last executing test programs: 3m16.509301121s ago: executing program 4 (id=3362): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0xc10, 0x948, 0x168, 0x10, 0x948, 0xb, 0xb40, 0x250, 0x250, 0xb40, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x8e0, 0x948, 0x0, {0x0, 0x28e}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x10000, 0x3}, {0x412, 0x1}, {0xe, 0x3}, {0x7fff}, {0x3, 0x2}, {0x7, 0x2}, {0x9, 0x1}, {0x8, 0x1}, {0x6021, 0x3}, {0x2, 0x464ed55f53542fa}, {0x3, 0x3}], [{0xff, 0x1}, {0x6, 0x6}, {0x41d, 0x4}, {0x758, 0x7fff}, {0x4, 0x5}, {0x6}, {0x4, 0x1}, {0x0, 0x5}, {0x5, 0x8000}, {0xfffffffe, 0x1b}], 0x6, 0x9}, {[{0x7, 0x3}, {0x60923fda, 0x1}, {0x7779}, {0x7fffffff}, {0x8, 0x2}, {0x7, 0x3}, {0x6}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0xfff, 0x2}], [{0xffffff5e, 0x5}, {0x10, 0xc}, {0x662eafc6, 0xa698}, {0x8c5, 0x4d}, {0xb1, 0x29dd}, {0x1, 0x1}, {0x80, 0xffff74c0}, {0xcbc}, {0x7, 0x9}, {0x7}, {0x1, 0x8}], 0x2, 0x2}, {[{0x10}, {0x3}, {0xf855, 0x1}, {0xdf, 0x2}, {0x9, 0x1}, {0x8, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x3, 0x2}, {0x7, 0x2}, {0x9, 0x3}], [{0x670, 0x5}, {0x5, 0x20000001}, {0x5, 0xfffffe8b}, {0xffffffb1, 0xa7c}, {0xfff, 0x400}, {0x2}, {0x401, 0xd}, {0xd, 0x2}, {0x3, 0x6}, {0x4, 0x57b7}, {0x1, 0x1}], 0xb, 0x5}, {[{0x7}, {0x52b, 0x1}, {0x2, 0x2}, {0xffff6f44}, {0x27b42d8d}, {0x6, 0x1}, {0xb6e, 0x1}, {0x0, 0x2}, {0x40000000, 0x1}, {0x1, 0x1}, {0x8, 0x3}], [{0x4, 0x80000000}, {0x0, 0x2e8}, {0xb, 0x101}, {0x8, 0xffffffff}, {0x6, 0xa3ed}, {0x6b, 0x100}, {0x3, 0x3}, {0xfffffffc, 0x401}, {0x7, 0x7}, {0x8}, {0x9, 0x1}], 0x6, 0x5}, {[{0x8, 0x1}, {0xc8, 0x2}, {0x590, 0x2}, {0x7, 0x2}, {0xb04, 0x1}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x8, 0x2}, {0x40}, {0x10, 0x3}], [{0x0, 0x3}, {0x9, 0x4}, {0x62, 0x8}, {0x2, 0x401}, {0x3, 0x4}, {0x382}, {0x2, 0x2}, {0x776, 0x4d46}, {0x9, 0xfffff800}, {0xfffffffe, 0x5}, {0x7, 0xbd}], 0x1, 0x2}, {[{0x10, 0x3}, {0x7fffffff, 0x2}, {0x0, 0x3}, {0xd, 0x2}, {0x81}, {0xe39}, {0x5}, {0x8d, 0x1}, {0x1, 0x2}, {0x80000003, 0x1}, {0x4, 0x2}], [{0xffff, 0x7}, {0x3, 0x3}, {0x9, 0x1}, {0x4, 0x3}, {0x5, 0x3}, {0x9, 0x10000}, {0x8, 0x6}, {0x1000, 0x5}, {0x6, 0xff}, {0xffffffff}, {0x6, 0x8}], 0x9, 0x4}, {[{0x3, 0x2}, {0xf58, 0x1}, {0x2, 0x2}, {0x401, 0x3}, {0x8}, {0xfffffff9, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x1}], [{0x7f, 0x80000000}, {0x2, 0xd}, {0xa}, {0x8, 0x4}, {0x2, 0xfffffff7}, {0x2, 0x1}, {0x6, 0x9}, {0x6, 0x1}, {0xfffffffe, 0xd}, {0xf, 0xffffffff}, {0x8, 0x40000}], 0x9, 0x7}, {[{0x101, 0x3}, {0x10, 0x3}, {0x9, 0x1}, {0x7f}, {0x9, 0x1}, {0xffffffff}, {0x6, 0x2}, {0x1, 0x3}, {0xb, 0x2}, {0x8, 0x2}, {0x30000000}], [{0x40, 0xfffffe32}, {0x3, 0x1}, {0x7, 0x805a}, {0x7, 0x8}, {0x9, 0x80000000}, {0x800, 0xfffffffa}, {0xb, 0xc}, {0x9f89, 0x6}, {0x5, 0x8}, {0x80, 0x1}, {0x7, 0x55dd844b}], 0x5, 0x9}, {[{0xa, 0x2}, {0x5, 0x2}, {0x8, 0x2}, {0x8, 0x1}, {0x401}, {0xa5, 0x3}, {0x6}, {0x7}, {0x7, 0x3}, {0x7, 0x1}, {0x2cd1, 0x2}], [{0x3}, {0x9}, {0xfffffff0, 0x7}, {0x0, 0x1}, {0x3, 0x9}, {0x6, 0xd2b}, {0x2, 0x6}, {0xe39, 0x8000}, {0x5b}, {0x800, 0x8}, {0x5, 0x1}], 0x1, 0xa}, {[{0xe, 0x1}, {0xffffff80, 0x3}, {}, {0x4, 0x2}, {0x6, 0x3}, {0x40, 0x1}, {0x6, 0x1}, {0x7fff, 0x1}, {0x16a, 0x1}, {0x5, 0x3}, {0x4}], [{0x3, 0x2}, {0xbc6f3d9b, 0x828}, {0x8000, 0x8}, {0x5, 0x2}, {0x0, 0x45d0}, {0x8, 0x9}, {0x5, 0x31}, {0x1, 0x670f}, {0xdc03, 0x3}, {0x100, 0x9}, {0xfffffffc, 0xff0}], 0x8, 0xfe}, {[{0x7fff}, {0x9}, {0x0, 0x1}, {0x6, 0x3}, {0x4, 0x3}, {0xffff}, {0x9}, {0x1}, {0x367d, 0x3}, {0x3, 0x2}, {0x0, 0x1}], [{0x59000000, 0x8}, {0x1, 0x9}, {0x7fff8, 0x1b0d}, {0xfffff371, 0x4}, {0x8, 0x2}, {0x7ff, 0x2}, {0x8, 0x7}, {0x44, 0xb}, {0x1, 0x6}, {0x400, 0x7}, {0x2, 0x5369}], 0xa, 0xa}], 0xff}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000401, 0x80}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x4, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xc70) 3m16.497832851s ago: executing program 4 (id=3363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000020600074000ebffff3b0001802c00018014000300ff010000000000000000000000000001140004"], 0x58}}, 0x0) 3m16.453907982s ago: executing program 4 (id=3366): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) lseek(r0, 0xfffffffffffffff5, 0x2) 3m16.434770202s ago: executing program 4 (id=3367): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fmask=00000000000000000000002,utf8,errors=continue,errors=continue,umask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,iocharset=cp861,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030343734322c00b9f685272b77fb29699c9812790c8e1cf1a509522297282c1baeb6807e1c17a3656a1392f26be8c387f314f179f20a04743059687713101ea6e94b94cb6e873ad4d77fcc4582c8df39fbde21cd92f4d40af8eb2000eb324eecedca37b05b9ea627fccd794f4cd437b579386ed4d7509c4c61cc0ec616ceb8df966b3c77e9d6c5b5548ccc3db5005957ca8157767a8cecd0e95e1e86a47d47f5d938af504786e6471cd18b9a748312ad0461035315eb41def2723677f09a48380ea675e99e86f2784465782f48b1d5d4129311928675f03b0b6f508d0d7fdc1eceae4b13a2c4de755c193bc4c9d5b27282ccb005f6631fc17ca41c0b1ae7f7659a3ff65532642c0f4ff286cbc05911e8e02fdf4c2bf6ac9c1e501c125dbfdd4de2baa6f4f9001772c91955b16dfd7fff1aaca86324e6794600dc08431a65f9de5f8be90184614ef8578a181cd4da828cae864caa1458015c13993e349cf29a249ecf4debad6c31e12206000000304c6c11419dd3633e4d660fd73d7280d2c3bf1003c60f4f95d9dde44be4c9c37e0bad3971246e0ebb02ad"], 0x1, 0x152d, &(0x7f00000034c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 3m16.251876055s ago: executing program 4 (id=3377): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x2, 0x0, &(0x7f0000000040)) 3m16.108076417s ago: executing program 4 (id=3385): r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000120, 0x0, 0x0) 3m16.098376337s ago: executing program 32 (id=3385): r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000120, 0x0, 0x0) 2.50879045s ago: executing program 3 (id=10781): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) setuid(0xee01) 2.491298521s ago: executing program 3 (id=10784): rt_sigaction(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r0, 0x9, 0x0) 2.474441251s ago: executing program 3 (id=10785): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) getrandom(0x0, 0x0, 0x0) 2.454711961s ago: executing program 3 (id=10786): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @mcast2, 0x4}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setitimer(0x1, &(0x7f0000000000), 0x0) 2.428346682s ago: executing program 3 (id=10790): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000007c0)=0x2) 2.401396822s ago: executing program 3 (id=10791): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioperm(0x0, 0x40, 0x800000000002) 1.542768996s ago: executing program 5 (id=10809): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.466300107s ago: executing program 5 (id=10810): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x1) 1.400667208s ago: executing program 5 (id=10811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r1, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x40006) 1.304684489s ago: executing program 5 (id=10814): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_read_part_table(0x5e5, &(0x7f0000000000)="$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") 1.113429802s ago: executing program 5 (id=10820): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000ffff00000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 949.488525ms ago: executing program 5 (id=10828): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x57, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xb27, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)={0x0, 0x30, 0x8, {0x8, 0x24, "81b079d9871f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 713.320089ms ago: executing program 2 (id=10837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008007000fedbdf250b0000000b00058008000100756474005fc8"], 0x20}, 0x1, 0x0, 0x0, 0x24002844}, 0x20000004) 681.549329ms ago: executing program 2 (id=10838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0xffdd) 594.51263ms ago: executing program 2 (id=10839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) 570.994311ms ago: executing program 2 (id=10841): syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x1040000, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 546.320231ms ago: executing program 2 (id=10842): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in=@empty, 0x0, 0x3, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x32}, {0x0, 0x15000000000000, 0x0, 0x2, 0x8001, 0xfffffffffffffffd, 0x0, 0xd3d}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x89, 0x1, 0x1}, {{@in6=@empty, 0x4da, 0x3c}, 0xa, @in=@multicast2, 0xfffffffe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 531.178311ms ago: executing program 2 (id=10843): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) lstat(&(0x7f0000000180)='./file0\x00', 0x0) 254.142206ms ago: executing program 1 (id=10855): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) get_robust_list(0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) 188.830156ms ago: executing program 1 (id=10857): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r1, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) 150.609717ms ago: executing program 0 (id=10858): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x200000400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 150.140367ms ago: executing program 1 (id=10859): r0 = fsopen(&(0x7f0000000400)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xee', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)=',\x00\x87\xe1', 0x0) 116.451288ms ago: executing program 1 (id=10860): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x80) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x17) 115.756948ms ago: executing program 0 (id=10861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.799319ms ago: executing program 0 (id=10862): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, r0}, 0xc) 50.626139ms ago: executing program 1 (id=10863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2308217f01"], 0xffdd) 50.224599ms ago: executing program 0 (id=10864): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x4004c}}], 0x1, 0x4) 14.127139ms ago: executing program 0 (id=10865): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006) 13.532869ms ago: executing program 1 (id=10866): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xc0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000180)) 0s ago: executing program 0 (id=10867): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0x6, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) kernel console output (not intermixed with test programs): 040:18278): avc: denied { unmount } for pid=7633 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 296.504359][ T24] audit: type=1400 audit(2000000021.090:18279): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.571712][ T1030] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 296.582709][ T24] audit: type=1400 audit(2000000021.090:18280): avc: denied { open } for pid=277 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.632971][ T24] audit: type=1400 audit(2000000021.130:18281): avc: denied { ioctl } for pid=277 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.681089][ T24] audit: type=1400 audit(2000000021.130:18282): avc: denied { read write } for pid=7633 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.718000][ T24] audit: type=1400 audit(2000000021.130:18283): avc: denied { read write open } for pid=7633 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.746412][ T24] audit: type=1400 audit(2000000021.130:18284): avc: denied { ioctl } for pid=7633 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.781658][ T24] audit: type=1400 audit(2000000021.130:18285): avc: denied { prog_load } for pid=18923 comm="syz.0.8716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 296.813457][ T24] audit: type=1400 audit(2000000021.130:18286): avc: denied { bpf } for pid=18923 comm="syz.0.8716" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 296.856761][ T24] audit: type=1400 audit(2000000021.140:18287): avc: denied { bpf } for pid=18923 comm="syz.0.8716" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 296.994714][T18955] netlink: 'syz.1.8729': attribute type 1 has an invalid length. [ 297.121956][T18965] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue [ 297.147279][T18965] ext4 filesystem being mounted at /1893/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.160240][ T1030] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 297.169651][ T1030] usb 3-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 297.182567][ T1030] usb 3-1: Product: syz [ 297.195453][ T1030] usb 3-1: Manufacturer: syz [ 297.200254][ T1030] usb 3-1: SerialNumber: syz [ 297.206687][ T1030] usb 3-1: config 0 descriptor?? [ 297.329615][T18980] FAT-fs (loop5): Directory bread(block 64) failed [ 297.336947][T18980] FAT-fs (loop5): Directory bread(block 65) failed [ 297.343921][T18980] FAT-fs (loop5): Directory bread(block 66) failed [ 297.350580][T18980] FAT-fs (loop5): Directory bread(block 67) failed [ 297.357416][T18980] FAT-fs (loop5): Directory bread(block 68) failed [ 297.364244][T18980] FAT-fs (loop5): Directory bread(block 69) failed [ 297.370910][T18980] FAT-fs (loop5): Directory bread(block 70) failed [ 297.377723][T18980] FAT-fs (loop5): Directory bread(block 71) failed [ 297.384498][T18980] FAT-fs (loop5): Directory bread(block 72) failed [ 297.391130][T18980] FAT-fs (loop5): Directory bread(block 73) failed [ 297.901675][ T1030] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 297.911963][ T1030] asix: probe of 3-1:0.0 failed with error -71 [ 297.923673][ T1582] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 297.940771][ T1030] usb 3-1: USB disconnect, device number 76 [ 298.311727][ T1582] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.323020][ T1582] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.334226][ T1582] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.347645][ T1582] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 298.357347][ T1582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.386592][ T1582] usb 6-1: config 0 descriptor?? [ 298.557725][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8794'. [ 298.754163][T19131] tipc: Enabling of bearer rejected, failed to enable media [ 298.774905][T19132] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 298.883532][ T1582] ntrig 0003:1B96:0009.001C: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.5-1/input0 [ 299.105780][ T1582] usb 6-1: USB disconnect, device number 16 [ 299.174661][T19186] fido_id[19186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 299.521712][T15593] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 