last executing test programs: 2.201588566s ago: executing program 4 (id=10598): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000024c0)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004540)={0x2020}, 0x2020) lseek(r0, 0xfffffffffffffff5, 0x1) 2.002589859s ago: executing program 4 (id=10613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}, {&(0x7f0000000300)="9943e0bb", 0x4}], 0x3) 1.94126656s ago: executing program 4 (id=10619): unshare(0x22020600) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) 1.873203912s ago: executing program 4 (id=10624): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents(r0, &(0x7f0000000200)=""/45, 0x2d) getdents(r0, &(0x7f0000000600)=""/196, 0xc4) 1.837295292s ago: executing program 4 (id=10627): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000003c0)={0x6, {{0x2, 0x4e26, @multicast2}}, {{0x14, 0x4e20, @loopback}}}, 0x108) 1.781616523s ago: executing program 4 (id=10632): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r0], 0x0) 1.030636754s ago: executing program 0 (id=10678): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60010000", @ANYRES16=r0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x28000021}, 0x24008854) 999.663725ms ago: executing program 0 (id=10680): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4000080) 985.452625ms ago: executing program 0 (id=10682): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) 962.919116ms ago: executing program 0 (id=10685): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 887.948367ms ago: executing program 0 (id=10692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 887.795857ms ago: executing program 0 (id=10693): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa04a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8001, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x3, {[@main=@item_012={0x1, 0x0, 0xa, "80"}, @global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0) 548.802892ms ago: executing program 2 (id=10720): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000002010160000000a0003"]) 401.066254ms ago: executing program 2 (id=10725): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x40}) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x0, 0xa}) 400.863264ms ago: executing program 2 (id=10726): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x60}, 0x0) 400.792514ms ago: executing program 2 (id=10727): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x2) 400.618594ms ago: executing program 2 (id=10728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad86558"], 0xffdd) 351.135545ms ago: executing program 2 (id=10733): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x804}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000066aef4a000000000000000004000000bf7f1a006601feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4c) 320.772216ms ago: executing program 1 (id=10734): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) 320.381736ms ago: executing program 1 (id=10735): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="000a00000000000007300000000000000000102dcc00001100000000007fffffff00000000000000000000000720000000000600000000000000000000000000000000000200feffff07000000000000000047d7a9"], 0x60) 308.647726ms ago: executing program 1 (id=10736): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) alarm(0x8) 268.107286ms ago: executing program 1 (id=10737): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 267.866416ms ago: executing program 3 (id=10738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 118.228379ms ago: executing program 3 (id=10739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x42, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000380), &(0x7f00000003c0)=""/247}, 0x20) 117.891559ms ago: executing program 3 (id=10740): setreuid(0xee01, 0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000180)) 117.701319ms ago: executing program 3 (id=10741): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x1, 0x70bd3d, 0x0, {0x7}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 49.01801ms ago: executing program 3 (id=10742): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) clock_gettime(0x0, &(0x7f0000000b00)) 48.73603ms ago: executing program 3 (id=10744): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$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") symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xff8c) 12.39148ms ago: executing program 1 (id=10745): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200), 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) 0s ago: executing program 1 (id=10746): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000007c0)='./file0\x00', 0x164) fadvise64(r0, 0x6, 0x400000b, 0x4) kernel console output (not intermixed with test programs): T17927] RSP: 002b:00007fb0c7e34dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.524373][T17927] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb0c97cc52b [ 259.532658][T17927] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004 [ 259.540676][T17927] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000044f [ 259.548967][T17927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 259.557120][T17927] R13: 00007fb0c7e34ef0 R14: 00007fb0c7e34eb0 R15: 00007fb0bfa15000 [ 259.565271][T17927] ---[ end trace ac7ee376d5f4ab0d ]--- [ 259.595414][T17927] EXT4-fs (loop1048579): Cannot turn on journaled quota: type 0: error -2 [ 259.604579][T17927] EXT4-fs (loop1048579): Cannot turn on journaled quota: type 1: error -2 [ 259.614129][ T3940] usb 2-1: 0:2 : does not exist [ 259.619864][T17927] EXT4-fs (loop1048579): 1 truncate cleaned up [ 259.626589][T17927] EXT4-fs (loop1048579): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,grpquota,data_err=ignore,grpjquota="nodiscard,errors=remount-ro,nodelalloc,sysvgroups,norecovery, [ 259.629875][ T3940] usb 2-1: USB disconnect, device number 81 [ 259.673227][T17927] EXT4-fs error (device loop1048579): ext4_map_blocks:630: inode #2: block 4: comm syz.3.8277: lblock 0 mapped to illegal pblock 4 (length 1) [ 259.688037][T17927] EXT4-fs (loop1048579): Remounting filesystem read-only [ 259.770934][T17976] SELinux: Context þó{{†¶õä(´ú·|š‘œåk^C-2Õ$/ [ 259.770934][T17976] oÇÄ [ 259.770934][T17976] ÜšâÄç­¸ž¡ÕW [ 259.770934][T17976] ¿'µû&¤åyvŠ•Ï`]¢_wþâ©ò¿¦nå€)…ÒS1ý¢µŠ »É¹Zw¢Òä: is not valid (left unmapped). [ 259.804550][ T24] audit: type=1400 audit(2000000049.378:1058): avc: denied { shutdown } for pid=17979 comm="syz.3.8302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 259.833309][T17988] usb usb1: usbfs: process 17988 (syz.0.8304) did not claim interface 0 before use [ 259.907304][ T24] audit: type=1400 audit(2000000049.481:1059): avc: denied { accept } for pid=18001 comm="syz.0.8314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 259.970153][T18018] ------------[ cut here ]------------ [ 259.975690][T18018] WARNING: CPU: 1 PID: 18018 at fs/sysfs/group.c:116 internal_create_group+0xe4/0xcf0 [ 259.978520][T18021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18021 comm=syz.0.8323 [ 259.985441][T18018] Modules linked in: [ 259.998109][T18021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18021 comm=syz.0.8323 [ 259.998155][T18018] [ 260.017077][T18018] CPU: 1 PID: 18018 Comm: syz.3.8321 Tainted: G W 5.10.238-syzkaller-00282-gd76d4cd0623a #0 [ 260.028484][T18018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.038591][T18018] RIP: 0010:internal_create_group+0xe4/0xcf0 [ 260.044614][T18018] Code: 00 74 08 48 89 df e8 6b c0 d7 ff 48 8b 03 83 7c 24 1c 00 74 22 48 85 c0 0f 84 ef 0b 00 00 e8 f3 cf 9d ff eb 20 e8 ec cf 9d ff <0f> 0b 41 be ea ff ff ff e9 40 0b 00 00 48 85 c0 0f 84 dd 0b 00 00 [ 260.064279][T18018] RSP: 0018:ffffc90000edf140 EFLAGS: 00010287 [ 260.076269][T18018] RAX: ffffffff81c5d01c RBX: ffff8881266e6098 RCX: 0000000000080000 [ 260.084741][T18018] RDX: ffffc9000253f000 RSI: 00000000000031c9 RDI: 00000000000031ca [ 260.092764][T18018] RBP: ffffc90000edf248 R08: dffffc0000000000 R09: ffffed10215f700e [ 260.101162][T18018] R10: ffffed10215f700e R11: 1ffff110215f700d R12: 1ffff920001dbe38 [ 260.109390][T18018] R13: dffffc0000000000 R14: ffffffff866333e0 R15: 1ffff11024cdcc13 [ 260.117523][T18018] FS: 00007fb0c7e356c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 260.126500][T18018] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.133293][T18018] CR2: 00007ffc1a093d98 CR3: 000000011d39d000 CR4: 00000000003506b0 [ 260.140300][T18033] netlink: 'syz.0.8330': attribute type 9 has an invalid length. [ 260.141705][T18018] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 260.157303][T18018] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 260.165510][T18018] Call Trace: [ 260.168887][T18018] ? rt_mutex_setprio+0xb40/0xb40 [ 260.174212][T18018] ? sysfs_create_group+0x30/0x30 [ 260.179336][T18018] ? __kasan_check_write+0x14/0x20 [ 260.184614][T18018] sysfs_create_group+0x1f/0x30 [ 260.189470][T18018] loop_configure+0xc2f/0x1260 [ 260.194428][T18018] lo_ioctl+0x76d/0x1a80 [ 260.198739][T18018] ? lo_release+0x1f0/0x1f0 [ 260.203385][T18018] ? 0xffffffffa002c000 [ 260.207545][T18018] ? is_bpf_text_address+0x177/0x190 [ 260.212999][T18018] ? __kernel_text_address+0xa0/0x100 [ 260.218584][T18018] ? unwind_get_return_address+0x4d/0x90 [ 260.224486][T18018] ? stack_trace_save+0xe0/0xe0 [ 260.229464][T18018] ? arch_stack_walk+0xee/0x140 [ 260.234555][T18018] ? __kasan_check_write+0x14/0x20 [ 260.239848][T18018] ? kobject_get_unless_zero+0x15e/0x1e0 [ 260.245705][T18018] ? __kobject_del+0x2f0/0x2f0 [ 260.250486][T18018] ? __kasan_check_write+0x14/0x20 [ 260.255460][T18048] xt_socket: unknown flags 0x40 [ 260.255991][T18018] ? mutex_lock+0x8c/0xe0 [ 260.264887][T18018] ? mutex_trylock+0xa0/0xa0 [ 260.269762][T18018] ? bdev_check_media_change+0x350/0x350 [ 260.275472][T18018] ? __kasan_check_write+0x14/0x20 [ 260.280769][T18018] ? bdev_check_media_change+0x350/0x350 [ 260.286585][T18018] ? __kasan_check_write+0x14/0x20 [ 260.292032][T18018] ? _raw_spin_lock+0x8e/0xe0 [ 260.296942][T18018] ? _raw_spin_trylock_bh+0x130/0x130 [ 260.302642][T18018] ? __kasan_check_write+0x14/0x20 [ 260.307812][T18018] ? __kasan_check_write+0x14/0x20 [ 260.313108][T18018] ? __kasan_check_write+0x14/0x20 [ 260.318431][T18018] ? disk_unblock_events+0x51/0x60 [ 260.323839][T18018] ? 0xffffffffa002c000 [ 260.328011][T18018] ? is_bpf_text_address+0x177/0x190 [ 260.333652][T18018] ? __kernel_text_address+0xa0/0x100 [ 260.339079][T18018] ? unwind_get_return_address+0x4d/0x90 [ 260.344890][T18018] ? stack_trace_save+0xe0/0xe0 [ 260.350070][T18018] ? arch_stack_walk+0xee/0x140 [ 260.353529][T18062] xt_CT: No such helper "snmp_trap" [ 260.355250][T18018] ? memcpy+0x56/0x70 [ 260.364276][T18018] ? avc_has_extended_perms+0x7f0/0xc30 [ 260.369831][T18018] ? avc_ss_reset+0x280/0x280 [ 260.374811][T18018] ? kasan_set_track+0x5b/0x70 [ 260.379702][T18018] ? __kasan_slab_free+0x11/0x20 [ 260.384843][T18018] ? slab_free_freelist_hook+0xc5/0x190 [ 260.391009][T18018] ? kmem_cache_free+0x100/0x2d0 [ 260.396107][T18018] ? putname+0xfe/0x150 [ 260.400457][T18018] ? do_sys_openat2+0x207/0x6d0 [ 260.405611][T18018] ? blkdev_common_ioctl+0xf90/0x1a80 [ 260.410995][T18018] ? blkdev_bszset+0x1e0/0x1e0 [ 260.416034][T18018] ? do_vfs_ioctl+0x766/0x1510 [ 260.420893][T18018] ? __ia32_compat_sys_ioctl+0x7b0/0x7b0 [ 260.426847][T18018] ? has_cap_mac_admin+0x330/0x330 [ 260.432054][T18018] ? __kasan_slab_free+0x11/0x20 [ 260.437310][T18018] ? slab_free_freelist_hook+0xc5/0x190 [ 260.442943][T18018] ? putname+0xfe/0x150 [ 260.447115][T18018] ? kmem_cache_free+0x100/0x2d0 [ 260.452284][T18018] ? selinux_file_ioctl+0x377/0x480 [ 260.457484][T18018] ? lo_release+0x1f0/0x1f0 [ 260.462019][T18018] blkdev_ioctl+0x2d2/0x5b0 [ 260.466535][T18018] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 260.472045][T18018] ? __fget_files+0x2c4/0x320 [ 260.476725][T18018] block_ioctl+0xae/0x100 [ 260.481068][T18018] ? blkdev_iopoll+0x100/0x100 [ 260.486231][T18018] __se_sys_ioctl+0x121/0x1a0 [ 260.491051][T18018] __x64_sys_ioctl+0x7b/0x90 [ 260.495718][T18018] do_syscall_64+0x31/0x40 [ 260.500134][T18018] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 260.506045][T18018] RIP: 0033:0x7fb0c97cc52b [ 260.510452][T18018] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 260.530093][T18018] RSP: 002b:00007fb0c7e34dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.538534][T18018] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb0c97cc52b [ 260.546604][T18018] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004 [ 260.554633][T18018] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c0 [ 260.562600][T18018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 260.570612][T18018] R13: 00007fb0c7e34ef0 R14: 00007fb0c7e34eb0 R15: 00007fb0bfa15000 [ 260.578598][T18018] ---[ end trace ac7ee376d5f4ab0e ]--- [ 260.859432][T18122] __nla_validate_parse: 6 callbacks suppressed [ 260.859442][T18122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8371'. [ 260.885638][ T15] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 260.995919][T18150] ------------[ cut here ]------------ [ 261.001771][T18150] WARNING: CPU: 1 PID: 18150 at fs/sysfs/group.c:116 internal_create_group+0xe4/0xcf0 [ 261.011945][T18150] Modules linked in: [ 261.016024][T18150] CPU: 1 PID: 18150 Comm: syz.3.8383 Tainted: G W 5.10.238-syzkaller-00282-gd76d4cd0623a #0 [ 261.027507][T18150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.037659][T18150] RIP: 0010:internal_create_group+0xe4/0xcf0 [ 261.043660][T18150] Code: 00 74 08 48 89 df e8 6b c0 d7 ff 48 8b 03 83 7c 24 1c 00 74 22 48 85 c0 0f 84 ef 0b 00 00 e8 f3 cf 9d ff eb 20 e8 ec cf 9d ff <0f> 0b 41 be ea ff ff ff e9 40 0b 00 00 48 85 c0 0f 84 dd 0b 00 00 [ 261.063295][T18150] RSP: 0018:ffffc9000108f140 EFLAGS: 00010283 [ 261.069403][T18150] RAX: ffffffff81c5d01c RBX: ffff8881266e6098 RCX: 0000000000080000 [ 261.077368][T18150] RDX: ffffc9000253f000 RSI: 00000000000057fd RDI: 00000000000057fe [ 261.085357][T18150] RBP: ffffc9000108f248 R08: dffffc0000000000 R09: ffffed10215f700e [ 261.093376][T18150] R10: ffffed10215f700e R11: 1ffff110215f700d R12: 1ffff92000211e38 [ 261.101363][T18150] R13: dffffc0000000000 R14: ffffffff866333e0 R15: 1ffff11024cdcc13 [ 261.109354][T18150] FS: 00007fb0c7e356c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 261.118294][T18150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.124896][T18150] CR2: 00007fb0bfa54000 CR3: 000000010d836000 CR4: 00000000003506a0 [ 261.132877][T18150] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.140846][T18150] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.148821][T18150] Call Trace: [ 261.152114][T18150] ? rt_mutex_setprio+0xb40/0xb40 [ 261.157142][T18150] ? sysfs_create_group+0x30/0x30 [ 261.162161][T18150] ? __kasan_check_write+0x14/0x20 [ 261.167279][T18150] sysfs_create_group+0x1f/0x30 [ 261.172127][T18150] loop_configure+0xc2f/0x1260 [ 261.176903][T18150] lo_ioctl+0x76d/0x1a80 [ 261.181144][T18150] ? lo_release+0x1f0/0x1f0 [ 261.185699][T18150] ? 