last executing test programs: 51.033531734s ago: executing program 1 (id=625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000098000040"]) 50.901908566s ago: executing program 1 (id=629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xab}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 50.709115159s ago: executing program 1 (id=634): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$eJzs3d1rW+cZAPBHku3YibN8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxb8TLLkbHkLDa5cLa7XOxibLRQetH7/gW9aa4aAqXXLb3tVUloUxfakoKKjiTHH5KjtraU+Px+cKJzzqvoeV/Zz+uj97xHJ4DUOlf7JxMxHBHvRMSx+ubWJ5yrP6w/vj1TWzJRrV75KJM8r7bdfGrz/x2JiLWIGIyIP/424m+ZnXHLK6vz08ViYamxna8sLObLK6sXry9MzxXmCjfGJi9NTU2OToxP7Vlb7/7nH3cvv/H7gdc/+/fD+/99681atYYbZZvbsZfqTe+PE5v29UXEr/YjWA/kGu0Z6nVF+EZqP7/vRsT5JP+PRS75aXbmyb7WDNhv1Wq1+mX1ULvitSpwYGWTY+BMdiQi6uvZ7MhI/Rj+e3E4WyyVKz+7Vlq+MVs/Vj4e/dlr14uF0cZnhePRn6ltjyXrT7fHt21PRCTHwP/LDSXbIzOl4mx3uzpgmyPb8v/TXD3/gZTo/CM/cNDIf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DerXK/6M9qAfQfbv9/R/oYj2ArvrD5cu1pdq8/n325sryfOnmxdlCeX5kYXlmZKa0tDgyVyrNJdfsLDzr9Yql0uLYz2P5Vr5SKFfy5ZXVqwul5RuVq8l1/VcL/V1pFdCJE2fvvZeJiLVfDCVLbPqTL1fhYKtWM9Hra5CB3sj1ugMCesapP0ivr/EZv+2XhAEvthZf0bth8Ejbol/H4r5UB+iC7G6FTx50ryJA11047fwfpJXxf0gv4/+QXo7xgd3G/6NxL7+WjP/DC2vX8X/gQBtuc/+vo5vu3TUaEd+JiHdz/Yea9/oCDoLsh5nG8f+FYz8a3l46kPk8OUUwEBH/fOXKS7emK5Wlsdr+jzf2V15u7B/vRf2B9raO8DXztJnHAEB6rT++PdNcuhn30W/qkxB2xu9rjE0OJkcwh9czW+YqZPZo7sLanYg41Sp+pnG/8/qZj8PruR3xTzYeM/WXSOrbl9w3vTvxT2+K/8NN8c9863cF0uFerf8ZbZV/2SSnYyP/tvY/w3s0d6LZ/zXnXG+O3+z/cm36v7Mdxvj7q/9qdXo3mez96E7EmZb9bzPeYBJre/xa3S50GP/hX/70/XZl1dfqr9MqflNtLV9ZWMyXV1YvXm/WYvLS1NTk6MT4VD4Zo843R6p3+uWpt++3i19rf0Ob9r+/o/1DjTr9pMP2f/GDB38+t0v8H59v/ft3Mnnc9v5Xqxt1+GmH8T8Z/+Cv7cpq8WfbvP/ZVvGjWRox0WH88v9/59phAHiOlFdW56eLxcKSFStWnu+Vvuhi0Gf1HGvd6aCAffM06XtdEwAAAAAAAAAAAKBT7Wb/3tvD6cS9biMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEHwVQAAAP//QUvQlg==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80000, 0x0) 50.522522172s ago: executing program 1 (id=641): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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") epoll_create(0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x145142, 0x16f) sendfile(r0, r0, 0x0, 0x800000009) 50.358084274s ago: executing program 1 (id=643): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x8}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000051}, 0x20004090) 50.126770937s ago: executing program 1 (id=644): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x1, 0x0, 0x3, 0x4005, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0xa, @in=@local, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 50.080722528s ago: executing program 32 (id=644): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x1, 0x0, 0x3, 0x4005, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0xa, @in=@local, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 38.402471681s ago: executing program 0 (id=904): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f00000005c0), 0x3, 0x570, &(0x7f0000000680)="$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") syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x20c0085, &(0x7f0000006140)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRES8, @ANYRESHEX, @ANYBLOB="d06749d0e314fb1f333933fcb9dd3082dfa177a16dc905ccddbfe8679e2583ea5e0f62b11673e5", @ANYRES8=0x0, @ANYRESDEC, @ANYRESDEC], 0x1, 0x5514, &(0x7f0000000c00)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 38.138824925s ago: executing program 0 (id=906): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r0}, 0x18) io_setup(0xe86c, &(0x7f0000000140)=0x0) io_getevents(r1, 0x4, 0x4, &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000180)) 38.018145277s ago: executing program 0 (id=912): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$TCSETSW2(r1, 0x5425, 0x0) 37.468151385s ago: executing program 0 (id=926): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file3\x00', 0x400) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x5) 37.10683392s ago: executing program 0 (id=931): setresgid(0xee00, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) write$tcp_congestion(r0, 0x0, 0xee0000) 36.990344182s ago: executing program 0 (id=937): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x7af, 0x1, 0x1}, [@mark={0xc, 0x15, {0x350759, 0xffff}}]}, 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8"], 0xb8}}, 0x0) 36.900583303s ago: executing program 33 (id=937): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x7af, 0x1, 0x1}, [@mark={0xc, 0x15, {0x350759, 0xffff}}]}, 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8"], 0xb8}}, 0x0) 18.87289104s ago: executing program 3 (id=1442): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e26, 0x7, @empty, 0xb}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x4e25, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {0x2, 0x5, 0x3, 0x6, 0x9, 0xbffffffffffffffd, 0x5, 0x2000000000000000}, {0x800000fa, 0x1000000000008, 0x2, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4cf, 0x6c}, 0x2, @in6=@local, 0x3506, 0x1, 0x2, 0x0, 0x4, 0xffffffff}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', './file0'}, 0xb) 18.811033051s ago: executing program 3 (id=1431): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 18.810637281s ago: executing program 3 (id=1432): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) 18.698775193s ago: executing program 3 (id=1436): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000440)={[{@barrier_val={'barrier', 0x3d, 0x4}}, {}, {@nobh}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@data_err_ignore}]}, 0x2, 0x3eb, &(0x7f0000000880)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x78) 18.548754755s ago: executing program 3 (id=1443): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 18.456597797s ago: executing program 3 (id=1450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 18.412932337s ago: executing program 34 (id=1450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 9.358330341s ago: executing program 4 (id=1653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x18) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) unshare(0x62040200) 9.304831922s ago: executing program 4 (id=1654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.246201333s ago: executing program 4 (id=1656): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x3d, 0x0, 0x3}]}) 9.148382044s ago: executing program 4 (id=1662): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file3\x00', 0x400) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x5) 8.973161587s ago: executing program 4 (id=1665): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x20) 8.860692628s ago: executing program 4 (id=1668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e01"], 0x0) 8.830839269s ago: executing program 35 (id=1668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e01"], 0x0) 3.002658225s ago: executing program 6 (id=1747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x14, 0x41, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x0, 0xb}, {0x7, 0x0, 0x0, 0x11, 0x8, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x2, 0x8, 0xb7, 0x6, 0x8, 0x7, 0x0, 0x9, 0x9, 0x2, 0x1, 0x16, 0x2}, {0x0, 0xf712, 0x2, 0xfe, 0x10, 0x84, 0xe, 0x0, 0xff, 0x6, 0x3, 0x81, 0x3}, {0x9, 0xfffd, 0x83, 0x7, 0xff, 0x1, 0x40, 0x0, 0x6, 0x1, 0xff, 0x11, 0x800000000ed0}], 0x1007}) 2.873785147s ago: executing program 6 (id=1761): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 2.794643028s ago: executing program 6 (id=1752): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=""/19, 0x13}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.99479643s ago: executing program 6 (id=1766): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r1 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.864305142s ago: executing program 6 (id=1763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.786848293s ago: executing program 6 (id=1764): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0xfffd, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x7, 0x4}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x3, 0x8, 0x8, 0x3fa, 0x8, 0xaed0, 0x2, 0x6, 0x3, 0x9, 0x200, 0xee47}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.32370476s ago: executing program 8 (id=1789): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48d}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 1.269437311s ago: executing program 8 (id=1790): r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) 1.269019731s ago: executing program 8 (id=1791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) 1.208866962s ago: executing program 8 (id=1793): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000ad000000000040000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000004c0)='Tm', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 941.151406ms ago: executing program 8 (id=1796): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000e5000000850000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x31, 0x0}, 0x0) 904.071946ms ago: executing program 8 (id=1798): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "aef0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="601200010000d5"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 837.426227ms ago: executing program 7 (id=1805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 826.038437ms ago: executing program 7 (id=1806): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mincore(&(0x7f0000f0b000/0x1000)=nil, 0x1000, &(0x7f00000008c0)=""/232) 766.634778ms ago: executing program 7 (id=1807): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 720.231639ms ago: executing program 7 (id=1808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 674.66251ms ago: executing program 7 (id=1809): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 538.353052ms ago: executing program 2 (id=1814): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0xb18a91bcbebec8c0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 525.105202ms ago: executing program 7 (id=1815): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 523.204712ms ago: executing program 2 (id=1816): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r2, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x7a, r2}) 458.711833ms ago: executing program 2 (id=1818): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 458.020273ms ago: executing program 2 (id=1821): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 425.890534ms ago: executing program 2 (id=1823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 382.252004ms ago: executing program 2 (id=1826): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000001540)={0xffffffffffffffff}) read$FUSE(r2, &(0x7f0000001580)={0x2020}, 0xa14) 109.708658ms ago: executing program 5 (id=1833): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0xc, 0x100) 50.658609ms ago: executing program 5 (id=1834): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mincore(&(0x7f00001d1000/0x1000)=nil, 0x1000, 0x0) 50.475619ms ago: executing program 5 (id=1835): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/70, 0x337000, 0x1000, 0x0, 0x2}, 0x20) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2}, 0x60) 50.269929ms ago: executing program 5 (id=1836): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 36.388509ms ago: executing program 5 (id=1837): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1fd}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 0s ago: executing program 5 (id=1838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x80, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8cb97eb, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x20) kernel console output (not intermixed with test programs): d_printk_skb: 6 callbacks suppressed [ 44.210176][ T28] audit: type=1400 audit(1747271526.785:374): avc: denied { read write } for pid=1467 comm="syz.4.468" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.254976][ T28] audit: type=1400 audit(1747271526.825:375): avc: denied { open } for pid=1467 comm="syz.4.468" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.305163][ T28] audit: type=1400 audit(1747271526.825:376): avc: denied { ioctl } for pid=1467 comm="syz.4.468" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.317965][ T1464] loop2: detected capacity change from 0 to 40427 [ 44.337075][ T1470] loop1: detected capacity change from 0 to 512 [ 44.347903][ T1464] F2FS-fs (loop2): fault_injection options not supported [ 44.375352][ T28] audit: type=1400 audit(1747271526.915:377): avc: denied { setopt } for pid=1467 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.409544][ T1470] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.470: casefold flag without casefold feature [ 44.423298][ T1464] F2FS-fs (loop2): invalid crc value [ 44.423426][ T1470] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.470: couldn't read orphan inode 15 (err -117) [ 44.433510][ T1474] loop3: detected capacity change from 0 to 512 [ 44.447666][ T1474] EXT4-fs: Ignoring removed orlov option [ 44.465873][ T1470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.479777][ T1474] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.490080][ T1474] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.506715][ T1464] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.552943][ T1464] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 44.595829][ T283] EXT4-fs (loop3): unmounting filesystem. [ 44.623623][ T285] syz-executor: attempt to access beyond end of device [ 44.623623][ T285] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.660406][ T1485] loop3: detected capacity change from 0 to 128 [ 44.685052][ T1485] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.798560][ T1492] loop3: detected capacity change from 0 to 1024 [ 44.815671][ T1492] EXT4-fs: Ignoring removed oldalloc option [ 44.823695][ T1492] EXT4-fs: Ignoring removed orlov option [ 44.848431][ T1492] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 18: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 44.865326][ T1492] EXT4-fs (loop3): Remounting filesystem read-only [ 45.065267][ T1510] loop1: detected capacity change from 0 to 512 [ 45.092427][ T1510] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.490: casefold flag without casefold feature [ 45.095933][ T1509] loop4: detected capacity change from 0 to 8192 [ 45.105609][ T1510] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.490: couldn't read orphan inode 15 (err -117) [ 45.436272][ T287] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 45.456263][ T6] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.627580][ T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.643591][ T1526] loop1: detected capacity change from 0 to 512 [ 45.650154][ T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.656651][ T1526] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.671786][ T6] usb 4-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 45.682517][ T1526] EXT4-fs: Ignoring removed bh option [ 45.692920][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.701727][ T1526] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.702751][ T287] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 45.722561][ T6] usb 4-1: Product: syz [ 45.727053][ T6] usb 4-1: Manufacturer: syz [ 45.731672][ T6] usb 4-1: SerialNumber: syz [ 45.737614][ T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.746684][ T6] usb 4-1: config 0 descriptor?? [ 45.761112][ T287] usb 5-1: config 0 