last executing test programs: 6.533842178s ago: executing program 1 (id=1143): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnexthop={0x18, 0x6a, 0x8a6c4766fbff164d}, 0x18}}, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0}) clock_nanosleep(0xfffffff2, 0x8, &(0x7f0000000400)={r4}, 0x0) openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r5, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x118) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 5.512241209s ago: executing program 1 (id=1150): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x6, 0x5, 0x1000}, 0x4f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) setresuid(0x0, 0x0, 0xee01) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 4.598353962s ago: executing program 1 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x1002, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 4.598121152s ago: executing program 1 (id=1156): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x141a82, 0x0) sendfile(r0, r0, 0x0, 0x4) 4.590702623s ago: executing program 1 (id=1158): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000200)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000040)) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.575762874s ago: executing program 2 (id=1159): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x3fbf, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.544263837s ago: executing program 2 (id=1160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c0002"], 0xc0}}, 0x0) 4.448395684s ago: executing program 2 (id=1163): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) ioctl$KDSIGACCEPT(r3, 0x5607, 0x38) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x107442, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0xc8942, 0x0) pwrite64(r6, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) ftruncate(r6, 0x80000001) 4.1205502s ago: executing program 2 (id=1164): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x40306727, 0x20000000) 4.092520053s ago: executing program 2 (id=1165): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150f, &(0x7f0000000480)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000280)='./bus/file0\x00', 0x0) 2.74581036s ago: executing program 1 (id=1168): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 2.632172289s ago: executing program 0 (id=1171): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x3fbf, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.631609989s ago: executing program 2 (id=1172): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.592353112s ago: executing program 0 (id=1176): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2.161296357s ago: executing program 0 (id=1177): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)={[{@nodots}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@flush}, {@dots}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@dots}]}, 0x1, 0x226, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@generic]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = dup(r4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f9ffffffffffffff"}) 1.681627605s ago: executing program 3 (id=1180): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000200)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000040)) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.278278107s ago: executing program 0 (id=1185): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x86}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)={0x200000, 0x0, 0x8}, 0x18) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x111}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000feb000/0x3000)=nil, 0x3000}, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000001085"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) close(r0) 958.670713ms ago: executing program 0 (id=1186): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@private2, 0x800, 0x2, 0x0, 0x0, 0x7}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000000)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @dev}, @RTA_MARK={0x8}]}, 0x2c}}, 0x0) 805.750355ms ago: executing program 3 (id=1187): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x40306727, 0x20000000) 791.866536ms ago: executing program 0 (id=1188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, 0x0}, {0x0, 0x0}]}) 776.950238ms ago: executing program 3 (id=1189): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) ioctl$KDSIGACCEPT(r3, 0x5607, 0x38) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x107442, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0xc8942, 0x0) pwrite64(r6, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) ftruncate(r6, 0x80000001) 701.667164ms ago: executing program 3 (id=1190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xea60}}, 0x18) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 617.69438ms ago: executing program 3 (id=1191): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 617.42321ms ago: executing program 3 (id=1192): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2}]}}, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 192.584384ms ago: executing program 4 (id=1199): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x40306727, 0x20000000) 183.013705ms ago: executing program 4 (id=1200): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) 125.6425ms ago: executing program 4 (id=1201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xea60}}, 0x18) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 92.578793ms ago: executing program 4 (id=1202): writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setfsgid(0x0) 