last executing test programs: 1m8.026354867s ago: executing program 2 (id=929): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02011400"], 0xdd12}, {0x0, 0x708}, {0x0, 0x143c}, {0x0, 0x1864}], 0x4, 0x0, 0x0, 0xc050}, 0x0) 1m7.987130957s ago: executing program 2 (id=930): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 1m7.950471987s ago: executing program 2 (id=931): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00ef0500000003"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m5.944754636s ago: executing program 2 (id=957): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', r0, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000280)='./file0\x00', r0, &(0x7f0000000200)='.\x00', 0x65) 1m5.937157796s ago: executing program 2 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 1m5.871666187s ago: executing program 2 (id=959): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 1m5.871497687s ago: executing program 32 (id=959): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 59.051378638s ago: executing program 4 (id=1012): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x3ff, 0x6, 0x4, 0x5}, {0xff, 0x1, 0x401, 0xf64a, 0x1, 0x9}, 0xf97, 0x6, 0xb70}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x70}}, 0x800) 59.043934248s ago: executing program 4 (id=1013): unshare(0x6020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x5, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4a, 0x4, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) 59.036316828s ago: executing program 4 (id=1014): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x360044, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = add_key$fscrypt_v1(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES8, @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x44}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'rose0\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x75, 0x0) r8 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="2d70696473201560a559566984ae7e5ea0bd6bf60ca25b6b57589910e944f0ba0400a9cdf68e675286011c2ee991a1322f9f2a045c7af8aecaaed88f2f88d0802d9b5b5b3a58339f360b06adab3cad1d0e1b64baebdf31e42569feb26a6af2a5a6a03237ed245853442de0db66528aa6a900f1a5fbaea8800cc09c2e68e11a7137d0ec90f19c"], 0x6) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 58.156712512s ago: executing program 4 (id=1026): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000240)='./file0\x00') 57.913669474s ago: executing program 4 (id=1027): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x14, 0x30, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 57.778477634s ago: executing program 4 (id=1028): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000022850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) 57.568310095s ago: executing program 33 (id=1028): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000022850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) 39.645519588s ago: executing program 1 (id=1193): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_getres(0x2, 0x0) 39.625844217s ago: executing program 1 (id=1194): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip_vti0\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 39.613583788s ago: executing program 1 (id=1195): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$X86_IOC_RDMSR_REGS(r7, 0xc02063a0, &(0x7f00000000c0)=[0x2000, 0x1, 0x10000, 0x4, 0x6, 0x8000, 0x4, 0x2f99]) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) 38.733346662s ago: executing program 1 (id=1202): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000340), 0x810405, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1) r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x1}, {}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0}) 38.720679242s ago: executing program 1 (id=1203): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 38.629667483s ago: executing program 1 (id=1205): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) close(r3) 38.615146972s ago: executing program 34 (id=1205): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) close(r3) 7.417181026s ago: executing program 3 (id=1505): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x360044, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = add_key$fscrypt_v1(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES8, @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800"], 0x44}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'rose0\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x75, 0x0) r8 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="2d70696473201560a559566984ae7e5ea0bd6bf60ca25b6b57589910e944f0ba0400a9cdf68e675286011c2ee991a1322f9f2a045c7af8aecaaed88f2f88d0802d9b5b5b3a58339f360b06adab3cad1d0e1b64baebdf31e42569feb26a6af2a5a6a03237ed245853442de0db66528aa6a900f1a5fbaea8800cc09c2e68e11a7137d0ec90f19c"], 0x6) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 6.480910551s ago: executing program 3 (id=1512): inotify_init1(0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000440)=@framed, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0xc248, &(0x7f0000000180), 0x83, 0x5f2, &(0x7f0000000600)="$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") socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.592709024s ago: executing program 3 (id=1523): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x360044, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = add_key$fscrypt_v1(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES8, @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800"], 0x44}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'rose0\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x75, 0x0) r8 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="2d70696473201560a559566984ae7e5ea0bd6bf60ca25b6b57589910e944f0ba0400a9cdf68e675286011c2ee991a1322f9f2a045c7af8aecaaed88f2f88d0802d9b5b5b3a58339f360b06adab3cad1d0e1b64baebdf31e42569feb26a6af2a5a6a03237ed245853442de0db66528aa6a900f1a5fbaea8800cc09c2e68e11a7137d0ec90f19c"], 0x6) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 4.658436659s ago: executing program 3 (id=1534): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000200000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x9, 0x2a8, &(0x7f0000000500)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f00000031c0), 0x12) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000e80)=@file={0x0, './file0/file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e040128100000000001090224000100000000090400000203000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f00000002c0), 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.473620944s ago: executing program 5 (id=1544): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001940)={{r7}, &(0x7f0000001780), &(0x7f0000001900)='%-5lx \x00'}, 0x20) close(r6) r8 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r8, 0x0) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r8, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) 2.640584808s ago: executing program 5 (id=1550): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x360044, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = add_key$fscrypt_v1(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES8, @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800"], 0x44}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'rose0\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x75, 0x0) r8 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="2d70696473201560a559566984ae7e5ea0bd6bf60ca25b6b57589910e944f0ba0400a9cdf68e675286011c2ee991a1322f9f2a045c7af8aecaaed88f2f88d0802d9b5b5b3a58339f360b06adab3cad1d0e1b64baebdf31e42569feb26a6af2a5a6a03237ed245853442de0db66528aa6a900f1a5fbaea8800cc09c2e68e11a7137d0ec90f19c"], 0x6) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1.208860625s ago: executing program 5 (id=1557): r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.097093295s ago: executing program 6 (id=1559): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000ecffffff0072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x55ac, &(0x7f0000006a40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e9780000d3ce4d2cb7bdbdb3000000000000040004002e1811679b6f3f3d5db0fe69becef28e9a932ebcbaa5c8ae2711698e0aa992134defb31125f6d18c2c9ba6aca67bc3d6884e67de1a0a98978af74da466e030df324d0ec654975df0fd94368c05282439565ca25ee9de4bd2d03d8209d6c936c7f7b6a3c1381a0a2ab37afe743313d627b75a121e7ef72098e29b3a6756d9a0664868a966a751b87bed79219db8725124e06e2aa2dcc8cb5cdb78a4b2ce316ef26eb6ddbaf960ee277d90"], 0x1c}}, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x103000, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.091428635s ago: executing program 5 (id=1560): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000000e00), 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001940)={{r7}, &(0x7f0000001780), &(0x7f0000001900)='%-5lx \x00'}, 0x20) close(r6) r8 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r8, 0x0) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r8, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) 971.647396ms ago: executing program 0 (id=1563): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x0, 0x4, 0xffc0000000000000, 0x800, 0x10, 0x1, 0x200000000, 0x9, 0x9}) 960.910636ms ago: executing program 3 (id=1564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x33, {[@timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}, 0x0) 929.581006ms ago: executing program 0 (id=1567): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 929.123856ms ago: executing program 7 (id=1568): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000380)=' ', 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 921.376886ms ago: executing program 0 (id=1569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) lstat(0x0, 0x0) 913.118216ms ago: executing program 7 (id=1570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/787], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xe40, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 888.601536ms ago: executing program 0 (id=1571): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 873.368426ms ago: executing program 7 (id=1572): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 872.940426ms ago: executing program 0 (id=1573): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 818.701406ms ago: executing program 0 (id=1574): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000200000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f00000031c0), 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000e80)=@file={0x0, './file0/file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e040128100000000001090224000100000000090400000203000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f00000002c0), 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 816.955516ms ago: executing program 7 (id=1575): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 793.797187ms ago: executing program 7 (id=1576): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 774.761636ms ago: executing program 7 (id=1577): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$X86_IOC_RDMSR_REGS(r7, 0xc02063a0, &(0x7f00000000c0)=[0x2000, 0x1, 0x10000, 0x4, 0x6, 0x8000, 0x4, 0x2f99]) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) 213.130319ms ago: executing program 6 (id=1578): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000005c0)='rtc_alarm_irq_enable\x00', r1}, 0x10) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x7004, 0x0) 74.0745ms ago: executing program 6 (id=1579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 71.83199ms ago: executing program 3 (id=1580): syz_open_dev$hidraw(&(0x7f0000000080), 0x3, 0x4200) r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_disconnect(r0) 59.52885ms ago: executing program 5 (id=1581): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 59.04338ms ago: executing program 6 (id=1582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x45}], 0x1) write$cgroup_pid(r2, &(0x7f00000031c0), 0x12) 45.14628ms ago: executing program 5 (id=1583): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f0000001600)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000400), 0x20101, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r0, &(0x7f00000004c0)}, 0x20) 38.77173ms ago: executing program 6 (id=1584): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800068004000540080000003e"], 0x44}}, 0x0) 0s ago: executing program 6 (id=1585): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000580)=[@acquire={0x400c6313}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ssed [ 85.110976][ T24] audit: type=1400 audit(1733259799.209:779): avc: denied { ioctl } for pid=2360 comm="syz.1.648" path="/dev/input/event2" dev="devtmpfs" ino=264 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.261147][ T2364] netlink: 'syz.0.649': attribute type 6 has an invalid length. [ 85.910793][ T24] audit: type=1326 audit(1733259800.009:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bac3bef19 code=0x7ffc0000 [ 85.933901][ T24] audit: type=1326 audit(1733259800.009:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bac3bef19 code=0x7ffc0000 [ 85.957460][ T24] audit: type=1326 audit(1733259800.009:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f3bac3bef19 code=0x7ffc0000 [ 85.980594][ T2052] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 85.986256][ T1376] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 85.995488][ T24] audit: type=1326 audit(1733259800.009:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bac3bef19 code=0x7ffc0000 [ 86.018663][ T24] audit: type=1326 audit(1733259800.009:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bac3bef19 code=0x7ffc0000 [ 86.346918][ T2402] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.358125][ T2402] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.371591][ T2402] EXT4-fs (loop4): 1 truncate cleaned up [ 86.377838][ T2402] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,journal_ioprio=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,lazytime,grpjquota=,quota,,errors=continue [ 86.386194][ T2052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.406244][ T1376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.407200][ T24] audit: type=1400 audit(1733259800.499:785): avc: denied { read append open } for pid=2401 comm="syz.4.664" path="/138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.407224][ T24] audit: type=1400 audit(1733259800.499:786): avc: denied { map } for pid=2401 comm="syz.4.664" path="/138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.418404][ T1376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.518286][ T2052] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.531445][ T2052] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.533091][ T24] audit: type=1400 audit(1733259800.499:787): avc: denied { getopt } for pid=2401 comm="syz.4.