last executing test programs: 5.392556185s ago: executing program 0 (id=2373): prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 5.334449246s ago: executing program 0 (id=2374): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) mlockall(0x7) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1}, 0x40000051) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x19) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000000)=""/6, 0x6) close_range(r5, 0xffffffffffffffff, 0x0) 3.476330465s ago: executing program 2 (id=2389): r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x1f, 0x2) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 3.463851145s ago: executing program 2 (id=2390): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0xc98f, 0x3, 0x0, 0x0, 0xc07}}, 0x120) read(r0, &(0x7f0000000700)=""/192, 0xc0) write$UHID_DESTROY(r0, 0x0, 0x0) 3.401445177s ago: executing program 2 (id=2393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x800, 0x200000, 0x88, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001400)}}], 0x1, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 3.387533177s ago: executing program 2 (id=2394): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pwrite64(r0, &(0x7f0000000340)="5da1", 0x4, 0x0) 3.347140647s ago: executing program 4 (id=2395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x5fdf4394}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000000), 0x6b) 3.293642868s ago: executing program 2 (id=2396): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.293403598s ago: executing program 4 (id=2397): socket(0x21, 0x80002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xa}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0x9}]}}]}, 0x40}}, 0x2800) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() rename(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0/file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="ba04bc90d589c5fa688340040afac794a04b2c93fd257ce174386107d16295900dba178bf688c2dacd4343e7a5685fc4e34e2b6674239c05b62d599ae059a548ba34ef0c0a7a8cc0a34e07d1f47402f2b9e28e769dc2e3196b4b56009dd485f32d487339278d24a9577e4f46e6ddea2d319b6c7d55cfc7f500507fba769a67d31ae643ac3d9ab75f9f00651ed1f6ba6f6f03ac14d4e4f09914793aa93d7658b128982bf7aa22cfc6d9296b5842dfa1990e6565460e52a7d0e5101401fde79066f1b203ce1a2ca320280eb1764acdc6a407e3"], 0x46b) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) socket$inet_udplite(0x2, 0x2, 0x88) 3.278115778s ago: executing program 2 (id=2398): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440), 0x4) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0xd, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = io_uring_setup(0x2e34, &(0x7f0000000180)) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) write$UHID_INPUT(r5, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) umount2(&(0x7f0000000200)='./file0\x00', 0x3) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.297738144s ago: executing program 4 (id=2401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) 2.297590574s ago: executing program 4 (id=2402): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000500"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f00741d0000080007"], 0x44}}, 0x0) 2.296950854s ago: executing program 0 (id=2403): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) 2.267890044s ago: executing program 1 (id=2405): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000002c0)={0x0, 0x0, 0x27f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000002c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000906010800000900020073797a310000000005000100070000002c000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e000000200"/84], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4058}, 0x4008800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x3f00, "ec9fe44d4dbe56a65274d7c727e7e53c1bb714e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028642b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ed7eff0d26ff199ee1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bcb7d08e36655c"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xfffffbff, 0x20, 0x0, 0x0, 0x8, 0x1, 0x0, 0x5, 0x3, 0x0}) 2.193792636s ago: executing program 0 (id=2406): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) read(r0, 0x0, 0x38) pwrite64(r0, &(0x7f0000000340)="5da1", 0x4, 0x0) 2.193240356s ago: executing program 4 (id=2408): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2.134752956s ago: executing program 4 (id=2409): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dd66ca2021046e04a9dc01021001090236767e47870001046b40090904c904000202ff"], 0x0) 1.141574082s ago: executing program 0 (id=2410): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6b", 0x2a}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4edb673503cf002e28e331bc529b433cd74ab6c48a2c", 0xf6}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201", 0xd6}, {&(0x7f0000001000)="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", 0x14a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b5d383823677f025217943343e363268a73daecfa0fdc5beb5a7ac332a11533627b41dbe33a6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a813bc3ebba62168141343c9938965233cdaef85778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e8ebc08f6e6dc652a12e000000000000000000dabfc714629971d55b52192c803e89147c9434e190ba2de9c450883623e826c07629f995ad852ebf", 0xc4}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.141392872s ago: executing program 3 (id=2411): r0 = getpgrp(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r0, 0x0, r1, r4) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) 1.041835364s ago: executing program 1 (id=2412): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'none'}, 0xc) 1.033099024s ago: executing program 1 (id=2413): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000000), &(0x7f0000000480), &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000140)='./file0\x00', 0x220000, 0x0) mknodat$loop(r3, 0x0, 0x80, 0x0) linkat(r3, &(0x7f00000000c0)='./file0\x00', r3, 0x0, 0x1400) 801.608227ms ago: executing program 1 (id=2414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000019c0), 0x0, 0x1) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0xd000, 0x0, 0x8, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 801.293038ms ago: executing program 1 (id=2415): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100"], 0x0, 0x42, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 671.80669ms ago: executing program 1 (id=2416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = io_uring_setup(0x48cb, &(0x7f0000000440)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)) ptrace$cont(0x9, r4, 0x10000, 0x0) 216.403517ms ago: executing program 0 (id=2417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sigaltstack(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'veth1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) 154.305707ms ago: executing program 3 (id=2418): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 115.379379ms ago: executing program 3 (id=2419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x800, 0x200000, 0x88, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001400)}}], 0x1, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 57.531859ms ago: executing program 3 (id=2420): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) read(r0, 0x0, 0x38) pwrite64(r0, &(0x7f0000000340)="5da1", 0x4, 0x0) 33.74453ms ago: executing program 3 (id=2421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240", @ANYRESHEX], 0x60}}, 0x0) 0s ago: executing program 3 (id=2422): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0xfffffd89) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000140)}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffffe, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa6, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='vcan0\x00', 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000300)=""/182, 0xb6}], 0x2}, 0x180) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8) r10 = inotify_init1(0x800) close(r10) kernel console output (not intermixed with test programs): [ T8346] syz.1.1732: attempt to access beyond end of device [ 688.173501][ T8346] loop1: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 688.190551][ T8346] syz.1.1732: attempt to access beyond end of device [ 688.190551][ T8346] loop1: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 688.206166][ T8370] EXT4-fs mount: 38 callbacks suppressed [ 688.206186][ T8370] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 688.227216][ T8346] syz.1.1732: attempt to access beyond end of device [ 688.227216][ T8346] loop1: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 688.255584][ T8346] syz.1.1732: attempt to access beyond end of device [ 688.255584][ T8346] loop1: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 688.270353][ T8370] EXT4-fs (loop2): shut down requested (1) [ 688.295175][ T294] EXT4-fs (loop2): unmounting filesystem. [ 688.335320][ T8346] syz.1.1732: attempt to access beyond end of device [ 688.335320][ T8346] loop1: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 688.351364][ T28] audit: type=1400 audit(1743282655.983:216): avc: denied { create } for pid=8377 comm="syz.2.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 688.373718][ T28] audit: type=1400 audit(1743282656.003:217): avc: denied { sys_module } for pid=8377 comm="syz.2.1743" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 688.418070][ T28] audit: type=1400 audit(1743282656.003:218): avc: denied { write } for pid=8377 comm="syz.2.1743" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 688.457642][ T626] kworker/u4:7: attempt to access beyond end of device [ 688.457642][ T626] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 688.471603][ T28] audit: type=1400 audit(1743282656.003:219): avc: denied { create } for pid=8379 comm="syz.3.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 688.487966][ T8372] loop0: detected capacity change from 0 to 40427 [ 688.514130][ T8372] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 688.532810][ T8372] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 688.601932][ T8372] F2FS-fs (loop0): Found nat_bits in checkpoint [ 688.628568][ T8388] loop1: detected capacity change from 0 to 512 [ 688.647051][ T7720] usb 5-1: USB disconnect, device number 2 [ 688.663534][ T8388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 688.685740][ T8372] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 688.692613][ T8372] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 688.727631][ T8383] loop3: detected capacity change from 0 to 40427 [ 688.734962][ T8388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 688.740381][ T8383] F2FS-fs (loop3): invalid crc value [ 688.751077][ T8388] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.766117][ T8383] F2FS-fs (loop3): Found nat_bits in checkpoint [ 688.783520][ T8388] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 688.810185][ T8388] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 28 [ 688.824940][ T8388] EXT4-fs (loop1): This should not happen!! Data will be lost [ 688.824940][ T8388] [ 688.834515][ T8388] EXT4-fs (loop1): Total free blocks count 0 [ 688.835163][ T8383] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 688.840321][ T8388] EXT4-fs (loop1): Free/Dirty block details [ 688.853873][ T8388] EXT4-fs (loop1): free_blocks=39626 [ 688.859022][ T8388] EXT4-fs (loop1): dirty_blocks=1 [ 688.864114][ T8388] EXT4-fs (loop1): Block reservation details [ 688.869915][ T8388] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 688.925735][ T292] EXT4-fs (loop1): unmounting filesystem. [ 688.942093][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 689.191019][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1761'. [ 689.215865][ T8425] tipc: Started in network mode [ 689.220569][ T8425] tipc: Node identity memory.en, cluster identity 8 [ 689.295854][ T8405] loop1: detected capacity change from 0 to 40427 [ 689.332414][ T8405] F2FS-fs (loop1): fault_injection options not supported [ 689.353583][ T8405] F2FS-fs (loop1): invalid crc value [ 689.445825][ T8405] F2FS-fs (loop1): Found nat_bits in checkpoint [ 689.552196][ T8405] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 689.833061][ T7720] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 690.004544][ T8461] device veth1_to_team entered promiscuous mode [ 690.023057][ T7720] usb 5-1: Using ep0 maxpacket: 16 [ 690.029118][ T7720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.033080][ T1795] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 690.039921][ T7720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.057115][ T7720] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 690.070051][ T7720] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 690.079780][ T7720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.093446][ T7720] usb 5-1: config 0 descriptor?? [ 690.223511][ T1795] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 690.241209][ T1795] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.249949][ T1795] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.275630][ T1795] usb 2-1: config 0 interface 0 has no altsetting 0 [ 690.286428][ T1795] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.311649][ T1795] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.332710][ T1795] usb 2-1: config 0 interface 0 has no altsetting 0 [ 690.343484][ T1795] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.366617][ T1795] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.389663][ T1795] usb 2-1: config 0 interface 0 has no altsetting 0 [ 690.403736][ T1795] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.422626][ T1795] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.443044][ T1795] usb 2-1: config 0 interface 0 has no altsetting 0 [ 690.450263][ T1795] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.469783][ T1795] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.490892][ T1795] usb 2-1: config 0 interface 0 has no altsetting 0 [ 690.498327][ T1795] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.511308][ T7720] usbhid 5-1:0.0: can't add hid device: -71 [ 690.520430][ T1795] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.522140][ T7720] usbhid: probe of 5-1:0.0 failed with error -71 [ 690.541360][ T1795] usb 2-1: config 0 interface 0 has no altsetting 0 [ 690.552150][ T1795] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.578387][ T7720] usb 5-1: USB disconnect, device number 3 [ 690.591898][ T1795] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.613098][ T1795] usb 2-1: config 0 interface 0 has no altsetting 0 [ 690.623641][ T1795] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.648973][ T1795] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.670042][ T1795] usb 2-1: config 0 interface 0 has no altsetting 0 [ 690.681549][ T1795] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 690.691241][ T8479] loop2: detected capacity change from 0 to 40427 [ 690.702334][ T1795] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 690.710684][ T8479] F2FS-fs (loop2): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 690.725425][ T1795] usb 2-1: Product: syz [ 690.729427][ T1795] usb 2-1: Manufacturer: syz [ 690.734358][ T8479] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 690.742955][ T1795] usb 2-1: SerialNumber: syz [ 690.747737][ T8479] F2FS-fs (loop2): invalid crc value [ 690.756881][ T1795] usb 2-1: config 0 descriptor?? [ 690.777201][ T8479] F2FS-fs (loop2): Found nat_bits in checkpoint [ 690.842795][ T8481] loop3: detected capacity change from 0 to 40427 [ 690.876676][ T8481] F2FS-fs (loop3): fault_injection options not supported [ 690.884751][ T8481] F2FS-fs (loop3): Image doesn't support compression [ 690.891551][ T8481] F2FS-fs (loop3): Image doesn't support compression [ 690.898438][ T8481] F2FS-fs (loop3): fault_type options not supported [ 690.904913][ T8479] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 690.911798][ T8479] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 690.919927][ T8481] F2FS-fs (loop3): invalid crc value [ 690.926566][ T8481] F2FS-fs (loop3): Found nat_bits in checkpoint [ 690.967044][ T1795] usb 2-1: USB disconnect, device number 9 [ 691.003299][ T8481] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 691.296252][ T8500] tipc: Started in network mode [ 691.301913][ T8500] tipc: Node identity 4, cluster identity 4711 [ 691.308168][ T8500] tipc: Node number set to 4 [ 691.339331][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 691.339348][ T28] audit: type=1400 audit(1743282658.963:241): avc: denied { write } for pid=8506 comm="syz.3.1790" name="unix" dev="proc" ino=4026532328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 691.431269][ T8513] loop0: detected capacity change from 0 to 8192 [ 691.473030][ T7720] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 691.663137][ T7720] usb 3-1: Using ep0 maxpacket: 16 [ 691.669959][ T7720] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 691.709942][ T7720] usb 3-1: config 0 has no interface number 0 [ 691.724215][ T7720] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 691.746564][ T7720] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 691.782380][ T8520] loop1: detected capacity change from 0 to 512 [ 691.782538][ T7720] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 691.815368][ T7720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.833076][ T7720] usb 3-1: Product: syz [ 691.841508][ T7720] usb 3-1: Manufacturer: syz [ 691.851443][ T7720] usb 3-1: SerialNumber: syz [ 691.870228][ T8520] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 691.880485][ T7720] usb 3-1: config 0 descriptor?? [ 691.881406][ T8520] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 691.903828][ T8498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 691.911005][ T8498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 691.956578][ T292] EXT4-fs (loop1): unmounting filesystem. [ 692.007025][ T28] audit: type=1400 audit(1743282659.633:242): avc: denied { ioctl } for pid=8525 comm="syz.1.1796" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 692.007720][ T8527] input: syz0 as /devices/virtual/input/input4 [ 692.100653][ T8530] loop4: detected capacity change from 0 to 1024 [ 692.108619][ T8532] tap0: tun_chr_ioctl cmd 2147767520 [ 692.128747][ T8498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 692.143479][ T8498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 692.150829][ T8530] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 692.202135][ T8530] EXT4-fs (loop4): orphan cleanup on readonly fs [ 692.222748][ T8530] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 692.242482][ T8530] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #3: comm syz.4.1798: mark_inode_dirty error [ 692.273853][ T8530] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.1798: Invalid block bitmap block 3 in block_group 0 [ 692.293295][ T8530] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 692.304496][ T8530] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #3: comm syz.4.1798: mark_inode_dirty error [ 692.323287][ T8530] Quota error (device loop4): write_blk: dquota write failed [ 692.342037][ T8539] loop1: detected capacity change from 0 to 2048 [ 692.342373][ T8530] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 1: comm syz.4.1798: lblock 6 mapped to illegal pblock 1 (length 1) [ 692.382867][ T8530] Quota error (device loop4): write_blk: dquota write failed [ 692.392099][ T8530] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 692.393627][ T8541] loop8: detected capacity change from 0 to 1 [ 692.409230][ T8530] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 48: comm syz.4.1798: lblock 0 mapped to illegal pblock 48 (length 1) [ 692.427469][ T8539] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 692.450603][ T8530] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 692.465614][ T8530] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.1798: Failed to acquire dquot type 0 [ 692.490888][ T8530] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 49: comm syz.4.1798: lblock 1 mapped to illegal pblock 49 (length 1) [ 692.505534][ T8530] Quota error (device loop4): do_insert_tree: Can't read tree quota block 1 [ 692.544786][ T8530] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 692.555090][ T8530] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.1798: Failed to acquire dquot type 0 [ 692.565945][ T8552] loop3: detected capacity change from 0 to 512 [ 692.583092][ T8530] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 692.593467][ T8530] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #15: comm syz.4.1798: mark_inode_dirty error [ 692.619497][ T8530] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 692.634584][ T8552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 692.639900][ T8530] EXT4-fs (loop4): 1 orphan inode deleted [ 692.653164][ T8530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 692.673383][ T8552] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 692.738320][ T8530] syz.4.1798 (8530) used greatest stack depth: 19688 bytes left [ 692.780250][ T295] EXT4-fs (loop4): unmounting filesystem. [ 692.798476][ T293] EXT4-fs (loop3): unmounting filesystem. [ 692.839404][ T28] audit: type=1400 audit(1743282660.463:243): avc: denied { bind } for pid=8557 comm="syz.4.1808" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 692.886759][ T28] audit: type=1400 audit(1743282660.463:244): avc: denied { node_bind } for pid=8557 comm="syz.4.1808" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 692.961530][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 692.979428][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 693.005316][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 693.018286][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 693.051499][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 693.068314][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 693.137048][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 693.173264][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 693.204901][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 693.243794][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 693.271176][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 693.301163][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 693.321051][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 693.345307][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 693.369823][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 693.391846][ T8591] netlink: 'syz.4.1822': attribute type 4 has an invalid length. [ 693.399932][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 693.420660][ T292] EXT4-fs (loop1): unmounting filesystem. [ 693.426462][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 693.455829][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 693.498401][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 693.530392][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 693.550744][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 693.569675][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 693.588730][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 693.614654][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 693.643238][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 693.662719][ T8613] loop1: detected capacity change from 0 to 2048 [ 693.681885][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 693.701688][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 693.721555][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 693.743084][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 693.763480][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 693.781482][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 693.792186][ T332] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 693.801905][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 693.812443][ T8613] loop1: detected capacity change from 0 to 256 [ 693.818613][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 693.828782][ T19] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 693.833336][ T8613] exfat: Unknown parameter 'ÿÿ00000000000000000000' [ 693.849608][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 693.873074][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 693.885193][ T332] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 693.895124][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 693.914507][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 693.931671][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 693.955799][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 693.977464][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 694.008127][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.023127][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.043029][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 694.048160][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.119473][ T8630] loop1: detected capacity change from 0 to 16 [ 694.127715][ T40] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 694.143770][ T8630] erofs: (device loop1): mounted with root inode @ nid 36. [ 694.331064][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.353293][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.365679][ T19] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 694.383063][ T19] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 694.392958][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.394551][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.402972][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.413022][ T19] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 694.422893][ T40] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 694.441333][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.450131][ T19] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.459898][ T40] usb 1-1: config 0 descriptor?? [ 694.467969][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.478088][ T19] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 694.493077][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.513028][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.523455][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.533103][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.553609][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.567193][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.600491][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.616122][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.626584][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.658219][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.671656][ T8639] loop2: detected capacity change from 0 to 7 [ 694.674929][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.698346][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.711176][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.729041][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.741636][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.753329][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.763771][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.774115][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.790752][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.801636][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.811930][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.823431][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.833715][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.843779][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.855046][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.865260][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.875337][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.893091][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.913098][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.923207][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.943268][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.959411][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.969641][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 694.990219][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 695.003075][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 695.013140][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 695.014947][ T8619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.024761][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 695.032580][ T8619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.041703][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 695.059001][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 695.064675][ T40] usbhid 1-1:0.0: can't add hid device: -71 [ 695.071601][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 695.076020][ T40] usbhid: probe of 1-1:0.0 failed with error -71 [ 695.085873][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 695.099225][ T40] usb 1-1: USB disconnect, device number 5 [ 695.101807][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 695.117776][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 695.128187][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 695.138355][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 695.149850][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 695.161145][ T7720] asix 3-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 695.170466][ T7720] asix: probe of 3-1:0.251 failed with error -5 [ 695.185921][ T7720] usb 3-1: USB disconnect, device number 5 [ 695.543055][ T7720] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 695.563076][ T19] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 695.733115][ T7720] usb 3-1: Using ep0 maxpacket: 32 [ 695.739206][ T7720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 46020, setting to 1024 [ 695.750322][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 695.755204][ T7720] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 695.766117][ T19] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 695.773429][ T19] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 695.784546][ T19] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 695.795202][ T7720] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 695.804136][ T7720] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 695.812123][ T7720] usb 3-1: Product: syz [ 695.816121][ T7720] usb 3-1: Manufacturer: syz [ 695.820465][ T7720] usb 3-1: SerialNumber: syz [ 695.825353][ T19] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 695.832558][ T19] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 695.843672][ T19] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 695.854446][ T7720] usb 3-1: config 0 descriptor?? [ 695.859514][ T8621] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 695.861218][ T19] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 695.874988][ T19] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 695.886060][ T19] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 695.898525][ T19] usb 2-1: string descriptor 0 read error: -22 [ 695.904566][ T19] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 695.913524][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.933091][ T40] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 696.086115][ T1795] usb 3-1: USB disconnect, device number 6 [ 696.123077][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 696.126386][ T19] usb 2-1: USB disconnect, device number 10 [ 696.129352][ T40] usb 4-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 696.152049][ T40] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 696.162141][ T40] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 696.172357][ T40] usb 4-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 696.185646][ T40] usb 4-1: config 1 interface 0 has no altsetting 0 [ 696.194274][ T40] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 696.204432][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 696.213493][ T40] usb 4-1: SerialNumber: syz [ 696.221201][ T8653] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 696.229423][ T8653] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 696.439394][ T8653] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 696.446447][ T8653] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 696.496234][ T7720] usb 5-1: USB disconnect, device number 4 [ 696.522126][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 696.522140][ T28] audit: type=1400 audit(1743282664.143:257): avc: denied { write } for pid=8661 comm="syz.4.1850" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 696.838525][ T8674] usb usb7: usbfs: process 8674 (syz.2.1855) did not claim interface 0 before use [ 696.857319][ T40] cdc_ether 4-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 696.910947][ T28] audit: type=1400 audit(1743282664.533:258): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 696.951790][ T28] audit: type=1400 audit(1743282664.573:259): avc: denied { ioctl } for pid=8684 comm="syz.0.1859" path="socket:[40670]" dev="sockfs" ino=40670 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 697.003112][ T7720] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 697.173432][ C1] cdc_ether 4-1:1.0 eth1: CDC: unexpected notification 68! [ 697.181080][ C1] cdc_ether 4-1:1.0 eth1: CDC: unexpected notification 7c! [ 697.188301][ C1] cdc_ether 4-1:1.0 eth1: CDC: unexpected notification 36! [ 697.195519][ C1] cdc_ether 4-1:1.0 eth1: CDC: unexpected notification 90! [ 697.203417][ C1] cdc_ether 4-1:1.0 eth1: CDC: unexpected notification 01! [ 697.204352][ T7720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 697.210609][ C1] cdc_ether 4-1:1.0 eth1: CDC: unexpected notification 01! [ 697.229023][ C1] cdc_ether 4-1:1.0 eth1: CDC: unexpected notification 06! [ 697.236622][ C1] cdc_ether 4-1:1.0 eth1: CDC: unexpected notification 01! [ 697.244175][ C1] cdc_ether 4-1:1.0 eth1: CDC: unexpected notification 3c! [ 697.251279][ T7720] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 697.251520][ C1] cdc_ether 4-1:1.0 eth1: CDC: unexpected notification ff! [ 697.283767][ T7720] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 697.293328][ T19] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 697.315673][ T7720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.324134][ T7720] usb 5-1: Product: syz [ 697.328343][ T28] audit: type=1400 audit(1743282664.953:260): avc: denied { ioctl } for pid=8717 comm="syz.0.1866" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=40719 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 697.328408][ T7720] usb 5-1: Manufacturer: syz [ 697.359084][ T7720] usb 5-1: SerialNumber: syz [ 697.365115][ T7720] usb 5-1: config 0 descriptor?? [ 697.372960][ T8670] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 697.381108][ T8670] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 697.496976][ T19] usb 3-1: config 0 has no interfaces? [ 697.508341][ T19] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 697.508341][ T1795] usb 4-1: USB disconnect, device number 5 [ 697.508941][ T1795] cdc_ether 4-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 697.523031][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.560527][ T19] usb 3-1: Product: syz [ 697.564616][ T19] usb 3-1: Manufacturer: syz [ 697.568974][ T19] usb 3-1: SerialNumber: syz [ 697.583854][ T19] usb 3-1: config 0 descriptor?? [ 697.878830][ T28] audit: type=1400 audit(1743282665.503:261): avc: denied { setopt } for pid=8677 comm="syz.2.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 698.153374][ T40] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 698.189135][ T8765] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 698.257796][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1876'. [ 698.290275][ T28] audit: type=1400 audit(1743282665.913:262): avc: denied { map } for pid=8772 comm="syz.0.1878" path="socket:[41029]" dev="sockfs" ino=41029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 698.318316][ T28] audit: type=1400 audit(1743282665.913:263): avc: denied { read } for pid=8772 comm="syz.0.1878" path="socket:[41029]" dev="sockfs" ino=41029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 698.346317][ T40] usb 2-1: Using ep0 maxpacket: 8 [ 698.352329][ T40] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 698.361532][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.365934][ T8780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8780 comm=syz.3.1880 [ 698.370387][ T40] usb 2-1: config 0 descriptor?? [ 698.383988][ T8780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8780 comm=syz.3.1880 [ 698.398698][ T8780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8780 comm=syz.3.1880 [ 698.434366][ T8784] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 698.457746][ T28] audit: type=1400 audit(1743282666.083:264): avc: denied { name_bind } for pid=8786 comm="syz.3.1884" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 698.480122][ T28] audit: type=1400 audit(1743282666.083:265): avc: denied { node_bind } for pid=8786 comm="syz.3.1884" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 698.589257][ T40] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 698.713046][ T19] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 698.903037][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 698.909579][ T19] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 698.922534][ T19] usb 1-1: config 0 interface 0 has no altsetting 0 [ 698.929553][ T19] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 698.938663][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.947452][ T19] usb 1-1: config 0 descriptor?? [ 699.355856][ T19] zydacron 0003:13EC:0006.0028: item fetching failed at offset 0/3 [ 699.366947][ T19] zydacron 0003:13EC:0006.0028: parse failed [ 699.376114][ T19] zydacron: probe of 0003:13EC:0006.0028 failed with error -22 [ 699.556187][ T1795] usb 1-1: USB disconnect, device number 6 [ 699.729198][ T19] usb 5-1: USB disconnect, device number 5 [ 699.793813][ T40] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 699.804950][ T40] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 699.815310][ T40] asix: probe of 2-1:0.0 failed with error -71 [ 699.828724][ T40] usb 2-1: USB disconnect, device number 11 [ 699.912564][ T1795] usb 3-1: USB disconnect, device number 7 [ 699.938615][ T8802] device veth1_macvtap entered promiscuous mode [ 699.957147][ T8802] device macsec0 left promiscuous mode [ 699.970732][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 700.770455][ T8828] device ip6erspan0 entered promiscuous mode [ 700.842764][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 700.935567][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1907'. [ 701.003089][ T658] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 701.083092][ T7720] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 701.204042][ T658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.215513][ T658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.227010][ T658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.233064][ T40] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 701.238717][ T658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.256580][ T658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.267314][ T658] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 701.276136][ T658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.284883][ T658] usb 1-1: config 0 descriptor?? [ 701.290016][ T7720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.293108][ T1795] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 701.301903][ T7720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.317576][ T7720] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 701.326418][ T7720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.335113][ T7720] usb 3-1: config 0 descriptor?? [ 701.423048][ T40] usb 4-1: Using ep0 maxpacket: 32 [ 701.429448][ T40] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 701.437357][ T40] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.447208][ T40] usb 4-1: config 0 has no interface number 0 [ 701.453148][ T40] usb 4-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 701.463913][ T40] usb 4-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 701.476791][ T40] usb 4-1: config 0 interface 8 has no altsetting 0 [ 701.484773][ T40] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 701.493698][ T1795] usb 5-1: Using ep0 maxpacket: 8 [ 701.499054][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.499209][ T658] usbhid 1-1:0.0: can't add hid device: -71 [ 701.506982][ T40] usb 4-1: Product: syz [ 701.513217][ T658] usbhid: probe of 1-1:0.0 failed with error -71 [ 701.516730][ T40] usb 4-1: Manufacturer: syz [ 701.525161][ T658] usb 1-1: USB disconnect, device number 7 [ 701.530534][ T1795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.542440][ T40] usb 4-1: SerialNumber: syz [ 701.547282][ T1795] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 701.556781][ T1795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.556825][ T40] usb 4-1: config 0 descriptor?? [ 701.570172][ T1795] usb 5-1: config 0 descriptor?? [ 701.745513][ T7720] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 701.752724][ T7720] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 701.759959][ T7720] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 701.767047][ T7720] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 701.774171][ T7720] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 701.779119][ T40] usb 4-1: USB disconnect, device number 6 [ 701.784883][ T7720] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 701.794666][ T7720] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 701.802562][ T7720] dragonrise 0003:0079:0006.0029: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.2-1/input0 [ 701.820214][ T7720] dragonrise 0003:0079:0006.0029: no inputs found [ 701.826612][ T7720] dragonrise 0003:0079:0006.0029: force feedback init failed [ 701.958251][ T7720] usb 3-1: USB disconnect, device number 8 [ 701.995872][ T1795] lenovo 0003:17EF:6062.002A: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 702.083107][ T1673] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 702.093099][ T658] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 702.196246][ T1795] usb 5-1: USB disconnect, device number 6 [ 702.264355][ T1673] usb 2-1: config 0 has no interfaces? [ 702.270298][ T1673] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 702.283069][ T658] usb 1-1: Using ep0 maxpacket: 16 [ 702.289390][ T1673] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 702.297334][ T1673] usb 2-1: Manufacturer: syz [ 702.302483][ T1673] usb 2-1: config 0 descriptor?? [ 702.307552][ T658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.323508][ T658] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 702.332776][ T658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.342250][ T658] usb 1-1: config 0 descriptor?? [ 702.511692][ T28] audit: type=1400 audit(1743282670.133:266): avc: denied { name_bind } for pid=8869 comm="syz.2.1916" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 702.572250][ T8878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1919'. [ 702.586139][ T1072] usb 2-1: USB disconnect, device number 12 [ 702.751051][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.758780][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.766217][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.773462][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.780643][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.787908][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.795093][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.802253][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.809687][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.816936][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.824116][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.831301][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.838531][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.845759][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.852909][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.860158][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.867338][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.874613][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.881727][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.889206][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.896450][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.903732][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.910919][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.918151][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.925342][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.932528][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.939888][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.947098][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.954285][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.961454][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.968694][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.975884][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.983101][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.990298][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 