48.900486][ T39] usb 2-1: Product: syz [ 48.907207][ T1412] FAT-fs (loop2): Directory bread(block 67) failed [ 48.912180][ T297] usb 1-1: Manufacturer: syz [ 48.917412][ T1412] FAT-fs (loop2): Directory bread(block 68) failed [ 48.921890][ T39] usb 2-1: Manufacturer: syz [ 48.928488][ T1412] FAT-fs (loop2): Directory bread(block 69) failed [ 48.932478][ T297] usb 1-1: SerialNumber: syz [ 48.939207][ T1412] FAT-fs (loop2): Directory bread(block 70) failed [ 48.943294][ T39] usb 2-1: SerialNumber: syz [ 48.950084][ T1412] FAT-fs (loop2): Directory bread(block 71) failed [ 48.959277][ T297] usb 1-1: config 0 descriptor?? [ 48.960522][ T1412] FAT-fs (loop2): Directory bread(block 72) failed [ 48.969563][ T39] r8152-cfgselector 2-1: config 0 descriptor?? [ 48.971638][ T1412] FAT-fs (loop2): Directory bread(block 73) failed [ 49.013002][ T488] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 49.086264][ T1417] loop2: detected capacity change from 0 to 512 [ 49.104963][ T1417] EXT4-fs error (device loop2): ext4_acquire_dquot:6787: comm syz.2.457: Failed to acquire dquot type 0 [ 49.116239][ T1417] EXT4-fs (loop2): Remounting filesystem read-only [ 49.122633][ T1417] EXT4-fs (loop2): 1 orphan inode deleted [ 49.128454][ T1417] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.137313][ T1417] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038 (0x7fffffff) [ 49.149621][ T1417] EXT4-fs error (device loop2): ext4_acquire_dquot:6787: comm syz.2.457: Failed to acquire dquot type 0 [ 49.161000][ T1417] EXT4-fs (loop2): Remounting filesystem read-only [ 49.173119][ T293] EXT4-fs (loop2): unmounting filesystem. [ 49.263060][ T488] usb 5-1: Using ep0 maxpacket: 32 [ 49.303190][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 49.383183][ T488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.393960][ T488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.403496][ T488] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 49.412280][ T488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.421078][ T488] usb 5-1: config 0 descriptor?? [ 49.463730][ T488] hub 5-1:0.0: USB hub found [ 49.474421][ T39] r8152-cfgselector 2-1: Unknown version 0x0000 [ 49.480583][ T39] r8152-cfgselector 2-1: bad CDC descriptors [ 49.513162][ T39] r8152-cfgselector 2-1: Unknown version 0x0000 [ 49.521024][ T39] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 49.533071][ T297] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 49.539272][ T297] usb 1-1: No valid video chain found. [ 49.546331][ T297] usb 1-1: USB disconnect, device number 10 [ 49.683062][ T488] hub 5-1:0.0: 1 port detected [ 49.884384][ T1440] tmpfs: Unknown parameter 'us' [ 49.910515][ T1442] loop2: detected capacity change from 0 to 256 [ 49.924379][ T1442] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 49.988357][ T1447] loop1: detected capacity change from 0 to 512 [ 49.997430][ T1447] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.009744][ T1447] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 50.085416][ T1447] netlink: 140 bytes leftover after parsing attributes in process `syz.1.469'. [ 50.094463][ T1447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 50.146545][ T1464] loop1: detected capacity change from 0 to 512 [ 50.159203][ T1464] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.176443][ T1464] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.476: invalid indirect mapped block 4294967295 (level 1) [ 50.190552][ T1464] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.476: invalid indirect mapped block 4294967295 (level 1) [ 50.205465][ T1464] EXT4-fs (loop1): 2 truncates cleaned up [ 50.211052][ T1464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 50.230417][ T1464] EXT4-fs (loop1): shut down requested (2) [ 50.236333][ T1464] EXT4-fs warning (device loop1): empty_inline_dir:1869: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 50.262670][ T292] EXT4-fs (loop1): unmounting filesystem. [ 50.293049][ T6] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 50.333151][ T488] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 50.423052][ T425] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 50.533040][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 50.613110][ T295] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 50.653152][ T39] usb 5-1: USB disconnect, device number 9 [ 50.653480][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 50.669667][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 50.683025][ T425] usb 1-1: Using ep0 maxpacket: 8 [ 50.833168][ T6] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 50.842111][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.850138][ T6] usb 4-1: Product: syz [ 50.854339][ T6] usb 4-1: Manufacturer: syz [ 50.858755][ T6] usb 4-1: SerialNumber: syz [ 50.863131][ T425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.863454][ T295] usb 3-1: Using ep0 maxpacket: 16 [ 50.874140][ T425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.879768][ T6] usb 4-1: config 0 descriptor?? [ 50.893323][ T425] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 50.902287][ T425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.911071][ T425] usb 1-1: config 0 descriptor?? [ 50.933715][ T6] hub 4-1:0.0: bad descriptor, ignoring hub [ 50.939483][ T6] hub: probe of 4-1:0.0 failed with error -5 [ 50.948462][ T6] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 50.979832][ T502] udevd[502]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.163236][ T295] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 51.172405][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.185706][ T295] usb 3-1: Product: syz [ 51.189709][ T295] usb 3-1: Manufacturer: syz [ 51.194328][ T295] usb 3-1: SerialNumber: syz [ 51.199627][ T295] r8152-cfgselector 3-1: config 0 descriptor?? [ 51.263131][ T6] usb 4-1: USB disconnect, device number 8 [ 51.338239][ T1499] loop1: detected capacity change from 0 to 512 [ 51.354535][ T1499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 51.363339][ T1499] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038 (0x7fffffff) [ 51.381513][ T292] EXT4-fs (loop1): unmounting filesystem. [ 51.393962][ T425] logitech 0003:046D:C24F.0017: unknown main item tag 0x3 [ 51.401797][ T425] logitech 0003:046D:C24F.0017: item fetching failed at offset 3/5 [ 51.409700][ T39] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 51.417551][ T425] logitech 0003:046D:C24F.0017: parse failed [ 51.424087][ T425] logitech: probe of 0003:046D:C24F.0017 failed with error -22 [ 51.611581][ T418] usb 1-1: USB disconnect, device number 11 [ 51.683085][ T295] r8152-cfgselector 3-1: Unknown version 0x0000 [ 51.689240][ T295] r8152-cfgselector 3-1: bad CDC descriptors [ 51.713821][ T295] r8152-cfgselector 