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.540497][ T2052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.560084][ T1376] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 86.568787][ T2052] usb 4-1: config 0 descriptor?? [ 86.576676][ T1376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.634167][ T24] audit: type=1107 audit(1733259800.729:788): pid=2409 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 86.841369][ T1376] usb 1-1: config 0 descriptor?? [ 87.128188][ T2052] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 87.140017][ T2052] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 87.155190][ T2052] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 87.162758][ T2052] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 87.170312][ T2052] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 87.177877][ T2052] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 87.185211][ T2052] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 87.192528][ T2052] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 87.202723][ T2052] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 87.228255][ T2052] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 87.235702][ T2052] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 87.244936][ T2052] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 87.337800][ T1376] hid-steam 0003:28DE:1142.0012: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 87.350306][ T1376] hid-steam 0003:28DE:1142.0013: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 87.863859][ T1376] hid-steam 0003:28DE:1142.0012: Steam wireless receiver connected [ 87.888532][ T1376] usb 4-1: USB disconnect, device number 8 [ 88.229460][ T2455] netem: change failed [ 88.276169][ T308] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 88.456167][ T20] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 88.816490][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.826474][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.840578][ T20] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 88.850352][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.920186][ T20] usb 3-1: config 0 descriptor?? [ 88.958987][ T20] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 89.108266][ T1376] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 89.176202][ T5] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 89.306241][ T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.315873][ T308] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.328509][ T308] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 89.337365][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.346051][ T308] usb 5-1: config 0 descriptor?? [ 89.386628][ T308] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 89.476191][ T1376] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 89.486874][ T1376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.497492][ T1376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.507005][ T1376] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 89.520051][ T1376] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 89.526167][ T20] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 89.528910][ T1376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.544842][ T1376] usb 2-1: config 0 descriptor?? [ 89.972708][ T514] usb 3-1: USB disconnect, device number 8 [ 90.096487][ T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.121460][ T20] usb 4-1: config 0 has no interfaces? [ 90.126967][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 90.127006][ T24] audit: type=1400 audit(1733259804.169:830): avc: denied { bind } for pid=2478 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.178000][ T20] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 90.224608][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.244761][ T24] audit: type=1400 audit(1733259804.169:831): avc: denied { listen } for pid=2478 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.341389][ T20] usb 4-1: config 0 descriptor?? [ 90.357222][ T1376] thrustmaster 0003:044F:B653.0014: unbalanced delimiter at end of report description [ 90.366947][ T1376] thrustmaster 0003:044F:B653.0014: parse failed [ 90.373195][ T1376] thrustmaster: probe of 0003:044F:B653.0014 failed with error -22 [ 90.375208][ T24] audit: type=1400 audit(1733259804.169:832): avc: denied { write } for pid=2478 comm="syz.2.689" path="socket:[21497]" dev="sockfs" ino=21497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.382231][ T1376] usb 2-1: USB disconnect, device number 10 [ 90.460125][ T24] audit: type=1400 audit(1733259804.559:833): avc: denied { create } for pid=2490 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 90.480820][ T24] audit: type=1400 audit(1733259804.559:834): avc: denied { write } for pid=2490 comm="syz.2.692" path="socket:[22538]" dev="sockfs" ino=22538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 90.505535][ T24] audit: type=1400 audit(1733259804.559:835): avc: denied { nlmsg_write } for pid=2490 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 90.543584][ T24] audit: type=1400 audit(1733259804.639:836): avc: denied { read } for pid=2494 comm="syz.2.694" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.565977][ T24] audit: type=1400 audit(1733259804.639:837): avc: denied { open } for pid=2494 comm="syz.2.694" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.589617][ T24] audit: type=1400 audit(1733259804.639:838): avc: denied { ioctl } for pid=2494 comm="syz.2.694" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.591015][ T876] usb 1-1: USB disconnect, device number 10 [ 90.615228][ T24] audit: type=1400 audit(1733259804.639:839): avc: denied { set_context_mgr } for pid=2494 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 90.646612][ T20] usb 4-1: USB disconnect, device number 9 [ 90.663313][ T876] hid-steam 0003:28DE:1142.0012: Steam wireless receiver disconnected [ 91.331121][ T877] usb 5-1: USB disconnect, device number 8 [ 91.456133][ T876] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 91.547471][ T2521] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 91.555074][ T2521] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 91.564139][ T2521] F2FS-fs (loop4): invalid crc value [ 91.570178][ T2516] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 91.577850][ T2516] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 91.587459][ T2516] F2FS-fs (loop3): invalid crc value [ 91.593809][ T2521] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 91.601186][ T2516] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 91.632463][ T2521] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 91.633456][ T2516] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 91.639438][ T2521] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 91.646374][ T2516] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.808018][ T876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.856588][ T876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.869926][ T876] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 92.879421][ T876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.892298][ T876] usb 3-1: config 0 descriptor?? [ 92.936623][ T876] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 93.276162][ T876] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 93.336200][ T20] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 93.696278][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.705927][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.718659][ T20] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 93.727611][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.736470][ T20] usb 5-1: config 0 descriptor?? [ 93.776684][ T20] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 93.851430][ T20] usb 3-1: USB disconnect, device number 9 [ 93.886312][ T876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.896233][ T876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.908913][ T876] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 93.917668][ T876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.934381][ T876] usb 1-1: config 0 descriptor?? [ 93.987073][ T876] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 94.536240][ T20] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 94.775096][ T2615] input: syz0 as /devices/virtual/input/input10 [ 94.798192][ T2617] syz.1.732[2617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.798284][ T2617] syz.1.732[2617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.816752][ T2619] input: syz1 as /devices/virtual/input/input11 [ 94.904712][ T2625] netlink: 'syz.1.736': attribute type 4 has an invalid length. [ 94.912542][ T2625] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.736'. [ 94.923820][ T2052] usb 1-1: USB disconnect, device number 11 [ 94.929713][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.939778][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.959509][ T20] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 94.968519][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.979920][ T20] usb 3-1: config 0 descriptor?? [ 95.120387][ T20] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 95.516198][ T2052] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 96.061406][ T587] usb 3-1: USB disconnect, device number 10 [ 96.126160][ T24] kauditd_printk_skb: 33 callbacks suppressed [ 96.126172][ T24] audit: type=1400 audit(1733259810.209:873): avc: denied { write } for pid=2638 comm="syz.2.740" path="socket:[23605]" dev="sockfs" ino=23605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.138146][ T2052] usb 1-1: Using ep0 maxpacket: 8 [ 96.162765][ T20] usb 5-1: USB disconnect, device number 9 [ 96.181853][ T2650] device bridge0 entered promiscuous mode [ 96.187194][ T24] audit: type=1326 audit(1733259810.269:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 96.188942][ T2650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 96.219504][ T2650] device bridge_slave_1 left promiscuous mode [ 96.225970][ T2650] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.235578][ T2650] device bridge_slave_0 left promiscuous mode [ 96.242424][ T2650] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.258790][ T2650] device bridge0 left promiscuous mode [ 96.264824][ T24] audit: type=1326 audit(1733259810.269:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 96.306303][ T2052] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 96.369284][ T24] audit: type=1326 audit(1733259810.269:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 96.394453][ T2052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.405926][ T24] audit: type=1326 audit(1733259810.269:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 96.429283][ T2052] usb 1-1: config 0 descriptor?? [ 96.429525][ T24] audit: type=1326 audit(1733259810.269:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 96.457918][ T24] audit: type=1326 audit(1733259810.269:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 96.481699][ T24] audit: type=1326 audit(1733259810.279:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 96.482587][ T2052] usb 1-1: unknown interface protocol 0x3f, assuming v1 [ 96.533264][ T24] audit: type=1326 audit(1733259810.279:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 96.559099][ T2052] usb 1-1: cannot find UAC_HEADER [ 96.570642][ T2659] netlink: 'syz.2.745': attribute type 4 has an invalid length. [ 96.625182][ T2052] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 96.699466][ T24] audit: type=1326 audit(1733259810.399:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 96.723776][ T2052] usb 1-1: USB disconnect, device number 12 [ 97.026140][ T1376] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 97.046160][ T587] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 97.306152][ T1376] usb 5-1: Using ep0 maxpacket: 16 [ 97.406207][ T587] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.415896][ T587] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.426268][ T1376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.428624][ T587] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 97.439469][ T1376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.448302][ T587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.457822][ T1376] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.469258][ T587] usb 2-1: config 0 descriptor?? [ 97.478244][ T1376] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.491626][ T1376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.499997][ T1376] usb 5-1: config 0 descriptor?? [ 97.516955][ T587] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 97.799230][ T2687] 9pnet: p9_errstr2errno: server reported unknown error śćçćŚÎs [ 97.882855][ T2693] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 97.972001][ T1376] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0015/input/input12 [ 98.513995][ T2707] netlink: 'syz.0.764': attribute type 4 has an invalid length. [ 99.303514][ T1376] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 99.319510][ T1376] usb 5-1: USB disconnect, device number 10 [ 99.716189][ T20] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 99.922889][ T514] usb 2-1: USB disconnect, device number 11 [ 99.956192][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 100.056138][ T876] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 100.076230][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.087086][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.098342][ T20] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 100.108297][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.191095][ T20] usb 4-1: config 0 descriptor?? [ 100.548296][ T2745] netlink: 'syz.2.777': attribute type 4 has an invalid length. [ 100.747976][ T876] usb 