descriptor?? [ 45.769422][ T1526] EXT4-fs (loop1): 1 truncate cleaned up [ 45.847068][ T1531] loop2: detected capacity change from 0 to 256 [ 45.856438][ T1531] FAT-fs (loop2): bogus number of FAT sectors [ 45.867088][ T1531] FAT-fs (loop2): Can't find a valid FAT filesystem [ 46.003279][ T1537] loop1: detected capacity change from 0 to 512 [ 46.044030][ T1537] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.055241][ T1537] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.064051][ T1537] EXT4-fs (loop1): Test dummy encryption mode enabled [ 46.071551][ T1537] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.090780][ T1537] EXT4-fs (loop1): 1 truncate cleaned up [ 46.198089][ T287] usbhid 5-1:0.0: can't add hid device: -71 [ 46.198219][ T1544] loop1: detected capacity change from 0 to 1024 [ 46.209936][ T287] usbhid: probe of 5-1:0.0 failed with error -71 [ 46.219343][ T1547] loop0: detected capacity change from 0 to 512 [ 46.231095][ T287] usb 5-1: USB disconnect, device number 3 [ 46.234353][ T1544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.247176][ T1544] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 46.259419][ T1547] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.494: casefold flag without casefold feature [ 46.274920][ T1544] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 46.276266][ T1547] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.494: couldn't read orphan inode 15 (err -117) [ 46.285166][ T1544] EXT4-fs error (device loop1): ext4_get_journal_inode:5710: comm syz.1.492: inode #1: comm syz.1.492: iget: illegal inode # [ 46.320535][ T1544] EXT4-fs (loop1): no journal found [ 46.555842][ T28] audit: type=1326 audit(1747271529.125:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1558 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085138e969 code=0x7ffc0000 [ 46.586588][ T28] audit: type=1326 audit(1747271529.125:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1558 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085138e969 code=0x7ffc0000 [ 46.642752][ T28] audit: type=1326 audit(1747271529.135:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1558 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f085138e969 code=0x7ffc0000 [ 46.681994][ T19] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 46.706280][ T28] audit: type=1326 audit(1747271529.135:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1558 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085138e969 code=0x7ffc0000 [ 46.732167][ T28] audit: type=1326 audit(1747271529.165:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1558 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085138e969 code=0x7ffc0000 [ 46.887293][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 46.919296][ T19] usb 3-1: config index 0 descriptor too short (expected 8192, got 72) [ 46.927848][ T28] audit: type=1400 audit(1747271529.495:383): avc: denied { mounton } for pid=1574 comm="syz.0.509" path="/102/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 46.942148][ T1576] loop1: detected capacity change from 0 to 512 [ 46.955492][ T19] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.981262][ T1579] loop0: detected capacity change from 0 to 512 [ 46.996559][ T19] usb 3-1: config 0 has no interfaces? [ 47.022079][ T19] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 47.023743][ T1576] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.041842][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.041869][ T19] usb 3-1: Product: syz [ 47.041884][ T19] usb 3-1: Manufacturer: syz [ 47.041897][ T19] usb 3-1: SerialNumber: syz [ 47.048911][ T19] usb 3-1: config 0 descriptor?? [ 47.087865][ T1579] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.186991][ T6] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 47.197693][ T6] asix: probe of 4-1:0.0 failed with error -71 [ 47.210453][ T6] usb 4-1: USB disconnect, device number 7 [ 47.294471][ T24] usb 3-1: USB disconnect, device number 4 [ 47.714865][ T1589] loop1: detected capacity change from 0 to 16 [ 47.718806][ T1591] loop4: detected capacity change from 0 to 512 [ 47.730489][ T1591] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.733988][ T1589] erofs: (device loop1): mounted with root inode @ nid 36. [ 47.748635][ T1591] EXT4-fs: Ignoring removed bh option [ 47.756386][ T1591] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.782235][ T1591] EXT4-fs (loop4): 1 truncate cleaned up [ 47.835620][ T1600] loop2: detected capacity change from 0 to 512 [ 47.910439][ T1600] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.516: casefold flag without casefold feature [ 47.924342][ T1600] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.516: couldn't read orphan inode 15 (err -117) [ 47.996684][ T1589] syz.1.514: attempt to access beyond end of device [ 47.996684][ T1589] loop1: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 48.053463][ T1619] loop4: detected capacity change from 0 to 128 [ 48.100912][ T1619] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.154211][ T1619] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.193991][ T1631] loop3: detected capacity change from 0 to 512 [ 48.202111][ T1631] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.208904][ T1631] EXT4-fs: Ignoring removed bh option [ 48.235347][ T1631] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.254538][ T1631] EXT4-fs (loop3): 1 truncate cleaned up [ 48.522791][ T1640] loop1: detected capacity change from 0 to 40427 [ 48.562330][ T1640] F2FS-fs (loop1): invalid crc value [ 48.583201][ T1640] F2FS-fs (loop1): Found nat_bits in checkpoint [ 48.638426][ T1640] F2FS-fs (loop1): Start checkpoint disabled! [ 48.645788][ T1640] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 48.707628][ T1640] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 48.763621][ T1646] loop3: detected capacity change from 0 to 128 [ 48.764639][ T800] kworker/u4:5: attempt to access beyond end of device [ 48.764639][ T800] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 48.800254][ T1646] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.818041][ T1649] loop2: detected capacity change from 0 to 1024 [ 48.825189][ T1649] EXT4-fs: Ignoring removed bh option [ 49.002642][ T1659] loop1: detected capacity change from 0 to 128 [ 49.023682][ T1659] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.050883][ T1662] netlink: 96 bytes leftover after parsing attributes in process `syz.3.541'. [ 49.123258][ T8] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.272527][ T1691] loop3: detected capacity change from 0 to 512 [ 49.299708][ T1691] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.553: casefold flag without casefold feature [ 49.346897][ T1691] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.553: couldn't read orphan inode 15 (err -117) [ 49.392851][ T1697] bridge0: port 3(vlan2) entered blocking state [ 49.403206][ T1698] loop1: detected capacity change from 0 to 128 [ 49.416530][ T1697] bridge0: port 3(vlan2) entered disabled state [ 49.425696][ T1698] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.446676][ T1698] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.588428][ T1708] loop4: detected capacity change from 0 to 512 [ 49.611643][ T1709] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 49.621202][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 49.621219][ T28] audit: type=1400 audit(1747271532.185:387): avc: denied { relabelfrom } for pid=1707 comm="syz.2.561" name="" dev="pipefs" ino=21305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 49.679700][ T1711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.562'. [ 49.682232][ T28] audit: type=1400 audit(1747271532.235:388): avc: denied { relabelto } for pid=1707 comm="syz.2.561" name="" dev="pipefs" ino=21305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 49.749931][ T1708] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #16: comm syz.4.560: corrupted inode contents [ 49.790856][ T1708] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #16: comm syz.4.560: mark_inode_dirty error [ 49.803077][ T1708] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #16: comm syz.4.560: corrupted inode contents [ 49.815881][ T1708] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.560: mark_inode_dirty error [ 49.828310][ T1708] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #16: comm syz.4.560: corrupted inode contents [ 49.847551][ T1708] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 49.865358][ T1708] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #16: comm syz.4.560: corrupted inode contents [ 49.886938][ T1708] EXT4-fs error (device loop4): ext4_truncate:4313: inode #16: comm syz.4.560: mark_inode_dirty error [ 49.915046][ T1708] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 49.942018][ T1708] EXT4-fs (loop4): 1 truncate cleaned up [ 49.949612][ T1708] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.966705][ T8] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 49.989465][ T1730] loop0: detected capacity change from 0 to 128 [ 50.027014][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6812: comm kworker/u4:0: Failed to release dquot type 1 [ 50.062640][ T1734] loop2: detected capacity change from 0 to 128 [ 50.069999][ T308] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.132247][ T10] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 50.154715][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6812: comm kworker/u4:1: Failed to release dquot type 1 [ 50.181576][ T1740] tipc: Enabling of bearer rejected, media not registered [ 50.225923][ T1745] futex_wake_op: syz.4.576 tries to shift op by -1; fix this program [ 50.397869][ T304] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.451578][ T1757] bridge0: port 3(vlan2) entered blocking state [ 50.464868][ T1757] bridge0: port 3(vlan2) entered disabled state [ 50.620579][ T28] audit: type=1400 audit(1747271533.195:389): avc: denied { bind } for pid=1778 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.663205][ T28] audit: type=1400 audit(1747271533.225:390): avc: denied { listen } for pid=1778 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.683535][ T28] audit: type=1400 audit(1747271533.225:391): avc: denied { write } for pid=1778 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.716652][ T1782] loop3: detected capacity change from 0 to 128 [ 50.725966][ T1784] loop1: detected capacity change from 0 to 512 [ 50.734775][ T1782] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.765328][ T28] audit: type=1400 audit(1747271533.285:392): avc: denied { name_bind } for pid=1783 comm="syz.0.597" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 50.797854][ T1782] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.831036][ T1784] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.891068][ T28] audit: type=1400 audit(1747271533.465:393): avc: denied { search } for pid=1794 comm="syz.0.602" name="/" dev="configfs" ino=13634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 50.946340][ T1800] loop0: detected capacity change from 0 to 1024 [ 50.975568][ T28] audit: type=1400 audit(1747271533.465:394): avc: denied { read } for pid=1794 comm="syz.0.602" name="/" dev="configfs" ino=13634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.144022][ T1818] netlink: 44 bytes leftover after parsing attributes in process `syz.1.611'. [ 51.207928][ T1823] xt_bpf: check failed: parse error [ 51.353502][ T1833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1833 comm=syz.2.618 [ 51.385703][ T1810] loop0: detected capacity change from 0 to 40427 [ 51.405104][ T1810] F2FS-fs (loop0): invalid crc value [ 51.426058][ T1810] F2FS-fs (loop0): Found nat_bits in checkpoint [ 51.500223][ T1810] F2FS-fs (loop0): Start checkpoint disabled! [ 51.514349][ T1810] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 51.528373][ T19] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 51.680112][ T8] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.706252][ T1810] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 51.717394][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.743785][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.773051][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.787035][ T19] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.796220][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.797012][ T10] kworker/u4:1: attempt to access beyond end of device [ 51.797012][ T10] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 51.805056][ T19] usb 5-1: config 0 descriptor?? [ 51.874131][ T1866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.633'. [ 51.903378][ T1870] loop1: detected capacity change from 0 to 512 [ 51.974385][ T1870] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.976571][ T828] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 52.010392][ T1870] fs-verity (loop1, inode 15): Unrecognized descriptor size: 0 bytes [ 52.037905][ T1885] loop0: detected capacity change from 0 to 512 [ 52.062687][ T1890] loop1: detected capacity change from 0 to 512 [ 52.074480][ T1885] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.639: casefold flag without casefold feature [ 52.097911][ T1890] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.118523][ T1885] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.639: couldn't read orphan inode 15 (err -117) [ 52.132734][ T1890] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.641: invalid indirect mapped block 10 (level 1) [ 52.147067][ T1890] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.641: invalid indirect mapped block 8 (level 1) [ 52.176589][ T1890] EXT4-fs (loop1): 1 truncate cleaned up [ 52.187292][ T828] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.207765][ T828] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.230205][ T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 52.238258][ T282] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 52.239002][ T19] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 52.258654][ T828] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 52.270002][ T19] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 52.271663][ T282] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 52.282709][ T828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.305081][ T828] usb 3-1: SerialNumber: syz [ 52.492982][ T1895] loop3: detected capacity change from 0 to 40427 [ 52.527338][ T1895] F2FS-fs (loop3): invalid crc value [ 52.528779][ T828] usb 3-1: 0:2 : does not exist [ 52.553868][ T1895] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.562529][ T828] usb 3-1: USB disconnect, device number 5 [ 52.638544][ T1895] F2FS-fs (loop3): Start checkpoint disabled! [ 52.654580][ T1895] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 52.754446][ T1895] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 52.786050][ T1901] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.793618][ T1901] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.801928][ T1901] device bridge_slave_0 entered promiscuous mode [ 52.809303][ T1901] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.816542][ T1901] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.827424][ T1901] device bridge_slave_1 entered promiscuous mode [ 52.840288][ T304] kworker/u4:3: attempt to access beyond end of device [ 52.840288][ T304] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 52.933372][ T1910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 52.998056][ T800] device bridge_slave_1 