299.881711][T15593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 299.892806][T15584] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 299.911875][T15593] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 299.931723][T15593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.951862][T15593] usb 4-1: config 0 descriptor?? [ 299.971892][T19201] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 300.159603][T19233] EXT4-fs (loop1): Ignoring removed bh option [ 300.172093][T19233] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 300.193770][T19233] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,errors=remount-ro,barrier=0x0000000000000002,errors=remount-ro,data_err=ignore,jqfmt=vfsv1,nodelalloc,grpquota,noload,nouid32,bh,dioread_nolock, [ 300.251706][T15584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.271641][T15584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.301493][T15584] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 300.320810][T15584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.344669][T15584] usb 6-1: config 0 descriptor?? [ 300.433174][T15593] wacom 0003:056A:0029.001D: unbalanced delimiter at end of report description [ 300.452472][T15593] wacom 0003:056A:0029.001D: parse failed [ 300.468923][T15593] wacom: probe of 0003:056A:0029.001D failed with error -22 [ 300.495775][T19248] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 300.522579][T19248] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c802e018, mo2=0000] [ 300.533918][T19248] EXT4-fs error (device loop1): ext4_orphan_get:1421: comm syz.1.8865: bad orphan inode 11 [ 300.545860][T19248] ext4_test_bit(bit=10, block=4) = 1 [ 300.551152][T19248] is_bad_inode(inode)=0 [ 300.555695][T19248] NEXT_ORPHAN(inode)=3254779904 [ 300.560543][T19248] max_ino=32 [ 300.563924][T19248] i_nlink=0 [ 300.567819][T19248] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 2: comm syz.1.8865: lblock 2 mapped to illegal pblock 2 (length 1) [ 300.582403][T19248] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 48: comm syz.1.8865: lblock 0 mapped to illegal pblock 48 (length 1) [ 300.597949][T19248] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.8865: Failed to acquire dquot type 0 [ 300.609723][T19248] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 300.619723][T19248] EXT4-fs error (device loop1): ext4_evict_inode:283: inode #11: comm syz.1.8865: mark_inode_dirty error [ 300.631837][T19248] EXT4-fs warning (device loop1): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 300.633865][T15593] usb 4-1: USB disconnect, device number 69 [ 300.644664][T19248] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,noblock_validity,mblk_io_submit,data_err=ignore,debug,inlinecrypt,,errors=continue [ 300.699222][T19248] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #2: block 16: comm syz.1.8865: lblock 0 mapped to illegal pblock 16 (length 1) [ 300.721974][ T276] EXT4-fs error (device loop1): __ext4_get_inode_loc:4438: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 300.735244][ T276] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 300.744923][ T276] EXT4-fs error (device loop1): ext4_quota_off:6545: inode #3: comm syz-executor: mark_inode_dirty error [ 300.822641][T15584] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 300.829657][T15584] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 300.850765][T15584] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 300.872013][T15584] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 300.891639][T15584] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 300.898597][T15584] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 300.926140][T15584] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 300.951790][T15584] belkin 0003:1020:0006.001E: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.5-1/input0 [ 301.031191][ T1582] usb 6-1: USB disconnect, device number 17 [ 301.145860][ T295] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 301.401739][ T295] usb 2-1: Using ep0 maxpacket: 32 [ 301.521735][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.532925][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.543029][ T295] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 301.559054][ T24] kauditd_printk_skb: 807 callbacks suppressed [ 301.559069][ T24] audit: type=1400 audit(2000000002.540:19093): avc: denied { read write } for pid=7633 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.590013][ T1582] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 301.597763][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.627213][ T295] usb 2-1: config 0 descriptor?? [ 301.635897][ T24] audit: type=1400 audit(2000000002.590:19094): avc: denied { read write open } for pid=7633 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.669753][ T24] audit: type=1400 audit(2000000002.590:19095): avc: denied { ioctl } for pid=7633 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.709868][ T24] audit: type=1400 audit(2000000002.610:19096): avc: denied { map_create } for pid=19275 comm="syz.5.8877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 301.736878][ T24] audit: type=1400 audit(2000000002.610:19097): avc: denied { bpf } for pid=19275 comm="syz.5.8877" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 301.774459][ T24] audit: type=1400 audit(2000000002.610:19098): avc: denied { map_read } for pid=19275 comm="syz.5.8877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 301.794848][ T24] audit: type=1400 audit(2000000002.620:19099): avc: denied { ioctl } for pid=19273 comm="syz.3.8876" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 301.820980][ T24] audit: type=1400 audit(2000000002.620:19100): avc: denied { prog_load } for pid=19275 comm="syz.5.8877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 301.845173][ T24] audit: type=1400 audit(2000000002.620:19101): avc: denied { bpf } for pid=19275 comm="syz.5.8877" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 301.875205][ T24] audit: type=1400 audit(2000000002.620:19102): avc: denied { perfmon } for pid=19275 comm="syz.5.8877" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 302.021669][ T1582] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.032664][ T1582] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.042942][ T1582] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 302.052075][ T1582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.070480][ T1582] usb 4-1: config 0 descriptor?? [ 302.132676][ T295] smartjoyplus 0003:0925:8866.001F: item fetching failed at offset 3/5 [ 302.141550][ T295] smartjoyplus 0003:0925:8866.001F: parse failed [ 302.148457][ T446] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 302.156269][ T295] smartjoyplus: probe of 0003:0925:8866.001F failed with error -22 [ 302.345972][ T295] usb 2-1: USB disconnect, device number 68 [ 302.370653][T19304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8891'. [ 302.401679][ T446] usb 6-1: Using ep0 maxpacket: 32 [ 302.509330][T19320] futex_wake_op: syz.0.8899 tries to shift op by 32; fix this program [ 302.522370][ T446] usb 6-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.543047][ T1582] wacom 0003:056A:0325.0020: unknown main item tag 0x0 [ 302.551151][ T446] usb 6-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.562291][ T1582] wacom 0003:056A:0325.0020: unknown main item tag 0x0 [ 302.569420][ T1582] wacom 0003:056A:0325.0020: unknown main item tag 0x0 [ 302.577438][ T446] usb 6-1: config 0 interface 0 has no altsetting 0 [ 302.584313][ T1582] wacom 0003:056A:0325.0020: unknown main item tag 0x0 [ 302.591895][ T446] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 302.601118][ T446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.609632][ T1582] wacom 0003:056A:0325.0020: unknown main item tag 0x0 [ 302.616753][ T1582] wacom 0003:056A:0325.0020: unknown main item tag 0x0 [ 302.624207][ T1582] wacom 0003:056A:0325.0020: unknown main item tag 0x0 [ 302.633227][ T446] usb 6-1: config 0 descriptor?? [ 302.638788][ T1582] wacom 0003:056A:0325.0020: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.3-1/input0 [ 302.744018][ T1582] usb 4-1: USB disconnect, device number 70 [ 303.102963][ T446] petalynx 0003:18B1:0037.0021: unknown main item tag 0x0 [ 303.111690][ T446] petalynx 0003:18B1:0037.0021: unknown main item tag 0x0 [ 303.118922][ T446] petalynx 0003:18B1:0037.0021: unknown main item tag 0x0 [ 303.128447][ T446] petalynx 0003:18B1:0037.0021: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.5-1/input0 [ 303.211706][T15584] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 303.317827][ T446] usb 6-1: USB disconnect, device number 18 [ 303.451655][T15584] usb 3-1: Using ep0 maxpacket: 8 [ 303.571762][T15584] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.584665][T15584] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 303.593771][T15584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.604150][T15584] usb 3-1: config 0 descriptor?? [ 303.821689][T19371] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8922'. [ 303.957487][T19386] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8929'. [ 304.009791][T19390] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8931'. [ 304.019393][T19390] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8931'. [ 304.083109][T15584] wacom 0003:056A:003F.0022: unknown main item tag 0x0 [ 304.096287][T15584] wacom 0003:056A:003F.0022: unknown main item tag 0x0 [ 304.103922][T15584] wacom 0003:056A:003F.0022: unknown main item tag 0x0 [ 304.111360][T15584] wacom 0003:056A:003F.0022: unknown main item tag 0x0 [ 304.119482][T15584] wacom 0003:056A:003F.0022: unknown main item tag 0x0 [ 304.130558][T15584] wacom 0003:056A:003F.0022: hidraw0: USB HID v0.07 Device [HID 056a:003f] on usb-dummy_hcd.2-1/input0 [ 304.300603][T15584] usb 3-1: USB disconnect, device number 77 [ 304.341645][ T446] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 304.423810][T19448] mmap: syz.0.8959 (19448): VmData 24883200 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 304.434633][T19450] tipc: Enabling of bearer rejected, failed to enable media [ 304.712315][ T446] usb 6-1: config 0 interface 0 has no altsetting 0 [ 304.722103][ T446] usb 6-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 304.731178][ T446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.750029][ T446] usb 6-1: config 0 descriptor?? [ 305.003149][T19503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.101758][T15584] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 305.242571][ T446] acrux 0003:1A34:F705.0023: item fetching failed at offset 2/5 [ 305.250468][ T446] acrux 0003:1A34:F705.0023: parse failed [ 305.256305][ T446] acrux: probe of 0003:1A34:F705.0023 failed with error -22 [ 305.312006][ T2957] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 305.447052][ T446] usb 6-1: USB disconnect, device number 19 [ 305.471742][T15584] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.483175][T15584] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.493081][T15584] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.506216][T15584] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 305.515346][T15584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.524495][T15584] usb 2-1: config 0 descriptor?? [ 305.551632][ T2957] usb 4-1: Using ep0 maxpacket: 32 [ 305.615496][T19535] overlayfs: failed to resolve './file1': -2 [ 305.671691][ T2957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.691622][ T2957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.711652][ T2957] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d32, bcdDevice= 0.00 [ 305.721135][ T2957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.750792][ T2957] usb 4-1: config 0 descriptor?? [ 305.884831][T19544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9005'. [ 306.003810][T15584] ntrig 0003:1B96:0009.0024: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.1-1/input0 [ 306.212847][T15584] usb 2-1: USB disconnect, device number 69 [ 306.232791][ T2957] hid-generic 0003:1E7D:2D32.0025: item fetching failed at offset 2/5 [ 306.241447][ T2957] hid-generic: probe of 0003:1E7D:2D32.0025 failed with error -22 [ 306.252341][T19548] fido_id[19548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 306.434178][ T1582] usb 4-1: USB disconnect, device number 71 [ 306.564752][ T24] kauditd_printk_skb: 673 callbacks suppressed [ 306.564766][ T24] audit: type=1400 audit(2000000007.550:19776): avc: denied { prog_load } for pid=19569 comm="syz.2.9017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 306.611729][ T24] audit: type=1400 audit(2000000007.550:19777): avc: denied { bpf } for pid=19569 comm="syz.2.9017" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 306.651902][ T24] audit: type=1400 audit(2000000007.550:19778): avc: denied { perfmon } for pid=19569 comm="syz.2.9017" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 306.677454][ T24] audit: type=1400 audit(2000000007.580:19779): avc: denied { prog_run } for pid=19569 comm="syz.2.9017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 306.721652][ T24] audit: type=1400 audit(2000000007.660:19780): avc: denied { create } for pid=19574 comm="syz.2.9019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.761703][ T24] audit: type=1400 audit(2000000007.660:19781): avc: denied { write } for pid=19574 comm="syz.2.9019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.801690][ T24] audit: type=1400 audit(2000000007.660:19782): avc: denied { read } for pid=19574 comm="syz.2.9019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.837802][ T24] audit: type=1400 audit(2000000007.730:19783): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.844371][ T7633] audit: audit_backlog=65 > audit_backlog_limit=64 [ 306.881433][ T276] audit: audit_backlog=65 > audit_backlog_limit=64 [ 307.043325][T19589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.195191][T19600] devpts: called with bogus options [ 307.287815][T19612] EXT4-fs (loop5): Ignoring removed orlov option [ 307.329952][T19612] EXT4-fs (loop5): orphan cleanup on readonly fs [ 307.347579][T19612] EXT4-fs error (device loop5): ext4_find_extent:928: inode #4: comm syz.5.9033: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 307.429264][T19612] EXT4-fs warning (device loop5): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 307.500872][T19612] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 307.527830][T19612] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,sysvgroups,,errors=continue [ 307.619275][T19612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9033'. [ 307.878998][T19657] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 307.905912][T19657] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.065143][ T2957] kernel write not supported for