1-1: Using ep0 maxpacket: 16 [ 100.754200][ T20] steelseries_srws1 0003:1038:1410.0016: unknown main item tag 0xd [ 100.762223][ T20] steelseries_srws1 0003:1038:1410.0016: item fetching failed at offset 6/7 [ 100.771166][ T20] steelseries_srws1 0003:1038:1410.0016: parse failed [ 100.778044][ T20] steelseries_srws1: probe of 0003:1038:1410.0016 failed with error -22 [ 100.886564][ T876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.904575][ T876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.917217][ T2737] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0xf2f50610) [ 100.926367][ T2737] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 100.935999][ T2737] F2FS-fs (loop4): Test dummy encryption mode enabled [ 100.942885][ T20] usb 4-1: USB disconnect, device number 10 [ 100.947875][ T2737] F2FS-fs (loop4): invalid crc value [ 100.955205][ T2737] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.976599][ T2759] IPv6: sit1: Disabled Multicast RS [ 100.995097][ T2737] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 101.002144][ T2737] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.056204][ T876] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 101.065094][ T876] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 101.073272][ T876] usb 1-1: Product: syz [ 101.077215][ T876] usb 1-1: Manufacturer: syz [ 101.082493][ T876] usb 1-1: config 0 descriptor?? [ 101.306140][ T2052] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 101.316822][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 101.316833][ T24] audit: type=1326 audit(1733259815.419:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 101.346211][ T24] audit: type=1326 audit(1733259815.419:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 101.369843][ T24] audit: type=1326 audit(1733259815.419:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 101.393849][ T24] audit: type=1326 audit(1733259815.419:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 101.418076][ T24] audit: type=1326 audit(1733259815.419:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 101.444346][ T24] audit: type=1326 audit(1733259815.419:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 101.467821][ T24] audit: type=1326 audit(1733259815.479:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 101.491473][ T24] audit: type=1326 audit(1733259815.479:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 101.517257][ T24] audit: type=1326 audit(1733259815.489:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 101.543181][ T24] audit: type=1326 audit(1733259815.489:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 101.607240][ T876] kovaplus 0003:1E7D:2D50.0017: item fetching failed at offset 5/7 [ 101.615121][ T876] kovaplus 0003:1E7D:2D50.0017: parse failed [ 101.621015][ T20] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 101.621857][ T876] kovaplus: probe of 0003:1E7D:2D50.0017 failed with error -22 [ 102.476357][ T2052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.539984][ T2782] tipc: New replicast peer: 255.255.255.255 [ 102.545738][ T2052] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.562015][ T2782] tipc: Enabled bearer , priority 10 [ 102.571911][ T2052] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 102.593335][ T2052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.608079][ T2052] usb 2-1: config 0 descriptor?? [ 102.613784][ T514] usb 1-1: USB disconnect, device number 13 [ 102.647936][ T2052] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 102.658171][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.668559][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.681527][ T20] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 102.690589][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.702316][ T20] usb 3-1: config 0 descriptor?? [ 102.748021][ T20] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 102.821911][ T2789] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 102.834176][ T2789] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 102.890065][ T2795] exfat: Deprecated parameter 'namecase' [ 102.895645][ T2795] exfat: Unknown parameter 'uma­¨' [ 103.696241][ T2805] incfs: mount failed -22 [ 103.827251][ T2799] netlink: 'syz.4.795': attribute type 4 has an invalid length. [ 104.120495][ T2813] sched: RT throttling activated [ 104.910481][ T587] usb 3-1: USB disconnect, device number 11 [ 104.921852][ T20] usb 2-1: USB disconnect, device number 12 [ 104.967804][ T877] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 105.781240][ T2839] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 105.782328][ T2847] syz.4.808[2847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.789137][ T2847] syz.4.808[2847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.789413][ T2839] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.817653][ T2839] EXT4-fs warning (device loop3): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 105.831933][ T2839] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 105.838380][ T877] usb 1-1: Using ep0 maxpacket: 16 [ 105.866463][ T2839] EXT4-fs (loop3): 1 truncate cleaned up [ 105.871972][ T2839] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 105.886667][ T2839] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.805: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 105.908883][ T2838] xt_bpf: check failed: parse error [ 105.976196][ T877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.986053][ T877] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 105.994976][ T877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.008666][ T877] usb 1-1: config 0 descriptor?? [ 106.026183][ T587] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 106.128047][ T2860] netlink: 'syz.1.812': attribute type 4 has an invalid length. [ 106.260076][ T20] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 106.347000][ T2858] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 106.388023][ T2858] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 106.456460][ T587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.547152][ T587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.557311][ T587] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.571397][ T587] usb 3-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 106.581288][ T587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.357327][ T877] hid-multitouch 0003:1FD2:6007.0018: unknown main item tag 0x0 [ 107.366372][ T877] hid-multitouch 0003:1FD2:6007.0018: unknown main item tag 0x2 [ 107.374514][ T877] hid-multitouch 0003:1FD2:6007.0018: unknown main item tag 0x0 [ 107.377934][ T587] usb 3-1: config 0 descriptor?? [ 107.383328][ T877] hid-multitouch 0003:1FD2:6007.0018: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 107.413169][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 107.413181][ T24] audit: type=1326 audit(1733259821.509:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 107.442276][ T24] audit: type=1326 audit(1733259821.509:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 107.468504][ T24] audit: type=1326 audit(1733259821.509:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 107.492010][ T24] audit: type=1326 audit(1733259821.559:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 107.515324][ T24] audit: type=1326 audit(1733259821.559:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 107.515725][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.549149][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.572069][ T20] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 107.582703][ T2873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.818'. [ 107.591637][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.602919][ T2052] usb 1-1: USB disconnect, device number 14 [ 107.610421][ T20] usb 5-1: config 0 descriptor?? [ 107.642980][ T24] audit: type=1326 audit(1733259821.739:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2882 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cceadf19 code=0x7ffc0000 [ 107.668046][ T24] audit: type=1326 audit(1733259821.769:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2882 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7cceadf19 code=0x7ffc0000 [ 107.691630][ T20] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 107.702697][ T24] audit: type=1326 audit(1733259821.769:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2882 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cceadf19 code=0x7ffc0000 [ 107.726122][ T24] audit: type=1326 audit(1733259821.769:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2882 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7cceadf19 code=0x7ffc0000 [ 107.796661][ T24] audit: type=1326 audit(1733259821.769:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2882 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cceadf19 code=0x7ffc0000 [ 107.975213][ T587] wacom 0003:056A:00DD.0019: unknown main item tag 0x0 [ 107.993983][ T587] wacom 0003:056A:00DD.0019: unknown main item tag 0x0 [ 108.028782][ T587] wacom 0003:056A:00DD.0019: unknown main item tag 0x0 [ 108.066861][ T587] wacom 0003:056A:00DD.0019: Unknown device_type for 'HID 056a:00dd'. Assuming pen. [ 108.147382][ T587] wacom 0003:056A:00DD.0019: hidraw0: USB HID v0.00 Device [HID 056a:00dd] on usb-dummy_hcd.2-1/input0 [ 108.237404][ T587] input: Wacom Bamboo Connect Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00DD.0019/input/input13 [ 108.296046][ T587] usb 3-1: USB disconnect, device number 12 [ 108.364685][ T2895] raw_sendmsg: syz.0.826 forgot to set AF_INET. Fix it! [ 108.421940][ T2901] syz.0.828 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 108.440708][ T2903] syz.0.829[2903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.440783][ T2903] syz.0.829[2903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.855953][ T1376] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 109.256239][ T1376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.266984][ T1376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.276510][ T1376] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 109.285342][ T1376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.294023][ T1376] usb 1-1: config 0 descriptor?? [ 109.375792][ T2934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.842'. [ 109.823077][ T587] usb 5-1: USB disconnect, device number 11 [ 110.008569][ T1376] waltop 0003:172F:0501.001A: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.0-1/input0 [ 110.884251][ T2465] usb 1-1: USB disconnect, device number 15 [ 110.988554][ T587] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 111.396505][ T587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.418702][ T587] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.498757][ T587] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 111.571790][ T587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.655209][ T587] usb 5-1: config 0 descriptor?? [ 111.734159][ T587] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 111.955162][ T49] tipc: Subscription rejected, illegal request [ 112.066174][ T1376] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 113.169916][ T587] usb 5-1: USB disconnect, device number 12 [ 113.215789][ T24] kauditd_printk_skb: 70 callbacks suppressed [ 113.215801][ T24] audit: type=1326 audit(1733259827.309:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3019 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 113.325542][ T24] audit: type=1326 audit(1733259827.349:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3019 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 113.351183][ T24] audit: type=1326 audit(1733259827.349:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3019 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 113.378292][ T24] audit: type=1326 audit(1733259827.349:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3019 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 113.403917][ T24] audit: type=1326 audit(1733259827.349:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3019 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 113.477615][ T24] audit: type=1326 audit(1733259827.349:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3019 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 113.674304][ T24] audit: type=1326 audit(1733259827.349:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3019 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 113.818862][ T24] audit: type=1326 audit(1733259827.349:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3019 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 113.853566][ T24] audit: type=1326 audit(1733259827.419:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3019 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 113.876710][ T24] audit: type=1326 audit(1733259827.419:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3019 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 114.016212][ T587] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 114.081620][ T3039] syz.1.878[3039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.081656][ T3039] syz.1.878[3039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.156370][ T1376] usb 2-1: device descriptor read/all, error -71 [ 114.601702][ T587] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 114.611408][ T587] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 114.612186][ T3060] syz.2.885[3060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.621610][ T587] usb 1-1: config 220 has no interface number 2 [ 114.622042][ T3060] syz.2.885[3060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.633557][ T587] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 114.663104][ T587] usb 1-1: config 220 interface 0 has no altsetting 0 [ 114.669861][ T587] usb 1-1: config 220 interface 76 has no altsetting 0 [ 114.690000][ T587] usb 1-1: config 220 interface 1 has no altsetting 0 [ 114.876266][ T587] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 114.885275][ T587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.893886][ T587] usb 1-1: Product: syz [ 114.898116][ T587] usb 1-1: Manufacturer: syz [ 114.902851][ T587] usb 1-1: SerialNumber: syz [ 115.137330][ T3076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 115.616213][ T20] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 