702.997495][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.004693][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.011876][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.019111][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.026312][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.033527][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.040697][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.047948][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.055123][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.062328][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.069827][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.077099][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.084283][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.091458][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.098856][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.106226][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.113605][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.120830][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.128064][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.135233][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.142547][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.150099][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.158625][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.165926][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.171043][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.180728][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.193123][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.219769][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.235711][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.242959][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.272707][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.288553][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.300276][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.314870][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.322123][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.334117][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.341499][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.348739][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.355992][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.363421][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.370795][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.378035][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.385258][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.392419][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.399704][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.407227][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.414572][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.421778][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.429011][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.436217][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.443417][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.450748][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.458016][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.465414][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.472626][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.479911][ T8903] device veth1_macvtap entered promiscuous mode [ 703.486025][ T8903] device macsec0 left promiscuous mode [ 703.491858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 703.499117][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.506702][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.513992][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.521123][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.530420][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.537683][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.544881][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.552045][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.559290][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.566708][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.574157][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.581368][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.588602][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.595806][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.603105][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.610422][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.617647][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.624839][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.632047][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.639266][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.646454][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.653663][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.661174][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.675012][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.682573][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.689822][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.697591][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.705005][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.713186][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.720403][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.727871][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.735131][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.742304][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.749783][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.762555][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.770206][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.777459][ T8907] capability: warning: `syz.0.1929' uses 32-bit capabilities (legacy support in use) [ 703.786922][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.794310][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.801531][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.809244][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.816660][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.824319][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.833138][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.845440][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.852673][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.862285][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.869888][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.877917][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.902833][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.910409][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.917938][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.925347][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.932938][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.940900][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.958226][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.965773][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.979069][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.986569][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 703.994319][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.003173][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.010400][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.018124][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.026537][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.034399][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.041766][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.049265][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.056719][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.064108][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.071323][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.078824][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.086394][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.093862][ T658] hid-generic 0003:0458:5016.002B: unknown main item tag 0x0 [ 704.104476][ T658] hid-generic 0003:0458:5016.002B: hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 704.125995][ T658] usb 1-1: USB disconnect, device number 8 [ 704.253065][ T1072] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 704.263119][ T28] audit: type=1400 audit(1743282671.883:267): avc: denied { map } for pid=8922 comm="syz.2.1936" path="socket:[41538]" dev="sockfs" ino=41538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 704.317595][ T28] audit: type=1400 audit(1743282671.923:268): avc: denied { read } for pid=8922 comm="syz.2.1936" path="socket:[41538]" dev="sockfs" ino=41538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 704.373069][ T19] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 704.454064][ T1072] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.467279][ T1072] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 704.476506][ T1072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.492009][ T1072] usb 5-1: config 0 descriptor?? [ 704.564238][ T19] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 704.564595][ T8932] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 704.583202][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.602175][ T19] usb 4-1: config 0 descriptor?? [ 704.603582][ T8932] device bridge_slave_0 left promiscuous mode [ 704.636302][ T8932] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.646377][ T8932] device bridge_slave_1 left promiscuous mode [ 704.652445][ T8932] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.763024][ T40] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 704.900496][ T1072] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 704.915423][ T1072] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.002C/input/input5 [ 704.944135][ T40] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.963419][ T40] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 704.972521][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.984491][ T40] usb 2-1: config 0 descriptor?? [ 705.002054][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'. [ 705.011353][ T8947] device bridge_slave_1 left promiscuous mode [ 705.017314][ T28] audit: type=1400 audit(1743282672.643:269): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1598 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 705.018373][ T1072] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 705.039771][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.055530][ T28] audit: type=1400 audit(1743282672.643:270): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1598 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 705.083305][ T28] audit: type=1400 audit(1743282672.643:271): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1598 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 705.113314][ T8947] device bridge_slave_0 left promiscuous mode [ 705.119337][ T8947] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.190030][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1946'. [ 705.192182][ T1072] usb 2-1: USB disconnect, device number 13 [ 705.264933][ T8954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1948'. [ 705.351916][ T658] usb 5-1: USB disconnect, device number 7 [ 705.387050][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 705.414888][ T8959] device macsec0 left promiscuous mode [ 705.443098][ T28] audit: type=1400 audit(1743282673.063:272): avc: denied { read } for pid=8956 comm="syz.0.1949" dev="nsfs" ino=4026532561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 705.483058][ T28] audit: type=1400 audit(1743282673.063:273): avc: denied { open } for pid=8956 comm="syz.0.1949" path="net:[4026532561]" dev="nsfs" ino=4026532561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 705.685181][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1954'. [ 705.763048][ T1072] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 705.944157][ T1072] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.957528][ T1072] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 705.966757][ T1072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.978568][ T1072] usb 2-1: config 0 descriptor?? [ 706.084107][ T28] audit: type=1400 audit(1743282673.713:274): avc: denied { bind } for pid=8989 comm="syz.4.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 706.110379][ T28] audit: type=1400 audit(1743282673.713:275): avc: denied { listen } for pid=8989 comm="syz.4.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 706.335317][ T7720] usb 4-1: USB disconnect, device number 7 [ 706.817161][ T7720] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 707.003066][ T7720] usb 4-1: Using ep0 maxpacket: 8 [ 707.009501][ T7720] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 707.038898][ T7720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.060355][ T7720] usb 4-1: config 0 descriptor?? [ 707.272752][ T7720] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 707.534688][ T9016] usb 2-1: USB disconnect, device number 14 [ 708.205104][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 708.205123][ T28] audit: type=1400 audit(1743282675.833:279): avc: denied { connect } for pid=9045 comm="syz.4.