61.488315ms ago: executing program 4 (id=1203): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 4 (id=1204): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150f, &(0x7f0000000480)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000280)='./bus/file0\x00', 0x0) kernel console output (not intermixed with test programs): ][ T2124] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.656: Invalid inode table block 17950205685819571681 in block_group 0 [ 81.141072][ T2123] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.656: Invalid inode table block 17950205685819571681 in block_group 0 [ 81.158473][ T2124] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.656: Invalid inode table block 17950205685819571681 in block_group 0 [ 81.173844][ T2124] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.656: Invalid inode table block 17950205685819571681 in block_group 0 [ 81.188818][ T2123] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.656: Invalid inode table block 17950205685819571681 in block_group 0 [ 81.203295][ T2123] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.656: Invalid inode table block 17950205685819571681 in block_group 0 [ 81.229760][ T28] audit: type=1400 audit(1719985136.340:652): avc: denied { nlmsg_write } for pid=2133 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 81.250978][ T28] audit: type=1400 audit(1719985136.340:653): avc: denied { nlmsg_read } for pid=2133 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 81.363255][ T438] hid (null): bogus close delimiter [ 81.775907][ T438] usb 1-1: language id specifier not provided by device, defaulting to English [ 81.815373][ T622] EXT4-fs (loop2): unmounting filesystem. [ 81.896118][ T392] syz-executor (392) used greatest stack depth: 19992 bytes left [ 81.913078][ T316] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 82.000610][ T2150] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.007984][ T2150] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.015776][ T2150] device bridge_slave_0 entered promiscuous mode [ 82.023331][ T2150] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.030204][ T2150] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.037530][ T2150] device bridge_slave_1 entered promiscuous mode [ 82.083016][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.102053][ T2150] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.108969][ T2150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.116049][ T2150] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.122907][ T2150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.154205][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.162296][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.170561][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.188938][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.189176][ T2102] loop0: detected capacity change from 0 to 512 [ 82.197854][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.209871][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.210906][ T2102] EXT4-fs: Ignoring removed bh option [ 82.220650][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.223659][ T28] audit: type=1400 audit(1719985137.330:654): avc: denied { setopt } for pid=2155 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.230727][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.256587][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.257342][ T2102] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 82.264238][ T28] audit: type=1400 audit(1719985137.330:655): avc: denied { read } for pid=2155 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.273889][ T2102] EXT4-fs (loop0): 1 truncate cleaned up [ 82.297385][ T2102] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 82.305779][ T316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.316020][ T316] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 82.325096][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.325802][ T438] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000E/input/input5 [ 82.333747][ T316] usb 2-1: config 0 descriptor?? [ 82.354448][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.362655][ T28] audit: type=1400 audit(1719985137.470:656): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=545 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.385061][ T28] audit: type=1400 audit(1719985137.470:657): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=545 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.387828][ T438] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000E/input/input6 [ 82.420184][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.433668][ T316] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 82.434787][ T438] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000E/input/input7 [ 82.441132][ T28] audit: type=1400 audit(1719985137.550:658): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=545 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.454125][ T438] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000E/input/input8 [ 82.487374][ T316] usb 2-1: No valid video chain found. [ 82.498810][ T728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.508842][ T438] uclogic 0003:256C:006D.000E: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 82.514624][ T2150] device veth0_vlan entered promiscuous mode [ 82.536199][ T342] bridge0: port 3(gretap0) entered disabled state [ 82.543115][ T24] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.543792][ T342] device gretap0 left promiscuous mode [ 82.554140][ T24] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 