115.637829][ T587] usb 1-1: selecting invalid altsetting 0 [ 115.645251][ T587] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 115.784622][ T587] uvcvideo: No valid video chain found. [ 115.867279][ T587] usb 1-1: USB disconnect, device number 16 [ 115.926901][ T3118] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 115.934465][ T3118] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.943351][ T3118] F2FS-fs (loop3): invalid crc value [ 115.949832][ T3118] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.972832][ T3118] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 115.980007][ T3118] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.996755][ T3118] overlayfs: invalid origin (000000790066696c65300000000000000000000000000000000000000000000000000000000000000000000000000000) [ 116.056237][ T1376] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 116.136210][ T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.146399][ T20] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 116.146608][ T3130] exfat: Deprecated parameter 'namecase' [ 116.155684][ T3130] exfat: Unknown parameter 'uma­¨' [ 116.162088][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.174425][ T20] usb 3-1: config 0 descriptor?? [ 116.216919][ T20] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 116.223693][ T20] uvcvideo: No valid video chain found. [ 116.337532][ T1376] usb 5-1: Using ep0 maxpacket: 8 [ 116.399367][ T3137] netlink: 'syz.3.910': attribute type 4 has an invalid length. [ 116.426375][ T587] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 117.511850][ T20] usb 3-1: USB disconnect, device number 13 [ 117.623171][ T587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.633365][ T587] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.666249][ T1376] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.681906][ T587] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 117.690921][ T587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.699423][ T587] usb 1-1: config 0 descriptor?? [ 117.736745][ T587] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 118.286204][ T1376] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 118.295059][ T1376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 118.303097][ T1376] usb 5-1: SerialNumber: syz [ 118.311789][ T1376] usb 5-1: config 0 descriptor?? [ 118.356661][ T1376] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 118.363466][ T5] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 118.474788][ T3167] syz.2.921[3167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.474863][ T3167] syz.2.921[3167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.566180][ T1376] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 0: -71 (exp. 1). [ 118.586060][ T1376] uvcvideo: No valid video chain found. [ 118.592504][ T1376] usb 5-1: USB disconnect, device number 13 [ 118.657104][ T587] usb 1-1: USB disconnect, device number 17 [ 118.668456][ T3175] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 118.680615][ T3175] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 119.097898][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.109802][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.119386][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 119.128308][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.136743][ T5] usb 2-1: config 0 descriptor?? [ 119.399522][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 119.399534][ T24] audit: type=1400 audit(1733259833.499:1053): avc: denied { ioctl } for pid=3192 comm="syz.2.929" path="socket:[24464]" dev="sockfs" ino=24464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.490819][ T24] audit: type=1326 audit(1733259833.589:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 119.514079][ T24] audit: type=1326 audit(1733259833.589:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 119.548118][ T24] audit: type=1326 audit(1733259833.589:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 119.571932][ T24] audit: type=1326 audit(1733259833.589:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 119.595104][ T24] audit: type=1326 audit(1733259833.589:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 119.618511][ T24] audit: type=1326 audit(1733259833.589:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 119.660057][ T24] audit: type=1326 audit(1733259833.589:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 119.687459][ T5] logitech-hidpp-device 0003:046D:C086.001B: unknown main item tag 0x0 [ 119.695188][ T24] audit: type=1326 audit(1733259833.589:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 119.695533][ T5] logitech-hidpp-device 0003:046D:C086.001B: unknown main item tag 0x0 [ 119.695550][ T5] logitech-hidpp-device 0003:046D:C086.001B: unknown main item tag 0x0 [ 119.739872][ T5] logitech-hidpp-device 0003:046D:C086.001B: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 119.752368][ T1376] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 119.763230][ T24] audit: type=1326 audit(1733259833.589:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f8476944f19 code=0x7ffc0000 [ 119.886180][ T877] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 119.947463][ T308] usb 2-1: USB disconnect, device number 15 [ 120.016215][ T1376] usb 3-1: Using ep0 maxpacket: 32 [ 120.226154][ T877] usb 4-1: Using ep0 maxpacket: 8 [ 120.246217][ T5] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 120.256295][ T1376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.267152][ T1376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.276949][ T1376] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 120.285789][ T1376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.294597][ T1376] usb 3-1: config 0 descriptor?? [ 120.346252][ T877] usb 4-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 120.355164][ T877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.363533][ T877] usb 4-1: config 0 descriptor?? [ 120.406692][ T877] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 120.626276][ T877] usb 4-1: Detected FT8U232AM [ 120.638937][ T877] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 120.647039][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.656689][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.708946][ T877] usb 4-1: USB disconnect, device number 11 [ 120.720059][ T877] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 120.729731][ T5] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 120.740504][ T877] ftdi_sio 4-1:0.0: device disconnected [ 120.746859][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.762173][ T5] usb 5-1: config 0 descriptor?? [ 120.768175][ T1376] greenasia 0003:0E8F:0012.001C: item fetching failed at offset 0/3 [ 120.778170][ T1376] greenasia 0003:0E8F:0012.001C: parse failed [ 120.784118][ T1376] greenasia: probe of 0003:0E8F:0012.001C failed with error -22 [ 120.836647][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 120.970169][ T877] usb 3-1: USB disconnect, device number 14 [ 121.130519][ T3251] bridge0: port 3(gretap1) entered blocking state [ 121.136786][ T3251] bridge0: port 3(gretap1) entered disabled state [ 121.143568][ T3251] device gretap1 entered promiscuous mode [ 121.149395][ T3251] bridge0: port 3(gretap1) entered blocking state [ 121.155645][ T3251] bridge0: port 3(gretap1) entered forwarding state [ 121.166967][ T3251] device bridge_slave_0 left promiscuous mode [ 121.172958][ T3251] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.180567][ T3251] device bridge_slave_1 left promiscuous mode [ 121.186826][ T3251] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.195755][ T3251] device gretap1 left promiscuous mode [ 121.201187][ T3251] bridge0: port 3(gretap1) entered disabled state [ 121.609572][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.616661][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.623764][ T3264] device bridge_slave_0 entered promiscuous mode [ 121.632254][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.639205][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.646498][ T3264] device bridge_slave_1 entered promiscuous mode [ 121.684620][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.691495][ T3264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.698616][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.705436][ T3264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.726341][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.734069][ T2116] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.744043][ T2116] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.759209][ T2465] usb 5-1: USB disconnect, device number 14 [ 121.768063][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.776495][ T2116] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.783373][ T2116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.799390][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.808789][ T2116] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.815852][ T2116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.826442][ T587] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 121.837161][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.846611][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.862418][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.873858][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.882685][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.891301][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.900073][ T3264] device veth0_vlan entered promiscuous mode [ 121.914683][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.925031][ T3264] device veth1_macvtap entered promiscuous mode [ 121.934426][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.945761][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.956041][ T307] device bridge_slave_1 left promiscuous mode [ 121.962360][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.970694][ T307] device bridge_slave_0 left promiscuous mode [ 121.976825][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.984302][ T307] device veth1_macvtap left promiscuous mode [ 121.990294][ T307] device veth0_vlan left promiscuous mode [ 122.146235][ T2465] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 122.196228][ T587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.205878][ T587] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.236369][ T587] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 122.245210][ T587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.273630][ T587] usb 1-1: config 0 descriptor?? [ 122.316678][ T587] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 122.506217][ T2465] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.524771][ T2465] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.551056][ T2465] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 122.575737][ T2465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.601817][ T2465] usb 5-1: config 0 descriptor?? [ 123.060164][ T3294] netlink: 'syz.3.968': attribute type 4 has an invalid length. [ 123.146537][ T2465] cp2112 0003:10C4:EA90.001D: item fetching failed at offset 5/7 [ 123.205277][ T2465] cp2112 0003:10C4:EA90.001D: parse failed [ 123.273398][ T2465] cp2112: probe of 0003:10C4:EA90.001D failed with error -22 [ 123.376803][ T2465] usb 5-1: USB disconnect, device number 15 [ 124.558141][ T590] usb 1-1: USB disconnect, device number 18 [ 124.785034][ T24] kauditd_printk_skb: 43 callbacks suppressed [ 124.785047][ T24] audit: type=1400 audit(1733259838.879:1106): avc: denied { read } for pid=3324 comm="syz.3.979" path="socket:[25410]" dev="sockfs" ino=25410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.846173][ T2465] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 124.971800][ T3328] xt_bpf: check failed: parse error [ 125.016951][ T590] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 125.206290][ T2465] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.216028][ T2465] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.233746][ T2465] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 125.243047][ T2465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.292264][ T24] audit: type=1326 audit(1733259839.389:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3343 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 125.305748][ T2465] usb 5-1: config 0 descriptor?? [ 125.320857][ T24] audit: type=1326 audit(1733259839.429:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3343 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 125.344730][ T24] audit: type=1326 audit(1733259839.429:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3343 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 125.368182][ T2465] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 125.369508][ T24] audit: type=1326 audit(1733259839.429:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3343 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 125.416222][ T590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.436710][ T590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.446827][ T590] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.468856][ T587] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 125.478103][ T590] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.487542][ T590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.549758][ T590] usb 1-1: config 0 descriptor?? [ 125.665104][ T24] audit: type=1400 audit(1733259839.759:1111): avc: denied { read write } for pid=3350 comm="syz.1.989" name="uhid" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 125.705354][ T2465] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 125.738331][ T2465] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.755394][ T24] audit: type=1400 audit(1733259839.789:1112): avc: denied { open } for pid=3350 comm="syz.1.989" path="/dev/uhid" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 125.876300][ T587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.886200][ T587] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.900341][ T587] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 125.913144][ T587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.942992][ T587] usb 4-1: config 0 descriptor?? [ 125.994768][ T587] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 126.016319][ T2465] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 126.057070][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.064556][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.074947][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.100679][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.108210][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.115725][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.123283][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.130963][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.138566][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.145769][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.153283][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.160682][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.168088][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.175533][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.183252][ T590] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 126.188612][ T3357] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.190488][ T24] audit: type=1400 audit(1733259840.289:1113): avc: denied { create } for pid=3356 comm="syz.5.991" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.201710][ T3357] FAT-fs (loop11): unable to read boot sector [ 126.223112][ T590] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 126.236637][ T590] plantronics 0003:047F:FFFF.001F: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 126.248894][ T24] audit: type=1400 audit(1733259840.289:1114): avc: denied { mounton } for pid=3356 comm="syz.5.991" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.273146][ T24] audit: type=1400 audit(1733259840.349:1115): avc: denied { unlink } for pid=3264 comm="syz-executor" name="file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.310046][ T590] usb 5-1: USB disconnect, device number 16 [ 126.323082][ T587] usb 1-1: USB disconnect, device number 19 [ 126.386182][ T2465] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.446216][ T2465] usb 2-1: no configurations [ 126.450662][ T2465] usb 2-1: can't read configurations, error -22 [ 126.766394][ T590] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 126.841100][ T3377] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 127.286264][ T590] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 127.295202][ T590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.303019][ T590] usb 5-1: Product: syz [ 127.306974][ T590] usb 5-1: Manufacturer: syz [ 127.311346][ T590] usb 5-1: SerialNumber: syz [ 127.316368][ T590] usb 5-1: config 0 descriptor?? [ 127.346215][ T2465] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 127.496173][ T587] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 127.576278][ T590] r8152 5-1:0.0: Unknown version 0x00c0 [ 127.706342][ T2465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.717311][ T2465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.779853][ T5] usb 5-1: USB disconnect, device number 17 [ 127.806495][ T2465] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 127.815431][ T2465] usb 2-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 127.823220][ T2465] usb 2-1: Product: syz [ 127.828058][ T2465] usb 2-1: config 0 descriptor?? [ 127.866323][ T587] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.877759][ T587] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.887418][ T587] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 127.896342][ T587] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.904723][ T587] usb 6-1: config 0 descriptor?? [ 127.946212][ T590] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 128.113963][ T2052] usb 4-1: USB disconnect, device number 12 [ 128.296999][ T2465] konepure 0003:1E7D:2DB4.0020: item fetching failed at offset 10/11 [ 128.305098][ T2465] konepure 0003:1E7D:2DB4.0020: parse failed [ 128.311248][ T590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.321373][ T590] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.334310][ T2465] konepure: probe of 0003:1E7D:2DB4.0020 failed with error -22 [ 128.344505][ T590] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 128.353396][ T590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.364743][ T590] usb 1-1: config 0 descriptor?? [ 128.388724][ T587] hid-steam 0003:28DE:1142.0021: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 128.436937][ T590] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 128.529287][ T590] usb 2-1: USB disconnect, device number 17 [ 128.652645][ T587] usb 6-1: USB disconnect, device number 2 [ 129.756257][ T2116] tipc: Disabling bearer [ 129.762031][ T2116] tipc: Left network mode [ 129.896134][ T1376] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 129.938984][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.945882][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.953320][ T3451] device bridge_slave_0 entered promiscuous mode [ 129.960142][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.967010][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.974110][ T3451] device bridge_slave_1 entered promiscuous mode [ 130.773567][ T587] usb 1-1: USB disconnect, device number 20 [ 130.887539][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.895695][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.904324][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.915635][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.924033][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.931747][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.939504][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.947270][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.954600][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.963380][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.978490][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.985363][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.993134][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.001455][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.009893][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.016761][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.025122][ T3451] device veth0_vlan entered promiscuous mode [ 131.280361][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.300225][ T3451] device veth1_macvtap entered promiscuous mode [ 131.309114][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.321715][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.342220][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.456349][ T1376] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 131.465469][ T1376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.474937][ T1376] usb 4-1: Product: syz [ 131.479066][ T1376] usb 4-1: Manufacturer: syz [ 131.483475][ T1376] usb 4-1: SerialNumber: syz [ 131.488968][ T1376] usb 4-1: config 0 descriptor?? [ 131.569811][ T2116] device veth1_macvtap left promiscuous mode [ 131.576121][ T2116] device veth0_vlan left promiscuous mode [ 131.827349][ T587] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 132.164854][ T1376] r8152 4-1:0.0: Unknown version 0x0000 [ 132.171381][ T1376] usb 4-1: USB disconnect, device number 13 [ 132.216471][ T587] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.226341][ T587] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.239750][ T587] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 132.248911][ T24] kauditd_printk_skb: 43 callbacks suppressed [ 132.248922][ T24] audit: type=1326 audit(1733259846.339:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 132.640618][ T24] audit: type=1326 audit(1733259846.339:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 132.733912][ T24] audit: type=1326 audit(1733259846.349:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 132.875283][ T587] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.889641][ T587] usb 7-1: config 0 descriptor?? [ 132.890676][ T24] audit: type=1326 audit(1733259846.349:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 132.917885][ T24] audit: type=1326 audit(1733259846.349:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 132.942155][ T24] audit: type=1326 audit(1733259846.349:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 132.943400][ T587] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 132.965805][ T24] audit: type=1326 audit(1733259846.349:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 133.008283][ T24] audit: type=1326 audit(1733259846.349:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 133.046567][ T24] audit: type=1326 audit(1733259846.349:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 133.100272][ T24] audit: type=1326 audit(1733259846.379:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 133.170378][ T3515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3515 comm=syz.3.1050 [ 133.186599][ T590] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 133.547023][ T590] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.571599][ T590] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.637605][ T590] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 133.684668][ T590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.764530][ T590] usb 2-1: config 0 descriptor?? [ 133.847741][ T590] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 135.884276][ T514] usb 7-1: USB disconnect, device number 2 [ 136.000297][ T587] usb 2-1: USB disconnect, device number 18 [ 137.146128][ T514] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 137.316218][ T587] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 137.409043][ T514] usb 7-1: Using ep0 maxpacket: 32 [ 137.526873][ T514] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 137.657054][ T514] usb 7-1: config 0 has no interface number 0 [ 137.777161][ T587] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.789971][ T587] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.826410][ T514] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 137.837793][ T587] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 137.847095][ T514] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.854945][ T587] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.866310][ T514] usb 7-1: Product: syz [ 137.871569][ T24] kauditd_printk_skb: 33 callbacks suppressed [ 137.871578][ T24] audit: type=1400 audit(1733259851.969:1202): avc: denied { shutdown } for pid=3596 comm="syz.1.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.897600][ T514] usb 7-1: Manufacturer: syz [ 137.902384][ T514] usb 7-1: SerialNumber: syz [ 137.909505][ T587] usb 6-1: config 0 descriptor?? [ 137.918513][ T514] usb 7-1: config 0 descriptor?? [ 137.946640][ T587] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 137.956652][ T514] smsc95xx v2.0.0 [ 138.176822][ T3612] Leaked POSIX lock on dev=0x0:0x29 ino=0x484 fl_owner=ffff8881109b9040 fl_flags=0x81 fl_type=0x1 fl_pid=3611 [ 138.191732][ T286] Leaked locks on dev=0x0:0x29 ino=0x484: [ 138.197573][ T286] POSIX: fl_owner=ffff8881109b9040 fl_flags=0x81 fl_type=0x1 fl_pid=3611 [ 138.233462][ T24] audit: type=1326 audit(1733259852.329:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 138.257067][ T24] audit: type=1326 audit(1733259852.329:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 138.266265][ T3540] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 138.280568][ T24] audit: type=1326 audit(1733259852.329:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 138.311635][ T24] audit: type=1326 audit(1733259852.329:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 138.335207][ T24] audit: type=1326 audit(1733259852.329:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 138.358540][ T24] audit: type=1326 audit(1733259852.329:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 138.382005][ T24] audit: type=1326 audit(1733259852.359:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 138.405384][ T24] audit: type=1326 audit(1733259852.389:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 138.429723][ T24] audit: type=1326 audit(1733259852.389:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 138.826162][ T3540] usb 4-1: Using ep0 maxpacket: 16 [ 138.836267][ T514] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 138.847155][ T514] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 138.876244][ T514] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 138.887009][ T514] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 138.915695][ T514] usb 7-1: USB disconnect, device number 3 [ 138.936990][ T3629] syz.0.1090[3629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.937041][ T3629] syz.0.1090[3629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.986261][ T3540] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 139.006392][ T3540] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 139.012181][ T3631] overlayfs: failed to resolve './file2': -2 [ 139.017018][ T3540] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 139.031198][ T3540] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 139.040752][ T3540] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 139.050289][ T3540] usb 4-1: config 1 interface 0 has no altsetting 0 [ 139.056748][ T3540] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 139.065636][ T3540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.116627][ T3540] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 139.731605][ T3540] scsi host1: usb-storage 4-1:1.0 [ 139.739271][ T3540] usb 4-1: USB disconnect, device number 14 [ 140.384166][ T590] usb 6-1: USB disconnect, device number 3 [ 142.101985][ T3540] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 142.111065][ T3709] tipc: Started in network mode [ 142.118774][ T3709] tipc: Own node identity 4, cluster identity 4711 [ 142.127194][ T3709] tipc: 32-bit node address hash set to 4 [ 142.396230][ T590] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 142.486246][ T3540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 142.497338][ T3540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 142.508503][ T3540] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.521326][ T3540] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.530246][ T3540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.546053][ T3540] usb 1-1: config 0 descriptor?? [ 142.566198][ T3686] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.756247][ T590] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.772439][ T590] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.792204][ T590] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.819076][ T590] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.836743][ T590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.857866][ T590] usb 6-1: config 0 descriptor?? [ 143.028932][ T3540] plantronics 0003:047F:FFFF.0022: unknown main item tag 0xd [ 143.047977][ T3540] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 143.066317][ T3540] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 143.233267][ T3540] usb 1-1: USB disconnect, device number 21 [ 143.355282][ T590] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 143.484765][ T590] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 143.796403][ T24] kauditd_printk_skb: 52 callbacks suppressed [ 143.796415][ T24] audit: type=1400 audit(1733259857.899:1264): avc: denied { write } for pid=3743 comm="syz.6.1133" name="ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.837249][ T24] audit: type=1400 audit(1733259857.939:1265): avc: denied { create } for pid=3745 comm="syz.0.1134" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.330344][ T590] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 144.616128][ T590] usb 2-1: Using ep0 maxpacket: 16 [ 144.676162][ C1] plantronics 0003:047F:FFFF.0023: usb_submit_urb(ctrl) failed: -1 [ 144.896239][ T590] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 144.909517][ T590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.925786][ T590] usb 2-1: Product: syz [ 144.933960][ T590] usb 2-1: Manufacturer: syz [ 144.941995][ T590] usb 2-1: SerialNumber: syz [ 144.951094][ T590] usb 2-1: config 0 descriptor?? [ 145.149364][ T3782] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3782 comm=syz.3.1147 [ 145.206238][ T590] r8152 2-1:0.0: Unknown version 0x0000 [ 145.548677][ T304] usb 2-1: USB disconnect, device number 19 [ 145.615641][ T24] audit: type=1400 audit(1733259859.709:1266): avc: denied { bind } for pid=3794 comm="syz.5.