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 708.233023][ T1673] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 708.424159][ T1673] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 708.448189][ T1673] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 708.467315][ T1673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.487532][ T1673] usb 1-1: Product: syz [ 708.491542][ T1673] usb 1-1: Manufacturer: syz [ 708.497635][ T1673] usb 1-1: SerialNumber: syz [ 708.570110][ T28] audit: type=1400 audit(1743282676.193:280): avc: denied { read } for pid=9051 comm="syz.4.1985" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 708.599611][ T28] audit: type=1400 audit(1743282676.193:281): avc: denied { open } for pid=9051 comm="syz.4.1985" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 708.709872][ T7720] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 708.711782][ T28] audit: type=1400 audit(1743282676.333:282): avc: denied { read } for pid=9034 comm="syz.0.1977" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 708.727463][ T7720] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 708.753764][ T7720] asix: probe of 4-1:0.0 failed with error -71 [ 708.764165][ T1673] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 708.767877][ T7720] usb 4-1: USB disconnect, device number 8 [ 708.777769][ T28] audit: type=1400 audit(1743282676.333:283): avc: denied { open } for pid=9034 comm="syz.0.1977" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 708.810878][ T1673] usb 1-1: USB disconnect, device number 9 [ 708.819430][ T1673] usblp0: removed [ 709.235684][ T9067] netlink: 'syz.4.1989': attribute type 4 has an invalid length. [ 709.290619][ T9067] netlink: 'syz.4.1989': attribute type 4 has an invalid length. [ 709.964563][ T40] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 710.429529][ T28] audit: type=1400 audit(1743282678.053:284): avc: denied { name_bind } for pid=9092 comm="syz.0.1997" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 710.453113][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 710.461651][ T40] usb 5-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 710.480856][ T40] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 710.498849][ T40] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 710.515913][ T40] usb 5-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 710.530284][ T40] usb 5-1: config 1 interface 0 has no altsetting 0 [ 710.541431][ T40] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 710.551045][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 710.559208][ T40] usb 5-1: SerialNumber: syz [ 710.569251][ T9083] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 710.578787][ T9083] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 710.830104][ T9083] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 710.837253][ T9083] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 711.271212][ T40] cdc_ether 5-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 711.391626][ T28] audit: type=1400 audit(1743282679.013:285): avc: denied { read } for pid=140 comm="dhcpcd" name="n16" dev="tmpfs" ino=21065 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 711.528019][ T28] audit: type=1400 audit(1743282679.013:286): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=21065 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 711.872153][ T28] audit: type=1400 audit(1743282679.013:287): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=21065 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 711.932635][ T28] audit: type=1400 audit(1743282679.493:288): avc: denied { listen } for pid=9117 comm="syz.0.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 711.953120][ T5675] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 712.047484][ T9125] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 712.203079][ T5675] usb 2-1: Using ep0 maxpacket: 8 [ 712.216372][ T5675] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 712.233164][ T1795] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 712.242219][ T5675] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 712.253150][ T5675] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 712.359565][ C1] cdc_ether 5-1:1.0 eth1: CDC: unexpected notification 68! [ 712.367256][ C1] cdc_ether 5-1:1.0 eth1: CDC: unexpected notification 7c! [ 712.372416][ T5675] usb 2-1: Product: syz [ 712.374440][ C1] cdc_ether 5-1:1.0 eth1: CDC: unexpected notification 36! [ 712.378292][ T5675] usb 2-1: Manufacturer: syz [ 712.385737][ C1] cdc_ether 5-1:1.0 eth1: CDC: unexpected notification 90! [ 712.389722][ T5675] usb 2-1: SerialNumber: syz [ 712.401956][ T5675] usb 2-1: config 0 descriptor?? [ 712.402338][ C1] cdc_ether 5-1:1.0 eth1: CDC: unexpected notification 01! [ 712.414032][ C1] cdc_ether 5-1:1.0 eth1: CDC: unexpected notification 01! [ 712.421254][ C1] cdc_ether 5-1:1.0 eth1: CDC: unexpected notification 06! [ 712.428441][ C1] cdc_ether 5-1:1.0 eth1: CDC: unexpected notification 01! [ 712.435691][ C1] cdc_ether 5-1:1.0 eth1: CDC: unexpected notification 3c! [ 712.442925][ C1] cdc_ether 5-1:1.0 eth1: CDC: unexpected notification ff! [ 712.451088][ T1795] usb 3-1: Using ep0 maxpacket: 32 [ 712.459659][ T1795] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 712.474588][ T1795] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 712.493040][ T1795] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 712.511421][ T1795] usb 3-1: Product: syz [ 712.521478][ T1795] usb 3-1: Manufacturer: syz [ 712.531587][ T1795] usb 3-1: SerialNumber: syz [ 712.543344][ T1795] usb 3-1: config 0 descriptor?? [ 712.548417][ T9132] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 712.813826][ T1795] usb 5-1: USB disconnect, device number 8 [ 712.825559][ T1673] usb 3-1: USB disconnect, device number 9 [ 712.847513][ T1795] cdc_ether 5-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 713.506077][ T9184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2012'. [ 713.523964][ T9184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2012'. [ 713.543306][ T9184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2012'. [ 713.787969][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 713.787999][ T28] audit: type=1400 audit(1743282681.403:294): avc: denied { create } for pid=9187 comm="syz.4.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 713.913469][ T1673] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 713.913517][ T1079] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 714.078133][ T351] usb 2-1: USB disconnect, device number 15 [ 714.103068][ T1079] usb 4-1: Using ep0 maxpacket: 8 [ 714.109185][ T1079] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 714.119434][ T1079] usb 4-1: config 127 has no interface number 1 [ 714.131737][ T1079] usb 4-1: config 127 interface 0 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0 [ 714.142273][ T1079] usb 4-1: config 127 interface 0 altsetting 10 bulk endpoint 0xA has invalid maxpacket 0 [ 714.162164][ T1079] usb 4-1: config 127 interface 171 has no altsetting 0 [ 714.169695][ T1079] usb 4-1: config 127 interface 0 has no altsetting 0 [ 714.181828][ T1673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.193213][ T1673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.270795][ T1673] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 714.283920][ T1673] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 714.293234][ T1673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.302005][ T1673] usb 3-1: config 0 descriptor?? [ 714.308651][ T1079] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 714.317601][ T1079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.325385][ T1079] usb 4-1: Product: syz [ 714.329474][ T1079] usb 4-1: Manufacturer: syz [ 714.333926][ T1079] usb 4-1: SerialNumber: syz [ 714.729131][ T1795] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 714.746452][ T1079] usb 4-1: USB disconnect, device number 9 [ 714.776002][ T1673] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 714.870064][ T1673] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 715.408500][ T1795] usb 2-1: Using ep0 maxpacket: 32 [ 715.691558][ T1795] usb 2-1: config index 0 descriptor too short (expected 30262, got 54) [ 715.699834][ T1795] usb 2-1: config 71 has too many interfaces: 126, using maximum allowed: 32 [ 715.708437][ T1795] usb 2-1: config 71 has an invalid interface number: 201 but max is 125 [ 715.716782][ T1795] usb 2-1: config 71 has an invalid descriptor of length 0, skipping remainder of the config [ 715.760751][ T1795] usb 2-1: config 71 has 1 interface, different from the descriptor's value: 126 [ 715.823494][ T1795] usb 2-1: config 71 has no interface number 0 [ 715.829792][ T1795] usb 2-1: config 71 interface 201 has no altsetting 0 [ 715.863390][ T1795] usb 2-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=dc.a9 [ 715.914678][ T1795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 715.922792][ T1795] usb 2-1: Product: syz [ 715.937373][ T1795] usb 2-1: Manufacturer: syz [ 715.947467][ T1795] usb 2-1: SerialNumber: syz [ 715.979199][ T1072] usb 3-1: USB disconnect, device number 10 [ 716.283145][ T7720] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 716.494392][ T7720] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 716.518164][ T7720] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 716.538719][ T7720] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 716.550272][ T7720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.581252][ T7720] usb 5-1: config 0 descriptor?? [ 717.130649][ T7720] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 717.227539][ T1795] rndis_host 2-1:71.201: skipping garbage [ 717.247234][ T1795] usb 2-1: bad CDC descriptors [ 717.252369][ T1795] cdc_acm 2-1:71.201: Zero length descriptor references [ 717.384794][ T28] audit: type=1400 audit(1743282685.003:295): avc: denied { ioctl } for pid=9251 comm="syz.0.2033" path="socket:[43364]" dev="sockfs" ino=43364 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 717.409832][ T1795] cdc_acm: probe of 2-1:71.201 failed with error -22 [ 717.769081][ T1795] usb 2-1: USB disconnect, device number 16 [ 717.957287][ T28] audit: type=1400 audit(1743282685.003:296): avc: denied { append } for pid=9251 comm="syz.0.2033" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 718.373910][ T28] audit: type=1400 audit(1743282686.003:297): avc: denied { read } for pid=9277 comm="syz.0.2042" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 718.397302][ T28] audit: type=1400 audit(1743282686.003:298): avc: denied { open } for pid=9277 comm="syz.0.2042" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 718.443048][ T554] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 718.473925][ T28] audit: type=1400 audit(1743282686.103:299): avc: denied { create } for pid=9277 comm="syz.0.2042" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 718.495480][ T9280] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 718.504489][ T9280] FAT-fs (loop1): unable to read boot sector [ 718.510767][ T28] audit: type=1400 audit(1743282686.123:300): avc: denied { mounton } for pid=9277 comm="syz.0.2042" path="/463/file0" dev="tmpfs" ino=2580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 718.563039][ T1795] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 718.634157][ T554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.645825][ T554] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 718.654901][ T554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.663681][ T554] usb 4-1: config 0 descriptor?? [ 718.743044][ T1795] usb 2-1: Using ep0 maxpacket: 32 [ 718.749287][ T1795] usb 2-1: config 0 has an invalid interface number: 111 but max is 1 [ 718.757500][ T1795] usb 2-1: config 0 has no interface number 1 [ 718.763415][ T1795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 718.774277][ T1795] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 718.783181][ T1795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.790978][ T1795] usb 2-1: Product: syz [ 718.794982][ T1795] usb 2-1: Manufacturer: syz [ 718.799391][ T1795] usb 2-1: SerialNumber: syz [ 718.804513][ T1795] usb 2-1: config 0 descriptor?? [ 719.021578][ T1795] usb 2-1: USB disconnect, device number 17 [ 719.071519][ T554] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 719.081368][ T554] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002E/input/input6 [ 719.156306][ T554] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 719.219386][ T28] audit: type=1400 audit(1743282686.843:301): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=2580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 719.322685][ T28] audit: type=1400 audit(1743282686.933:302): avc: denied { module_load } for pid=9283 comm="syz.2.2044" path="/sys/kernel/notes" dev="sysfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 719.347966][ T9286] Invalid ELF header magic: != ELF [ 719.425851][ T204] usb 5-1: USB disconnect, device number 9 [ 719.519800][ C1] Mem-Info: [ 719.522770][ C1] active_anon:8240 inactive_anon:148 isolated_anon:0 [ 719.522770][ C1] active_file:14835 inactive_file:2263 isolated_file:0 [ 719.522770][ C1] unevictable:0 dirty:262 writeback:0 [ 719.522770][ C1] slab_reclaimable:8469 slab_unreclaimable:76666 [ 719.522770][ C1] mapped:32043 shmem:4042 pagetables:594 [ 719.522770][ C1] sec_pagetables:0 bounce:0 [ 719.522770][ C1] kernel_misc_reclaimable:0 [ 719.522770][ C1] free:1495500 free_pcp:22647 free_cma:0 [ 719.567560][ C1] Node 0 active_anon:29460kB inactive_anon:592kB active_file:59340kB inactive_file:9052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128172kB dirty:1048kB writeback:0kB shmem:12668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4932kB pagetables:2376kB sec_pagetables:0kB all_unreclaimable? no [ 719.599687][ C1] DMA32 free:2966484kB boost:0kB min:62552kB low:78188kB high:93824kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971516kB mlocked:0kB bounce:0kB free_pcp:5032kB local_pcp:4976kB free_cma:0kB [ 719.627608][ C1] lowmem_reserve[]: 0 3932 3932 3932 [ 719.632729][ C1] Normal free:3015516kB boost:0kB min:84900kB low:106124kB high:127348kB reserved_highatomic:0KB active_anon:29460kB inactive_anon:592kB active_file:59340kB inactive_file:9052kB unevictable:0kB writepending:1048kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:88908kB local_pcp:51668kB free_cma:0kB [ 719.662494][ C1] lowmem_reserve[]: 0 0 0 0 [ 719.666836][ C1] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 722*4096kB (M) = 2966484kB [ 719.682162][ C1] Normal: 462*4kB (UME) 356*8kB (UME) 267*16kB (ME) 342*32kB (UME) 191*64kB (UME) 42*128kB (UME) 19*256kB (UME) 17*512kB (UME) 11*1024kB (UME) 2*2048kB (U) 720*4096kB (UM) = 3015560kB [ 719.700166][ C1] 20413 total pagecache pages [ 719.704675][ C1] 148 pages in swap cache [ 719.708841][ C1] Free swap = 123928kB [ 719.712837][ C1] Total swap = 124996kB [ 719.716828][ C1] 2097051 pages RAM [ 719.720471][ C1] 0 pages HighMem/MovableOnly [ 719.724985][ C1] 347572 pages reserved [ 719.728982][ C1] 0 pages cma reserved [ 720.965240][ T28] audit: type=1400 audit(1743282688.593:303): avc: denied { read } for pid=9306 comm="syz.0.2051" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 720.976810][ T6] usb 4-1: USB disconnect, device number 10 [ 721.170399][ T28] audit: type=1400 audit(1743282688.593:304): avc: denied { open } for pid=9306 comm="syz.0.2051" path="/465/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 721.431914][ T28] audit: type=1400 audit(1743282689.053:305): avc: denied { mount } for pid=9326 comm="syz.4.2058" name="/" dev="overlay" ino=2305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 721.459667][ T28] audit: type=1400 audit(1743282689.083:306): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 721.683773][ T28] audit: type=1400 audit(1743282689.303:307): avc: denied { create } for pid=9331 comm="syz.4.