82.569766][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 82.584601][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.587723][ T438] usb 1-1: USB disconnect, device number 9 [ 82.598647][ T342] bridge0: port 3(gretap0) entered disabled state [ 82.607587][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.621995][ T2150] device veth1_macvtap entered promiscuous mode [ 82.629157][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.637299][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.646008][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.654316][ T315] usb 2-1: USB disconnect, device number 9 [ 82.670911][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.679362][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.793643][ T342] device bridge_slave_1 left promiscuous mode [ 82.799629][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.807287][ T342] device bridge_slave_0 left promiscuous mode [ 82.813352][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.821366][ T342] device veth1_macvtap left promiscuous mode [ 82.827294][ T342] device veth0_vlan left promiscuous mode [ 83.105595][ T2049] EXT4-fs (loop0): unmounting filesystem. [ 83.213561][ T2175] netlink: 148 bytes leftover after parsing attributes in process `syz.1.673'. [ 83.462917][ T39] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 83.943734][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.955240][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.964970][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.981198][ T39] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 83.990309][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.020864][ T39] usb 1-1: config 0 descriptor?? [ 84.092981][ T24] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 84.100566][ T24] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input9 [ 84.110261][ T24] input: failed to attach handler kbd to device input9, error: -5 [ 84.134725][ T24] usb 4-1: USB disconnect, device number 5 [ 84.283290][ T728] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 84.515359][ T39] acrux 0003:1A34:0802.000F: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 84.526850][ T728] usb 2-1: Using ep0 maxpacket: 32 [ 84.531954][ T39] acrux 0003:1A34:0802.000F: no inputs found [ 84.538485][ T39] acrux 0003:1A34:0802.000F: Failed to enable force feedback support, error: -19 [ 84.643016][ T728] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.652973][ T728] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.665849][ T728] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.674841][ T728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.683473][ T728] usb 2-1: config 0 descriptor?? [ 84.723823][ T39] usb 1-1: USB disconnect, device number 10 [ 84.733762][ T728] hub 2-1:0.0: bad descriptor, ignoring hub [ 84.739490][ T728] hub: probe of 2-1:0.0 failed with error -5 [ 84.745838][ T728] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 84.763346][ T299] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 84.954252][ T39] kernel write not supported for file /input/event0 (pid: 39 comm: kworker/1:1) [ 85.023028][ T299] usb 4-1: Using ep0 maxpacket: 32 [ 85.123026][ T965] usb 2-1: USB disconnect, device number 10 [ 85.142999][ T299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.153744][ T299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.163928][ T299] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.172914][ T299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.181670][ T299] usb 4-1: config 0 descriptor?? [ 85.233501][ T299] hub 4-1:0.0: USB hub found [ 85.255600][ T39] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 85.271553][ T2205] netlink: 148 bytes leftover after parsing attributes in process `syz.0.684'. [ 85.659171][ T28] audit: type=1326 audit(1719985140.770:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.4.685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0e8f75b99 code=0x0 [ 85.803249][ T299] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 85.892965][ T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.907055][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 85.924192][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.953708][ T39] usb 3-1: config 0 descriptor?? [ 86.003551][ T39] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 86.036024][ T39] usb 3-1: No valid video chain found. [ 86.102956][ T299] usbhid 4-1:0.0: can't add hid device: -71 [ 86.108885][ T299] usbhid: probe of 4-1:0.0 failed with error -71 [ 86.210128][ T39] usb 3-1: USB disconnect, device number 6 [ 86.223419][ T299] usb 4-1: USB disconnect, device number 6 [ 86.921393][ T2233] fuse: Unknown parameter '0x0000000000000003' [ 86.945803][ T2233] loop2: detected capacity change from 0 to 128 [ 87.074277][ T2239] netlink: 148 bytes leftover after parsing attributes in process `syz.4.696'. [ 87.272409][ T28] audit: type=1400 audit(1719985142.380:660): avc: denied { watch } for pid=2243 comm="syz.4.698" path="/176" dev="tmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.461423][ T28] audit: type=1400 audit(1719985142.570:661): avc: denied { mount } for pid=2248 comm="syz.0.700" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 87.488706][ T28] audit: type=1400 audit(1719985142.600:662): avc: denied { unmount } for pid=2049 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 88.068034][ T2276] netlink: 148 bytes leftover after parsing attributes in process `syz.2.708'. [ 88.128357][ T2284] loop4: detected capacity change from 0 to 512 [ 88.156222][ T2284] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 88.166947][ T2284] System zones: 0-2, 18-18, 34-35 [ 88.200217][ T2284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.239728][ T2284] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038 (0x7fffffff) [ 88.287973][ T291] EXT4-fs (loop4): unmounting filesystem. [ 88.293884][ T2284] syz.4.709 (2284) used greatest stack depth: 19880 bytes left [ 88.338234][ T2302] loop4: detected capacity change from 0 to 512 [ 88.373474][ T2302] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.385411][ T2302] ext4 filesystem being mounted at /179/bus supports timestamps until 2038 (0x7fffffff) [ 88.494190][ T2307] fuse: Unknown parameter '0x0000000000000003' [ 88.643133][ T2307] loop0: detected capacity change from 0 to 128 [ 88.777891][ T291] EXT4-fs (loop4): unmounting filesystem. [ 89.134691][ T2316] loop0: detected capacity change from 0 to 2048 [ 89.203414][ T2316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.288753][ T2322] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.720: Invalid inode table block 17950205685819571681 in block_group 0 [ 89.323384][ T2322] EXT4-fs (loop0): Remounting filesystem read-only [ 89.331129][ T2322] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.720: Invalid inode table block 17950205685819571681 in block_group 0 [ 89.367686][ T2322] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.720: Invalid inode table block 17950205685819571681 in block_group 0 [ 89.383488][ T2326] netlink: 148 bytes leftover after parsing attributes in process `syz.1.723'. [ 89.411900][ T2322] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.720: Invalid inode table block 17950205685819571681 in block_group 0 [ 89.444129][ T2322] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.720: Invalid inode table block 17950205685819571681 in block_group 0 [ 89.458658][ T2322] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.720: Invalid inode table block 17950205685819571681 in block_group 0 [ 89.473411][ T2322] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.720: Invalid inode table block 17950205685819571681 in block_group 0 [ 89.487901][ T2315] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.720: Invalid inode table block 17950205685819571681 in block_group 0 [ 89.492248][ T28] audit: type=1400 audit(1719985144.600:663): avc: denied { bind } for pid=2336 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.502609][ T2315] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.720: Invalid inode table block 17950205685819571681 in block_group 0 [ 89.538409][ T2315] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.720: Invalid inode table block 17950205685819571681 in block_group 0 [ 89.713508][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 90.133658][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.206857][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.464157][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.539070][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.582929][ T24] usb 2-1: SerialNumber: syz [ 90.741735][ T2049] EXT4-fs (loop0): unmounting filesystem. [ 90.757381][ T2354] loop4: detected capacity change from 0 to 512 [ 90.775069][ T2351] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.787807][ T2351] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.940569][ T24] usb 2-1: 0:2 : does not exist [ 91.016292][ T24] usb 2-1: USB disconnect, device number 11 [ 91.038692][ T2354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.101651][ T2354] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038 (0x7fffffff) [ 91.323758][ T2366] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.365931][ T2366] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.396271][ T2366] device bridge_slave_0 entered promiscuous mode [ 91.438874][ T2366] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.475762][ T2366] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.491198][ T2366] device bridge_slave_1 entered promiscuous mode [ 91.658315][ T291] EXT4-fs (loop4): unmounting filesystem. [ 91.683999][ T604] device bridge_slave_1 left promiscuous mode [ 91.689980][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.709104][ T604] device bridge_slave_0 left promiscuous mode [ 91.721855][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.737744][ T604] device veth1_macvtap left promiscuous mode [ 91.749174][ T604] device veth0_vlan left promiscuous mode [ 92.021808][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.029416][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.066968][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.075448][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.093135][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.100009][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.112928][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.121174][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.129448][ T965] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.136338][ T965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.145979][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.154160][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.165754][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.174043][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.194520][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.202208][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.211917][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.214267][ T2382] loop2: detected capacity change from 0 to 256 [ 92.222480][ T2366] device veth0_vlan entered promiscuous mode [ 92.240534][ T2366] device veth1_macvtap entered promiscuous mode [ 92.264211][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.272482][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.281983][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.291940][ T2382] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 92.312275][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.321918][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.330138][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.338439][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.346901][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.355166][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.515746][ T28] audit: type=1400 audit(1719985147.630:664): avc: denied { read } for pid=2381 comm="syz.2.