last executing test programs: 3.486560693s ago: executing program 3 (id=720): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 3.475886634s ago: executing program 3 (id=723): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 3.39018187s ago: executing program 3 (id=724): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 3.38984635s ago: executing program 3 (id=725): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r2}, [@IFA_BROADCAST={0x8, 0x4, @private=0xa010100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 3.300219787s ago: executing program 3 (id=727): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x13, 0x0, 0x0, 0x0, 0xf69, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a80), 0x10, 0x40}, 0x90) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x541b, 0x0) 3.159864427s ago: executing program 2 (id=730): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3088], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc22, 0x10, &(0x7f0000000040)}, 0x48) r3 = dup(r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@remote, @link_local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f72dfb", 0x10, 0x21, 0x0, @private0, @empty, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "339cab", 0x0, "a55884"}}}}}}}, 0x0) 3.159475277s ago: executing program 2 (id=732): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) 3.127410749s ago: executing program 2 (id=733): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1210086, &(0x7f0000001240)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@gid}, {}, {@fmask={'fmask', 0x3d, 0x7}}]}, 0x5, 0x152f, &(0x7f0000002f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000e00), 0x10f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2.837839591s ago: executing program 2 (id=738): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x87, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2.763972836s ago: executing program 0 (id=739): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000000000000000000000000000aa300002800400018003000000000000000800000000000000040000000000000008000000000000000800000000000000180002801400018004"], 0xec}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) timer_create(0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2.763682256s ago: executing program 0 (id=740): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) r2 = syz_io_uring_setup(0xec5, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f00000002c0)) io_uring_enter(r2, 0x0, 0x10a5, 0x3, &(0x7f0000000040), 0x8) 2.763543386s ago: executing program 0 (id=741): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x39, 0x0) 2.752090257s ago: executing program 0 (id=742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000040000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0) 2.455313569s ago: executing program 3 (id=744): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x6, "2aff8fe36466"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0x23, 0x6, {0x6, 0xf, "65a6c7c2"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x0, 0x16, 0xc4, "81b4b01c1ec7d6bbd5445744945b04850a181e3a1a68f83ed23e954070fca9d9aa61bb34afc38de97e1aae87cb0f448e90b8335ca807e34bc816fb99e8022a16a1a0f73c5a0ae125616049a1ef652f95cde59dc596a4af01ffb246b1b94b753eb391376190c8d2e95d93cd42c82eacc6ca90e3bab34af47c28f0d30b8302916d3f266f8dd1e14f86de9017e2c9d027e662ccac3f61de2597d1d8f9756151cf0038885fad1f05790a528706e0cc1e8e391664ce80538b06a3fbe7514c420870dc51727119"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x6, 0x7, 0x5a, 0xdf, 0x0, 0x6, 0x2, 0x2, 0x9, 0x6, 0x99f, 0x6df}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x1721}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) 1.928032408s ago: executing program 2 (id=746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 948.75251ms ago: executing program 1 (id=747): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 948.563321ms ago: executing program 2 (id=748): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 912.903073ms ago: executing program 1 (id=749): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = getpgid(0x0) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x0, &(0x7f0000000180)) 902.035844ms ago: executing program 1 (id=750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000440)="0f060faa0fc79d3518640f01cfbaf80c66b8f6f6368366efbafc0ced0f01c266b9410200000f32764b66b8000000000f23c00f21f86635020009000f23f8b805008ed0", 0x43}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)=ANY=[]) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 859.709487ms ago: executing program 1 (id=751): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x10008, 0x8, 0x1080}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 846.846978ms ago: executing program 1 (id=752): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4c004) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) 840.828358ms ago: executing program 0 (id=753): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000009930e6a1652b9a4c0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 822.41996ms ago: executing program 1 (id=754): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d105012008d8286203010902120001000000000904"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000340)={0x0, 0x0, 0x2, "078b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000500)={0x0, 0x0, 0x2, "fa3d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 718.793638ms ago: executing program 0 (id=755): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000004b574e04df19035edacab3"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x3, 0xffffffff}) 83.925704ms ago: executing program 4 (id=762): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="fb", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) 83.750765ms ago: executing program 4 (id=763): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kvm_fpu\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 56.092727ms ago: executing program 4 (id=764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 38.297998ms ago: executing program 4 (id=765): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r1, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 15.46609ms ago: executing program 4 (id=766): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 0s ago: executing program 4 (id=767): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a000902"], 0x10}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) kernel console output (not intermixed with test programs): rphan inode deleted [ 42.495053][ T1070] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,nodelalloc,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 42.502944][ T1072] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,nombcache,,errors=continue. Quota mode: none. [ 42.514656][ T1070] ext4 filesystem being mounted at /64/bus supports timestamps until 2038 (0x7fffffff) [ 42.554747][ T1070] EXT4-fs error (device loop0): ext4_xattr_block_list:719: inode #16: comm syz.0.297: corrupted xattr block 37 [ 42.567462][ T1070] EXT4-fs (loop0): Remounting filesystem read-only [ 42.570952][ T561] usb 2-1: USB disconnect, device number 7 [ 42.587643][ T291] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 42.599391][ T291] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 42.809069][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.816228][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.823529][ T1081] device bridge_slave_0 entered promiscuous mode [ 42.831479][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.838501][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.846060][ T1081] device bridge_slave_1 entered promiscuous mode [ 42.933825][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.936705][ T1092] loop2: detected capacity change from 0 to 1024 [ 42.940729][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.953990][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.960825][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.965348][ T1092] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz.2.305: casefold flag without casefold feature [ 42.980734][ T1092] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 42.993712][ T1092] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.002675][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.011925][ T599] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.019393][ T599] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.045097][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.053106][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.060007][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.067638][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.084394][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.091269][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.157020][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.165446][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.175216][ T644] device bridge_slave_1 left promiscuous mode [ 43.181168][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.194931][ T644] device bridge_slave_0 left promiscuous mode [ 43.205904][ T644] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.214537][ T644] device veth1_macvtap left promiscuous mode [ 43.220371][ T644] device veth0_vlan left promiscuous mode [ 43.320297][ T1081] device veth0_vlan entered promiscuous mode [ 43.329829][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.338650][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.346205][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.353883][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.372138][ T1081] device veth1_macvtap entered promiscuous mode [ 43.380675][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.398693][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.412051][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.424065][ T560] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 43.494340][ T1123] device syzkaller0 entered promiscuous mode [ 43.648697][ T1134] bridge: RTM_NEWNEIGH with invalid ether address [ 43.681396][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.688455][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.695849][ T1128] device bridge_slave_0 entered promiscuous mode [ 43.702981][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.710460][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.718063][ T1128] device bridge_slave_1 entered promiscuous mode [ 43.725759][ T1121] loop0: detected capacity change from 0 to 40427 [ 43.756649][ T1121] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 43.765691][ T1121] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 43.775015][ T1121] F2FS-fs (loop0): invalid crc value [ 43.786012][ T1121] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.804083][ T560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.814882][ T560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.824819][ T560] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 43.833915][ T560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.837613][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.846534][ T560] usb 2-1: config 0 descriptor?? [ 43.848878][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.860802][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.865807][ T1121] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 43.867655][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.874892][ T1121] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 43.896718][ T1139] attempt to access beyond end of device [ 43.896718][ T1139] loop0: rw=2049, want=45112, limit=40427 [ 43.921160][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.928680][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.936343][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.943695][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.962950][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.971029][ T561] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.977894][ T561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.985177][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.993168][ T561] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.000030][ T561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.017646][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.025447][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.038655][ T1128] device veth0_vlan entered promiscuous mode [ 44.046474][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.054910][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.062760][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.070074][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.088005][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.096659][ T1128] device veth1_macvtap entered promiscuous mode [ 44.116503][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.127582][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.325602][ T560] hid-steam 0003:28DE:1142.0013: item fetching failed at offset 4/5 [ 44.351738][ T644] device bridge_slave_1 left promiscuous mode [ 44.358002][ T560] hid-steam 0003:28DE:1142.0013: steam_probe:parse of hid interface failed [ 44.358388][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.374025][ T560] hid-steam: probe of 0003:28DE:1142.0013 failed with error -22 [ 44.383484][ T644] device bridge_slave_0 left promiscuous mode [ 44.389928][ T644] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.398290][ T644] device veth1_macvtap left promiscuous mode [ 44.404424][ T644] device veth0_vlan left promiscuous mode [ 44.534064][ T561] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 44.547073][ T560] usb 2-1: USB disconnect, device number 8 [ 44.569116][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.581323][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.591515][ T1164] device bridge_slave_0 entered promiscuous mode [ 44.598977][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.606501][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.614116][ T1164] device bridge_slave_1 entered promiscuous mode [ 44.630723][ T1176] syz.2.336 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.763754][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.771683][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.774058][ T561] usb 4-1: Using ep0 maxpacket: 8 [ 44.788346][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.798152][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.818239][ T627] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.825125][ T627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.845046][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.853349][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.862283][ T627] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.869495][ T627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.893786][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.896753][ T561] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 44.901631][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.915762][ T561] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 44.917478][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.931011][ T561] usb 4-1: config 135 has no interface number 0 [ 44.940753][ T561] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 44.956972][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.965529][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.973497][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.982022][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.989560][ T1186] loop0: detected capacity change from 0 to 128 [ 44.998596][ T1164] device veth0_vlan entered promiscuous mode [ 45.011745][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.021733][ T1164] device veth1_macvtap entered promiscuous mode [ 45.024159][ T1186] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 45.054291][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.062971][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.086228][ T1188] loop1: detected capacity change from 0 to 512 [ 45.093175][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.097058][ T1186] attempt to access beyond end of device [ 45.097058][ T1186] loop0: rw=2049, want=129, limit=128 [ 45.101605][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.112561][ T1186] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 45.128197][ T561] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 45.137597][ T561] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.145491][ T561] usb 4-1: Product: syz [ 45.155535][ T325] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 45.158347][ T561] usb 4-1: Manufacturer: syz [ 45.170451][ T561] usb 4-1: SerialNumber: syz [ 45.194438][ T1188] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.206616][ T1188] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff) [ 45.219846][ T1188] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 45.235211][ T1197] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.235867][ T561] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 45.247044][ T1188] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 45.252304][ T561] usb 4-1: No valid video chain found. [ 45.271742][ T1188] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.271742][ T1188] [ 45.276964][ T1197] FAT-fs (loop0): unable to read boot sector [ 45.281334][ T1188] EXT4-fs (loop1): Total free blocks count 0 [ 45.292994][ T1188] EXT4-fs (loop1): Free/Dirty block details [ 45.299032][ T1188] EXT4-fs (loop1): free_blocks=65280 [ 45.304186][ T1188] EXT4-fs (loop1): dirty_blocks=11 [ 45.310092][ T1188] EXT4-fs (loop1): Block reservation details [ 45.315958][ T1188] EXT4-fs (loop1): i_reserved_data_blocks=11 [ 45.322012][ T1198] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 11 with error 28 [ 45.346988][ T1198] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.346988][ T1198] [ 45.700227][ T310] usb 4-1: USB disconnect, device number 8 [ 45.777924][ T1223] tipc: Started in network mode [ 45.782894][ T1223] tipc: Node identity 1, cluster identity 4711 [ 45.789227][ T1223] tipc: Node number set to 1 [ 45.850482][ T1232] loop1: detected capacity change from 0 to 512 [ 45.859234][ T644] device bridge_slave_1 left promiscuous mode [ 45.878596][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.886963][ T644] device bridge_slave_0 left promiscuous mode [ 45.892937][ T644] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.901293][ T644] device veth1_macvtap left promiscuous mode [ 45.907493][ T644] device veth0_vlan left promiscuous mode [ 45.930829][ T1232] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.960961][ T1237] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 45.982915][ T1232] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 45.999053][ T1237] SELinux: failed to load policy [ 46.008628][ T1232] EXT4-fs (loop1): 1 truncate cleaned up [ 46.014039][ T561] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 46.028664][ T1232] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 46.263997][ T561] usb 1-1: Using ep0 maxpacket: 16 [ 46.304090][ T310] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 46.384129][ T561] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.385772][ T1266] loop3: detected capacity change from 0 to 2048 [ 46.401648][ T561] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.411683][ T561] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 46.424440][ T561] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 46.433551][ T561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.442206][ T561] usb 1-1: config 0 descriptor?? [ 46.476832][ T1266] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.523158][ T1228] loop4: detected capacity change from 0 to 131072 [ 46.542100][ T1271] 9pnet: p9_errstr2errno: server reported unknown error [ 46.568061][ T1228] F2FS-fs (loop4): invalid crc value [ 46.578308][ T1228] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.626127][ T1228] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 46.664541][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 46.675980][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 46.687226][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.700198][ T310] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.709398][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.717837][ T310] usb 3-1: config 0 descriptor?? [ 46.734101][ T1241] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 46.893982][ T6] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 46.905079][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 46.905095][ T30] audit: type=1400 audit(1725529336.329:599): avc: denied { ioctl } for pid=1285 comm="syz.4.379" path="socket:[19930]" dev="sockfs" ino=19930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.938080][ T30] audit: type=1400 audit(1725529336.359:600): avc: denied { mount } for pid=1219 comm="syz.0.353" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 46.946140][ T561] HID 045e:07da: Invalid code 65791 type 1 [ 46.966270][ T30] audit: type=1400 audit(1725529336.359:601): avc: denied { watch } for pid=1219 comm="syz.0.353" path="/16/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 46.977566][ T561] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0014/input/input7 [ 47.001575][ T561] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 47.075680][ T1295] loop4: detected capacity change from 0 to 128 [ 47.166581][ T1213] usb 1-1: USB disconnect, device number 9 [ 47.188386][ T30] audit: type=1400 audit(1725529336.609:602): avc: denied { read } for pid=1296 comm="syz.1.384" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.195092][ T310] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 47.220184][ T1299] loop1: detected capacity change from 0 to 16 [ 47.226560][ T310] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 47.233797][ T310] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 47.241569][ T310] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 47.248857][ T310] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 47.250708][ T1301] loop4: detected capacity change from 0 to 128 [ 47.256020][ T310] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 47.256049][ T310] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 47.256071][ T310] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 47.256094][ T310] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 47.266542][ T1299] erofs: (device loop1): mounted with root inode @ nid 36. [ 47.269462][ T310] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 47.304074][ T48] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 47.308283][ T310] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 47.323387][ T310] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 47.332322][ T310] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 47.349729][ T1301] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.360406][ T1301] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 47.397951][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.408013][ T1299] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 47.433306][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.472803][ T30] audit: type=1400 audit(1725529336.889:603): avc: denied { unlink } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.475650][ T1213] usb 3-1: USB disconnect, device number 8 [ 47.534072][ T6] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 47.544581][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 47.552426][ T6] usb 4-1: SerialNumber: syz [ 47.605822][ T30] audit: type=1400 audit(1725529337.029:604): avc: denied { lock } for pid=1313 comm="syz.1.392" path="socket:[19988]" dev="sockfs" ino=19988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 47.700303][ T30] audit: type=1400 audit(1725529337.119:605): avc: denied { unmount } for pid=1081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 47.786579][ T1324] loop4: detected capacity change from 0 to 1024 [ 47.825145][ T6] usb 4-1: 0:2 : does not exist [ 47.831046][ T6] usb 4-1: USB disconnect, device number 9 [ 47.860395][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.877347][ T1324] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 47.900201][ T30] audit: type=1400 audit(1725529337.319:606): avc: denied { mounton } for pid=1323 comm="syz.4.396" path="/19/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.926680][ T30] audit: type=1400 audit(1725529337.319:607): avc: denied { write } for pid=1323 comm="syz.4.396" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.930895][ T1164] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 47.948189][ T30] audit: type=1400 audit(1725529337.319:608): avc: denied { add_name } for pid=1323 comm="syz.4.396" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.959351][ T1164] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 47.994560][ T1164] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.005775][ T1164] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.016387][ T1164] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.027075][ T1164] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.038230][ T1164] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.048835][ T1164] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.059397][ T599] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 48.060493][ T1164] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.077385][ T1164] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 48.263998][ T1213] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 48.276336][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.283256][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.290703][ T1330] device bridge_slave_0 entered promiscuous mode [ 48.308851][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.315941][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.323244][ T1330] device bridge_slave_1 entered promiscuous mode [ 48.374591][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.381438][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.388576][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.395340][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.420048][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.427742][ T561] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.434937][ T561] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.464083][ T599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 48.475771][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.485343][ T599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 48.486084][ T1339] serio: Serial port ptm0 [ 48.500745][ T561] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.504037][ T599] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.507616][ T561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.520365][ T599] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.527804][ T1213] usb 3-1: Using ep0 maxpacket: 16 [ 48.536242][ T599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.541903][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.549918][ T599] usb 1-1: config 0 descriptor?? [ 48.561249][ T561] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.568392][ T561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.584053][ T1322] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 48.585348][ T1342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.403'. [ 48.601347][ T1342] netlink: 172 bytes leftover after parsing attributes in process `syz.1.403'. [ 48.627208][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.635138][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.656231][ T1347] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.680888][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.700990][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.713900][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.722174][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.730036][ T1330] device veth0_vlan entered promiscuous mode [ 48.746838][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.756337][ T1330] device veth1_macvtap entered promiscuous mode [ 48.768169][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.787184][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.795785][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.814065][ T1213] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 48.827092][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.835223][ T1213] usb 3-1: Product: syz [ 48.839204][ T1213] usb 3-1: Manufacturer: syz [ 48.843630][ T1213] usb 3-1: SerialNumber: syz [ 48.849107][ T1213] usb 3-1: config 0 descriptor?? [ 48.874659][ T10] device bridge_slave_1 left promiscuous mode [ 48.880809][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.894803][ T1213] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 48.902353][ T10] device bridge_slave_0 left promiscuous mode [ 48.903014][ T1213] usb 3-1: Detected FT232H [ 48.920086][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.941754][ T10] device veth1_macvtap left promiscuous mode [ 48.964608][ T10] device veth0_vlan left promiscuous mode [ 48.975674][ T1351] loop3: detected capacity change from 0 to 40427 [ 49.034988][ T599] plantronics 0003:047F:FFFF.0016: ignoring exceeding usage max [ 49.042644][ T1351] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 49.052734][ T1351] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 49.053103][ T599] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 49.074588][ T1351] F2FS-fs (loop3): invalid crc value [ 49.082025][ T1351] F2FS-fs (loop3): Found nat_bits in checkpoint [ 49.089050][ T599] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 49.104081][ T1213] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 49.124780][ T1213] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 49.154066][ T1213] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 49.162734][ T1213] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 49.178236][ T1213] usb 3-1: USB disconnect, device number 9 [ 49.192978][ T1351] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 49.201627][ T1351] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 49.208126][ T1359] loop1: detected capacity change from 0 to 40427 [ 49.215022][ T1213] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 49.236633][ T1213] ftdi_sio 3-1:0.0: device disconnected [ 49.274136][ T1359] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 49.281806][ T1359] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 49.308516][ T1359] F2FS-fs (loop1): Found nat_bits in checkpoint [ 49.355568][ T1359] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 49.362505][ T1359] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 49.440637][ T1372] syz.3.411[1372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.440696][ T1372] syz.3.411[1372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.674040][ T1213] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 49.834761][ T1386] serio: Serial port ptm0 [ 49.933457][ T1399] loop3: detected capacity change from 0 to 512 [ 49.969909][ T1399] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 49.981047][ T1399] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 50.044137][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.055495][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.066006][ T1213] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.079233][ T1213] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 50.088331][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.098650][ T1213] usb 5-1: config 0 descriptor?? [ 50.177228][ T1416] loop3: detected capacity change from 0 to 2048 [ 50.254056][ T560] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 50.267827][ T1416] EXT4-fs error (device loop3): ext4_fill_super:4831: inode #2: comm syz.3.428: casefold flag without casefold feature [ 50.280444][ T1416] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 50.290770][ T1416] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 50.298313][ T1416] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 50.494065][ T560] usb 2-1: Using ep0 maxpacket: 16 [ 50.575633][ T1213] acrux 0003:1A34:0802.0017: hidraw1: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 50.586611][ T1213] acrux 0003:1A34:0802.0017: no inputs found [ 50.592437][ T1213] acrux 0003:1A34:0802.0017: Failed to enable force feedback support, error: -19 [ 50.624097][ T560] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 50.631961][ T560] usb 2-1: config 0 has no interface number 0 [ 50.637935][ T560] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 50.764116][ T560] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 50.772995][ T560] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 50.780862][ T560] usb 2-1: Product: syz [ 50.784809][ T560] usb 2-1: SerialNumber: syz [ 50.790050][ T560] usb 2-1: config 0 descriptor?? [ 50.817747][ T1397] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 50.827152][ T561] usb 5-1: USB disconnect, device number 5 [ 50.836821][ T1424] serio: Serial port ptm0 [ 50.876060][ T1432] loop3: detected capacity change from 0 to 1024 [ 50.907956][ T1439] loop2: detected capacity change from 0 to 2048 [ 50.944378][ T1439] loop2: p3 < > p4 < > [ 50.948440][ T1439] loop2: partition table partially beyond EOD, truncated [ 50.955803][ T1432] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.965550][ T1439] loop2: p3 start 4284289 is beyond EOD, truncated [ 50.977909][ T1432] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,dioread_nolock,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 51.084885][ T313] udevd[313]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 51.095301][ T560] usb 2-1: invalid MIDI in EP 0 [ 51.100393][ T560] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 51.110856][ T560] usb 2-1: USB disconnect, device number 9 [ 51.120332][ T313] udevd[313]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 51.264958][ T1466] tipc: Started in network mode [ 51.269716][ T1466] tipc: Node identity 2, cluster identity 4711 [ 51.276075][ T1466] tipc: Node number set to 2 [ 51.424041][ T6] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 51.484163][ T6] usb 1-1: device reset changed ep0 maxpacket size! [ 51.490733][ T627] usb 1-1: USB disconnect, device number 10 [ 51.654020][ T627] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 51.894031][ T627] usb 1-1: Using ep0 maxpacket: 32 [ 52.014238][ T1469] serio: Serial port ptm0 [ 52.021946][ T1474] syz.3.453[1474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.022022][ T1474] syz.3.453[1474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.045944][ T1475] kvm [1472]: vcpu0, guest rIP: 0x1b disabled perfctr wrmsr: 0xc1 data 0xd [ 52.046074][ T1475] kvm [1472]: vcpu0, guest rIP: 0x1d disabled perfctr wrmsr: 0xc1 data 0xd [ 52.046849][ T1475] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.091112][ T1471] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 52.124143][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 52.124159][ T30] audit: type=1400 audit(1725529341.539:644): avc: denied { read write } for pid=1480 comm="syz.4.455" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 52.161472][ T30] audit: type=1400 audit(1725529341.549:645): avc: denied { open } for pid=1480 comm="syz.4.455" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 52.171883][ T1482] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 52.205470][ T30] audit: type=1400 audit(1725529341.619:646): avc: denied { read write } for pid=1481 comm="syz.2.456" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.230722][ T30] audit: type=1400 audit(1725529341.619:647): avc: denied { open } for pid=1481 comm="syz.2.456" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.254135][ T627] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 52.255379][ T30] audit: type=1326 audit(1725529341.649:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541c74bef9 code=0x7ffc0000 [ 52.262992][ T627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.286570][ T30] audit: type=1326 audit(1725529341.649:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541c74bef9 code=0x7ffc0000 [ 52.318080][ T627] usb 1-1: Product: syz [ 52.325800][ T627] usb 1-1: Manufacturer: syz [ 52.334576][ T1494] loop4: detected capacity change from 0 to 1024 [ 52.340434][ T627] usb 1-1: SerialNumber: syz [ 52.346363][ T30] audit: type=1326 audit(1725529341.649:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f541c74bef9 code=0x7ffc0000 [ 52.370698][ T627] usb 1-1: config 0 descriptor?? [ 52.375591][ T30] audit: type=1326 audit(1725529341.649:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541c74bef9 code=0x7ffc0000 [ 52.378825][ T1494] EXT4-fs (loop4): Ignoring removed nobh option [ 52.404956][ T30] audit: type=1326 audit(1725529341.649:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541c74bef9 code=0x7ffc0000 [ 52.428193][ T1494] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.429010][ T30] audit: type=1326 audit(1725529341.649:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f541c74bef9 code=0x7ffc0000 [ 52.465623][ T1494] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,dioread_nolock,usrjquota=,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 52.534846][ T1507] loop3: detected capacity change from 0 to 256 [ 52.602402][ T1507] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 52.614950][ T1507] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 52.734117][ T20] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 52.817904][ T1528] kvm: pic: non byte write [ 52.823320][ T1528] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 52.831219][ T1528] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 52.964313][ T1546] loop3: detected capacity change from 0 to 128 [ 52.974252][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 53.073693][ T1549] loop3: detected capacity change from 0 to 512 [ 53.080003][ T627] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:7c:ca:e9:b3:76 [ 53.095317][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.111482][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.122284][ T627] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 53.129580][ T1549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.140283][ T20] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 53.160325][ T1549] EXT4-fs (loop3): 1 truncate cleaned up [ 53.168619][ T1549] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,nodelalloc,sb=0x0000000000000003,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 53.178476][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.232874][ T20] usb 3-1: config 0 descriptor?? [ 53.288318][ T560] usb 1-1: USB disconnect, device number 11 [ 53.317772][ T1566] device bridge0 entered promiscuous mode [ 53.328170][ T1566] device macsec1 entered promiscuous mode [ 53.338346][ T1566] device bridge0 left promiscuous mode [ 53.654043][ T1574] loop3: detected capacity change from 0 to 40427 [ 53.694805][ T1574] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 53.702375][ T1574] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 53.715016][ T20] steelseries_srws1 0003:1038:1410.0018: unknown main item tag 0xd [ 53.722252][ T1574] F2FS-fs (loop3): invalid crc value [ 53.728139][ T20] steelseries_srws1 0003:1038:1410.0018: item fetching failed at offset 6/7 [ 53.737182][ T20] steelseries_srws1 0003:1038:1410.0018: parse failed [ 53.742909][ T1574] F2FS-fs (loop3): Found nat_bits in checkpoint [ 53.750104][ T20] steelseries_srws1: probe of 0003:1038:1410.0018 failed with error -22 [ 53.799437][ T1574] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 53.806603][ T1574] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 53.916660][ T627] usb 3-1: USB disconnect, device number 10 [ 53.981140][ T1607] loop0: detected capacity change from 0 to 256 [ 54.164127][ T627] Bluetooth: hci0: command 0x1003 tx timeout [ 54.170131][ T820] Bluetooth: hci0: sending frame failed (-49) [ 54.595301][ T1635] netlink: 6 bytes leftover after parsing attributes in process `syz.2.509'. [ 54.604097][ T1635] netlink: 6 bytes leftover after parsing attributes in process `syz.2.509'. [ 54.624068][ T561] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 54.873978][ T561] usb 1-1: Using ep0 maxpacket: 8 [ 54.893998][ T560] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 55.014065][ T561] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.025027][ T561] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.034641][ T561] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 55.043472][ T561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.052113][ T561] usb 1-1: config 0 descriptor?? [ 55.274093][ T560] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.285018][ T560] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.295337][ T560] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 55.304228][ T560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.312856][ T560] usb 3-1: config 0 descriptor?? [ 55.524899][ T561] kone 0003:1E7D:2CED.0019: collection stack underflow [ 55.531617][ T561] kone 0003:1E7D:2CED.0019: item 0 1 0 12 parsing failed [ 55.538675][ T561] kone 0003:1E7D:2CED.0019: parse failed [ 55.544170][ T561] kone: probe of 0003:1E7D:2CED.0019 failed with error -22 [ 55.725431][ T561] usb 1-1: USB disconnect, device number 12 [ 55.794253][ T560] hid (null): invalid report_count 54134 [ 55.801793][ T560] logitech-hidpp-device 0003:046D:C086.001A: invalid report_count 54134 [ 55.810050][ T560] logitech-hidpp-device 0003:046D:C086.001A: item 0 4 1 9 parsing failed [ 55.818331][ T560] logitech-hidpp-device 0003:046D:C086.001A: hidpp_probe:parse failed [ 55.826470][ T560] logitech-hidpp-device: probe of 0003:046D:C086.001A failed with error -22 [ 55.995317][ T627] usb 3-1: USB disconnect, device number 11 [ 56.244102][ T627] Bluetooth: hci0: command 0x1001 tx timeout [ 56.249959][ T820] Bluetooth: hci0: sending frame failed (-49) [ 56.539870][ T1656] loop3: detected capacity change from 0 to 256 [ 56.615472][ T1665] APIC base relocation is unsupported by KVM [ 56.748564][ T1681] loop2: detected capacity change from 0 to 2048 [ 56.818125][ T1668] loop0: detected capacity change from 0 to 40427 [ 56.825039][ T1681] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 56.845528][ T1681] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 56.880711][ T1668] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 56.888921][ T1668] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 56.898350][ T1668] F2FS-fs (loop0): invalid crc value [ 56.905258][ T1668] F2FS-fs (loop0): Found nat_bits in checkpoint [ 56.942071][ T1668] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 56.948977][ T1668] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 56.967031][ T1668] attempt to access beyond end of device [ 56.967031][ T1668] loop0: rw=2049, want=45208, limit=40427 [ 57.356873][ T1693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 57.369130][ T819] Bluetooth: hci1: sending frame failed (-49) [ 57.490243][ T1696] loop0: detected capacity change from 0 to 40427 [ 57.501472][ T1696] F2FS-fs (loop0): invalid crc value [ 57.507916][ T1696] F2FS-fs (loop0): Found nat_bits in