file /3702/clear_refs (pid: 2957 comm: kworker/0:7) [ 308.820321][T19720] syz.3.9087[19720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.820388][T19720] syz.3.9087[19720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.889852][T19726] futex_wake_op: syz.3.9090 tries to shift op by -1; fix this program [ 309.121655][ T2133] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 309.278831][T19750] devtmpfs: Unknown parameter 'posixacl' [ 309.491676][ T2133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.511636][ T2133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.541661][ T2133] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 309.561626][ T2133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.590375][ T2133] usb 6-1: config 0 descriptor?? [ 310.073845][ T2133] hid-steam 0003:28DE:1142.0026: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 310.279350][ T2133] usb 6-1: USB disconnect, device number 20 [ 310.398674][T19836] tipc: Enabled bearer , priority 10 [ 310.619766][T19848] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9149: bg 0: block 248: padding at end of block bitmap is not set [ 310.651672][T19848] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.9149: Failed to acquire dquot type 1 [ 310.667475][T19848] EXT4-fs (loop1): 1 truncate cleaned up [ 310.673851][T19848] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 310.683425][T19848] ext4 filesystem being mounted at /1987/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.830414][T19878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.844528][T19878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 310.963941][T19885] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9166'. [ 311.023854][T19879] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 311.032397][ T2957] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 311.032661][T19879] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 311.050466][T19879] F2FS-fs (loop1): fault_injection options not supported [ 311.058193][T19879] F2FS-fs (loop1): fault_type options not supported [ 311.066571][T19879] F2FS-fs (loop1): invalid crc value [ 311.083158][T19879] F2FS-fs (loop1): Found nat_bits in checkpoint [ 311.140734][T19879] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 311.148094][T19879] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 311.178871][T19903] syz.5.9172[19903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.179080][T19903] syz.5.9172[19903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.228009][ T276] attempt to access beyond end of device [ 311.228009][ T276] loop1: rw=2049, want=45104, limit=40427 [ 311.301708][ T2957] usb 4-1: Using ep0 maxpacket: 16 [ 311.421772][ T2957] usb 4-1: config index 0 descriptor too short (expected 42, got 18) [ 311.430591][ T2957] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 311.442821][ T2957] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 311.573810][ T24] kauditd_printk_skb: 779 callbacks suppressed [ 311.573823][ T24] audit: type=1400 audit(2000000012.560:20535): avc: denied { prog_load } for pid=19931 comm="syz.1.9185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 311.599957][ T2957] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 311.600140][ T24] audit: type=1400 audit(2000000012.560:20536): avc: denied { bpf } for pid=19931 comm="syz.1.9185" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 311.616483][ T2957] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 311.630403][ T24] audit: type=1400 audit(2000000012.560:20537): avc: denied { perfmon } for pid=19931 comm="syz.1.9185" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 311.662251][ T24] audit: type=1400 audit(2000000012.580:20538): avc: denied { ioctl } for pid=19870 comm="syz.3.9160" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.688870][ T24] audit: type=1400 audit(2000000012.670:20539): avc: denied { bpf } for pid=19931 comm="syz.1.9185" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 311.691621][ T2957] usb 4-1: Product: syz [ 311.709728][ T24] audit: type=1400 audit(2000000012.670:20540): avc: denied { prog_run } for pid=19931 comm="syz.1.9185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 311.751796][ T2957] usb 4-1: SerialNumber: syz [ 311.758661][T19927] Alternate GPT is invalid, using primary GPT. [ 311.762329][ T2957] usb 4-1: config 0 descriptor?? [ 311.770023][ T24] audit: type=1400 audit(2000000012.720:20541): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.772843][T19927] loop5: p1 p2 p3 [ 311.816655][ T24] audit: type=1400 audit(2000000012.720:20542): avc: denied { read write open } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.852888][ T24] audit: type=1400 audit(2000000012.720:20543): avc: denied { ioctl } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.882880][ T2957] hub 4-1:0.0: bad descriptor, ignoring hub [ 311.899497][ T2957] hub: probe of 4-1:0.0 failed with error -5 [ 311.914023][ T24] audit: type=1400 audit(2000000012.790:20544): avc: denied { create } for pid=19938 comm="syz.2.9189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.146379][ T320] udevd[320]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 312.166783][ T2184] udevd[2184]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 312.188921][ T413] udevd[413]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 312.347129][T19992] exfat: Deprecated parameter 'utf8' [ 312.374589][T19992] exfat: Deprecated parameter 'utf8' [ 312.410554][T19992] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d) [ 312.485430][T20001] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue [ 312.491701][ T2957] usb 4-1: reset high-speed USB device number 72 using dummy_hcd [ 312.496458][T20001] ext4 filesystem being mounted at /2000/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.671754][T20014] EXT4-fs (loop5): Ignoring removed nobh option [ 312.700976][T20014] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 312.707209][T20021] EXT4-fs (loop1): Unrecognized mount option "dont_appraise" or missing value [ 313.046079][T20059] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9240'. [ 313.093502][T20052] FAT-fs (loop5): Directory bread(block 64) failed [ 313.100060][T20052] FAT-fs (loop5): Directory bread(block 65) failed [ 313.152800][T20052] FAT-fs (loop5): Directory bread(block 66) failed [ 313.159519][T20052] FAT-fs (loop5): Directory bread(block 67) failed [ 313.167724][T20052] FAT-fs (loop5): Directory bread(block 68) failed [ 313.174952][T20052] FAT-fs (loop5): Directory bread(block 69) failed [ 313.182027][T20052] FAT-fs (loop5): Directory bread(block 70) failed [ 313.188884][T20052] FAT-fs (loop5): Directory bread(block 71) failed [ 313.195756][T20052] FAT-fs (loop5): Directory bread(block 72) failed [ 313.202469][T20052] FAT-fs (loop5): Directory bread(block 73) failed [ 313.251744][ T2957] usb 4-1: USB disconnect, device number 72 [ 313.411679][ T1030] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 313.420396][T20063] F2FS-fs (loop1): invalid crc value [ 313.463444][T20063] F2FS-fs (loop1): Found nat_bits in checkpoint [ 313.480868][T20074] syz.5.9246[20074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.480936][T20074] syz.5.9246[20074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.556354][T20063] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 313.630857][ T276] attempt to access beyond end of device [ 313.630857][ T276] loop1: rw=2049, want=45104, limit=40427 [ 313.781949][ T1030] usb 3-1: config 0 interface 0 has no altsetting 0 [ 313.793349][ T1030] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 313.810128][ T1030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.810347][T20095] incfs: Options parsing error. -22 [ 313.831123][ T1030] usb 3-1: config 0 descriptor?? [ 313.844838][T20095] incfs: mount failed -22 [ 313.898290][T20101] 9pnet: p9_fd_create_tcp (20101): problem binding to privport [ 314.091828][ T2957] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 314.317845][ T1030] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 314.327856][ T1030] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 314.341673][ T1030] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 314.358806][ T1030] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 314.368893][ T1030] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 314.381764][ T1030] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 314.397173][ T1030] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 314.421891][ T1030] isku 0003:1E7D:3264.0027: hidraw0: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.2-1/input0 [ 314.461747][ T2957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.477367][ T2957] usb 4-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 314.497182][ T2957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.510251][ T2957] usb 4-1: config 0 descriptor?? [ 314.523658][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9286'. [ 314.533293][ T1030] usb 3-1: USB disconnect, device number 78 [ 314.551898][T20160] tipc: Enabling of bearer rejected, failed to enable media [ 315.013155][ T2957] wacom 0003:056A:032B.0028: unknown main item tag 0x1 [ 315.033843][ T2957] wacom 0003:056A:032B.0028: hidraw0: USB HID v0.04 Device [HID 056a:032b] on usb-dummy_hcd.3-1/input0 [ 315.188804][T20208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9309'. [ 315.220031][ T295] usb 4-1: USB disconnect, device number 73 [ 315.300818][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9316'. [ 315.501740][ T2957] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 315.643504][T20251] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 315.651455][T20251] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 315.661172][T20251] F2FS-fs (loop5): invalid crc value [ 315.668408][T20251] F2FS-fs (loop5): Found nat_bits in checkpoint [ 315.689930][T20251] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 315.697383][T20251] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 315.871965][ T2957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.897432][ T2957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.909265][ T2957] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.923366][ T2957] usb 3-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 315.954342][ T2957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.972073][ T2957] usb 3-1: config 0 descriptor?? [ 316.010234][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.019166][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.027725][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.035731][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.043697][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.051171][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.058948][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.066593][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.074548][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.082750][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.090251][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.098424][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.106490][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.114418][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.122434][ T1582] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 316.130615][ T1582] hid-generic 00A0:0008:0003.0029: hidraw0: HID v0.05 Device [syz1] on syz0 [ 316.213066][T20304] fido_id[20304]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 316.385480][T20319] EXT4-fs (loop5): Test dummy encryption mode enabled [ 316.393108][T20319] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 316.404989][T20319] EXT4-fs error (device loop5): ext4_orphan_get:1421: comm syz.5.9359: bad orphan inode 131083 [ 316.416024][T20319] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue [ 316.450773][T20335] tipc: Enabling of bearer rejected, media not registered [ 316.463553][ T2957] wacom 0003:056A:0017.002A: unknown main item tag 0x0 [ 316.470612][ T2957] wacom 0003:056A:0017.002A: unknown main item tag 0x0 [ 316.478323][ T2957] wacom 0003:056A:0017.002A: unknown main item tag 0x0 [ 316.505673][ T2957] wacom 0003:056A:0017.002A: unknown main item tag 0x0 [ 316.519338][ T2957] wacom 0003:056A:0017.002A: unknown main item tag 0x0 [ 316.529800][ T2957] wacom 0003:056A:0017.002A: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 316.542563][ T2957] wacom 0003:056A:0017.002A: hidraw0: USB HID v0.00 Device [HID 056a:0017] on usb-dummy_hcd.2-1/input0 [ 316.554753][ T2957] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0017.002A/input/input48 [ 316.576387][T20342] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 316.586414][ T24] kauditd_printk_skb: 881 callbacks suppressed [ 316.586425][ T24] audit: type=1400 audit(2000000017.570:21426): avc: denied { mount } for pid=20341 comm="syz.5.9367" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 316.597416][T20342] ext4 filesystem being mounted at /1083/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.629610][ T24] audit: type=1400 audit(2000000017.620:21427): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.668913][ T2957] usb 3-1: USB disconnect, device number 79 [ 316.670168][ T24] audit: type=1400 audit(2000000017.620:21428): avc: denied { open } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.743424][T20342] EXT4-fs error (device loop5): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 316.758519][T20342] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 316.765798][T20358] fido_id[20358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 316.770904][T20342] EXT4-fs (loop5): This should not happen!! Data will be lost [ 316.770904][T20342] [ 316.795124][ T24] audit: type=1400 audit(2000000017.620:21429): avc: denied { ioctl } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.821009][T20342] EXT4-fs (loop5): Total free blocks count 0 [ 316.827089][T20342] EXT4-fs (loop5): Free/Dirty block details [ 316.833194][T20342] EXT4-fs (loop5): free_blocks=4293918720 [ 316.838970][T20342] EXT4-fs (loop5): dirty_blocks=64 [ 316.842270][T20367] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 316.844786][ T24] audit: type=1400 audit(2000000017.670:21430): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.876676][T20342] EXT4-fs (loop5): Block reservation details [ 316.882741][T20342] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 316.898817][ T24] audit: type=1400 audit(2000000017.670:21431): avc: denied { open } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.904172][T20371] /dev/loop0: Can't open blockdev [ 316.931717][ T24] audit: type=1400 audit(2000000017.670:21432): avc: denied { ioctl } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.965130][ T24] audit: type=1400 