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.593458][ T728] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.841647][ T2406] loop3: detected capacity change from 0 to 256 [ 94.260281][ T28] audit: type=1400 audit(1719985149.370:665): avc: denied { read append open } for pid=2405 comm="syz.3.751" path=2F3134302FE91F7189591E9233614B2F626C6B696F2E6266712E696F5F736572766963655F6279746573 dev="loop3" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.337312][ T2417] netlink: 'syz.2.754': attribute type 3 has an invalid length. [ 94.340977][ T728] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 94.353158][ T438] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 94.354900][ T728] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 94.376128][ T728] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.392492][ T728] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.401668][ T728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.453796][ T728] usb 5-1: invalid MIDI in EP 0 [ 94.460990][ T728] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 94.470219][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.633092][ T965] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 94.667955][ T728] usb 5-1: USB disconnect, device number 5 [ 94.713291][ T438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.724839][ T438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.739491][ T438] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.756971][ T438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.769452][ T438] usb 2-1: config 0 descriptor?? [ 94.884821][ T2435] cgroup: Bad value for 'name' [ 94.906249][ T2435] 9pnet: Could not find request transport: rdm [ 94.935475][ T2435] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 95.052936][ T28] audit: type=1400 audit(1719985150.080:666): avc: denied { relabelto } for pid=2432 comm="syz.0.761" name="bus" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 95.101352][ T28] audit: type=1400 audit(1719985150.080:667): avc: denied { associate } for pid=2432 comm="syz.0.761" name="bus" dev="tmpfs" ino=62 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 95.153057][ T965] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 95.249960][ T2439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2439 comm=syz.2.763 [ 95.253243][ T438] hid (null): bogus close delimiter [ 95.380202][ T2447] netlink: 'syz.4.766': attribute type 3 has an invalid length. [ 95.429140][ T2451] loop4: detected capacity change from 0 to 256 [ 95.449179][ T2451] FAT-fs (loop4): Unrecognized mount option "shorgname=win95" or missing value [ 95.473107][ T438] usb 2-1: language id specifier not provided by device, defaulting to English [ 95.624696][ T28] audit: type=1400 audit(1719985150.740:668): avc: denied { unlink } for pid=2366 comm="syz-executor" name="bus" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 95.790054][ T2470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2470 comm=syz.0.775 [ 95.802414][ T965] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 95.817224][ T965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.955373][ T2477] netlink: 'syz.0.778': attribute type 3 has an invalid length. [ 96.116052][ T2484] cgroup: Bad value for 'name' [ 96.153157][ T316] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.170049][ T2484] 9pnet: Could not find request transport: rdm [ 96.435779][ T438] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #100: -71 [ 96.444870][ T438] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 96.452779][ T438] uclogic 0003:256C:006D.0010: failed probing pen v1 parameters: -71 [ 96.460769][ T438] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 96.468023][ T438] uclogic: probe of 0003:256C:006D.0010 failed with error -71 [ 96.475363][ T965] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 96.479348][ T2487] loop2: detected capacity change from 0 to 512 [ 96.482050][ T965] usb 4-1: No valid video chain found. [ 96.494892][ T438] usb 2-1: USB disconnect, device number 12 [ 96.502788][ T2487] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 96.511439][ T2487] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.518236][ T2487] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #16: comm syz.2.781: casefold flag without casefold feature [ 96.531245][ T2487] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #16: comm syz.2.781: unexpected EA_INODE flag [ 96.542661][ T2487] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.781: couldn't read orphan inode 16 (err -117) [ 96.554807][ T2487] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.569873][ T2150] EXT4-fs (loop2): unmounting filesystem. [ 96.575648][ T316] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 96.585792][ T316] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 