0xffffffffa002c000 [ 261.189853][T18150] ? is_bpf_text_address+0x177/0x190 [ 261.195123][T18150] ? __kernel_text_address+0xa0/0x100 [ 261.200502][T18150] ? unwind_get_return_address+0x4d/0x90 [ 261.206149][T18150] ? stack_trace_save+0xe0/0xe0 [ 261.210979][T18150] ? arch_stack_walk+0xee/0x140 [ 261.215809][T18150] ? __kasan_check_write+0x14/0x20 [ 261.220940][T18150] ? kobject_get_unless_zero+0x15e/0x1e0 [ 261.226573][T18150] ? __kobject_del+0x2f0/0x2f0 [ 261.231340][T18150] ? __kasan_check_write+0x14/0x20 [ 261.236447][T18150] ? mutex_lock+0x8c/0xe0 [ 261.240780][T18150] ? mutex_trylock+0xa0/0xa0 [ 261.245377][T18150] ? bdev_check_media_change+0x350/0x350 [ 261.251036][T18150] ? __kasan_check_write+0x14/0x20 [ 261.256140][T18150] ? bdev_check_media_change+0x350/0x350 [ 261.261778][T18150] ? __kasan_check_write+0x14/0x20 [ 261.266889][T18150] ? _raw_spin_lock+0x8e/0xe0 [ 261.271580][T18150] ? _raw_spin_trylock_bh+0x130/0x130 [ 261.276948][T18150] ? __kasan_check_write+0x14/0x20 [ 261.280910][ T15] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 261.282066][T18150] ? __kasan_check_write+0x14/0x20 [ 261.290963][ T15] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.295834][T18150] ? __kasan_check_write+0x14/0x20 [ 261.295845][T18150] ? disk_unblock_events+0x51/0x60 [ 261.295861][T18150] ? 0xffffffffa002c000 [ 261.306545][ T15] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 261.311029][T18150] ? is_bpf_text_address+0x177/0x190 [ 261.311051][T18150] ? __kernel_text_address+0xa0/0x100 [ 261.316316][ T15] usb 2-1: config 1 has no interface number 1 [ 261.320306][T18150] ? unwind_get_return_address+0x4d/0x90 [ 261.320317][T18150] ? stack_trace_save+0xe0/0xe0 [ 261.320332][T18150] ? arch_stack_walk+0xee/0x140 [ 261.329892][ T15] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 261.335133][T18150] ? memcpy+0x56/0x70 [ 261.378302][T18150] ? avc_has_extended_perms+0x7f0/0xc30 [ 261.383890][T18150] ? avc_ss_reset+0x280/0x280 [ 261.388621][T18150] ? kasan_set_track+0x5b/0x70 [ 261.393403][T18150] ? __kasan_slab_free+0x11/0x20 [ 261.398630][T18150] ? slab_free_freelist_hook+0xc5/0x190 [ 261.404188][T18150] ? kmem_cache_free+0x100/0x2d0 [ 261.409180][T18150] ? putname+0xfe/0x150 [ 261.413355][T18150] ? do_sys_openat2+0x207/0x6d0 [ 261.418244][T18150] ? blkdev_common_ioctl+0xf90/0x1a80 [ 261.423653][T18150] ? blkdev_bszset+0x1e0/0x1e0 [ 261.428445][T18150] ? do_vfs_ioctl+0x766/0x1510 [ 261.433256][T18150] ? __ia32_compat_sys_ioctl+0x7b0/0x7b0 [ 261.438907][T18150] ? has_cap_mac_admin+0x330/0x330 [ 261.444056][T18150] ? __kasan_slab_free+0x11/0x20 [ 261.448993][T18150] ? slab_free_freelist_hook+0xc5/0x190 [ 261.454569][T18150] ? putname+0xfe/0x150 [ 261.458735][T18150] ? kmem_cache_free+0x100/0x2d0 [ 261.463708][T18150] ? selinux_file_ioctl+0x377/0x480 [ 261.468911][T18150] ? lo_release+0x1f0/0x1f0 [ 261.473469][T18150] blkdev_ioctl+0x2d2/0x5b0 [ 261.477993][T18150] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 261.483483][T18150] ? __fget_files+0x2c4/0x320 [ 261.486877][ T24] audit: type=1400 audit(2000000050.950:1060): avc: denied { listen } for pid=18170 comm="syz.0.8397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 261.488659][T18150] block_ioctl+0xae/0x100 [ 261.512424][T18150] ? blkdev_iopoll+0x100/0x100 [ 261.517235][T18150] __se_sys_ioctl+0x121/0x1a0 [ 261.521924][T18150] __x64_sys_ioctl+0x7b/0x90 [ 261.526521][T18150] do_syscall_64+0x31/0x40 [ 261.531006][T18150] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 261.536914][T18150] RIP: 0033:0x7fb0c97cc52b [ 261.541417][ T15] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.541533][T18150] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 261.551706][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.571841][T18150] RSP: 002b:00007fb0c7e34dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.578978][ T15] usb 2-1: Product: syz [ 261.591237][ T15] usb 2-1: Manufacturer: syz [ 261.591396][T18150] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb0c97cc52b [ 261.595961][ T15] usb 2-1: SerialNumber: syz [ 261.604764][T18150] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004 [ 261.617042][T18150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000442 [ 261.625312][T18150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 261.633391][T18150] R13: 00007fb0c7e34ef0 R14: 00007fb0c7e34eb0 R15: 00007fb0bfa15000 [ 261.641468][T18150] ---[ end trace ac7ee376d5f4ab0f ]--- [ 261.664060][T18187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8403'. [ 261.704825][T18150] EXT4-fs (loop1048579): Ignoring removed mblk_io_submit option [ 261.714100][T18194] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8405'. [ 261.724440][T18150] EXT4-fs error (device loop1048579): ext4_free_branches:1026: inode #13: comm syz.3.8383: invalid indirect mapped block 234881024 (level 0) [ 261.742540][T18150] EXT4-fs (loop1048579): 1 truncate cleaned up [ 261.748822][T18150] EXT4-fs (loop1048579): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,noblock_validity,abort,mblk_io_submit,nogrpid,nodelalloc,delalloc,prjquota,,errors=continue [ 261.769302][T18150] EXT4-fs error (device loop1048579): ext4_resize_begin:61: comm syz.3.8383: resize_inode disabled but reserved GDT blocks non-zero [ 261.825395][T18209] bridge_slave_0: mtu greater than device maximum [ 261.862826][T18214] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.879522][T18214] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 261.882260][T18221] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8419'. [ 261.996879][ T15] usb 2-1: MIDIStreaming interface descriptor not found [ 262.013565][ T24] audit: type=1326 audit(2000000051.446:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18242 comm="syz.4.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacd75f929 code=0x7ffc0000 [ 262.048656][ T15] usb 2-1: USB disconnect, device number 82 [ 262.083377][T18254] netlink: 'syz.4.8436': attribute type 2 has an invalid length. [ 262.091208][ T24] audit: type=1326 audit(2000000051.474:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18242 comm="syz.4.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdacd75f929 code=0x7ffc0000 [ 262.141532][ T24] audit: type=1326 audit(2000000051.474:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18242 comm="syz.4.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacd75f929 code=0x7ffc0000 [ 262.231218][T18281] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 262.331854][ T2566] udevd[2566]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 262.662315][T18385] xt_hashlimit: max too large, truncated to 1048576 [ 262.789966][T18418] netlink: 'syz.0.8518': attribute type 32 has an invalid length. [ 262.821225][T18422] overlayfs: unrecognized mount option "\" or missing value [ 262.840916][ T15] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 262.851440][ T2564] blk_update_request: I/O error, dev loop5, sector 70368744210304 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 262.866583][ T2564] blk_update_request: I/O error, dev loop5, sector 70368744210304 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.883502][ T2564] Buffer I/O error on dev loop5p8, logical block 4080, async page read [ 262.980819][T18450] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8533'. [ 263.024283][T18452] EXT4-fs (loop1): Test dummy encryption mode enabled [ 263.031203][T18452] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 263.046778][T18452] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,quota,sysvgroups,jqfmt=vfsv1,noload,,errors=continue [ 263.071878][T18452] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 263.167442][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8550'. [ 263.254452][T18506] device vlan0 entered promiscuous mode [ 263.268816][T18509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8561'. [ 263.300014][T18517] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 263.309460][T18517] SELinux: failed to load policy [ 263.332471][ T15] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 263.344107][T18528] netlink: 300 bytes leftover after parsing attributes in process `syz.0.8571'. [ 263.379326][T18535] C: renamed from bond_slave_0 [ 263.397949][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8575'. [ 263.610236][ T15] usb 4-1: string descriptor 0 read error: -22 [ 263.616485][ T15] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.637419][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.696109][ T15] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 263.706432][ T304] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 263.825629][T18595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8604'. [ 263.910891][ T15] usb 4-1: USB disconnect, device number 74 [ 263.962843][ T304] usb 1-1: Using ep0 maxpacket: 32 [ 264.091128][ T304] usb 1-1: config 2 has an invalid interface number: 1 but max is 0 [ 264.099196][ T304] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 264.109473][ T304] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 264.165784][ T537] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 264.283427][ T304] usb 1-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 264.292898][ T304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.301214][ T304] usb 1-1: Product: syz [ 264.305516][ T304] usb 1-1: Manufacturer: syz [ 264.310131][ T304] usb 1-1: SerialNumber: syz [ 264.358529][ T304] cdc_acm: probe of 1-1:2.1 failed with error -22 [ 264.365710][ T304] cdc_acm: probe of 1-1:2.0 failed with error -22 [ 264.561175][ T537] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.579605][ T537] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.581312][ T304] usb 1-1: USB disconnect, device number 77 [ 264.678842][ T537] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 264.696168][ T537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 264.699145][T18667] ------------[ cut here ]------------ [ 264.709956][T18667] WARNING: CPU: 0 PID: 18667 at fs/sysfs/group.c:116 internal_create_group+0xe4/0xcf0 [ 264.710895][ T537] usb 2-1: SerialNumber: syz [ 264.720204][T18667] Modules linked in: [ 264.728212][T18667] CPU: 0 PID: 18667 Comm: syz.3.8641 Tainted: G W 5.10.238-syzkaller-00282-gd76d4cd0623a #0 [ 264.740133][T18667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.750516][T18667] RIP: 0010:internal_create_group+0xe4/0xcf0 [ 264.756552][T18667] Code: 00 74 08 48 89 df e8 6b c0 d7 ff 48 8b 03 83 7c 24 1c 00 74 22 48 85 c0 0f 84 ef 0b 00 00 e8 f3 cf 9d ff eb 20 e8 ec cf 9d ff <0f> 0b 41 be ea ff ff ff e9 40 0b 00 00 48 85 c0 0f 84 dd 0b 00 00 [ 264.776280][T18667] RSP: 0018:ffffc90000d47140 EFLAGS: 00010287 [ 264.782370][T18667] RAX: ffffffff81c5d01c RBX: ffff8881266e6098 RCX: 0000000000080000 [ 264.790512][T18667] RDX: ffffc9000253f000 RSI: 00000000000032b6 RDI: 00000000000032b7 [ 264.798668][T18667] RBP: ffffc90000d47248 R08: dffffc0000000000 R09: ffffed10215f700e [ 264.806697][T18667] R10: ffffed10215f700e R11: 1ffff110215f700d R12: 1ffff920001a8e38 [ 264.814815][T18667] R13: dffffc0000000000 R14: ffffffff866333e0 R15: 1ffff11024cdcc13 [ 264.822899][T18667] FS: 00007fb0c7e356c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 264.832202][T18667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.839007][T18667] CR2: 00007fb0bfa34000 CR3: 000000010d13a000 CR4: 00000000003506b0 [ 264.846978][T18667] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 264.854984][T18667] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 264.862983][T18667] Call Trace: [ 264.866296][T18667] ? rt_mutex_setprio+0xb40/0xb40 [ 264.871344][T18667] ? sysfs_create_group+0x30/0x30 [ 264.876372][T18667] ? __kasan_check_write+0x14/0x20 [ 264.881467][T18667] sysfs_create_group+0x1f/0x30 [ 264.886404][T18667] loop_configure+0xc2f/0x1260 [ 264.891163][T18667] lo_ioctl+0x76d/0x1a80 [ 264.895425][T18667] ? lo_release+0x1f0/0x1f0 [ 264.899920][T18667] ? 0xffffffffa002c000 [ 264.904115][T18667] ? is_bpf_text_address+0x177/0x190 [ 264.909405][T18667] ? __kernel_text_address+0xa0/0x100 [ 264.914804][T18667] ? unwind_get_return_address+0x4d/0x90 [ 264.920436][T18667] ? stack_trace_save+0xe0/0xe0 [ 264.925327][T18667] ? arch_stack_walk+0xee/0x140 [ 264.930181][T18667] ? __kasan_check_write+0x14/0x20 [ 264.935316][T18667] ? kobject_get_unless_zero+0x15e/0x1e0 [ 264.940967][T18667] ? __kobject_del+0x2f0/0x2f0 [ 264.945724][T18667] ? __kasan_check_write+0x14/0x20 [ 264.950899][T18667] ? mutex_lock+0x8c/0xe0 [ 264.955228][T18667] ? mutex_trylock+0xa0/0xa0 [ 264.959837][T18667] ? bdev_check_media_change+0x350/0x350 [ 264.965481][T18667] ? __kasan_check_write+0x14/0x20 [ 264.970652][T18667] ? bdev_check_media_change+0x350/0x350 [ 264.976287][T18667] ? __kasan_check_write+0x14/0x20 [ 264.981427][T18667] ? _raw_spin_lock+0x8e/0xe0 [ 264.986580][T18667] ? _raw_spin_trylock_bh+0x130/0x130 [ 264.991994][T18667] ? __kasan_check_write+0x14/0x20 [ 264.997102][T18667] ? __kasan_check_write+0x14/0x20 [ 265.002219][T18667] ? __kasan_check_write+0x14/0x20 [ 265.007331][T18667] ? disk_unblock_events+0x51/0x60 [ 265.012646][T18667] ? 0xffffffffa002c000 [ 265.016805][T18667] ? is_bpf_text_address+0x177/0x190 [ 265.022123][T18667] ? __kernel_text_address+0xa0/0x100 [ 265.027506][T18667] ? unwind_get_return_address+0x4d/0x90 [ 265.032088][ T537] usb 2-1: 0:2 : does not exist [ 265.033187][T18667] ? stack_trace_save+0xe0/0xe0 [ 265.042863][T18667] ? arch_stack_walk+0xee/0x140 [ 265.047741][T18667] ? memcpy+0x56/0x70 [ 265.049809][ T537] usb 2-1: USB disconnect, device number 83 [ 265.051735][T18667] ? avc_has_extended_perms+0x7f0/0xc30 [ 265.063223][T18667] ? avc_ss_reset+0x280/0x280 [ 265.067951][T18667] ? kasan_set_track+0x5b/0x70 [ 265.072722][T18667] ? __kasan_slab_free+0x11/0x20 [ 265.077731][T18667] ? slab_free_freelist_hook+0xc5/0x190 [ 265.083350][T18667] ? kmem_cache_free+0x100/0x2d0 [ 265.088327][T18667] ? putname+0xfe/0x150 [ 265.092479][T18667] ? do_sys_openat2+0x207/0x6d0 [ 265.097408][T18667] ? blkdev_common_ioctl+0xf90/0x1a80 [ 265.102770][T18667] ? blkdev_bszset+0x1e0/0x1e0 [ 265.107540][T18667] ? do_vfs_ioctl+0x766/0x1510 [ 265.112302][T18667] ? __ia32_compat_sys_ioctl+0x7b0/0x7b0 [ 265.117998][T18667] ? has_cap_mac_admin+0x330/0x330 [ 265.123109][T18667] ? __kasan_slab_free+0x11/0x20 [ 265.128082][T18667] ? slab_free_freelist_hook+0xc5/0x190 [ 265.133641][T18667] ? putname+0xfe/0x150 [ 265.138377][T18667] ? kmem_cache_free+0x100/0x2d0 [ 265.143375][T18667] ? selinux_file_ioctl+0x377/0x480 [ 265.148613][T18667] ? lo_release+0x1f0/0x1f0 [ 265.153155][T18667] blkdev_ioctl+0x2d2/0x5b0 [ 265.157678][T18667] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 265.163208][T18667] ? __fget_files+0x2c4/0x320 [ 265.167887][T18667] block_ioctl+0xae/0x100 [ 265.172233][T18667] ? blkdev_iopoll+0x100/0x100 [ 265.176983][T18667] __se_sys_ioctl+0x121/0x1a0 [ 265.181725][T18667] __x64_sys_ioctl+0x7b/0x90 [ 265.186311][T18667] do_syscall_64+0x31/0x40 [ 265.190717][T18667] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 265.196626][T18667] RIP: 0033:0x7fb0c97cc52b [ 265.201029][T18667] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 265.220869][T18667] RSP: 002b:00007fb0c7e34dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.229302][T18667] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb0c97cc52b [ 265.237351][T18667] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004 [ 265.245354][T18667] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000034e [ 265.253317][T18667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 265.261313][T18667] R13: 00007fb0c7e34ef0 R14: 00007fb0c7e34eb0 R15: 00007fb0bfa15000 [ 265.269290][T18667] ---[ end trace ac7ee376d5f4ab10 ]--- [ 265.328502][T18676] xt_bpf: check failed: parse error [ 265.344637][T18680] mip6: mip6_rthdr_init_state: spi is not 0: 512 [ 265.356073][T18667] FAT-fs (loop1048579): Directory bread(block 64) failed [ 265.363349][T18667] FAT-fs (loop1048579): Directory bread(block 65) failed [ 265.377589][T18667] FAT-fs (loop1048579): Directory bread(block 66) failed [ 265.391290][T18667] FAT-fs (loop1048579): Directory bread(block 67) failed [ 265.398611][T18667] FAT-fs (loop1048579): Directory bread(block 68) failed [ 265.405883][T18667] FAT-fs (loop1048579): Directory bread(block 