audit(2000000017.690:21433): avc: denied { read write } for pid=20341 comm="syz.5.9367" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.990064][ T24] audit: type=1400 audit(2000000017.690:21434): avc: denied { open } for pid=20341 comm="syz.5.9367" path="/dev/loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.007198][T20377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9385'. [ 317.015004][ T24] audit: type=1400 audit(2000000017.690:21435): avc: denied { ioctl } for pid=20341 comm="syz.5.9367" path="/dev/loop5" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.072969][T20381] incfs: Options parsing error. -22 [ 317.078252][T20381] incfs: mount failed -22 [ 317.171638][T15593] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 317.185524][ T1582] kernel write not supported for file /vcs (pid: 1582 comm: kworker/1:6) [ 317.236481][T20403] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 317.261864][T20403] EXT4-fs (loop5): invalid journal inode [ 317.273988][T20403] EXT4-fs (loop5): can't get journal size [ 317.286422][T20403] EXT4-fs (loop5): orphan cleanup on readonly fs [ 317.294189][T20403] EXT4-fs (loop5): 1 truncate cleaned up [ 317.299915][T20403] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 317.541898][T15593] usb 2-1: config index 0 descriptor too short (expected 4114, got 18) [ 317.711976][T15593] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 317.729313][T15593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.746049][T15593] usb 2-1: Product: syz [ 317.754579][T15593] usb 2-1: Manufacturer: syz [ 317.759272][T15593] usb 2-1: SerialNumber: syz [ 317.775343][T15593] usb 2-1: config 0 descriptor?? [ 318.014957][T15593] usb 2-1: USB disconnect, device number 70 [ 318.183931][T20477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9432'. [ 318.613290][T20518] FAT-fs (loop5): Directory bread(block 64) failed [ 318.619880][T20518] FAT-fs (loop5): Directory bread(block 65) failed [ 318.678887][T20518] FAT-fs (loop5): Directory bread(block 66) failed [ 318.686081][T20518] FAT-fs (loop5): Directory bread(block 67) failed [ 318.693089][T20518] FAT-fs (loop5): Directory bread(block 68) failed [ 318.699642][T20518] FAT-fs (loop5): Directory bread(block 69) failed [ 318.706566][T20518] FAT-fs (loop5): Directory bread(block 70) failed [ 318.713569][T20518] FAT-fs (loop5): Directory bread(block 71) failed [ 318.714761][T20530] UHID_CREATE from different security context by process 4048 (syz.2.9458), this is not allowed. [ 318.720217][T20518] FAT-fs (loop5): Directory bread(block 72) failed [ 318.737749][T20518] FAT-fs (loop5): Directory bread(block 73) failed [ 319.164546][T20574] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,barrier,min_batch_time=0x0000000000000001,data_err=ignore,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000000007,nombcache [ 319.218391][T20586] exFAT-fs (loop5): bogus fat length [ 319.226532][T20574] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.9480: missing EA_INODE flag [ 319.241267][T20586] exFAT-fs (loop5): failed to read boot sector [ 319.260179][T20586] exFAT-fs (loop5): failed to recognize exfat type [ 319.267352][T20574] EXT4-fs (loop1): Remounting filesystem read-only [ 319.277384][T20574] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.9480: error while reading EA inode 11 err=-117 [ 319.561036][T20622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9502'. [ 319.582667][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9501'. [ 320.068998][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9523'. [ 320.324122][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9540'. [ 320.351032][T20704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9541'. [ 320.624691][T20747] syz.3.9562[20747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.624758][T20747] syz.3.9562[20747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.890351][T20778] EXT4-fs (loop1): Test dummy encryption mode enabled [ 320.931845][T20778] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 321.007385][T20805] SELinux: policydb table sizes (8,4) do not match mine (8,7) [ 321.016662][T20805] SELinux: failed to load policy [ 321.191624][T15584] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 321.572157][T15584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.592412][T15584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.607171][ T24] kauditd_printk_skb: 990 callbacks suppressed [ 321.607183][ T24] audit: type=1400 audit(2000000022.590:22426): avc: denied { prog_load } for pid=20888 comm="syz.3.9630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 321.641716][T15584] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 321.660849][T15584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.678715][ T24] audit: type=1400 audit(2000000022.590:22427): avc: denied { bpf } for pid=20888 comm="syz.3.9630" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.702099][T15584] usb 6-1: config 0 descriptor?? [ 321.730727][ T24] audit: type=1400 audit(2000000022.590:22428): avc: denied { perfmon } for pid=20888 comm="syz.3.9630" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.781036][ T24] audit: type=1400 audit(2000000022.620:22429): avc: denied { bpf } for pid=20888 comm="syz.3.9630" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.817974][ T24] audit: type=1400 audit(2000000022.620:22430): avc: denied { prog_run } for pid=20888 comm="syz.3.9630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 321.837506][ T24] audit: type=1400 audit(2000000022.630:22431): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.861831][ T24] audit: type=1400 audit(2000000022.630:22432): avc: denied { read write open } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.892069][ T24] audit: type=1400 audit(2000000022.630:22433): avc: denied { ioctl } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.918045][ T24] audit: type=1400 audit(2000000022.670:22434): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.943241][ T24] audit: type=1400 audit(2000000022.670:22435): avc: denied { open } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.101641][ T2133] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 322.192646][T15584] kone 0003:1E7D:2CED.002B: unknown main item tag 0x1 [ 322.200444][T15584] kone 0003:1E7D:2CED.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 322.301706][ T1582] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 322.351639][ T2133] usb 4-1: Using ep0 maxpacket: 16 [ 322.395730][ T446] usb 6-1: USB disconnect, device number 21 [ 322.481721][ T2133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.492922][ T2133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.503667][ T2133] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 322.513476][ T2133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.531868][ T2133] usb 4-1: config 0 descriptor?? [ 322.541897][ T1582] usb 2-1: Using ep0 maxpacket: 8 [ 322.661727][ T1582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.672780][ T1582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.682558][ T1582] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 322.691658][ T1582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.701472][ T1582] usb 2-1: config 0 descriptor?? [ 322.871823][ T443] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 323.013153][ T2133] hid-multitouch 0003:1FD2:6007.002C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 323.182695][ T1582] hid-multitouch 0003:0EEF:72C4.002D: item fetching failed at offset 0/5 [ 323.191431][ T1582] hid-multitouch: probe of 0003:0EEF:72C4.002D failed with error -22 [ 323.215122][T15593] usb 4-1: USB disconnect, device number 74 [ 323.241679][ T443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.253522][ T443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.263612][ T443] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.276828][ T443] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.286037][ T443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.295198][ T443] usb 3-1: config 0 descriptor?? [ 323.383208][ T1030] usb 2-1: USB disconnect, device number 71 [ 323.753918][ T443] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 323.771551][ T443] plantronics 0003:047F:FFFF.002E: unbalanced collection at end of report description [ 323.781262][T20991] syz.3.9679[20991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.781755][T20991] syz.3.9679[20991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.783323][ T443] plantronics 0003:047F:FFFF.002E: parse failed [ 323.813898][ T443] plantronics: probe of 0003:047F:FFFF.002E failed with error -22 [ 323.978572][T15584] usb 3-1: USB disconnect, device number 80 [ 324.091680][ T443] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 324.103038][T21003] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 324.110897][T21003] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 324.121076][T21003] F2FS-fs (loop1): invalid crc value [ 324.128796][T21003] F2FS-fs (loop1): Found nat_bits in checkpoint [ 324.141757][ T1030] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 324.154443][T21003] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 324.161533][T21003] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 324.372419][T21021] exfat: Deprecated parameter 'namecase' [ 324.378202][T21021] exfat: Deprecated parameter 'utf8' [ 324.422474][T21021] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 324.433391][T21021] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 324.462188][ T443] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.474087][ T443] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.490558][ T443] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 324.521667][ T1030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.538566][ T1030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.552216][T21030] netlink: 272 bytes leftover after parsing attributes in process `syz.2.9695'. [ 324.561414][ T443] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.572557][ T1030] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 324.591630][ T443] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.607941][ T443] usb 6-1: config 0 descriptor?? [ 324.632541][T21026] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf, [ 324.652226][T21026] ext4 filesystem being mounted at /2094/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 324.679641][T21026] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 32: comm syz.1.9693: path /2094/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 324.681775][ T1030] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 324.713461][ T1030] usb 4-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 324.721830][ T1030] usb 4-1: Manufacturer: syz [ 324.727366][T21026] EXT4-fs (loop1): Remounting filesystem read-only [ 324.741812][ T1030] usb 4-1: config 0 descriptor?? [ 324.906482][T15593] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 325.092981][ T443] plantronics 0003:047F:FFFF.002F: invalid report_size 2068630588 [ 325.101492][ T443] plantronics 0003:047F:FFFF.002F: item 0 4 1 7 parsing failed [ 325.110843][ T443] plantronics 0003:047F:FFFF.002F: parse failed [ 325.121853][ T443] plantronics: probe of 0003:047F:FFFF.002F failed with error -22 [ 325.234332][ T1030] kovaplus 0003:1E7D:2D50.0030: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 325.271955][T15593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.283962][T15593] usb 3-1: New USB device found, idVendor=1130, idProduct=3101, bcdDevice= 0.00 [ 325.294810][ T446] usb 6-1: USB disconnect, device number 22 [ 325.296514][T15593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.318951][T15593] usb 3-1: config 0 descriptor?? [ 325.414603][T21092] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 325.427175][T21092] ext4 filesystem being mounted at /2108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 325.440701][ T1582] usb 4-1: USB disconnect, device number 75 [ 325.783390][T15593] hid-generic 0003:1130:3101.0031: hidraw0: USB HID v0.00 Device [HID 1130:3101] on usb-dummy_hcd.2-1/input0 [ 325.994167][T15593] usb 3-1: USB disconnect, device number 81 [ 326.091622][ T1582] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 326.127627][T21110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9731'. [ 326.257876][T21121] tipc: Enabling of bearer rejected, already enabled [ 326.283924][T21120] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 326.295640][T21120] ext4 filesystem being mounted at /2115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.451718][ T1582] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.463151][ T1582] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.473255][ T1582] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 326.486191][ T1582] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.495339][ T1582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.504407][ T1582] usb 6-1: config 0 descriptor?? [ 326.552962][T21145] netlink: 'syz.2.9746': attribute type 3 has an invalid length. [ 326.634424][ T24] kauditd_printk_skb: 543 callbacks suppressed [ 326.634436][ T24] audit: type=1326 audit(2000000027.620:22979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21154 comm="syz.2.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf43fe2929 code=0x7ffc0000 [ 326.664934][ T24] audit: type=1326 audit(2000000027.620:22980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21154 comm="syz.2.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fdf43fe2929 code=0x7ffc0000 [ 326.689090][ T24] audit: type=1326 audit(2000000027.620:22981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21154 comm="syz.2.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf43fe2929 code=0x7ffc0000 [ 326.713122][ T2133] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 326.713289][ T24] audit: type=1326 audit(2000000027.620:22982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21154 comm="syz.2.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fdf43fe2929 code=0x7ffc0000 [ 326.744811][ T24] audit: type=1326 audit(2000000027.620:22983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21154 comm="syz.2.