96.596662][ T316] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.609476][ T316] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.618361][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.664415][ T316] usb 5-1: invalid MIDI in EP 0 [ 96.676036][ T2497] device pim6reg1 entered promiscuous mode [ 96.691116][ T24] usb 4-1: USB disconnect, device number 7 [ 96.697418][ T316] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 96.708989][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.868198][ T39] usb 5-1: USB disconnect, device number 6 [ 97.032947][ T316] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 97.152947][ T728] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 97.233944][ T2505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2505 comm=syz.3.788 [ 97.412984][ T316] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.426890][ T316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.435720][ T2512] netlink: 'syz.4.790': attribute type 3 has an invalid length. [ 97.510538][ T28] audit: type=1326 audit(1719985152.620:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2513 comm="syz.4.791" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0e8f75b99 code=0x0 [ 97.553304][ T2517] loop1: detected capacity change from 0 to 128 [ 97.559899][ T2517] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.571967][ T316] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.581076][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.589166][ T728] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 97.597215][ T728] usb 1-1: config 0 has no interface number 0 [ 97.603347][ T316] usb 3-1: SerialNumber: syz [ 97.607920][ T728] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.620300][ T2517] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.629337][ T728] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.639149][ T728] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 97.650307][ T728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.663064][ T28] audit: type=1400 audit(1719985152.770:670): avc: denied { mounton } for pid=2516 comm="syz.1.792" path="/136/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 97.691812][ T728] usb 1-1: config 0 descriptor?? [ 99.082855][ C1] sched: RT throttling activated [ 99.133856][ T316] usb 3-1: 0:2 : does not exist [ 99.139324][ T316] usb 3-1: unit 255 not found! [ 99.155174][ T316] usb 3-1: USB disconnect, device number 7 [ 99.164548][ T662] udevd[662]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.327165][ T2535] cgroup: Bad value for 'name' [ 99.372253][ T2535] 9pnet: Could not find request transport: rdm [ 99.714159][ T728] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 99.980150][ T728] usb 1-1: USB disconnect, device number 11 [ 100.278101][ T2547] loop1: detected capacity change from 0 to 512 [ 100.633000][ T728] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.018149][ T2547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.073714][ T728] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.089153][ T2557] loop3: detected capacity change from 0 to 2048 [ 101.092935][ T2547] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038 (0x7fffffff) [ 101.202439][ T2557] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.233003][ T728] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.252086][ T728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.267259][ T728] usb 5-1: SerialNumber: syz [ 101.285109][ T2569] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.803: Invalid inode table block 17950205685819571681 in block_group 0 [ 101.301855][ T293] EXT4-fs (loop1): unmounting filesystem. [ 101.319462][ T2569] EXT4-fs (loop3): Remounting filesystem read-only [ 101.331400][ T2569] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.803: Invalid inode table block 17950205685819571681 in block_group 0 [ 101.352994][ T2569] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.803: Invalid inode table block 17950205685819571681 in block_group 0 [ 101.367810][ T2569] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.803: Invalid inode table block 17950205685819571681 in block_group 0 [ 101.382462][ T2569] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.803: Invalid inode table block 17950205685819571681 in block_group 0 [ 101.401433][ T2569] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.803: Invalid inode table block 17950205685819571681 in block_group 0 [ 101.427056][ T2555] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.803: Invalid inode table block 17950205685819571681 in block_group 0 [ 101.441686][ T2569] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.803: Invalid inode table block 17950205685819571681 in block_group 0 [ 101.463643][ T2555] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.803: Invalid inode table block 17950205685819571681 in block_group 0 [ 101.721823][ T2575] overlayfs: failed to resolve './file2': -2 [ 101.725290][ T2555] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.803: Invalid inode table block 17950205685819571681 in block_group 0 [ 101.804021][ T728] usb 5-1: 0:2 : does not exist [ 101.808745][ T728] usb 5-1: unit 255 not found! [ 101.823877][ T728] usb 5-1: USB disconnect, device number 7 [ 101.929175][ T512] EXT4-fs (loop3): unmounting filesystem. [ 102.100137][ T28] audit: type=1400 audit(1719985157.210:671): avc: denied { read } for pid=2581 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 102.122152][ T28] audit: type=1400 audit(1719985157.240:672): avc: denied { open } for pid=2581 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 