69) failed [ 265.415143][T18667] FAT-fs (loop1048579): Directory bread(block 70) failed [ 265.416084][ T24] kauditd_printk_skb: 596 callbacks suppressed [ 265.416100][ T24] audit: type=1400 audit(2000000054.637:1660): avc: denied { ioctl } for pid=18687 comm="syz.0.8650" path="socket:[71860]" dev="sockfs" ino=71860 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 265.422249][T18667] FAT-fs (loop1048579): Directory bread(block 71) failed [ 265.461044][T18667] FAT-fs (loop1048579): Directory bread(block 72) failed [ 265.475501][T18667] FAT-fs (loop1048579): Directory bread(block 73) failed [ 265.518445][T18702] tc_dump_action: action bad kind [ 265.747833][T18754] netlink: 'syz.3.8683': attribute type 13 has an invalid length. [ 265.777439][T18754] gretap0: refused to change device tx_queue_len [ 265.788458][T18754] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 265.915133][ T24] audit: type=1326 audit(2000000055.096:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18798 comm="syz.2.8705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fa8f7929 code=0x7ffc0000 [ 265.966885][ T24] audit: type=1326 audit(2000000055.096:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18798 comm="syz.2.8705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f78fa8f7929 code=0x7ffc0000 [ 265.991790][ T24] audit: type=1326 audit(2000000055.096:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18798 comm="syz.2.8705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fa8f7929 code=0x7ffc0000 [ 266.015400][ T24] audit: type=1400 audit(2000000055.143:1664): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 266.060340][T18802] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 266.092688][T18835] binfmt_misc: register: failed to install interpreter file ./file0 [ 266.145228][T18848] usb usb2: usbfs: process 18848 (syz.0.8731) did not claim interface 0 before use [ 266.329336][ T24] audit: type=1400 audit(2000000055.489:1665): avc: denied { getopt } for pid=18895 comm="syz.2.8750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 266.346396][T18898] __nla_validate_parse: 10 callbacks suppressed [ 266.346408][T18898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8753'. [ 266.430360][T18915] netlink: 'syz.1.8761': attribute type 3 has an invalid length. [ 266.641886][ T24] audit: type=1400 audit(2000000055.779:1666): avc: denied { getopt } for pid=18969 comm="syz.3.8788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 266.710740][T18982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8793'. [ 266.730689][T18986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8796'. [ 266.746413][ T24] audit: type=1400 audit(2000000055.873:1667): avc: denied { mount } for pid=18987 comm="syz.3.8797" name="/" dev="ramfs" ino=73240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 266.866488][T19018] device veth1_virt_wifi left promiscuous mode [ 266.874949][T19021] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8812'. [ 266.972736][ T24] audit: type=1400 audit(2000000056.088:1668): avc: denied { bind } for pid=19042 comm="syz.4.8825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.985538][T19048] netlink: 'syz.2.8824': attribute type 32 has an invalid length. [ 267.090335][T19072] binder: 19068:19072 ioctl c0306201 200000000540 returned -14 [ 267.147504][T19079] erofs: (device loop4): mounted with root inode @ nid 36. [ 267.307572][T19126] x_tables: ip_tables: hashlimit.1 match: invalid size 56 (kernel) != (user) 616 [ 267.442491][T19163] xt_hashlimit: size too large, truncated to 1048576 [ 267.455883][T19163] xt_hashlimit: max too large, truncated to 1048576 [ 267.463700][T19165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8884'. [ 267.479024][T19167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 267.530413][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8893'. [ 267.638401][ T537] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 267.702532][ T15] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 267.905516][ T537] usb 1-1: Using ep0 maxpacket: 16 [ 268.044496][ T537] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 268.064015][ T537] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 268.085599][ T537] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 268.096322][ T537] usb 1-1: config 1 has no interface number 1 [ 268.097997][ T15] usb 3-1: config 9 has an invalid interface number: 81 but max is 0 [ 268.118176][ T537] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 268.119224][ T15] usb 3-1: config 9 has no interface number 0 [ 268.140933][ T537] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 268.147930][ T15] usb 3-1: config 9 interface 81 has no altsetting 0 [ 268.161955][ T537] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 268.332998][ T15] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4 [ 268.347925][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.360120][ T15] usb 3-1: Product: syz [ 268.364300][ T15] usb 3-1: Manufacturer: syz [ 268.365067][ T537] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.369177][ T15] usb 3-1: SerialNumber: syz [ 268.386332][ T537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.405219][ T537] usb 1-1: Product: syz [ 268.415968][ T537] usb 1-1: Manufacturer: syz [ 268.420720][ T537] usb 1-1: SerialNumber: syz [ 268.478829][T19255] IPv6: NLM_F_REPLACE set, but no existing node found! [ 268.590012][ T24] audit: type=1400 audit(2000000057.604:1669): avc: denied { write } for pid=19280 comm="syz.1.8942" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 268.650463][T19293] tipc: Enabling of bearer rejected, failed to enable media [ 268.704995][T19309] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 268.749995][ T15] usbserial_generic 3-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 268.760494][ T537] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 268.769176][ T15] usbserial_generic 3-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 268.774110][ T537] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 268.789899][ T537] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 268.791114][ T15] usbserial_generic 3-1:9.81: device has no bulk endpoints [ 268.817251][ T537] usb 1-1: USB disconnect, device number 78 [ 268.834588][ T15] usb 3-1: USB disconnect, device number 75 [ 268.965710][T19364] netlink: 'syz.1.8983': attribute type 3 has an invalid length. [ 268.993842][T19372] binder: BC_ATTEMPT_ACQUIRE not supported [ 268.999977][T19372] binder: 19370:19372 ioctl c0306201 200000000580 returned -22 [ 269.326670][ T463] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 269.335031][T19439] netlink: 'syz.2.9020': attribute type 5 has an invalid length. [ 269.388954][T19446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.520113][T19467] option changes via remount are deprecated (pid=19466 comm=syz.3.9035) [ 269.537320][T19467] cgroup: option or name mismatch, new: 0x0 "subj_user", old: 0x0 "" [ 269.583094][ T463] usb 2-1: Using ep0 maxpacket: 16 [ 269.722007][ T463] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.733121][ T463] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.925030][ T3940] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 269.935735][ T463] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.944854][ T463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.953200][ T463] usb 2-1: Product: syz [ 269.957505][ T463] usb 2-1: Manufacturer: syz [ 269.962206][ T463] usb 2-1: SerialNumber: syz [ 270.299009][ T3940] usb 1-1: not running at top speed; connect to a high speed hub [ 270.395099][ T508] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 270.395161][ T3940] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 270.410818][ T3940] usb 1-1: config 95 has no interface number 0 [ 270.417021][ T3940] usb 1-1: config 95 interface 1 has no altsetting 0 [ 270.491287][ T463] usb 2-1: 0:2 : does not exist [ 270.499249][ T463] usb 2-1: USB disconnect, device number 84 [ 270.665693][T19584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9091'. [ 270.683656][ T3940] usb 1-1: string descriptor 0 read error: -22 [ 270.689950][ T3940] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 270.700848][ T3940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.801178][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.812617][ T508] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 270.821627][ T508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.830276][ T508] usb 4-1: config 0 descriptor?? [ 271.198056][ T3940] usb 1-1: USB disconnect, device number 79 [ 271.274750][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 271.274764][ T24] audit: type=1400 audit(2000000060.115:1680): avc: denied { connect } for pid=19665 comm="syz.1.9130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.312390][ T24] audit: type=1400 audit(2000000060.143:1681): avc: denied { write } for pid=19670 comm="syz.1.9132" name="file0" dev="tmpfs" ino=8492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 271.335901][ T24] audit: type=1400 audit(2000000060.143:1682): avc: denied { open } for pid=19670 comm="syz.1.9132" path="/1667/file0" dev="tmpfs" ino=8492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 271.336375][ T508] petalynx 0003:18B1:0037.0002: unknown main item tag 0x5 [ 271.359414][ T24] audit: type=1400 audit(2000000060.143:1683): avc: denied { ioctl } for pid=19670 comm="syz.1.9132" path="/1667/file0" dev="tmpfs" ino=8492 ioctlcmd=0x4c07 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 271.372738][ T508] petalynx 0003:18B1:0037.0002: unknown global tag 0xd [ 271.394553][T19675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9134'. [ 271.406211][ T508] petalynx 0003:18B1:0037.0002: item 0 2 1 13 parsing failed [ 271.406409][ T508] petalynx 0003:18B1:0037.0002: parse failed [ 271.420204][ T508] petalynx: probe of 0003:18B1:0037.0002 failed with error -22 [ 271.562356][ T3940] usb 4-1: USB disconnect, device number 75 [ 271.582819][ T24] audit: type=1400 audit(2000000060.395:1684): avc: denied { write } for pid=19705 comm="syz.1.9149" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 271.656337][T19721] tmpfs: Unknown parameter 'usrqu' [ 271.782393][ T24] audit: type=1326 audit(2000000060.583:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.0.9169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c086929 code=0x7ffc0000 [ 271.814190][ T24] audit: type=1326 audit(2000000060.583:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.0.9169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f891c086929 code=0x7ffc0000 [ 271.837787][ T24] audit: type=1326 audit(2000000060.583:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.0.9169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c086929 code=0x7ffc0000 [ 271.865982][ T24] audit: type=1326 audit(2000000060.583:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.0.9169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f891c086929 code=0x7ffc0000 [ 271.911280][ T24] audit: type=1326 audit(2000000060.583:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.0.9169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c086929 code=0x7ffc0000 [ 271.967783][T19767] usb usb8: usbfs: process 19767 (syz.2.9178) did not claim interface 0 before use [ 272.133890][T19781] futex_wake_op: syz.1.9184 tries to shift op by 32; fix this program [ 272.424970][T19815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9200'. [ 272.603118][T19833] syz.1.9209[19833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.603182][T19833] syz.1.9209[19833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.324377][T19871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9226'. [ 273.364167][T19875] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9228'. [ 273.384145][T19875] netlink: 'syz.0.9228': attribute type 6 has an invalid length. [ 273.405859][T19875] netlink: 'syz.0.9228': attribute type 5 has an invalid length. [ 273.423045][T19875] netlink: 'syz.0.9228': attribute type 4 has an invalid length. [ 273.615965][T19913] netlink: 'syz.3.9247': attribute type 2 has an invalid length. [ 273.933522][T19931] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9255'. [ 273.977388][ T3940] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 274.178281][T19942] tipc: MTU too low for tipc bearer [ 274.241674][ T3940] usb 4-1: Using ep0 maxpacket: 16 [ 274.253793][ T537] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 274.391361][ T3940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.423670][ T3940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.433982][ T3940] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 274.443033][ T3940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.452510][ T3940] usb 4-1: config 0 descriptor?? [ 274.639030][ T537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.659246][ T537] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 274.679121][ T537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.696567][ T537] usb 2-1: config 0 descriptor?? [ 274.958821][ T3940] hid-generic 0003:1E71:170E.0003: collection stack underflow [ 274.977070][ T3940] hid-generic 0003:1E71:170E.0003: item 0 2 0 12 parsing failed [ 274.989449][ T3940] hid-generic: probe of 0003:1E71:170E.0003 failed with error -22 [ 275.177592][ T3940] usb 4-1: USB disconnect, device number 76 [ 275.206533][T20024] tipc: Started in network mode [ 275.211526][T20024] tipc: Own node identity , cluster identity 4711 [ 275.218216][T20024] tipc: Failed to set node id, please configure manually [ 275.225775][T20024] tipc: Enabling of bearer rejected, failed to enable media [ 275.236248][ T537] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 275.256086][ T537] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 275.267198][ T537] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 275.277765][ T537] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 275.299372][ T537] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 275.306560][ T537] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 275.313571][ T537] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 275.320435][ T537] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 275.327556][ T537] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 275.334557][ T537] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 275.341447][ T537] ortek 0003:1223:3F07.0004: unknown main item tag 0x0 [ 275.351232][ T537] ortek 0003:1223:3F07.0004: hidraw0: USB HID v0.00 Device [HID 1223:3f07] on usb-dummy_hcd.1-1/input0 [ 275.456445][ T537] usb 2-1: USB disconnect, device number 85 [ 275.781774][T20041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9308'. [ 276.839293][T20077] netlink: 'syz.1.9325': attribute type 30 has an invalid length. [ 276.867921][T20081] tipc: Started in network mode [ 276.882249][T20081] tipc: Own node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 276.894993][T20081] tipc: Enabling of bearer rejected, failed to enable media [ 277.144531][T20107] tipc: Started in network mode [ 277.158709][T20107] tipc: Own node identity , cluster identity 4711 [ 277.168223][T20107] tipc: Failed to obtain node identity [ 277.190743][T20107] tipc: Enabling of bearer rejected, failed to enable media [ 277.391136][T20125] netlink: 124 bytes leftover after parsing attributes in process `syz.1.9348'. [ 277.588316][T20147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9359'. [ 277.607971][T20147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9359'. [ 277.798860][T20170] syz.0.9370[20170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.798930][T20170] syz.0.9370[20170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.826171][T20173] tipc: Enabling of bearer rejected, media not registered [ 277.901011][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9375'. [ 277.917643][ T3940] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 278.114302][T20212] tipc: Started in network mode [ 278.119226][T20212] tipc: Own node identity , cluster identity 4711 [ 278.125855][T20212] tipc: Failed to set node id, please configure manually [ 278.133046][T20212] tipc: Enabling of bearer rejected, failed to enable media [ 278.326476][ T3940] usb 4-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config [ 278.336919][ T3940] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.430376][ T3940] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 278.439451][ T3940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 278.447540][ T3940] usb 4-1: SerialNumber: syz [ 278.518579][T20257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9411'. [ 278.643848][ T537] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 278.751218][ T3940] usb 4-1: 0:2 : does not exist [ 278.756878][ T3940] usb 4-1: USB disconnect, device number 77 [ 278.921653][ T537] usb 3-1: Using ep0 maxpacket: 8 [ 279.049899][ T537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.059689][ T537] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 279.068740][ T537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.077255][ T537] usb 3-1: config 0 descriptor?? [ 279.277655][ T24] kauditd_printk_skb: 14471 callbacks suppressed [ 279.277668][ T24] audit: type=1326 audit(2000000296.610:16161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20251 comm="syz.1.