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf43fe2929 code=0x7ffc0000 [ 326.768764][ T24] audit: type=1400 audit(2000000027.680:22984): avc: denied { read write } for pid=21156 comm="syz.2.9752" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 326.793313][ T24] audit: type=1400 audit(2000000027.680:22985): avc: denied { open } for pid=21156 comm="syz.2.9752" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 326.817181][ T24] audit: type=1400 audit(2000000027.680:22986): avc: denied { ioctl } for pid=21156 comm="syz.2.9752" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 326.842510][ T24] audit: type=1400 audit(2000000027.680:22987): avc: denied { ioctl } for pid=21156 comm="syz.2.9752" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 326.971697][T15593] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 326.991662][ T2133] usb 4-1: Using ep0 maxpacket: 8 [ 327.012741][ T1582] plantronics 0003:047F:FFFF.0032: No inputs registered, leaving [ 327.023506][ T1582] plantronics 0003:047F:FFFF.0032: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 327.023735][ T24] audit: type=1400 audit(2000000028.010:22988): avc: denied { ioctl } for pid=21156 comm="syz.2.9752" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 327.111811][ T2133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.121795][ T2133] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 327.130808][ T2133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.140122][ T2133] usb 4-1: config 0 descriptor?? [ 327.217995][ T1582] usb 6-1: USB disconnect, device number 23 [ 327.281616][T15593] usb 3-1: Using ep0 maxpacket: 8 [ 327.411685][T15593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.422460][T15593] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 327.432153][T15593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.442418][T15593] usb 3-1: config 0 descriptor?? [ 327.622551][ T2133] koneplus 0003:1E7D:2E22.0033: ignoring exceeding usage max [ 327.632349][ T2133] koneplus 0003:1E7D:2E22.0033: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 327.761674][ T443] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 327.831793][ T1582] usb 4-1: USB disconnect, device number 76 [ 327.923283][T15593] arvo 0003:1E7D:30D4.0034: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 328.011687][ T443] usb 2-1: Using ep0 maxpacket: 32 [ 328.011697][ T2133] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 328.131187][T15593] usb 3-1: USB disconnect, device number 82 [ 328.142010][ T443] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 328.152441][ T443] usb 2-1: config 0 has no interface number 0 [ 328.158589][ T443] usb 2-1: config 0 interface 184 has no altsetting 0 [ 328.261631][ T2133] usb 6-1: Using ep0 maxpacket: 16 [ 328.341808][ T443] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 328.351474][ T443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.359528][ T443] usb 2-1: Product: syz [ 328.364036][ T443] usb 2-1: Manufacturer: syz [ 328.368647][ T443] usb 2-1: SerialNumber: syz [ 328.381962][ T2133] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.385100][ T443] usb 2-1: config 0 descriptor?? [ 328.398627][ T2133] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.409204][ T2133] usb 6-1: config 0 interface 0 has no altsetting 0 [ 328.416431][ T2133] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 328.425705][ T2133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.435024][ T2133] usb 6-1: config 0 descriptor?? [ 328.443137][ T443] smsc75xx v1.0.0 [ 328.617553][T21202] tipc: Bearer : already 2 bearers with priority 10 [ 328.624948][T21202] tipc: Bearer : trying with adjusted priority [ 328.631870][T21202] tipc: Enabling of bearer rejected, failed to enable media [ 328.717204][T21218] IPv6: sit1: Disabled Multicast RS [ 328.846364][T21236] usb usb1: usbfs: process 21236 (syz.2.9790) did not claim interface 0 before use [ 328.912763][ T2133] holtek_kbd 0003:04D9:A055.0035: item fetching failed at offset 0/4 [ 328.923366][ T2133] holtek_kbd: probe of 0003:04D9:A055.0035 failed with error -22 [ 329.091633][ T443] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 329.103058][ T443] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 329.113117][ T443] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 329.123353][ T295] usb 6-1: USB disconnect, device number 24 [ 329.123745][ T443] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 329.149111][ T443] usb 2-1: USB disconnect, device number 72 [ 329.331611][T15593] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 329.581651][T15593] usb 3-1: Using ep0 maxpacket: 16 [ 329.721882][T15593] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.740917][T15593] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.759453][T15593] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 329.772779][T15593] usb 3-1: config 0 interface 0 has no altsetting 0 [ 329.779487][T15593] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 329.789559][T15593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.809011][T15593] usb 3-1: config 0 descriptor?? [ 329.888067][T21292] F2FS-fs (loop5): invalid crc value [ 329.897981][T21292] F2FS-fs (loop5): Found nat_bits in checkpoint [ 329.924035][T21292] F2FS-fs (loop5): Start checkpoint disabled! [ 329.931214][T21292] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 329.978747][ T301] attempt to access beyond end of device [ 329.978747][ T301] loop5: rw=2049, want=40968, limit=40427 [ 329.990407][ T301] attempt to access beyond end of device [ 329.990407][ T301] loop5: rw=2049, want=40984, limit=40427 [ 330.291912][T15593] hid (null): bogus close delimiter [ 330.297975][T15593] hid-generic 0003:045E:05DA.0036: bogus close delimiter [ 330.305195][T15593] hid-generic 0003:045E:05DA.0036: item 0 2 2 10 parsing failed [ 330.313171][T15593] hid-generic: probe of 0003:045E:05DA.0036 failed with error -22 [ 330.401682][ T443] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 330.468094][T21312] SELinux: Context : is not valid (left unmapped). [ 330.505846][T15593] usb 3-1: USB disconnect, device number 83 [ 330.597547][T21326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9833'. [ 330.761685][ T443] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.771790][ T443] usb 6-1: config 0 interface 0 has no altsetting 0 [ 330.778802][ T443] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 330.788570][ T443] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.789739][T21332] F2FS-fs (loop1): fault_injection options not supported [ 330.804134][ T295] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 330.806789][ T443] usb 6-1: config 0 descriptor?? [ 330.817790][T21332] F2FS-fs (loop1): invalid crc value [ 330.825331][T21332] F2FS-fs (loop1): Found nat_bits in checkpoint [ 330.849258][T21332] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 330.889827][ T276] attempt to access beyond end of device [ 330.889827][ T276] loop1: rw=2049, want=45104, limit=40427 [ 331.088184][T21348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.099055][T21344] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.180743][T21357] netlink: 'syz.1.9845': attribute type 46 has an invalid length. [ 331.190475][T21357] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9845'. [ 331.200009][ T295] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 331.210638][ T295] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.220530][T21361] raw_sendmsg: syz.2.9848 forgot to set AF_INET. Fix it! [ 331.292788][ T443] acrux 0003:1A34:0802.0037: unknown main item tag 0x0 [ 331.300831][ T443] acrux 0003:1A34:0802.0037: unknown main item tag 0x0 [ 331.322020][ T443] acrux 0003:1A34:0802.0037: unknown main item tag 0x0 [ 331.333991][ T443] acrux 0003:1A34:0802.0037: unknown main item tag 0x0 [ 331.350982][ T443] acrux 0003:1A34:0802.0037: unknown main item tag 0x0 [ 331.365092][ T443] acrux 0003:1A34:0802.0037: unknown main item tag 0x0 [ 331.375815][ T443] acrux 0003:1A34:0802.0037: unknown main item tag 0x0 [ 331.385057][ T443] acrux 0003:1A34:0802.0037: hidraw0: USB HID v10.00 Device [HID 1a34:0802] on usb-dummy_hcd.5-1/input0 [ 331.397711][ T443] acrux 0003:1A34:0802.0037: no inputs found [ 331.404269][ T443] acrux 0003:1A34:0802.0037: Failed to enable force feedback support, error: -19 [ 331.411966][ T295] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 331.422902][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.430916][ T295] usb 4-1: Product: syz [ 331.435617][ T295] usb 4-1: Manufacturer: syz [ 331.450206][ T295] usb 4-1: SerialNumber: syz [ 331.461014][ T295] usb 4-1: config 0 descriptor?? [ 331.502489][ T295] usb 4-1: selecting invalid altsetting 0 [ 331.526939][ T295] usb 6-1: USB disconnect, device number 25 [ 331.574577][T21393] fido_id[21393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 331.661824][ T24] kauditd_printk_skb: 479 callbacks suppressed [ 331.661838][ T24] audit: type=1400 audit(2000000032.640:23468): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.699261][ T24] audit: type=1400 audit(2000000032.680:23469): avc: denied { read write open } for pid=277 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.731853][ T24] audit: type=1400 audit(2000000032.680:23470): avc: denied { ioctl } for pid=277 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.748756][ T443] usb 4-1: USB disconnect, device number 77 [ 331.788660][ T24] audit: type=1400 audit(2000000032.760:23471): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.813960][ T24] audit: type=1400 audit(2000000032.760:23472): avc: denied { open } for pid=277 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.839603][ T24] audit: type=1400 audit(2000000032.760:23473): avc: denied { ioctl } for pid=277 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.868598][ T24] audit: type=1400 audit(2000000032.760:23474): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.896815][ T24] audit: type=1400 audit(2000000032.760:23475): avc: denied { open } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.922634][ T24] audit: type=1400 audit(2000000032.760:23476): avc: denied { ioctl } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.951321][ T24] audit: type=1400 audit(2000000032.770:23477): avc: denied { prog_load } for pid=21399 comm="syz.0.9866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 332.213107][T21432] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 332.381525][T21450] SELinux: failed to load policy [ 332.496767][T21465] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 332.516197][T21465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 332.539488][T21465] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.9897: corrupted in-inode xattr [ 332.588484][T21465] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.9897: couldn't read orphan inode 15 (err -117) [ 332.642824][T21465] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue [ 332.769585][T21465] System zones: 1-12 [ 332.781022][T21465] EXT4-fs (loop5): re-mounted. Opts: quota,noload,block_validity, [ 332.986005][T21501] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 333.001809][T21501] blk_update_request: I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 333.013709][T21501] EXT4-fs (loop5): couldn't read superblock of external journal [ 333.131374][T21499] F2FS-fs (loop1): invalid crc value [ 333.173325][T21499] F2FS-fs (loop1): Found nat_bits in checkpoint [ 333.241813][T21499] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 333.251641][T21499] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 333.341774][ T304] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 333.701910][ T304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.732950][ T304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.750873][ T304] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 333.771855][ T304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.802581][ T304] usb 6-1: config 0 descriptor?? [ 334.260786][T21650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9982'. [ 334.282663][ T304] saitek 0003:06A3:0CCB.0038: item fetching failed at offset 0/3 [ 334.291260][ T304] saitek 0003:06A3:0CCB.0038: parse failed [ 334.310785][ T304] saitek: probe of 0003:06A3:0CCB.0038 failed with error -22 [ 334.493134][ T1582] usb 6-1: USB disconnect, device number 26 [ 334.908482][T21717] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 334.921701][T21717] FAT-fs (loop1): Filesystem has been set read-only [ 334.944274][T21717] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 335.111979][T21732] futex_wake_op: syz.5.10022 tries to shift op by -1; fix this program [ 335.120912][T21733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10019'. [ 335.312918][T21756] device veth1_macvtap entered promiscuous mode [ 335.319370][T21756] device macsec0 left promiscuous mode [ 335.325705][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.351682][ T304] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 335.724892][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 335.745039][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.772008][ T304] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 335.791239][ T304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.821782][ T304] usb 4-1: config 0 descriptor?? [ 335.849793][T21834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10073'. [ 335.859082][T21834] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10073'. [ 335.988119][T21844] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf, [ 335.996400][T21851] netlink: 92 bytes leftover after parsing attributes in process `syz.1.10079'. [ 336.001643][T21844] ext4 filesystem being mounted at /1174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.302640][ T304] savu 0003:1E7D:2D5A.0039: unknown main item tag 0x0 [ 336.319863][ T304] savu 0003:1E7D:2D5A.0039: unknown main item tag 0x0 [ 336.337472][ T304] savu 0003:1E7D:2D5A.0039: unknown main item tag 0x0 [ 336.364960][ T304] savu 0003:1E7D:2D5A.0039: unknown main item tag 0x0 [ 336.387363][ T304] savu 0003:1E7D:2D5A.0039: unknown main item tag 0x0 [ 336.408928][ T304] savu 0003:1E7D:2D5A.0039: unbalanced collection at end of report description [ 336.437667][ T304] savu 0003:1E7D:2D5A.0039: parse failed [ 336.444632][ T304] savu: probe of 0003:1E7D:2D5A.0039 failed with error -22 [ 336.489397][T21893] EXT4-fs (loop1): Ignoring removed nobh option [ 336.521434][ T1582] usb 4-1: USB disconnect, device number 78 [ 336.530685][T21893] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 336.562902][T21893] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.10100: invalid indirect mapped block 2683928664 (level 1) [ 336.632050][T21893] EXT4-fs (loop1): 1 truncate cleaned up [ 336.637743][T21893] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nojournal_checksum,acl,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue [ 336.679880][ T24] kauditd_printk_skb: 1149 callbacks suppressed [ 336.679891][ T24] audit: type=1400 audit(2000000037.660:24627): avc: denied { setopt } for pid=21910 comm="syz.5.10107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 336.763832][ T24] audit: type=1400 audit(2000000037.660:24628): avc: denied { prog_load } for pid=21913 comm="syz.2.10109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 336.792262][ T24] audit: type=1400 audit(2000000037.660:24629): avc: denied { bpf } for pid=21913 