3-1: Unknown version 0x0000 [ 51.720783][ T295] r8152-cfgselector 3-1: USB disconnect, device number 12 [ 51.803120][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.813895][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.823398][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.836701][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.845612][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.854733][ T39] usb 5-1: config 0 descriptor?? [ 51.893157][ T488] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 52.133057][ T488] usb 2-1: Using ep0 maxpacket: 32 [ 52.231502][ T1523] loop2: detected capacity change from 0 to 128 [ 52.253342][ T488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.268581][ T1523] EXT4-fs (loop2): Test dummy encryption mode enabled [ 52.271671][ T488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.286935][ T488] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 52.290152][ T1523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.296260][ T488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.313119][ T488] usb 2-1: config 0 descriptor?? [ 52.318509][ T1523] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038 (0x7fffffff) [ 52.334144][ T39] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 52.345291][ T39] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 52.368298][ T293] EXT4-fs (loop2): unmounting filesystem. [ 52.386860][ T39] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 52.613840][ T6] usb 5-1: USB disconnect, device number 10 [ 52.683010][ T39] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 52.693020][ T19] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 52.795132][ T488] savu 0003:1E7D:2D5A.0019: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 52.813026][ T425] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 52.933118][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 53.053138][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.063963][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.064126][ T297] usb 2-1: USB disconnect, device number 9 [ 53.073672][ T19] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 53.073779][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.096801][ T19] usb 4-1: config 0 descriptor?? [ 53.173156][ T425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.184344][ T425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.194350][ T425] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 53.203611][ T425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.212251][ T425] usb 1-1: config 0 descriptor?? [ 53.223098][ T39] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 53.232381][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.240536][ T39] usb 3-1: Product: syz [ 53.244839][ T39] usb 3-1: Manufacturer: syz [ 53.249266][ T39] usb 3-1: SerialNumber: syz [ 53.255585][ T39] usb 3-1: config 0 descriptor?? [ 53.285988][ T1551] loop4: detected capacity change from 0 to 40427 [ 53.292754][ T1551] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 53.300171][ T39] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 53.306431][ T1551] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 53.308597][ T39] usb 3-1: Detected FT232H [ 53.318685][ T1551] F2FS-fs (loop4): Found nat_bits in checkpoint [ 53.355457][ T1551] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 53.362333][ T1551] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 53.379484][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 53.379501][ T28] audit: type=1400 audit(1731320675.390:448): avc: denied { create } for pid=1550 comm="syz.4.513" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.411596][ T28] audit: type=1400 audit(1731320675.390:449): avc: denied { write open } for pid=1550 comm="syz.4.513" path="/73/file2/bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.434348][ T28] audit: type=1400 audit(1731320675.390:450): avc: denied { ioctl } for pid=1550 comm="syz.4.513" path="/73/file2/bus" dev="loop4" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.434853][ T291] syz-executor: attempt to access beyond end of device [ 53.434853][ T291] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 53.513082][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 53.575038][ T19] hid-multitouch 0003:1FD2:6007.001A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 53.612493][ T28] audit: type=1400 audit(1731320675.620:451): avc: denied { create } for pid=1560 comm="syz.4.517" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.641345][ T28] audit: type=1400 audit(1731320675.620:452): avc: denied { map } for pid=1560 comm="syz.4.517" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.668326][ T28] audit: type=1400 audit(1731320675.620:453): avc: denied { read write } for pid=1560 comm="syz.4.517" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.697294][ T425] hid-steam 0003:28DE:1142.001B: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 53.720546][ T28] audit: type=1400 audit(1731320675.730:454): avc: denied { create } for pid=1571 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.740462][ T28] audit: type=1400 audit(1731320675.730:455): avc: denied { write } for pid=1571 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.761090][ T28] audit: type=1400 audit(1731320675.730:456): avc: denied { nlmsg_write } for pid=1571 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.782062][ T28] audit: type=1400 audit(1731320675.780:457): avc: denied { read } for pid=1573 comm="syz.4.522" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.806111][ T418] usb 4-1: USB disconnect, device number 9 [ 53.896343][ T6] usb 1-1: USB disconnect, device number 12 [ 53.984365][ T39] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 53.987435][ T1588] device vlan2 entered promiscuous mode [ 53.999736][ T1588] bridge0: port 3(vlan2) entered blocking state [ 54.007593][ T1588] bridge0: port 3(vlan2) entered disabled state [ 54.124119][ T1595] loop4: detected capacity change from 0 to 256 [ 54.172533][ T1597] loop4: detected capacity change from 0 to 8192 [ 54.184827][ T6] usb 3-1: USB disconnect, device number 13 [ 54.191841][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 54.201700][ T6] ftdi_sio 3-1:0.0: device disconnected [ 54.239728][ T1601] loop4: detected capacity change from 0 to 256 [ 54.276469][ T1605] loop4: detected capacity change from 0 to 256 [ 54.288034][ T1605] exfat: Unknown parameter '0x000000000000000600000000000000000000' [ 54.416504][ T1619] syz.3.543[1619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.416612][ T1619] syz.3.543[1619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.447606][ T1625] binder: 1624:1625 ioctl c018620b 20000140 returned -14 [ 54.499219][ T1629] syz.4.548[1629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.499299][ T1629] syz.4.548[1629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.883038][ T39] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 54.883055][ T6] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 55.263089][ T39] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 55.271088][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.281912][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.294564][ T39] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.303128][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.303427][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.314627][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.322850][ T39] usb 1-1: config 0 descriptor?? [ 55.335085][ T6] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 55.345120][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.355684][ T6] usb 5-1: config 0 descriptor?? [ 55.693077][ T418] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 55.723077][ T19] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 55.814055][ T39] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 55.816405][ T6] hid-steam 0003:28DE:1142.001D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 55.825999][ T39] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 55.844986][ T39] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 55.863116][ T327] Bluetooth: hci0: command 0x1003 tx timeout [ 55.863376][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.939716][ T1673] loop1: detected capacity change from 0 to 256 [ 55.963056][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 55.973520][ T428] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.025895][ T39] usb 5-1: USB disconnect, device number 11 [ 56.063074][ T418] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.073884][ T418] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.083782][ T418] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 56.092690][ T418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.093150][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.102030][ T418] usb 4-1: config 0 descriptor?? [ 56.114592][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.125984][ T19] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 56.134891][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.143199][ T295] usb 1-1: USB disconnect, device number 13 [ 56.149585][ T19] usb 3-1: config 0 descriptor?? [ 56.293076][ T6] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 56.594341][ T418] wacom 0003:056A:00D0.001E: unknown main item tag 0x0 [ 56.601118][ T418] wacom 0003:056A:00D0.001E: unknown main item tag 0x0 [ 56.607791][ T418] wacom 0003:056A:00D0.001E: unknown main item tag 0x0 [ 56.614521][ T418] wacom 0003:056A:00D0.001E: unknown main item tag 0x0 [ 56.621207][ T418] wacom 0003:056A:00D0.001E: unknown main item tag 0x0 [ 56.624074][ T19] logitech 0003:046D:C24F.001F: unknown main item tag 0x3 [ 56.628437][ T418] wacom 0003:056A:00D0.001E: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 56.651891][ T418] wacom 0003:056A:00D0.001E: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0 [ 56.660587][ T19] logitech 0003:046D:C24F.001F: item fetching failed at offset 3/5 [ 56.663986][ T418] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.001E/input/input13 [ 56.680094][ T19] logitech 0003:046D:C24F.001F: parse failed [ 56.688394][ T6] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 56.699265][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.715605][ T19] logitech: probe of 0003:046D:C24F.001F failed with error -22 [ 56.729056][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.738706][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 56.804642][ T418] usb 4-1: USB disconnect, device number 10 [ 56.823158][ T6] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 56.832149][ T6] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 56.840446][ T6] usb 2-1: Manufacturer: syz [ 56.846302][ T1689] incfs: Options parsing error. -22 [ 56.851416][ T1689] incfs: mount failed -22 [ 56.860099][ T6] usb 2-1: config 0 descriptor?? [ 56.870053][ T716] usb 3-1: USB disconnect, device number 14 [ 56.993034][ T297] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 57.344150][ T6] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 57.353064][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.353398][ T6] appleir 0003:05AC:8243.0020: No inputs registered, leaving [ 57.373380][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.383550][ T297] usb 5-1: New USB device found, idVendor=046d, idProduct=e51b, bcdDevice= 0.00 [ 57.392697][ T6] appleir 0003:05AC:8243.0020: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 57.406683][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.425945][ T297] usb 5-1: config 0 descriptor?? [ 57.442995][ T418] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 57.469274][ T1732] loop2: detected capacity change from 0 to 8192 [ 57.508240][ T1734] input: syz0 as /devices/virtual/input/input16 [ 57.624134][ T19] usb 2-1: USB disconnect, device number 10 [ 57.803066][ T418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.814083][ T418] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 57.827050][ T418] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 57.836165][ T418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.847957][ T418] usb 1-1: config 0 descriptor?? [ 57.914272][ T297] hid-generic 0003:046D:E51B.0021: unknown main item tag 0x0 [ 57.922271][ T297] hid-generic 0003:046D:E51B.0021: hidraw0: USB HID v0.00 Device [HID 046d:e51b] on usb-dummy_hcd.4-1/input0 [ 57.998337][ T1740] input: syz1 as /devices/virtual/input/input17 [ 58.117932][ T19] usb 5-1: USB disconnect, device number 12 [ 58.320307][ T418] uclogic 0003:28BD:0042.0022: interface is invalid, ignoring [ 58.346924][ T1746] loop1: detected capacity change from 0 to 40427 [ 58.371208][ T1746] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 58.379003][ T1746] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 58.390118][ T1746] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.403014][ T297] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 58.441689][ T1746] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 58.448663][ T1746] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.469810][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 58.469827][ T28] audit: type=1400 audit(1731320680.480:508): avc: denied { setattr } for pid=1745 comm="syz.1.599" name="file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.515670][ T716] usb 1-1: USB disconnect, device number 14 [ 58.652994][ T297] usb 3-1: Using ep0 maxpacket: 16 [ 58.693260][ T28] audit: type=1400 audit(1731320680.710:509): avc: denied { ioctl } for pid=1755 comm="syz.1.602" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22927 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.773137][ T297] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 58.781100][ T297] usb 3-1: config 0 has no interface number 0 [ 58.787426][ T297] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 173 [ 58.800610][ T1742] loop3: detected capacity change from 0 to 131072 [ 58.807898][ T1742] F2FS-fs (loop3): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 58.816534][ T1742] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 58.826012][ T1742] F2FS-fs (loop3): invalid crc value [ 58.832918][ T1742] F2FS-fs (loop3): Found nat_bits in checkpoint [ 58.868830][ T1742] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 58.875912][ T1742] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 58.888415][ T28] audit: type=1400 audit(1731320680.900:510): avc: denied { read } for pid=1741 comm="syz.3.598" path="/120/file0/bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.923092][ T297] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 58.935460][ T297] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 58.943841][ T297] usb 3-1: Product: syz [ 58.947834][ T297] usb 3-1: SerialNumber: syz [ 58.955885][ T297] usb 3-1: config 0 descriptor?? [ 58.973181][ T1744] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.033037][ T418] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 59.213879][ T297] usb 3-1: invalid MIDI in EP 0 [ 59.222098][ T297] snd-usb-audio: probe of 3-1:0.2 failed with error -22 [ 59.236298][ T502] udevd[502]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.246728][ T1775] loop3: detected capacity change from 0 to 40427 [ 59.260598][ T1775] F2FS-fs (loop3): invalid crc value [ 59.271480][ T1775] F2FS-fs (loop3): Found nat_bits in checkpoint [ 59.273038][ T418] usb 2-1: Using ep0 maxpacket: 32 [ 59.291357][ T28] audit: type=1400 audit(1731320681.300:511): avc: denied { unmount } for pid=1778 comm="syz.4.610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.326482][ T1775] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 59.343056][ T425] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 59.343680][ T28] audit: type=1400 audit(1731320681.360:512): avc: denied { setattr } for pid=1774 comm="syz.3.605" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.403167][ T418] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.415758][ T418] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.419209][ T19] usb 3-1: USB disconnect, device number 15 [ 59.459292][ T28] audit: type=1400 audit(1731320681.470:513): avc: denied { module_request } for pid=1784 comm="syz.3.612" kmod="arpt_RATEEST" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 59.543128][ T418] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 59.552057][ T418] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 59.560248][ T418] usb 2-1: Product: syz [ 59.567707][ T418] usb 2-1: Manufacturer: syz [ 59.578877][ T1790] loop3: detected capacity change from 0 to 128 [ 59.589029][ T1790] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.596882][ T297] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 59.596977][ T1790] FAT-fs (loop3): Filesystem has been set read-only [ 59.613432][ T1790] FAT-fs (loop3): error, invalid FAT chain (i_pos 550, last_block 8) [ 59.613624][ T418] hub 2-1:4.0: USB hub found [ 59.621382][ T1790] FAT-fs (loop3): error, corrupted file size (i_pos 550, 522) [ 59.703088][ T425] usb 1-1: config index 0 descriptor too short (expected 9221, got 92) [ 59.711295][ T425] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.721583][ T425] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 6 [ 59.815941][ T1796] loop3: detected capacity change from 0 to 40427 [ 59.822765][ T1796] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 59.830412][ T1796] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 59.840593][ T1796] F2FS-fs (loop3): Found nat_bits in checkpoint [ 59.864841][ T418] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 59.881896][ T1796] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 59.889023][ T425] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.889294][ T1796] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 59.898216][ T425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.913569][ T425] usb 1-1: Product: syz [ 59.917561][ T425] usb 1-1: Manufacturer: syz [ 59.922018][ T425] usb 1-1: SerialNumber: syz [ 59.928245][ T425] usb 1-1: config 0 descriptor?? [ 59.933304][ T1796] syz.3.617: attempt to access beyond end of device [ 59.933304][ T1796] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 59.948609][ T1796] syz.3.617: attempt to access beyond end of device [ 59.948609][ T1796] loop3: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 59.971963][ T294] syz-executor: attempt to access beyond end of device [ 59.971963][ T294] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 59.973296][ T297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.995036][ T297] usb 5-1: config 1 has no interface number 0 [ 60.000945][ T297] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.011867][ T297] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 60.021094][ T297] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 60.032085][ T297] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 60.172102][ T1803] loop2: detected capacity change from 0 to 40427 [ 60.182106][ T1803] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 60.189870][ T1803] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 60.198141][ T418] usb 2-1: USB disconnect, device number 11 [ 60.204065][ T297] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.215288][ T1803] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.217440][ T297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.229287][ T297] usb 5-1: Product: syz [ 60.233220][ T297] usb 5-1: Manufacturer: syz [ 60.237755][ T297] usb 5-1: SerialNumber: syz [ 60.259115][ T1803] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 60.266263][ T1803] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 60.293689][ T293] syz-executor: attempt to access beyond end of device [ 60.293689][ T293] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 60.352849][ T28] audit: type=1400 audit(1731320682.360:514): avc: denied { create } for pid=1809 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.372083][ T28] audit: type=1400 audit(1731320682.360:515): avc: denied { ioctl } for pid=1809 comm="syz.3.621" path="socket:[22970]" dev="sockfs" ino=22970 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.396790][ T28] audit: type=1400 audit(1731320682.360:516): avc: denied { setopt } for pid=1809 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.416363][ T28] audit: type=1400 audit(1731320682.360:517): avc: denied { bind } for pid=1809 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.453762][ T425] usb 1-1: USB disconnect, device number 15 [ 60.893068][ T716] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 60.941618][ T425] kernel write not supported for file /350/attr/current (pid: 425 comm: kworker/1:4) [ 61.063091][ T19] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 61.153756][ T297] cdc_ncm 5-1:1.1: bind() failure [ 61.313132][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 61.333132][ T716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.344051][ T716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.354157][ T716] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.363958][ T716] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 61.375124][ T716] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 61.377086][ T297] usb 5-1: USB disconnect, device number 13 [ 61.385032][ T716] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 61.443067][ T19] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.455590][ T19] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.593109][ T716] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.602103][ T19] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 61.611195][ T716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.619026][ T19] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 61.627193][ T716] usb 4-1: Product: syz [ 61.631285][ T19] usb 3-1: Product: syz [ 61.635243][ T19] usb 3-1: Manufacturer: syz [ 61.640079][ T716] usb 4-1: Manufacturer: syz [ 61.644561][ T716] usb 4-1: SerialNumber: syz [ 61.683637][ T19] hub 3-1:4.0: USB hub found [ 61.723480][ T1924] SELinux: failed to load policy [ 61.925984][ T1946] loop4: detected capacity change from 0 to 128 [ 61.943261][ T19] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 61.958560][ T1941] loop1: detected capacity change from 0 to 40427 [ 61.963536][ T1946] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 61.983365][ T1941] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 61.985404][ T1946] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038 (0x7fffffff) [ 61.989827][ T1941] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 62.026046][ T1941] F2FS-fs (loop1): Found nat_bits in checkpoint [ 62.053029][ T291] EXT4-fs (loop4): unmounting filesystem. [ 62.107738][ T1941] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 62.115024][ T1941] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 62.138783][ T1962] netlink: 80 bytes leftover after parsing attributes in process `syz.4.687'. [ 62.155383][ T1962] netlink: 80 bytes leftover after parsing attributes in process `syz.4.687'. [ 62.165289][ T292] syz-executor: attempt to access beyond end of device [ 62.165289][ T292] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.166789][ T1962] netlink: 80 bytes leftover after parsing attributes in process `syz.4.687'. [ 62.264058][ T297] usb 3-1: USB disconnect, device number 16 [ 62.265354][ T1972] syz.0.693[1972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.269875][ T1972] syz.0.693[1972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.546121][ T1996] loop4: detected capacity change from 0 to 40427 [ 62.564018][ T1996] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 62.571605][ T1996] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 62.582026][ T1996] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.603026][ T297] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 62.638217][ T1996] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 62.645283][ T1996] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.743152][ T716] cdc_ncm 4-1:1.0: bind() failure [ 62.763048][ T716] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 62.783031][ T716] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 62.803063][ T716] usb 4-1: USB disconnect, device number 11 [ 62.973121][ T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.984117][ T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.994048][ T297] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 63.003071][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.015022][ T297] usb 2-1: config 0 descriptor?? [ 63.063010][ T425] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 63.201039][ T2050] loop4: detected capacity change from 0 to 256 [ 63.210238][ T2050] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 63.302987][ T425] usb 3-1: Using ep0 maxpacket: 16 [ 63.337749][ T2068] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 63.424084][ T425] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.524376][ T297] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 63.531164][ T297] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 63.542915][ T297] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 63.545095][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 63.545112][ T28] audit: type=1400 audit(1731320685.560:546): avc: denied { append } for pid=2074 comm="syz.4.737" name="loop6" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.550227][ T297] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 63.586618][ T297] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 63.597478][ T2077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.738'. [ 63.606238][ T297] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 63.613017][ T297] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 63.619727][ T297] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 63.626571][ T2077] IPv6: Can't replace route, no match found [ 63.633021][ T297] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 63.639807][ T297] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 63.650908][ T425] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 63.660737][ T297] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 63.668613][ T297] lg-g15 0003:046D:C222.0023: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 63.675373][ T28] audit: type=1400 audit(1731320685.680:547): avc: denied { write } for pid=2078 comm="syz.4.739" name="tcp" dev="proc" ino=4026532408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 63.679615][ T425] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 63.755221][ T425] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.773075][ T425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.792474][ T297] usb 2-1: USB disconnect, device number 12 [ 63.803358][ T2030] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.823447][ T425] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 63.832557][ T2088] mmap: syz.0.743 (2088) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.865234][ T2090] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 63.922645][ T2095] loop4: detected capacity change from 0 to 256 [ 63.956116][ T2097] syz.0.747[2097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.956201][ T2097] syz.0.747[2097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.003381][ T28] audit: type=1400 audit(1731320686.020:548): avc: denied { create } for pid=2100 comm="syz.0.