checkpoint [ 57.538711][ T1696] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 57.560823][ T1696] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=10, npages=1 [ 57.574533][ T1081] attempt to access beyond end of device [ 57.574533][ T1081] loop0: rw=2049, want=45104, limit=40427 [ 57.750411][ T1702] loop2: detected capacity change from 0 to 40427 [ 57.805118][ T1702] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 57.812678][ T1702] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 57.823303][ T1702] F2FS-fs (loop2): invalid crc value [ 57.832413][ T1702] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.897813][ T1702] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 57.904920][ T1702] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 57.935464][ T1702] attempt to access beyond end of device [ 57.935464][ T1702] loop2: rw=2049, want=45208, limit=40427 [ 58.324001][ T627] Bluetooth: hci0: command 0x1009 tx timeout [ 59.444057][ T561] Bluetooth: hci1: command 0x1003 tx timeout [ 59.450030][ T1697] Bluetooth: hci1: sending frame failed (-49) [ 61.524581][ T561] Bluetooth: hci1: command 0x1001 tx timeout [ 61.530482][ T1697] Bluetooth: hci1: sending frame failed (-49) [ 62.472547][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 62.472561][ T30] audit: type=1326 audit(1725529351.889:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0879ef9 code=0x7ffc0000 [ 62.480322][ T1720] loop4: detected capacity change from 0 to 256 [ 62.513475][ T30] audit: type=1326 audit(1725529351.929:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f0ad0879ef9 code=0x7ffc0000 [ 62.545583][ T30] audit: type=1326 audit(1725529351.929:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0879ef9 code=0x7ffc0000 [ 62.574914][ T1720] FAT-fs (loop4): bogus sectors per cluster 0 [ 62.585557][ T1720] FAT-fs (loop4): Can't find a valid FAT filesystem [ 62.594782][ T1732] loop2: detected capacity change from 0 to 512 [ 62.635201][ T1733] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.642056][ T1733] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.649452][ T1733] device bridge_slave_0 entered promiscuous mode [ 62.656074][ T30] audit: type=1400 audit(1725529352.079:698): avc: denied { mounton } for pid=1717 comm="syz.4.532" path="/proc/57/task" dev="proc" ino=22829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 62.665004][ T1733] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.680707][ T1732] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.685432][ T1733] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.704318][ T1733] device bridge_slave_1 entered promiscuous mode [ 62.719488][ T1732] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.536: casefold flag without casefold feature [ 62.744193][ T1732] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.536: missing EA_INODE flag [ 62.764269][ T1732] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.536: error while reading EA inode 12 err=-117 [ 62.780788][ T1732] EXT4-fs (loop2): 1 orphan inode deleted [ 62.786593][ T1732] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 62.834246][ T627] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 62.859035][ T1733] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.865893][ T1733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.872999][ T1733] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.879800][ T1733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.895884][ T287] syz-executor (287) used greatest stack depth: 20192 bytes left [ 62.904776][ T325] tipc: Left network mode [ 62.913742][ T561] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.921342][ T561] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.928784][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.936445][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.959669][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.972661][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.979566][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.987067][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.995133][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.995775][ T1745] loop4: detected capacity change from 0 to 2048 [ 63.002004][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.024995][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.032808][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.053630][ T1733] device veth0_vlan entered promiscuous mode [ 63.061037][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.069698][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.077637][ T1745] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 63.078144][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.096872][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.111917][ T1733] device veth1_macvtap entered promiscuous mode [ 63.121049][ T1745] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 63.144189][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.160439][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.169964][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.186301][ T1729] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 63.251473][ T1754] loop1: detected capacity change from 0 to 2048 [ 63.304085][ T627] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.389712][ T1754] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.400327][ T1754] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 63.416418][ T627] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 63.421130][ T1754] fs-verity: sha512 using implementation "sha512-avx2" [ 63.423899][ T627] usb 1-1: can't read configurations, error -71 [ 63.454747][ T1754] syz.1.546 (1754) used greatest stack depth: 20144 bytes left [ 63.474980][ T1750] loop2: detected capacity change from 0 to 40427 [ 63.503310][ T1750] F2FS-fs (loop2): invalid crc value [ 63.516290][ T1750] F2FS-fs (loop2): Found nat_bits in checkpoint [ 63.549205][ T1750] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 63.578428][ T1750] F2FS-fs (loop2): Unexpected flush for atomic writes: ino=10, npages=1 [ 63.587634][ T325] device bridge_slave_1 left promiscuous mode [ 63.593854][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.602203][ T622] attempt to access beyond end of device [ 63.602203][ T622] loop2: rw=2049, want=45104, limit=40427 [ 63.604013][ T308] Bluetooth: hci1: command 0x1009 tx timeout [ 63.613923][ T325] device bridge_slave_0 left promiscuous mode [ 63.625633][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.638578][ T325] device veth1_macvtap left promiscuous mode [ 63.644719][ T325] device veth0_vlan left promiscuous mode [ 63.670367][ T1774] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 63.678316][ T1774] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 63.742931][ T1779] loop1: detected capacity change from 0 to 128 [ 63.770772][ T1781] loop0: detected capacity change from 0 to 2048 [ 63.779276][ T1779] EXT4-fs (loop1): Test dummy encryption mode enabled [ 63.789664][ T1779] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 63.794109][ T20] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 63.814081][ T1781] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 63.831247][ T1779] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff) [ 63.849401][ T1779] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 63.865216][ T1781] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 64.063133][ T1802] loop0: detected capacity change from 0 to 512 [ 64.084081][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 64.158771][ T1802] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 64.194138][ T1802] ext4 filesystem being mounted at /40/bus supports timestamps until 2038 (0x7fffffff) [ 64.404510][ T20] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 64.413385][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.435629][ T20] usb 5-1: Product: syz [ 64.439639][ T20] usb 5-1: Manufacturer: syz [ 64.445109][ T20] usb 5-1: SerialNumber: syz [ 64.458965][ T20] r8152-cfgselector 5-1: config 0 descriptor?? [ 64.467453][ T1818] loop0: detected capacity change from 0 to 256 [ 64.482567][ T1818] exfat: Unknown parameter 'fmsk' [ 64.580245][ T30] audit: type=1326 audit(1725529353.999:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0879ef9 code=0x7ffc0000 [ 64.634171][ T30] audit: type=1326 audit(1725529353.999:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f0ad0879ef9 code=0x7ffc0000 [ 64.687883][ T30] audit: type=1326 audit(1725529353.999:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0879ef9 code=0x7ffc0000 [ 64.741634][ T30] audit: type=1326 audit(1725529354.039:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0879ef9 code=0x7ffc0000 [ 64.791978][ T1820] loop2: detected capacity change from 0 to 128 [ 64.834671][ T1820] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.846634][ T1820] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.886215][ T325] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.938196][ T1824] loop1: detected capacity change from 0 to 2048 [ 64.938429][ T1822] 9pnet: p9_errstr2errno: server reported unknown error @í΂ [ 64.964222][ T20] r8152-cfgselector 5-1: Unknown version 0x0000 [ 64.972883][ T20] r8152-cfgselector 5-1: bad CDC descriptors [ 64.991905][ T1829] loop2: detected capacity change from 0 to 512 [ 65.005182][ T1824] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 65.012181][ T1829] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 65.012181][ T1829] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 65.012181][ T1829] [ 65.019028][ T20] r8152-cfgselector 5-1: Unknown version 0x0000 [ 65.047486][ T20] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 65.050738][ T1824] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 65.067094][ T1829] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #3: comm syz.2.573: corrupted inode contents [ 65.091442][ T1829] EXT4-fs (loop2): Remounting filesystem read-only [ 65.098166][ T1829] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #3: comm syz.2.573: mark_inode_dirty error [ 65.112060][ T1829] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #3: comm syz.2.573: corrupted inode contents [ 65.124308][ T1829] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.573: mark_inode_dirty error [ 65.135663][ T1829] Quota error (device loop2): write_blk: dquota write failed [ 65.144548][ T1829] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 65.154609][ T1829] EXT4-fs error (device loop2): ext4_acquire_dquot:6187: comm syz.2.573: Failed to acquire dquot type 0 [ 65.174241][ T1829] EXT4-fs (loop2): 1 truncate cleaned up [ 65.179753][ T1829] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,. Quota mode: writeback. [ 65.192487][ T1829] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038 (0x7fffffff) [ 65.350246][ T1851] loop2: detected capacity change from 0 to 512 [ 65.372672][ T1835] loop0: detected capacity change from 0 to 40427 [ 65.417167][ T1835] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 65.440246][ T1835] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 65.444643][ T1851] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #16: comm syz.2.580: corrupted xattr block 8 [ 65.450562][ T1835] F2FS-fs (loop0): invalid crc value [ 65.465963][ T1851] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -117) [ 65.475092][ T1851] EXT4-fs (loop2): 1 orphan inode deleted [ 65.480887][ T1851] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.492170][ T1851] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038 (0x7fffffff) [ 65.509177][ T1835] F2FS-fs (loop0): Found nat_bits in checkpoint [ 65.531924][ T1863] loop4: detected capacity change from 0 to 2048 [ 65.555007][ T1835] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 65.562236][ T1835] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 65.575619][ T1863] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.586150][ T1863] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 65.642464][ T1081] attempt to access beyond end of device [ 65.642464][ T1081] loop0: rw=2049, want=45104, limit=40427 [ 65.644464][ T1870] loop1: detected capacity change from 0 to 512 [ 65.708786][ T1870] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.597: inode #1: comm syz.1.597: iget: illegal inode # [ 65.722188][ T1870] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.597: error while reading EA inode 1 err=-117 [ 65.735893][ T1870] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.597: inode #1: comm syz.1.597: iget: illegal inode # [ 65.748778][ T1870] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.597: error while reading EA inode 1 err=-117 [ 65.761524][ T1870] EXT4-fs (loop1): 1 orphan inode deleted [ 65.767160][ T1870] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 65.867738][ T1880] loop0: detected capacity change from 0 to 512 [ 65.893356][ T1881] loop4: detected capacity change from 0 to 2048 [ 65.907590][ T1880] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.918856][ T1880] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038 (0x7fffffff) [ 65.947830][ T1881] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.043870][ T1892] loop0: detected capacity change from 0 to 2048 [ 66.084040][ T627] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 66.094658][ T1892] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 66.120219][ T1892] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 66.348737][ T627] usb 2-1: Using ep0 maxpacket: 16 [ 66.532517][ T1920] loop2: detected capacity change from 0 to 512 [ 66.616539][ T1920] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.623020][ T1920] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.604: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 66.641586][ T1920] EXT4-fs error (device loop2): ext4_quota_enable:6381: comm syz.2.604: Bad quota inode: 4, type: 1 [ 66.652893][ T1920] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.667760][ T1920] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 66.674519][ T1920] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.691958][ T1920] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 66.704341][ T627] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 66.713985][ T627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.722355][ T627] usb 2-1: Product: syz [ 66.726771][ T627] usb 2-1: Manufacturer: syz [ 66.731175][ T627] usb 2-1: SerialNumber: syz [ 66.752881][ T627] usb 2-1: config 0 descriptor?? [ 66.764083][ T308] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 66.804877][ T627] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 66.812613][ T627] usb 2-1: Detected FT232H [ 66.871267][ T1927] loop2: detected capacity change from 0 to 512 [ 66.934894][ T1927] EXT4-fs (loop2): filesystem is read-only [ 66.945323][ T1927] EXT4-fs (loop2): filesystem is read-only [ 66.950973][ T1927] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.957363][ T1927] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.606: bad orphan inode 16 [ 66.967798][ T1927] ext4_test_bit(bit=15, block=3) = 0 [ 66.972989][ T1927] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 67.004051][ T308] usb 1-1: Using ep0 maxpacket: 8 [ 67.024083][ T627] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 67.124160][ T308] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 67.133163][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.141789][ T308] usb 1-1: config 0 descriptor?? [ 67.264029][ T20] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 67.284106][ T627] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 67.291167][ T627] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 67.300391][ T627] usb 2-1: USB disconnect, device number 10 [ 67.307541][ T627] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 67.316894][ T627] ftdi_sio 2-1:0.0: device disconnected [ 67.523992][ T1937] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.530938][ T1937] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.538485][ T1937] device bridge_slave_0 entered promiscuous mode [ 67.545515][ T1937] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.552348][ T1937] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.559866][ T1937] device bridge_slave_1 entered promiscuous mode [ 67.623366][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.630730][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.637912][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.649287][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.658910][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 67.659486][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.667725][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.678935][ T20] usb 5-1: config 0 descriptor?? [ 67.688002][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.696210][ T560] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.703122][ T560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.710363][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.718511][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.727549][ T560] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.734406][ T560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.741649][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.762226][ T1937] device veth0_vlan entered promiscuous mode [ 67.769907][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.778310][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.786288][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.790265][ T1942] loop2: detected capacity change from 0 to 512 [ 67.793683][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.807628][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.815503][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.828842][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.837935][ T1937] device veth1_macvtap entered promiscuous mode [ 67.850321][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.871111][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 67.871128][ T30] audit: type=1400 audit(1725529357.289:708): avc: denied { write } for pid=1943 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.884001][ T1942] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.907463][ T1942] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038 (0x7fffffff) [ 67.929577][ T1942] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #2: comm syz.2.612: corrupted inode contents [ 67.933122][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.947260][ T1942] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #2: comm syz.2.612: mark_inode_dirty error [ 67.960858][ T1942] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #2: comm syz.2.612: corrupted inode contents [ 67.975722][ T1942] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.612: mark_inode_dirty error [ 68.078674][ T30] audit: type=1326 audit(1725529357.499:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afa282ef9 code=0x7ffc0000 [ 68.103456][ T30] audit: type=1326 audit(1725529357.499:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f4afa282ef9 code=0x7ffc0000 [ 68.138214][ T30] audit: type=1326 audit(1725529357.559:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afa282ef9 code=0x7ffc0000 [ 68.163532][ T30] audit: type=1326 audit(1725529357.579:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afa282ef9 code=0x7ffc0000 [ 68.175571][ T20] lg-g15 0003:046D:C222.001B: unknown main item tag 0x0 [ 68.203995][ T20] lg-g15 0003:046D:C222.001B: unknown main item tag 0x0 [ 68.210795][ T20] lg-g15 0003:046D:C222.001B: unknown main item tag 0x0 [ 68.224016][ T20] lg-g15 0003:046D:C222.001B: unknown main item tag 0x0 [ 68.235176][ T20] lg-g15 0003:046D:C222.001B: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 68.344002][ T561] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 68.400208][ T1213] usb 5-1: USB disconnect, device number 7 [ 68.493998][ T1963] loop1: detected capacity change from 0 to 512 [ 68.531823][ T1963] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.538330][ T1963] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.616: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 68.556778][ T1963] EXT4-fs error (device loop1): ext4_quota_enable:6381: comm syz.1.616: Bad quota inode: 4, type: 1 [ 68.568148][ T1963] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.583031][ T1963] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 68.589643][ T1963] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.603524][ T1963] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 68.622027][ T30] audit: type=1400 audit(1725529358.039:713): avc: denied { block_suspend } for pid=1965 comm="syz.3.618" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.643738][ T325] device bridge_slave_1 left promiscuous mode [ 68.650223][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.657848][ T325] device bridge_slave_0 left promiscuous mode [ 68.665734][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.676226][ T325] device veth1_macvtap left promiscuous mode [ 68.682114][ T325] device veth0_vlan left promiscuous mode [ 68.687922][ T308] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 68.698109][ T308] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 68.724073][ T308] asix: probe of 1-1:0.0 failed with error -71 [ 68.731240][ T308] usb 1-1: USB disconnect, device number 15 [ 68.737306][ T561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.748809][ T561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.761549][ T561] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 68.773406][ T561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.782744][ T561] usb 3-1: config 0 descriptor?? [ 68.954061][ T310] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 69.183982][ T560] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 69.191585][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.197972][ T20] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 69.214086][ T310] usb 2-1: Using ep0 maxpacket: 8 [ 69.259731][ T1977] kvm: pic: non byte write [ 69.265005][ T561] elo 0003:04E7:0030.001C: item fetching failed at offset 5/7 [ 69.272569][ T561] elo 0003:04E7:0030.001C: parse failed [ 69.278468][ T561] elo: probe of 0003:04E7:0030.001C failed with error -22 [ 69.354083][ T310] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 69.364868][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.375491][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.385111][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 69.398023][ T310] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 69.406819][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.415597][ T310] usb 2-1: config 0 descriptor?? [ 69.444086][ T560] usb 5-1: Using ep0 maxpacket: 16 [ 69.467621][ T1213] usb 3-1: USB disconnect, device number 12 [ 69.564122][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.574967][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.587760][ T20] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.594086][ T560] usb 5-1: config 0 has no interfaces? [ 69.596679][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.610718][ T20] usb 4-1: config 0 descriptor?? [ 69.794121][ T560] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 69.803067][ T560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.810827][ T560] usb 5-1: Product: syz [ 69.814838][ T560] usb 5-1: Manufacturer: syz [ 69.819196][ T560] usb 5-1: SerialNumber: syz [ 69.824276][ T560] r8152-cfgselector 5-1: config 0 descriptor?? [ 69.885308][ T310] kye 0003:0458:5011.001D: unbalanced collection at end of report description [ 69.894238][ T310] kye 0003:0458:5011.001D: parse failed [ 69.899607][ T310] kye: probe of 0003:0458:5011.001D failed with error -22 [ 70.075005][ T325] usb 5-1: config 0 descriptor?? [ 70.095176][ T20] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 70.107789][ T6] usb 2-1: USB disconnect, device number 11 [ 70.117626][ T20] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 70.276519][ T310] usb 5-1: USB disconnect, device number 8 [ 70.294089][ T325] usb 5-1: can't set config #0, error -71 [ 70.374056][ T627] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 70.414106][ T60] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 70.619374][ T30] audit: type=1326 audit(1725529360.039:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1992 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afa282ef9 code=0x7ffc0000 [ 70.643654][ T627] usb 3-1: Using ep0 maxpacket: 8 [ 70.648676][ T30] audit: type=1326 audit(1725529360.039:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1992 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4afa282ef9 code=0x7ffc0000 [ 70.672586][ T30] audit: type=1326 audit(1725529360.039:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1992 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afa282ef9 code=0x7ffc0000 [ 70.695953][ T30] audit: type=1326 audit(1725529360.039:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1992 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4afa282ef9 code=0x7ffc0000 [ 70.702109][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 70.793135][ T1999] loop1: detected capacity change from 0 to 256 [ 70.794591][ T1213] usb 4-1: USB disconnect, device number 10 [ 70.812202][ T2001] loop4: detected capacity change from 0 to 256 [ 70.814161][ T627] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 70.827225][ T627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.835928][ T627] usb 3-1: config 0 descriptor?? [ 70.857715][ T2001] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 70.869940][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.881552][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.896034][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.926757][ T60] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 70.936263][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.944963][ T60] usb 1-1: config 0 descriptor?? [ 71.094073][ T627] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 71.347930][ T2011] loop1: detected capacity change from 0 to 512 [ 71.396999][ T2011] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.411812][ T2011] EXT4-fs (loop1): 1 truncate cleaned up [ 71.417780][ T2011] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 71.437902][ T60] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 71.447337][ T60] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 71.454760][ T60] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 71.468410][ T60] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 71.476346][ T60] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 71.485481][ T60] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 71.493067][ T60] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 71.500981][ T60] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 71.511083][ T60] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 71.529508][ T60] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 71.555820][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001F/input/input8 [ 71.576448][ T60] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 71.693580][ T599] usb 1-1: USB disconnect, device number 16 [ 71.734071][ T60] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 71.787575][ T2015] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.794713][ T2015] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.802217][ T2015] device bridge_slave_0 entered promiscuous mode [ 71.811755][ T2015] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.824126][ T2015] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.837148][ T2015] device bridge_slave_1 entered promiscuous mode [ 71.902111][ T2015] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.908964][ T2015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.916099][ T2015] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.922927][ T2015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.943783][ T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.951473][ T599] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.958882][ T599] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.970561][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.978718][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.985577][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.005253][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.013218][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.020075][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.027508][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.035895][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.052297][ T2015] device veth0_vlan entered promiscuous mode [ 