last executing test programs: 7.989766379s ago: executing program 2 (id=1307): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000180)={0x20, 0x9, 0x4, "bd57215c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.925209884s ago: executing program 1 (id=1306): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r0, 0x0, 0x0, 0x9000f4) rename(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r1, 0x0) 7.882381088s ago: executing program 1 (id=1308): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 7.85851755s ago: executing program 1 (id=1310): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0xfffff000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 7.824203393s ago: executing program 1 (id=1311): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x3800048, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 6.979223693s ago: executing program 1 (id=1313): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2}) 6.135579794s ago: executing program 2 (id=1317): timer_create(0x3, 0x0, &(0x7f000000e7c0)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_getoverrun(r0) 6.016264495s ago: executing program 2 (id=1329): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="120100000200000825c1a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0000000000000000000006241a0000f00905810340000000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.794928457s ago: executing program 1 (id=1331): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x33) 4.793966147s ago: executing program 3 (id=1322): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0xfffff000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 4.75317604s ago: executing program 3 (id=1324): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x3800048, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 4.467745744s ago: executing program 4 (id=1320): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1210086, &(0x7f0000001240)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@gid}, {}, {@fmask={'fmask', 0x3d, 0x7}}]}, 0x5, 0x152f, &(0x7f0000002f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000e00), 0x10f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 4.356233024s ago: executing program 4 (id=1325): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) mount$cgroup(0x20000000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x1}) 3.908921201s ago: executing program 3 (id=1328): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000180)={0x20, 0x9, 0x4, "bd57215c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.498813496s ago: executing program 4 (id=1330): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x5}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 3.488504047s ago: executing program 4 (id=1332): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2}) 3.276320995s ago: executing program 2 (id=1333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.276103754s ago: executing program 2 (id=1334): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r1) 2.948936772s ago: executing program 0 (id=1344): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) 1.974512764s ago: executing program 3 (id=1345): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) mount$cgroup(0x20000000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x1}) 1.974066044s ago: executing program 0 (id=1355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) rt_sigqueueinfo(0x0, 0x6, 0x0) 1.819209117s ago: executing program 0 (id=1346): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0x4e) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x5, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000140)='b', 0x1}], 0x1, 0x0) write(r1, &(0x7f0000000040)='g', 0x1) 82.705893ms ago: executing program 2 (id=1347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x5}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 82.551532ms ago: executing program 3 (id=1348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chroot(0x0) 82.430493ms ago: executing program 4 (id=1349): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = epoll_create1(0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x10000004}) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) 79.442683ms ago: executing program 0 (id=1350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 42.464956ms ago: executing program 0 (id=1351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) 321.48µs ago: executing program 4 (id=1352): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1805c61, 0x0) 130.92µs ago: executing program 3 (id=1353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) 0s ago: executing program 0 (id=1354): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000458e5e080304c8f05602000000010902120001000000000904"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r2}, 0x10) kernel console output (not intermixed with test programs): ] usb 2-1: config 0 descriptor?? [ 94.216749][ T20] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 94.397600][ T39] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 94.404844][ T39] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 94.412239][ T39] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 94.420803][ T39] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 94.466838][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 94.596789][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.607487][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.617028][ T20] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 94.625861][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.634205][ T20] usb 1-1: config 0 descriptor?? [ 94.677843][ T1098] usb 2-1: USB disconnect, device number 15 [ 95.127738][ T20] playstation 0003:054C:0CE6.0025: unknown main item tag 0x0 [ 95.134954][ T20] playstation 0003:054C:0CE6.0025: unknown main item tag 0x0 [ 95.142189][ T20] playstation 0003:054C:0CE6.0025: unknown main item tag 0x0 [ 95.149375][ T20] playstation 0003:054C:0CE6.0025: unknown main item tag 0x0 [ 95.156746][ T20] playstation 0003:054C:0CE6.0025: unknown main item tag 0x0 [ 95.169232][ T20] playstation 0003:054C:0CE6.0025: unknown main item tag 0x0 [ 95.176482][ T20] playstation 0003:054C:0CE6.0025: unknown main item tag 0x0 [ 95.196618][ T20] playstation 0003:054C:0CE6.0025: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 95.213565][ T2334] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 95.235639][ T2335] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.243096][ T2335] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.250239][ T2335] device bridge_slave_0 entered promiscuous mode [ 95.256923][ T2335] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.263742][ T2335] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.271332][ T2335] device bridge_slave_1 entered promiscuous mode [ 95.309405][ T2335] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.316251][ T2335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.323361][ T2335] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.330152][ T2335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.347448][ T388] Bluetooth: hci1: command 0x1009 tx timeout [ 95.353964][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.357262][ T20] playstation 0003:054C:0CE6.0025: Invalid byte count transferred, expected 20 got 0 [ 95.370694][ T20] playstation 0003:054C:0CE6.0025: Failed to retrieve DualSense pairing info: -22 [ 95.379865][ T20] playstation 0003:054C:0CE6.0025: Failed to get MAC address from DualSense [ 95.379942][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.388444][ T20] playstation 0003:054C:0CE6.0025: Failed to create dualsense. [ 95.403468][ T20] playstation: probe of 0003:054C:0CE6.0025 failed with error -22 [ 95.404370][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.418612][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.427531][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.435512][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.442390][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.453280][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.461218][ T1098] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 95.461423][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.475427][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.488349][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.497491][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.511663][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.527334][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.535172][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.542431][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.550399][ T2335] device veth0_vlan entered promiscuous mode [ 95.562419][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.574753][ T2335] device veth1_macvtap entered promiscuous mode [ 95.581163][ T513] usb 1-1: USB disconnect, device number 14 [ 95.585774][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.598219][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.826824][ T1098] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.837649][ T1098] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 95.848546][ T1098] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 95.859473][ T1098] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.868337][ T1098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.896837][ T2332] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.906767][ T39] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 95.967582][ T8] device bridge_slave_1 left promiscuous mode [ 95.973565][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.980768][ T8] device bridge_slave_0 left promiscuous mode [ 95.987094][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.994944][ T8] device veth1_macvtap left promiscuous mode [ 96.000795][ T8] device veth0_vlan left promiscuous mode [ 96.103648][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 96.103659][ T30] audit: type=1400 audit(1729513736.608:1063): avc: denied { name_bind } for pid=2345 comm="syz.0.794" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 96.131248][ T30] audit: type=1400 audit(1729513736.608:1064): avc: denied { node_bind } for pid=2345 comm="syz.0.794" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 96.157987][ T513] usb 4-1: USB disconnect, device number 19 [ 96.276802][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.287492][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.297043][ T39] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 96.305872][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.314519][ T39] usb 3-1: config 0 descriptor?? [ 96.692987][ T30] audit: type=1400 audit(1729513737.198:1065): avc: denied { setopt } for pid=2350 comm="syz.0.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.713001][ T2351] loop3: detected capacity change from 0 to 128 [ 96.787472][ T39] holtek 0003:1241:5015.0026: collection stack underflow [ 96.794326][ T39] holtek 0003:1241:5015.0026: item 0 1 0 12 parsing failed [ 96.801480][ T39] holtek 0003:1241:5015.0026: parse failed [ 96.807158][ T39] holtek: probe of 0003:1241:5015.0026 failed with error -22 [ 96.817861][ T2351] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.828350][ T2351] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038 (0x7fffffff) [ 96.990219][ T388] usb 3-1: USB disconnect, device number 10 [ 97.267364][ T1098] Bluetooth: hci2: command 0x1003 tx timeout [ 97.273244][ T47] Bluetooth: hci2: sending frame failed (-49) [ 97.614980][ T2372] loop0: detected capacity change from 0 to 256 [ 97.657430][ T2372] exfat: Deprecated parameter 'utf8' [ 97.667144][ T2372] exfat: Deprecated parameter 'namecase' [ 97.676796][ T2372] exfat: Deprecated parameter 'namecase' [ 97.682250][ T2372] exfat: Deprecated parameter 'utf8' [ 97.699176][ T2372] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 97.797924][ T30] audit: type=1400 audit(1729513738.308:1066): avc: denied { create } for pid=2373 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.841668][ T30] audit: type=1400 audit(1729513738.328:1067): avc: denied { connect } for pid=2373 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.867736][ T2368] loop3: detected capacity change from 0 to 40427 [ 97.877521][ T2377] loop0: detected capacity change from 0 to 2048 [ 97.883741][ T30] audit: type=1400 audit(1729513738.328:1068): avc: denied { write } for pid=2373 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.908433][ T2377] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 97.927250][ T2377] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 97.951183][ T30] audit: type=1400 audit(1729513738.458:1069): avc: denied { unlink } for pid=2376 comm="syz.0.805" name="#13" dev="tmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.974835][ T2368] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 97.995309][ T2368] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 98.011749][ T2368] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.049706][ T2368] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 98.056612][ T2368] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 98.088641][ T30] audit: type=1400 audit(1729513738.598:1070): avc: denied { create } for pid=2367 comm="syz.3.801" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 98.266827][ T60] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 98.353245][ T2397] loop3: detected capacity change from 0 to 256 [ 98.364771][ T30] audit: type=1326 audit(1729513738.868:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2398 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fac0b9ff9 code=0x7ffc0000 [ 98.390475][ T30] audit: type=1326 audit(1729513738.898:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2398 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5fac0b9ff9 code=0x7ffc0000 [ 98.393940][ T2397] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 98.630314][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.642201][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.651947][ T60] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 98.666446][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.678214][ T60] usb 1-1: config 0 descriptor?? [ 98.736810][ T1098] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 98.976782][ T1098] usb 4-1: Using ep0 maxpacket: 32 [ 99.096786][ T1098] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 99.104811][ T1098] usb 4-1: config 0 has no interface number 0 [ 99.178069][ T60] hid-steam 0003:28DE:1142.0027: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 99.196290][ T60] hid-steam 0003:28DE:1142.0028: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 99.257765][ T2431] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.264820][ T2431] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.267049][ T1098] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 99.272287][ T2431] device bridge_slave_0 entered promiscuous mode [ 99.280606][ T1098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.287440][ T60] hid-steam 0003:28DE:1142.0027: Steam wireless receiver connected [ 99.294802][ T1098] usb 4-1: Product: syz [ 99.306362][ T1098] usb 4-1: Manufacturer: syz [ 99.310763][ T1098] usb 4-1: SerialNumber: syz [ 99.315222][ T2431] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.315721][ T1098] usb 4-1: config 0 descriptor?? [ 99.326759][ T2431] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.333913][ T2431] device bridge_slave_1 entered promiscuous mode [ 99.356738][ T60] Bluetooth: hci2: command 0x1001 tx timeout [ 99.362603][ T676] Bluetooth: hci2: sending frame failed (-49) [ 99.368974][ T1098] smsc95xx v2.0.0 [ 99.390428][ T513] usb 1-1: USB disconnect, device number 15 [ 99.395090][ T2431] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.403017][ T2431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.410110][ T2431] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.410691][ T513] hid-steam 0003:28DE:1142.0027: Steam wireless receiver disconnected [ 99.416897][ T2431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.441266][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.449052][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.456123][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.464719][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.472911][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.479768][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.489881][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.497885][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.504705][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.517643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.526662][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.542570][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.553828][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.561728][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.569113][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.577358][ T2431] device veth0_vlan entered promiscuous mode [ 99.589001][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.599664][ T2431] device veth1_macvtap entered promiscuous mode [ 99.609078][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.618858][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.653900][ T2436] loop4: detected capacity change from 0 to 512 [ 99.682598][ T2436] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #2: comm syz.4.829: corrupted xattr block 255 [ 99.694604][ T2436] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 99.702642][ T2436] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,jqfmt=vfsv0,dioread_lock,init_itable,auto_da_alloc,grpjquota=.noload,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 99.725217][ T2436] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #2: comm syz.4.829: corrupted xattr block 255 [ 99.739449][ T2436] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 99.787349][ T310] device bridge_slave_1 left promiscuous mode [ 99.793266][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.800349][ T1098] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 99.810894][ T1098] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 99.826267][ T310] device bridge_slave_0 left promiscuous mode [ 99.838139][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.851529][ T310] device veth1_macvtap left promiscuous mode [ 99.857879][ T310] device veth0_vlan left promiscuous mode [ 99.931824][ T2449] syz.4.834[2449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.931894][ T2449] syz.4.834[2449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.961958][ T2449] Â: renamed from pim6reg1 [ 100.050192][ T2461] loop4: detected capacity change from 0 to 128 [ 100.127330][ T2474] loop0: detected capacity change from 0 to 2048 [ 100.147695][ T2474] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 100.153950][ T2474] EXT4-fs (loop0): mount failed [ 100.387087][ T60] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 100.516809][ T1098] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71 [ 100.527535][ T1098] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 100.536280][ T1098] usb 4-1: USB disconnect, device number 20 [ 100.627226][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 100.746799][ T60] usb 5-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 100.755684][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.764053][ T60] usb 5-1: config 0 descriptor?? [ 100.807217][ T60] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 101.026454][ T2482] loop3: detected capacity change from 0 to 256 [ 101.033626][ T60] usb 5-1: Detected FT232BM [ 101.119029][ T2482] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 101.184809][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 101.184823][ T30] audit: type=1400 audit(1729513741.688:1103): avc: denied { attach_queue } for pid=2485 comm="syz.3.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 101.236801][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 101.266418][ T2490] loop3: detected capacity change from 0 to 2048 [ 101.266774][ T60] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 101.279851][ T60] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 101.288922][ T60] usb 5-1: USB disconnect, device number 13 [ 101.295277][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 101.304510][ T60] ftdi_sio 5-1:0.0: device disconnected [ 101.377947][ T2490] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.394066][ T30] audit: type=1400 audit(1729513741.898:1104): avc: denied { map } for pid=2489 comm="syz.3.851" path="/59/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.416569][ T30] audit: type=1400 audit(1729513741.898:1105): avc: denied { execute } for pid=2489 comm="syz.3.851" path="/59/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.440173][ T30] audit: type=1400 audit(1729513741.898:1106): avc: denied { ioctl } for pid=2489 comm="syz.3.851" path="/59/file0/bus" dev="loop3" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.464849][ T388] Bluetooth: hci2: command 0x1009 tx timeout [ 101.504213][ T2496] serio: Serial port ptm0 [ 101.696907][ T2517] loop3: detected capacity change from 0 to 1024 [ 101.749995][ T2519] loop4: detected capacity change from 0 to 1024 [ 101.777350][ T2517] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 101.788540][ T2517] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 101.788856][ T2519] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 101.796471][ T2517] System zones: 0-1, 3-12 [ 101.824953][ T2517] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,bsddf,auto_da_alloc=0x0000000000000000,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue. Quota mode: none. [ 101.867835][ T2517] EXT4-fs error (device loop3): ext4_find_dest_de:2113: inode #2: block 16: comm syz.3.862: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 101.912067][ T30] audit: type=1400 audit(1729513742.418:1107): avc: denied { unmount } for pid=2527 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 101.998598][ T2540] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 102.005227][ T30] audit: type=1326 audit(1729513742.508:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facecd73ff9 code=0x7ffc0000 [ 102.056275][ T30] audit: type=1326 audit(1729513742.508:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facecd73ff9 code=0x7ffc0000 [ 102.080184][ T30] audit: type=1326 audit(1729513742.508:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facecd73ff9 code=0x7ffc0000 [ 102.120562][ T2548] loop4: detected capacity change from 0 to 2048 [ 102.127304][ T30] audit: type=1326 audit(1729513742.508:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facecd73ff9 code=0x7ffc0000 [ 102.150986][ T30] audit: type=1326 audit(1729513742.508:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facecd73ff9 code=0x7ffc0000 [ 102.184485][ T2548] loop4: p1 < > p4 [ 102.188838][ T2548] loop4: p4 size 8388608 extends beyond EOD, truncated [ 102.258346][ T101] loop4: p1 < > p4 [ 102.262545][ T101] loop4: p4 size 8388608 extends beyond EOD, truncated [ 102.419431][ T1580] udevd[1580]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 102.419431][ T1758] udevd[1758]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 102.440736][ T2557] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 102.915283][ T2575] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 102.968662][ T2585] loop0: detected capacity change from 0 to 2048 [ 103.007188][ T2585] loop0: p1 < > p4 [ 103.011362][ T2585] loop0: p4 size 8388608 extends beyond EOD, truncated [ 103.048965][ T2588] loop4: detected capacity change from 0 to 1024 [ 103.053791][ T2589] loop3: detected capacity change from 0 to 1024 [ 103.107999][ T2589] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 103.129167][ T2588] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 103.157490][ T2588] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 103.165482][ T2588] System zones: 0-1, 3-12 [ 103.170481][ T2588] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,bsddf,auto_da_alloc=0x0000000000000000,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue. Quota mode: none. [ 103.201725][ T2588] EXT4-fs error (device loop4): ext4_find_dest_de:2113: inode #2: block 16: comm syz.4.892: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 103.253534][ T1580] udevd[1580]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 103.254233][ T1758] udevd[1758]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 103.305802][ T2607] loop0: detected capacity change from 0 to 256 [ 103.378868][ T2607] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 103.686738][ T513] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 103.926740][ T513] usb 1-1: Using ep0 maxpacket: 8 [ 104.046856][ T513] usb 1-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 104.055797][ T513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.064071][ T513] usb 1-1: config 0 descriptor?? [ 104.127095][ T513] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 104.346763][ T513] usb 1-1: Detected FT232BM [ 104.566770][ T513] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 104.586852][ T513] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 104.594590][ T513] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 104.603104][ T513] usb 1-1: USB disconnect, device number 16 [ 104.609292][ T513] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 104.618569][ T513] ftdi_sio 1-1:0.0: device disconnected [ 105.074857][ T2624] loop3: detected capacity change from 0 to 2048 [ 105.092283][ T2629] loop0: detected capacity change from 0 to 256 [ 105.108308][ T2624] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.122176][ T2624] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.136825][ T2624] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 105.149197][ T2624] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.149197][ T2624] [ 105.158698][ T2624] EXT4-fs (loop3): Total free blocks count 0 [ 105.164255][ T2629] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 105.168267][ T2624] EXT4-fs (loop3): Free/Dirty block details [ 105.188142][ T2624] EXT4-fs (loop3): free_blocks=2415919104 [ 105.193728][ T2624] EXT4-fs (loop3): dirty_blocks=16 [ 105.198813][ T2624] EXT4-fs (loop3): Block reservation details [ 105.204657][ T2624] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 105.211618][ T2633] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 105.224027][ T2633] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.224027][ T2633] [ 105.320229][ T2642] loop3: detected capacity change from 0 to 2048 [ 105.330023][ T2638] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.336916][ T2638] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.344093][ T2638] device bridge_slave_0 entered promiscuous mode [ 105.350854][ T2638] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.357703][ T2638] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.364776][ T2638] device bridge_slave_1 entered promiscuous mode [ 105.392326][ T2642] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 105.398681][ T2642] EXT4-fs (loop3): mount failed [ 105.417989][ T2638] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.424818][ T2638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.431912][ T2638] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.438807][ T2638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.459241][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.466379][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.473877][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.481313][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.496439][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.504905][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.511792][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.519208][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.527255][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.534100][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.547470][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.556482][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.570854][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.578925][ T20] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 105.585089][ T2638] device veth0_vlan entered promiscuous mode [ 105.605203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.613298][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.620865][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.635326][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.644454][ T2638] device veth1_macvtap entered promiscuous mode [ 