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1149428929 code=0x7fc00000 [ 279.562756][ T3940] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 279.594802][ T283] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 279.596138][ T537] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 279.610050][ T537] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 279.617695][ T537] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 279.625363][ T537] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 279.633011][ T537] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 279.641163][ T537] hid-multitouch 0003:0EEF:72C4.0005: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 279.819220][ T3940] usb 4-1: Using ep0 maxpacket: 16 [ 279.825362][ T537] usb 3-1: USB disconnect, device number 76 [ 279.947447][ T3940] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 279.958325][ T3940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.968034][ T3940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 279.981045][ T283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 279.992003][ T3940] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 280.001032][ T283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.010737][ T283] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 280.019771][ T3940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.028061][ T283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.036316][ T3940] usb 4-1: config 0 descriptor?? [ 280.041861][ T283] usb 2-1: config 0 descriptor?? [ 280.400359][ T24] audit: type=1400 audit(2000000297.658:16162): avc: denied { name_bind } for pid=20287 comm="syz.2.9426" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 280.495446][T20302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9433'. [ 280.546567][ T283] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 280.555487][ T3940] elo 0003:04E7:0009.0007: hidraw1: USB HID v10.00 Device [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 280.566772][ T283] isku 0003:1E7D:319C.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 280.629583][T20316] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9439'. [ 280.763188][ T283] usb 2-1: USB disconnect, device number 86 [ 280.773747][ T3940] usb 4-1: USB disconnect, device number 78 [ 280.930400][ T537] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 281.178603][T20332] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9447'. [ 281.197640][ T537] usb 3-1: Using ep0 maxpacket: 8 [ 281.257039][ T24] audit: type=1326 audit(2000000298.454:16163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20337 comm="syz.0.9450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c086929 code=0x7ffc0000 [ 281.280705][ T24] audit: type=1326 audit(2000000298.454:16164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20337 comm="syz.0.9450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c086929 code=0x7ffc0000 [ 281.312048][ T24] audit: type=1326 audit(2000000298.454:16165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20337 comm="syz.0.9450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f891c086929 code=0x7ffc0000 [ 281.338073][ T24] audit: type=1326 audit(2000000298.454:16166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20337 comm="syz.0.9450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c086929 code=0x7ffc0000 [ 281.362533][ T24] audit: type=1326 audit(2000000298.454:16167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20337 comm="syz.0.9450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c086929 code=0x7ffc0000 [ 281.386467][ T537] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.411023][ T24] audit: type=1326 audit(2000000298.454:16168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20337 comm="syz.0.9450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f891c086929 code=0x7ffc0000 [ 281.419738][T20353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9457'. [ 281.443749][ T537] usb 3-1: config 0 interface 0 has no altsetting 0 [ 281.450367][ T537] usb 3-1: New USB device found, idVendor=2087, idProduct=0a01, bcdDevice= 0.00 [ 281.459666][ T537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.472081][ T537] usb 3-1: config 0 descriptor?? [ 281.477522][ T24] audit: type=1326 audit(2000000298.454:16169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20337 comm="syz.0.9450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c086929 code=0x7ffc0000 [ 281.513070][ T24] audit: type=1326 audit(2000000298.454:16170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20337 comm="syz.0.9450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891c086929 code=0x7ffc0000 [ 281.839377][T20390] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 281.851373][T20390] EXT4-fs (loop4): 1 truncate cleaned up [ 281.857034][T20390] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 281.884928][T20390] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #16: comm syz.4.9473: invalid indirect mapped block 3489660928 (level 0) [ 281.899171][T20390] EXT4-fs (loop4): Remounting filesystem read-only [ 281.906147][T20390] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #16: comm syz.4.9473: invalid indirect mapped block 6 (level 1) [ 281.956210][ T283] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 282.004601][ T537] hid-generic 0003:2087:0A01.0008: hidraw0: USB HID v0.07 Device [HID 2087:0a01] on usb-dummy_hcd.2-1/input0 [ 282.006680][T20410] syz.1.9483[20410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.016393][T20410] syz.1.9483[20410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.176519][T20440] netlink: 'syz.1.9497': attribute type 4 has an invalid length. [ 282.217699][ T537] usb 3-1: USB disconnect, device number 77 [ 282.234079][ T283] usb 4-1: Using ep0 maxpacket: 32 [ 282.362242][ T283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.373495][ T283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.383233][ T283] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 282.392491][ T283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.400979][ T283] usb 4-1: config 0 descriptor?? [ 282.448406][ T283] hub 4-1:0.0: USB hub found [ 282.682801][ T283] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 282.971210][ T537] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 283.003293][ T283] usbhid 4-1:0.0: can't add hid device: -71 [ 283.009283][ T283] usbhid: probe of 4-1:0.0 failed with error -71 [ 283.046266][ T283] usb 4-1: USB disconnect, device number 79 [ 283.409327][ T537] usb 2-1: unable to get BOS descriptor or descriptor too short [ 283.462766][ T537] usb 2-1: not running at top speed; connect to a high speed hub [ 283.559008][ T537] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 283.567996][ T537] usb 2-1: config 1 has no interface number 1 [ 283.574263][ T537] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 283.587187][ T537] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 283.767338][ T537] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.778079][ T537] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.788368][ T537] usb 2-1: Product: syz [ 283.792715][ T537] usb 2-1: Manufacturer: syz [ 283.803344][ T537] usb 2-1: SerialNumber: syz [ 283.845841][T20527] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9537'. [ 283.854952][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9537'. [ 284.199967][ T20] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 284.210747][ T537] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 284.255971][ T537] usb 2-1: USB disconnect, device number 87 [ 284.265100][ T2566] udevd[2566]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 284.456420][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 284.584687][ T20] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 284.592708][ T20] usb 4-1: config 0 has no interface number 0 [ 284.598847][ T20] usb 4-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.609740][ T20] usb 4-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.619473][ T20] usb 4-1: config 0 interface 8 has no altsetting 0 [ 284.626103][ T20] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 284.635152][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.646886][ T20] usb 4-1: config 0 descriptor?? [ 284.960988][ T283] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 285.051939][T20604] overlayfs: failed to resolve './file0': -2 [ 285.151170][ T20] hid (null): global environment stack underflow [ 285.159148][ T20] uclogic 0003:5543:0522.0009: global environment stack underflow [ 285.167160][ T20] uclogic 0003:5543:0522.0009: item 0 0 1 11 parsing failed [ 285.174799][ T20] uclogic 0003:5543:0522.0009: parse failed [ 285.180738][ T20] uclogic: probe of 0003:5543:0522.0009 failed with error -22 [ 285.343314][ T283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 285.354502][ T283] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 285.372261][ T20] usb 4-1: USB disconnect, device number 80 [ 285.375867][ T283] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 285.387492][ T283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.389425][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 285.389440][ T24] audit: type=1400 audit(2000000302.319:16175): avc: denied { write } for pid=20629 comm="syz.4.9586" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 285.396399][ T283] usb 2-1: config 0 descriptor?? [ 285.451595][T20556] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 285.942453][ T283] apple 0003:05AC:0264.000A: unbalanced delimiter at end of report description [ 285.957185][ T283] apple 0003:05AC:0264.000A: parse failed [ 285.969699][ T283] apple: probe of 0003:05AC:0264.000A failed with error -22 [ 286.031168][T20656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9598'. [ 286.078996][ T24] audit: type=1400 audit(2000000302.965:16176): avc: denied { mount } for pid=20657 comm="syz.3.9599" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 286.110562][ T24] audit: type=1400 audit(2000000302.993:16177): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 286.137463][T20660] SELinux: syz.3.9600 (20660) set checkreqprot to 1. This is deprecated and will be rejected in a future kernel release. [ 286.179151][ T283] usb 2-1: USB disconnect, device number 88 [ 286.772890][T20700] x_tables: ip_tables: udp match: only valid for protocol 17 [ 287.733600][T20863] IPv6: sit1: Disabled Multicast RS [ 288.260257][ T508] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 288.290047][ T24] audit: type=1400 audit(2000000305.033:16178): avc: denied { execute } for pid=20895 comm="syz.0.9712" name="file0" dev="tmpfs" ino=11358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 288.607308][ T24] audit: type=1326 audit(2000000305.333:16179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20858 comm="syz.1.9695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1149428929 code=0x7fc00000 [ 288.666308][ T508] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.676224][ T508] usb 3-1: config 0 interface 0 has no altsetting 0 [ 288.683284][ T508] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 288.692478][ T508] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.703980][ T508] usb 3-1: config 0 descriptor?? [ 289.061685][ T283] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 289.233928][ T508] hid-generic 0003:05AC:027A.000B: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 289.446316][ T283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.456129][ T283] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 289.459080][ T508] usb 3-1: USB disconnect, device number 78 [ 289.465957][ T283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.479547][ T283] usb 4-1: config 0 descriptor?? [ 289.653451][ T24] audit: type=1400 audit(2000000000.842:16180): avc: denied { connect } for pid=20951 comm="syz.1.9739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 289.736865][T20970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9748'. [ 289.817837][ T24] audit: type=1400 audit(2000000000.992:16181): avc: denied { name_bind } for pid=20985 comm="syz.1.9757" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 289.842690][ T24] audit: type=1326 audit(2000000001.029:16182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20990 comm="syz.1.9758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1149428929 code=0x0 [ 289.899391][ T24] audit: type=1400 audit(2000000001.076:16183): avc: denied { remount } for pid=21002 comm="syz.4.9764" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 289.968817][ T24] audit: type=1326 audit(2000000001.132:16184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.4.9769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacd75f929 code=0x7ffc0000 [ 290.007128][ T283] kye 0003:0458:0087.000C: item fetching failed at offset 5/7 [ 290.017063][ T283] kye 0003:0458:0087.000C: parse failed [ 290.022683][ T283] kye: probe of 0003:0458:0087.000C failed with error -22 [ 290.139376][T21036] netlink: 592 bytes leftover after parsing attributes in process `syz.4.9781'. [ 290.238970][T19564] usb 4-1: USB disconnect, device number 81 [ 290.286454][T21060] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 290.356586][T21062] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x5dc98cac, utbl_chksum : 0xe619d30d) [ 290.368873][T21062] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x07ffffff) [ 290.382308][T21062] exFAT-fs (loop4): failed to initialize root inode [ 290.512227][T21069] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 290.526541][T21069] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 290.540970][T21069] EXT4-fs (loop4): 1 truncate cleaned up [ 290.546670][T21069] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,grpquota,,errors=continue [ 290.931467][ T296] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 291.187909][ T296] usb 3-1: Using ep0 maxpacket: 16 [ 291.209273][ T508] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 