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.003573][ T2103] loop4: detected capacity change from 0 to 256 [ 64.041818][ T28] audit: type=1400 audit(1731320686.050:549): avc: denied { connect } for pid=2100 comm="syz.0.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.051788][ T2103] FAT-fs (loop4): Unrecognized mount option "ÿÿI[C`òøzIŒƒ½ZXÄE§Js" or missing value [ 64.072245][ T425] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 64.079808][ T425] usb 3-1: USB disconnect, device number 17 [ 64.113936][ T28] audit: type=1400 audit(1731320686.130:550): avc: denied { mount } for pid=2102 comm="syz.4.750" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 64.142525][ T28] audit: type=1400 audit(1731320686.130:551): avc: denied { create } for pid=2106 comm="syz.0.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.166442][ T2111] loop4: detected capacity change from 0 to 512 [ 64.187102][ T28] audit: type=1400 audit(1731320686.130:552): avc: denied { getopt } for pid=2106 comm="syz.0.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.206576][ T2111] EXT4-fs: Ignoring removed i_version option [ 64.212400][ T2111] EXT4-fs: Ignoring removed nobh option [ 64.217997][ T28] audit: type=1400 audit(1731320686.150:553): avc: denied { unmount } for pid=2102 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 64.237987][ T2111] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.249528][ T2111] EXT4-fs (loop4): 1 truncate cleaned up [ 64.255555][ T2111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 64.275222][ T2070] loop3: detected capacity change from 0 to 131072 [ 64.281619][ T28] audit: type=1400 audit(1731320686.290:554): avc: denied { read write } for pid=2110 comm="syz.4.754" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.291472][ T2070] F2FS-fs (loop3): Test dummy encryption mode enabled [ 64.312654][ T291] EXT4-fs (loop4): unmounting filesystem. [ 64.324945][ T2070] F2FS-fs (loop3): invalid crc value [ 64.347055][ T28] audit: type=1400 audit(1731320686.290:555): avc: denied { open } for pid=2110 comm="syz.4.754" path="/132/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.355355][ T2123] loop1: detected capacity change from 0 to 512 [ 64.371960][ T2070] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.419554][ T2123] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.431936][ T2123] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.758: corrupted in-inode xattr [ 64.436779][ T2070] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.444386][ T2123] EXT4-fs (loop1): 1 truncate cleaned up [ 64.462490][ T2123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 64.463257][ T716] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 64.500193][ T292] EXT4-fs (loop1): unmounting filesystem. [ 64.683021][ T6] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 64.723024][ T716] usb 1-1: Using ep0 maxpacket: 32 [ 64.853033][ T716] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 64.860960][ T716] usb 1-1: config 0 has no interface number 0 [ 64.892645][ T2145] loop2: detected capacity change from 0 to 40427 [ 64.909663][ T2145] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 64.918769][ T2145] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 64.933151][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 64.972326][ T2145] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.986375][ T2168] loop3: detected capacity change from 0 to 2048 [ 65.005264][ T2168] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 65.021405][ T2168] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.022246][ T2145] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 65.037032][ T2168] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 65.042814][ T2145] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 65.055557][ T2168] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.055557][ T2168] [ 65.072433][ T2168] EXT4-fs (loop3): Total free blocks count 0 [ 65.078429][ T716] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 65.085920][ T2168] EXT4-fs (loop3): Free/Dirty block details [ 65.088193][ T716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.093606][ T2168] EXT4-fs (loop3): free_blocks=2415919104 [ 65.101342][ T716] usb 1-1: Product: syz [ 65.107786][ T2145] syz.2.769: attempt to access beyond end of device [ 65.107786][ T2145] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 65.110443][ T716] usb 1-1: Manufacturer: syz [ 65.124227][ T2168] EXT4-fs (loop3): dirty_blocks=48 [ 65.130225][ T716] usb 1-1: SerialNumber: syz [ 65.133492][ T2168] EXT4-fs (loop3): Block reservation details [ 65.139314][ T2145] syz.2.769: attempt to access beyond end of device [ 65.139314][ T2145] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 65.143841][ T2168] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 65.157259][ T716] usb 1-1: config 0 descriptor?? [ 65.175760][ T8] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.188322][ T293] syz-executor: attempt to access beyond end of device [ 65.188322][ T293] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 65.209839][ T716] smsc95xx v2.0.0 [ 65.219618][ T2175] ================================================================== [ 65.227522][ T2175] BUG: KASAN: use-after-free in cpu_map_enqueue+0xb4/0x370 [ 65.234549][ T2175] Read of size 8 at addr ffff88811971a008 by task syz.3.778/2175 [ 65.242095][ T2175] [ 65.244282][ T2175] CPU: 1 PID: 2175 Comm: syz.3.778 Not tainted 6.1.112-syzkaller-00005-geef3d33656ce #0 [ 65.253816][ T2175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.263723][ T2175] Call Trace: [ 65.266831][ T2175] [ 65.269611][ T2175] dump_stack_lvl+0x151/0x1b7 [ 65.274122][ T2175] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 65.279426][ T2175] ? _printk+0xd1/0x111 [ 65.283409][ T2175] ? __virt_addr_valid+0x242/0x2f0 [ 65.288354][ T2175] print_report+0x158/0x4e0 [ 65.292693][ T2175] ? __virt_addr_valid+0x242/0x2f0 [ 65.297642][ T2175] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 65.303716][ T2175] ? cpu_map_enqueue+0xb4/0x370 [ 65.308429][ T2175] kasan_report+0x13c/0x170 [ 65.312747][ T2175] ? cpu_map_enqueue+0xb4/0x370 [ 65.317433][ T2175] __asan_report_load8_noabort+0x14/0x20 [ 65.322899][ T2175] cpu_map_enqueue+0xb4/0x370 [ 65.327411][ T2175] xdp_do_redirect+0x5b0/0xc60 [ 65.332014][ T2175] tun_xdp_act+0xdb/0xc00 [ 65.336179][ T2175] ? avc_denied+0x1b0/0x1b0 [ 65.340518][ T2175] ? tun_flow_update+0x560/0x560 [ 65.345293][ T2175] ? copy_page_from_iter+0x23b/0x2b0 [ 65.350414][ T2175] tun_get_user+0xb35/0x3a90 [ 65.354842][ T2175] ? tun_get_user+0x7e6/0x3a90 [ 65.359442][ T2175] ? tun_do_read+0x2000/0x2000 [ 65.364038][ T2175] ? ref_tracker_alloc+0x31d/0x450 [ 65.368984][ T2175] ? file_has_perm+0x508/0x6c0 [ 65.373591][ T2175] ? tun_get+0xe9/0x120 [ 65.377579][ T2175] tun_chr_write_iter+0x129/0x210 [ 65.382441][ T2175] vfs_write+0xaf6/0xed0 [ 65.386519][ T2175] ? file_end_write+0x1c0/0x1c0 [ 65.391204][ T2175] ? do_futex+0x501/0x9a0 [ 65.395373][ T2175] ? __fget_files+0x2cb/0x330 [ 65.399884][ T2175] ? __fdget_pos+0x204/0x390 [ 65.404311][ T2175] ? ksys_write+0x77/0x2c0 [ 65.408563][ T2175] ksys_write+0x199/0x2c0 [ 65.412729][ T2175] ? __this_cpu_preempt_check+0x13/0x20 [ 65.418112][ T2175] ? xfd_validate_state+0x6f/0x170 [ 65.423146][ T2175] ? __ia32_sys_read+0x90/0x90 [ 65.427743][ T2175] ? fpregs_restore_userregs+0x130/0x290 [ 65.433211][ T2175] __x64_sys_write+0x7b/0x90 [ 65.437638][ T2175] x64_sys_call+0x2f/0x9a0 [ 65.441902][ T2175] do_syscall_64+0x3b/0xb0 [ 65.446146][ T2175] ? clear_bhb_loop+0x55/0xb0 [ 65.450655][ T2175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.456387][ T2175] RIP: 0033:0x7f449b97d1ff [ 65.460664][ T2175] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 65.480166][ T2175] RSP: 002b:00007f449c7a0000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 65.488409][ T2175] RAX: ffffffffffffffda RBX: 00007f449bb35f80 RCX: 00007f449b97d1ff [ 65.496229][ T2175] RDX: 0000000000000066 RSI: 0000000020001580 RDI: 00000000000000c8 [ 65.504033][ T2175] RBP: 00007f449b9f139e R08: 0000000000000000 R09: 0000000000000000 [ 65.511846][ T2175] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000000 [ 65.519654][ T2175] R13: 0000000000000000 R14: 00007f449bb35f80 R15: 00007ffd3bf21ba8 [ 65.527560][ T2175] [ 65.530420][ T2175] [ 65.532585][ T2175] Allocated by task 1870: [ 65.536755][ T2175] kasan_set_track+0x4b/0x70 [ 65.541180][ T2175] kasan_save_alloc_info+0x1f/0x30 [ 65.546129][ T2175] __kasan_kmalloc+0x9c/0xb0 [ 65.550556][ T2175] __kmalloc_node+0xb4/0x1e0 [ 65.554979][ T2175] bpf_map_kmalloc_node+0xd0/0x2c0 [ 65.560073][ T2175] cpu_map_update_elem+0x28f/0xf50 [ 65.565018][ T2175] bpf_map_update_value+0x1a3/0x410 [ 65.570048][ T2175] map_update_elem+0x500/0x680 [ 65.574647][ T2175] __sys_bpf+0x460/0x7f0 [ 65.578727][ T2175] __x64_sys_bpf+0x7c/0x90 [ 65.582980][ T2175] x64_sys_call+0x87f/0x9a0 [ 65.587318][ T2175] do_syscall_64+0x3b/0xb0 [ 65.591571][ T2175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.597299][ T2175] [ 65.599466][ T2175] Freed by task 1871: [ 65.603290][ T2175] kasan_set_track+0x4b/0x70 [ 65.607712][ T2175] kasan_save_free_info+0x2b/0x40 [ 65.612575][ T2175] ____kasan_slab_free+0x131/0x180 [ 65.617521][ T2175] __kasan_slab_free+0x11/0x20 [ 65.622131][ T2175] __kmem_cache_free+0x218/0x3b0 [ 65.626902][ T2175] kfree+0x7a/0xf0 [ 65.630457][ T2175] put_cpu_map_entry+0x6e2/0x760 [ 65.635235][ T2175] cpu_map_kthread_run+0x2463/0x2520 [ 65.640361][ T2175] kthread+0x26d/0x300 [ 65.644256][ T2175] ret_from_fork+0x1f/0x30 [ 65.648506][ T2175] [ 65.650677][ T2175] Last potentially related work creation: [ 65.656233][ T2175] kasan_save_stack+0x3b/0x60 [ 65.660757][ T2175] __kasan_record_aux_stack+0xb4/0xc0 [ 65.665954][ T2175] kasan_record_aux_stack_noalloc+0xb/0x10 [ 65.671594][ T2175] insert_work+0x56/0x310 [ 65.675762][ T2175] __queue_work+0x9b6/0xd70 [ 65.680103][ T2175] queue_work_on+0x105/0x170 [ 65.684531][ T2175] cpu_map_free+0x1e7/0x2c0 [ 65.688875][ T2175] bpf_map_free_deferred+0xf7/0x1b0 [ 65.693908][ T2175] process_one_work+0x73d/0xcb0 [ 65.698590][ T2175] worker_thread+0xa60/0x1260 [ 65.703362][ T2175] kthread+0x26d/0x300 [ 65.707260][ T2175] ret_from_fork+0x1f/0x30 [ 65.711515][ T2175] [ 65.713681][ T2175] Second to last potentially related work creation: [ 65.720106][ T2175] kasan_save_stack+0x3b/0x60 [ 65.724618][ T2175] __kasan_record_aux_stack+0xb4/0xc0 [ 65.729833][ T2175] kasan_record_aux_stack_noalloc+0xb/0x10 [ 65.735478][ T2175] call_rcu+0xdc/0x10f0 [ 65.739468][ T2175] cpu_map_free+0x109/0x2c0 [ 65.743800][ T2175] bpf_map_free_deferred+0xf7/0x1b0 [ 65.748835][ T2175] process_one_work+0x73d/0xcb0 [ 65.753521][ T2175] worker_thread+0xa60/0x1260 [ 65.758328][ T2175] kthread+0x26d/0x300 [ 65.762224][ T2175] ret_from_fork+0x1f/0x30 [ 65.766478][ T2175] [ 65.768652][ T2175] The buggy address belongs to the object at ffff88811971a000 [ 65.768652][ T2175] which belongs to the cache kmalloc-192 of size 192 [ 65.782542][ T2175] The buggy address is located 8 bytes inside of [ 65.782542][ T2175] 192-byte region [ffff88811971a000, ffff88811971a0c0) [ 65.795468][ T2175] [ 65.797637][ T2175] The buggy address belongs to the physical page: [ 65.803889][ T2175] page:ffffea000465c680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11971a [ 65.813956][ T2175] flags: 0x4000000000000200(slab|zone=1) [ 65.819430][ T2175] raw: 4000000000000200 ffffea00046528c0 dead000000000005 ffff888100042c00 [ 65.827962][ T2175] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 65.836454][ T2175] page dumped because: kasan: bad access detected [ 65.842717][ T2175] page_owner tracks the page as allocated [ 65.848346][ T2175] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 104, tgid 104 (udevd), ts 5514915327, free_ts 5514887894 [ 65.865969][ T2175] post_alloc_hook+0x213/0x220 [ 65.870562][ T2175] prep_new_page+0x1b/0x110 [ 65.874908][ T2175] get_page_from_freelist+0x2980/0x2a10 [ 65.880286][ T2175] __alloc_pages+0x234/0x610 [ 65.884712][ T2175] alloc_slab_page+0x6c/0xf0 [ 65.889138][ T2175] new_slab+0x90/0x3e0 [ 65.893044][ T2175] ___slab_alloc+0x6f9/0xb80 [ 65.897471][ T2175] __slab_alloc+0x5d/0xa0 [ 65.901635][ T2175] __kmem_cache_alloc_node+0x1af/0x250 [ 65.906931][ T2175] kmalloc_trace+0x2a/0xa0 [ 65.911182][ T2175] kernfs_fop_open+0x350/0xb10 [ 65.915782][ T2175] do_dentry_open+0x891/0x1250 [ 65.920387][ T2175] vfs_open+0x73/0x80 [ 65.924203][ T2175] path_openat+0x2532/0x2d60 [ 65.928630][ T2175] do_filp_open+0x230/0x480 [ 65.932967][ T2175] do_sys_openat2+0x151/0x870 [ 65.937481][ T2175] page last free stack trace: [ 65.941998][ T2175] free_unref_page_prepare+0x83d/0x850 [ 65.947288][ T2175] free_unref_page+0xb2/0x5c0 [ 65.951811][ T2175] __free_pages+0x61/0xf0 [ 65.955966][ T2175] free_pages+0x7c/0x90 [ 65.959962][ T2175] selinux_genfs_get_sid+0x24d/0x2a0 [ 65.965085][ T2175] inode_doinit_with_dentry+0x8d2/0x1070 [ 65.970549][ T2175] selinux_d_instantiate+0x27/0x40 [ 65.975496][ T2175] security_d_instantiate+0x9f/0x100 [ 65.980618][ T2175] d_splice_alias+0x6d/0x390 [ 65.985043][ T2175] kernfs_iop_lookup+0x29e/0x2f0 [ 65.989818][ T2175] path_openat+0x10fd/0x2d60 [ 65.994241][ T2175] do_filp_open+0x230/0x480 [ 65.998583][ T2175] do_sys_openat2+0x151/0x870 [ 66.003095][ T2175] __x64_sys_openat+0x243/0x290 [ 66.007780][ T2175] x64_sys_call+0x6bf/0x9a0 [ 66.012121][ T2175] do_syscall_64+0x3b/0xb0 [ 66.016379][ T2175] [ 66.018542][ T2175] Memory state around the buggy address: [ 66.024020][ T2175] ffff888119719f00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 66.031916][ T2175] ffff888119719f80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 66.039816][ T2175] >ffff88811971a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 66.047709][ T2175] ^ [ 66.051875][ T2175] ffff88811971a080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 66.059779][ T2175] ffff88811971a100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 66.067671][ T2175] ================================================================== [ 66.075748][ T2175] Disabling lock debugging due to kernel taint [ 66.081788][ T2175] general protection fault, probably for non-canonical address 0xe0aced559ede00f4: 0000 [#1] PREEMPT SMP KASAN [ 66.093268][ T2175] KASAN: maybe wild-memory-access in range [0x05678aacf6f007a0-0x05678aacf6f007a7] [ 66.102386][ T2175] CPU: 1 PID: 2175 Comm: syz.3.778 Tainted: G B 6.1.112-syzkaller-00005-geef3d33656ce #0 [ 66.113401][ T2175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.123301][ T2175] RIP: 0010:cpu_map_enqueue+0x113/0x370 [ 66.128677][ T2175] Code: e8 03 42 80 3c 30 00 74 08 48 89 df e8 b6 e1 24 00 4c 8b 23 4f 8d 74 3c 58 4d 89 f5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 a8 01 00 00 4d 01 fc 41 8b 1e bf 08 [ 66.133779][ T6] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 66.148116][ T2175] RSP: 0018:ffffc90000a7f7a8 EFLAGS: 00010203 [ 66.148145][ T2175] RAX: dffffc0000000000 RBX: ffffffff86748898 RCX: 0000000000040000 [ 66.148161][ T2175] RDX: ffffc90002b56000 RSI: 0000000000030de6 RDI: 0000000000030de7 [ 66.148175][ T2175] RBP: ffffc90000a7f7e0 R08: ffffffff81982bee R09: fffffbfff0f6defd [ 66.157699][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.162878][ T2175] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f6f00000 [ 66.171638][ T6] usb 5-1: Product: syz [ 66.178579][ T2175] R13: 00acf1559ede00f4 R14: 05678aacf6f007a7 R15: 0568022b0000074f [ 66.178601][ T2175] FS: 00007f449c7a06c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 66.178619][ T2175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.186889][ T6] usb 5-1: Manufacturer: syz [ 66.194198][ T2175] CR2: 0000000020001582 CR3: 000000011f8f1000 CR4: 00000000003506a0 [ 66.194223][ T2175] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.194235][ T2175] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.194248][ T2175] Call Trace: [ 66.202528][ T6] usb 5-1: SerialNumber: syz [ 66.206005][ T2175] [ 66.206017][ T2175] ? __die_body+0x62/0xb0 [ 66.206044][ T2175] ? die_addr+0x9f/0xd0 [ 66.220225][ T6] r8152-cfgselector 5-1: config 0 descriptor?? [ 66.222586][ T2175] ? exc_general_protection+0x317/0x4c0 [ 66.286929][ T2175] ? __kasan_check_write+0x14/0x20 [ 66.291867][ T2175] ? cpu_map_enqueue+0xb4/0x370 [ 66.296646][ T2175] ? asm_exc_general_protection+0x27/0x30 [ 66.302196][ T2175] ? cpu_map_enqueue+0xce/0x370 [ 66.306884][ T2175] ? cpu_map_enqueue+0x113/0x370 [ 66.311659][ T2175] ? cpu_map_enqueue+0xdc/0x370 [ 66.316356][ T2175] xdp_do_redirect+0x5b0/0xc60 [ 66.320953][ T2175] tun_xdp_act+0xdb/0xc00 [ 66.325114][ T2175] ? avc_denied+0x1b0/0x1b0 [ 66.329444][ T2175] ? tun_flow_update+0x560/0x560 [ 66.334221][ T2175] ? copy_page_from_iter+0x23b/0x2b0 [ 66.339343][ T2175] tun_get_user+0xb35/0x3a90 [ 66.343768][ T2175] ? tun_get_user+0x7e6/0x3a90 [ 66.348377][ T2175] ? tun_do_read+0x2000/0x2000 [ 66.352964][ T2175] ? ref_tracker_alloc+0x31d/0x450 [ 66.357921][ T2175] ? file_has_perm+0x508/0x6c0 [ 66.362522][ T2175] ? tun_get+0xe9/0x120 [ 66.366509][ T2175] tun_chr_write_iter+0x129/0x210 [ 66.371366][ T2175] vfs_write+0xaf6/0xed0 [ 66.375449][ T2175] ? file_end_write+0x1c0/0x1c0 [ 66.380131][ T2175] ? do_futex+0x501/0x9a0 [ 66.384302][ T2175] ? __fget_files+0x2cb/0x330 [ 66.388814][ T2175] ? __fdget_pos+0x204/0x390 [ 66.393236][ T2175] ? ksys_write+0x77/0x2c0 [ 66.397494][ T2175] ksys_write+0x199/0x2c0 [ 66.401656][ T2175] ? __this_cpu_preempt_check+0x13/0x20 [ 66.407040][ T2175] ? xfd_validate_state+0x6f/0x170 [ 66.412025][ T2175] ? __ia32_sys_read+0x90/0x90 [ 66.416587][ T2175] ? fpregs_restore_userregs+0x130/0x290 [ 66.422054][ T2175] __x64_sys_write+0x7b/0x90 [ 66.426480][ T2175] x64_sys_call+0x2f/0x9a0 [ 66.430743][ T2175] do_syscall_64+0x3b/0xb0 [ 66.434986][ T2175] ? clear_bhb_loop+0x55/0xb0 [ 66.439497][ T2175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.445227][ T2175] RIP: 0033:0x7f449b97d1ff [ 66.449479][ T2175] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 66.469187][ T2175] RSP: 002b:00007f449c7a0000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 66.477427][ T2175] RAX: ffffffffffffffda RBX: 00007f449bb35f80 RCX: 00007f449b97d1ff [ 66.485236][ T2175] RDX: 0000000000000066 RSI: 0000000020001580 RDI: 00000000000000c8 [ 66.493062][ T2175] RBP: 00007f449b9f139e R08: 0000000000000000 R09: 0000000000000000 [ 66.500860][ T2175] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000000 [ 66.508671][ T2175] R13: 0000000000000000 R14: 00007f449bb35f80 R15: 00007ffd3bf21ba8 [ 66.516490][ T2175] [ 66.519346][ T2175] Modules linked in: [ 66.523150][ T2175] ---[ end trace 0000000000000000 ]--- [ 66.528379][ T2175] RIP: 0010:cpu_map_enqueue+0x113/0x370 [ 66.533174][ T6] r8152-cfgselector 5-1: Unknown version 0x0000 [ 66.533792][ T2175] Code: e8 03 42 80 3c 30 00 74 08 48 89 df e8 b6 e1 24 00 4c 8b 23 4f 8d 74 3c 58 4d 89 f5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 a8 01 00 00 4d 01 fc 41 8b 1e bf 08 [ 66.559306][ T2175] RSP: 0018:ffffc90000a7f7a8 EFLAGS: 00010203 [ 66.565209][ T2175] RAX: dffffc0000000000 RBX: ffffffff86748898 RCX: 0000000000040000 [ 66.573019][ T2175] RDX: ffffc90002b56000 RSI: 0000000000030de6 RDI: 0000000000030de7 [ 66.580803][ T2175] RBP: ffffc90000a7f7e0 R08: ffffffff81982bee R09: fffffbfff0f6defd [ 66.588788][ T2175] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f6f00000 [ 66.596574][ T2175] R13: 00acf1559ede00f4 R14: 05678aacf6f007a7 R15: 0568022b0000074f [ 66.604396][ T2175] FS: 00007f449c7a06c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 66.613292][ T2175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.619671][ T2175] CR2: 0000000020001582 CR3: 000000011f8f1000 CR4: 00000000003506a0 [ 66.627519][ T2175] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.635311][ T2175] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.643154][ T2175] Kernel panic - not syncing: Fatal exception in interrupt [ 66.650579][ T2175] Kernel Offset: disabled [ 66.654731][ T2175] Rebooting in 86400 seconds..