left promiscuous mode [ 53.004540][ T800] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.012697][ T800] device bridge_slave_0 left promiscuous mode [ 53.019082][ T800] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.028367][ T800] device veth1_macvtap left promiscuous mode [ 53.048213][ T800] device veth0_vlan left promiscuous mode [ 53.123184][ T1923] loop0: detected capacity change from 0 to 512 [ 53.140770][ T1923] EXT4-fs: Ignoring removed oldalloc option [ 53.154614][ T1923] EXT4-fs (loop0): 1 truncate cleaned up [ 53.179527][ T1923] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.654: invalid indirect mapped block 234881024 (level 0) [ 53.195917][ T1923] EXT4-fs (loop0): Remounting filesystem read-only [ 53.220050][ T1901] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.227167][ T1901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.234492][ T1901] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.241665][ T1901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.278289][ T1929] loop2: detected capacity change from 0 to 512 [ 53.285923][ T1931] loop0: detected capacity change from 0 to 128 [ 53.294854][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.298946][ T1929] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.314044][ T1929] EXT4-fs (loop2): 1 truncate cleaned up [ 53.323159][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.352331][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.360903][ T1931] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.402222][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.418706][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.425817][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.451287][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.460898][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.468017][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.487384][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.506521][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.515119][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.530782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.541542][ T1939] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 53.562338][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.579328][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.602173][ T1901] device veth0_vlan entered promiscuous mode [ 53.613916][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.625257][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.643948][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.654483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.672856][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.689347][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.693143][ T1961] loop3: detected capacity change from 0 to 256 [ 53.713847][ T1901] device veth1_macvtap entered promiscuous mode [ 53.729219][ T1961] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 53.742718][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.751713][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.764440][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.766003][ T1961] exFAT-fs (loop3): hint_cluster is invalid (17) [ 53.773344][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.787663][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.796503][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 53.842530][ T1967] loop3: detected capacity change from 0 to 1024 [ 53.852353][ T1967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.867314][ T1967] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.879339][ T1967] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.937211][ T1974] loop5: detected capacity change from 0 to 128 [ 53.949467][ T1971] device veth1_macvtap left promiscuous mode [ 53.950689][ T1974] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.976285][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 53.986929][ T24] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 54.007247][ T24] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 54.015725][ T24] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 54.030225][ T1978] loop3: detected capacity change from 0 to 2048 [ 54.058461][ T24] usb 3-1: config 250 has no interface number 0 [ 54.083042][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 54.116530][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 54.127748][ T24] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.138537][ T24] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 54.140105][ T102] udevd[102]: worker [519] terminated by signal 33 (Unknown signal 33) [ 54.149564][ T24] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 54.171523][ T24] usb 3-1: config 250 interface 228 has no altsetting 0 [ 54.186119][ T102] udevd[102]: worker [519] failed while handling '/devices/virtual/block/loop3' [ 54.201346][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 54.201957][ T1988] xt_bpf: check failed: parse error [ 54.216236][ T24] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 54.247476][ T24] usb 3-1: Product: syz [ 54.251706][ T24] usb 3-1: SerialNumber: syz [ 54.265435][ T1999] loop0: detected capacity change from 0 to 1024 [ 54.284375][ T24] hub 3-1:250.228: bad descriptor, ignoring hub [ 54.304826][ T24] hub: probe of 3-1:250.228 failed with error -5 [ 54.350688][ T2007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.689'. [ 54.376583][ T19] usb 5-1: USB disconnect, device number 4 [ 54.410312][ T2012] sch_fq: defrate 0 ignored. [ 54.486547][ T24] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 54.688644][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 54.688662][ T28] audit: type=1400 audit(1747271537.265:414): avc: denied { read write } for pid=1943 comm="syz.2.662" name="lp0" dev="devtmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 54.718621][ T28] audit: type=1400 audit(1747271537.265:415): avc: denied { open } for pid=1943 comm="syz.2.662" path="/dev/usb/lp0" dev="devtmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 55.106645][ T1944] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 55.151976][ T2023] loop4: detected capacity change from 0 to 128 [ 55.176878][ T2023] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.272071][ T2031] device bridge1 entered promiscuous mode [ 56.536223][ T614] usb 3-1: USB disconnect, device number 6 [ 56.545403][ T614] usblp0: removed [ 57.056182][ C0] sched: RT throttling activated [ 57.174322][ T2045] loop3: detected capacity change from 0 to 4096 [ 57.189517][ T308] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.349529][ T28] audit: type=1400 audit(1747271539.925:416): avc: denied { remount } for pid=2062 comm="syz.5.714" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.390404][ T577] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 57.401604][ T2069] device bridge0 entered promiscuous mode [ 57.408206][ T2069] bridge0: port 3(macsec1) entered blocking state [ 57.414714][ T2069] bridge0: port 3(macsec1) entered disabled state [ 57.422467][ T2069] device bridge0 left promiscuous mode [ 57.543347][ T28] audit: type=1401 audit(1747271540.115:417): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 57.600423][ T577] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.618486][ T577] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.630043][ T577] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 57.639387][ T577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.648711][ T577] usb 1-1: config 0 descriptor?? [ 57.688614][ T2107] tmpfs: Unknown parameter '01777777777777777777777' [ 57.697271][ T2108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.733'. [ 57.709009][ T2108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.733'. [ 57.721216][ T2110] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000005 [ 57.722267][ T2108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.733'. [ 57.739750][ T2108] net_ratelimit: 3320 callbacks suppressed [ 57.739802][ T2108] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 57.841078][ T2127] xt_hashlimit: size too large, truncated to 1048576 [ 57.891859][ T2131] xt_hashlimit: size too large, truncated to 1048576 [ 58.026772][ T2135] loop3: detected capacity change from 0 to 16 [ 58.126299][ T2128] loop2: detected capacity change from 0 to 40427 [ 58.146278][ T2128] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 58.159127][ T2143] loop4: detected capacity change from 0 to 512 [ 58.168525][ T2143] EXT4-fs: Ignoring removed oldalloc option [ 58.175033][ T2128] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 58.195821][ T2128] F2FS-fs (loop2): invalid crc value [ 58.209658][ T2143] EXT4-fs (loop4): 1 truncate cleaned up [ 58.249726][ T28] audit: type=1400 audit(1747271540.825:418): avc: denied { create } for pid=2142 comm="syz.4.751" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.271105][ T2143] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.751: invalid indirect mapped block 234881024 (level 0) [ 58.304174][ T2128] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.347465][ T2143] EXT4-fs (loop4): Remounting filesystem read-only [ 58.419926][ T2128] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 58.427431][ T2128] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 58.500533][ T28] audit: type=1400 audit(1747271541.075:419): avc: denied { read open } for pid=2125 comm="syz.2.744" path="/139/bus/bus" dev="loop2" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.569173][ T28] audit: type=1400 audit(1747271541.075:420): avc: denied { write } for pid=2125 comm="syz.2.744" name="bus" dev="loop2" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.593343][ T28] audit: type=1400 audit(1747271541.175:421): avc: denied { create } for pid=2125 comm="syz.2.744" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.690473][ T577] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input7 [ 58.722384][ T2184] loop4: detected capacity change from 0 to 2048 [ 58.731260][ T577] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input8 [ 58.746500][ T577] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input9 [ 58.750193][ T28] audit: type=1400 audit(1747271541.325:422): avc: denied { mounton } for pid=2185 comm="syz.3.767" path=2F3133352FE91F7189591E9233614B dev="tmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 58.760486][ T577] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input10 [ 58.841082][ T577] uclogic 0003:256C:006D.0008: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 58.863577][ T2194] syz.4.769[2194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.863693][ T2194] syz.4.769[2194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.990163][ T577] usb 1-1: USB disconnect, device number 5 [ 59.016132][ T304] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 59.052368][ T304] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 59.182164][ T2209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.776'. [ 59.233003][ T2215] x_tables: duplicate underflow at hook 4 [ 59.260011][ T28] audit: type=1400 audit(1747271541.835:423): avc: denied { bind } for pid=2219 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.451525][ T2238] loop2: detected capacity change from 0 to 512 [ 59.488313][ T2238] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.536571][ T2238] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.583833][ T2253] xt_bpf: check failed: parse error [ 59.653852][ T2262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'. [ 59.682520][ T2264] device bridge0 entered promiscuous mode [ 59.690332][ T2266] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000005 [ 59.691588][ T2264] bridge0: port 3(macsec1) entered blocking state [ 59.705778][ T2264] bridge0: port 3(macsec1) entered disabled state [ 59.713437][ T2264] device bridge0 left promiscuous mode [ 59.781950][ T2274] loop0: detected capacity change from 0 to 512 [ 59.802821][ T2274] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.815006][ T2274] EXT4-fs (loop0): 1 truncate cleaned up [ 59.836030][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 59.836048][ T28] audit: type=1400 audit(1747271542.405:429): avc: denied { append } for pid=2273 comm="syz.0.800" path="/160/bus/cpu.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.876604][ T28] audit: type=1400 audit(1747271542.445:430): avc: denied { ioctl } for pid=2273 comm="syz.0.800" path="/160/bus/cpu.stat" dev="loop0" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.914656][ T28] audit: type=1400 audit(1747271542.485:431): avc: denied { read write } for pid=2281 comm="syz.0.804" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.939922][ T28] audit: type=1400 audit(1747271542.485:432): avc: denied { open } for pid=2281 comm="syz.0.804" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.046239][ T19] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 60.046694][ T577] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 60.065180][ T28] audit: type=1400 audit(1747271542.645:433): avc: denied { bind } for pid=2297 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.088227][ T28] audit: type=1400 audit(1747271542.645:434): avc: denied { setopt } for pid=2297 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.111674][ T2300] xt_bpf: check failed: parse error [ 60.184180][ T2311] loop0: detected capacity change from 0 to 2048 [ 60.218850][ T2311] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.236289][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 60.242820][ T19] usb 3-1: config 0 interface 0 has no altsetting 0 [ 60.250805][ T19] usb 3-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 60.260646][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.263617][ T28] audit: type=1400 audit(1747271542.835:435): avc: denied { mounton } for pid=2310 comm="syz.0.819" path="/166/file0/file0" dev="incremental-fs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.295549][ T19] usb 3-1: config 0 descriptor?? [ 60.301695][ T577] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.314872][ T2311] overlayfs: './file0' not a directory [ 60.333174][ T577] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.344510][ T577] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 60.374288][ T284] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /166/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 60.399151][ T577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.428522][ T577] usb 4-1: config 0 descriptor?? [ 60.585113][ T2332] loop0: detected capacity change from 0 to 8192 [ 60.711266][ T19] wacom 0003:056A:5002.0009: unknown main item tag 0x1 [ 60.729880][ T19] wacom 0003:056A:5002.0009: unknown main item tag 0x2 [ 60.748902][ T19] wacom 0003:056A:5002.0009: unknown main item tag 0x0 [ 60.767553][ T19] wacom 0003:056A:5002.0009: unknown main item tag 0x0 [ 60.791703][ T19] wacom 0003:056A:5002.0009: hidraw0: USB HID v0.07 Device [HID 056a:5002] on usb-dummy_hcd.2-1/input0 [ 60.929645][ T6] usb 3-1: USB disconnect, device number 7 [ 60.936208][ T39] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 61.127369][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.148572][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.168604][ T39] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 61.196327][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.217068][ T39] usb 1-1: config 0 descriptor?? [ 61.443480][ T577] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input14 [ 61.488432][ T577] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input15 [ 61.510199][ T577] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input16 [ 61.544131][ T577] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input17 [ 61.569917][ T577] uclogic 0003:256C:006D.000A: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 61.685714][ T577] usb 4-1: USB disconnect, device number 8 [ 61.713182][ T39] usbhid 1-1:0.0: can't add hid device: -71 [ 61.725548][ T39] usbhid: probe of 1-1:0.0 failed with error -71 [ 61.734508][ T39] usb 1-1: USB disconnect, device number 6 [ 62.218036][ T2359] device bridge0 entered promiscuous mode [ 62.225842][ T2361] binder: 2357:2361 ioctl c0306201 0 returned -14 [ 62.227553][ T2359] bridge0: port 3(macsec1) entered blocking state [ 62.240032][ T2359] bridge0: port 3(macsec1) entered disabled state [ 62.259416][ T2359] device bridge0 left promiscuous mode [ 62.309113][ T2370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 62.318281][ T2370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.841'. [ 62.330168][ T2370] device gretap0 entered promiscuous mode [ 62.335990][ T2370] device macsec1 entered promiscuous mode [ 62.367571][ T28] audit: type=1400 audit(1747271544.945:436): avc: denied { mount } for pid=2372 comm="syz.3.842" name="/" dev="ramfs" ino=24816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 62.431361][ T28] audit: type=1400 audit(1747271544.945:437): avc: denied { read } for pid=2376 comm="syz.0.844" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.455593][ T28] audit: type=1400 audit(1747271544.945:438): avc: denied { open } for pid=2376 comm="syz.0.844" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.555443][ T2394] loop4: detected capacity change from 0 to 512 [ 62.599856][ T2394] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.851: bg 0: block 264: padding at end of block bitmap is not set [ 62.615330][ T2394] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 62.625941][ T2394] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 63.200386][ T2465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 63.536400][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 63.581062][ T2494] netlink: 44 bytes leftover after parsing attributes in process `syz.3.894'. [ 63.617617][ T2498] loop3: detected capacity change from 0 to 128 [ 63.624866][ T2498] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 63.727584][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.740788][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.756791][ T39] usb 5-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 63.766784][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.779530][ T39] usb 5-1: config 0 descriptor?? [ 63.836279][ T19] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 64.039735][ T19] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 64.049348][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.057515][ T19] usb 3-1: Product: syz [ 64.061782][ T19] usb 3-1: Manufacturer: syz [ 64.066639][ T19] usb 3-1: SerialNumber: syz [ 64.072887][ T19] usb 3-1: config 0 descriptor?? [ 64.181232][ T2517] loop0: detected capacity change from 0 to 1024 [ 64.192700][ T39] hid (null): nested delimiters [ 64.199280][ T39] hid-generic 0003:0416:C168.000B: nested delimiters [ 64.206094][ T39] hid-generic 0003:0416:C168.000B: item 0 1 2 10 parsing failed [ 64.207644][ T2517] EXT4-fs mount: 69 callbacks suppressed [ 64.207665][ T2517] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 64.215118][ T39] hid-generic: probe of 0003:0416:C168.000B failed with error -22 [ 64.401832][ T614] usb 5-1: USB disconnect, device number 5 [ 64.454051][ T284] EXT4-fs (loop0): unmounting filesystem. [ 64.881538][ T2547] loop3: detected capacity change from 0 to 40427 [ 64.889722][ T2547] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 64.896791][ T2547] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 64.905175][ T2547] F2FS-fs (loop3): fault_injection options not supported [ 64.912820][ T2547] F2FS-fs (loop3): fault_type options not supported [ 64.920384][ T2547] F2FS-fs (loop3): heap/no_heap options were deprecated [ 64.934654][ T2547] F2FS-fs (loop3): invalid crc value [ 64.943800][ T2547] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.989758][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 64.989773][ T28] audit: type=1400 audit(1747271547.565:448): avc: denied { mounton } for pid=2555 comm="syz.4.920" path="/202/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 65.018900][ T2547] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 65.026442][ T2547] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 65.151593][ T2567] loop0: detected capacity change from 0 to 512 [ 65.177903][ T2567] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.238228][ T2567] EXT4-fs (loop0): 1 truncate cleaned up [ 65.246538][ T2567] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 65.277556][ T28] audit: type=1400 audit(1747271547.855:449): avc: denied { setattr } for pid=2566 comm="syz.0.926" name="work" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 65.334510][ T2563] loop4: detected capacity change from 0 to 40427 [ 65.341700][ T28] audit: type=1400 audit(1747271547.885:450): avc: denied { rename } for pid=2566 comm="syz.0.926" name="#3" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.348098][ T2563] F2FS-fs (loop4): fault_injection options not supported [ 65.363999][ T28] audit: type=1400 audit(1747271547.885:451): avc: denied { unlink } for pid=2566 comm="syz.0.926" name="#3" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.393649][ T28] audit: type=1400 audit(1747271547.885:452): avc: denied { unlink } for pid=2566 comm="syz.0.926" name="#4" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.417827][ T2563] F2FS-fs (loop4): invalid crc value [ 65.424483][ T28] audit: type=1400 audit(1747271547.885:453): avc: denied { link } for pid=2566 comm="syz.0.926" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.459725][ T28] audit: type=1400 audit(1747271547.885:454): avc: denied { write open } for pid=2566 comm="syz.0.926" path=2F202864656C6574656429 dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.487624][ T2563] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.508063][ T19] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 65.522122][ T28] audit: type=1400 audit(1747271547.895:455): avc: denied { setattr } for pid=2566 comm="syz.0.926" name="#20" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.529185][ T19] asix: probe of 3-1:0.0 failed with error -71 [ 65.582432][ T1242] EXT4-fs (loop0): unmounting filesystem. [ 65.585345][ T19] usb 3-1: USB disconnect, device number 8 [ 65.613605][ T2563] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.665766][ T286] syz-executor: attempt to access beyond end of device [ 65.665766][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 65.858764][ T2602] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.865911][ T2602] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.873830][ T2602] device bridge_slave_0 entered promiscuous mode [ 65.882779][ T2602] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.890048][ T2602] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.897529][ T2602] device bridge_slave_1 entered promiscuous mode [ 65.958467][ T2602] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.966543][ T2602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.973929][ T2602] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.981107][ T2602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.003449][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.011202][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.018814][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.030827][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.039092][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.046198][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.061442][ T2608] loop2: detected capacity change from 0 to 128 [ 66.068531][ T2608] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.083720][ T2608] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.117446][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.128097][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.135267][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.159871][ T2617] loop3: detected capacity change from 0 to 256 [ 66.171650][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.200108][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.227585][ T28] audit: type=1400 audit(1747271548.805:456): avc: denied { ioctl } for pid=2623 comm="syz.3.949" path="socket:[26356]" dev="sockfs" ino=26356 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.277434][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.298143][ T2627] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 66.298305][ T43] device bridge_slave_1 left promiscuous mode [ 66.324987][ T2627] syz.5.952 (2627) used greatest stack depth: 20512 bytes left [ 66.329439][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.347801][ T43] device bridge_slave_0 left promiscuous mode [ 66.354548][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.366661][ T43] device veth0_vlan left promiscuous mode [ 66.492866][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.500658][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 66.502647][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.516504][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.527073][ T2602] device veth0_vlan entered promiscuous mode [ 66.567910][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.576025][ T28] audit: type=1400 audit(1747271549.145:457): avc: denied { validate_trans } for pid=2634 comm="syz.3.956" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 66.605418][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.623004][ T2602] device veth1_macvtap entered promiscuous mode [ 66.635282][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.652301][ T2639] device bridge_slave_0 left promiscuous mode [ 66.669704][ T2639] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.680380][ T2639] device bridge_slave_1 left promiscuous mode [ 66.687385][ T2639] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.698286][ T39] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 66.727797][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.735909][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.736817][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.744604][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.769738][ T39] usb 5-1: config 0 descriptor?? [ 66.791298][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.801235][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.082237][ T43] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.283227][ T2686] tmpfs: Unknown parameter 'qu' [ 67.307686][ T2690] loop6: detected capacity change from 0 to 512 [ 67.326178][ T2690] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.979: bad orphan inode 13 [ 67.357163][ T2690] ext4_test_bit(bit=12, block=4) = 1 [ 67.363742][ T2690] is_bad_inode(inode)=0 [ 67.368931][ T2690] NEXT_ORPHAN(inode)=0 [ 67.373359][ T2690] max_ino=32 [ 67.377064][ T2690] i_nlink=1 [ 67.384622][ T2690] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 67.407789][ T2602] EXT4-fs (loop6): unmounting filesystem. [ 67.517740][ T2708] loop2: detected capacity change from 0 to 8192 [ 67.597405][ T39] usb 5-1: Cannot set autoneg [ 67.602674][ T39] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 67.620694][ T39] usb 5-1: USB disconnect, device number 6 [ 67.870181][ T2749] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.879904][ T2749] FAT-fs (loop7): unable to read boot sector [ 67.903096][ T2755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1009'. [ 67.906403][ T102] udevd[102]: worker [2197] terminated by signal 33 (Unknown signal 33) [ 67.929086][ T2757] capability: warning: `syz.3.1010' uses 32-bit capabilities (legacy support in use) [ 67.932081][ T102] udevd[102]: worker [2197] failed while handling '/devices/virtual/block/loop3' [ 67.956067][ T2759] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 67.968056][ T2759] SELinux: failed to load policy [ 68.386793][ T19] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 68.567032][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 68.576495][ T19] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 68.584964][ T19] usb 5-1: config 0 has no interface number 0 [ 68.599742][ T19] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 68.613812][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.622305][ T19] usb 5-1: Product: syz [ 68.626537][ T19] usb 5-1: Manufacturer: syz [ 68.631158][ T19] usb 5-1: SerialNumber: syz [ 68.636681][ T19] usb 5-1: config 0 descriptor?? [ 68.644605][ T19] smsc95xx v2.0.0 [ 68.692612][ T2794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 68.702171][ T2794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'. [ 68.713173][ T2794] device gretap0 entered promiscuous mode [ 68.719006][ T2794] device macsec1 entered promiscuous mode [ 68.771405][ T2798] loop3: detected capacity change from 0 to 2048 [ 68.788924][ T2798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.810486][ T283] EXT4-fs (loop3): unmounting filesystem. [ 68.946286][ T6] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 68.958859][ T2816] loop6: detected capacity change from 0 to 256 [ 68.997255][ T379] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 69.045106][ T19] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 69.060687][ T19] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 69.083958][ T2821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1039'. [ 69.093589][ T2821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1039'. [ 69.106996][ T2821] device gretap0 entered promiscuous mode [ 69.112808][ T2821] device macsec1 entered promiscuous mode [ 69.157463][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.168603][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.179271][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 69.188866][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.198794][ T6] usb 3-1: config 0 descriptor?? [ 69.682619][ T19] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 69.695274][ T19] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 69.703866][ T19] usb 5-1: USB disconnect, device number 7 [ 69.731535][ T2862] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 69.741036][ T2862] FAT-fs (loop11): unable to read boot sector [ 69.964813][ T2879] overlayfs: failed to clone upperpath [ 70.211432][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input18 [ 70.227925][ T6] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input19 [ 70.244420][ T6] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input20 [ 70.259517][ T6] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input21 [ 70.275208][ T6] uclogic 0003:256C:006D.000C: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 70.440533][ T6] usb 3-1: USB disconnect, device number 9 [ 70.496866][ T2895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1071'. [ 70.506225][ T19] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 70.687807][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.702301][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.713357][ T19] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 70.733483][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.749053][ T19] usb 5-1: config 0 descriptor?? [ 71.105811][ T2945] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1095'. [ 71.157746][ T19] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 71.177950][ T19] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 71.237954][ T2963] 9pnet: p9_errstr2errno: server reported unknown error b0x0000000000000004 [ 71.256361][ T19] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected [ 71.365795][ T1949] usb 5-1: USB disconnect, device number 8 [ 71.373250][ T1949] hid-steam 0003:28DE:1142.000D: Steam wireless receiver disconnected [ 71.426324][ T19] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 71.577164][ T2984] loop3: detected capacity change from 0 to 40427 [ 71.584545][ T2984] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 71.592977][ T2984] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 71.604518][ T2984] F2FS-fs (loop3): Found nat_bits in checkpoint [ 71.612465][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.624268][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.634927][ T19] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 71.645885][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.647297][ T2984] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 71.661678][ T2984] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.662119][ T19] usb 7-1: config 0 descriptor?? [ 71.710968][ T2984] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 71.721595][ T2984] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 71.747306][ T2997] syz.5.1117 uses obsolete (PF_INET,SOCK_PACKET) [ 71.906506][ T3003] loop3: detected capacity change from 0 to 512 [ 71.939545][ T3003] EXT4-fs: Ignoring removed oldalloc option [ 71.946665][ T3003] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.957274][ T3003] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 71.966694][ T3003] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b842c01c, mo2=0102] [ 71.974826][ T3003] System zones: 0-2, 18-18, 34-34 [ 71.982542][ T3003] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1118: bad orphan inode 15 [ 71.993080][ T3003] ext4_test_bit(bit=14, block=18) = 1 [ 71.998690][ T3003] is_bad_inode(inode)=0 [ 72.002939][ T3003] NEXT_ORPHAN(inode)=2264924160 [ 72.008071][ T3003] max_ino=32 [ 72.011700][ T3003] i_nlink=0 [ 72.014976][ T3003] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 72.030115][ T3003] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1118: bg 0: block 80: padding at end of block bitmap is not set [ 72.044959][ T3003] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 72.054236][ T3003] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 72.096996][ T3017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3017 comm=syz.2.1124 [ 72.098211][ T3019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 72.167496][ T3025] netlink: 'syz.2.1128': attribute type 4 has an invalid length. [ 72.183867][ T3025] netlink: 'syz.2.1128': attribute type 4 has an invalid length. [ 72.519687][ T3036] loop2: detected capacity change from 0 to 512 [ 72.526989][ T3036] EXT4-fs: Ignoring removed nobh option [ 72.544057][ T3036] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1132: invalid indirect mapped block 256 (level 2) [ 72.559293][ T3036] EXT4-fs (loop2): 2 truncates cleaned up [ 72.565126][ T3036] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.579474][ T3036] EXT4-fs error (device loop2): empty_inline_dir:1877: inode #12: block 7: comm syz.2.1132: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 72.601010][ T3036] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 72.646135][ T285] EXT4-fs (loop2): unmounting filesystem. [ 72.715986][ T19] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000F/input/input22 [ 72.744504][ T283] EXT4-fs (loop3): unmounting filesystem. [ 72.745701][ T19] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000F/input/input23 [ 72.778800][ T19] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000F/input/input24 [ 72.793511][ T19] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000F/input/input25 [ 72.809353][ T19] uclogic 0003:256C:006D.000F: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 72.985360][ T19] usb 7-1: USB disconnect, device number 2 [ 73.185640][ T3089] loop4: detected capacity change from 0 to 512 [ 73.208471][ T3089] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 73.217617][ T3089] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.271347][ T286] EXT4-fs (loop4): unmounting filesystem. [ 73.409764][ T3113] loop3: detected capacity change from 0 to 2048 [ 73.431095][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 73.431110][ T28] audit: type=1400 audit(1747271556.005:473): avc: denied { remount } for pid=3116 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 73.431115][ T3117] SELinux: security_context_str_to_sid (r) failed with errno=-22 [ 73.484671][ T3113] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 73.520944][ T3113] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.533801][ T28] audit: type=1400 audit(1747271556.115:474): avc: denied { write } for pid=3128 comm="syz.2.1164" name="file0" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.563685][ T28] audit: type=1400 audit(1747271556.135:475): avc: denied { open } for pid=3128 comm="syz.2.1164" path="/205/file0" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.587861][ T28] audit: type=1400 audit(1747271556.135:476): avc: denied { ioctl } for pid=3128 comm="syz.2.1164" path="/205/file0" dev="tmpfs" ino=1090 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.628680][ T283] EXT4-fs (loop3): unmounting filesystem. [ 73.630746][ T3135] loop4: detected capacity change from 0 to 512 [ 73.644861][ T3135] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.657136][ T3134] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 73.667115][ T28] audit: type=1400 audit(1747271556.255:477): avc: denied { relabelto } for pid=3133 comm="syz.6.1166" name="57" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 73.700281][ T28] audit: type=1400 audit(1747271556.255:478): avc: denied { associate } for pid=3133 comm="syz.6.1166" name="57" dev="tmpfs" ino=306 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 73.714442][ T3135] EXT4-fs (loop4): 1 truncate cleaned up [ 73.845702][ T28] audit: type=1400 audit(1747271556.325:479): avc: denied { write } for pid=2602 comm="syz-executor" name="57" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 73.874675][ T3135] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 73.918953][ T3144] loop2: detected capacity change from 0 to 40427 [ 73.928120][ T28] audit: type=1400 audit(1747271556.325:480): avc: denied { remove_name } for pid=2602 comm="syz-executor" name="binderfs" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 73.947936][ T3144] F2FS-fs (loop2): invalid crc value [ 73.956217][ T28] audit: type=1400 audit(1747271556.325:481): avc: denied { rmdir } for pid=2602 comm="syz-executor" name="57" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 73.975435][ T3144] F2FS-fs (loop2): Found nat_bits in checkpoint [ 73.987058][ T28] audit: type=1400 audit(1747271556.505:482): avc: denied { create } for pid=3132 comm="syz.4.1168" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 73.994372][ T286] EXT4-fs (loop4): unmounting filesystem. [ 74.068240][ T3144] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 74.088013][ T3163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 74.097469][ T3144] syz.2.1171: attempt to access beyond end of device [ 74.097469][ T3144] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 74.120232][ T285] syz-executor: attempt to access beyond end of device [ 74.120232][ T285] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 74.296267][ T19] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 74.316855][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 74.348613][ T3174] loop6: detected capacity change from 0 to 512 [ 74.355317][ T3174] EXT4-fs: Ignoring removed nobh option [ 74.370564][ T3174] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 2: comm syz.6.1181: invalid block [ 74.382739][ T3174] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1181: invalid indirect mapped block 10 (level 1) [ 74.397575][ T3174] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1181: invalid indirect mapped block 8 (level 1) [ 74.413273][ T3174] EXT4-fs (loop6): 1 truncate cleaned up [ 74.419249][ T3174] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 74.498777][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.510476][ T19] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 74.524782][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.527659][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.534336][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.554880][ T19] usb 4-1: Product: syz [ 74.559273][ T19] usb 4-1: Manufacturer: syz [ 74.564020][ T19] usb 4-1: SerialNumber: syz [ 74.575167][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.575993][ T19] cdc_mbim 4-1:1.0: skipping garbage [ 74.593065][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 74.602832][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.624880][ T24] usb 5-1: config 0 descriptor?? [ 74.648983][ T3191] SELinux: failed to load policy [ 74.716254][ T1949] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 74.775563][ T3154] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 74.917409][ T1949] usb 7-1: config 0 has an invalid interface number: 87 but max is 0 [ 74.925582][ T1949] usb 7-1: config 0 has no interface number 0 [ 74.933304][ T1949] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.d6 [ 74.942479][ T1949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.950613][ T1949] usb 7-1: Product: syz [ 74.954929][ T1949] usb 7-1: Manufacturer: syz [ 74.959615][ T1949] usb 7-1: SerialNumber: syz [ 74.965231][ T1949] usb 7-1: config 0 descriptor?? [ 74.971281][ T1949] ums-sddr09 7-1:0.87: USB Mass Storage device detected [ 75.177781][ T1949] usb 7-1: USB disconnect, device number 3 [ 75.184412][ T3154] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 75.195445][ T19] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 75.201682][ T19] cdc_mbim 4-1:1.0: bind() failure [ 75.207715][ T19] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 75.214663][ T19] cdc_ncm 4-1:1.1: bind() failure [ 75.221707][ T19] usb 4-1: USB disconnect, device number 9 [ 75.637555][ T24] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0010/input/input26 [ 75.650985][ T24] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0010/input/input27 [ 75.664127][ T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0010/input/input28 [ 75.678071][ T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0010/input/input29 [ 75.695909][ T2602] EXT4-fs (loop6): unmounting filesystem. [ 75.696729][ T24] uclogic 0003:256C:006D.0010: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 75.799896][ T3221] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1202'. [ 75.892031][ T19] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 75.915307][ T6] usb 5-1: USB disconnect, device number 9 [ 75.996908][ T3228] syz.3.1205[3228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.997011][ T3228] syz.3.1205[3228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.100691][ T19] usb 3-1: config 0 interface 0 has no altsetting 0 [ 76.125647][ T19] usb 3-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00 [ 76.135355][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.149955][ T19] usb 3-1: config 0 descriptor?? [ 76.446221][ T39] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 76.488117][ T3254] loop4: detected capacity change from 0 to 512 [ 76.511565][ T3254] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 76.521976][ T3254] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.569329][ T19] wacom 0003:056A:00D6.0011: item fetching failed at offset 3/5 [ 76.577691][ T19] wacom 0003:056A:00D6.0011: parse failed [ 76.583552][ T19] wacom: probe of 0003:056A:00D6.0011 failed with error -22 [ 76.597014][ T3254] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #19: comm syz.4.1215: corrupted inode contents [ 76.609338][ T3254] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #19: comm syz.4.1215: mark_inode_dirty error [ 76.621331][ T3254] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #19: comm syz.4.1215: corrupted inode contents [ 76.634020][ T3254] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2954: inode #19: comm syz.4.1215: mark_inode_dirty error [ 76.646333][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 76.651993][ T3254] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2957: inode #19: comm syz.4.1215: mark inode dirty (error -117) [ 76.665464][ T3254] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 76.666119][ T39] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 76.682879][ T39] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.693476][ T39] usb 4-1: config 0 has no interface number 0 [ 76.699073][ T286] EXT4-fs (loop4): unmounting filesystem. [ 76.703386][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 76.714859][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.723066][ T39] usb 4-1: Product: syz [ 76.727297][ T39] usb 4-1: Manufacturer: syz [ 76.731911][ T39] usb 4-1: SerialNumber: syz [ 76.741311][ T39] usb 4-1: config 0 descriptor?? [ 76.758598][ T39] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 76.765010][ T39] usb 4-1: No valid video chain found. [ 76.780686][ T19] usb 3-1: USB disconnect, device number 10 [ 76.866599][ T3280] 9pnet: p9_errstr2errno: server reported unknown error 9p [ 76.984048][ T39] usb 4-1: USB disconnect, device number 10 [ 77.037272][ T3295] sch_fq: defrate 0 ignored. [ 77.096236][ T6] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 77.286490][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 77.293002][ T6] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 77.301366][ T6] usb 5-1: config 179 has no interface number 0 [ 77.307856][ T6] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 77.319218][ T6] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 77.335708][ T6] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.351964][ T6] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 77.363709][ T6] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 77.377351][ T6] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 77.386898][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.418918][ T3276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 77.675907][ T19] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input31 [ 77.686116][ T3359] loop6: detected capacity change from 0 to 2048 [ 77.697254][ T3359] loop6: p1 < > p2 p3 < p5 > p4 [ 77.716312][ T3359] loop6: partition table partially beyond EOD, truncated [ 77.724333][ T3359] loop6: p1 start 4278190080 is beyond EOD, truncated [ 77.745494][ T3359] loop6: p2 start 16908800 is beyond EOD, truncated [ 77.775655][ T3359] loop6: p4 start 11326 is beyond EOD, truncated [ 77.787357][ T3359] loop6: p5 start 16908800 is beyond EOD, truncated [ 77.881743][ T3276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.893698][ T3276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.132227][ T6] usb 5-1: USB disconnect, device number 10 [ 78.138286][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 78.138330][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 78.166188][ T19] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 78.377421][ T19] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 