291.316174][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.328568][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.338740][ T296] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 291.348314][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.361678][ T296] usb 3-1: config 0 descriptor?? [ 291.615358][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.636675][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.646417][ T508] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.659502][ T508] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.668544][ T508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.681120][ T508] usb 4-1: config 0 descriptor?? [ 291.731870][T21131] usb usb8: usbfs: process 21131 (syz.0.9825) did not claim interface 0 before use [ 291.794378][T21149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9834'. [ 291.804911][T21151] syz.0.9835[21151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.804957][T21151] syz.0.9835[21151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.827837][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 291.827853][ T24] audit: type=1400 audit(2000000002.873:16189): avc: denied { execute_no_trans } for pid=21154 comm="syz.1.9837" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.883919][ T296] hid-generic 0003:1E71:170E.000D: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.2-1/input0 [ 291.911562][T21162] netlink: 'syz.1.9840': attribute type 9 has an invalid length. [ 292.008373][ T24] audit: type=1400 audit(2000000003.041:16190): avc: denied { set_context_mgr } for pid=21177 comm="syz.1.9848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 292.099816][ T296] usb 3-1: USB disconnect, device number 79 [ 292.113221][T21201] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9859'. [ 292.143141][T21209] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9863'. [ 292.193455][ T508] plantronics 0003:047F:FFFF.000E: invalid report_size -2013878915 [ 292.203714][T21227] netlink: 'syz.0.9872': attribute type 4 has an invalid length. [ 292.211483][ T508] plantronics 0003:047F:FFFF.000E: item 0 4 1 7 parsing failed [ 292.227182][ T508] plantronics 0003:047F:FFFF.000E: parse failed [ 292.233669][ T508] plantronics: probe of 0003:047F:FFFF.000E failed with error -22 [ 292.407647][ T508] usb 4-1: USB disconnect, device number 82 [ 292.472602][T21267] device macsec0 entered promiscuous mode [ 292.479310][T21267] device macsec0 left promiscuous mode [ 293.089844][ T24] audit: type=1400 audit(2000000004.052:16191): avc: denied { mount } for pid=21310 comm="syz.3.9913" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 293.117550][ T24] audit: type=1400 audit(2000000004.080:16192): avc: denied { remount } for pid=21310 comm="syz.3.9913" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 293.137838][ T537] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 293.148758][ T24] audit: type=1400 audit(2000000004.080:16193): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 293.394264][ T24] audit: type=1400 audit(2000000004.342:16194): avc: denied { create } for pid=21322 comm="syz.3.9919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 293.422313][ T537] usb 3-1: Using ep0 maxpacket: 8 [ 293.559994][ T537] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.570891][ T537] usb 3-1: config 0 interface 0 has no altsetting 0 [ 293.577493][ T537] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 293.586730][ T537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.595498][ T537] usb 3-1: config 0 descriptor?? [ 293.646941][T21340] xt_hashlimit: size too large, truncated to 1048576 [ 293.877207][T21358] syz.3.9935[21358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.877243][T21358] syz.3.9935[21358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.937983][ T24] audit: type=1400 audit(2000000004.857:16195): avc: denied { setopt } for pid=21369 comm="syz.3.9941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 293.974004][ T24] audit: type=1326 audit(2000000004.885:16196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21371 comm="syz.3.9942" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0c97cc929 code=0x0 [ 294.095341][ T537] wacom 0003:056A:0084.000F: unknown main item tag 0x0 [ 294.102264][ T537] wacom 0003:056A:0084.000F: unknown main item tag 0x0 [ 294.109146][ T537] wacom 0003:056A:0084.000F: unknown main item tag 0x0 [ 294.116057][ T537] wacom 0003:056A:0084.000F: unknown main item tag 0x0 [ 294.122901][ T537] wacom 0003:056A:0084.000F: unknown main item tag 0x0 [ 294.129763][ T537] wacom 0003:056A:0084.000F: unknown main item tag 0x0 [ 294.136642][ T537] wacom 0003:056A:0084.000F: unknown main item tag 0x0 [ 294.144244][ T537] wacom 0003:056A:0084.000F: hidraw0: USB HID v0.06 Device [HID 056a:0084] on usb-dummy_hcd.2-1/input0 [ 294.313221][ T537] usb 3-1: USB disconnect, device number 80 [ 294.603814][T21391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9951'. [ 294.964297][T21414] ÿ: renamed from bond_slave_0 [ 295.033685][T21419] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9964'. [ 295.226791][ T537] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 295.493904][ T537] usb 3-1: Using ep0 maxpacket: 8 [ 295.600846][T19564] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 295.611006][T21449] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 295.611006][T21449] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 295.611006][T21449] [ 295.628880][ T537] usb 3-1: config 0 interface 0 has no altsetting 0 [ 295.635789][ T537] usb 3-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 295.641913][T21449] EXT4-fs (loop4): mounted filesystem without journal. Opts: noacl,,errors=continue [ 295.646037][ T537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.675111][ T537] usb 3-1: config 0 descriptor?? [ 295.749308][T21465] syz.4.9985[21465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.749362][T21465] syz.4.9985[21465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.766733][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9987'. [ 295.867964][T19564] usb 4-1: Using ep0 maxpacket: 16 [ 295.912062][T21475] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 295.912170][ T24] audit: type=1326 audit(2000000006.701:16197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.1.9993" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1149428929 code=0x0 [ 295.921025][T21475] ext4 filesystem being mounted at /1851/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.006852][T19564] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.014920][T19564] usb 4-1: config 0 has no interface number 0 [ 296.021217][T19564] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.032458][T19564] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.042768][T19564] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 296.046654][T21489] xt_hashlimit: size too large, truncated to 1048576 [ 296.052147][T19564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.080246][T19564] usb 4-1: config 0 descriptor?? [ 296.190014][ T537] wacom 0003:056A:00CC.0010: hidraw0: USB HID v1.00 Device [HID 056a:00cc] on usb-dummy_hcd.2-1/input0 [ 296.366677][ T24] audit: type=1400 audit(2000000007.122:16198): avc: denied { mount } for pid=21506 comm="syz.4.10003" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 296.408221][ T296] usb 3-1: USB disconnect, device number 81 [ 296.492207][T21523] overlayfs: failed to resolve '/åR8Ncœ0sjÂF$K–˜z”nÏÀ„x~Ò½íïø—é': -2 [ 296.528196][T21529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10014'. [ 296.547339][T21531] tipc: Started in network mode [ 296.552299][T21531] tipc: Own node identity feed1d00000000000000000000000013, cluster identity 4711 [ 296.561530][T21531] tipc: Enabling of bearer rejected, failed to enable media [ 296.829576][T19564] uclogic 0003:28BD:0071.0011: failed retrieving string descriptor #100: -71 [ 296.838585][T19564] uclogic 0003:28BD:0071.0011: failed retrieving pen parameters: -71 [ 296.846825][T19564] uclogic 0003:28BD:0071.0011: pen probing failed: -71 [ 296.853828][T19564] uclogic 0003:28BD:0071.0011: failed probing parameters: -71 [ 296.861322][T19564] uclogic: probe of 0003:28BD:0071.0011 failed with error -71 [ 296.870761][T19564] usb 4-1: USB disconnect, device number 83 [ 296.975249][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10024'. [ 297.160343][T21569] syz_tun: refused to change device tx_queue_len [ 297.166843][T21569] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 297.201131][ T24] audit: type=1326 audit(2000000007.908:16199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz.2.10035" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78fa8f7929 code=0x0 [ 297.244260][T21577] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 297.251863][T21577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.323586][T21582] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 297.339781][ T24] audit: type=1400 audit(2000000008.039:16200): avc: denied { write } for pid=21581 comm="syz.4.10039" path="/1882/file0/file1" dev="loop4" ino=1048642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 297.374666][ T24] audit: type=1400 audit(2000000008.076:16201): avc: denied { read } for pid=21586 comm="syz.3.10041" name="file0" dev="tmpfs" ino=9751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 297.606506][ T24] audit: type=1326 audit(2000000008.282:16202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21619 comm="syz.3.10057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0c97cc929 code=0x0 [ 298.122406][ T20] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 298.528480][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.545216][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.557006][ T20] usb 2-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 298.566328][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.585538][ T20] usb 2-1: config 0 descriptor?? [ 298.646851][T21673] tipc: Enabling of bearer rejected, failed to enable media [ 298.955862][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 298.961963][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 298.975539][ T20] usb 2-1: USB disconnect, device number 89 [ 299.116218][T19564] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 299.145665][T21713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10103'. [ 299.372556][T19564] usb 4-1: Using ep0 maxpacket: 16 [ 299.500837][T19564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.511785][T19564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.521514][T19564] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 299.534515][T19564] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 299.546923][T19564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.558193][T19564] usb 4-1: config 0 descriptor?? [ 299.632089][T21771] tipc: Started in network mode [ 299.636984][T21771] tipc: Own node identity e0000002, cluster identity 5 [ 299.644112][T21771] tipc: Enabling of bearer rejected, failed to enable media [ 300.067934][T19564] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 300.075632][T19564] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 300.083070][T19564] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 300.090325][T19564] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 300.097697][T19564] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 300.104942][T19564] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 300.112229][T19564] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 300.119414][T19564] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 300.126635][T19564] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 300.133852][T19564] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 300.141037][T19564] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 300.150701][T19564] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0012/input/input40 [ 300.163021][T19564] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 300.236194][T21798] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 300.284612][T19564] usb 4-1: USB disconnect, device number 84 [ 300.428215][ T24] audit: type=1326 audit(2000000010.921:16203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21825 comm="syz.2.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fa8f7929 code=0x7ffc0000 [ 300.452213][ T24] audit: type=1326 audit(2000000010.921:16204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21825 comm="syz.2.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fa8f7929 code=0x7ffc0000 [ 300.485967][ T24] audit: type=1326 audit(2000000010.921:16205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21825 comm="syz.2.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f78fa8f7929 code=0x7ffc0000 [ 300.510094][ T24] audit: type=1326 audit(2000000010.921:16206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21825 comm="syz.2.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fa8f7929 code=0x7ffc0000 [ 300.533967][ T24] audit: type=1326 audit(2000000010.921:16207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21825 comm="syz.2.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fa8f7929 code=0x7ffc0000 [ 300.643687][T21842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10165'. [ 300.793653][ T283] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 300.840956][T21871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10180'. [ 300.940981][ T24] audit: type=1400 audit(2000000011.408:16208): avc: denied { setattr } for pid=21884 comm="syz.3.10186" name="/" dev="incremental-fs" ino=9957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.983497][T21863] F2FS-fs (loop4): Found nat_bits in checkpoint [ 300.985000][T21893] tipc: Started in network mode [ 300.994766][T21893] tipc: Own node identity 40000000000000000000000000000001, cluster identity 4711 [ 301.004276][T21893] tipc: Enabling of bearer rejected, failed to enable media [ 301.029202][T21863] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 301.058199][ T279] attempt to access beyond end of device [ 301.058199][ T279] loop4: rw=2049, want=45104, limit=40427 [ 301.059368][T21900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10191'. [ 301.210505][ T283] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.220467][ T283] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt [ 301.230610][ T283] usb 3-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.243621][ T283] usb 3-1: config 1 interface 0 has no altsetting 0 [ 301.371904][T21928] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 301.383420][T21928] EXT4-fs (loop4): 1 truncate cleaned up [ 301.389086][T21928] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,lazytime,journal_path=./bus,bsdgroups,lazytime,grpquota,,errors=continue [ 301.509650][ T283] usb 3-1: string descriptor 0 read error: -22 [ 301.520252][ T283] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.529437][ T283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.552375][T21828] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 301.588712][ T283] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 301.802717][ T283] usb 3-1: USB disconnect, device number 82 [ 301.867134][T21950] tipc: Enabling of bearer rejected, failed to enable media [ 302.084684][T21956] fuse: Unexpected value for 'default_permissions' [ 302.172058][ T20] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 302.385794][ T508] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 302.567383][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 302.578472][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 302.584268][T21974] erofs: (device loop4): mounted with root inode @ nid 36. [ 302.591365][ T20] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 302.607518][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.616050][ T20] usb 2-1: config 0 descriptor?? [ 302.638637][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 302.638651][ T24] audit: type=1400 audit(2000000012.999:16213): avc: denied { read } for pid=21973 comm="syz.4.10227" name="file1" dev="loop4" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 302.642145][ T283] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 302.644788][T21952] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 302.681820][ T508] usb 4-1: Using ep0 maxpacket: 16 [ 302.716080][T21988] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10233'. [ 302.791152][T21997] EXT4-fs (loop4): orphan cleanup on readonly fs [ 302.801308][T21997] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10229: bg 0: block 248: padding at end of block bitmap is not set [ 302.816148][T21997] Quota error (device loop4): write_blk: dquota write failed [ 302.823608][T21997] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 302.834209][T21997] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.10229: Failed to acquire dquot type 1 [ 302.846354][T21997] EXT4-fs (loop4): 1 truncate cleaned up [ 302.852151][T21997] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 302.855881][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.898545][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.926779][ T508] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 302.941311][ T508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.961179][ T508] usb 4-1: config 0 descriptor?? [ 303.005040][ T24] audit: type=1326 audit(2000000013.336:16214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22006 comm="syz.4.