105.654070][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.664394][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.702593][ T2652] loop1: detected capacity change from 0 to 2048 [ 105.777395][ T2652] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 105.789878][ T2652] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 105.902869][ T2662] loop1: detected capacity change from 0 to 256 [ 105.917408][ T2662] exfat: Deprecated parameter 'utf8' [ 105.922531][ T2662] exfat: Deprecated parameter 'namecase' [ 105.928053][ T2662] exfat: Deprecated parameter 'namecase' [ 105.933432][ T2662] exfat: Deprecated parameter 'utf8' [ 105.948781][ T2662] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 105.966982][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.978500][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.988128][ T20] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 105.996944][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.005399][ T20] usb 1-1: config 0 descriptor?? [ 106.018714][ T2668] loop1: detected capacity change from 0 to 256 [ 106.049449][ T2668] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 106.097477][ T310] device bridge_slave_1 left promiscuous mode [ 106.103468][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.110553][ T310] device bridge_slave_0 left promiscuous mode [ 106.116472][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.124028][ T310] device veth1_macvtap left promiscuous mode [ 106.129845][ T310] device veth0_vlan left promiscuous mode [ 106.163047][ T2671] loop1: detected capacity change from 0 to 2048 [ 106.171667][ T2672] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 106.176742][ T39] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 106.208256][ T2671] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.223202][ T2671] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.238131][ T2671] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 106.250549][ T2671] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.250549][ T2671] [ 106.260067][ T2671] EXT4-fs (loop1): Total free blocks count 0 [ 106.265914][ T2671] EXT4-fs (loop1): Free/Dirty block details [ 106.271769][ T2671] EXT4-fs (loop1): free_blocks=2415919104 [ 106.277579][ T2671] EXT4-fs (loop1): dirty_blocks=16 [ 106.282516][ T2671] EXT4-fs (loop1): Block reservation details [ 106.289094][ T2671] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 106.298964][ T2671] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 106.311582][ T2671] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.311582][ T2671] [ 106.507518][ T20] smartjoyplus 0003:6666:8801.0029: unknown main item tag 0x0 [ 106.514826][ T20] smartjoyplus 0003:6666:8801.0029: ignoring exceeding usage max [ 106.522873][ T20] smartjoyplus 0003:6666:8801.0029: usage index exceeded [ 106.529732][ T20] smartjoyplus 0003:6666:8801.0029: item 0 0 2 0 parsing failed [ 106.537256][ T20] smartjoyplus 0003:6666:8801.0029: parse failed [ 106.543320][ T20] smartjoyplus: probe of 0003:6666:8801.0029 failed with error -22 [ 106.556808][ T39] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.567732][ T39] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.577383][ T39] usb 5-1: config 0 interface 0 has no altsetting 0 [ 106.583782][ T39] usb 5-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 106.592711][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.601083][ T39] usb 5-1: config 0 descriptor?? [ 106.712993][ T388] usb 1-1: USB disconnect, device number 17 [ 107.077818][ T39] wacom 0003:056A:00D7.002A: Unknown device_type for 'HID 056a:00d7'. Assuming pen. [ 107.087472][ T39] wacom 0003:056A:00D7.002A: hidraw0: USB HID v0.00 Device [HID 056a:00d7] on usb-dummy_hcd.4-1/input0 [ 107.098672][ T39] input: Wacom BambooPT 2FG Small Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D7.002A/input/input18 [ 107.111920][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 107.111932][ T30] audit: type=1400 audit(1729513747.618:1163): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=830 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.139936][ T30] audit: type=1400 audit(1729513747.618:1164): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=830 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.176974][ T30] audit: type=1400 audit(1729513747.688:1165): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=830 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.282214][ T39] usb 5-1: USB disconnect, device number 14 [ 107.795919][ T30] audit: type=1326 audit(1729513748.298:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 107.812887][ T2687] loop4: detected capacity change from 0 to 2048 [ 107.833809][ T30] audit: type=1326 audit(1729513748.298:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 107.857137][ T30] audit: type=1326 audit(1729513748.328:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 107.880718][ T30] audit: type=1326 audit(1729513748.328:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 107.903847][ T30] audit: type=1326 audit(1729513748.328:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 107.927479][ T2687] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 107.948166][ T2687] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 108.034957][ T30] audit: type=1400 audit(1729513748.538:1171): avc: denied { listen } for pid=2694 comm="syz.4.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.072059][ T2699] loop4: detected capacity change from 0 to 256 [ 108.099797][ T2699] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 108.163642][ T2701] loop4: detected capacity change from 0 to 256 [ 108.197375][ T2701] exfat: Deprecated parameter 'utf8' [ 108.202544][ T2701] exfat: Deprecated parameter 'namecase' [ 108.208011][ T2701] exfat: Deprecated parameter 'namecase' [ 108.213440][ T2701] exfat: Deprecated parameter 'utf8' [ 108.226755][ T26] Bluetooth: hci0: command 0x1003 tx timeout [ 108.232594][ T47] Bluetooth: hci0: sending frame failed (-49) [ 108.241120][ T2701] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 108.576741][ T26] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 108.836792][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 108.956822][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.967509][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.977045][ T26] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 108.985898][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.994604][ T26] usb 5-1: config 0 descriptor?? [ 109.478043][ T26] steelseries_srws1 0003:1038:1410.002B: unknown main item tag 0x0 [ 109.485796][ T26] steelseries_srws1 0003:1038:1410.002B: unknown main item tag 0x0 [ 109.493510][ T26] steelseries_srws1 0003:1038:1410.002B: unknown main item tag 0x0 [ 109.501232][ T26] steelseries_srws1 0003:1038:1410.002B: unknown main item tag 0x0 [ 109.508956][ T26] steelseries_srws1 0003:1038:1410.002B: unknown main item tag 0x0 [ 109.516672][ T26] steelseries_srws1 0003:1038:1410.002B: unknown main item tag 0x0 [ 109.524391][ T26] steelseries_srws1 0003:1038:1410.002B: unknown main item tag 0x0 [ 109.532207][ T26] steelseries_srws1 0003:1038:1410.002B: missing HID_OUTPUT_REPORT 0 [ 109.680359][ T388] usb 5-1: USB disconnect, device number 15 [ 109.826792][ T39] Bluetooth: hci1: command 0x1003 tx timeout [ 109.832631][ T47] Bluetooth: hci1: sending frame failed (-49) [ 110.201047][ T2710] loop4: detected capacity change from 0 to 2048 [ 110.248133][ T2710] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.262228][ T2710] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.277024][ T2710] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 110.289522][ T2710] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.289522][ T2710] [ 110.298980][ T2710] EXT4-fs (loop4): Total free blocks count 0 [ 110.304770][ T2710] EXT4-fs (loop4): Free/Dirty block details [ 110.310538][ T2710] EXT4-fs (loop4): free_blocks=2415919104 [ 110.316317][ T2710] EXT4-fs (loop4): dirty_blocks=16 [ 110.316466][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.321250][ T2710] EXT4-fs (loop4): Block reservation details [ 110.321261][ T2710] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 110.339658][ T26] Bluetooth: hci0: command 0x1001 tx timeout [ 110.345499][ T47] Bluetooth: hci0: sending frame failed (-49) [ 110.348595][ T2710] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 110.351407][ T2715] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.363596][ T2710] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.363596][ T2710] [ 110.370803][ T2715] device bridge_slave_0 entered promiscuous mode [ 110.387119][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.393953][ T2715] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.401198][ T2715] device bridge_slave_1 entered promiscuous mode [ 110.440812][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.447686][ T2715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.454748][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.461552][ T2715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.485691][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.492815][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.496885][ T513] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 110.508061][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.515334][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.524274][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.532233][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.539058][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.548036][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.556014][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.562843][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.575001][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.584215][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.597893][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.609380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.617645][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.624840][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.633201][ T2715] device veth0_vlan entered promiscuous mode [ 110.643222][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.652094][ T2715] device veth1_macvtap entered promiscuous mode [ 110.661326][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.670869][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.705839][ T2725] loop4: detected capacity change from 0 to 512 [ 110.735905][ T2725] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 110.767241][ T2725] EXT4-fs (loop4): dax option not supported [ 110.775862][ T30] audit: type=1400 audit(1729513751.278:1172): avc: denied { create } for pid=2724 comm="syz.4.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 110.866824][ T513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.877894][ T513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.887537][ T513] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 110.896351][ T513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.904820][ T513] usb 2-1: config 0 descriptor?? [ 111.377509][ T513] smartjoyplus 0003:6666:8801.002C: unknown main item tag 0x0 [ 111.384840][ T513] smartjoyplus 0003:6666:8801.002C: ignoring exceeding usage max [ 111.392917][ T513] smartjoyplus 0003:6666:8801.002C: usage index exceeded [ 111.399770][ T513] smartjoyplus 0003:6666:8801.002C: item 0 0 2 0 parsing failed [ 111.407360][ T513] smartjoyplus 0003:6666:8801.002C: parse failed [ 111.413485][ T513] smartjoyplus: probe of 0003:6666:8801.002C failed with error -22 [ 111.583313][ T513] usb 2-1: USB disconnect, device number 16 [ 111.806734][ T388] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 111.906879][ T26] Bluetooth: hci1: command 0x1001 tx timeout [ 111.912710][ T47] Bluetooth: hci1: sending frame failed (-49) [ 112.117744][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 112.117757][ T30] audit: type=1400 audit(1729513752.628:1187): avc: denied { unlink } for pid=2431 comm="syz-executor" name="file5" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.186786][ T388] usb 3-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.197827][ T388] usb 3-1: config 0 interface 0 altsetting 249 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.207492][ T388] usb 3-1: config 0 interface 0 has no altsetting 0 [ 112.213908][ T388] usb 3-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 112.222841][ T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.231510][ T388] usb 3-1: config 0 descriptor?? [ 112.386799][ T60] Bluetooth: hci0: command 0x1009 tx timeout [ 112.406747][ T1098] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 112.708625][ T388] wacom 0003:056A:00D7.002D: Unknown device_type for 'HID 056a:00d7'. Assuming pen. [ 112.718316][ T388] wacom 0003:056A:00D7.002D: hidraw0: USB HID v0.00 Device [HID 056a:00d7] on usb-dummy_hcd.2-1/input0 [ 112.729537][ T388] input: Wacom BambooPT 2FG Small Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D7.002D/input/input21 [ 112.766783][ T1098] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 112.775649][ T1098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.784080][ T1098] usb 2-1: config 0 descriptor?? [ 112.910582][ T388] usb 3-1: USB disconnect, device number 11 [ 113.444882][ T2750] overlayfs: failed to resolve './file0/../file0': -2 [ 113.666773][ T1098] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 113.676670][ T1098] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 113.687314][ T1098] asix: probe of 2-1:0.0 failed with error -71 [ 113.693826][ T1098] usb 2-1: USB disconnect, device number 17 [ 113.699595][ T20] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 113.986866][ T60] Bluetooth: hci1: command 0x1009 tx timeout [ 114.067264][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.077961][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.087494][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 114.096325][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.105141][ T20] usb 5-1: config 0 descriptor?? [ 114.426730][ T60] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 114.597653][ T20] logitech-djreceiver 0003:046D:C71B.002E: unknown main item tag 0x0 [ 114.605616][ T20] logitech-djreceiver 0003:046D:C71B.002E: item fetching failed at offset 2/7 [ 114.614381][ T20] logitech-djreceiver 0003:046D:C71B.002E: logi_dj_probe: parse failed [ 114.622453][ T20] logitech-djreceiver: probe of 0003:046D:C71B.002E failed with error -22 [ 114.786763][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.797521][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.802008][ T20] usb 5-1: USB disconnect, device number 16 [ 114.807618][ T60] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 114.821580][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.829906][ T60] usb 3-1: config 0 descriptor?? [ 115.037635][ T30] audit: type=1400 audit(1729513755.548:1188): avc: denied { relabelfrom } for pid=2765 comm="syz.1.956" name="" dev="pipefs" ino=28698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 115.307274][ T60] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 115.317098][ T60] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002F/input/input24 [ 115.399426][ T60] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 115.516619][ T60] usb 3-1: USB disconnect, device number 12 [ 116.525669][ T2777] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.532531][ T2777] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.539692][ T2777] device bridge_slave_0 entered promiscuous mode [ 116.546294][ T2777] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.553252][ T2777] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.560364][ T2777] device bridge_slave_1 entered promiscuous mode [ 116.596186][ T2777] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.603039][ T2777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.610139][ T2777] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.616922][ T2777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.638907][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.646266][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.653362][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.663887][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.671837][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.678660][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.689561][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.697558][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.704372][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.716112][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.726444][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.739372][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.752301][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.760097][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.767323][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.775230][ T2777] device veth0_vlan entered promiscuous mode [ 116.786630][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.795669][ T2777] device veth1_macvtap entered promiscuous mode [ 116.804810][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.814582][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.853463][ T2782] loop3: detected capacity change from 0 to 2048 [ 116.863818][ T2787] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 116.909283][ T2782] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 116.938041][ T8] device bridge_slave_1 left promiscuous mode [ 116.939122][ T2782] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 116.944073][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.971867][ T8] device bridge_slave_0 left promiscuous mode [ 116.978262][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.986946][ T8] device veth1_macvtap left promiscuous mode [ 116.992816][ T8] device veth0_vlan left promiscuous mode [ 117.126749][ T26] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 117.134176][ T388] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 117.306729][ T1098] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 117.386781][ T388] usb 5-1: Using ep0 maxpacket: 8 [ 117.486817][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.496741][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.507307][ T388] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 117.515436][ T388] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 117.525549][ T388] usb 5-1: config 135 has no interface number 0 [ 117.531599][ T388] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 117.542702][ T388] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 117.555906][ T388] usb 5-1: config 135 interface 230 has no altsetting 0 [ 117.576842][ T26] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 117.585682][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 117.593601][ T26] usb 2-1: SerialNumber: syz [ 117.686826][ T1098] usb 4-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.697812][ T1098] usb 4-1: config 0 interface 0 altsetting 249 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.707516][ T1098] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.713936][ T1098] usb 4-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 117.722786][ T1098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.726795][ T388] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 117.731350][ T1098] usb 4-1: config 0 descriptor?? [ 117.743034][ T388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.752312][ T388] usb 5-1: Product: syz [ 117.756333][ T388] usb 5-1: Manufacturer: syz [ 117.760719][ T388] usb 5-1: SerialNumber: syz [ 117.887165][ T26] usb 2-1: 0:2 : does not exist [ 117.928086][ T26] usb 2-1: USB disconnect, device number 18 [ 118.016784][ T388] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 118.023105][ T388] usb 5-1: No valid video chain found. [ 118.218248][ T1098] wacom 0003:056A:00D7.0030: Unknown device_type for 'HID 056a:00d7'. Assuming pen. [ 118.227050][ T26] usb 5-1: USB disconnect, device number 17 [ 118.238546][ T1098] wacom 0003:056A:00D7.0030: hidraw0: USB HID v0.00 Device [HID 056a:00d7] on usb-dummy_hcd.3-1/input0 [ 118.254491][ T1098] input: Wacom BambooPT 2FG Small Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D7.0030/input/input25 [ 118.273706][ T2799] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.280649][ T2799] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.287685][ T2799] device bridge_slave_0 entered promiscuous mode [ 118.294376][ T2799] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.301390][ T2799] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.308530][ T2799] device bridge_slave_1 entered promiscuous mode [ 118.358841][ T2799] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.365673][ T2799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.372782][ T2799] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.379573][ T2799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.410776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.419344][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.426556][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.433697][ T513] usb 4-1: USB disconnect, device number 21 [ 118.441568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.450482][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.457544][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.467290][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.475518][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.482378][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.500539][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.509912][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.517917][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.534247][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.542657][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.555886][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.563538][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.571257][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.578549][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.588517][ T2799] device veth0_vlan entered promiscuous mode [ 118.598042][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.605949][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.615062][ T2799] device veth1_macvtap entered promiscuous mode [ 118.625577][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.633065][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.641146][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.650254][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.658327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.778407][ T30] audit: type=1326 audit(1729513759.288:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2805 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 118.823881][ T30] audit: type=1326 audit(1729513759.308:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2805 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 118.847288][ T30] audit: type=1326 audit(1729513759.308:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2805 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 118.870734][ T513] Bluetooth: hci0: command 0x1003 tx timeout [ 118.876594][ T676] Bluetooth: hci0: sending frame failed (-49) [ 118.877007][ T30] audit: type=1326 audit(1729513759.308:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2805 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 118.906481][ T30] audit: type=1326 audit(1729513759.308:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2805 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 118.933870][ T30] audit: type=1326 audit(1729513759.308:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2805 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 118.956976][ T26] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 118.974262][ T30] audit: type=1326 audit(1729513759.308:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2805 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 118.997940][ T30] audit: type=1326 audit(1729513759.328:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2805 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 119.024059][ T30] audit: type=1326 audit(1729513759.328:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2805 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 119.050480][ T30] audit: type=1326 audit(1729513759.328:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2805 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 119.087328][ T8] device bridge_slave_1 left promiscuous mode [ 119.093272][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.110528][ T8] device bridge_slave_0 left promiscuous mode [ 119.116587][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.143271][ T8] device veth1_macvtap left promiscuous mode [ 119.149688][ T8] device veth0_vlan left promiscuous mode [ 119.219633][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 119.347219][ T26] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 119.355035][ T26] usb 1-1: config 0 has no interface number 0 [ 119.361011][ T26] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 119.370419][ T26] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 119.456737][ T1098] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 119.496776][ T26] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 119.505637][ T26] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 119.513544][ T26] usb 1-1: Product: syz [ 119.526732][ T60] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 119.534142][ T26] usb 1-1: SerialNumber: syz [ 119.542827][ T26] usb 1-1: config 0 descriptor?? [ 119.550884][ T2830] loop1: detected capacity change from 0 to 131072 [ 119.628438][ T2830] F2FS-fs (loop1): invalid crc value [ 119.634898][ T2830] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 119.654714][ T2830] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 119.676730][ T2830] syz.1.984 (pid 2830) is setting an IV_INO_LBLK_32 encryption policy. This should only be used if there are certain hardware limitations. [ 119.816799][ T1098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.827705][ T1098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.837297][ T1098] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 119.838580][ T26] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 119.846078][ T1098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.846724][ T1098] usb 4-1: config 0 descriptor?? [ 119.854883][ T26] usb 1-1: USB disconnect, device number 18 [ 119.946765][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.957498][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.967104][ T60] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.975839][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.984143][ T60] usb 5-1: config 0 descriptor?? [ 120.337933][ T1098] logitech-djreceiver 0003:046D:C71B.0031: unknown main item tag 0x0 [ 120.345913][ T1098] logitech-djreceiver 0003:046D:C71B.0031: item fetching failed at offset 2/7 [ 120.354656][ T1098] logitech-djreceiver 0003:046D:C71B.0031: logi_dj_probe: parse failed [ 120.363203][ T1098] logitech-djreceiver: probe of 0003:046D:C71B.0031 failed with error -22 [ 120.467655][ T60] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 120.476835][ T60] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0032/input/input28 [ 120.543952][ T369] usb 4-1: USB disconnect, device number 22 [ 120.559902][ T60] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 120.586739][ T513] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 120.626757][ T26] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 120.671265][ T1098] usb 5-1: USB disconnect, device number 18 [ 120.866901][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 120.946879][ T60] Bluetooth: hci0: command 0x1001 tx timeout [ 120.952803][ T676] Bluetooth: hci0: sending frame failed (-49) [ 120.966873][ T513] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.976961][ T513] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.986777][ T26] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 120.994944][ T26] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 121.005010][ T26] usb 2-1: config 135 has no interface number 0 [ 121.011075][ T26] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 121.022113][ T26] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 121.035472][ T26] usb 2-1: config 135 interface 230 has no altsetting 0 [ 121.066823][ T513] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.075719][ T513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.083506][ T513] usb 1-1: SerialNumber: syz [ 121.196789][ T26] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 121.205647][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.213631][ T26] usb 2-1: Product: syz [ 121.217693][ T26] usb 2-1: Manufacturer: syz [ 121.221997][ T26] usb 2-1: SerialNumber: syz [ 121.367327][ T513] usb 1-1: 0:2 : does not exist [ 121.376810][ T1098] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 121.408535][ T513] usb 1-1: USB disconnect, device number 19 [ 121.496811][ T26] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 121.502986][ T26] usb 2-1: No valid video chain found. [ 121.699505][ T26] usb 2-1: USB disconnect, device number 19 [ 121.736849][ T1098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.748044][ T1098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.757638][ T1098] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 121.766415][ T1098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.775029][ T1098] usb 4-1: config 0 descriptor?? [ 122.126729][ T369] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 122.256910][ T1098] hid (null): bogus close delimiter [ 122.486772][ T369] usb 1-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.497639][ T369] usb 1-1: config 0 interface 0 altsetting 249 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.507374][ T369] usb 1-1: config 0 interface 0 has no altsetting 0 [ 122.513762][ T369] usb 1-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 122.522624][ T369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.531262][ T369] usb 1-1: config 0 descriptor?? [ 122.716913][ T1098] usb 4-1: string descriptor 0 read error: -71 [ 122.736799][ T1098] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #200: -71 [ 122.745410][ T1098] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71 [ 122.753297][ T1098] uclogic 0003:256C:006D.0033: failed probing pen v2 parameters: -71 [ 122.761188][ T1098] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 122.768496][ T1098] uclogic: probe of 0003:256C:006D.0033 failed with error -71 [ 122.778140][ T1098] usb 4-1: USB disconnect, device number 23 [ 123.018034][ T369] wacom 0003:056A:00D7.0034: Unknown device_type for 'HID 056a:00d7'. Assuming pen. [ 123.027610][ T60] Bluetooth: hci0: command 0x1009 tx timeout [ 123.033697][ T369] wacom 0003:056A:00D7.0034: hidraw0: USB HID v0.00 Device [HID 056a:00d7] on usb-dummy_hcd.0-1/input0 [ 123.045005][ T369] input: Wacom BambooPT 2FG Small Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D7.0034/input/input29 [ 123.216352][ T2866] loop4: detected capacity change from 0 to 128 [ 123.228984][ T60] usb 1-1: USB disconnect, device number 20 [ 123.298218][ T2866] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.316933][ T2866] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038 (0x7fffffff) [ 123.399758][ T2880] loop1: detected capacity change from 0 to 40427 [ 123.459821][ T2880] F2FS-fs (loop1): invalid crc value [ 123.469219][ T2880] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.489041][ T2884] loop4: detected capacity change from 0 to 8192 [ 123.500719][ T2880] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 123.508937][ T2884] loop4: p1 p2 p3 [ 123.527366][ T2884] syz.4.999[2884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.527431][ T2884] syz.4.999[2884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.599613][ T1580] udevd[1580]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 123.599882][ T2791] udevd[2791]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 123.630855][ T1758] udevd[1758]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 123.997772][ T2892] loop0: detected capacity change from 0 to 40427 [ 124.103966][ T2892] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 124.104697][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 124.104708][ T30] audit: type=1400 audit(1729514020.605:1228): avc: denied { unmount } for pid=2777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 124.117596][ T2892] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 124.157466][ T2894] loop1: detected capacity change from 0 to 40427 [ 124.169161][ T2892] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.178083][ T2902] tmpfs: Unknown parameter 'volatile' [ 124.183337][ T30] audit: type=1400 audit(1729514020.685:1229): avc: denied { remount } for pid=2899 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.202850][ T2892] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 124.202874][ T2892] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.224976][ T2892] attempt to access beyond end of device [ 124.224976][ T2892] loop0: rw=2049, want=45112, limit=40427 [ 124.266859][ T2894] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 124.273291][ T2894] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 124.327635][ T2894] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.362717][ T30] audit: type=1400 audit(1729514020.865:1230): avc: denied { mounton } for pid=2910 comm="syz.3.1008" path="/proc/42/task" dev="proc" ino=29874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 124.423069][ T30] audit: type=1326 audit(1729514020.925:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2913 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7e8b3ff9 code=0x7ffc0000 [ 124.440665][ T2890] loop4: detected capacity change from 0 to 131072 [ 124.452724][ T2894] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 124.459749][ T30] audit: type=1326 audit(1729514020.955:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2913 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fad7e8b3ff9 code=0x7ffc0000 [ 124.465355][ T2894] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.508278][ T2916] tipc: Enabling of bearer rejected, failed to enable media [ 124.537288][ T30] audit: type=1326 audit(1729514020.955:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2913 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7e8b3ff9 code=0x7ffc0000 [ 124.562925][ T2890] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.591560][ T2638] attempt to access beyond end of device [ 124.591560][ T2638] loop1: rw=2049, want=45112, limit=40427 [ 124.612014][ T2890] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 124.722748][ T2935] tmpfs: Unknown parameter 'volatile' [ 124.850134][ T2949] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.861005][ T30] audit: type=1400 audit(1729514021.355:1234): avc: denied { mounton } for pid=2945 comm="syz.1.1012" path="/36/file0" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.886080][ T2949] FAT-fs (loop3): unable to read boot sector [ 124.919311][ T2951] tipc: Enabling of bearer rejected, failed to enable media [ 124.928369][ T30] audit: type=1326 audit(1729514021.435:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2952 comm="syz.1.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 124.986774][ T30] audit: type=1326 audit(1729514021.435:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2952 comm="syz.1.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 125.052878][ T30] audit: type=1326 audit(1729514021.465:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2952 comm="syz.1.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fad4849bff9 code=0x7ffc0000 [ 125.150563][ T2964] bridge0: port 3(vlan2) entered blocking state [ 125.152534][ T2944] loop3: detected capacity change from 0 to 40427 [ 125.173206][ T2964] bridge0: port 3(vlan2) entered disabled state [ 125.201447][ T2944] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 125.210038][ T2944] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 125.224604][ T2971] tmpfs: Unknown parameter 'volatile' [ 125.240219][ T2944] F2FS-fs (loop3): Found nat_bits in checkpoint [ 125.315195][ T2944] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 125.322157][ T2944] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 125.360892][ T2944] attempt to access beyond end of device [ 125.360892][ T2944] loop3: rw=2049, want=45112, limit=40427 [ 125.390964][ T2984] tipc: Enabling of bearer rejected, failed to enable media [ 125.452922][ T2978] loop0: detected capacity change from 0 to 40427 [ 125.521729][ T2978] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 125.531199][ T2978] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 125.568417][ T2978] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.593770][ T2990] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.621004][ T2990] FAT-fs (loop7): unable to read boot sector [ 125.635626][ T2978] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 125.653288][ T2978] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.702541][ T2992] loop3: detected capacity change from 0 to 8192 [ 125.714826][ T2799] attempt to access beyond end of device [ 125.714826][ T2799] loop0: rw=2049, want=45112, limit=40427 [ 125.757071][ T2992] loop3: p1 p2 p3 [ 125.781303][ T2992] syz.3.1038[2992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.781372][ T2992] syz.3.1038[2992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.911612][ T1758] udevd[1758]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 125.920222][ T1580] udevd[1580]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 125.926632][ T2790] udevd[2790]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 126.056038][ T2986] loop1: detected capacity change from 0 to 131072 [ 126.083630][ T2986] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.106151][ T3009] input: syz1 as /devices/virtual/input/input32 [ 126.127556][ T2986] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.156430][ T3016] bridge0: port 3(vlan2) entered blocking state [ 126.159109][ T3013] tmpfs: Unknown parameter 'volatile' [ 126.173766][ T3016] bridge0: port 3(vlan2) entered disabled state [ 126.505538][ T3045] capability: warning: `syz.1.1059' uses deprecated v2 capabilities in a way that may be insecure [ 126.598303][ T3052] xt_hashlimit: size too large, truncated to 1048576 [ 126.614547][ T3030] loop3: detected capacity change from 0 to 40427 [ 126.638494][ T3030] F2FS-fs (loop3): invalid crc value [ 126.653383][ T3031] loop4: detected capacity change from 0 to 40427 [ 126.665006][ T3030] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.720459][ T3030] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 126.737902][ T3031] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 126.758817][ T3031] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 126.792480][ T3071] loop0: detected capacity change from 0 to 512 [ 126.800370][ T3031] F2FS-fs (loop4): Found nat_bits in checkpoint [ 126.866961][ T3031] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 126.880579][ T3071] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 126.880732][ T3031] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 126.920132][ T3071] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.931554][ T3031] attempt to access beyond end of device [ 126.931554][ T3031] loop4: rw=2049, want=45112, limit=40427 [ 126.944031][ T3071] EXT4-fs (loop0): 1 truncate cleaned up [ 126.949643][ T3071] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,minixdf,barrier=0x0000000000000003,usrjquota=,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 127.142725][ T3090] loop1: detected capacity change from 0 to 512 [ 127.157861][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.164705][ T3081] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.172056][ T3081] device bridge_slave_0 entered promiscuous mode [ 127.179854][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.186887][ T3081] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.194538][ T3081] device bridge_slave_1 entered promiscuous mode [ 127.206943][ T3090] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.264689][ T3090] EXT4-fs (loop1): 1 truncate cleaned up [ 127.280927][ T3090] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,minixdf,barrier=0x0000000000000003,usrjquota=,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 127.437601][ T3107] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 127.485175][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.485883][ T3113] xt_hashlimit: size too large, truncated to 1048576 [ 127.498449][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.514466][ T3115] input: syz1 as /devices/virtual/input/input33 [ 127.531024][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.555000][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.577042][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.583933][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.601422][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.617101][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.635387][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.642262][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.664065][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.694534][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.702828][ T3101] loop3: detected capacity change from 0 to 40427 [ 127.710950][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.730343][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.743103][ T3081] device veth0_vlan entered promiscuous mode [ 127.753061][ T3101] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 127.759784][ T3101] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 127.768634][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.777433][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.784950][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.801240][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.809902][ T3101] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.824336][ T3081] device veth1_macvtap entered promiscuous mode [ 127.842755][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.857154][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.865324][ T3101] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 127.874478][ T3124] loop4: detected capacity change from 0 to 512 [ 127.874862][ T3101] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.921824][ T3124] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.943369][ T2777] attempt to access beyond end of device [ 127.943369][ T2777] loop3: rw=2049, want=45112, limit=40427 [ 127.959054][ T3124] EXT4-fs (loop4): 1 truncate cleaned up [ 127.964518][ T3124] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,minixdf,barrier=0x0000000000000003,usrjquota=,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 