72.058512][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.066819][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.074666][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.081855][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.094424][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.095470][ T2015] device veth1_macvtap entered promiscuous mode [ 72.111380][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.121609][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.129710][ T60] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 72.138608][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.146549][ T20] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 72.157773][ T60] usb 4-1: config 0 descriptor?? [ 72.158314][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.175589][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.190797][ T644] device bridge_slave_1 left promiscuous mode [ 72.197242][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.205943][ T644] device bridge_slave_0 left promiscuous mode [ 72.214431][ T644] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.230595][ T644] device veth1_macvtap left promiscuous mode [ 72.236796][ T644] device veth0_vlan left promiscuous mode [ 72.280368][ T2026] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 72.374156][ T627] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 72.378443][ T2023] loop1: detected capacity change from 0 to 40427 [ 72.384118][ T627] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 72.400305][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 72.406520][ T627] asix: probe of 3-1:0.0 failed with error -71 [ 72.413528][ T627] usb 3-1: USB disconnect, device number 13 [ 72.455045][ T2023] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 72.462697][ T2023] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 72.473839][ T2023] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.506734][ T2023] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 72.513637][ T2023] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.526625][ T20] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 72.537322][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.548093][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.564722][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 72.578462][ T20] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 72.593955][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.602817][ T20] usb 5-1: config 0 descriptor?? [ 72.644961][ T60] elo 0003:04E7:0030.0020: item fetching failed at offset 5/7 [ 72.653265][ T60] elo 0003:04E7:0030.0020: parse failed [ 72.658758][ T60] elo: probe of 0003:04E7:0030.0020 failed with error -22 [ 72.864586][ T627] usb 4-1: USB disconnect, device number 11 [ 73.034014][ T1213] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 73.073084][ T2038] loop2: detected capacity change from 0 to 256 [ 73.085302][ T20] kye 0003:0458:5011.0021: unbalanced collection at end of report description [ 73.094863][ T20] kye 0003:0458:5011.0021: parse failed [ 73.100709][ T20] kye: probe of 0003:0458:5011.0021 failed with error -22 [ 73.127556][ T2038] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 73.284253][ T1213] usb 2-1: Using ep0 maxpacket: 16 [ 73.289717][ T60] usb 5-1: USB disconnect, device number 9 [ 73.424022][ T1213] usb 2-1: config 0 has no interfaces? [ 73.464002][ T20] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 73.594075][ T1213] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 73.603588][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.612744][ T1213] usb 2-1: Product: syz [ 73.617578][ T1213] usb 2-1: Manufacturer: syz [ 73.623132][ T1213] usb 2-1: SerialNumber: syz [ 73.633274][ T1213] r8152-cfgselector 2-1: config 0 descriptor?? [ 73.774448][ T308] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 73.824038][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.840662][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.857427][ T20] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.866652][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.877636][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 73.877653][ T30] audit: type=1326 audit(1725529363.299:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2061 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 73.909888][ T20] usb 3-1: config 0 descriptor?? [ 73.933794][ T30] audit: type=1326 audit(1725529363.299:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2061 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 73.959752][ T30] audit: type=1326 audit(1725529363.329:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2061 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 73.983867][ T30] audit: type=1326 audit(1725529363.329:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2061 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 74.008793][ T30] audit: type=1326 audit(1725529363.329:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2061 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 74.033888][ T30] audit: type=1326 audit(1725529363.329:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2061 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 74.057138][ T308] usb 4-1: Using ep0 maxpacket: 16 [ 74.062155][ T30] audit: type=1326 audit(1725529363.329:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2061 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 74.087189][ T30] audit: type=1326 audit(1725529363.329:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2061 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 74.111488][ T30] audit: type=1326 audit(1725529363.329:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2061 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 74.136772][ T30] audit: type=1326 audit(1725529363.329:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2061 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 74.164593][ T627] usb 2-1: USB disconnect, device number 12 [ 74.214041][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.224765][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.234833][ T308] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.247555][ T308] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 74.256420][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.265468][ T308] usb 4-1: config 0 descriptor?? [ 74.395489][ T20] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 74.404937][ T20] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 74.474041][ T6] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 74.735941][ T308] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 74.743038][ T308] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 74.750120][ T308] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 74.757206][ T308] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 74.764259][ T308] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 74.771423][ T308] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 74.778509][ T308] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 74.785505][ T308] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 74.792620][ T308] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 74.799756][ T308] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 74.810869][ T308] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0023/input/input9 [ 74.823529][ T308] microsoft 0003:045E:07DA.0023: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 74.834100][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.846120][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.856001][ T6] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 74.864863][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.873369][ T6] usb 5-1: config 0 descriptor?? [ 74.941857][ T20] usb 4-1: USB disconnect, device number 12 [ 74.974076][ T310] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 75.084420][ T308] usb 3-1: USB disconnect, device number 14 [ 75.354849][ T6] elo 0003:04E7:0030.0024: item fetching failed at offset 5/7 [ 75.362463][ T6] elo 0003:04E7:0030.0024: parse failed [ 75.367934][ T6] elo: probe of 0003:04E7:0030.0024 failed with error -22 [ 75.384061][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.394842][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.534197][ T310] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 75.543212][ T310] usb 2-1: New USB device strings: Mfr=0, Product=184, SerialNumber=130 [ 75.551412][ T310] usb 2-1: Product: syz [ 75.555390][ T310] usb 2-1: SerialNumber: syz [ 75.560355][ T20] usb 5-1: USB disconnect, device number 10 [ 75.560582][ T310] usb 2-1: config 0 descriptor?? [ 75.602406][ T2098] xt_bpf: check failed: parse error [ 75.626775][ T2100] loop2: detected capacity change from 0 to 256 [ 75.700189][ T2100] FAT-fs (loop2): Directory bread(block 1285) failed [ 75.735239][ T2100] FAT-fs (loop2): Directory bread(block 1285) failed [ 75.743096][ T2100] FAT-fs (loop2): Directory bread(block 1285) failed [ 75.750079][ T2100] FAT-fs (loop2): Directory bread(block 1285) failed [ 75.757511][ T2100] FAT-fs (loop2): Directory bread(block 1285) failed [ 75.764138][ T2100] FAT-fs (loop2): Directory bread(block 1285) failed [ 75.770670][ T2100] FAT-fs (loop2): Directory bread(block 1285) failed [ 75.778909][ T2100] FAT-fs (loop2): Directory bread(block 1285) failed [ 75.785719][ T2100] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 75.792181][ T2100] FAT-fs (loop2): Directory bread(block 1285) failed [ 76.113983][ T6] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 76.214044][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 76.219915][ T310] usbhid: probe of 2-1:0.0 failed with error -71 [ 76.227039][ T310] usb 2-1: USB disconnect, device number 13 [ 76.254111][ T308] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 76.364120][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 76.464237][ T560] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 76.484148][ T6] usb 3-1: config 0 has no interfaces? [ 76.624044][ T308] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 76.635204][ T308] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 76.646457][ T6] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 76.653433][ T308] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 76.662458][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.665211][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.673480][ T6] usb 3-1: Product: syz [ 76.684475][ T6] usb 3-1: Manufacturer: syz [ 76.688883][ T6] usb 3-1: SerialNumber: syz [ 76.694057][ T2107] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 76.701027][ T6] r8152-cfgselector 3-1: config 0 descriptor?? [ 76.724046][ T560] usb 5-1: Using ep0 maxpacket: 16 [ 76.854095][ T560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.864852][ T560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.874481][ T560] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.887297][ T560] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 76.896192][ T560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.904878][ T560] usb 5-1: config 0 descriptor?? [ 76.944120][ T310] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 76.954013][ T20] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 77.184395][ T6] usb 3-1: USB disconnect, device number 15 [ 77.204226][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 77.304068][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.315022][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.327823][ T310] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.336730][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.344454][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.344490][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.356409][ T310] usb 2-1: config 0 descriptor?? [ 77.367861][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.382329][ T20] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 77.385904][ T560] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 77.391222][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.398339][ T560] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 77.413065][ T20] usb 4-1: config 0 descriptor?? [ 77.413142][ T560] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 77.425661][ T560] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 77.432699][ T560] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 77.439813][ T560] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 77.447304][ T560] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 77.454382][ T560] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 77.461493][ T560] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 77.468729][ T560] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 77.479923][ T560] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0025/input/input11 [ 77.492312][ T560] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 77.597183][ T599] usb 5-1: USB disconnect, device number 11 [ 77.824088][ T308] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 77.831684][ T308] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input10 [ 77.842421][ T308] usb 1-1: USB disconnect, device number 17 [ 77.849800][ T310] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 77.857414][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 77.884233][ T310] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 77.935362][ T20] wacom 0003:056A:5000.0027: unbalanced delimiter at end of report description [ 77.944361][ T20] wacom 0003:056A:5000.0027: parse failed [ 77.949898][ T20] wacom: probe of 0003:056A:5000.0027 failed with error -22 [ 78.139671][ T20] usb 4-1: USB disconnect, device number 13 [ 78.565562][ T20] usb 2-1: USB disconnect, device number 14 [ 78.772556][ T2161] loop2: detected capacity change from 0 to 512 [ 78.787690][ T2161] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.814661][ T2161] EXT4-fs (loop2): 1 truncate cleaned up [ 78.820272][ T2161] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.855509][ T2161] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Out of memory [ 78.886471][ T622] EXT4-fs error (device loop2): ext4_map_blocks:602: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 78.901296][ T622] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Out of memory [ 78.910624][ T622] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 78.953976][ T308] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 79.064910][ T45] tipc: Left network mode [ 