78.386050][ T19] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 78.396749][ T19] usb 3-1: config 135 has no interface number 0 [ 78.403121][ T19] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 78.415266][ T19] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 78.429158][ T19] usb 3-1: config 135 interface 230 has no altsetting 0 [ 78.438742][ T19] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 78.448377][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.456453][ T19] usb 3-1: Product: syz [ 78.460751][ T19] usb 3-1: Manufacturer: syz [ 78.467799][ T19] usb 3-1: SerialNumber: syz [ 78.479902][ T19] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 78.486552][ T19] usb 3-1: No valid video chain found. [ 78.686529][ T24] usb 3-1: USB disconnect, device number 11 [ 79.043841][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 79.043861][ T28] audit: type=1400 audit(1747271561.615:494): avc: denied { name_bind } for pid=3455 comm="syz.6.1310" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 79.226625][ T1949] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 79.407644][ T1949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.419967][ T1949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.430563][ T1949] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.444140][ T1949] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.454408][ T1949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.479630][ T1949] usb 4-1: config 0 descriptor?? [ 79.723317][ T3479] loop4: detected capacity change from 0 to 512 [ 79.745346][ T3479] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.755140][ T3479] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.837919][ T286] EXT4-fs (loop4): unmounting filesystem. [ 79.888443][ T1949] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 79.904472][ T1949] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 79.975122][ T3493] loop6: detected capacity change from 0 to 1024 [ 79.995810][ T3493] EXT4-fs: Ignoring removed i_version option [ 80.019954][ T3493] EXT4-fs (loop6): Test dummy encryption mode enabled [ 80.044146][ T3493] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 80.108982][ T2602] EXT4-fs (loop6): unmounting filesystem. [ 80.163680][ T3502] loop4: detected capacity change from 0 to 1024 [ 80.166410][ T3504] loop6: detected capacity change from 0 to 128 [ 80.202824][ T3504] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 80.212016][ T3504] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.212416][ T3502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.264138][ T2602] EXT4-fs (loop6): unmounting filesystem. [ 80.291401][ T3502] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1330: inode #4: comm syz.4.1330: iget: illegal inode # [ 80.304777][ T3502] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1330: error while reading EA inode 4 err=-117 [ 80.325256][ T286] EXT4-fs (loop4): unmounting filesystem. [ 80.343743][ T3515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3515 comm=syz.4.1334 [ 80.775585][ T28] audit: type=1326 audit(1747271563.345:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4d8e969 code=0x7ffc0000 [ 80.820711][ T28] audit: type=1326 audit(1747271563.375:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4d8e969 code=0x7ffc0000 [ 80.847613][ T28] audit: type=1326 audit(1747271563.375:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f11c4d8e969 code=0x7ffc0000 [ 80.872061][ T28] audit: type=1326 audit(1747271563.375:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4d8e969 code=0x7ffc0000 [ 80.897782][ T28] audit: type=1326 audit(1747271563.375:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f11c4d8e969 code=0x7ffc0000 [ 80.941792][ T28] audit: type=1326 audit(1747271563.375:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4d8e969 code=0x7ffc0000 [ 80.965834][ T28] audit: type=1326 audit(1747271563.375:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4d8e969 code=0x7ffc0000 [ 81.008294][ T3578] loop4: detected capacity change from 0 to 2048 [ 81.015439][ T28] audit: type=1326 audit(1747271563.375:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f11c4d8e969 code=0x7ffc0000 [ 81.041881][ T28] audit: type=1326 audit(1747271563.395:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4d8e969 code=0x7ffc0000 [ 81.097734][ T3578] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.173080][ T286] EXT4-fs (loop4): unmounting filesystem. [ 81.206956][ T3587] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1366'. [ 81.280326][ T3593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1369'. [ 81.623556][ T3625] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1384'. [ 81.894199][ T3635] overlayfs: failed to clone lowerpath [ 81.956273][ T39] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 82.131486][ T3643] loop3: detected capacity change from 0 to 1024 [ 82.138236][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 82.150853][ T39] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 82.159246][ T39] usb 7-1: config 0 has no interface number 0 [ 82.165523][ T39] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 82.175852][ T39] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 82.186543][ T39] usb 7-1: config 0 interface 41 has no altsetting 0 [ 82.197081][ T3643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.242648][ T39] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 82.274046][ T3643] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1393: inode #4: comm syz.3.1393: iget: illegal inode # [ 82.276856][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.295833][ T3643] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1393: error while reading EA inode 4 err=-117 [ 82.326507][ T39] usb 7-1: Product: syz [ 82.336362][ T39] usb 7-1: Manufacturer: syz [ 82.352081][ T283] EXT4-fs (loop3): unmounting filesystem. [ 82.366388][ T39] usb 7-1: SerialNumber: syz [ 82.376468][ T39] usb 7-1: config 0 descriptor?? [ 82.381892][ T3630] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 82.389891][ T24] usb 4-1: USB disconnect, device number 11 [ 82.404218][ T3630] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 82.450308][ T3656] loop3: detected capacity change from 0 to 2048 [ 82.535727][ T3656] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.595795][ T283] EXT4-fs (loop3): unmounting filesystem. [ 82.629433][ T3630] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 82.646999][ T3630] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 82.775879][ T3697] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1412'. [ 83.266709][ T39] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 83.480490][ T39] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 83.491431][ T39] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 83.501882][ T39] CoreChips: probe of 7-1:0.41 failed with error -71 [ 83.511053][ T39] usb 7-1: USB disconnect, device number 4 [ 83.762004][ T3746] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1431'. [ 83.814872][ T3749] loop4: detected capacity change from 0 to 2048 [ 83.816996][ T3754] loop2: detected capacity change from 0 to 512 [ 83.855240][ T3754] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 83.864166][ T3754] System zones: 0-2, 18-18, 34-35 [ 83.870482][ T3754] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.880101][ T3754] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.892366][ T3749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.912288][ T3760] loop3: detected capacity change from 0 to 512 [ 83.919029][ T3760] EXT4-fs: Ignoring removed nobh option [ 83.935795][ T285] EXT4-fs (loop2): unmounting filesystem. [ 83.937347][ T3760] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.976505][ T3760] EXT4-fs error (device loop3): ext4_ind_map_blocks:604: inode #18: comm syz.3.1436: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 83.996445][ T286] EXT4-fs (loop4): unmounting filesystem. [ 84.014049][ T283] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 84.057594][ T283] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 84.118818][ T283] EXT4-fs (loop3): unmounting filesystem. [ 84.313030][ T3789] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.320263][ T3789] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.328404][ T3789] device bridge_slave_0 entered promiscuous mode [ 84.335788][ T3789] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.343149][ T3789] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.351641][ T3789] device bridge_slave_1 entered promiscuous mode [ 84.427994][ T3789] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.435053][ T3789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.442902][ T3789] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.449960][ T3789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.476346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.484642][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.493501][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.511898][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.520334][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.527461][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.535128][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.543737][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.550969][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.567136][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.575469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.592512][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.606768][ T3789] device veth0_vlan entered promiscuous mode [ 84.613747][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.623270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.631410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.658599][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.666332][ T39] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 84.670930][ T3789] device veth1_macvtap entered promiscuous mode [ 84.690488][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.708819][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.788095][ T3816] serio: Serial port ptm1 [ 84.867673][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 84.883649][ T39] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 84.899687][ T39] usb 5-1: config 0 has no interface number 0 [ 84.909420][ T39] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 84.936452][ T39] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 84.955090][ T39] usb 5-1: config 0 interface 41 has no altsetting 0 [ 84.966911][ T39] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 84.984014][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.006241][ T39] usb 5-1: Product: syz [ 85.010473][ T39] usb 5-1: Manufacturer: syz [ 85.015174][ T39] usb 5-1: SerialNumber: syz [ 85.021860][ T39] usb 5-1: config 0 descriptor?? [ 85.027777][ T3798] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.035301][ T3798] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.188549][ T3849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3849 comm=syz.5.1477 [ 85.245482][ T3798] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.253151][ T3798] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.291085][ T3858] serio: Serial port ptm1 [ 85.297695][ T3860] bridge0: port 3(syz_tun) entered blocking state [ 85.304409][ T3860] bridge0: port 3(syz_tun) entered disabled state [ 85.311618][ T3860] device syz_tun entered promiscuous mode [ 85.317705][ T3860] bridge0: port 3(syz_tun) entered blocking state [ 85.324267][ T3860] bridge0: port 3(syz_tun) entered forwarding state [ 85.862929][ T39] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 86.076891][ T39] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 86.087898][ T39] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 86.100099][ T39] CoreChips: probe of 5-1:0.41 failed with error -71 [ 86.108737][ T39] usb 5-1: USB disconnect, device number 11 [ 86.227404][ T2301] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.616667][ T3932] SELinux: security_context_str_to_sid (r) failed with errno=-22 [ 86.827803][ T3970] loop2: detected capacity change from 0 to 2048 [ 86.882028][ T3970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 86.896290][ T3970] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.984741][ T285] EXT4-fs (loop2): unmounting filesystem. [ 87.126221][ T39] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 87.178826][ T4001] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1537'. [ 87.306240][ T614] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 87.316383][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 87.323322][ T39] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 87.334061][ T39] usb 8-1: config 0 has no interface number 0 [ 87.341455][ T39] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 87.352075][ T39] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 87.362515][ T39] usb 8-1: config 0 interface 41 has no altsetting 0 [ 87.370747][ T39] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 87.379839][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.388045][ T39] usb 8-1: Product: syz [ 87.392263][ T39] usb 8-1: Manufacturer: syz [ 87.396914][ T39] usb 8-1: SerialNumber: syz [ 87.402110][ T39] usb 8-1: config 0 descriptor?? [ 87.407482][ T3972] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 87.414775][ T3972] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 87.498143][ T614] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 87.510430][ T614] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 87.519981][ T614] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.529574][ T614] usb 7-1: config 0 descriptor?? [ 87.534904][ T3987] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 87.625057][ T3972] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 87.632416][ T3972] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 87.946980][ T614] hid-generic 0003:04F3:0755.0013: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 88.159654][ T19] usb 7-1: USB disconnect, device number 5 [ 88.243468][ T39] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 88.457601][ T39] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 88.468450][ T39] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 88.478657][ T39] CoreChips: probe of 8-1:0.41 failed with error -71 [ 88.486398][ T39] usb 8-1: USB disconnect, device number 2 [ 88.691974][ T4014] loop2: detected capacity change from 0 to 512 [ 88.707443][ T4014] EXT4-fs: Ignoring removed orlov option [ 88.737172][ T4023] loop4: detected capacity change from 0 to 16 [ 88.743937][ T4023] erofs: (device loop4): mounted with root inode @ nid 36. [ 88.757252][ T4014] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 88.776871][ T4014] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.855203][ T285] EXT4-fs (loop2): unmounting filesystem. [ 89.146378][ T19] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 89.186262][ T577] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 89.326217][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 89.333164][ T19] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 89.341916][ T19] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 89.350735][ T19] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 89.362195][ T19] usb 5-1: config 250 has no interface number 0 [ 89.368774][ T19] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 89.368820][ T4054] loop7: detected capacity change from 0 to 512 [ 89.380939][ T19] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 89.397875][ T4054] EXT4-fs: Ignoring removed nobh option [ 89.403745][ T19] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.406439][ T4054] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1560: invalid indirect mapped block 256 (level 2) [ 89.414530][ T19] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 89.427552][ T577] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.437914][ T19] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 89.456701][ T577] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 89.471361][ T4054] EXT4-fs (loop7): 2 truncates cleaned up [ 89.478338][ T4054] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 89.496648][ T577] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.508610][ T577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.516262][ T19] usb 5-1: config 250 interface 228 has no altsetting 0 [ 89.516776][ T577] usb 3-1: Product: syz [ 89.529369][ T577] usb 3-1: Manufacturer: syz [ 89.533992][ T577] usb 3-1: SerialNumber: syz [ 89.541206][ T4054] EXT4-fs error (device loop7): empty_inline_dir:1877: inode #12: block 7: comm syz.7.1560: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 89.561139][ T577] cdc_mbim 3-1:1.0: skipping garbage [ 89.566255][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 89.577186][ T4054] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 89.577198][ T19] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 89.577224][ T19] usb 5-1: Product: syz [ 89.577240][ T19] usb 5-1: SerialNumber: syz [ 89.613797][ T3789] EXT4-fs (loop7): unmounting filesystem. [ 89.641366][ T19] hub 5-1:250.228: bad descriptor, ignoring hub [ 89.657946][ T19] hub: probe of 5-1:250.228 failed with error -5 [ 89.777680][ T4036] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 89.841614][ T19] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 89.875094][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 89.875110][ T28] audit: type=1400 audit(1747271572.445:526): avc: denied { read } for pid=4066 comm="syz.6.1575" name="file0" dev="tmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.976513][ T4077] loop6: detected capacity change from 0 to 2048 [ 90.001947][ T4082] syz.7.1570[4082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.002040][ T4082] syz.7.1570[4082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.002163][ T4077] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 90.075793][ T2602] EXT4-fs (loop6): unmounting filesystem. [ 90.122807][ T28] audit: type=1400 audit(1747271572.695:527): avc: denied { read write } for pid=4033 comm="syz.4.1551" name="lp0" dev="devtmpfs" ino=1320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 90.154408][ T28] audit: type=1400 audit(1747271572.695:528): avc: denied { open } for pid=4033 comm="syz.4.1551" path="/dev/usb/lp0" dev="devtmpfs" ino=1320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 90.164524][ T4093] loop7: detected capacity change from 0 to 512 [ 90.191536][ T4036] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 90.213510][ T577] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 90.221548][ T577] cdc_mbim 3-1:1.0: bind() failure [ 90.235164][ T577] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 90.245361][ T4093] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 90.261275][ T577] cdc_ncm 3-1:1.1: bind() failure [ 90.262925][ T4093] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.293495][ T577] usb 3-1: USB disconnect, device number 12 [ 90.316515][ T4093] EXT4-fs error (device loop7): ext4_do_update_inode:5226: inode #19: comm syz.7.1576: corrupted inode contents [ 90.330625][ T4093] EXT4-fs error (device loop7): ext4_dirty_inode:6091: inode #19: comm syz.7.1576: mark_inode_dirty error [ 90.343421][ T4093] EXT4-fs error (device loop7): ext4_do_update_inode:5226: inode #19: comm syz.7.1576: corrupted inode contents [ 90.356392][ T4093] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2954: inode #19: comm syz.7.1576: mark_inode_dirty error [ 90.369137][ T4093] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2957: inode #19: comm syz.7.1576: mark inode dirty (error -117) [ 90.382526][ T4093] EXT4-fs warning (device loop7): ext4_evict_inode:299: xattr delete (err -117) [ 90.406613][ T3789] EXT4-fs (loop7): unmounting filesystem. [ 90.556425][ T4034] usb 5-1: reset high-speed USB device number 12 using dummy_hcd [ 90.725954][ T28] audit: type=1400 audit(1747271573.295:529): avc: denied { write } for pid=4128 comm="syz.7.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.849161][ T28] audit: type=1400 audit(1747271573.425:530): avc: denied { execute } for pid=4134 comm="syz.2.1596" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.885905][ T4142] 9pnet: p9_errstr2errno: server reported unknown error 9p [ 90.896230][ T28] audit: type=1400 audit(1747271573.455:531): avc: denied { mounton } for pid=4138 comm="syz.7.1598" path="/42/file0" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.193123][ T4110] loop6: detected capacity change from 0 to 131072 [ 91.200776][ T4110] F2FS-fs (loop6): Test dummy encryption mode enabled [ 91.209247][ T4110] F2FS-fs (loop6): invalid crc value [ 91.219135][ T4110] F2FS-fs (loop6): Found nat_bits in checkpoint [ 91.278529][ T4110] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 91.286568][ T19] usb 5-1: USB disconnect, device number 12 [ 91.306089][ T19] usblp0: removed [ 91.347507][ T4110] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 91.361073][ T28] audit: type=1400 audit(1747271573.935:532): avc: denied { link } for pid=4109 comm="syz.6.1594" name="file1" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.852585][ T28] audit: type=1326 audit(1747271574.425:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe857d8e969 code=0x7ffc0000 [ 91.914172][ T28] audit: type=1326 audit(1747271574.425:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fe857d8e969 code=0x7ffc0000 [ 91.952964][ T28] audit: type=1326 audit(1747271574.425:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe857d8e969 code=0x7ffc0000 [ 91.958389][ T4203] sch_fq: defrate 0 ignored. [ 92.244015][ T4232] loop2: detected capacity change from 0 to 4096 [ 92.326358][ T1949] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 92.496299][ T614] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 92.526196][ T1949] usb 7-1: Using ep0 maxpacket: 16 [ 92.532815][ T1949] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 92.541144][ T1949] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.551549][ T1949] usb 7-1: config 0 has no interface number 0 [ 92.561929][ T1949] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 92.571310][ T1949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.579780][ T1949] usb 7-1: Product: syz [ 92.584067][ T1949] usb 7-1: Manufacturer: syz [ 92.589062][ T1949] usb 7-1: SerialNumber: syz [ 92.594481][ T1949] usb 7-1: config 0 descriptor?? [ 92.600557][ T1949] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 92.607010][ T1949] usb 7-1: No valid video chain found. [ 92.676337][ T614] usb 8-1: Using ep0 maxpacket: 8 [ 92.682633][ T614] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 92.691372][ T614] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 92.699910][ T614] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 92.709043][ T614] usb 8-1: config 250 has no interface number 0 [ 92.715329][ T614] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 92.726987][ T614] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 92.737544][ T614] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.747824][ T614] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 92.758184][ T614] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 92.771760][ T614] usb 8-1: config 250 interface 228 has no altsetting 0 [ 92.780150][ T614] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 92.789397][ T614] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 92.797713][ T614] usb 8-1: Product: syz [ 92.802053][ T614] usb 8-1: SerialNumber: syz [ 92.810397][ T39] usb 7-1: USB disconnect, device number 6 [ 92.817570][ T614] hub 8-1:250.228: bad descriptor, ignoring hub [ 92.823843][ T614] hub: probe of 8-1:250.228 failed with error -5 [ 93.010937][ T614] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 93.474259][ T4289] loop4: detected capacity change from 0 to 512 [ 93.502607][ T4289] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.553910][ T4289] EXT4-fs (loop4): 1 truncate cleaned up [ 93.563440][ T4289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.646528][ T4234] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 93.707924][ T286] EXT4-fs (loop4): unmounting filesystem. [ 93.796679][ T19] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 93.926838][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.933926][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.941737][ T4307] device bridge_slave_0 entered promiscuous mode [ 93.949090][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.957337][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.964993][ T4307] device bridge_slave_1 entered promiscuous mode [ 93.986187][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 93.992482][ T19] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 94.011903][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.035812][ T19] usb 3-1: config 0 descriptor?? [ 94.089621][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.096749][ T4307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.104059][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.111208][ T4307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.150147][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.158052][ T2590] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.165596][ T2590] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.192406][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.201878][ T2590] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.208969][ T2590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.217549][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.225881][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.232972][ T2590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.241359][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.249555][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.258486][ T19] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 94.285368][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.300684][ T4307] device veth0_vlan entered promiscuous mode [ 94.308453][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.317273][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.325026][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.347229][ T4307] device veth1_macvtap entered promiscuous mode [ 94.354416][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.366546][ T39] usb 8-1: USB disconnect, device number 3 [ 94.374066][ T39] usblp0: removed [ 94.381168][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.403310][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.411866][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.477473][ T320] device bridge_slave_1 left promiscuous mode [ 94.483675][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.494339][ T320] device bridge_slave_0 left promiscuous mode [ 94.501377][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.509958][ T320] device veth1_macvtap left promiscuous mode [ 94.518861][ T320] device veth0_vlan left promiscuous mode [ 94.716291][ T614] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 94.907532][ T614] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.918598][ T614] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.928686][ T614] usb 7-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 94.938118][ T614] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.948028][ T614] usb 7-1: config 0 descriptor?? [ 95.046257][ T39] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 95.227494][ T39] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.248219][ T39] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 95.266266][ T19] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 95.279155][ T39] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.287518][ T19] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 95.297633][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.308680][ T19] asix: probe of 3-1:0.0 failed with error -71 [ 95.318775][ T39] usb 8-1: Product: syz [ 95.323002][ T39] usb 8-1: Manufacturer: syz [ 95.323747][ T19] usb 3-1: USB disconnect, device number 13 [ 95.341912][ T39] usb 8-1: SerialNumber: syz [ 95.355568][ T4327] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 95.363334][ T614] hid (null): nested delimiters [ 95.370336][ T614] hid-generic 0003:0416:C168.0014: nested delimiters [ 95.387750][ T614] hid-generic 0003:0416:C168.0014: item 0 1 2 10 parsing failed [ 95.395701][ T614] hid-generic: probe of 0003:0416:C168.0014 failed with error -22 [ 95.575191][ T19] usb 7-1: USB disconnect, device number 7 [ 96.030545][ T4362] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 96.196254][ T1949] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 96.376240][ T577] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 96.376394][ T1949] usb 9-1: Using ep0 maxpacket: 8 [ 96.384980][ T39] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 96.390634][ T1949] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 96.395520][ T39] cdc_ncm 8-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 96.403934][ T1949] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 96.411295][ T39] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 96.419889][ T1949] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 96.434333][ T1949] usb 9-1: config 250 has no interface number 0 [ 96.440687][ T1949] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 96.452306][ T1949] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 96.462818][ T1949] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.473304][ T1949] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 96.483613][ T1949] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 96.497150][ T1949] usb 9-1: config 250 interface 228 has no altsetting 0 [ 96.505314][ T1949] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 96.514439][ T1949] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 96.522737][ T1949] usb 9-1: Product: syz [ 96.526949][ T1949] usb 9-1: SerialNumber: syz [ 96.533100][ T1949] hub 9-1:250.228: bad descriptor, ignoring hub [ 96.539446][ T1949] hub: probe of 9-1:250.228 failed with error -5 [ 96.557269][ T577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.568350][ T577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.578159][ T577] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.591126][ T39] cdc_ncm 8-1:1.0: setting tx_max = 184 [ 96.596824][ T577] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.608269][ T39] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 96.619237][ T577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.630152][ T39] usb 8-1: USB disconnect, device number 4 [ 96.638043][ T577] usb 3-1: config 0 descriptor?? [ 96.645095][ T39] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 96.717793][ T28] audit: type=1400 audit(1747271579.295:536): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 96.739605][ T1949] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 97.046220][ T577] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 97.137693][ T4378] loop6: detected capacity change from 0 to 256 [ 97.406558][ T4348] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 97.790208][ T577] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 98.106350][ T39] usb 9-1: USB disconnect, device number 2 [ 98.112896][ T39] usblp0: removed [ 98.513171][ T4386] netlink: 'syz.6.1715': attribute type 4 has an invalid length. [ 98.521210][ T4386] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1715'. [ 98.638737][ T4399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4399 comm=syz.7.1710 [ 98.697331][ T4407] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1717'. [ 98.716961][ T4407] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1717'. [ 98.728621][ T4411] loop6: detected capacity change from 0 to 512 [ 98.785312][ T4411] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 98.794738][ T4411] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.847114][ T2602] EXT4-fs (loop6): unmounting filesystem. [ 98.925267][ T28] audit: type=1400 audit(1747271581.495:537): avc: denied { append } for pid=4418 comm="syz.8.1723" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 99.063733][ T4430] loop6: detected capacity change from 0 to 8192 [ 99.096472][ T19] usb 3-1: USB disconnect, device number 14 [ 99.133165][ T28] audit: type=1400 audit(1747271581.705:538): avc: denied { ioctl } for pid=4437 comm="syz.5.1729" path="socket:[33055]" dev="sockfs" ino=33055 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.289722][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1737'. [ 100.606207][ T28] audit: type=1400 audit(1747271583.175:539): avc: denied { getopt } for pid=4506 comm="syz.8.