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 721.973061][ T204] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 722.313055][ T204] usb 3-1: Using ep0 maxpacket: 32 [ 722.319263][ T204] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 722.327380][ T204] usb 3-1: config 0 has no interface number 1 [ 722.333300][ T204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 722.344541][ T204] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 722.353749][ T204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.361622][ T204] usb 3-1: Product: syz [ 722.365891][ T6] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 722.373560][ T204] usb 3-1: Manufacturer: syz [ 722.378156][ T204] usb 3-1: SerialNumber: syz [ 722.387777][ T204] usb 3-1: config 0 descriptor?? [ 722.459138][ T9344] Invalid ELF header magic: != ELF [ 722.584350][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 722.595409][ T6] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 722.605802][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.619817][ T6] usb 4-1: config 0 descriptor?? [ 722.626053][ T9334] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 722.628848][ T1072] usb 3-1: USB disconnect, device number 11 [ 723.046741][ T6] hid-generic 0003:1B1C:1C08.002F: unknown main item tag 0x0 [ 723.054196][ T204] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 723.061747][ T6] hid-generic 0003:1B1C:1C08.002F: unknown main item tag 0x0 [ 723.069249][ T6] hid-generic 0003:1B1C:1C08.002F: unknown main item tag 0x0 [ 723.077200][ T6] hid-generic 0003:1B1C:1C08.002F: unknown main item tag 0x0 [ 723.084649][ T6] hid-generic 0003:1B1C:1C08.002F: unknown main item tag 0x0 [ 723.095567][ T6] hid-generic 0003:1B1C:1C08.002F: hidraw0: USB HID v1.01 Device [HID 1b1c:1c08] on usb-dummy_hcd.3-1/input0 [ 723.253055][ T204] usb 2-1: Using ep0 maxpacket: 8 [ 723.265015][ T204] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 723.279180][ T204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.279902][ T1673] usb 4-1: USB disconnect, device number 11 [ 723.293237][ T204] usb 2-1: Product: syz [ 723.297373][ T204] usb 2-1: Manufacturer: syz [ 723.473073][ T204] usb 2-1: SerialNumber: syz [ 723.481111][ T204] usb 2-1: config 0 descriptor?? [ 724.804397][ T28] audit: type=1400 audit(1743282692.433:308): avc: denied { map } for pid=9374 comm="syz.3.2073" path="socket:[44147]" dev="sockfs" ino=44147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 724.827991][ T28] audit: type=1400 audit(1743282692.433:309): avc: denied { bind } for pid=9374 comm="syz.3.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 724.913039][ T204] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 725.073041][ T1072] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 725.103035][ T204] usb 5-1: Using ep0 maxpacket: 8 [ 725.110361][ T204] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 725.119295][ T204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.127049][ T204] usb 5-1: Product: syz [ 725.131032][ T204] usb 5-1: Manufacturer: syz [ 725.135478][ T204] usb 5-1: SerialNumber: syz [ 725.140827][ T204] usb 5-1: config 0 descriptor?? [ 725.285045][ T1072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.295852][ T1072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.305355][ T1072] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 725.314214][ T1072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.322864][ T1072] usb 4-1: config 0 descriptor?? [ 725.554244][ T28] audit: type=1326 audit(1743282693.183:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm="syz.2.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7229f8d169 code=0x7fc00000 [ 725.858069][ T365] usb 2-1: USB disconnect, device number 18 [ 726.008204][ T1072] hid-led 0003:1D34:0004.0030: unknown main item tag 0x0 [ 726.016512][ T1072] hid-led: probe of 0003:1D34:0004.0030 failed with error -71 [ 726.027729][ T1072] usb 4-1: USB disconnect, device number 12 [ 726.484181][ T28] audit: type=1400 audit(1743282694.113:311): avc: denied { create } for pid=9396 comm="syz.2.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 727.228505][ T28] audit: type=1400 audit(1743282694.853:312): avc: denied { mounton } for pid=9405 comm="syz.1.2081" path="/proc/1361/task" dev="proc" ino=43636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 727.251173][ T28] audit: type=1400 audit(1743282694.853:313): avc: denied { mount } for pid=9405 comm="syz.1.2081" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 727.273633][ T28] audit: type=1400 audit(1743282694.853:314): avc: denied { search } for pid=9405 comm="syz.1.2081" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 727.920918][ T6] usb 5-1: USB disconnect, device number 10 [ 728.014183][ T28] audit: type=1400 audit(1743282695.643:315): avc: denied { setopt } for pid=9433 comm="syz.4.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 728.383064][ T1072] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 728.583129][ T1072] usb 4-1: Using ep0 maxpacket: 8 [ 728.589281][ T1072] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 728.599019][ T1072] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 728.608644][ T1072] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 728.618509][ T1072] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.631314][ T1072] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 728.640139][ T1072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.773049][ T365] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 728.953415][ T365] usb 5-1: Using ep0 maxpacket: 32 [ 728.959697][ T365] usb 5-1: config index 0 descriptor too short (expected 30262, got 54) [ 728.967983][ T365] usb 5-1: config 71 has too many interfaces: 126, using maximum allowed: 32 [ 728.976632][ T365] usb 5-1: config 71 has an invalid interface number: 201 but max is 125 [ 728.984920][ T365] usb 5-1: config 71 has an invalid descriptor of length 0, skipping remainder of the config [ 728.994936][ T365] usb 5-1: config 71 has 1 interface, different from the descriptor's value: 126 [ 729.003983][ T365] usb 5-1: config 71 has no interface number 0 [ 729.008494][ T204] usb 4-1: USB disconnect, device number 13 [ 729.009967][ T365] usb 5-1: config 71 interface 201 has no altsetting 0 [ 729.024202][ T365] usb 5-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=dc.a9 [ 729.033144][ T365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 729.040980][ T365] usb 5-1: Product: syz [ 729.045006][ T365] usb 5-1: Manufacturer: syz [ 729.049396][ T365] usb 5-1: SerialNumber: syz [ 729.261186][ T365] rndis_host 5-1:71.201: skipping garbage [ 729.267042][ T365] usb 5-1: bad CDC descriptors [ 729.272577][ T365] cdc_acm 5-1:71.201: Zero length descriptor references [ 729.279521][ T365] cdc_acm: probe of 5-1:71.201 failed with error -22 [ 729.304551][ T365] usb 5-1: USB disconnect, device number 11 [ 729.879732][ T28] audit: type=1400 audit(1743282697.503:316): avc: denied { bind } for pid=9487 comm="syz.2.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 729.939966][ T28] audit: type=1400 audit(1743282697.503:317): avc: denied { write } for pid=9487 comm="syz.2.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 730.463521][ T1072] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 731.423040][ T1072] usb 2-1: Using ep0 maxpacket: 32 [ 731.444848][ T1072] usb 2-1: config index 0 descriptor too short (expected 30262, got 54) [ 731.472255][ T28] audit: type=1400 audit(1743282699.093:318): avc: denied { read } for pid=9524 comm="syz.0.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 731.508421][ T1072] usb 2-1: config 71 has too many interfaces: 126, using maximum allowed: 32 [ 731.535721][ T1072] usb 2-1: config 71 has an invalid interface number: 201 but max is 125 [ 731.547933][ T1072] usb 2-1: config 71 has an invalid descriptor of length 0, skipping remainder of the config [ 731.557066][ T28] audit: type=1400 audit(1743282699.183:319): avc: denied { ioctl } for pid=9533 comm="syz.0.2130" path="socket:[43886]" dev="sockfs" ino=43886 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 731.560598][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2130'. [ 731.601581][ T1072] usb 2-1: config 71 has 1 interface, different from the descriptor's value: 126 [ 731.613815][ T1072] usb 2-1: config 71 has no interface number 0 [ 731.620190][ T1072] usb 2-1: config 71 interface 201 has no altsetting 0 [ 731.669674][ T1072] usb 2-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=dc.a9 [ 731.697904][ T1072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 731.718110][ T1072] usb 2-1: Product: syz [ 731.833014][ T1072] usb 2-1: Manufacturer: syz [ 731.837517][ T1072] usb 2-1: SerialNumber: syz [ 731.894285][ T28] audit: type=1400 audit(1743282699.523:320): avc: denied { read } for pid=9546 comm="syz.0.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 732.069089][ T1072] rndis_host 2-1:71.201: skipping garbage [ 732.082394][ T1072] usb 2-1: bad CDC descriptors [ 732.104097][ T1072] cdc_acm 2-1:71.201: Zero length descriptor references [ 732.124944][ T1072] cdc_acm: probe of 2-1:71.201 failed with error -22 [ 732.150939][ T1072] usb 2-1: USB disconnect, device number 19 [ 732.433026][ T6] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 732.523050][ T28] audit: type=1400 audit(1743282700.143:321): avc: denied { setopt } for pid=9555 comm="syz.3.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 732.587537][ T28] audit: type=1400 audit(1743282700.213:322): avc: denied { getopt } for pid=9564 comm="syz.1.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 732.644188][ T6] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 732.656519][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.676669][ T6] usb 3-1: config 0 has no interface number 0 [ 732.692820][ T6] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 732.711667][ T6] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 732.742882][ T6] usb 3-1: Product: syz [ 732.750087][ T6] usb 3-1: SerialNumber: syz [ 732.758329][ T6] usb 3-1: config 0 descriptor?? [ 732.913032][ T351] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 733.109978][ T351] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 733.122370][ T351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.132789][ T365] usb 3-1: USB disconnect, device number 12 [ 733.138948][ T351] usb 5-1: Product: syz [ 733.151619][ T351] usb 5-1: Manufacturer: syz [ 733.160828][ T351] usb 5-1: SerialNumber: syz [ 733.510404][ T9593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2153'. [ 734.433082][ T28] audit: type=1400 audit(1743282702.053:323): avc: denied { wake_alarm } for pid=9618 comm="syz.3.2162" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 734.508294][ T9622] tmpfs: Unsupported parameter 'mpol' [ 734.513101][ T28] audit: type=1400 audit(1743282702.133:324): avc: denied { mounton } for pid=9620 comm="syz.3.2163" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 734.519154][ T9622] process 'syz.3.2163' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 734.627721][ T351] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 734.743048][ T9625] netlink: 'syz.2.2164': attribute type 1 has an invalid length. [ 734.882517][ T351] usb 2-1: Using ep0 maxpacket: 16 [ 734.909407][ T351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.920163][ T351] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 734.929092][ T351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.937874][ T351] usb 2-1: config 0 descriptor?? [ 734.959824][ T9639] tmpfs: Unknown parameter 'usrquota' [ 735.346811][ T351] hid-generic 0003:04D8:00DD.0031: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 735.575393][ T554] usb 5-1: USB disconnect, device number 12 [ 735.764794][ T9651] tmpfs: Unknown parameter 'usrquota' [ 737.964185][ T7720] usb 2-1: USB disconnect, device number 20 [ 740.680124][ T9754] hub 1-0:1.0: USB hub found [ 740.713338][ T9754] hub 1-0:1.0: 1 port detected [ 740.934040][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 740.943039][ T477] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 740.952911][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 740.967999][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 740.983121][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 740.992826][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.000837][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.003847][ T9765] tmpfs: Unsupported parameter 'mpol' [ 741.011285][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.020969][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.028638][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.038159][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.048905][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.056926][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.064496][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.071871][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.079586][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.087169][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.095585][ T9768] input: syz0 as /devices/virtual/input/input7 [ 741.104078][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.112498][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.120183][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.127899][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.135963][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.143517][ T477] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 741.151630][ T477] usb 3-1: config 0 has no interface number 0 [ 741.157893][ T477] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.169018][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.176476][ T477] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.186419][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.193946][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.201323][ T477] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 741.210852][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.218473][ T477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.226708][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.236204][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.243831][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.251252][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.258966][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.266625][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.274415][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.281872][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.289926][ T477] usb 3-1: config 0 descriptor?? [ 741.295341][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.314348][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.321776][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.329549][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.337247][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.346373][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.353963][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.361414][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.368902][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.376552][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.384470][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.392006][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.399830][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.407697][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.415519][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.465177][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.473004][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.493313][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.522020][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.546651][ T554] hid-generic 0000:0000:00AA.0032: unknown main item tag 0x0 [ 741.571381][ T554] hid-generic 0000:0000:00AA.0032: hidraw0: HID v0.00 Device [syz1] on syz1 [ 741.709844][ T477] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 741.729575][ T477] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 741.785721][ T477] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 741.819125][ T477] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 741.849187][ T477] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 741.873670][ T477] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 741.889401][ T477] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 741.929579][ T28] audit: type=1400 audit(1743282709.553:325): avc: denied { listen } for pid=9780 comm="syz.1.