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.642650][ T24] audit: type=1400 audit(1733259859.739:1267): avc: denied { watch watch_reads } for pid=3796 comm="syz.6.1153" path="/29/file0" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 145.757307][ T2465] usb 6-1: USB disconnect, device number 4 [ 145.863814][ T3811] tipc: Started in network mode [ 145.868941][ T3811] tipc: Own node identity ac14140f, cluster identity 4711 [ 145.875964][ T3811] tipc: New replicast peer: 255.255.255.5 [ 145.881687][ T3811] tipc: Enabled bearer , priority 10 [ 145.947358][ T3812] syz.6.1156[3812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.947644][ T3812] syz.6.1156[3812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.142070][ T24] audit: type=1326 audit(1733259860.239:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3817 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 146.188697][ T24] audit: type=1326 audit(1733259860.269:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3817 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 146.227297][ T24] audit: type=1326 audit(1733259860.279:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3817 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 146.274282][ T24] audit: type=1326 audit(1733259860.279:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3817 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 146.312590][ T3828] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.325442][ T24] audit: type=1326 audit(1733259860.279:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3817 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 146.371309][ T24] audit: type=1326 audit(1733259860.279:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3817 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e4b0bf19 code=0x7ffc0000 [ 146.491232][ T3836] syz.1.1170[3836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.491287][ T3836] syz.1.1170[3836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.017800][ T2465] tipc: 32-bit node address hash set to f1414ac [ 147.267084][ T3872] syz.6.1182[3872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.267423][ T3872] syz.6.1182[3872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.596120][ T304] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 149.505091][ T3924] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.512280][ T3924] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.519582][ T3924] device bridge_slave_0 entered promiscuous mode [ 149.534060][ T3924] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.541245][ T3924] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.548232][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.567172][ T304] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.611332][ T3935] syz.6.1208[3935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.624343][ T3935] syz.6.1208[3935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.682995][ T3924] device bridge_slave_1 entered promiscuous mode [ 150.075818][ T304] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 150.084721][ T304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.095998][ T304] usb 4-1: config 0 descriptor?? [ 150.103571][ T24] kauditd_printk_skb: 39 callbacks suppressed [ 150.103582][ T24] audit: type=1326 audit(1733259864.199:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.5.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 150.138724][ T24] audit: type=1326 audit(1733259864.229:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.5.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 150.163123][ T24] audit: type=1326 audit(1733259864.229:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.5.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 150.187200][ T304] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 150.241280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.250896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.265261][ T307] device bridge_slave_1 left promiscuous mode [ 150.272385][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.288461][ T307] device bridge_slave_0 left promiscuous mode [ 150.300961][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.316727][ T307] device veth1_macvtap left promiscuous mode [ 150.330614][ T307] device veth0_vlan left promiscuous mode [ 150.546643][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.562339][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.602698][ T2116] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.609570][ T2116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.620422][ T3951] syz.5.1214[3951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.620721][ T3951] syz.5.1214[3951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.702530][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.879788][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.944437][ T2116] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.951512][ T2116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.011527][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.026198][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.046275][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.054137][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.068893][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.110430][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.122532][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.135991][ T3924] device veth0_vlan entered promiscuous mode [ 151.142255][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.147637][ T2465] usb 4-1: USB disconnect, device number 15 [ 151.151103][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.168831][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.181048][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.194890][ T3924] device veth1_macvtap entered promiscuous mode [ 151.205176][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.213792][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.224704][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.313780][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.322675][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.332430][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.341339][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.351020][ T3964] bridge0: port 3(bond_slave_1) entered blocking state [ 151.363508][ T3964] bridge0: port 3(bond_slave_1) entered disabled state [ 151.370775][ T3964] device bond_slave_1 entered promiscuous mode [ 151.724285][ T3985] syz.7.1222[3985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.724342][ T3985] syz.7.1222[3985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.213852][ T3991] syz.0.1226[3991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.225108][ T3991] syz.0.1226[3991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.293654][ T24] audit: type=1326 audit(1733259866.389:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.5.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 152.332064][ T24] audit: type=1326 audit(1733259866.429:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.5.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 152.479933][ T24] audit: type=1326 audit(1733259866.579:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.5.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 152.523935][ T24] audit: type=1326 audit(1733259866.579:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.5.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 152.566180][ T24] audit: type=1326 audit(1733259866.579:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.5.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 152.589898][ T24] audit: type=1326 audit(1733259866.609:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.5.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 152.616328][ T4000] syz.7.1228[4000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.616382][ T4000] syz.7.1228[4000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.915096][ T24] audit: type=1326 audit(1733259866.609:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.5.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 153.616550][ T4026] syz.5.1238[4026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.616676][ T4026] syz.5.1238[4026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.666566][ T4037] overlayfs: failed to resolve './file1': -2 [ 156.270321][ T24] kauditd_printk_skb: 45 callbacks suppressed [ 156.270334][ T24] audit: type=1326 audit(1733259870.359:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 156.358270][ T4083] syz.3.1254[4083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.358562][ T4083] syz.3.1254[4083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.433836][ T24] audit: type=1326 audit(1733259870.359:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 156.531903][ T24] audit: type=1326 audit(1733259870.359:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 156.555538][ T24] audit: type=1326 audit(1733259870.359:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 156.585545][ T24] audit: type=1326 audit(1733259870.359:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbb9adf19 code=0x7ffc0000 [ 156.999552][ T4114] xt_hashlimit: size too large, truncated to 1048576 [ 157.203931][ T4123] bpf_get_probe_write_proto: 2 callbacks suppressed [ 157.203950][ T4123] syz.0.1271[4123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.211174][ T4123] syz.0.1271[4123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.796122][ T878] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 158.009221][ T24] audit: type=1400 audit(1733259872.109:1373): avc: denied { map } for pid=4145 comm="syz.3.1282" path="/dev/ashmem" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.066112][ T878] usb 7-1: Using ep0 maxpacket: 32 [ 158.215647][ T4153] syz.3.1284[4153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.216179][ T4153] syz.3.1284[4153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.306328][ T4155] netlink: 'syz.7.1283': attribute type 4 has an invalid length. [ 158.326718][ T878] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.337419][ T878] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.351536][ T878] usb 7-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 158.367016][ T878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.378808][ T878] usb 7-1: config 0 descriptor?? [ 158.477858][ T4160] syz.5.1285[4160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.477896][ T4160] syz.5.1285[4160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.857008][ T878] greenasia 0003:0E8F:0012.0024: item fetching failed at offset 0/3 [ 158.879645][ T878] greenasia 0003:0E8F:0012.0024: parse failed [ 158.885553][ T878] greenasia: probe of 0003:0E8F:0012.0024 failed with error -22 [ 158.974280][ T4168] syz.7.1288[4168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.974339][ T4168] syz.7.1288[4168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.026879][ T24] audit: type=1404 audit(1733259873.129:1374): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 159.053436][ T24] audit: type=1404 audit(1733259873.149:1375): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 159.077259][ T878] usb 7-1: USB disconnect, device number 4 [ 159.079051][ T24] audit: type=1400 audit(1733259873.169:1376): avc: denied { map_create } for pid=4176 comm="syz.7.