comm="syz.2.10109" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 336.852482][ T24] audit: type=1400 audit(2000000037.660:24630): avc: denied { perfmon } for pid=21913 comm="syz.2.10109" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 336.874795][ T24] audit: type=1400 audit(2000000037.690:24631): avc: denied { bpf } for pid=21913 comm="syz.2.10109" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 336.895844][ T24] audit: type=1400 audit(2000000037.690:24632): avc: denied { read write } for pid=21891 comm="syz.1.10100" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.920850][ T24] audit: type=1400 audit(2000000037.690:24634): avc: denied { prog_run } for pid=21913 comm="syz.2.10109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 336.940326][ T24] audit: type=1400 audit(2000000037.690:24633): avc: denied { open } for pid=21891 comm="syz.1.10100" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.964458][ T24] audit: type=1400 audit(2000000037.690:24635): avc: denied { ioctl } for pid=21891 comm="syz.1.10100" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.989991][ T443] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 336.997916][ T24] audit: type=1400 audit(2000000037.710:24636): avc: denied { read write } for pid=7633 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 337.031650][ T304] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 337.149766][T21940] tipc: Bearer : already 2 bearers with priority 10 [ 337.157994][T21940] tipc: Bearer : trying with adjusted priority [ 337.165836][T21940] tipc: Enabling of bearer rejected, failed to enable media [ 337.241782][T21948] syz.3.10125[21948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.241846][T21948] syz.3.10125[21948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.292199][ T304] usb 6-1: Using ep0 maxpacket: 32 [ 337.362370][ T443] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 337.376004][ T443] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 337.385404][ T443] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 337.396429][ T443] usb 2-1: config 220 has no interface number 2 [ 337.402938][ T443] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 337.416264][ T443] usb 2-1: config 220 interface 0 has no altsetting 0 [ 337.423219][ T443] usb 2-1: config 220 interface 76 has no altsetting 0 [ 337.430161][ T443] usb 2-1: config 220 interface 1 has no altsetting 0 [ 337.461695][ T304] usb 6-1: unable to get BOS descriptor or descriptor too short [ 337.552030][ T304] usb 6-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.581597][ T304] usb 6-1: config 1 interface 0 has no altsetting 0 [ 337.611985][ T443] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 337.621460][ T443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.631970][ T443] usb 2-1: Product: syz [ 337.636273][ T443] usb 2-1: Manufacturer: syz [ 337.640981][ T443] usb 2-1: SerialNumber: syz [ 337.751691][ T304] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 337.760774][ T304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.791605][ T304] usb 6-1: Product: syz [ 337.795971][ T304] usb 6-1: Manufacturer: syz [ 337.800579][ T304] usb 6-1: SerialNumber: syz [ 338.011746][ T443] usb 2-1: selecting invalid altsetting 0 [ 338.017761][ T443] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 338.035132][ T443] uvcvideo: No valid video chain found. [ 338.135075][ T443] usb 2-1: USB disconnect, device number 73 [ 338.281637][ T304] usbhid 6-1:1.0: can't add hid device: -71 [ 338.287180][T21993] netlink: 'syz.2.10146': attribute type 5 has an invalid length. [ 338.287795][ T304] usbhid: probe of 6-1:1.0 failed with error -71 [ 338.333016][ T304] usb 6-1: USB disconnect, device number 27 [ 338.772748][T22030] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 338.824565][T22030] ext4 filesystem being mounted at /2217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.912039][T22042] binder: 22041:22042 ioctl 4018620d 0 returned -22 [ 338.954755][T22042] binder: 22041:22042 ioctl c0306201 200000000140 returned -11 [ 339.687448][T22118] netlink: 'syz.1.10204': attribute type 2 has an invalid length. [ 339.785253][T22134] netlink: 'syz.3.10212': attribute type 3 has an invalid length. [ 339.831770][T15593] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 340.001662][ T304] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 340.022548][T22165] EXT4-fs (loop1): Test dummy encryption mode enabled [ 340.046702][T22165] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.10228: inode #1: comm syz.1.10228: iget: illegal inode # [ 340.067780][T22165] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.10228: error while reading EA inode 1 err=-117 [ 340.069216][T22181] tipc: Bearer : already 2 bearers with priority 10 [ 340.080494][T22165] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.10228: inode #1: comm syz.1.10228: iget: illegal inode # [ 340.087715][T22181] tipc: Bearer : trying with adjusted priority [ 340.102492][T22165] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.10228: error while reading EA inode 1 err=-117 [ 340.109280][T22181] tipc: Enabling of bearer rejected, failed to enable media [ 340.122413][T22165] EXT4-fs (loop1): 1 orphan inode deleted [ 340.136261][T22165] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue [ 340.205837][T15593] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 340.215280][T15593] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 340.234893][T15593] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 340.262065][T15593] usb 3-1: config 220 has no interface number 2 [ 340.268510][T15593] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 340.282681][T15593] usb 3-1: config 220 interface 0 has no altsetting 0 [ 340.289978][T15593] usb 3-1: config 220 interface 76 has no altsetting 0 [ 340.300498][T15593] usb 3-1: config 220 interface 1 has no altsetting 0 [ 340.344231][T22198] EXT4-fs (loop1): Ignoring removed bh option [ 340.350873][T22198] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 340.359372][T22198] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 340.382078][ T304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 340.401758][ T304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.413202][T22198] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue [ 340.416111][ T304] usb 6-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 340.438965][T22198] ext4 filesystem being mounted at /2236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.477206][ T304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.486503][ T304] usb 6-1: config 0 descriptor?? [ 340.491731][T15593] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 340.503668][T15593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.512405][T15593] usb 3-1: Product: syz [ 340.516625][T15593] usb 3-1: Manufacturer: syz [ 340.521355][T15593] usb 3-1: SerialNumber: syz [ 340.738816][T22231] FAT-fs (loop1): Directory bread(block 64) failed [ 340.745759][T22231] FAT-fs (loop1): Directory bread(block 65) failed [ 340.752418][T22231] FAT-fs (loop1): Directory bread(block 66) failed [ 340.759014][T22231] FAT-fs (loop1): Directory bread(block 67) failed [ 340.766052][T22231] FAT-fs (loop1): Directory bread(block 68) failed [ 340.772870][T22231] FAT-fs (loop1): Directory bread(block 69) failed [ 340.779638][T22231] FAT-fs (loop1): Directory bread(block 70) failed [ 340.786315][T22231] FAT-fs (loop1): Directory bread(block 71) failed [ 340.793066][T22231] FAT-fs (loop1): Directory bread(block 72) failed [ 340.799669][T22231] FAT-fs (loop1): Directory bread(block 73) failed [ 340.881644][ T295] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 340.881731][T15593] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 340.898187][T15593] uvcvideo: No valid video chain found. [ 340.904685][T15593] usb 3-1: selecting invalid altsetting 0 [ 340.964499][ T304] logitech-hidpp-device 0003:046D:C262.003A: hidraw0: USB HID v0.04 Device [HID 046d:c262] on usb-dummy_hcd.5-1/input0 [ 341.024277][T15593] usb 3-1: USB disconnect, device number 84 [ 341.068988][T22258] syz.0.10270[22258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.069056][T22258] syz.0.10270[22258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.176450][ T443] usb 6-1: USB disconnect, device number 28 [ 341.194522][ T2957] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 341.241738][ T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 341.252779][ T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.262551][ T295] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 341.271617][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.280579][ T295] usb 4-1: config 0 descriptor?? [ 341.451628][ T2957] usb 2-1: Using ep0 maxpacket: 8 [ 341.571640][ T2957] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.590536][ T2957] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.610683][ T2957] usb 2-1: config 0 interface 0 has no altsetting 0 [ 341.625185][ T2957] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 341.641588][ T2957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.660550][ T2957] usb 2-1: config 0 descriptor?? [ 341.681903][ T24] kauditd_printk_skb: 706 callbacks suppressed [ 341.681917][ T24] audit: type=1400 audit(2000000042.670:25343): avc: denied { ioctl } for pid=22240 comm="syz.1.10262" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.747299][ T24] audit: type=1400 audit(2000000042.710:25344): avc: denied { read write } for pid=7633 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 341.775810][ T295] lua 0003:1E7D:2C2E.003B: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 341.787304][ T24] audit: type=1400 audit(2000000042.710:25345): avc: denied { open } for pid=7633 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 341.815443][ T24] audit: type=1400 audit(2000000042.710:25346): avc: denied { ioctl } for pid=7633 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 341.842430][ T24] audit: type=1400 audit(2000000042.730:25347): avc: denied { ioctl } for pid=22220 comm="syz.3.10253" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.869242][ T24] audit: type=1400 audit(2000000042.750:25348): avc: denied { prog_load } for pid=22280 comm="syz.5.10281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 341.898518][ T24] audit: type=1400 audit(2000000042.750:25349): avc: denied { bpf } for pid=22280 comm="syz.5.10281" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.921716][ T24] audit: type=1400 audit(2000000042.750:25350): avc: denied { perfmon } for pid=22280 comm="syz.5.10281" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 342.001031][ T295] usb 4-1: USB disconnect, device number 79 [ 342.013874][ T24] audit: type=1400 audit(2000000042.770:25351): avc: denied { bpf } for pid=22280 comm="syz.5.10281" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 342.055079][ T24] audit: type=1400 audit(2000000042.770:25352): avc: denied { prog_run } for pid=22280 comm="syz.5.10281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 342.142485][ T2957] cypress 0003:04B4:BCA1.003C: unknown main item tag 0x0 [ 342.149672][ T2957] cypress 0003:04B4:BCA1.003C: global environment stack underflow [ 342.170542][ T2957] cypress 0003:04B4:BCA1.003C: item 0 1 1 11 parsing failed [ 342.185679][ T2957] cypress 0003:04B4:BCA1.003C: parse failed [ 342.198195][ T2957] cypress: probe of 0003:04B4:BCA1.003C failed with error -22 [ 342.344968][ T304] usb 2-1: USB disconnect, device number 74 [ 343.007085][T22340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10309'. [ 343.093800][T22350] netlink: 'syz.3.10313': attribute type 10 has an invalid length. [ 343.244748][T22356] Alternate GPT is invalid, using primary GPT. [ 343.271709][T22356] loop1: p2 p3 p7 [ 343.573413][ T320] udevd[320]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 343.587021][ T413] udevd[413]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 343.600043][T22382] syz.1.10328[22382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.600111][T22382] syz.1.10328[22382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.603062][ T2184] udevd[2184]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 343.682316][ T320] udevd[320]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 343.700852][ T2184] udevd[2184]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 343.715038][ T413] udevd[413]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 344.131600][ T304] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 344.491694][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 344.521599][ T304] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 344.551612][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 344.581691][ T304] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 344.741746][ T304] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 344.751001][ T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.784197][ T304] usb 2-1: Product: syz [ 344.788408][ T304] usb 2-1: Manufacturer: syz [ 344.801629][ T304] usb 2-1: SerialNumber: syz [ 344.810903][ T304] usb 2-1: config 0 descriptor?? [ 344.862407][ T304] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 345.103548][T22435] cgroup: noprefix used incorrectly [ 345.115336][ T304] scsi host1: usb-storage 2-1:0.0 [ 345.188309][T22442] futex_wake_op: syz.5.10356 tries to shift op by 32; fix this program [ 345.236018][T22448] netlink: 'syz.3.10359': attribute type 2 has an invalid length. [ 345.295673][T22453] syz.5.10360[22453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.295725][T22453] syz.5.10360[22453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.313966][ T443] usb 2-1: USB disconnect, device number 75 [ 345.711688][ T2957] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 345.863617][ T1030] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 345.912773][T22505] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 345.930008][T22505] ext4 filesystem being mounted at /1241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.951599][ T2957] usb 3-1: Using ep0 maxpacket: 16 [ 345.984586][T22505] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #15: block 4: comm syz.5.10386: lblock 4 mapped to illegal pblock 4 (length 1) [ 346.071689][ T2957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.083172][ T2957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.092975][ T2957] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.105923][ T2957] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 346.115206][ T2957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.127037][ T2957] usb 3-1: config 0 descriptor?? [ 346.144757][T22503] F2FS-fs (loop1): Found nat_bits in checkpoint [ 346.216901][T22503] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 346.231895][ T1030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.261752][ T1030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.271840][ T1030] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 346.281034][ T1030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.303019][ T1030] usb 4-1: config 0 descriptor?? [ 346.322795][ T276] attempt to access beyond end of device [ 346.322795][ T276] loop1: rw=2049, want=45104, limit=40427 [ 346.613264][ T2957] ryos 0003:1E7D:31CE.003D: unknown main item tag 0x3 [ 346.628883][ T2957] ryos 0003:1E7D:31CE.003D: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.2-1/input0 [ 346.702517][ T24] kauditd_printk_skb: 548 callbacks suppressed [ 346.702531][ T24] audit: type=1400 audit(2000000047.690:25901): avc: denied { read write } for pid=7633 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 346.740130][ T24] audit: type=1400 audit(2000000047.690:25902): avc: denied { read write open } for pid=7633 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 346.767606][ T24] audit: type=1400 audit(2000000047.690:25903): avc: denied { ioctl } for pid=7633 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 346.802858][ T1030] belkin 0003:1020:0006.003E: unknown main item tag 0x7 [ 346.810135][ T1030] belkin 0003:1020:0006.003E: item fetching failed at offset 6/7 [ 346.856484][ T1030] belkin 0003:1020:0006.003E: parse failed [ 346.862921][ T1030] belkin: probe of 0003:1020:0006.003E failed with error -22 [ 346.882314][ T24] audit: type=1400 audit(2000000047.720:25904): avc: denied { prog_load } for pid=22559 comm="syz.5.10408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 346.884998][ T7633] audit: audit_backlog=65 > audit_backlog_limit=64 [ 346.903699][ T1030] usb 3-1: USB disconnect, device number 85 [ 346.915246][ T24] audit: type=1400 audit(2000000047.720:25905): avc: denied { bpf } for pid=22559 comm="syz.5.10408" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.916784][ T7633] audit: audit_lost=69 audit_rate_limit=0 audit_backlog_limit=64 [ 346.936782][ T24] audit: type=1400 audit(2000000047.720:25906): avc: denied { perfmon } for pid=22559 comm="syz.5.10408" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.977697][ T7633] audit: backlog limit exceeded [ 346.978229][ T24] audit: type=1400 audit(2000000047.720:25907): avc: denied { prog_run } for pid=22559 comm="syz.5.10408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 347.023100][ T443] usb 4-1: USB disconnect, device number 80 [ 347.382141][T22582] exfat: Deprecated parameter 'namecase' [ 347.391626][T22582] exfat: Deprecated parameter 'utf8' [ 347.396978][T22582] exfat: Deprecated parameter 'namecase' [ 347.411660][T22582] exfat: Deprecated parameter 'utf8' [ 347.449365][T22582] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 347.691687][ T443] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 347.941605][ T443] usb 3-1: Using ep0 maxpacket: 16 [ 348.062002][ T443] usb 3-1: config 0 has an invalid interface number: 198 but max is 0 [ 348.072939][ T443] usb 3-1: config 0 has no interface number 0 [ 348.231814][ T443] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=30.1d [ 348.245521][ T443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.261057][ T443] usb 3-1: Product: syz [ 348.269609][ T443] usb 3-1: Manufacturer: syz [ 348.278499][ T443] usb 3-1: SerialNumber: syz [ 348.301785][ T443] usb 3-1: config 0 descriptor?? [ 348.354336][ T443] usb_ehset_test: probe of 3-1:0.198 failed with error -32 [ 348.510817][T22617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10433'. [ 348.561600][ T443] usb 3-1: USB disconnect, device number 86 [ 348.653687][T22625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10437'. [ 349.371632][ T443] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 349.491619][ T2957] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 349.621633][ T443] usb 3-1: Using ep0 maxpacket: 16 [ 349.741653][ T443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.755854][ T443] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 349.777462][ T443] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 349.792674][ T443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.808029][ T443] usb 3-1: config 0 descriptor?? [ 349.851636][ T2957] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 349.863218][ T2957] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 349.872679][ T2957] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 349.883209][ T2957] usb 6-1: config 220 has no interface number 2 [ 349.889508][ T2957] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 349.903416][ T2957] usb 6-1: config 220 interface 0 has no altsetting 0 [ 349.910689][ T2957] usb 6-1: config 220 interface 76 has no altsetting 0 [ 349.920580][ T2957] usb 6-1: config 220 interface 1 has no altsetting 0 [ 350.081826][ T2957] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 350.091140][ T2957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.099279][ T2957] usb 6-1: Product: syz [ 350.103557][ T2957] usb 6-1: Manufacturer: syz [ 350.108147][ T2957] usb 6-1: SerialNumber: syz [ 350.306526][ T443] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.003F/input/input56 [ 350.369109][T22697] syz.0.10472[22697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.369155][T22697] syz.0.10472[22697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.383709][ T443] microsoft 0003:045E:07DA.003F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 350.481820][ T2957] usb 6-1: selecting invalid altsetting 0 [ 350.487967][ T2957] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 350.494814][ T2957] uvcvideo: No valid video chain found. [ 350.521216][ T443] usb 3-1: USB disconnect, device number 87 [ 350.575486][ T2957] usb 6-1: USB disconnect, device number 29 [ 350.648167][T22720] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10483'. [ 350.648363][T22722] incfs: Backing dir is not set, filesystem can't be mounted. [ 350.665713][T22722] incfs: mount failed -2 [ 350.978438][T22772] binder: 22771:22772 ioctl 400c620e 200000000040 returned -22 [ 351.046039][T22779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10511'. [ 351.103747][T22776] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.10510: Failed to acquire dquot type 1 [ 351.121738][ T295] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 351.123632][ T413] udevd[413]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 351.152601][T22776] EXT4-fs error (device loop5) in ext4_do_update_inode:5335: error 27 [ 351.167288][T22776] EXT4-fs error (device loop5): ext4_dirty_inode:6142: inode #16: comm syz.5.10510: mark_inode_dirty error [ 351.182345][T22776] EXT4-fs error (device loop5) in ext4_do_update_inode:5335: error 27 [ 351.187204][ T413] udevd[413]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 351.202175][T22776] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #16: comm syz.5.10510: mark_inode_dirty error [ 351.222368][T22776] EXT4-fs error (device loop5) in ext4_do_update_inode:5335: error 27 [ 351.242518][T22776] EXT4-fs error (device loop5) in ext4_orphan_del:3292: error 27 [ 351.260281][T22776] EXT4-fs error (device loop5) in ext4_do_update_inode:5335: error 27 [ 351.275061][T22776] EXT4-fs error (device loop5): ext4_truncate:4390: inode #16: comm syz.5.10510: mark_inode_dirty error [ 351.306419][T22776] EXT4-fs error (device loop5) in ext4_orphan_cleanup:3108: error 27 [ 351.332383][T22776] EXT4-fs (loop5): 1 truncate cleaned up [ 351.342224][T22776] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 351.361700][ T295] usb 4-1: Using ep0 maxpacket: 8 [ 351.367046][T22776] ext4 filesystem being mounted at /1279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.415713][ T413] udevd[413]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 351.481894][ T295] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.517230][ T295] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.529183][T22830] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10535'. [ 351.544865][ T295] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 351.575035][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.590272][ T295] usb 4-1: config 0 descriptor?? [ 351.711577][ T24] kauditd_printk_skb: 23791 callbacks suppressed [ 351.711590][ T24] audit: type=1400 audit(2000000052.690:49682): avc: denied { open } for pid=7633 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.753408][T22852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10546'. [ 351.757070][ T24] audit: type=1400 audit(2000000052.690:49683): avc: denied { ioctl } for pid=7633 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.789319][ T24] audit: type=1400 audit(2000000052.700:49684): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.814522][ T24] audit: type=1400 audit(2000000052.700:49685): avc: denied { read write open } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.829895][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10553'. [ 351.853836][T22855] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.865000][T22855] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 351.872017][ T24] audit: type=1400 audit(2000000052.700:49686): avc: denied { ioctl } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.881595][T22855] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 351.919371][ T320] udevd[320]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 351.923208][ T24] audit: type=1400 audit(2000000052.740:49687): avc: denied { read } for pid=22856 comm="syz.2.10548" name="event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 351.966645][ T24] audit: type=1400 audit(2000000052.740:49688): avc: denied { open } for pid=22856 comm="syz.2.10548" path="/dev/input/event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 351.991124][ T24] audit: type=1400 audit(2000000052.740:49689): avc: denied { ioctl } for pid=22856 comm="syz.2.10548" path="/dev/input/event0" dev="devtmpfs" ino=255 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 352.017369][ T24] audit: type=1400 audit(2000000052.750:49690): avc: denied { read write } for pid=22854 comm="syz.1.10547" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.035512][ T320] udevd[320]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 352.048010][ T24] audit: type=1400 audit(2000000052.750:49691): avc: denied { read write open } for pid=22854 comm="syz.1.10547" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.121896][ T295] hid (null): bogus close delimiter [ 352.128429][ T295] uclogic 0003:5543:0042.0040: bogus close delimiter [ 352.135673][ T295] uclogic 0003:5543:0042.0040: item 0 1 2 10 parsing failed [ 352.143172][ T295] uclogic 0003:5543:0042.0040: parse failed [ 352.160131][ T295] uclogic: probe of 0003:5543:0042.0040 failed with error -22 [ 352.336188][ T443] usb 4-1: USB disconnect, device number 81 [ 352.493380][T22927] syz.0.10582[22927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.493425][T22927] syz.0.10582[22927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.621325][T22939] incfs: Can't find or create .index dir in ./bus [ 352.639636][ T2957] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 352.647659][T22939] incfs: mount failed -22 [ 352.773412][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10596'. [ 352.886630][T22962] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.10597: Failed to acquire dquot type 0 [ 352.889329][ T413] udevd[413]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 352.901622][ T2957] usb 3-1: Using ep0 maxpacket: 8 [ 352.931806][ T413] udevd[413]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 352.936023][T22962] EXT4-fs error (device loop5): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 352.965578][T22962] EXT4-fs error (device loop5) in ext4_do_update_inode:5335: error 27 [ 352.986135][T22962] EXT4-fs error (device loop5): ext4_dirty_inode:6142: inode #13: comm syz.5.10597: mark_inode_dirty error [ 353.013184][T22962] EXT4-fs error (device loop5) in ext4_do_update_inode:5335: error 27 [ 353.034432][T22962] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #13: comm syz.5.10597: mark_inode_dirty error [ 353.046523][ T2957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.063539][ T2957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.074468][T22962] EXT4-fs error (device loop5) in ext4_do_update_inode:5335: error 27 [ 353.082901][ T2957] usb 3-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00 [ 353.092893][T22962] EXT4-fs error (device loop5) in ext4_orphan_del:3292: error 27 [ 353.102016][ T2957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.110380][T22962] EXT4-fs error (device loop5) in ext4_do_update_inode:5335: error 27 [ 353.121891][ T2957] usb 3-1: config 0 descriptor?? [ 353.127522][T22962] EXT4-fs error (device loop5): ext4_truncate:4390: inode #13: comm syz.5.10597: mark_inode_dirty error [ 353.139425][T22962] EXT4-fs error (device loop5) in ext4_orphan_cleanup:3108: error 27 [ 353.139870][T22962] EXT4-fs (loop5): 1 truncate cleaned up [ 353.139882][T22962] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 353.159870][ T320] udevd[320]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 353.354284][T23022] input input58: cannot allocate more than FF_MAX_EFFECTS effects [ 353.368092][ T2133] hid-generic 0000:0000:0000.0041: item fetching failed at offset 0/1 [ 353.377174][ T2133] hid-generic: probe of 0000:0000:0000.0041 failed with error -22 [ 353.422912][T23030] netlink: 208 bytes leftover after parsing attributes in process `syz.0.10631'. [ 353.433099][T23030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10631'. [ 353.521675][ T443] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 353.573235][T23054] __nla_validate_parse: 1 callbacks suppressed [ 353.573246][T23054] netlink: 656 bytes leftover after parsing attributes in process `syz.3.10643'. [ 353.603440][ T2957] wacom 0003:056A:033D.0042: unknown main item tag 0x0 [ 353.620270][ T2957] wacom 0003:056A:033D.0042: unknown main item tag 0x0 [ 353.627318][ T2957] wacom 0003:056A:033D.0042: unknown main item tag 0x0 [ 353.634494][ T2957] wacom 0003:056A:033D.0042: unknown main item tag 0x0 [ 353.644564][ T2957] wacom 0003:056A:033D.0042: unknown main item tag 0x0 [ 353.654066][ T2957] wacom 0003:056A:033D.0042: Unknown device_type for 'HID 056a:033d'. Assuming pen. [ 353.668654][ T2957] wacom 0003:056A:033D.0042: hidraw0: USB HID v0.00 Device [HID 056a:033d] on usb-dummy_hcd.2-1/input0 [ 353.685376][ T2957] input: Wacom Intuos P M 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:033D.0042/input/input59 [ 353.771862][ T443] usb 6-1: Using ep0 maxpacket: 16 [ 353.866882][ T2957] usb 3-1: USB disconnect, device number 88 [ 353.892040][ T443] usb 6-1: config 0 has an invalid interface number: 198 but max is 0 [ 353.904316][ T443] usb 6-1: config 0 has no interface number 