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacd75f929 code=0x7ffc0000 [ 303.033214][ T24] audit: type=1326 audit(2000000013.336:16215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22006 comm="syz.4.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdacd75f929 code=0x7ffc0000 [ 303.059492][ T24] audit: type=1326 audit(2000000013.336:16216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22006 comm="syz.4.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacd75f929 code=0x7ffc0000 [ 303.083460][ T283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 303.099874][ T283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.125616][ T24] audit: type=1326 audit(2000000013.336:16217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22006 comm="syz.4.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fdacd75f929 code=0x7ffc0000 [ 303.166581][ T20] monterey 0003:0566:3004.0013: unknown main item tag 0x6 [ 303.174337][ T24] audit: type=1326 audit(2000000013.336:16218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22006 comm="syz.4.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacd75f929 code=0x7ffc0000 [ 303.198502][ T20] monterey 0003:0566:3004.0013: hidraw0: USB HID vff.fa Device [HID 0566:3004] on usb-dummy_hcd.1-1/input0 [ 303.208519][ T283] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 303.235699][ T283] usb 3-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 303.255332][ T283] usb 3-1: Manufacturer: syz [ 303.271514][ T283] usb 3-1: config 0 descriptor?? [ 303.298097][T22025] futex_wake_op: syz.0.10249 tries to shift op by -1; fix this program [ 303.315895][ T283] hub 3-1:0.0: USB hub found [ 303.389355][ T20] usb 2-1: USB disconnect, device number 90 [ 303.508526][ T508] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 303.539681][ T283] hub 3-1:0.0: 1 port detected [ 303.582484][ T508] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf3 found [ 303.590296][ T508] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf4 found [ 303.748324][ T20] usb 4-1: USB disconnect, device number 85 [ 303.763439][T22039] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 303.939712][T22051] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 303.977845][T22051] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 303.985794][T22051] System zones: 1-12 [ 303.994023][ T24] audit: type=1326 audit(2000000014.263:16219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22062 comm="syz.1.10266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1149428929 code=0x7ffc0000 [ 304.004287][ T283] usb 3-1: USB disconnect, device number 83 [ 304.025658][ T24] audit: type=1326 audit(2000000014.300:16220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22062 comm="syz.1.10266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1149428929 code=0x7ffc0000 [ 304.026422][T22051] EXT4-fs (loop4): orphan cleanup on readonly fs [ 304.066707][T22051] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.10261: invalid indirect mapped block 12 (level 1) [ 304.089423][T22051] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.10261: invalid indirect mapped block 2 (level 2) [ 304.119049][T22051] EXT4-fs (loop4): 1 truncate cleaned up [ 304.130476][T22051] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue [ 304.275879][T22090] xt_hashlimit: size too large, truncated to 1048576 [ 304.292418][T22096] netlink: 312 bytes leftover after parsing attributes in process `syz.0.10282'. [ 304.317830][T22102] syz.1.10285[22102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.317888][T22102] syz.1.10285[22102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.492484][T22126] fuse: Invalid rootmode [ 304.622860][T22136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10301'. [ 304.682969][ T283] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 304.800540][T22147] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 304.821652][T22147] SELinux: failed to load policy [ 304.835722][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.846908][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.854648][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.862572][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.870561][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.878730][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.886487][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.894029][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.901642][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.910154][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.918290][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.925727][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.933267][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.943980][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.951501][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.958933][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.966495][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.973986][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.981365][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 304.983196][T22157] erofs: (device loop4): mounted with root inode @ nid 36. [ 304.988987][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.003462][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.010836][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.028653][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.036408][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.043793][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.051325][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.058807][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.067072][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.067651][ T283] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.085545][ T283] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.085589][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.096414][ T283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 305.109423][ T283] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 305.110335][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.118493][ T283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.134502][ T283] usb 4-1: config 0 descriptor?? [ 305.142253][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.149881][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.157394][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.163546][T22170] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 305.164951][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.182277][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.189985][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.197405][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.204777][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.212195][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.219581][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.226931][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.234307][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.241690][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.249045][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.256427][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.263804][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.271186][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.278556][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.285953][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.293367][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.300732][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.308129][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.315510][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.322863][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.330243][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.337633][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.344992][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.352414][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.359803][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.367195][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.374559][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.381930][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.389427][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.396805][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.404181][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.411579][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.418931][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.426312][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.433691][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.441056][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.448449][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.455832][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.463223][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.470601][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.478005][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.485392][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.492741][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.500137][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.507523][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.514873][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.522256][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.529652][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.537004][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.544392][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.551778][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.559152][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.566517][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.573890][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.581272][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.588627][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.596006][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.603397][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.610751][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.618135][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.625520][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.632871][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.635329][ T283] cypress 0003:04B4:07B1.0016: unknown main item tag 0x0 [ 305.640267][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.647643][ T283] cypress 0003:04B4:07B1.0016: unknown main item tag 0x0 [ 305.654646][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.661916][ T283] cypress 0003:04B4:07B1.0016: unknown main item tag 0x0 [ 305.669216][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.676164][ T283] cypress 0003:04B4:07B1.0016: unknown main item tag 0x0 [ 305.683615][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.698014][ T283] cypress 0003:04B4:07B1.0016: unknown main item tag 0x0 [ 305.698033][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.712623][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.713278][ T283] cypress 0003:04B4:07B1.0016: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0 [ 305.720175][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.738574][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.745954][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.753333][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.760686][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.768079][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.775606][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.782989][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.790394][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.797798][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.805210][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.812577][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.819957][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.827371][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.834727][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.842139][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.849524][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.856875][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.864266][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.871649][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.879038][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.886435][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.893837][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.900405][ T283] usb 4-1: USB disconnect, device number 86 [ 305.901230][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.914493][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.921853][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.929224][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.936604][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.944008][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.951376][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.958771][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.966151][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.973521][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.980902][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.988287][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 