128.092762][ T3150] loop1: detected capacity change from 0 to 128 [ 128.107357][ T10] device bridge_slave_1 left promiscuous mode [ 128.114139][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.122212][ T10] device bridge_slave_0 left promiscuous mode [ 128.128235][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.135849][ T10] device veth1_macvtap left promiscuous mode [ 128.148051][ T10] device veth0_vlan left promiscuous mode [ 128.154833][ T3150] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.165839][ T3150] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038 (0x7fffffff) [ 128.214833][ T3160] input: syz1 as /devices/virtual/input/input34 [ 128.308171][ T3170] overlayfs: failed to resolve './file0': -2 [ 128.326799][ T513] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 128.391221][ T3190] input: syz1 as /devices/virtual/input/input35 [ 128.537679][ T3202] loop4: detected capacity change from 0 to 512 [ 128.549927][ T3202] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.561428][ T3202] EXT4-fs (loop4): 1 truncate cleaned up [ 128.566889][ T513] usb 3-1: Using ep0 maxpacket: 16 [ 128.572085][ T3202] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 128.609002][ T3205] overlayfs: failed to resolve './file0': -2 [ 128.686780][ T513] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 128.695539][ T513] usb 3-1: config 1 has an invalid descriptor of length 239, skipping remainder of the config [ 128.705643][ T513] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 128.715066][ T513] usb 3-1: config 1 has no interface number 1 [ 128.720991][ T513] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 128.733682][ T513] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 65, changing to 10 [ 128.744562][ T513] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17232, setting to 1024 [ 128.906849][ T513] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.915742][ T513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.923528][ T513] usb 3-1: Product: syz [ 128.927513][ T513] usb 3-1: Manufacturer: syz [ 128.931923][ T513] usb 3-1: SerialNumber: syz [ 129.135667][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 129.135680][ T30] audit: type=1400 audit(1729514025.635:1306): avc: denied { name_bind } for pid=3219 comm="syz.3.1133" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 129.170993][ T3226] xt_hashlimit: size too large, truncated to 1048576 [ 129.183328][ T3221] xt_bpf: check failed: parse error [ 129.268398][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 129.286116][ T513] usb 3-1: USB disconnect, device number 13 [ 129.506841][ T1098] Bluetooth: hci0: command 0x1003 tx timeout [ 129.512706][ T47] Bluetooth: hci0: sending frame failed (-49) [ 129.956739][ T513] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 130.316827][ T513] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 130.324775][ T513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 130.335699][ T513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 130.346600][ T513] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.359409][ T513] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.368228][ T513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.376516][ T513] usb 4-1: config 0 descriptor?? [ 130.396810][ T3243] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.548678][ T3259] loop4: detected capacity change from 0 to 2048 [ 130.570782][ T30] audit: type=1326 audit(1729514027.075:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3262 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a54d3ff9 code=0x7ffc0000 [ 130.594201][ T30] audit: type=1326 audit(1729514027.075:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3262 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a54d3ff9 code=0x7ffc0000 [ 130.618831][ T30] audit: type=1326 audit(1729514027.085:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3262 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f89a54d3ff9 code=0x7ffc0000 [ 130.642579][ T30] audit: type=1326 audit(1729514027.085:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3262 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a54d3ff9 code=0x7ffc0000 [ 130.666980][ T3259] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.680085][ T30] audit: type=1326 audit(1729514027.095:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3262 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a54d3ff9 code=0x7ffc0000 [ 130.847546][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.854766][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.861990][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.869197][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.876359][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.883599][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.890789][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.898011][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.905177][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.912405][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.919624][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.926799][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.934085][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.941292][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.948510][ T513] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 130.955888][ T513] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 130.964746][ T513] plantronics 0003:047F:FFFF.0035: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 131.117382][ T513] usb 4-1: USB disconnect, device number 24 [ 131.346794][ T39] Bluetooth: hci1: command 0x1003 tx timeout [ 131.352671][ T47] Bluetooth: hci1: sending frame failed (-49) [ 131.586744][ T39] Bluetooth: hci0: command 0x1001 tx timeout [ 131.592609][ T47] Bluetooth: hci0: sending frame failed (-49) [ 133.426794][ T26] Bluetooth: hci1: command 0x1001 tx timeout [ 133.432726][ T47] Bluetooth: hci1: sending frame failed (-49) [ 133.666718][ T26] Bluetooth: hci0: command 0x1009 tx timeout [ 135.506873][ T369] Bluetooth: hci1: command 0x1009 tx timeout [ 137.748788][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.755641][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.763548][ T3292] device bridge_slave_0 entered promiscuous mode [ 137.772737][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.779625][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.786949][ T3292] device bridge_slave_1 entered promiscuous mode [ 137.900379][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.907252][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.914365][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.921149][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.928527][ T30] audit: type=1326 audit(1729514034.435:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3316 comm="syz.2.1169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89a54d3ff9 code=0x0 [ 137.951482][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.961142][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.966921][ T369] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 137.969447][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.992156][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.005237][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.017985][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.029598][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.037424][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.044592][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.054581][ T3292] device veth0_vlan entered promiscuous mode [ 138.064563][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.073553][ T3292] device veth1_macvtap entered promiscuous mode [ 138.083041][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.095524][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.157564][ T310] device bridge_slave_1 left promiscuous mode [ 138.163562][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.170995][ T310] device bridge_slave_0 left promiscuous mode [ 138.177033][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.190632][ T310] device veth1_macvtap left promiscuous mode [ 138.200512][ T3333] loop0: detected capacity change from 0 to 512 [ 138.207473][ T310] device veth0_vlan left promiscuous mode [ 138.216752][ T369] usb 4-1: Using ep0 maxpacket: 16 [ 138.247454][ T3333] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 138.259044][ T3333] EXT4-fs (loop0): 1 truncate cleaned up [ 138.264548][ T3333] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 138.336820][ T369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.351082][ T369] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.363814][ T369] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.373692][ T369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.392557][ T369] usb 4-1: config 0 descriptor?? [ 138.459172][ T3351] loop4: detected capacity change from 0 to 512 [ 138.469472][ T30] audit: type=1326 audit(1729514034.975:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 138.510738][ T3356] binder: 3355:3356 ioctl c0306201 0 returned -14 [ 138.517266][ T30] audit: type=1326 audit(1729514035.005:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 138.541790][ T3356] binder: 3355:3356 ioctl c0306201 20000480 returned -22 [ 138.542292][ T3351] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.1181: inline data xattr refers to an external xattr inode [ 138.560717][ T30] audit: type=1326 audit(1729514035.005:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 138.581145][ T3351] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1181: couldn't read orphan inode 12 (err -117) [ 138.588913][ T30] audit: type=1326 audit(1729514035.005:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 138.621720][ T30] audit: type=1326 audit(1729514035.005:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 138.624858][ T3351] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.677746][ T30] audit: type=1326 audit(1729514035.005:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3354 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8f5c17e0e5 code=0x7ffc0000 [ 138.701166][ T30] audit: type=1400 audit(1729514035.015:1319): avc: denied { set_context_mgr } for pid=3355 comm="syz.0.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 138.722620][ T3351] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1181: Directory hole found for htree leaf block 0 [ 138.735699][ T30] audit: type=1326 audit(1729514035.165:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3354 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 138.766930][ T30] audit: type=1400 audit(1729514035.275:1321): avc: denied { map } for pid=3362 comm="syz.0.1187" path="socket:[32119]" dev="sockfs" ino=32119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.805038][ T3381] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.812705][ T3381] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.820003][ T3381] device bridge_slave_0 entered promiscuous mode [ 139.829072][ T3381] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.829088][ T3381] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.829581][ T3381] device bridge_slave_1 entered promiscuous mode [ 139.857915][ T3384] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 139.895005][ T3381] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.901850][ T3381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.908937][ T3381] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.915722][ T3381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.937952][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.945275][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.952342][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.961548][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.969492][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.976317][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.987824][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.995792][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.002629][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.017388][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.026467][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.040417][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.053025][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.056836][ T369] usbhid 4-1:0.0: can't add hid device: -71 [ 140.060997][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.066779][ T369] usbhid: probe of 4-1:0.0 failed with error -71 [ 140.074495][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.083475][ T369] usb 4-1: USB disconnect, device number 25 [ 140.101456][ T3381] device veth0_vlan entered promiscuous mode [ 140.111689][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.120968][ T3381] device veth1_macvtap entered promiscuous mode [ 140.132318][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.142048][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.277372][ T310] device bridge_slave_1 left promiscuous mode [ 140.283316][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.290899][ T310] device bridge_slave_0 left promiscuous mode [ 140.296890][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.304420][ T310] device veth1_macvtap left promiscuous mode [ 140.310494][ T310] device veth0_vlan left promiscuous mode [ 140.532274][ T3392] loop1: detected capacity change from 0 to 2048 [ 140.561719][ T3401] loop3: detected capacity change from 0 to 512 [ 140.598124][ T3392] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.625238][ T3401] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.644308][ T3401] EXT4-fs (loop3): 1 truncate cleaned up [ 140.650773][ T3401] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 140.976790][ T308] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 141.906868][ T388] Bluetooth: hci0: command 0x1003 tx timeout [ 141.912717][ T1239] Bluetooth: hci0: sending frame failed (-49) [ 142.094744][ T3437] binder: 3436:3437 ioctl c0306201 0 returned -14 [ 142.101477][ T3437] binder: 3436:3437 ioctl c0306201 20000480 returned -22 [ 142.126330][ T3443] loop0: detected capacity change from 0 to 512 [ 142.137055][ T3443] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.161325][ T3443] EXT4-fs (loop0): 1 truncate cleaned up [ 142.167366][ T3443] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 142.830373][ T3476] binder: 3475:3476 ioctl c0306201 0 returned -14 [ 142.838902][ T3476] binder: 3475:3476 ioctl c0306201 20000480 returned -22 [ 143.019594][ T30] kauditd_printk_skb: 1062 callbacks suppressed [ 143.019607][ T30] audit: type=1326 audit(1729514039.525:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f61f7adbff9 code=0x7ffc0000 [ 143.066743][ T3501] loop1: detected capacity change from 0 to 40427 [ 143.137055][ T3501] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 143.144698][ T3501] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 143.153409][ T3501] F2FS-fs (loop1): invalid crc value [ 143.159788][ T3501] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 143.179897][ T3501] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 143.187215][ T3501] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.556834][ T308] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 143.589619][ T3530] loop3: detected capacity change from 0 to 512 [ 143.650668][ T3530] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.663646][ T3530] EXT4-fs (loop3): 1 truncate cleaned up [ 143.669358][ T3530] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 143.725020][ T3541] loop3: detected capacity change from 0 to 256 [ 143.732249][ T3541] exfat: Deprecated parameter 'utf8' [ 143.750389][ T3541] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 143.775122][ T30] audit: type=1400 audit(1729514040.275:2385): avc: denied { execute } for pid=3540 comm="syz.3.1259" path="/73/file1/cpuacct.usage_sys" dev="loop3" ino=1048716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.826940][ T308] usb 2-1: Using ep0 maxpacket: 8 [ 143.850679][ T30] audit: type=1326 audit(1729514040.355:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.3.1266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad7e8b3ff9 code=0x0 [ 143.912191][ T30] audit: type=1400 audit(1729514040.415:2387): avc: denied { append } for pid=3563 comm="syz.0.1268" name="001" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 143.946767][ T308] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 143.954827][ T308] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 143.963181][ T308] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 143.971949][ T308] usb 2-1: config 250 has no interface number 0 [ 143.978292][ T308] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 143.989972][ T308] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 143.996882][ T388] Bluetooth: hci0: command 0x1001 tx timeout [ 144.000221][ T308] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.006102][ T1239] Bluetooth: hci0: sending frame failed (-49) [ 144.016107][ T308] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 144.032072][ T308] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 144.045370][ T308] usb 2-1: config 250 interface 228 has no altsetting 0 [ 144.166794][ T308] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 144.175678][ T308] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 144.183923][ T308] usb 2-1: Product: syz [ 144.187925][ T308] usb 2-1: SerialNumber: syz [ 144.227958][ T308] hub 2-1:250.228: bad descriptor, ignoring hub [ 144.234025][ T308] hub: probe of 2-1:250.228 failed with error -5 [ 144.437559][ T308] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 21 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 144.647849][ T30] audit: type=1400 audit(1729514041.155:2388): avc: denied { read write } for pid=3512 comm="syz.1.1247" name="lp0" dev="devtmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 144.671325][ T30] audit: type=1400 audit(1729514041.155:2389): avc: denied { open } for pid=3512 comm="syz.1.1247" path="/dev/usb/lp0" dev="devtmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 144.996717][ T1098] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 145.056955][ T3513] usb 2-1: reset high-speed USB device number 21 using dummy_hcd [ 145.236715][ T1098] usb 1-1: Using ep0 maxpacket: 16 [ 145.516822][ T1098] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 145.525697][ T1098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.533536][ T1098] usb 1-1: Product: syz [ 145.537485][ T1098] usb 1-1: Manufacturer: syz [ 145.541901][ T1098] usb 1-1: SerialNumber: syz [ 145.546875][ T1098] r8152-cfgselector 1-1: config 0 descriptor?? [ 145.676924][ T3513] usb 2-1: failed to restore interface 228 altsetting 255 (error=-71) [ 145.692519][ T388] usb 2-1: USB disconnect, device number 21 [ 145.699567][ T388] usblp0: removed [ 145.704547][ T30] audit: type=1400 audit(1729514042.215:2390): avc: denied { mount } for pid=3601 comm="syz.2.1283" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 145.737328][ T30] audit: type=1326 audit(1729514042.235:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7e8b3ff9 code=0x7ffc0000 [ 145.760716][ T30] audit: type=1400 audit(1729514042.235:2392): avc: denied { mounton } for pid=3601 comm="syz.2.1283" path="/47/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 145.783204][ T30] audit: type=1326 audit(1729514042.235:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7e8b3ff9 code=0x7ffc0000 [ 146.046755][ T1098] r8152-cfgselector 1-1: Unknown version 0x0000 [ 146.052876][ T1098] r8152-cfgselector 1-1: bad CDC descriptors [ 146.066946][ T388] Bluetooth: hci0: command 0x1009 tx timeout [ 146.076743][ T1098] r8152-cfgselector 1-1: Unknown version 0x0000 [ 146.083553][ T1098] r8152-cfgselector 1-1: USB disconnect, device number 21 [ 146.437737][ T3620] loop3: detected capacity change from 0 to 128 [ 147.286223][ T3632] loop0: detected capacity change from 0 to 256 [ 147.323540][ T3632] exfat: Deprecated parameter 'utf8' [ 147.345701][ T3648] loop1: detected capacity change from 0 to 128 [ 147.360351][ T3632] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 147.448814][ T3656] binder: 3655:3656 ioctl c0306201 0 returned -14 [ 147.576727][ T513] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 147.586833][ T388] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 147.827018][ T388] usb 4-1: Using ep0 maxpacket: 8 [ 147.836896][ T513] usb 3-1: Using ep0 maxpacket: 16 [ 147.946750][ T388] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 147.954869][ T388] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 147.963078][ T388] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 147.971929][ T388] usb 4-1: config 250 has no interface number 0 [ 147.977999][ T388] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 147.989390][ T388] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 147.999606][ T388] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.009679][ T388] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 148.019739][ T388] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 148.033022][ T388] usb 4-1: config 250 interface 228 has no altsetting 0 [ 148.126833][ T513] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 148.135715][ T513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.143513][ T513] usb 3-1: Product: syz [ 148.147509][ T513] usb 3-1: Manufacturer: syz [ 148.151906][ T513] usb 3-1: SerialNumber: syz [ 148.156949][ T513] r8152-cfgselector 3-1: config 0 descriptor?? [ 148.176764][ T388] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 148.185775][ T388] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 148.193793][ T388] usb 4-1: Product: syz [ 148.197994][ T388] usb 4-1: SerialNumber: syz [ 148.237392][ T388] hub 4-1:250.228: bad descriptor, ignoring hub [ 148.243481][ T388] hub: probe of 4-1:250.228 failed with error -5 [ 148.259058][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 148.259072][ T30] audit: type=1326 audit(1729514044.765:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.0.1312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c14bff9 code=0x0 [ 148.447394][ T388] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 148.616713][ T369] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 148.636771][ T513] r8152-cfgselector 3-1: Unknown version 0x0000 [ 148.642896][ T513] r8152-cfgselector 3-1: bad CDC descriptors [ 148.666758][ T513] r8152-cfgselector 3-1: Unknown version 0x0000 [ 148.673360][ T513] r8152-cfgselector 3-1: USB disconnect, device number 14 [ 149.046764][ T369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 149.057923][ T3643] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 149.065503][ T369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 149.076409][ T369] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.089096][ T369] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.097931][ T369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.106308][ T369] usb 2-1: config 0 descriptor?? [ 149.137101][ T3663] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 149.151369][ T30] audit: type=1326 audit(1729514045.655:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a54d3ff9 code=0x7ffc0000 [ 149.175933][ T30] audit: type=1326 audit(1729514045.655:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a54d3ff9 code=0x7ffc0000 [ 149.199363][ T30] audit: type=1326 audit(1729514045.655:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f89a54d3ff9 code=0x7ffc0000 [ 149.224397][ T30] audit: type=1326 audit(1729514045.655:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a54d3ff9 code=0x7ffc0000 [ 149.254353][ T30] audit: type=1326 audit(1729514045.655:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a54d3ff9 code=0x7ffc0000 [ 149.257472][ T3680] loop0: detected capacity change from 0 to 128 [ 149.278143][ T30] audit: type=1326 audit(1729514045.725:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 149.307161][ T30] audit: type=1326 audit(1729514045.735:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 149.331021][ T30] audit: type=1326 audit(1729514045.735:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 149.354357][ T30] audit: type=1326 audit(1729514045.735:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 149.556753][ T388] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 149.597541][ T369] plantronics 0003:047F:FFFF.0036: unknown main item tag 0xd [ 149.605376][ T369] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 149.776778][ T3643] usb 4-1: failed to restore interface 228 altsetting 255 (error=-71) [ 149.784916][ T20] usb 4-1: USB disconnect, device number 26 [ 149.787649][ T369] plantronics 0003:047F:FFFF.0036: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 149.796794][ T20] usblp0: removed [ 149.807582][ T388] usb 3-1: Using ep0 maxpacket: 8 [ 149.877250][ T308] usb 2-1: USB disconnect, device number 22 [ 149.936895][ T388] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.106862][ T388] usb 3-1: New USB device found, idVendor=c125, idProduct=a4a1, bcdDevice= 0.40 [ 150.115711][ T388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.123524][ T388] usb 3-1: Product: syz [ 150.127508][ T388] usb 3-1: Manufacturer: syz [ 150.131922][ T388] usb 3-1: SerialNumber: syz [ 150.423144][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.430182][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.438049][ T3683] device bridge_slave_0 entered promiscuous mode [ 150.446902][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.453740][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.462415][ T3683] device bridge_slave_1 entered promiscuous mode [ 150.500629][ T3690] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 150.524868][ T3696] binder: 3695:3696 ioctl c0306201 0 returned -14 [ 150.554717][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.561575][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.568673][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.575437][ T3683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.595571][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.602861][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.610758][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.618111][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.629764][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.637753][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.644577][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.653020][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.661047][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.667905][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.681360][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.690382][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.705109][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.715976][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.723825][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.731269][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.740927][ T3683] device veth0_vlan entered promiscuous mode [ 150.750751][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.761649][ T3683] device veth1_macvtap entered promiscuous mode [ 150.770880][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.780439][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.815540][ T3700] loop4: detected capacity change from 0 to 256 [ 150.837223][ T3700] exfat: Deprecated parameter 'utf8' [ 150.890972][ T3700] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 150.930408][ T45] device bridge_slave_1 left promiscuous mode [ 150.938098][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.945351][ T45] device bridge_slave_0 left promiscuous mode [ 150.951357][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.959329][ T45] device veth1_macvtap left promiscuous mode [ 150.965149][ T45] device veth0_vlan left promiscuous mode [ 151.246898][ T388] cdc_ncm 3-1:1.0: failed to get mac address [ 151.369105][ T3719] binder: 3718:3719 ioctl c0306201 0 returned -14 [ 151.466770][ T388] cdc_ncm 3-1:1.0: bind() failure [ 151.486973][ T388] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 151.507261][ T388] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 151.514625][ T388] usb 3-1: USB disconnect, device number 15 [ 151.646708][ T60] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 151.896712][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 152.106769][ T308] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 152.226775][ T20] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 152.226910][ T60] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 152.243957][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.256520][ T60] usb 4-1: Product: syz [ 152.261992][ T3738] syz.0.1342[3738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.262061][ T3738] syz.0.1342[3738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.273536][ T60] usb 4-1: Manufacturer: syz [ 152.289526][ T60] usb 4-1: SerialNumber: syz [ 152.299177][ T60] r8152-cfgselector 4-1: config 0 descriptor?? [ 152.466787][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 152.471691][ T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 152.482651][ T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 152.493584][ T308] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.506232][ T308] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.515310][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.524126][ T308] usb 5-1: config 0 descriptor?? [ 152.547059][ T1098] Bluetooth: hci0: command 0x1003 tx timeout [ 152.547063][ T3723] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.559759][ T1239] Bluetooth: hci0: sending frame failed (-49) [ 152.586834][ T20] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 152.594895][ T20] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 152.603195][ T20] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 152.612067][ T20] usb 3-1: config 250 has no interface number 0 [ 152.618114][ T20] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 152.629501][ T20] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 152.639706][ T20] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.649792][ T20] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 152.659851][ T20] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 152.673141][ T20] usb 3-1: config 250 interface 228 has no altsetting 0 [ 152.776981][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 152.783160][ T60] r8152-cfgselector 4-1: bad CDC descriptors [ 152.796899][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 152.805803][ T20] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 152.813898][ T20] usb 3-1: Product: syz [ 152.816733][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 152.817865][ T20] usb 3-1: SerialNumber: syz [ 152.825229][ T60] r8152-cfgselector 4-1: USB disconnect, device number 27 [ 152.867730][ T20] hub 3-1:250.228: bad descriptor, ignoring hub [ 152.873865][ T20] hub: probe of 3-1:250.228 failed with error -5 [ 153.007466][ T308] plantronics 0003:047F:FFFF.0037: unknown main item tag 0xd [ 153.015367][ T308] plantronics 0003:047F:FFFF.0037: No inputs registered, leaving [ 153.024093][ T308] plantronics 0003:047F:FFFF.0037: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 153.077217][ T20] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 153.278058][ T20] usb 5-1: USB disconnect, device number 19 [ 153.299069][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 153.299082][ T30] audit: type=1326 audit(1729514049.805:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 153.329134][ T30] audit: type=1326 audit(1729514049.845:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3745 comm="syz.3.1345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7fad7e84f959 code=0x0 [ 153.353420][ T30] audit: type=1326 audit(1729514049.845:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 153.377898][ T30] audit: type=1326 audit(1729514049.845:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 153.401322][ T30] audit: type=1326 audit(1729514049.855:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 153.425025][ T30] audit: type=1326 audit(1729514049.855:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 153.448388][ T30] audit: type=1326 audit(1729514049.855:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 153.471647][ T30] audit: type=1326 audit(1729514049.855:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 153.494821][ T30] audit: type=1326 audit(1729514049.855:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 153.518025][ T30] audit: type=1326 audit(1729514049.885:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5c14bff9 code=0x7ffc0000 [ 153.856991][ T3727] usb 3-1: reset high-speed USB device number 16 using dummy_hcd [ 154.496760][ T3727] usb 3-1: failed to restore interface 228 altsetting 255 (error=-71) [ 154.504871][ T1098] usb 3-1: USB disconnect, device number 16 [ 154.511947][ T1098] usblp0: removed [ 154.626766][ T60] Bluetooth: hci0: command 0x1001 tx timeout [ 154.632630][ T1239] Bluetooth: hci0: sending frame failed (-49) [ 155.235449][ T60] ================================================================== [ 155.243334][ T60] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2f/0x120 [ 155.250969][ T60] Read of size 8 at addr ffff88811eed6888 by task kworker/1:2/60 [ 155.258517][ T60] [ 155.260689][ T60] CPU: 1 PID: 60 Comm: kworker/1:2 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 155.270323][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.280218][ T60] Workqueue: events binder_deferred_func [ 155.285684][ T60] Call Trace: [ 155.288819][ T60] [ 155.291585][ T60] dump_stack_lvl+0x151/0x1c0 [ 155.296103][ T60] ? io_uring_drop_tctx_refs+0x190/0x190 [ 155.301567][ T60] ? panic+0x760/0x760 [ 155.305474][ T60] ? kasan_quarantine_put+0x34/0x1a0 [ 155.310594][ T60] print_address_description+0x87/0x3b0 [ 155.315975][ T60] kasan_report+0x179/0x1c0 [ 155.320318][ T60] ? _raw_spin_lock+0xa4/0x1b0 [ 155.324927][ T60] ? __list_del_entry_valid+0x2f/0x120 [ 155.330211][ T60] ? __list_del_entry_valid+0x2f/0x120 [ 155.335505][ T60] __asan_report_load8_noabort+0x14/0x20 [ 155.340974][ T60] __list_del_entry_valid+0x2f/0x120 [ 155.346093][ T60] binder_release_work+0xcd/0x680 [ 155.350953][ T60] binder_deferred_func+0x1847/0x1bc0 [ 155.356162][ T60] ? read_word_at_a_time+0x12/0x20 [ 155.361109][ T60] process_one_work+0x6bb/0xc10 [ 155.365797][ T60] worker_thread+0xad5/0x12a0 [ 155.370318][ T60] ? _raw_spin_lock+0x1b0/0x1b0 [ 155.375000][ T60] kthread+0x421/0x510 [ 155.378902][ T60] ? worker_clr_flags+0x180/0x180 [ 155.383759][ T60] ? kthread_blkcg+0xd0/0xd0 [ 155.388191][ T60] ret_from_fork+0x1f/0x30 [ 155.392442][ T60] [ 155.395308][ T60] [ 155.397475][ T60] Allocated by task 3764: [ 155.401642][ T60] ____kasan_kmalloc+0xdb/0x110 [ 155.406327][ T60] __kasan_kmalloc+0x9/0x10 [ 155.410666][ T60] kmem_cache_alloc_trace+0x115/0x210 [ 155.415875][ T60] binder_thread_write+0x9f5/0x6ec0 [ 155.420908][ T60] binder_ioctl_write_read+0x205/0x7300 [ 155.426305][ T60] binder_ioctl+0x371/0x2640 [ 155.430801][ T60] __se_sys_ioctl+0x114/0x190 [ 155.435316][ T60] __x64_sys_ioctl+0x7b/0x90 [ 155.439750][ T60] x64_sys_call+0x98/0x9a0 [ 155.443999][ T60] do_syscall_64+0x3b/0xb0 [ 155.448250][ T60] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.453984][ T60] [ 155.456149][ T60] Freed by task 60: [ 155.459799][ T60] kasan_set_track+0x4b/0x70 [ 155.464221][ T60] kasan_set_free_info+0x23/0x40 [ 155.469002][ T60] ____kasan_slab_free+0x126/0x160 [ 155.473942][ T60] __kasan_slab_free+0x11/0x20 [ 155.478544][ T60] slab_free_freelist_hook+0xbd/0x190 [ 155.483750][ T60] kfree+0xc8/0x220 [ 155.487394][ T60] binder_free_ref+0x128/0x260 [ 155.491992][ T60] binder_deferred_func+0x171c/0x1bc0 [ 155.497200][ T60] process_one_work+0x6bb/0xc10 [ 155.501887][ T60] worker_thread+0xad5/0x12a0 [ 155.506400][ T60] kthread+0x421/0x510 [ 155.510306][ T60] ret_from_fork+0x1f/0x30 [ 155.514558][ T60] [ 155.516727][ T60] The buggy address belongs to the object at ffff88811eed6880 [ 155.516727][ T60] which belongs to the cache kmalloc-64 of size 64 [ 155.530442][ T60] The buggy address is located 8 bytes inside of [ 155.530442][ T60] 64-byte region [ffff88811eed6880, ffff88811eed68c0) [ 155.543290][ T60] The buggy address belongs to the page: [ 155.548768][ T60] page:ffffea00047bb580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11eed6 [ 155.558825][ T60] flags: 0x4000000000000200(slab|zone=1) [ 155.564298][ T60] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100042780 [ 155.572716][ T60] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 155.581129][ T60] page dumped because: kasan: bad access detected [ 155.587390][ T60] page_owner tracks the page as allocated [ 155.592934][ T60] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1361, ts 50609278344, free_ts 50605031285 [ 155.608732][ T60] post_alloc_hook+0x1a3/0x1b0 [ 155.613330][ T60] prep_new_page+0x1b/0x110 [ 155.617671][ T60] get_page_from_freelist+0x3550/0x35d0 [ 155.623052][ T60] __alloc_pages+0x27e/0x8f0 [ 155.627478][ T60] new_slab+0x9a/0x4e0 [ 155.631383][ T60] ___slab_alloc+0x39e/0x830 [ 155.635810][ T60] __slab_alloc+0x4a/0x90 [ 155.639975][ T60] kmem_cache_alloc_trace+0x142/0x210 [ 155.645183][ T60] __request_module+0x28c/0x8e0 [ 155.649871][ T60] rtnl_newlink+0xb15/0x2050 [ 155.654296][ T60] rtnetlink_rcv_msg+0x951/0xc40 [ 155.659072][ T60] netlink_rcv_skb+0x1cf/0x410 [ 155.663671][ T60] rtnetlink_rcv+0x1c/0x20 [ 155.667923][ T60] netlink_unicast+0x8df/0xac0 [ 155.672531][ T60] netlink_sendmsg+0xa0a/0xd20 [ 155.677123][ T60] __sys_sendto+0x564/0x720 [ 155.681481][ T60] page last free stack trace: [ 155.685976][ T60] free_unref_page_prepare+0x7c8/0x7d0 [ 155.691271][ T60] free_unref_page+0xe8/0x750 [ 155.695784][ T60] __free_pages+0x61/0xf0 [ 155.699952][ T60] free_pages+0x7c/0x90 [ 155.703942][ T60] selinux_genfs_get_sid+0x24d/0x2a0 [ 155.709065][ T60] inode_doinit_with_dentry+0x8d2/0x1070 [ 155.714532][ T60] selinux_d_instantiate+0x27/0x40 [ 155.719481][ T60] security_d_instantiate+0x9f/0x100 [ 155.724605][ T60] d_splice_alias+0x6d/0x390 [ 155.729025][ T60] proc_sys_lookup+0x6b3/0x7b0 [ 155.733625][ T60] path_openat+0x1194/0x2f40 [ 155.739007][ T60] do_filp_open+0x21c/0x460 [ 155.743347][ T60] do_sys_openat2+0x13f/0x820 [ 155.747859][ T60] __x64_sys_openat+0x243/0x290 [ 155.752546][ T60] x64_sys_call+0x6bf/0x9a0 [ 155.756887][ T60] do_syscall_64+0x3b/0xb0 [ 155.761142][ T60] [ 155.763309][ T60] Memory state around the buggy address: [ 155.768780][ T60] ffff88811eed6780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 155.776680][ T60] ffff88811eed6800: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 155.784576][ T60] >ffff88811eed6880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 155.792471][ T60] ^ [ 155.796641][ T60] ffff88811eed6900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 155.804538][ T60] ffff88811eed6980: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 155.812434][ T60] ================================================================== [ 155.820332][ T60] Disabling lock debugging due to kernel taint [ 155.827150][ T60] general protection fault, probably for non-canonical address 0xfc2bfc4bc0000007: 0000 [#1] PREEMPT SMP KASAN [ 155.838699][ T60] KASAN: maybe wild-memory-access in range [0xe160025e00000038-0xe160025e0000003f] [ 155.847801][ T60] CPU: 1 PID: 60 Comm: kworker/1:2 Tainted: G B 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 155.858822][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.868717][ T60] Workqueue: events binder_deferred_func [ 155.874191][ T60] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 155.880088][ T60] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 cc 90 48 ff 49 8b 17 4c 39 f2 75 [ 155.899528][ T60] RSP: 0018:ffffc90000907c00 EFLAGS: 00010a03 [ 155.905430][ T60] RAX: 1c2c004bc0000007 RBX: ffff888106dd8300 RCX: ffffffff826a1859 [ 155.913243][ T60] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff88811eed6880 [ 155.921053][ T60] RBP: ffffc90000907c20 R08: ffffffff8141997b R09: 0000000000000003 [ 155.928865][ T60] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: dffffc0000000000 [ 155.936678][ T60] R13: ffff88811eed6880 R14: ffff88811eed6880 R15: e160025e0000003c [ 155.944488][ T60] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 155.953253][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.959676][ T60] CR2: 0000000000000000 CR3: 000000010cdb4000 CR4: 00000000003506a0 [ 155.967490][ T60] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.975298][ T60] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.983109][ T60] Call Trace: [ 155.986235][ T60] [ 155.989014][ T60] ? __die_body+0x62/0xb0 [ 155.993193][ T60] ? die_addr+0x9f/0xd0 [ 155.997170][ T60] ? exc_general_protection+0x311/0x4b0 [ 156.002555][ T60] ? check_panic_on_warn+0x65/0xb0 [ 156.007500][ T60] ? asm_exc_general_protection+0x27/0x30 [ 156.013053][ T60] ? check_panic_on_warn+0x5b/0xb0 [ 156.018000][ T60] ? __list_del_entry_valid+0x49/0x120 [ 156.023297][ T60] ? __list_del_entry_valid+0x75/0x120 [ 156.028590][ T60] binder_release_work+0xcd/0x680 [ 156.033451][ T60] binder_deferred_func+0x1847/0x1bc0 [ 156.038659][ T60] ? read_word_at_a_time+0x12/0x20 [ 156.043606][ T60] process_one_work+0x6bb/0xc10 [ 156.048294][ T60] worker_thread+0xad5/0x12a0 [ 156.052805][ T60] ? _raw_spin_lock+0x1b0/0x1b0 [ 156.057527][ T60] kthread+0x421/0x510 [ 156.061397][ T60] ? worker_clr_flags+0x180/0x180 [ 156.066258][ T60] ? kthread_blkcg+0xd0/0xd0 [ 156.070684][ T60] ret_from_fork+0x1f/0x30 [ 156.074940][ T60] [ 156.077801][ T60] Modules linked in: [ 156.082237][ T60] ---[ end trace 3a001faab904c3cd ]--- [ 156.087529][ T60] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 156.093409][ T60] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 cc 90 48 ff 49 8b 17 4c 39 f2 75 [ 156.112868][ T60] RSP: 0018:ffffc90000907c00 EFLAGS: 00010a03 [ 156.118764][ T60] RAX: 1c2c004bc0000007 RBX: ffff888106dd8300 RCX: ffffffff826a1859 [ 156.126565][ T60] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff88811eed6880 [ 156.134396][ T60] RBP: ffffc90000907c20 R08: ffffffff8141997b R09: 0000000000000003 [ 156.142223][ T60] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: dffffc0000000000 [ 156.150298][ T60] R13: ffff88811eed6880 R14: ffff88811eed6880 R15: e160025e0000003c [ 156.158221][ T60] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 156.165869][ T1098] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 156.167003][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.180777][ T60] CR2: 0000000000000000 CR3: 000000010cdb4000 CR4: 00000000003506a0 [ 156.188591][ T60] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.196381][ T60] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.204226][ T60] Kernel panic - not syncing: Fatal exception [ 156.210288][ T60] Kernel Offset: disabled [ 156.214407][ T60] Rebooting in 86400 seconds..