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 159.106327][ T24] audit: type=1400 audit(1733259873.169:1377): avc: denied { bpf } for pid=4176 comm="syz.7.1292" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.346137][ T877] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 159.698401][ T4193] syz.5.1296[4193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.698708][ T4193] syz.5.1296[4193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.966287][ T877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.988119][ T877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.997663][ T877] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 160.006508][ T877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.019537][ T877] usb 4-1: config 0 descriptor?? [ 160.366137][ T514] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 160.489864][ T877] hid-steam 0003:28DE:1142.0025: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 160.676266][ T514] usb 1-1: Using ep0 maxpacket: 8 [ 160.693720][ T2465] usb 4-1: USB disconnect, device number 16 [ 161.056170][ T514] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 16 [ 161.066338][ T514] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 16 [ 161.076477][ T514] usb 1-1: config 1 interface 0 has no altsetting 0 [ 161.236229][ T514] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.245175][ T514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.253406][ T514] usb 1-1: Product: syz [ 161.257479][ T514] usb 1-1: Manufacturer: syz [ 161.261831][ T514] usb 1-1: SerialNumber: syz [ 161.286241][ T4198] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.293104][ T4198] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.308259][ T24] kauditd_printk_skb: 66 callbacks suppressed [ 161.308270][ T24] audit: type=1326 audit(1733259875.409:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.7.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 161.337684][ T24] audit: type=1326 audit(1733259875.409:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.7.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 161.361106][ T24] audit: type=1326 audit(1733259875.409:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.7.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 161.413161][ T24] audit: type=1326 audit(1733259875.409:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.7.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 161.449373][ T24] audit: type=1326 audit(1733259875.409:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.7.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 161.475660][ T24] audit: type=1326 audit(1733259875.409:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.7.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 161.592869][ T24] audit: type=1326 audit(1733259875.409:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.7.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 161.935439][ T24] audit: type=1326 audit(1733259875.409:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.7.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 161.959094][ T24] audit: type=1326 audit(1733259875.409:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.7.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 161.986649][ T24] audit: type=1326 audit(1733259875.409:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.7.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 162.786133][ T3540] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 162.826293][ T514] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 162.833637][ T514] usb 1-1: USB disconnect, device number 22 [ 163.934923][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'. [ 164.126291][ T3540] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.135895][ T3540] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.148493][ T3540] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 164.157273][ T3540] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.166013][ T3540] usb 6-1: config 0 descriptor?? [ 164.216960][ T3540] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 164.226138][ T20] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 164.466176][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 164.626225][ T20] usb 1-1: unable to get BOS descriptor or descriptor too short [ 164.722188][ T20] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 164.730345][ T20] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 164.739195][ T20] usb 1-1: config 4 has no interface number 0 [ 164.832528][ T4315] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 165.086771][ T20] usb 1-1: string descriptor 0 read error: -22 [ 165.093820][ T20] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 165.187490][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.311660][ T20] uvcvideo: Found UVC 0.02 device (04f2:b746) [ 165.371067][ T20] uvcvideo: No valid video chain found. [ 165.409420][ T4325] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1348'. [ 165.500230][ T877] usb 1-1: USB disconnect, device number 23 [ 165.596608][ T4335] netlink: 'syz.6.1351': attribute type 4 has an invalid length. [ 166.205116][ T3540] usb 6-1: USB disconnect, device number 5 [ 166.355862][ T24] kauditd_printk_skb: 36 callbacks suppressed [ 166.388539][ T4354] netlink: 'syz.0.1353': attribute type 4 has an invalid length. [ 166.437451][ T24] audit: type=1400 audit(1733259880.419:1490): avc: denied { create } for pid=4350 comm="syz.6.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 166.460236][ T24] audit: type=1400 audit(1733259880.419:1491): avc: denied { write } for pid=4350 comm="syz.6.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 166.939187][ T24] audit: type=1400 audit(1733259881.039:1492): avc: denied { execute } for pid=4359 comm="syz.6.1360" name="file1" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 167.039537][ T24] audit: type=1400 audit(1733259881.069:1493): avc: denied { execute_no_trans } for pid=4359 comm="syz.6.1360" path="/74/file1" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 167.109832][ T24] audit: type=1326 audit(1733259881.189:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.6.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5332f00f19 code=0x7ffc0000 [ 167.134782][ T24] audit: type=1326 audit(1733259881.189:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.6.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5332f00f19 code=0x7ffc0000 [ 167.225386][ T24] audit: type=1326 audit(1733259881.199:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.6.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5332f00f19 code=0x7ffc0000 [ 167.250136][ T24] audit: type=1326 audit(1733259881.199:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.6.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5332f00f19 code=0x7ffc0000 [ 167.273980][ T24] audit: type=1326 audit(1733259881.199:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.6.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5332f00f19 code=0x7ffc0000 [ 167.297889][ T24] audit: type=1326 audit(1733259881.209:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.6.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5332f00f19 code=0x7ffc0000 [ 167.356015][ T4371] netem: change failed [ 167.382238][ T4366] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 167.736209][ T587] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 168.116481][ T587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.138894][ T587] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.151993][ T587] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 168.161200][ T587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.173173][ T587] usb 1-1: config 0 descriptor?? [ 168.216638][ T587] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 168.286286][ T3540] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 168.460766][ T4402] netlink: 'syz.3.1374': attribute type 4 has an invalid length. [ 169.999356][ T4415] bpf_get_probe_write_proto: 4 callbacks suppressed [ 169.999366][ T4415] syz.3.1378[4415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.005967][ T4415] syz.3.1378[4415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.153473][ T2052] usb 1-1: USB disconnect, device number 24 [ 171.736149][ T3540] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 171.893611][ T24] kauditd_printk_skb: 47 callbacks suppressed [ 171.893621][ T24] audit: type=1400 audit(1733259885.989:1547): avc: denied { create } for pid=4471 comm="syz.7.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.919016][ T24] audit: type=1400 audit(1733259885.999:1548): avc: denied { write } for pid=4471 comm="syz.7.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.948901][ T24] audit: type=1400 audit(1733259886.049:1549): avc: denied { read } for pid=4475 comm="syz.0.1402" name="usbmon0" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 171.973727][ T24] audit: type=1400 audit(1733259886.049:1550): avc: denied { open } for pid=4475 comm="syz.0.1402" path="/dev/usbmon0" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 172.006410][ T24] audit: type=1400 audit(1733259886.069:1551): avc: denied { ioctl } for pid=4475 comm="syz.0.1402" path="/dev/usbmon0" dev="devtmpfs" ino=150 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 172.037736][ T24] audit: type=1326 audit(1733259886.129:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.0.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 172.061492][ T24] audit: type=1326 audit(1733259886.139:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.0.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 172.085618][ T24] audit: type=1326 audit(1733259886.139:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.0.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 172.123618][ T24] audit: type=1326 audit(1733259886.139:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.0.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 172.149466][ T24] audit: type=1326 audit(1733259886.139:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.0.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 172.176208][ T3540] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.185929][ T3540] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.199237][ T3540] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 172.208710][ T3540] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.226609][ T3540] usb 7-1: config 0 descriptor?? [ 172.266706][ T3540] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 172.506169][ T2465] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 173.026112][ T2465] usb 1-1: Using ep0 maxpacket: 32 [ 173.245197][ T4510] netlink: 'syz.5.1413': attribute type 4 has an invalid length. [ 173.278392][ T2465] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.367561][ T2465] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.377455][ T2465] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 173.386795][ T2465] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.395435][ T2052] usb 7-1: USB disconnect, device number 6 [ 173.407609][ T2465] usb 1-1: config 0 descriptor?? [ 173.464406][ T2465] hub 1-1:0.0: USB hub found [ 173.831755][ T4524] syz.5.1418[4524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.832083][ T4524] syz.5.1418[4524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.986204][ T2465] hub 1-1:0.0: 1 port detected [ 174.106868][ T4538] tipc: New replicast peer: 255.255.255.255 [ 174.112803][ T4538] tipc: Enabled bearer , priority 10 [ 174.436689][ T4552] netlink: 'syz.5.1427': attribute type 4 has an invalid length. [ 174.586457][ T2465] usb 1-1: USB disconnect, device number 25 [ 174.596165][ T20] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 174.876137][ T20] usb 7-1: Using ep0 maxpacket: 16 [ 175.027407][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.044238][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.054120][ T20] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.142825][ T20] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 175.152093][ T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.164290][ T20] usb 7-1: config 0 descriptor?? [ 175.256369][ T4570] syz.0.1432[4570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.256741][ T4570] syz.0.1432[4570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.602349][ T4576] tmpfs: Unknown parameter 'nolazytime˙˙' [ 175.867127][ T20] koneplus 0003:1E7D:2E22.0026: item fetching failed at offset 0/2 [ 175.881757][ T20] koneplus 0003:1E7D:2E22.0026: parse failed [ 175.888077][ T20] koneplus: probe of 0003:1E7D:2E22.0026 failed with error -22 [ 175.961069][ T4595] netem: change failed [ 176.128908][ T4606] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1448'. [ 176.144932][ T4602] xt_hashlimit: size too large, truncated to 1048576 [ 176.156878][ T20] usb 7-1: USB disconnect, device number 7 [ 176.303532][ T4625] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1454'. [ 177.067657][ T24] kauditd_printk_skb: 55 callbacks suppressed [ 177.067669][ T24] audit: type=1400 audit(1733259891.169:1612): avc: denied { mount } for pid=4652 comm="syz.3.1465" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 177.101255][ T24] audit: type=1326 audit(1733259891.199:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 177.144673][ T24] audit: type=1326 audit(1733259891.199:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 177.247664][ T24] audit: type=1326 audit(1733259891.199:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3740d6af19 code=0x7ffc0000 [ 177.276307][ T4664] hub 9-0:1.0: USB hub found [ 177.288042][ T4664] hub 9-0:1.0: 1 port detected [ 177.430397][ T24] audit: type=1400 audit(1733259891.229:1616): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 177.620500][ T24] audit: type=1400 audit(1733259891.319:1617): avc: denied { write } for pid=4663 comm="syz.5.1470" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 177.667632][ T24] audit: type=1400 audit(1733259891.449:1618): avc: denied { map } for pid=4661 comm="syz.0.1468" path="socket:[30375]" dev="sockfs" ino=30375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 178.482354][ T24] audit: type=1400 audit(1733259891.709:1619): avc: denied { read } for pid=4674 comm="syz.5.1474" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 178.516278][ T24] audit: type=1400 audit(1733259891.709:1620): avc: denied { open } for pid=4674 comm="syz.5.1474" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 178.562945][ T24] audit: type=1400 audit(1733259891.709:1621): avc: denied { ioctl } for pid=4674 comm="syz.5.1474" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 179.610084][ T4733] syz.0.1495 uses obsolete (PF_INET,SOCK_PACKET) [ 179.682045][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.689090][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.700014][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.706960][ T4737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.714071][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.720960][ T4737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.922986][ T4737] device bridge0 entered promiscuous mode [ 180.934773][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.996120][ T878] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 181.466587][ T878] usb 6-1: Using ep0 maxpacket: 16 [ 181.746183][ T878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.757038][ T878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.766667][ T878] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 181.775652][ T878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.785296][ T878] usb 6-1: config 0 descriptor?? [ 182.287540][ T4823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1530'. [ 182.296768][ T4823] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 182.770517][ T878] hid-multitouch 0003:1FD2:6007.0027: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 182.794707][ T24] kauditd_printk_skb: 67 callbacks suppressed [ 182.794719][ T24] audit: type=1326 audit(1733259896.889:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.7.