305.995652][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.003040][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.010425][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.017800][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.025193][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.032581][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.039959][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.047347][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.054846][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.062244][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.069601][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.076979][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.084382][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.091731][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.099101][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.106480][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.113827][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.121197][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.128585][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.135943][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.143319][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.150697][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.158080][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.165454][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.172831][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.180213][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.187591][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.194971][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.202374][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.209727][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.217102][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.224472][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.231828][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.239212][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.246588][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.253965][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.261334][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.268749][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.276142][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.283511][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.290891][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.298274][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.305626][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.312999][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.320378][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.327748][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.335135][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.342521][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.349894][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.357259][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.364632][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.372014][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.379363][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.386731][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.394106][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.401454][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.408848][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.416232][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.423582][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.430952][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.438337][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.445702][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.453103][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.460855][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.468385][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.475766][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.483321][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.490824][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.498220][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.505776][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.513289][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.520671][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.528080][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.535481][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.542896][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.550266][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.557642][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.565022][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.572374][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.579839][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.587235][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.594602][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.602009][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.609396][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.616756][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.624153][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.631564][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.638956][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.646321][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.653728][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.661139][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.668497][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.675881][ T20] hid-generic 0BB3:0FFF:00EC.0015: unknown main item tag 0x0 [ 306.684468][ T20] hid-generic 0BB3:0FFF:00EC.0015: hidraw0: HID v5d.ce Device [syz0] on syz1 [ 306.764734][T22190] fido_id[22190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 306.798611][ T283] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 306.860578][T22202] fido_id[22202]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 306.874935][T22210] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 306.891615][T22214] netlink: 'syz.0.10338': attribute type 10 has an invalid length. [ 306.956412][T22232] overlayfs: './file1' not a directory [ 306.994800][T22241] input: syz1 as /devices/virtual/input/input41 [ 307.068707][T22255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10358'. [ 307.125225][T22237] F2FS-fs (loop4): invalid crc value [ 307.140144][T22237] F2FS-fs (loop4): Found nat_bits in checkpoint [ 307.175668][T22237] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 307.182454][T22237] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 307.198897][ T283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.210231][ T283] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 307.219540][ T283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.236253][ T283] usb 4-1: config 0 descriptor?? [ 307.255117][T22275] tipc: Enabling not permitted [ 307.260848][T22275] tipc: Enabling of bearer rejected, failed to enable media [ 307.504803][T22302] binder: 22301:22302 ioctl c0306201 2000000003c0 returned -22 [ 307.696096][T22309] netlink: 'syz.0.10381': attribute type 16 has an invalid length. [ 307.704061][T22309] netlink: 'syz.0.10381': attribute type 3 has an invalid length. [ 307.712275][T22309] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.10381'. [ 307.722521][ T283] sony 0003:054C:024B.0017: unknown main item tag 0x2 [ 307.734864][ T283] sony 0003:054C:024B.0017: hiddev96,hidraw0: USB HID v0.c0 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 307.755373][ T283] sony 0003:054C:024B.0017: failed to claim input [ 307.940391][ T528] usb 4-1: USB disconnect, device number 87 [ 308.112785][ T283] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 308.518874][ T283] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.533240][ T283] usb 3-1: config 0 interface 0 has no altsetting 0 [ 308.546755][ T283] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 308.556555][ T283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.574732][ T283] usb 3-1: config 0 descriptor?? [ 308.633058][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 308.633066][ T24] audit: type=1401 audit(2000000018.605:16234): op=setxattr invalid_context="" [ 308.722166][ T24] audit: type=1326 audit(2000000018.699:16235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22402 comm="syz.1.10427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1149428929 code=0x0 [ 308.884889][T22405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10428'. [ 308.946204][ T528] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 309.085764][ T283] sunplus 0003:04FC:05D8.0018: unknown main item tag 0x0 [ 309.092811][ T283] sunplus 0003:04FC:05D8.0018: unknown main item tag 0x0 [ 309.100340][ T283] sunplus 0003:04FC:05D8.0018: unknown main item tag 0x0 [ 309.107405][ T283] sunplus 0003:04FC:05D8.0018: unknown main item tag 0x0 [ 309.114422][ T283] sunplus 0003:04FC:05D8.0018: unknown main item tag 0x0 [ 309.121582][ T283] sunplus 0003:04FC:05D8.0018: unknown main item tag 0x0 [ 309.129743][ T283] sunplus 0003:04FC:05D8.0018: hidraw0: USB HID v0.05 Device [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0 [ 309.303525][ T463] usb 3-1: USB disconnect, device number 84 [ 309.362986][ T528] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 309.371047][ T528] usb 4-1: config 0 has no interface number 0 [ 309.377413][ T528] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 309.388372][ T528] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.398118][ T528] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 309.407144][ T528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.415567][ T528] usb 4-1: config 0 descriptor?? [ 309.912663][T22443] netlink: 'syz.2.10447': attribute type 12 has an invalid length. [ 309.933546][ T528] uclogic 0003:256C:006D.0019: unknown main item tag 0x0 [ 309.942520][ T528] uclogic 0003:256C:006D.0019: unknown main item tag 0x0 [ 309.949589][ T528] uclogic 0003:256C:006D.0019: unknown main item tag 0x0 [ 309.957155][ T528] uclogic 0003:256C:006D.0019: unknown main item tag 0x0 [ 309.964459][ T528] uclogic 0003:256C:006D.0019: unknown main item tag 0x0 [ 309.971665][ T528] uclogic 0003:256C:006D.0019: No inputs registered, leaving [ 309.979542][ T528] uclogic 0003:256C:006D.0019: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input8 [ 310.155207][ T528] usb 4-1: USB disconnect, device number 88 [ 310.399363][ T283] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 310.634431][ T463] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 310.784070][ T283] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.794945][ T283] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 310.890858][ T463] usb 3-1: Using ep0 maxpacket: 16 [ 310.891002][ T283] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.905689][ T283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 310.913712][ T283] usb 2-1: SerialNumber: syz [ 310.959728][T22524] syz.3.10484[22524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.959765][T22524] syz.3.10484[22524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.966189][ T283] usb 2-1: bad CDC descriptors [ 311.040481][ T463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.051388][ T463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.061101][ T463] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 311.074372][ T463] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 311.083547][ T463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.092151][ T463] usb 3-1: config 0 descriptor?? [ 311.106881][T22528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10486'. [ 311.189235][ T283] usb 2-1: USB disconnect, device number 91 [ 311.403733][ T537] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 311.607679][ T463] microsoft 0003:045E:07DA.001A: unknown main item tag 0x7 [ 311.615028][ T463] microsoft 0003:045E:07DA.001A: unknown main item tag 0x2 [ 311.622339][ T463] microsoft 0003:045E:07DA.001A: unknown main item tag 0xe [ 311.629708][ T463] microsoft 0003:045E:07DA.001A: item 0 2 0 9 parsing failed [ 311.637329][ T463] microsoft 0003:045E:07DA.001A: parse failed [ 311.643567][ T463] microsoft: probe of 0003:045E:07DA.001A failed with error -22 [ 311.799138][ T537] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.807142][ T537] usb 4-1: config 0 has no interface number 0 [ 311.813303][ T537] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.825496][ T537] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.835257][ T537] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 311.844296][ T537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.852818][ T537] usb 4-1: config 0 descriptor?? [ 311.857924][ T20] usb 3-1: USB disconnect, device number 85 [ 312.044838][ T463] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 312.301267][ T463] usb 2-1: Using ep0 maxpacket: 32 [ 312.366191][ T537] prodikeys 0003:041E:2801.001B: item fetching failed at offset 0/7 [ 312.374373][ T537] prodikeys 0003:041E:2801.001B: hid parse failed [ 312.386188][ T537] prodikeys: probe of 0003:041E:2801.001B failed with error -22 [ 312.416315][T22564] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10504'. [ 312.429609][ T463] usb 2-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.445694][ T463] usb 2-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.459675][T22568] cgroup: Unexpected value for 'cpuset_v2_mode' [ 312.461047][ T463] usb 2-1: config 0 interface 0 has no altsetting 0 [ 312.472583][ T463] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 312.477640][T22570] syz.2.10507[22570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.481734][T22570] syz.2.10507[22570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.482915][ T463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.520366][ T463] usb 2-1: config 0 descriptor?? [ 312.582696][ T537] usb 4-1: USB disconnect, device number 89 [ 312.865760][ T24] audit: type=1326 audit(2000000022.564:16236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22623 comm="syz.2.10533" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78fa8f7929 code=0x0 [ 313.039248][ T463] petalynx 0003:18B1:0037.001C: unknown main item tag 0x0 [ 313.046427][ T463] petalynx 0003:18B1:0037.001C: unknown main item tag 0x0 [ 313.053591][ T463] petalynx 0003:18B1:0037.001C: unknown main item tag 0x0 [ 313.061325][ T463] petalynx 0003:18B1:0037.001C: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0 [ 313.275500][ T283] usb 2-1: USB disconnect, device number 92 [ 313.816350][T22667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10552'. [ 314.305571][T22706] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 314.326833][T22706] ext4 filesystem being mounted at /1984/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.599080][T22739] netlink: 'syz.2.10586': attribute type 1 has an invalid length. [ 314.781145][T22731] F2FS-fs (loop4): Invalid log sectorsize (131081) [ 314.790871][T22731] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 314.811149][T22731] F2FS-fs (loop4): invalid crc value [ 314.832165][T22731] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 314.889444][T22731] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 314.908969][T22731] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 314.916320][T22731] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 314.939756][T22762] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 314.975087][T22762] SELinux: failed to load policy [ 315.025812][T22768] netlink: 'syz.3.10599': attribute type 5 has an invalid length. [ 315.225255][ T24] audit: type=1400 audit(2000000024.773:16237): avc: denied { mount } for pid=22802 comm="syz.3.10615" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 315.282404][ T24] audit: type=1400 audit(2000000024.791:16238): avc: denied { remount } for pid=22802 comm="syz.3.10615" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 315.355206][ T24] audit: type=1400 audit(2000000024.801:16239): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 315.426798][T22837] device vlan2 entered promiscuous mode [ 315.426812][T22837] device bridge0 entered promiscuous mode [ 315.577435][T22858] syz.1.10641[22858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.577483][T22858] syz.1.10641[22858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.726140][ T24] audit: type=1400 audit(2000000025.241:16240): avc: denied { watch watch_reads } for pid=22885 comm="syz.1.10655" path="/2082" dev="tmpfs" ino=10602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 315.847302][ T24] audit: type=1326 audit(2000000025.353:16241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22904 comm="syz.2.10663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fa8f7929 code=0x7ffc0000 [ 315.847325][ T24] audit: type=1326 audit(2000000025.353:16242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22904 comm="syz.2.10663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fa8f7929 code=0x7ffc0000 [ 315.847601][ T24] audit: type=1326 audit(2000000025.353:16243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22904 comm="syz.2.10663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f78fa8f7929 code=0x7ffc0000 [ 315.847671][ T24] audit: type=1326 audit(2000000025.353:16244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22904 comm="syz.2.10663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fa8f7929 code=0x7ffc0000 [ 316.003780][T22919] tipc: Enabling of bearer rejected, failed to enable media [ 316.180490][T22939] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10678'. [ 316.180509][T22939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10678'. [ 316.296416][ T24] audit: type=1400 audit(2000000025.774:16245): avc: denied { map } for pid=22964 comm="syz.0.10692" path="socket:[87319]" dev="sockfs" ino=87319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 316.896987][ T24] audit: type=1326 audit(2000000026.345:16246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23059 comm="syz.1.