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.796636][ T4529] serio: Serial port ptm0 [ 100.924256][ T28] audit: type=1400 audit(1747271583.495:540): avc: denied { setattr } for pid=4544 comm="syz.7.1774" path="/" dev="configfs" ino=13634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.040119][ T577] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 101.229971][ T577] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.245168][ T577] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 101.264745][ T577] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.289369][ T577] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.297853][ T577] usb 7-1: Product: syz [ 101.302054][ T577] usb 7-1: Manufacturer: syz [ 101.307199][ T577] usb 7-1: SerialNumber: syz [ 101.330698][ T4526] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 101.854670][ T4618] xt_bpf: check failed: parse error [ 101.892320][ T4620] serio: Serial port ptm0 [ 101.936238][ T39] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 101.970547][ T28] audit: type=1400 audit(1747271584.545:541): avc: denied { getopt } for pid=4622 comm="syz.5.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.136213][ T39] usb 9-1: Using ep0 maxpacket: 8 [ 102.141674][ T4645] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1821'. [ 102.152700][ T39] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 102.162505][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.171624][ T39] usb 9-1: config 0 descriptor?? [ 102.346331][ T614] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 102.354106][ T577] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 102.360687][ T577] cdc_ncm 7-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 102.368226][ T577] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 102.378902][ T39] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 102.546222][ T614] usb 8-1: Using ep0 maxpacket: 8 [ 102.553019][ T614] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 102.561576][ T577] cdc_ncm 7-1:1.0: setting tx_max = 184 [ 102.567452][ T614] usb 8-1: config 179 has no interface number 0 [ 102.576636][ T577] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 102.588191][ T614] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 102.618185][ T577] usb 7-1: USB disconnect, device number 8 [ 102.624405][ T577] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 102.706228][ T614] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 102.776208][ T614] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.906254][ T614] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 102.996178][ T614] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 103.116190][ T614] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 103.125309][ T614] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.277165][ T577] ================================================================== [ 103.285272][ T577] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 103.293126][ T577] Read of size 8 at addr ffff888119466cf0 by task kworker/1:3/577 [ 103.300955][ T577] [ 103.303311][ T577] CPU: 1 PID: 577 Comm: kworker/1:3 Not tainted 6.1.134-syzkaller-00014-g3cd01bb5bd37 #0 [ 103.313121][ T577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 103.323195][ T577] Workqueue: mld mld_ifc_work [ 103.327933][ T577] Call Trace: [ 103.331232][ T577] [ 103.334173][ T577] __dump_stack+0x21/0x24 [ 103.338531][ T577] dump_stack_lvl+0xee/0x150 [ 103.343157][ T577] ? __cfi_dump_stack_lvl+0x8/0x8 [ 103.348212][ T577] ? __list_del_entry_valid+0xa6/0x130 [ 103.353733][ T577] print_address_description+0x71/0x210 [ 103.359297][ T577] print_report+0x4a/0x60 [ 103.363725][ T577] kasan_report+0x122/0x150 [ 103.368262][ T577] ? __list_del_entry_valid+0xa6/0x130 [ 103.373841][ T577] __asan_report_load8_noabort+0x14/0x20 [ 103.379508][ T577] __list_del_entry_valid+0xa6/0x130 [ 103.384859][ T577] process_one_work+0x4b9/0xc40 [ 103.389750][ T577] worker_thread+0xa29/0x11f0 [ 103.394462][ T577] kthread+0x281/0x320 [ 103.398552][ T577] ? __cfi_worker_thread+0x10/0x10 [ 103.403684][ T577] ? __cfi_kthread+0x10/0x10 [ 103.408333][ T577] ret_from_fork+0x1f/0x30 [ 103.412812][ T577] [ 103.415859][ T577] [ 103.418201][ T577] Allocated by task 577: [ 103.422447][ T577] kasan_set_track+0x4b/0x70 [ 103.427059][ T577] kasan_save_alloc_info+0x25/0x30 [ 103.432198][ T577] __kasan_kmalloc+0x95/0xb0 [ 103.436819][ T577] __kmalloc_node+0xb2/0x1e0 [ 103.441443][ T577] kvmalloc_node+0x294/0x480 [ 103.446146][ T577] alloc_netdev_mqs+0x8d/0xf90 [ 103.450928][ T577] alloc_etherdev_mqs+0x37/0x40 [ 103.455799][ T577] usbnet_probe+0x20c/0x2780 [ 103.460407][ T577] usb_probe_interface+0x610/0xaf0 [ 103.465538][ T577] really_probe+0x2cb/0x960 [ 103.470064][ T577] __driver_probe_device+0x198/0x280 [ 103.475376][ T577] driver_probe_device+0x54/0x3e0 [ 103.480431][ T577] __device_attach_driver+0x2e9/0x4a0 [ 103.485840][ T577] bus_for_each_drv+0x183/0x210 [ 103.490791][ T577] __device_attach+0x2a2/0x400 [ 103.495573][ T577] device_initial_probe+0x1a/0x20 [ 103.500659][ T577] bus_probe_device+0xc0/0x1f0 [ 103.505452][ T577] device_add+0xb4d/0xef0 [ 103.509807][ T577] usb_set_configuration+0x19c2/0x1f10 [ 103.515292][ T577] usb_generic_driver_probe+0x91/0x150 [ 103.520765][ T577] usb_probe_device+0x159/0x270 [ 103.525629][ T577] really_probe+0x2cb/0x960 [ 103.530152][ T577] __driver_probe_device+0x198/0x280 [ 103.535469][ T577] driver_probe_device+0x54/0x3e0 [ 103.540620][ T577] __device_attach_driver+0x2e9/0x4a0 [ 103.546110][ T577] bus_for_each_drv+0x183/0x210 [ 103.550981][ T577] __device_attach+0x2a2/0x400 [ 103.555765][ T577] device_initial_probe+0x1a/0x20 [ 103.560831][ T577] bus_probe_device+0xc0/0x1f0 [ 103.565627][ T577] device_add+0xb4d/0xef0 [ 103.569984][ T577] usb_new_device+0xa70/0x1520 [ 103.574778][ T577] hub_event+0x2a5d/0x4680 [ 103.579315][ T577] process_one_work+0x71f/0xc40 [ 103.584189][ T577] worker_thread+0xa29/0x11f0 [ 103.588874][ T577] kthread+0x281/0x320 [ 103.592957][ T577] ret_from_fork+0x1f/0x30 [ 103.597387][ T577] [ 103.599715][ T577] Freed by task 577: [ 103.603611][ T577] kasan_set_track+0x4b/0x70 [ 103.608214][ T577] kasan_save_free_info+0x31/0x50 [ 103.613255][ T577] ____kasan_slab_free+0x132/0x180 [ 103.618380][ T577] __kasan_slab_free+0x11/0x20 [ 103.623168][ T577] slab_free_freelist_hook+0xc2/0x190 [ 103.628569][ T577] __kmem_cache_free+0xb7/0x1b0 [ 103.633450][ T577] kfree+0x6f/0xf0 [ 103.637196][ T577] kvfree+0x35/0x40 [ 103.641029][ T577] netdev_freemem+0x3f/0x60 [ 103.645556][ T577] netdev_release+0x7f/0xb0 [ 103.650080][ T577] device_release+0xa4/0x1d0 [ 103.654684][ T577] kobject_put+0x19d/0x280 [ 103.659122][ T577] put_device+0x1f/0x30 [ 103.663291][ T577] free_netdev+0x392/0x490 [ 103.667728][ T577] usbnet_disconnect+0x25a/0x3b0 [ 103.672718][ T577] usb_unbind_interface+0x223/0x8d0 [ 103.677942][ T577] device_release_driver_internal+0x508/0x820 [ 103.684031][ T577] device_release_driver+0x19/0x20 [ 103.689166][ T577] bus_remove_device+0x2ee/0x350 [ 103.694127][ T577] device_del+0x6a4/0xeb0 [ 103.698482][ T577] usb_disable_device+0x3a8/0x750 [ 103.703712][ T577] usb_disconnect+0x31e/0x860 [ 103.708424][ T577] hub_event+0x1bd5/0x4680 [ 103.712946][ T577] process_one_work+0x71f/0xc40 [ 103.717992][ T577] worker_thread+0xd2e/0x11f0 [ 103.722686][ T577] kthread+0x281/0x320 [ 103.726791][ T577] ret_from_fork+0x1f/0x30 [ 103.731231][ T577] [ 103.733564][ T577] Last potentially related work creation: [ 103.739295][ T577] kasan_save_stack+0x3a/0x60 [ 103.744077][ T577] __kasan_record_aux_stack+0xb6/0xc0 [ 103.749484][ T577] kasan_record_aux_stack_noalloc+0xb/0x10 [ 103.755351][ T577] insert_work+0x51/0x300 [ 103.759868][ T577] __queue_work+0x9b1/0xd30 [ 103.764399][ T577] queue_work_on+0xd2/0x140 [ 103.768913][ T577] usbnet_link_change+0x176/0x1a0 [ 103.774089][ T577] usbnet_probe+0x1d55/0x2780 [ 103.778784][ T577] usb_probe_interface+0x610/0xaf0 [ 103.783890][ T577] really_probe+0x2cb/0x960 [ 103.788396][ T577] __driver_probe_device+0x198/0x280 [ 103.793689][ T577] driver_probe_device+0x54/0x3e0 [ 103.798719][ T577] __device_attach_driver+0x2e9/0x4a0 [ 103.804171][ T577] bus_for_each_drv+0x183/0x210 [ 103.809050][ T577] __device_attach+0x2a2/0x400 [ 103.813990][ T577] device_initial_probe+0x1a/0x20 [ 103.819172][ T577] bus_probe_device+0xc0/0x1f0 [ 103.824033][ T577] device_add+0xb4d/0xef0 [ 103.828991][ T577] usb_set_configuration+0x19c2/0x1f10 [ 103.834516][ T577] usb_generic_driver_probe+0x91/0x150 [ 103.840085][ T577] usb_probe_device+0x159/0x270 [ 103.844958][ T577] really_probe+0x2cb/0x960 [ 103.849473][ T577] __driver_probe_device+0x198/0x280 [ 103.854862][ T577] driver_probe_device+0x54/0x3e0 [ 103.859950][ T577] __device_attach_driver+0x2e9/0x4a0 [ 103.865332][ T577] bus_for_each_drv+0x183/0x210 [ 103.870192][ T577] __device_attach+0x2a2/0x400 [ 103.874955][ T577] device_initial_probe+0x1a/0x20 [ 103.879981][ T577] bus_probe_device+0xc0/0x1f0 [ 103.884734][ T577] device_add+0xb4d/0xef0 [ 103.889055][ T577] usb_new_device+0xa70/0x1520 [ 103.893809][ T577] hub_event+0x2a5d/0x4680 [ 103.898230][ T577] process_one_work+0x71f/0xc40 [ 103.903092][ T577] worker_thread+0xa29/0x11f0 [ 103.907767][ T577] kthread+0x281/0x320 [ 103.911829][ T577] ret_from_fork+0x1f/0x30 [ 103.916242][ T577] [ 103.918556][ T577] The buggy address belongs to the object at ffff888119466000 [ 103.918556][ T577] which belongs to the cache kmalloc-4k of size 4096 [ 103.932636][ T577] The buggy address is located 3312 bytes inside of [ 103.932636][ T577] 4096-byte region [ffff888119466000, ffff888119467000) [ 103.946081][ T577] [ 103.948396][ T577] The buggy address belongs to the physical page: [ 103.954794][ T577] page:ffffea0004651800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119460 [ 103.965021][ T577] head:ffffea0004651800 order:3 compound_mapcount:0 compound_pincount:0 [ 103.973335][ T577] flags: 0x4000000000010200(slab|head|zone=1) [ 103.979422][ T577] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 103.988113][ T577] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 103.996784][ T577] page dumped because: kasan: bad access detected [ 104.003209][ T577] page_owner tracks the page as allocated [ 104.008928][ T577] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 102, tgid 102 (udevd), ts 54317774506, free_ts 54281821290 [ 104.031076][ T577] post_alloc_hook+0x1f5/0x210 [ 104.035846][ T577] prep_new_page+0x1c/0x110 [ 104.040374][ T577] get_page_from_freelist+0x2c6e/0x2ce0 [ 104.045999][ T577] __alloc_pages+0x19e/0x3a0 [ 104.050680][ T577] alloc_slab_page+0x6e/0xf0 [ 104.055419][ T577] new_slab+0x98/0x3d0 [ 104.059504][ T577] ___slab_alloc+0x6f6/0xb50 [ 104.064098][ T577] __slab_alloc+0x5e/0xa0 [ 104.068435][ T577] __kmem_cache_alloc_node+0x203/0x2c0 [ 104.074097][ T577] kmalloc_trace+0x29/0xb0 [ 104.078532][ T577] kobject_uevent_env+0x287/0x730 [ 104.083555][ T577] kobject_synth_uevent+0x520/0xaf0 [ 104.088748][ T577] uevent_store+0x25/0x70 [ 104.093066][ T577] dev_attr_store+0x6c/0x90 [ 104.097579][ T577] sysfs_kf_write+0x137/0x150 [ 104.102245][ T577] kernfs_fop_write_iter+0x2d6/0x410 [ 104.107524][ T577] page last free stack trace: [ 104.112211][ T577] free_unref_page_prepare+0x742/0x750 [ 104.117680][ T577] free_unref_page+0x8f/0x530 [ 104.122344][ T577] __free_pages+0x67/0x100 [ 104.126747][ T577] __free_slab+0xca/0x1a0 [ 104.131085][ T577] __unfreeze_partials+0x160/0x190 [ 104.136212][ T577] put_cpu_partial+0xa9/0x100 [ 104.140880][ T577] __slab_free+0x1c4/0x280 [ 104.145286][ T577] ___cache_free+0xbf/0xd0 [ 104.149697][ T577] qlist_free_all+0xc6/0x140 [ 104.154343][ T577] kasan_quarantine_reduce+0x14a/0x170 [ 104.159831][ T577] __kasan_slab_alloc+0x24/0x80 [ 104.164722][ T577] slab_post_alloc_hook+0x4f/0x2d0 [ 104.169844][ T577] kmem_cache_alloc+0x16e/0x330 [ 104.174701][ T577] getname_flags+0xb9/0x500 [ 104.179245][ T577] user_path_at_empty+0x30/0x1c0 [ 104.184172][ T577] __x64_sys_umount+0xf1/0x160 [ 104.188936][ T577] [ 104.191245][ T577] Memory state around the buggy address: [ 104.196867][ T577] ffff888119466b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.204935][ T577] ffff888119466c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.212999][ T577] >ffff888119466c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.221043][ T577] ^ [ 104.228743][ T577] ffff888119466d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.236960][ T577] ffff888119466d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.245022][ T577] ================================================================== [ 104.253074][ T577] Disabling lock debugging due to kernel taint [ 104.270894][ T28] audit: type=1400 audit(1747271586.845:542): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 104.506635][ T28] audit: type=1400 audit(1747271586.875:543): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.726201][ T28] audit: type=1400 audit(1747271586.875:544): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.986204][ T28] audit: type=1400 audit(1747271586.875:545): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.236178][ T28] audit: type=1400 audit(1747271586.875:546): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.486247][ T28] audit: type=1400 audit(1747271586.875:547): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.736239][ T28] audit: type=1400 audit(1747271586.875:548): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.946231][ T4637] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 106.885897][ T614] usb 8-1: can't set config #179, error -71 [ 106.904439][ T39] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.917558][ T614] usb 8-1: USB disconnect, device number 5 [ 106.924539][ T39] asix: probe of 9-1:0.0 failed with error -71 [ 106.932908][ T39] usb 9-1: USB disconnect, device number 3