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 182.824258][ T24] audit: type=1326 audit(1733259896.889:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.7.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 182.848952][ T24] audit: type=1326 audit(1733259896.889:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.7.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 182.872917][ T24] audit: type=1326 audit(1733259896.899:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.7.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 182.915158][ T24] audit: type=1326 audit(1733259896.899:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.7.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 182.939835][ T24] audit: type=1326 audit(1733259896.919:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.7.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 183.070886][ T24] audit: type=1326 audit(1733259897.169:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.7.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 183.094333][ T24] audit: type=1326 audit(1733259897.169:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.7.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 183.117824][ T24] audit: type=1326 audit(1733259897.199:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.7.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f087ec78f19 code=0x7ffc0000 [ 183.141401][ T1376] usb 6-1: USB disconnect, device number 6 [ 183.156303][ T24] audit: type=1326 audit(1733259897.199:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.7.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f087ec78f53 code=0x7ffc0000 [ 183.356225][ T304] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 183.422948][ T4854] syz.6.1540[4854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.423326][ T4854] syz.6.1540[4854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.636703][ T4873] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4873 comm=syz.6.1547 [ 184.763792][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.777645][ T304] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.792007][ T304] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 184.801259][ T304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.820637][ T304] usb 4-1: config 0 descriptor?? [ 184.872447][ T304] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 185.718550][ T4897] syz.0.1555[4897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.718629][ T4897] syz.0.1555[4897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.419791][ T587] usb 4-1: USB disconnect, device number 17 [ 186.882487][ T4951] syz.7.1577[4951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.882799][ T4951] syz.7.1577[4951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.946193][ T20] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 187.376657][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.390180][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.418318][ T20] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 187.427860][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.449189][ T20] usb 1-1: config 0 descriptor?? [ 187.458348][ T2465] ================================================================== [ 187.466267][ T2465] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2f/0x120 [ 187.473955][ T2465] Read of size 8 at addr ffff888111c10988 by task kworker/1:8/2465 [ 187.481666][ T2465] [ 187.483861][ T2465] CPU: 1 PID: 2465 Comm: kworker/1:8 Not tainted 5.10.226-syzkaller-00326-gab7c0abef9cf #0 [ 187.493646][ T2465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 187.503569][ T2465] Workqueue: events binder_deferred_func [ 187.509047][ T2465] Call Trace: [ 187.512151][ T2465] dump_stack_lvl+0x1e2/0x24b [ 187.516657][ T2465] ? bfq_pos_tree_add_move+0x43b/0x43b [ 187.521966][ T2465] ? panic+0x812/0x812 [ 187.525861][ T2465] print_address_description+0x81/0x3b0 [ 187.531235][ T2465] ? ____kasan_slab_free+0x12c/0x160 [ 187.536373][ T2465] kasan_report+0x179/0x1c0 [ 187.540872][ T2465] ? __list_del_entry_valid+0x2f/0x120 [ 187.546293][ T2465] ? __list_del_entry_valid+0x2f/0x120 [ 187.551565][ T2465] __asan_report_load8_noabort+0x14/0x20 [ 187.557038][ T2465] __list_del_entry_valid+0x2f/0x120 [ 187.562149][ T2465] binder_release_work+0xcd/0x680 [ 187.567018][ T2465] binder_deferred_func+0x1847/0x1bc0 [ 187.572223][ T2465] ? read_word_at_a_time+0x12/0x20 [ 187.577172][ T2465] process_one_work+0x6dc/0xbd0 [ 187.581853][ T2465] worker_thread+0xaea/0x1510 [ 187.586366][ T2465] ? _raw_spin_lock+0x1b0/0x1b0 [ 187.591058][ T2465] kthread+0x34b/0x3d0 [ 187.594964][ T2465] ? worker_clr_flags+0x180/0x180 [ 187.599821][ T2465] ? kthread_blkcg+0xd0/0xd0 [ 187.604245][ T2465] ret_from_fork+0x1f/0x30 [ 187.608506][ T2465] [ 187.610665][ T2465] Allocated by task 4968: [ 187.614844][ T2465] ____kasan_kmalloc+0xdb/0x110 [ 187.619527][ T2465] __kasan_kmalloc+0x9/0x10 [ 187.623863][ T2465] kmem_cache_alloc_trace+0x18a/0x2e0 [ 187.629069][ T2465] binder_thread_write+0x9ce/0x6c70 [ 187.634099][ T2465] binder_ioctl_write_read+0x216/0x6a80 [ 187.639598][ T2465] binder_ioctl+0x314/0x1e00 [ 187.644018][ T2465] __se_sys_ioctl+0x114/0x190 [ 187.648540][ T2465] __x64_sys_ioctl+0x7b/0x90 [ 187.652950][ T2465] do_syscall_64+0x34/0x70 [ 187.657213][ T2465] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 187.662923][ T2465] [ 187.665094][ T2465] Freed by task 2465: [ 187.668923][ T2465] kasan_set_track+0x4b/0x70 [ 187.673359][ T2465] kasan_set_free_info+0x23/0x40 [ 187.678134][ T2465] ____kasan_slab_free+0x121/0x160 [ 187.683068][ T2465] __kasan_slab_free+0x11/0x20 [ 187.687666][ T2465] slab_free_freelist_hook+0xc0/0x190 [ 187.692877][ T2465] kfree+0xc3/0x270 [ 187.696518][ T2465] binder_free_ref+0x128/0x260 [ 187.701151][ T2465] binder_deferred_func+0x171c/0x1bc0 [ 187.706328][ T2465] process_one_work+0x6dc/0xbd0 [ 187.711011][ T2465] worker_thread+0xaea/0x1510 [ 187.715521][ T2465] kthread+0x34b/0x3d0 [ 187.719428][ T2465] ret_from_fork+0x1f/0x30 [ 187.723674][ T2465] [ 187.725855][ T2465] The buggy address belongs to the object at ffff888111c10980 [ 187.725855][ T2465] which belongs to the cache kmalloc-64 of size 64 [ 187.739582][ T2465] The buggy address is located 8 bytes inside of [ 187.739582][ T2465] 64-byte region [ffff888111c10980, ffff888111c109c0) [ 187.752409][ T2465] The buggy address belongs to the page: [ 187.757901][ T2465] page:ffffea0004470400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111c10 [ 187.767949][ T2465] flags: 0x4000000000000200(slab) [ 187.772809][ T2465] raw: 4000000000000200 ffffea0004325500 0000001200000011 ffff888100043800 [ 187.781310][ T2465] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 187.789723][ T2465] page dumped because: kasan: bad access detected [ 187.795984][ T2465] page_owner tracks the page as allocated [ 187.801538][ T2465] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1552, ts 61958150572, free_ts 61807712099 [ 187.817334][ T2465] prep_new_page+0x166/0x180 [ 187.821754][ T2465] get_page_from_freelist+0x2d8c/0x2f30 [ 187.827135][ T2465] __alloc_pages_nodemask+0x435/0xaf0 [ 187.832342][ T2465] new_slab+0x80/0x400 [ 187.836248][ T2465] ___slab_alloc+0x302/0x4b0 [ 187.840673][ T2465] __slab_alloc+0x63/0xa0 [ 187.844837][ T2465] __kmalloc+0x204/0x330 [ 187.848918][ T2465] kvmalloc_node+0x82/0x130 [ 187.853258][ T2465] f2fs_build_node_manager+0xf05/0x2120 [ 187.858642][ T2465] f2fs_fill_super+0x609f/0x7d90 [ 187.863429][ T2465] mount_bdev+0x262/0x370 [ 187.867585][ T2465] f2fs_mount+0x34/0x40 [ 187.871577][ T2465] legacy_get_tree+0xf1/0x190 [ 187.876087][ T2465] vfs_get_tree+0x88/0x290 [ 187.880337][ T2465] do_new_mount+0x2ba/0xb30 [ 187.884849][ T2465] path_mount+0x56f/0xcb0 [ 187.889010][ T2465] page last free stack trace: [ 187.893527][ T2465] free_unref_page_prepare+0x2ae/0x2d0 [ 187.898820][ T2465] free_the_page+0x9e/0x370 [ 187.903169][ T2465] __free_pages+0x67/0xc0 [ 187.907328][ T2465] __vunmap+0x7bc/0x8f0 [ 187.911323][ T2465] vfree+0x5c/0x80 [ 187.914884][ T2465] kvfree+0x26/0x40 [ 187.918525][ T2465] bpf_map_area_free+0x15/0x20 [ 187.923122][ T2465] htab_map_free+0x547/0x6a0 [ 187.927551][ T2465] bpf_map_free_deferred+0xb3/0x110 [ 187.932584][ T2465] process_one_work+0x6dc/0xbd0 [ 187.937270][ T2465] worker_thread+0xaea/0x1510 [ 187.941880][ T2465] kthread+0x34b/0x3d0 [ 187.945775][ T2465] ret_from_fork+0x1f/0x30 [ 187.950025][ T2465] [ 187.952201][ T2465] Memory state around the buggy address: [ 187.957669][ T2465] ffff888111c10880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 187.965566][ T2465] ffff888111c10900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 187.973463][ T2465] >ffff888111c10980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 187.981356][ T2465] ^ [ 187.985531][ T2465] ffff888111c10a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 187.993424][ T2465] ffff888111c10a80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 188.001329][ T2465] ================================================================== [ 188.009302][ T2465] Disabling lock debugging due to kernel taint [ 188.015894][ T2465] general protection fault, probably for non-canonical address 0xfc73fc4180000134: 0000 [#1] PREEMPT SMP KASAN [ 188.019015][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 188.019027][ T24] audit: type=1400 audit(2000000001.369:1749): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 188.027406][ T2465] KASAN: maybe wild-memory-access in range [0xe3a0020c000009a0-0xe3a0020c000009a7] [ 188.027418][ T2465] CPU: 1 PID: 2465 Comm: kworker/1:8 Tainted: G B 5.10.226-syzkaller-00326-gab7c0abef9cf #0 [ 188.027423][ T2465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.027437][ T2465] Workqueue: events binder_deferred_func [ 188.027453][ T2465] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 188.027469][ T2465] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 3c 93 51 ff 49 8b 17 4c 39 f2 75 [ 188.038120][ T24] audit: type=1400 audit(2000000001.369:1750): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.054925][ T2465] RSP: 0018:ffffc90000f47c20 EFLAGS: 00010a02 [ 188.054936][ T2465] RAX: 1c74004180000134 RBX: ffff888100be2c00 RCX: ffffffff8256c439 [ 188.054942][ T2465] RDX: dead000000000122 RSI: 0000000000000286 RDI: ffff888111c10980 [ 188.054948][ T2465] RBP: ffffc90000f47c40 R08: ffffffff813e2a3b R09: 0000000000000003 [ 188.054954][ T2465] R10: fffffbfff0e11248 R11: dffffc0000000001 R12: dffffc0000000000 [ 188.054961][ T2465] R13: ffff888111c10980 R14: ffff888111c10980 R15: e3a0020c000009a1 [ 188.054976][ T2465] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 188.064538][ T24] audit: type=1400 audit(2000000001.369:1751): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 188.075226][ T2465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.075233][ T2465] CR2: 0000000000000000 CR3: 0000000113f59000 CR4: 00000000003506a0 [ 188.075241][ T2465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.075247][ T2465] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.075250][ T2465] Call Trace: [ 188.075268][ T2465] ? __die_body+0x62/0xb0 [ 188.075276][ T2465] ? die_addr+0x9f/0xd0 [ 188.075287][ T2465] ? exc_general_protection+0x3ff/0x490 [ 188.075298][ T2465] ? check_panic_on_warn+0x65/0xb0 [ 188.075307][ T2465] ? asm_exc_general_protection+0x1e/0x30 [ 188.075315][ T2465] ? check_panic_on_warn+0x5b/0xb0 [ 188.075326][ T2465] ? __list_del_entry_valid+0x49/0x120 [ 188.075337][ T2465] ? __list_del_entry_valid+0x75/0x120 [ 188.075345][ T2465] binder_release_work+0xcd/0x680 [ 188.075360][ T2465] binder_deferred_func+0x1847/0x1bc0 [ 188.295611][ T2465] ? read_word_at_a_time+0x12/0x20 [ 188.300538][ T2465] process_one_work+0x6dc/0xbd0 [ 188.305227][ T2465] worker_thread+0xaea/0x1510 [ 188.309844][ T2465] ? _raw_spin_lock+0x1b0/0x1b0 [ 188.314525][ T2465] kthread+0x34b/0x3d0 [ 188.318430][ T2465] ? worker_clr_flags+0x180/0x180 [ 188.323289][ T2465] ? kthread_blkcg+0xd0/0xd0 [ 188.327718][ T2465] ret_from_fork+0x1f/0x30 [ 188.331968][ T2465] Modules linked in: [ 188.336390][ T2465] ---[ end trace 633dcf957c20e9ae ]--- [ 188.342132][ T2465] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 188.348036][ T2465] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 3c 93 51 ff 49 8b 17 4c 39 f2 75 [ 188.367703][ T2465] RSP: 0018:ffffc90000f47c20 EFLAGS: 00010a02 [ 188.373541][ T2465] RAX: 1c74004180000134 RBX: ffff888100be2c00 RCX: ffffffff8256c439 [ 188.381377][ T2465] RDX: dead000000000122 RSI: 0000000000000286 RDI: ffff888111c10980 [ 188.389170][ T2465] RBP: ffffc90000f47c40 R08: ffffffff813e2a3b R09: 0000000000000003 [ 188.397238][ T2465] R10: fffffbfff0e11248 R11: dffffc0000000001 R12: dffffc0000000000 [ 188.405383][ T2465] R13: ffff888111c10980 R14: ffff888111c10980 R15: e3a0020c000009a1 [ 188.413298][ T2465] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 188.416180][ T304] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 188.422329][ T2465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.422345][ T2465] CR2: 0000000000000000 CR3: 0000000113f59000 CR4: 00000000003506a0 [ 188.443918][ T2465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.451735][ T2465] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.459547][ T2465] Kernel panic - not syncing: Fatal exception [ 188.459775][ T24] audit: type=1400 audit(2000000001.369:1752): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 188.465639][ T2465] Kernel Offset: disabled [ 188.491892][ T2465] Rebooting in 86400 seconds..