79.324028][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.334948][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.464095][ T308] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 79.473009][ T308] usb 4-1: New USB device strings: Mfr=0, Product=184, SerialNumber=130 [ 79.481287][ T308] usb 4-1: Product: syz [ 79.485487][ T308] usb 4-1: SerialNumber: syz [ 79.490644][ T308] usb 4-1: config 0 descriptor?? [ 79.517519][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 79.517552][ T30] audit: type=1326 audit(1725529368.939:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e6f96ef9 code=0x7ffc0000 [ 79.551323][ T30] audit: type=1326 audit(1725529368.969:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e6f96ef9 code=0x7ffc0000 [ 79.574826][ T2169] device veth0_vlan left promiscuous mode [ 79.580398][ T30] audit: type=1326 audit(1725529368.969:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fa9e6f96ef9 code=0x7ffc0000 [ 79.583425][ T2169] device veth0_vlan entered promiscuous mode [ 79.604385][ T30] audit: type=1326 audit(1725529368.969:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e6f96ef9 code=0x7ffc0000 [ 79.674958][ T2172] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.681795][ T2172] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.689439][ T2172] device bridge_slave_0 entered promiscuous mode [ 79.696593][ T45] device bridge_slave_1 left promiscuous mode [ 79.702543][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.709949][ T45] device bridge_slave_0 left promiscuous mode [ 79.715920][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.723451][ T45] device veth1_macvtap left promiscuous mode [ 79.729364][ T45] device veth0_vlan left promiscuous mode [ 79.814081][ T310] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 79.823219][ T2172] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.830301][ T2172] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.837614][ T2172] device bridge_slave_1 entered promiscuous mode [ 79.885425][ T2172] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.892285][ T2172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.899479][ T2172] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.906253][ T2172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.927125][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.934560][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.941734][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.951091][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.959571][ T560] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.966444][ T560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.985095][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.993025][ T560] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.999876][ T560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.007163][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.015199][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.030132][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.038719][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.046965][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.054501][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 80.054812][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.067769][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.075129][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.082471][ T2172] device veth0_vlan entered promiscuous mode [ 80.095440][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.103603][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.112991][ T2172] device veth1_macvtap entered promiscuous mode [ 80.122431][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.124042][ T308] usbhid 4-1:0.0: can't add hid device: -71 [ 80.135543][ T308] usbhid: probe of 4-1:0.0 failed with error -71 [ 80.135879][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.149467][ T308] usb 4-1: USB disconnect, device number 14 [ 80.156048][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.171738][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.174059][ T310] usb 1-1: config 0 has no interfaces? [ 80.199971][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.344325][ T310] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 80.354994][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.362859][ T310] usb 1-1: Product: syz [ 80.367186][ T310] usb 1-1: Manufacturer: syz [ 80.371661][ T310] usb 1-1: SerialNumber: syz [ 80.380489][ T310] r8152-cfgselector 1-1: config 0 descriptor?? [ 80.402745][ T2199] syz.4.708[2199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.402809][ T2199] syz.4.708[2199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.534053][ T6] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 80.580800][ T2209] loop3: detected capacity change from 0 to 512 [ 80.626488][ T2209] EXT4-fs (loop3): 1 truncate cleaned up [ 80.632038][ T2209] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.764065][ T20] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 80.784081][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 80.867356][ T310] usb 1-1: USB disconnect, device number 18 [ 80.924063][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.934820][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.944322][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.956956][ T6] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.965823][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.974608][ T6] usb 3-1: config 0 descriptor?? [ 81.141726][ T2214] loop3: detected capacity change from 0 to 512 [ 81.154132][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.158067][ T2214] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.165985][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.188392][ T20] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.193819][ T2214] EXT4-fs (loop3): 1 truncate cleaned up [ 81.197545][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.202813][ T2214] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.217202][ T20] usb 5-1: config 0 descriptor?? [ 81.234046][ T2214] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Out of memory [ 81.249657][ T1937] EXT4-fs error (device loop3): ext4_map_blocks:602: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 81.265357][ T1937] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Out of memory [ 81.274533][ T1937] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 81.467778][ T6] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 81.475108][ T6] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 81.482258][ T6] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 81.490001][ T6] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 81.497081][ T6] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 81.504177][ T6] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 81.511230][ T6] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 81.518419][ T6] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 81.525757][ T6] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 81.532808][ T6] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 81.541841][ T2224] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.548999][ T2224] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.556172][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0028/input/input12 [ 81.562907][ T6] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 81.570719][ T2224] device bridge_slave_0 entered promiscuous mode [ 81.588330][ T2224] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.595249][ T2224] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.602398][ T2224] device bridge_slave_1 entered promiscuous mode [ 81.663861][ T2224] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.670749][ T2224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.677858][ T2224] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.682474][ T627] usb 3-1: USB disconnect, device number 16 [ 81.684717][ T2224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.707603][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.715768][ T20] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 81.724898][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.732635][ T20] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 81.745140][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.759071][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.767200][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.774070][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.784116][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.792786][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.799657][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.815885][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.824960][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.842830][ T2224] device veth0_vlan entered promiscuous mode [ 81.849433][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.858426][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.866543][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.873722][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.888120][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.897149][ T2224] device veth1_macvtap entered promiscuous mode [ 81.909857][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.925564][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.965000][ T10] device bridge_slave_1 left promiscuous mode [ 81.971050][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.979089][ T10] device bridge_slave_0 left promiscuous mode [ 81.985223][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.993275][ T10] device veth1_macvtap left promiscuous mode [ 82.000006][ T10] device veth0_vlan left promiscuous mode [ 82.118765][ T2241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 82.312676][ T2259] loop0: detected capacity change from 0 to 2048 [ 82.328400][ T2261] loop2: detected capacity change from 0 to 256 [ 82.349597][ T2259] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.381296][ T2259] EXT4-fs (loop0): shut down requested (0) [ 82.387385][ T2261] exfat: Deprecated parameter 'utf8' [ 82.413177][ T2265] syz.1.735[2265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.413237][ T2265] syz.1.735[2265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.425588][ T20] usb 5-1: USB disconnect, device number 12 [ 82.443761][ T30] audit: type=1326 audit(1725529371.859:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2264 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e6f96ef9 code=0x7ffc0000 [ 82.469269][ T2261] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 82.488019][ T30] audit: type=1326 audit(1725529371.869:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2264 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9e6f96ef9 code=0x7ffc0000 [ 82.515495][ T30] audit: type=1326 audit(1725529371.889:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2264 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e6f96ef9 code=0x7ffc0000 [ 82.542237][ T30] audit: type=1326 audit(1725529371.889:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2264 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fa9e6f96ef9 code=0x7ffc0000 [ 82.570572][ T30] audit: type=1326 audit(1725529371.889:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2264 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e6f96ef9 code=0x7ffc0000 [ 82.594847][ T30] audit: type=1326 audit(1725529371.909:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2264 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e6f96ef9 code=0x7ffc0000 [ 82.630483][ T2271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.739'. [ 82.804026][ T627] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 82.964107][ T561] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 83.204056][ T561] usb 1-1: Using ep0 maxpacket: 16 [ 83.214235][ T627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.225226][ T627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.234825][ T627] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 83.243801][ T627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.252512][ T627] usb 2-1: config 0 descriptor?? [ 83.257308][ T6] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 83.324078][ T561] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.334868][ T561] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.344348][ T561] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 83.357206][ T561] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 83.366155][ T561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.373977][ T560] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 83.382561][ T561] usb 1-1: config 0 descriptor?? [ 83.524009][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 83.644172][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.734039][ T560] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.744143][ T560] usb 5-1: config 0 has no interfaces? [ 83.755310][ T627] belkin 0003:1020:0006.002A: item fetching failed at offset 4/5 [ 83.763066][ T627] belkin 0003:1020:0006.002A: parse failed [ 83.768792][ T627] belkin: probe of 0003:1020:0006.002A failed with error -22 [ 83.814084][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.822957][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.830797][ T6] usb 4-1: Product: syz [ 83.834770][ T6] usb 4-1: Manufacturer: syz [ 83.839165][ T6] usb 4-1: SerialNumber: syz [ 83.865617][ T561] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 83.872698][ T561] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 83.879844][ T561] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 83.887253][ T561] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 83.894331][ T561] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 83.901304][ T561] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 83.908361][ T561] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 83.915445][ T560] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 83.924256][ T561] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 83.931240][ T561] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 83.938299][ T560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.946100][ T560] usb 5-1: Product: syz [ 83.950059][ T560] usb 5-1: Manufacturer: syz [ 83.954591][ T561] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 83.961982][ T20] usb 2-1: USB disconnect, device number 15 [ 83.963965][ T560] usb 5-1: SerialNumber: syz [ 83.975602][ T561] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002B/input/input13 [ 83.986990][ T560] r8152-cfgselector 5-1: config 0 descriptor?? [ 83.994132][ T561] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 84.072081][ T561] usb 1-1: USB disconnect, device number 19 [ 84.245290][ T10] usb 5-1: config 0 descriptor?? [ 84.447060][ T561] usb 5-1: USB disconnect, device number 13 [ 84.464029][ T10] usb 5-1: can't set config #0, error -71 [ 84.774092][ T20] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 84.884102][ T627] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 84.969121][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 84.969137][ T30] audit: type=1326 audit(1725529374.389:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2315 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 85.000782][ T2318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.758'. [ 85.004079][ T30] audit: type=1326 audit(1725529374.389:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2315 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 85.009665][ T599] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 85.032882][ T30] audit: type=1326 audit(1725529374.389:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2315 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 85.063853][ T30] audit: type=1326 audit(1725529374.389:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2315 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 85.087196][ T30] audit: type=1326 audit(1725529374.389:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2315 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 85.110546][ T30] audit: type=1326 audit(1725529374.389:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2315 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 85.133817][ T30] audit: type=1326 audit(1725529374.389:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2315 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 85.157093][ T30] audit: type=1326 audit(1725529374.389:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2315 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 85.157291][ T627] usb 2-1: Using ep0 maxpacket: 16 [ 85.180962][ T30] audit: type=1326 audit(1725529374.389:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2315 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 85.208817][ T30] audit: type=1326 audit(1725529374.389:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2315 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f4f1f977ef9 code=0x7ffc0000 [ 85.232158][ T6] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 85.238518][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.249333][ T6] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 85.255187][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.265351][ T20] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 85.274293][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.284840][ T20] usb 3-1: config 0 descriptor?? [ 85.444193][ T6] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 85.444255][ T599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.461996][ T6] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 85.473563][ T6] usb 4-1: USB disconnect, device number 15 [ 85.479451][ T599] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.493340][ T6] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 85.501691][ T599] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.510882][ T627] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 85.519817][ T627] usb 2-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 85.529888][ T599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.542943][ T627] usb 2-1: Product: syz [ 85.556276][ T627] usb 2-1: Manufacturer: syz [ 85.560714][ T627] usb 2-1: SerialNumber: syz [ 85.568993][ T599] usb 1-1: config 0 descriptor?? [ 85.579372][ T627] usb 2-1: config 0 descriptor?? [ 85.584353][ T60] ================================================================== [ 85.592314][ T60] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 85.599959][ T60] Read of size 8 at addr ffff88811412cc70 by task kworker/0:2/60 [ 85.607500][ T60] [ 85.609681][ T60] CPU: 0 PID: 60 Comm: kworker/0:2 Not tainted 5.15.157-syzkaller-00896-g38761ec9fc9e #0 [ 85.619565][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 85.629463][ T60] Workqueue: events_long br_fdb_cleanup [ 85.634852][ T60] Call Trace: [ 85.637964][ T60] [ 85.640747][ T60] dump_stack_lvl+0x151/0x1c0 [ 85.645258][ T60] ? io_uring_drop_tctx_refs+0x190/0x190 [ 85.650735][ T60] ? panic+0x760/0x760 [ 85.654632][ T60] print_address_description+0x87/0x3b0 [ 85.660100][ T60] kasan_report+0x179/0x1c0 [ 85.664433][ T60] ? __kasan_check_write+0x14/0x20 [ 85.669380][ T60] ? __list_del_entry_valid+0xa6/0x120 [ 85.674679][ T60] ? __list_del_entry_valid+0xa6/0x120 [ 85.679971][ T60] __asan_report_load8_noabort+0x14/0x20 [ 85.685437][ T60] __list_del_entry_valid+0xa6/0x120 [ 85.690560][ T60] process_one_work+0x458/0xc10 [ 85.695249][ T60] worker_thread+0xad5/0x12a0 [ 85.699761][ T60] ? _raw_spin_lock+0x1b0/0x1b0 [ 85.704449][ T60] kthread+0x421/0x510 [ 85.708348][ T60] ? worker_clr_flags+0x180/0x180 [ 85.713210][ T60] ? kthread_blkcg+0xd0/0xd0 [ 85.717634][ T60] ret_from_fork+0x1f/0x30 [ 85.721890][ T60] [ 85.724752][ T60] [ 85.726924][ T60] Allocated by task 6: [ 85.730952][ T60] ____kasan_kmalloc+0xdb/0x110 [ 85.735604][ T60] __kasan_kmalloc+0x9/0x10 [ 85.739940][ T60] __kmalloc+0x13a/0x270 [ 85.744024][ T60] kvmalloc_node+0x1f0/0x4d0 [ 85.748457][ T60] alloc_netdev_mqs+0x8c/0xc90 [ 85.753057][ T60] alloc_etherdev_mqs+0x33/0x40 [ 85.758170][ T60] usbnet_probe+0x1ff/0x2830 [ 85.762595][ T60] usb_probe_interface+0x5b6/0xa90 [ 85.767569][ T60] really_probe+0x28d/0x970 [ 85.771881][ T60] __driver_probe_device+0x1a0/0x310 [ 85.777001][ T60] driver_probe_device+0x54/0x3d0 [ 85.781869][ T60] __device_attach_driver+0x2c5/0x470 [ 85.787075][ T60] bus_for_each_drv+0x183/0x200 [ 85.791844][ T60] __device_attach+0x312/0x510 [ 85.796445][ T60] device_initial_probe+0x1a/0x20 [ 85.801308][ T60] bus_probe_device+0xbe/0x1e0 [ 85.805914][ T60] device_add+0xb60/0xf10 [ 85.810075][ T60] usb_set_configuration+0x190f/0x1e80 [ 85.815364][ T60] usb_generic_driver_probe+0x8b/0x150 [ 85.820666][ T60] usb_probe_device+0x144/0x260 [ 85.825345][ T60] really_probe+0x28d/0x970 [ 85.829685][ T60] __driver_probe_device+0x1a0/0x310 [ 85.834895][ T60] driver_probe_device+0x54/0x3d0 [ 85.839754][ T60] __device_attach_driver+0x2c5/0x470 [ 85.844958][ T60] bus_for_each_drv+0x183/0x200 [ 85.849647][ T60] __device_attach+0x312/0x510 [ 85.854247][ T60] device_initial_probe+0x1a/0x20 [ 85.859109][ T60] bus_probe_device+0xbe/0x1e0 [ 85.863707][ T60] device_add+0xb60/0xf10 [ 85.867873][ T60] usb_new_device+0x1038/0x1c00 [ 85.872564][ T60] hub_event+0x2def/0x4770 [ 85.876815][ T60] process_one_work+0x6bb/0xc10 [ 85.881501][ T60] worker_thread+0xad5/0x12a0 [ 85.886013][ T60] kthread+0x421/0x510 [ 85.889917][ T60] ret_from_fork+0x1f/0x30 [ 85.894169][ T60] [ 85.896343][ T60] Freed by task 6: [ 85.899900][ T60] kasan_set_track+0x4b/0x70 [ 85.904324][ T60] kasan_set_free_info+0x23/0x40 [ 85.909099][ T60] ____kasan_slab_free+0x126/0x160 [ 85.914046][ T60] __kasan_slab_free+0x11/0x20 [ 85.918646][ T60] slab_free_freelist_hook+0xbd/0x190 [ 85.923871][ T60] kfree+0xc8/0x220 [ 85.927498][ T60] kvfree+0x35/0x40 [ 85.931145][ T60] netdev_freemem+0x3f/0x60 [ 85.935484][ T60] netdev_release+0x7f/0xb0 [ 85.939824][ T60] device_release+0x95/0x1c0 [ 85.944251][ T60] kobject_put+0x178/0x260 [ 85.948500][ T60] put_device+0x1f/0x30 [ 85.952495][ T60] free_netdev+0x34f/0x440 [ 85.956753][ T60] usbnet_disconnect+0x245/0x390 [ 85.961522][ T60] usb_unbind_interface+0x1fa/0x8c0 [ 85.966555][ T60] device_release_driver_internal+0x50b/0x7d0 [ 85.972461][ T60] device_release_driver+0x19/0x20 [ 85.977494][ T60] bus_remove_device+0x2f8/0x360 [ 85.982264][ T60] device_del+0x663/0xe90 [ 85.986433][ T60] usb_disable_device+0x380/0x720 [ 85.991292][ T60] usb_disconnect+0x32a/0x890 [ 85.995806][ T60] hub_event+0x1d42/0x4770 [ 86.000059][ T60] process_one_work+0x6bb/0xc10 [ 86.004745][ T60] worker_thread+0xe02/0x12a0 [ 86.009281][ T60] kthread+0x421/0x510 [ 86.013163][ T60] ret_from_fork+0x1f/0x30 [ 86.017416][ T60] [ 86.019616][ T60] Last potentially related work creation: [ 86.025144][ T60] kasan_save_stack+0x3b/0x60 [ 86.029740][ T60] __kasan_record_aux_stack+0xd3/0xf0 [ 86.034946][ T60] kasan_record_aux_stack_noalloc+0xb/0x10 [ 86.040591][ T60] insert_work+0x56/0x320 [ 86.044753][ T60] __queue_work+0x92a/0xcd0 [ 86.049103][ T60] queue_work_on+0x105/0x170 [ 86.053524][ T60] usbnet_link_change+0xeb/0x100 [ 86.058295][ T60] usbnet_probe+0x1dd3/0x2830 [ 86.062809][ T60] usb_probe_interface+0x5b6/0xa90 [ 86.067754][ T60] really_probe+0x28d/0x970 [ 86.072095][ T60] __driver_probe_device+0x1a0/0x310 [ 86.077215][ T60] driver_probe_device+0x54/0x3d0 [ 86.082078][ T60] __device_attach_driver+0x2c5/0x470 [ 86.087316][ T60] bus_for_each_drv+0x183/0x200 [ 86.091989][ T60] __device_attach+0x312/0x510 [ 86.096569][ T60] device_initial_probe+0x1a/0x20 [ 86.101519][ T60] bus_probe_device+0xbe/0x1e0 [ 86.106125][ T60] device_add+0xb60/0xf10 [ 86.110285][ T60] usb_set_configuration+0x190f/0x1e80 [ 86.115751][ T60] usb_generic_driver_probe+0x8b/0x150 [ 86.121048][ T60] usb_probe_device+0x144/0x260 [ 86.125732][ T60] really_probe+0x28d/0x970 [ 86.130074][ T60] __driver_probe_device+0x1a0/0x310 [ 86.135191][ T60] driver_probe_device+0x54/0x3d0 [ 86.140052][ T60] __device_attach_driver+0x2c5/0x470 [ 86.145267][ T60] bus_for_each_drv+0x183/0x200 [ 86.149947][ T60] __device_attach+0x312/0x510 [ 86.154546][ T60] device_initial_probe+0x1a/0x20 [ 86.159406][ T60] bus_probe_device+0xbe/0x1e0 [ 86.164118][ T60] device_add+0xb60/0xf10 [ 86.168378][ T60] usb_new_device+0x1038/0x1c00 [ 86.173066][ T60] hub_event+0x2def/0x4770 [ 86.177326][ T60] process_one_work+0x6bb/0xc10 [ 86.182006][ T60] worker_thread+0xad5/0x12a0 [ 86.186521][ T60] kthread+0x421/0x510 [ 86.190510][ T60] ret_from_fork+0x1f/0x30 [ 86.194763][ T60] [ 86.196932][ T60] The buggy address belongs to the object at ffff88811412c000 [ 86.196932][ T60] which belongs to the cache kmalloc-4k of size 4096 [ 86.210819][ T60] The buggy address is located 3184 bytes inside of [ 86.210819][ T60] 4096-byte region [ffff88811412c000, ffff88811412d000) [ 86.224277][ T60] The buggy address belongs to the page: [ 86.229752][ T60] page:ffffea0004504a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114128 [ 86.239815][ T60] head:ffffea0004504a00 order:3 compound_mapcount:0 compound_pincount:0 [ 86.247967][ T60] flags: 0x4000000000010200(slab|head|zone=1) [ 86.253878][ T60] raw: 4000000000010200 ffffea0004519800 0000000200000002 ffff888100043380 [ 86.262297][ T60] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 86.270709][ T60] page dumped because: kasan: bad access detected [ 86.276971][ T60] page_owner tracks the page as allocated [ 86.282518][ T60] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2015, ts 71760789621, free_ts 71719077840 [ 86.304940][ T60] post_alloc_hook+0x1a3/0x1b0 [ 86.309529][ T60] prep_new_page+0x1b/0x110 [ 86.313868][ T60] get_page_from_freelist+0x3550/0x35d0 [ 86.319249][ T60] __alloc_pages+0x27e/0x8f0 [ 86.323677][ T60] new_slab+0x9a/0x4e0 [ 86.327768][ T60] ___slab_alloc+0x39e/0x830 [ 86.332184][ T60] __slab_alloc+0x4a/0x90 [ 86.336434][ T60] __kmalloc+0x16d/0x270 [ 86.340513][ T60] kvmalloc_node+0x1f0/0x4d0 [ 86.344948][ T60] alloc_netdev_mqs+0x8c/0xc90 [ 86.349539][ T60] rtnl_create_link+0x2e1/0x9d0 [ 86.354227][ T60] rtnl_newlink+0x13a7/0x2050 [ 86.358739][ T60] rtnetlink_rcv_msg+0x951/0xc40 [ 86.363512][ T60] netlink_rcv_skb+0x1cf/0x410 [ 86.368114][ T60] rtnetlink_rcv+0x1c/0x20 [ 86.372366][ T60] netlink_unicast+0x8df/0xac0 [ 86.376968][ T60] page last free stack trace: [ 86.381565][ T60] free_unref_page_prepare+0x7c8/0x7d0 [ 86.386869][ T60] free_unref_page+0xe8/0x750 [ 86.391373][ T60] __free_pages+0x61/0xf0 [ 86.395540][ T60] __free_slab+0xec/0x1d0 [ 86.399704][ T60] __unfreeze_partials+0x165/0x1a0 [ 86.404652][ T60] put_cpu_partial+0xc4/0x120 [ 86.409167][ T60] __slab_free+0x1c8/0x290 [ 86.413419][ T60] ___cache_free+0x109/0x120 [ 86.417845][ T60] qlink_free+0x4d/0x90 [ 86.421841][ T60] qlist_free_all+0x44/0xb0 [ 86.426176][ T60] kasan_quarantine_reduce+0x15a/0x180 [ 86.431472][ T60] __kasan_slab_alloc+0x2f/0xe0 [ 86.436244][ T60] slab_post_alloc_hook+0x53/0x2c0 [ 86.441193][ T60] kmem_cache_alloc_trace+0xf9/0x210 [ 86.446312][ T60] kobject_uevent_env+0x269/0x700 [ 86.451173][ T60] kobject_uevent+0x1f/0x30 [ 86.455516][ T60] [ 86.457683][ T60] Memory state around the buggy address: [ 86.463155][ T60] ffff88811412cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.471065][ T60] ffff88811412cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.478950][ T60] >ffff88811412cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.486855][ T60] ^ [ 86.494405][ T60] ffff88811412cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.502385][ T60] ffff88811412cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.510294][ T60] ================================================================== [ 86.518179][ T60] Disabling lock debugging due to kernel taint [ 86.574307][ T20] hid (null): bogus close delimiter [ 86.580072][ T627] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 86.590357][ T627] usb 2-1: Detected FT-X [ 86.784075][ T20] usb 3-1: string descriptor 0 read error: -22 [ 86.790164][ T627] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 86.955182][ T599] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 86.964046][ T599] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 86.995269][ T20] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.002C/input/input14 [ 87.008044][ T20] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.002C/input/input15 [ 87.020639][ T20] uclogic 0003:256C:006D.002C: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 87.198594][ T20] usb 3-1: USB disconnect, device number 17 [ 87.265397][ T627] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 87.473510][ T627] usb 2-1: USB disconnect, device number 16 [ 87.482268][ T627] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 87.491853][ T627] ftdi_sio 2-1:0.0: device disconnected [ 87.634446][ T599] usb 1-1: USB disconnect, device number 20