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1149428929 code=0x7ffc0000 [ 317.203812][T23079] ================================================================== [ 317.211915][T23079] BUG: KASAN: use-after-free in exact_lock+0x38/0xc0 [ 317.218605][T23079] Read of size 8 at addr ffff88810966e460 by task syz.1.10746/23079 [ 317.226574][T23079] [ 317.228932][T23079] CPU: 0 PID: 23079 Comm: syz.1.10746 Tainted: G W 5.10.238-syzkaller-00282-gd76d4cd0623a #0 [ 317.240382][T23079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.250432][T23079] Call Trace: [ 317.253724][T23079] __dump_stack+0x21/0x24 [ 317.258057][T23079] dump_stack_lvl+0x169/0x1d8 [ 317.262744][T23079] ? show_regs_print_info+0x18/0x18 [ 317.267946][T23079] ? thaw_kernel_threads+0x220/0x220 [ 317.273236][T23079] print_address_description+0x7f/0x2c0 [ 317.278787][T23079] ? exact_lock+0x38/0xc0 [ 317.283119][T23079] kasan_report+0xe2/0x130 [ 317.287535][T23079] ? exact_lock+0x38/0xc0 [ 317.291865][T23079] __asan_report_load8_noabort+0x14/0x20 [ 317.297499][T23079] exact_lock+0x38/0xc0 [ 317.301665][T23079] ? bdev_check_media_change+0x350/0x350 [ 317.307298][T23079] kobj_lookup+0x298/0x430 [ 317.311728][T23079] get_gendisk+0xe9/0x340 [ 317.316067][T23079] ? _raw_spin_lock+0x8e/0xe0 [ 317.320744][T23079] __blkdev_get+0x1b0/0x12f0 [ 317.325347][T23079] ? _raw_spin_unlock+0x4d/0x70 [ 317.330205][T23079] ? blkdev_bio_end_io+0x450/0x450 [ 317.335323][T23079] ? selinux_file_receive+0x130/0x130 [ 317.340704][T23079] ? selinux_inode_permission+0x3fc/0x5e0 [ 317.346438][T23079] blkdev_open+0x208/0x430 [ 317.350865][T23079] ? block_ioctl+0x100/0x100 [ 317.355461][T23079] do_dentry_open+0x793/0x1090 [ 317.360232][T23079] vfs_open+0x73/0x80 [ 317.364218][T23079] path_openat+0x27ad/0x3160 [ 317.368815][T23079] ? getname+0x19/0x20 [ 317.372893][T23079] ? do_filp_open+0x3e0/0x3e0 [ 317.377579][T23079] do_filp_open+0x1b3/0x3e0 [ 317.382085][T23079] ? vfs_tmpfile+0x2c0/0x2c0 [ 317.386700][T23079] ? get_unused_fd_flags+0x92/0xa0 [ 317.391827][T23079] do_sys_openat2+0x14c/0x6d0 [ 317.396516][T23079] ? __se_sys_futex+0x2b4/0x360 [ 317.401376][T23079] ? do_sys_open+0xe0/0xe0 [ 317.405802][T23079] ? __kasan_check_write+0x14/0x20 [ 317.410914][T23079] ? switch_fpu_return+0x197/0x340 [ 317.416022][T23079] ? fpu__clear_all+0x20/0x20 [ 317.420696][T23079] __x64_sys_creat+0x8e/0xb0 [ 317.425288][T23079] do_syscall_64+0x31/0x40 [ 317.429713][T23079] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 317.435611][T23079] RIP: 0033:0x7f1149428929 [ 317.440031][T23079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.459641][T23079] RSP: 002b:00007f1147a91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 317.468068][T23079] RAX: ffffffffffffffda RBX: 00007f114964ffa0 RCX: 00007f1149428929 [ 317.476074][T23079] RDX: 0000000000000000 RSI: 0000000000000164 RDI: 00002000000007c0 [ 317.484049][T23079] RBP: 00007f11494aab39 R08: 0000000000000000 R09: 0000000000000000 [ 317.492028][T23079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.499999][T23079] R13: 0000000000000000 R14: 00007f114964ffa0 R15: 00007ffc1a0952b8 [ 317.507972][T23079] [ 317.510300][T23079] Allocated by task 22712: [ 317.514720][T23079] __kasan_kmalloc+0xda/0x110 [ 317.519411][T23079] kmem_cache_alloc_trace+0x184/0x2e0 [ 317.524805][T23079] copy_verifier_state+0x5a2/0xc20 [ 317.529915][T23079] push_stack+0x19b/0x4f0 [ 317.534253][T23079] do_check+0xb7df/0xdf40 [ 317.538591][T23079] do_check_common+0x8e3/0x1160 [ 317.543453][T23079] bpf_check+0x9371/0xd720 [ 317.547870][T23079] bpf_prog_load+0xf5a/0x1420 [ 317.552557][T23079] __se_sys_bpf+0x442/0x680 [ 317.557062][T23079] __x64_sys_bpf+0x7b/0x90 [ 317.561483][T23079] do_syscall_64+0x31/0x40 [ 317.565907][T23079] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 317.571796][T23079] [ 317.574129][T23079] Freed by task 22712: [ 317.578202][T23079] kasan_set_track+0x4a/0x70 [ 317.582799][T23079] kasan_set_free_info+0x23/0x40 [ 317.587757][T23079] ____kasan_slab_free+0x125/0x160 [ 317.592879][T23079] __kasan_slab_free+0x11/0x20 [ 317.597644][T23079] slab_free_freelist_hook+0xc5/0x190 [ 317.603016][T23079] kfree+0xc0/0x270 [ 317.606831][T23079] free_verifier_state+0xde/0x220 [ 317.611873][T23079] pop_stack+0x39c/0x520 [ 317.616117][T23079] do_check+0x8783/0xdf40 [ 317.620447][T23079] do_check_common+0x8e3/0x1160 [ 317.625303][T23079] bpf_check+0x9371/0xd720 [ 317.629724][T23079] bpf_prog_load+0xf5a/0x1420 [ 317.634402][T23079] __se_sys_bpf+0x442/0x680 [ 317.638910][T23079] __x64_sys_bpf+0x7b/0x90 [ 317.643351][T23079] do_syscall_64+0x31/0x40 [ 317.647778][T23079] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 317.653670][T23079] [ 317.656008][T23079] Last potentially related work creation: [ 317.661733][T23079] kasan_save_stack+0x3a/0x60 [ 317.666421][T23079] __kasan_record_aux_stack+0xd2/0x100 [ 317.671881][T23079] kasan_record_aux_stack_noalloc+0xb/0x10 [ 317.677696][T23079] kvfree_call_rcu+0x10c/0x620 [ 317.682463][T23079] drop_sysctl_table+0x2ef/0x410 [ 317.687403][T23079] unregister_sysctl_table+0x75/0x120 [ 317.692779][T23079] unregister_net_sysctl_table+0x15/0x20 [ 317.698419][T23079] inetdev_event+0x79d/0x1030 [ 317.703101][T23079] raw_notifier_call_chain+0x90/0x100 [ 317.708486][T23079] unregister_netdevice_many+0xf8b/0x1980 [ 317.714215][T23079] unregister_netdevice_queue+0x31c/0x360 [ 317.719936][T23079] ppp_release+0xef/0x1f0 [ 317.724260][T23079] __fput+0x2fb/0x770 [ 317.728243][T23079] ____fput+0x15/0x20 [ 317.732227][T23079] task_work_run+0x127/0x190 [ 317.736812][T23079] exit_to_user_mode_loop+0xcb/0xe0 [ 317.742016][T23079] syscall_exit_to_user_mode+0x68/0x90 [ 317.747479][T23079] do_syscall_64+0x3d/0x40 [ 317.751904][T23079] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 317.757791][T23079] [ 317.760151][T23079] The buggy address belongs to the object at ffff88810966e000 [ 317.760151][T23079] which belongs to the cache kmalloc-2k of size 2048 [ 317.774207][T23079] The buggy address is located 1120 bytes inside of [ 317.774207][T23079] 2048-byte region [ffff88810966e000, ffff88810966e800) [ 317.787649][T23079] The buggy address belongs to the page: [ 317.793299][T23079] page:ffffea0004259a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109668 [ 317.803549][T23079] head:ffffea0004259a00 order:3 compound_mapcount:0 compound_pincount:0 [ 317.812006][T23079] flags: 0x4000000000010200(slab|head) [ 317.817484][T23079] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042d80 [ 317.826085][T23079] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 317.834686][T23079] page dumped because: kasan: bad access detected [ 317.841149][T23079] page_owner tracks the page as allocated [ 317.846903][T23079] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 1862839782, free_ts 0 [ 317.864793][T23079] prep_new_page+0x179/0x180 [ 317.869392][T23079] get_page_from_freelist+0x2235/0x23d0 [ 317.874940][T23079] __alloc_pages_nodemask+0x268/0x5f0 [ 317.880322][T23079] new_slab+0x84/0x3f0 [ 317.884404][T23079] ___slab_alloc+0x2a6/0x450 [ 317.889003][T23079] __slab_alloc+0x63/0xa0 [ 317.893346][T23079] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 317.898720][T23079] __alloc_disk_node+0x79/0x580 [ 317.903577][T23079] loop_add+0x33f/0x7b0 [ 317.907753][T23079] loop_init+0x1bf/0x1ff [ 317.911998][T23079] do_one_initcall+0x187/0x510 [ 317.916766][T23079] do_initcall_level+0x16f/0x2cf [ 317.921708][T23079] do_initcalls+0x50/0x92 [ 317.926038][T23079] do_basic_setup+0x88/0x8f [ 317.930534][T23079] kernel_init_freeable+0x287/0x3be [ 317.935725][T23079] kernel_init+0x11/0x1a0 [ 317.940047][T23079] page_owner free stack trace missing [ 317.945409][T23079] [ 317.947752][T23079] Memory state around the buggy address: [ 317.953387][T23079] ffff88810966e300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.961465][T23079] ffff88810966e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.969526][T23079] >ffff88810966e400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.977579][T23079] ^ [ 317.984774][T23079] ffff88810966e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.992838][T23079] ffff88810966e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.000892][T23079] ================================================================== [ 318.008950][T23079] Disabling lock debugging due to kernel taint [ 318.051696][T23079] general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] PREEMPT SMP KASAN [ 318.063426][T23079] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 318.071837][T23079] CPU: 0 PID: 23079 Comm: syz.1.10746 Tainted: G B W 5.10.238-syzkaller-00282-gd76d4cd0623a #0 [ 318.083279][T23079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.093346][T23079] RIP: 0010:exact_lock+0x4b/0xc0 [ 318.098270][T23079] Code: 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 78 f8 6d ff 4d 8b 36 4d 85 f6 74 35 49 83 c6 68 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 56 f8 6d ff 4d 8b 36 4d 85 f6 74 [ 318.117859][T23079] RSP: 0018:ffffc90000d77650 EFLAGS: 00010207 [ 318.123915][T23079] RAX: 000000000000000c RBX: ffff88810966e000 RCX: 0000000000000282 [ 318.131867][T23079] RDX: ffffc9000193c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 318.139822][T23079] RBP: ffffc90000d77668 R08: 0000000000000004 R09: 0000000000000003 [ 318.147788][T23079] R10: fffffbfff0d8e448 R11: 1ffffffff0d8e448 R12: ffff88810966e000 [ 318.155743][T23079] R13: 0000000000700003 R14: 0000000000000067 R15: dffffc0000000000 [ 318.163707][T23079] FS: 00007f1147a916c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 318.172623][T23079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.179191][T23079] CR2: 00007f1147a70d58 CR3: 000000011dc6b000 CR4: 00000000003506b0 [ 318.187145][T23079] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.195100][T23079] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 318.203049][T23079] Call Trace: [ 318.206328][T23079] ? bdev_check_media_change+0x350/0x350 [ 318.211942][T23079] kobj_lookup+0x298/0x430 [ 318.216345][T23079] get_gendisk+0xe9/0x340 [ 318.220672][T23079] ? _raw_spin_lock+0x8e/0xe0 [ 318.225334][T23079] __blkdev_get+0x1b0/0x12f0 [ 318.229909][T23079] ? _raw_spin_unlock+0x4d/0x70 [ 318.234741][T23079] ? blkdev_bio_end_io+0x450/0x450 [ 318.239838][T23079] ? selinux_file_receive+0x130/0x130 [ 318.245200][T23079] ? selinux_inode_permission+0x3fc/0x5e0 [ 318.250907][T23079] blkdev_open+0x208/0x430 [ 318.255310][T23079] ? block_ioctl+0x100/0x100 [ 318.259887][T23079] do_dentry_open+0x793/0x1090 [ 318.264640][T23079] vfs_open+0x73/0x80 [ 318.268726][T23079] path_openat+0x27ad/0x3160 [ 318.273307][T23079] ? getname+0x19/0x20 [ 318.277367][T23079] ? do_filp_open+0x3e0/0x3e0 [ 318.282032][T23079] do_filp_open+0x1b3/0x3e0 [ 318.286521][T23079] ? vfs_tmpfile+0x2c0/0x2c0 [ 318.291099][T23079] ? get_unused_fd_flags+0x92/0xa0 [ 318.296197][T23079] do_sys_openat2+0x14c/0x6d0 [ 318.300862][T23079] ? __se_sys_futex+0x2b4/0x360 [ 318.305695][T23079] ? do_sys_open+0xe0/0xe0 [ 318.310102][T23079] ? __kasan_check_write+0x14/0x20 [ 318.315198][T23079] ? switch_fpu_return+0x197/0x340 [ 318.320297][T23079] ? fpu__clear_all+0x20/0x20 [ 318.324954][T23079] __x64_sys_creat+0x8e/0xb0 [ 318.329530][T23079] do_syscall_64+0x31/0x40 [ 318.333947][T23079] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 318.339821][T23079] RIP: 0033:0x7f1149428929 [ 318.344244][T23079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.363851][T23079] RSP: 002b:00007f1147a91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 318.372253][T23079] RAX: ffffffffffffffda RBX: 00007f114964ffa0 RCX: 00007f1149428929 [ 318.380209][T23079] RDX: 0000000000000000 RSI: 0000000000000164 RDI: 00002000000007c0 [ 318.388164][T23079] RBP: 00007f11494aab39 R08: 0000000000000000 R09: 0000000000000000 [ 318.396122][T23079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.404078][T23079] R13: 0000000000000000 R14: 00007f114964ffa0 R15: 00007ffc1a0952b8 [ 318.412037][T23079] Modules linked in: [ 318.416234][T23079] ---[ end trace ac7ee376d5f4ab11 ]--- [ 318.421727][T23079] RIP: 0010:exact_lock+0x4b/0xc0 [ 318.426707][T23079] Code: 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 78 f8 6d ff 4d 8b 36 4d 85 f6 74 35 49 83 c6 68 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 56 f8 6d ff 4d 8b 36 4d 85 f6 74 [ 318.446402][T23079] RSP: 0018:ffffc90000d77650 EFLAGS: 00010207 [ 318.452469][T23079] RAX: 000000000000000c RBX: ffff88810966e000 RCX: 0000000000000282 [ 318.460497][T23079] RDX: ffffc9000193c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 318.468973][T23079] RBP: ffffc90000d77668 R08: 0000000000000004 R09: 0000000000000003 [ 318.476947][T23079] R10: fffffbfff0d8e448 R11: 1ffffffff0d8e448 R12: ffff88810966e000 [ 318.484945][T23079] R13: 0000000000700003 R14: 0000000000000067 R15: dffffc0000000000 [ 318.492996][T23079] FS: 00007f1147a916c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 318.501983][T23079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.508588][T23079] CR2: 00007f1147a70d58 CR3: 000000011dc6b000 CR4: 00000000003506b0 [ 318.516623][T23079] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.524629][T23079] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 318.532646][T23079] Kernel panic - not syncing: Fatal exception [ 318.539013][T23079] Kernel Offset: disabled [ 318.543337][T23079] Rebooting in 86400 seconds..