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 741.950736][ T477] prodikeys 0003:041E:2801.0033: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 741.965609][ T477] hid_prodikeys: hid-prodikeys: failed to find output report [ 741.965609][ T477] [ 741.980254][ T28] audit: type=1400 audit(1743282709.553:326): avc: denied { accept } for pid=9780 comm="syz.1.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 741.983783][ T477] usb 3-1: USB disconnect, device number 13 [ 742.653085][ T1072] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 743.053107][ T1072] usb 4-1: Using ep0 maxpacket: 16 [ 743.059813][ T1072] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.070889][ T1072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 743.082188][ T1072] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 255 [ 743.092343][ T1072] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.106654][ T1072] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 743.116211][ T1072] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 743.124192][ T1072] usb 4-1: Manufacturer: syz [ 743.140498][ T1072] usb 4-1: config 0 descriptor?? [ 743.293126][ T1673] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 743.363768][ T477] usb 4-1: USB disconnect, device number 14 [ 744.183124][ T1673] usb 1-1: Using ep0 maxpacket: 32 [ 744.198488][ T1673] usb 1-1: config index 0 descriptor too short (expected 30262, got 54) [ 744.277945][ T1673] usb 1-1: config 71 has too many interfaces: 126, using maximum allowed: 32 [ 744.296845][ T1673] usb 1-1: config 71 has an invalid interface number: 201 but max is 125 [ 744.317038][ T1673] usb 1-1: config 71 has an invalid descriptor of length 0, skipping remainder of the config [ 744.332728][ T1673] usb 1-1: config 71 has 1 interface, different from the descriptor's value: 126 [ 744.341774][ T1673] usb 1-1: config 71 has no interface number 0 [ 744.348062][ T1673] usb 1-1: config 71 interface 201 has no altsetting 0 [ 744.356543][ T1673] usb 1-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=dc.a9 [ 744.370324][ T1673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 744.383231][ T1673] usb 1-1: Product: syz [ 744.387226][ T1673] usb 1-1: Manufacturer: syz [ 744.391691][ T1673] usb 1-1: SerialNumber: syz [ 744.769270][ T9289] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 744.964853][ T9289] usb 5-1: Using ep0 maxpacket: 16 [ 744.970999][ T9289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.985513][ T9289] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 744.994755][ T9289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.004800][ T9844] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 745.014445][ T9289] usb 5-1: config 0 descriptor?? [ 745.220851][ T9825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.231972][ T9825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.242002][ T9289] usbhid 5-1:0.0: can't add hid device: -71 [ 745.256090][ T9289] usbhid: probe of 5-1:0.0 failed with error -71 [ 745.303895][ T9289] usb 5-1: USB disconnect, device number 13 [ 745.398123][ T28] audit: type=1400 audit(1743282713.023:327): avc: denied { create } for pid=9851 comm="syz.3.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 745.842492][ T1673] rndis_host 1-1:71.201: skipping garbage [ 745.849192][ T1673] usb 1-1: bad CDC descriptors [ 745.978404][ T28] audit: type=1400 audit(1743282713.603:328): avc: denied { block_suspend } for pid=9868 comm="syz.1.2249" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 745.989258][ T1673] cdc_acm 1-1:71.201: Zero length descriptor references [ 746.035615][ T1673] cdc_acm: probe of 1-1:71.201 failed with error -22 [ 746.119759][ T1673] usb 1-1: USB disconnect, device number 10 [ 746.212754][ T9887] tmpfs: Unsupported parameter 'mpol' [ 748.353063][ T477] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 748.649510][ T477] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.659625][ T477] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 748.668690][ T477] usb 3-1: config 1 has no interface number 0 [ 748.674893][ T477] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.685906][ T477] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 748.700435][ T477] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 748.709446][ T477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.717558][ T477] usb 3-1: Product: syz [ 748.721595][ T477] usb 3-1: Manufacturer: syz [ 748.726369][ T477] usb 3-1: SerialNumber: syz [ 748.951201][ T1072] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 749.152999][ T1072] usb 4-1: Using ep0 maxpacket: 32 [ 749.161645][ T1072] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 749.170852][ T1072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.178928][ T1072] usb 4-1: Product: syz [ 749.183134][ T1072] usb 4-1: Manufacturer: syz [ 749.187671][ T1072] usb 4-1: SerialNumber: syz [ 749.528462][ T1072] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 749.543181][ T1072] usb 4-1: USB disconnect, device number 15 [ 749.578374][ T477] cdc_ncm 3-1:1.1: bind() failure [ 749.881421][ T477] usb 3-1: USB disconnect, device number 14 [ 750.229998][ T28] audit: type=1400 audit(1743282717.853:329): avc: denied { write } for pid=9936 comm="syz.3.2266" name="file0" dev="tmpfs" ino=2534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 750.252515][ T28] audit: type=1400 audit(1743282717.853:330): avc: denied { open } for pid=9936 comm="syz.3.2266" path="/453/file0" dev="tmpfs" ino=2534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 750.275405][ T28] audit: type=1400 audit(1743282717.853:331): avc: denied { ioctl } for pid=9936 comm="syz.3.2266" path="/453/file0" dev="tmpfs" ino=2534 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 750.373060][ T298] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 750.454785][ T9950] support for the xor transformation has been removed. [ 750.590283][ T298] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 750.603050][ T298] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 750.623028][ T298] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 750.636111][ T298] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 750.648702][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.975724][ T298] usb 2-1: config 0 descriptor?? [ 750.981435][ T9941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 750.993758][ T298] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 751.451424][ T9974] loop7: detected capacity change from 0 to 16384 [ 752.465691][ T9995] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.124565][ T298] usb 2-1: USB disconnect, device number 21 [ 753.304876][T10015] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 753.331968][T10015] kvm: pic: level sensitive irq not supported [ 753.332049][T10015] kvm: pic: non byte read [ 753.343737][T10015] kvm: pic: level sensitive irq not supported [ 753.343806][T10015] kvm: pic: non byte read [ 753.613038][ T1072] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 753.974256][ T1072] usb 4-1: config 0 has an invalid interface number: 82 but max is 0 [ 753.982270][ T1072] usb 4-1: config 0 has no interface number 0 [ 753.988640][ T1072] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=bc.cc [ 753.997619][ T1072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.018033][ T28] audit: type=1400 audit(1743282721.643:332): avc: denied { create } for pid=10034 comm="syz.1.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 754.039085][ T1072] usb 4-1: config 0 descriptor?? [ 754.050589][ T1072] usb 4-1: Found UVC 0.00 device (1bcf:0b40) [ 754.058519][ T1072] usb 4-1: Forcing UVC version to 1.0a [ 754.064236][ T1072] usb 4-1: No valid video chain found. [ 754.234274][ T28] audit: type=1400 audit(1743282721.863:333): avc: denied { execute_no_trans } for pid=10038 comm="syz.2.2300" path="/464/file0" dev="tmpfs" ino=2584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 754.276735][ T1795] usb 4-1: USB disconnect, device number 16 [ 754.293035][ T365] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 754.473446][ T365] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 754.484953][ T365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 754.501769][ T365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 754.523734][ T365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 754.542804][ T365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 754.559471][ T365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 754.580348][ T365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 754.593754][ T365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 754.604354][ T365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 754.615645][ T365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 754.629608][ T365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 754.643043][ T365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 754.663020][ T365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 754.670152][ T365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 754.686242][ T365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 754.697006][ T365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 754.704248][ T365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 754.713044][ T365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 754.723981][ T365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 754.731455][ T365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 754.740244][ T365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 754.751021][ T365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 754.758380][ T365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 754.767172][ T365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 754.778001][ T365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 754.786038][ T365] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 754.795193][ T365] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 754.816174][ T365] usb 2-1: Product: syz [ 754.820897][ T365] usb 2-1: Manufacturer: syz [ 754.829731][ T365] usb 2-1: SerialNumber: syz [ 754.838559][ T365] usb 2-1: config 0 descriptor?? [ 754.903085][ T1072] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 755.057087][ T9820] usb 2-1: USB disconnect, device number 22 [ 755.094104][ T1072] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 755.104346][ T1072] usb 1-1: config 0 has no interface number 0 [ 755.110271][ T1072] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.122111][ T1072] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.132280][ T1072] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 755.142661][ T1072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.158899][ T1072] usb 1-1: config 0 descriptor?? [ 755.569510][ T1072] prodikeys 0003:041E:2801.0034: unknown main item tag 0x0 [ 755.576679][ T1072] prodikeys 0003:041E:2801.0034: unknown main item tag 0x0 [ 755.583745][ T1072] prodikeys 0003:041E:2801.0034: item fetching failed at offset 2/7 [ 755.591680][ T1072] prodikeys 0003:041E:2801.0034: hid parse failed [ 755.598037][ T1072] prodikeys: probe of 0003:041E:2801.0034 failed with error -22 [ 755.773593][ T1072] usb 1-1: USB disconnect, device number 11 [ 755.800063][ T28] audit: type=1400 audit(1743282723.423:334): avc: denied { mounton } for pid=10075 comm="syz.1.2314" path="/416/file0" dev="tmpfs" ino=2354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 755.829639][T10080] input: syz0 as /devices/virtual/input/input9 [ 756.156009][ T28] audit: type=1400 audit(1743282723.783:335): avc: denied { lock } for pid=10101 comm="syz.3.2324" path="socket:[46697]" dev="sockfs" ino=46697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 756.208058][ T28] audit: type=1400 audit(1743282723.833:336): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 756.393732][ T1072] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 756.613022][ T1072] usb 5-1: Using ep0 maxpacket: 8 [ 756.625527][ T1072] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.638017][ T1072] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 756.648977][ T1072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.729305][ T1072] usb 5-1: config 0 descriptor?? [ 757.004896][T10126] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 757.014759][T10126] kvm: pic: non byte read [ 757.019165][T10126] kvm: pic: level sensitive irq not supported [ 757.019234][T10126] kvm: pic: non byte read [ 758.354119][T10149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2340'. [ 759.135946][ T298] usb 5-1: USB disconnect, device number 14 [ 759.843039][ T477] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 760.033101][ T477] usb 3-1: Using ep0 maxpacket: 16 [ 760.040723][ T477] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 760.066057][ T477] usb 3-1: config 0 has no interface number 0 [ 760.087168][ T477] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 760.125128][ T477] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 760.153711][ T477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.169395][ T477] usb 3-1: Product: syz [ 760.174294][ T477] usb 3-1: Manufacturer: syz [ 760.178982][ T477] usb 3-1: SerialNumber: syz [ 760.210197][ T477] usb 3-1: config 0 descriptor?? [ 761.530032][ T28] audit: type=1400 audit(1743282729.153:337): avc: denied { mounton } for pid=10224 comm="syz.3.2367" path=2F3437362FE91F7189591E9233614B dev="tmpfs" ino=2651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 761.815094][ T28] audit: type=1400 audit(1743282729.443:338): avc: denied { getattr } for pid=10238 comm="syz.4.2370" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 761.815331][T10239] overlayfs: statfs failed on './file0' [ 761.848454][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2370'. [ 762.063011][ T7720] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 762.099657][ T28] audit: type=1400 audit(1743282729.723:339): avc: denied { mounton } for pid=10242 comm="syz.4.2372" path="/465/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 762.264385][ T7720] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 762.275261][ T7720] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 762.284289][ T7720] usb 2-1: config 1 has no interface number 0 [ 762.290533][ T7720] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.301865][ T7720] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 762.311338][ T7720] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 762.326369][ T7720] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 762.335463][ T7720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.343442][ T7720] usb 2-1: Product: syz [ 762.347701][ T7720] usb 2-1: Manufacturer: syz [ 762.352161][ T7720] usb 2-1: SerialNumber: syz [ 762.363101][ T477] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 762.543057][ T477] usb 1-1: Using ep0 maxpacket: 32 [ 762.549547][ T477] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 762.561784][ T477] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 762.571317][ T477] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 762.578947][ T9820] usb 3-1: USB disconnect, device number 15 [ 762.579933][ T477] usb 1-1: Product: syz [ 762.589970][ T477] usb 1-1: Manufacturer: syz [ 762.594367][ T477] usb 1-1: SerialNumber: syz [ 762.608193][ T477] usb 1-1: config 0 descriptor?? [ 762.613460][T10252] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 762.823251][ T477] usb 1-1: USB disconnect, device number 12 [ 763.263080][ T28] audit: type=1400 audit(1743282730.863:340): avc: denied { create } for pid=10276 comm="syz.3.