0 [ 354.061713][ T443] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=30.1d [ 354.074130][ T443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.082839][ T443] usb 6-1: Product: syz [ 354.087332][ T443] usb 6-1: Manufacturer: syz [ 354.093502][ T443] usb 6-1: SerialNumber: syz [ 354.099852][ T443] usb 6-1: config 0 descriptor?? [ 354.142586][ T443] usb_ehset_test: probe of 6-1:0.198 failed with error -32 [ 354.293565][T23123] xt_l2tp: v2 doesn't support IP mode [ 354.358091][ T443] usb 6-1: USB disconnect, device number 30 [ 354.491386][T23149] tipc: Enabling of bearer rejected, failed to enable media [ 354.781604][ T295] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 354.821681][ T2133] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 354.903667][T23187] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 354.981755][ T443] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 355.017182][ T1582] kernel write not supported for file /uinput (pid: 1582 comm: kworker/1:6) [ 355.141881][ T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.164048][ T295] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 355.188942][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.197692][ T2133] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.223279][ T295] usb 4-1: config 0 descriptor?? [ 355.228428][ T2133] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.249028][ T2133] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 355.265428][ T2133] usb 2-1: config 0 interface 0 has no altsetting 0 [ 355.281687][ T2133] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 355.300943][ T2133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.310365][ T2133] usb 2-1: config 0 descriptor?? [ 355.362035][ T443] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 355.373607][ T443] usb 3-1: config 179 has no interface number 0 [ 355.380087][ T443] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 355.393396][ T443] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 355.404696][ T443] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 355.426622][ T443] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 355.438081][ T443] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 355.452107][ T443] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 355.475716][ T443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.511999][T23177] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 355.532278][ T443] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 355.571730][ T443] xpad: probe of 3-1:179.65 failed with error -5 [ 355.701864][ T295] hid (null): global environment stack underflow [ 355.709324][ T295] logitech-djreceiver 0003:046D:C532.0043: global environment stack underflow [ 355.718406][ T295] logitech-djreceiver 0003:046D:C532.0043: item 0 4 1 11 parsing failed [ 355.726930][ T295] logitech-djreceiver 0003:046D:C532.0043: logi_dj_probe: parse failed [ 355.735254][ T295] logitech-djreceiver: probe of 0003:046D:C532.0043 failed with error -22 [ 355.746680][ T443] usb 3-1: USB disconnect, device number 89 [ 355.802648][ T2133] logitech 0003:046D:C294.0044: unknown main item tag 0x0 [ 355.810248][ T2133] logitech 0003:046D:C294.0044: unknown main item tag 0x0 [ 355.825289][ T2133] logitech 0003:046D:C294.0044: unknown main item tag 0x0 [ 355.841629][ T2133] logitech 0003:046D:C294.0044: unknown main item tag 0x0 [ 355.848816][ T2133] logitech 0003:046D:C294.0044: unknown main item tag 0x0 [ 355.856719][ T2133] logitech 0003:046D:C294.0044: unknown main item tag 0x0 [ 355.864104][ T2133] logitech 0003:046D:C294.0044: unknown main item tag 0x0 [ 355.872337][ T2133] logitech 0003:046D:C294.0044: hidraw0: USB HID v0.03 Device [HID 046d:c294] on usb-dummy_hcd.1-1/input0 [ 355.883765][ T2133] logitech 0003:046D:C294.0044: no inputs found [ 355.911264][ T2133] usb 4-1: USB disconnect, device number 82 [ 356.004950][ T295] usb 2-1: USB disconnect, device number 76 [ 356.426216][T23332] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 356.434629][T23332] SELinux: failed to load policy [ 356.544165][T23355] tipc: Enabling of bearer rejected, failed to enable media [ 356.736113][ T24] kauditd_printk_skb: 1136 callbacks suppressed [ 356.736125][ T24] audit: type=1400 audit(2000000057.720:50826): avc: denied { prog_load } for pid=23372 comm="syz.1.10797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 356.811642][ T24] audit: type=1400 audit(2000000057.750:50827): avc: denied { bpf } for pid=23372 comm="syz.1.10797" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 356.843630][ T24] audit: type=1400 audit(2000000057.760:50828): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.870289][ T24] audit: type=1400 audit(2000000057.760:50829): avc: denied { read write open } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.906170][ T24] audit: type=1400 audit(2000000057.770:50830): avc: denied { ioctl } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.961589][ T24] audit: type=1400 audit(2000000057.780:50831): avc: denied { map_create } for pid=23374 comm="syz.1.10798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.001577][ T24] audit: type=1400 audit(2000000057.780:50832): avc: denied { perfmon } for pid=23374 comm="syz.1.10798" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.051681][ T24] audit: type=1400 audit(2000000057.780:50833): avc: denied { map_read map_write } for pid=23374 comm="syz.1.10798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.108573][ T24] audit: type=1400 audit(2000000057.800:50834): avc: denied { read write } for pid=276 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.133466][ T24] audit: type=1400 audit(2000000057.800:50835): avc: denied { read write open } for pid=276 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.632861][T23390] F2FS-fs (loop1): invalid crc value [ 357.658058][T23410] netlink: 'syz.2.10813': attribute type 1 has an invalid length. [ 357.668436][T23390] F2FS-fs (loop1): Found nat_bits in checkpoint [ 357.711931][T23390] F2FS-fs (loop1): Start checkpoint disabled! [ 357.728095][T23390] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 357.900995][T23430] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 358.068179][T23443] netlink: 'syz.2.10829': attribute type 1 has an invalid length. [ 358.121491][T23446] EXT4-fs (loop1): Test dummy encryption mode enabled [ 358.131654][T23446] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 358.161232][T23446] EXT4-fs (loop1): 1 truncate cleaned up [ 358.167099][T23446] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,inode_readahead_blks=0x0000000000040000,,errors=continue [ 358.217566][T23446] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz.1.10830: Siphash requires key [ 358.249395][T23446] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz.1.10830: Siphash requires key [ 358.268606][T23462] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10837'. [ 358.280899][T23446] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz.1.10830: Siphash requires key [ 358.303265][T23446] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz.1.10830: Siphash requires key [ 358.315295][T23446] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz.1.10830: Siphash requires key [ 358.326962][T23446] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz.1.10830: Siphash requires key [ 358.338423][T23446] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz.1.10830: Siphash requires key [ 358.350203][T23446] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz.1.10830: Siphash requires key [ 358.361851][ T295] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 358.409875][T23468] xt_hashlimit: max too large, truncated to 1048576 [ 358.480800][T23476] option changes via remount are deprecated (pid=23475 comm=syz.1.10844) [ 358.489399][T23476] cgroup: option or name mismatch, new: 0x0 "subj_user", old: 0x0 "" [ 358.601691][ T295] usb 6-1: Using ep0 maxpacket: 32 [ 358.741713][ T295] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.744547][T23502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10856'. [ 358.761853][ T295] usb 6-1: config 0 interface 0 has no altsetting 0 [ 358.775484][ T295] usb 6-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 358.795210][ T295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.826390][ T295] usb 6-1: config 0 descriptor?? [ 358.977151][T23523] ================================================================== [ 358.985272][T23523] BUG: KASAN: use-after-free in exact_lock+0x38/0xc0 [ 358.991948][T23523] Read of size 8 at addr ffff888109630460 by task syz.1.10866/23523 [ 359.000054][T23523] [ 359.002390][T23523] CPU: 1 PID: 23523 Comm: syz.1.10866 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 359.013931][T23523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 359.023992][T23523] Call Trace: [ 359.027290][T23523] __dump_stack+0x21/0x24 [ 359.031649][T23523] dump_stack_lvl+0x169/0x1d8 [ 359.036337][T23523] ? show_regs_print_info+0x18/0x18 [ 359.041641][T23523] ? thaw_kernel_threads+0x220/0x220 [ 359.046945][T23523] print_address_description+0x7f/0x2c0 [ 359.052494][T23523] ? exact_lock+0x38/0xc0 [ 359.056826][T23523] kasan_report+0xe2/0x130 [ 359.061243][T23523] ? exact_lock+0x38/0xc0 [ 359.065673][T23523] __asan_report_load8_noabort+0x14/0x20 [ 359.071302][T23523] exact_lock+0x38/0xc0 [ 359.075460][T23523] ? bdev_check_media_change+0x350/0x350 [ 359.081138][T23523] kobj_lookup+0x298/0x430 [ 359.085674][T23523] get_gendisk+0xe9/0x340 [ 359.090044][T23523] ? _raw_spin_lock+0x8e/0xe0 [ 359.094747][T23523] __blkdev_get+0x1b0/0x12f0 [ 359.099374][T23523] ? _raw_spin_unlock+0x4d/0x70 [ 359.104262][T23523] ? blkdev_bio_end_io+0x450/0x450 [ 359.109399][T23523] ? selinux_file_receive+0x130/0x130 [ 359.114881][T23523] ? selinux_inode_permission+0x514/0x5e0 [ 359.120617][T23523] blkdev_open+0x208/0x430 [ 359.125136][T23523] ? block_ioctl+0x100/0x100 [ 359.129821][T23523] do_dentry_open+0x793/0x1090 [ 359.134678][T23523] vfs_open+0x73/0x80 [ 359.138663][T23523] path_openat+0x27ad/0x3160 [ 359.143261][T23523] ? getname+0x19/0x20 [ 359.147509][T23523] ? do_filp_open+0x3e0/0x3e0 [ 359.152286][T23523] do_filp_open+0x1b3/0x3e0 [ 359.156797][T23523] ? vfs_tmpfile+0x2c0/0x2c0 [ 359.161639][T23523] ? get_unused_fd_flags+0x92/0xa0 [ 359.166753][T23523] do_sys_openat2+0x14c/0x6d0 [ 359.171523][T23523] ? __se_sys_futex+0x2b4/0x360 [ 359.176379][T23523] ? do_sys_open+0xe0/0xe0 [ 359.180804][T23523] ? switch_fpu_return+0x197/0x340 [ 359.185916][T23523] ? fpu__clear_all+0x20/0x20 [ 359.190591][T23523] __x64_sys_open+0x11c/0x140 [ 359.195275][T23523] do_syscall_64+0x31/0x40 [ 359.199723][T23523] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 359.205621][T23523] RIP: 0033:0x7fd832eda929 [ 359.210215][T23523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.230554][T23523] RSP: 002b:00007fd831543038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 359.239513][T23523] RAX: ffffffffffffffda RBX: 00007fd833101fa0 RCX: 00007fd832eda929 [ 359.247755][T23523] RDX: 00000000000000c0 RSI: 0000000000060840 RDI: 00002000009e1000 [ 359.255729][T23523] RBP: 00007fd832f5cb39 R08: 0000000000000000 R09: 0000000000000000 [ 359.263712][T23523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.271685][T23523] R13: 0000000000000000 R14: 00007fd833101fa0 R15: 00007ffe8c31cd98 [ 359.279673][T23523] [ 359.282000][T23523] Allocated by task 20433: [ 359.286422][T23523] __kasan_kmalloc+0xda/0x110 [ 359.291087][T23523] kmem_cache_alloc_trace+0x184/0x2e0 [ 359.296447][T23523] copy_verifier_state+0x5a2/0xc20 [ 359.301546][T23523] push_stack+0x19b/0x4f0 [ 359.305980][T23523] do_check+0xb7df/0xdf40 [ 359.310310][T23523] do_check_common+0x8e3/0x1160 [ 359.315260][T23523] bpf_check+0x9371/0xd720 [ 359.319695][T23523] bpf_prog_load+0xf5a/0x1420 [ 359.324356][T23523] __se_sys_bpf+0x442/0x680 [ 359.328936][T23523] __x64_sys_bpf+0x7b/0x90 [ 359.333343][T23523] do_syscall_64+0x31/0x40 [ 359.337838][T23523] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 359.343715][T23523] [ 359.346037][T23523] The buggy address belongs to the object at ffff888109630000 [ 359.346037][T23523] which belongs to the cache kmalloc-2k of size 2048 [ 359.360433][T23523] The buggy address is located 1120 bytes inside of [ 359.360433][T23523] 2048-byte region [ffff888109630000, ffff888109630800) [ 359.373969][T23523] The buggy address belongs to the page: [ 359.379692][T23523] page:ffffea0004258c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888109636000 pfn:0x109630 [ 359.391219][T23523] head:ffffea0004258c00 order:3 compound_mapcount:0 compound_pincount:0 [ 359.399618][T23523] flags: 0x4000000000010200(slab|head) [ 359.405072][T23523] raw: 4000000000010200 ffffea0004589c08 ffffea0004940808 ffff888100042d80 [ 359.413648][T23523] raw: ffff888109636000 0000000000080004 00000001ffffffff 0000000000000000 [ 359.422230][T23523] page dumped because: kasan: bad access detected [ 359.428629][T23523] page_owner tracks the page as allocated [ 359.434456][T23523] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 1928328261, free_ts 0 [ 359.452497][T23523] prep_new_page+0x179/0x180 [ 359.457099][T23523] get_page_from_freelist+0x2235/0x23d0 [ 359.462647][T23523] __alloc_pages_nodemask+0x268/0x5f0 [ 359.468018][T23523] new_slab+0x84/0x3f0 [ 359.472090][T23523] ___slab_alloc+0x2a6/0x450 [ 359.476756][T23523] __slab_alloc+0x63/0xa0 [ 359.481076][T23523] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 359.486448][T23523] __alloc_disk_node+0x79/0x580 [ 359.491288][T23523] loop_add+0x33f/0x7b0 [ 359.495433][T23523] loop_init+0x1bf/0x1ff [ 359.499672][T23523] do_one_initcall+0x187/0x510 [ 359.504430][T23523] do_initcall_level+0x16f/0x2cf [ 359.509441][T23523] do_initcalls+0x50/0x92 [ 359.513941][T23523] do_basic_setup+0x88/0x8f [ 359.518431][T23523] kernel_init_freeable+0x287/0x3be [ 359.523799][T23523] kernel_init+0x11/0x1a0 [ 359.528117][T23523] page_owner free stack trace missing [ 359.533474][T23523] [ 359.535786][T23523] Memory state around the buggy address: [ 359.541494][T23523] ffff888109630300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.549584][T23523] ffff888109630380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.557896][T23523] >ffff888109630400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.566044][T23523] ^ [ 359.573237][T23523] ffff888109630480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.581289][T23523] ffff888109630500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.589344][T23523] ================================================================== [ 359.597391][T23523] Disabling lock debugging due to kernel taint [ 359.843682][ T295] wacom 0003:056A:0057.0045: hidraw0: USB HID vb.27 Device [HID 056a:0057] on usb-dummy_hcd.5-1/input0 [ 360.043270][ T295] usb 6-1: USB disconnect, device number 31