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 763.451562][ T7720] cdc_ncm 2-1:1.1: bind() failure [ 763.621527][ T7720] usb 2-1: USB disconnect, device number 23 [ 763.948726][ T477] hid-generic C98F:0003:0000.0035: unknown main item tag 0x0 [ 763.956175][ T477] hid-generic C98F:0003:0000.0035: unknown main item tag 0x0 [ 763.967278][ T477] hid-generic C98F:0003:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz1 [ 764.106617][ T28] audit: type=1400 audit(1743282731.733:341): avc: denied { create } for pid=10313 comm="syz.4.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 764.723052][ T7720] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 765.055868][ T7720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.118289][ T7720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 765.127461][ T7720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.141253][ T7720] usb 3-1: Product: syz [ 765.145600][ T7720] usb 3-1: Manufacturer: syz [ 765.150906][ T7720] usb 3-1: SerialNumber: syz [ 765.185928][T10337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2403'. [ 766.803223][ T9820] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 767.226188][ T7720] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 767.233932][ T7720] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 767.242245][ T7720] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 767.293044][ T9820] usb 5-1: Using ep0 maxpacket: 32 [ 767.308601][ T9820] usb 5-1: config index 0 descriptor too short (expected 30262, got 54) [ 767.317703][ T9820] usb 5-1: config 71 has too many interfaces: 126, using maximum allowed: 32 [ 767.328061][ T9820] usb 5-1: config 71 has an invalid interface number: 201 but max is 125 [ 767.336592][ T9820] usb 5-1: config 71 has an invalid descriptor of length 0, skipping remainder of the config [ 767.347291][ T9820] usb 5-1: config 71 has 1 interface, different from the descriptor's value: 126 [ 767.356745][ T9820] usb 5-1: config 71 has no interface number 0 [ 767.362828][ T9820] usb 5-1: config 71 interface 201 has no altsetting 0 [ 767.371523][ T28] audit: type=1400 audit(1743282734.993:342): avc: denied { ioctl } for pid=10374 comm="syz.0.2417" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 767.398795][ T7720] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 767.406722][ T7720] cdc_ncm 3-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 767.420275][ T9820] usb 5-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=dc.a9 [ 767.434322][ T7720] usb 3-1: USB disconnect, device number 16 [ 767.440541][ T9820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 767.449031][ T7720] cdc_ncm 3-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 767.450820][ T28] audit: type=1400 audit(1743282735.073:343): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.458234][ T9820] usb 5-1: Product: syz [ 767.534066][ T9820] usb 5-1: Manufacturer: syz [ 767.539495][ T9820] usb 5-1: SerialNumber: syz [ 767.566070][ T658] ================================================================== [ 767.574174][ T658] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 767.578135][ T28] audit: type=1400 audit(1743282735.203:344): avc: denied { read } for pid=10393 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.581798][ T658] Read of size 8 at addr ffff88811b8fccf0 by task kworker/0:6/658 [ 767.581818][ T658] [ 767.581834][ T658] CPU: 0 PID: 658 Comm: kworker/0:6 Tainted: G W 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 767.609615][ T28] audit: type=1400 audit(1743282735.243:345): avc: denied { open } for pid=10393 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.612268][ T658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 767.615256][ T28] audit: type=1400 audit(1743282735.243:346): avc: denied { getattr } for pid=10393 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.625553][ T658] Workqueue: rcu_gp process_srcu [ 767.625588][ T658] Call Trace: [ 767.625595][ T658] [ 767.625615][ T658] dump_stack_lvl+0x151/0x1b7 [ 767.701732][ T658] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 767.707123][ T658] ? _printk+0xd1/0x111 [ 767.711120][ T658] ? __virt_addr_valid+0x242/0x2f0 [ 767.713051][ T28] audit: type=1400 audit(1743282735.333:347): avc: denied { write } for pid=10391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.716219][ T658] print_report+0x158/0x4e0 [ 767.742674][ T28] audit: type=1400 audit(1743282735.333:348): avc: denied { add_name } for pid=10391 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.746433][ T658] ? __virt_addr_valid+0x242/0x2f0 [ 767.746479][ T658] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 767.746503][ T658] ? __list_del_entry_valid+0xa6/0x130 [ 767.787107][ T658] kasan_report+0x13c/0x170 [ 767.792036][ T658] ? __list_del_entry_valid+0xa6/0x130 [ 767.795254][ T28] audit: type=1400 audit(1743282735.423:349): avc: denied { remove_name } for pid=10403 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=23065 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.797658][ T658] __asan_report_load8_noabort+0x14/0x20 [ 767.830184][ T658] __list_del_entry_valid+0xa6/0x130 [ 767.837156][ T658] process_one_work+0x4d7/0xcb0 [ 767.844246][ T658] worker_thread+0xa60/0x1260 [ 767.850181][ T658] kthread+0x26d/0x300 [ 767.855732][ T658] ? worker_clr_flags+0x1a0/0x1a0 [ 767.861939][ T658] ? kthread_blkcg+0xd0/0xd0 [ 767.866349][ T658] ret_from_fork+0x1f/0x30 [ 767.870686][ T658] [ 767.873814][ T658] [ 767.875972][ T658] Allocated by task 7720: [ 767.880520][ T658] kasan_set_track+0x4b/0x70 [ 767.884937][ T658] kasan_save_alloc_info+0x1f/0x30 [ 767.890058][ T658] __kasan_kmalloc+0x9c/0xb0 [ 767.894704][ T658] __kmalloc_node+0xb4/0x1e0 [ 767.899240][ T658] kvmalloc_node+0x221/0x640 [ 767.904355][ T658] alloc_netdev_mqs+0x8c/0xf90 [ 767.908933][ T658] alloc_etherdev_mqs+0x36/0x40 [ 767.913613][ T658] usbnet_probe+0x213/0x28a0 [ 767.918381][ T658] usb_probe_interface+0x5b6/0xa90 [ 767.924114][ T658] really_probe+0x2b8/0x920 [ 767.928757][ T658] __driver_probe_device+0x1a0/0x310 [ 767.934360][ T658] driver_probe_device+0x54/0x3d0 [ 767.939226][ T658] __device_attach_driver+0x2e3/0x490 [ 767.944726][ T658] bus_for_each_drv+0x183/0x200 [ 767.950796][ T658] __device_attach+0x312/0x510 [ 767.955416][ T658] device_initial_probe+0x1a/0x20 [ 767.960405][ T658] bus_probe_device+0xbe/0x1e0 [ 767.965992][ T658] device_add+0xb60/0xf10 [ 767.970119][ T658] usb_set_configuration+0x190f/0x1e80 [ 767.975933][ T658] usb_generic_driver_probe+0x8b/0x150 [ 767.982545][ T658] usb_probe_device+0x144/0x260 [ 767.989396][ T658] really_probe+0x2b8/0x920 [ 767.996343][ T658] __driver_probe_device+0x1a0/0x310 [ 768.003051][ T658] driver_probe_device+0x54/0x3d0 [ 768.010968][ T658] __device_attach_driver+0x2e3/0x490 [ 768.020534][ T658] bus_for_each_drv+0x183/0x200 [ 768.029947][ T658] __device_attach+0x312/0x510 [ 768.036564][ T658] device_initial_probe+0x1a/0x20 [ 768.046403][ T658] bus_probe_device+0xbe/0x1e0 [ 768.052305][ T658] device_add+0xb60/0xf10 [ 768.056545][ T658] usb_new_device+0xf2f/0x1820 [ 768.061241][ T658] hub_event+0x2db1/0x4830 [ 768.065940][ T658] process_one_work+0x73d/0xcb0 [ 768.071120][ T658] worker_thread+0xa60/0x1260 [ 768.076425][ T658] kthread+0x26d/0x300 [ 768.081961][ T658] ret_from_fork+0x1f/0x30 [ 768.088024][ T658] [ 768.090495][ T658] Freed by task 7720: [ 768.094885][ T658] kasan_set_track+0x4b/0x70 [ 768.101754][ T658] kasan_save_free_info+0x2b/0x40 [ 768.107145][ T658] ____kasan_slab_free+0x131/0x180 [ 768.113592][ T658] __kasan_slab_free+0x11/0x20 [ 768.118512][ T658] __kmem_cache_free+0x21d/0x410 [ 768.124135][ T658] kfree+0x7a/0xf0 [ 768.127665][ T658] kvfree+0x35/0x40 [ 768.132327][ T658] netdev_freemem+0x3f/0x60 [ 768.137032][ T658] netdev_release+0x7f/0xb0 [ 768.142060][ T658] device_release+0x95/0x1c0 [ 768.147542][ T658] kobject_put+0x178/0x260 [ 768.152091][ T658] put_device+0x1f/0x30 [ 768.156867][ T658] free_netdev+0x393/0x480 [ 768.162125][ T658] usbnet_disconnect+0x25f/0x3b0 [ 768.167893][ T658] usb_unbind_interface+0x1fa/0x8c0 [ 768.176357][ T658] device_release_driver_internal+0x53e/0x870 [ 768.186028][ T658] device_release_driver+0x19/0x20 [ 768.192028][ T658] bus_remove_device+0x2fa/0x360 [ 768.200255][ T658] device_del+0x663/0xe90 [ 768.206057][ T658] usb_disable_device+0x380/0x720 [ 768.211899][ T658] usb_disconnect+0x32a/0x890 [ 768.216680][ T658] hub_event+0x1ed8/0x4830 [ 768.221271][ T658] process_one_work+0x73d/0xcb0 [ 768.226210][ T658] worker_thread+0xd71/0x1260 [ 768.230910][ T658] kthread+0x26d/0x300 [ 768.235554][ T658] ret_from_fork+0x1f/0x30 [ 768.241997][ T658] [ 768.245033][ T658] Last potentially related work creation: [ 768.250922][ T658] kasan_save_stack+0x3b/0x60 [ 768.255743][ T658] __kasan_record_aux_stack+0xb4/0xc0 [ 768.260918][ T658] kasan_record_aux_stack_noalloc+0xb/0x10 [ 768.266725][ T658] insert_work+0x56/0x310 [ 768.271075][ T658] __queue_work+0x9b6/0xd70 [ 768.275425][ T658] queue_work_on+0x105/0x170 [ 768.279930][ T658] usbnet_link_change+0x182/0x1a0 [ 768.284979][ T658] usbnet_probe+0x1e1e/0x28a0 [ 768.289485][ T658] usb_probe_interface+0x5b6/0xa90 [ 768.294533][ T658] really_probe+0x2b8/0x920 [ 768.299017][ T658] __driver_probe_device+0x1a0/0x310 [ 768.304410][ T658] driver_probe_device+0x54/0x3d0 [ 768.309419][ T658] __device_attach_driver+0x2e3/0x490 [ 768.314759][ T658] bus_for_each_drv+0x183/0x200 [ 768.319424][ T658] __device_attach+0x312/0x510 [ 768.324270][ T658] device_initial_probe+0x1a/0x20 [ 768.329094][ T658] bus_probe_device+0xbe/0x1e0 [ 768.334348][ T658] device_add+0xb60/0xf10 [ 768.338608][ T658] usb_set_configuration+0x190f/0x1e80 [ 768.344373][ T658] usb_generic_driver_probe+0x8b/0x150 [ 768.349647][ T658] usb_probe_device+0x144/0x260 [ 768.354864][ T658] really_probe+0x2b8/0x920 [ 768.359302][ T658] __driver_probe_device+0x1a0/0x310 [ 768.364530][ T658] driver_probe_device+0x54/0x3d0 [ 768.369404][ T658] __device_attach_driver+0x2e3/0x490 [ 768.374603][ T658] bus_for_each_drv+0x183/0x200 [ 768.379594][ T658] __device_attach+0x312/0x510 [ 768.384235][ T658] device_initial_probe+0x1a/0x20 [ 768.389468][ T658] bus_probe_device+0xbe/0x1e0 [ 768.394183][ T658] device_add+0xb60/0xf10 [ 768.398344][ T658] usb_new_device+0xf2f/0x1820 [ 768.403126][ T658] hub_event+0x2db1/0x4830 [ 768.407413][ T658] process_one_work+0x73d/0xcb0 [ 768.412125][ T658] worker_thread+0xa60/0x1260 [ 768.417022][ T658] kthread+0x26d/0x300 [ 768.421031][ T658] ret_from_fork+0x1f/0x30 [ 768.425275][ T658] [ 768.427450][ T658] The buggy address belongs to the object at ffff88811b8fc000 [ 768.427450][ T658] which belongs to the cache kmalloc-4k of size 4096 [ 768.441537][ T658] The buggy address is located 3312 bytes inside of [ 768.441537][ T658] 4096-byte region [ffff88811b8fc000, ffff88811b8fd000) [ 768.455552][ T658] [ 768.457808][ T658] The buggy address belongs to the physical page: [ 768.464406][ T658] page:ffffea00046e3e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11b8f8 [ 768.475345][ T658] head:ffffea00046e3e00 order:3 compound_mapcount:0 compound_pincount:0 [ 768.485143][ T658] flags: 0x4000000000010200(slab|head|zone=1) [ 768.491983][ T658] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380 [ 768.500998][ T658] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 768.509497][ T658] page dumped because: kasan: bad access detected [ 768.516197][ T658] page_owner tracks the page as allocated [ 768.521761][ T658] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 102, tgid 102 (udevd), ts 7410171745, free_ts 0 [ 768.542293][ T658] post_alloc_hook+0x213/0x220 [ 768.546967][ T658] prep_new_page+0x1b/0x110 [ 768.551423][ T658] get_page_from_freelist+0x3a98/0x3b10 [ 768.556917][ T658] __alloc_pages+0x234/0x610 [ 768.562394][ T658] alloc_slab_page+0x6c/0xf0 [ 768.567444][ T658] new_slab+0x90/0x3e0 [ 768.571705][ T658] ___slab_alloc+0x6f9/0xb80 [ 768.576326][ T658] __slab_alloc+0x5d/0xa0 [ 768.580764][ T658] __kmem_cache_alloc_node+0x207/0x2a0 [ 768.586613][ T658] __kmalloc_node+0xa3/0x1e0 [ 768.592492][ T658] kvmalloc_node+0x221/0x640 [ 768.596931][ T658] seq_read_iter+0x1ff/0xd00 [ 768.601882][ T658] kernfs_fop_read_iter+0x145/0x470 [ 768.607422][ T658] vfs_read+0x801/0xae0 [ 768.611404][ T658] ksys_read+0x199/0x2c0 [ 768.615571][ T658] __x64_sys_read+0x7b/0x90 [ 768.620126][ T658] page_owner free stack trace missing [ 768.625328][ T658] [ 768.627588][ T658] Memory state around the buggy address: [ 768.633169][ T658] ffff88811b8fcb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.641747][ T658] ffff88811b8fcc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.650818][ T658] >ffff88811b8fcc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.662329][ T658] ^ [ 768.673452][ T658] ffff88811b8fcd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.682650][ T658] ffff88811b8fcd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.691036][ T658] ================================================================== [ 768.699045][ T658] Disabling lock debugging due to kernel taint [ 768.801132][ T9820] rndis_host 5-1:71.201: skipping garbage [ 768.808388][ T9820] usb 5-1: bad CDC descriptors [ 768.813463][ T9820] cdc_acm 5-1:71.201: Zero length descriptor references [ 768.821249][ T9820] cdc_acm: probe of 5-1:71.201 failed with error -22 [ 768.829365][ T9820] usb 5-1: USB disconnect, device number 15