102.236850][ T2585] cgroup: Bad value for 'name' [ 102.306660][ T2585] 9pnet: Could not find request transport: rdm [ 102.624529][ T2581] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.631399][ T2581] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.640916][ T2598] loop4: detected capacity change from 0 to 512 [ 102.642383][ T2581] device bridge_slave_0 entered promiscuous mode [ 102.655262][ T342] bridge0: port 3(gretap0) entered disabled state [ 102.659363][ T2598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.671048][ T342] device gretap0 left promiscuous mode [ 102.676446][ T342] bridge0: port 3(gretap0) entered disabled state [ 102.684260][ T2581] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.684674][ T291] EXT4-fs (loop4): unmounting filesystem. [ 102.691316][ T2581] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.708635][ T2581] device bridge_slave_1 entered promiscuous mode [ 102.714992][ T2602] loop4: detected capacity change from 0 to 512 [ 102.729374][ T2602] EXT4-fs (loop4): 1 orphan inode deleted [ 102.735450][ T2602] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.744476][ T2602] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038 (0x7fffffff) [ 102.820667][ T2581] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.827576][ T2581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.834663][ T2581] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.841426][ T2581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.872962][ T295] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 102.879825][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.888290][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.896807][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.416541][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.424798][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.431662][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.439204][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.447213][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.454075][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.461271][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.469148][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.478269][ T342] device bridge_slave_1 left promiscuous mode [ 103.484599][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.491894][ T342] device bridge_slave_0 left promiscuous mode [ 103.497967][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.506425][ T342] device veth1_macvtap left promiscuous mode [ 103.512375][ T342] device veth0_vlan left promiscuous mode [ 103.543007][ T438] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 103.572967][ T299] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 103.591986][ T291] EXT4-fs (loop4): unmounting filesystem. [ 103.612938][ T295] usb 2-1: Using ep0 maxpacket: 32 [ 103.618512][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.627103][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.640131][ T2581] device veth0_vlan entered promiscuous mode [ 103.646647][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.654840][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.670252][ T2581] device veth1_macvtap entered promiscuous mode [ 103.677637][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.685304][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.692767][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.702587][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.710707][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.724116][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.732230][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.733063][ T295] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 103.740971][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.749167][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.757961][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.768683][ T295] usb 2-1: config 0 descriptor?? [ 103.793001][ T438] usb 1-1: Using ep0 maxpacket: 32 [ 103.913410][ T438] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.936005][ T438] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.945853][ T438] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.955603][ T438] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 103.965222][ T438] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 103.974653][ T438] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 104.033049][ T299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.043580][ T299] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 104.052645][ T299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.144616][ T313] usb 2-1: USB disconnect, device number 13 [ 104.198485][ T299] usb 3-1: config 0 descriptor?? [ 104.303952][ T299] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 104.310720][ T299] usb 3-1: No valid video chain found. [ 104.363642][ T438] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.372915][ T438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.380724][ T438] usb 1-1: Product: syz [ 104.384907][ T438] usb 1-1: Manufacturer: syz [ 104.389225][ T438] usb 1-1: SerialNumber: syz [ 104.433538][ T438] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 104.440206][ T438] cdc_ncm 1-1:1.0: bind() failure [ 104.446133][ T438] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 104.453005][ T438] cdc_ncm 1-1:1.1: bind() failure [ 104.482128][ T2628] loop4: detected capacity change from 0 to 256 [ 104.507889][ T438] usb 3-1: USB disconnect, device number 8 [ 104.998155][ T295] usb 1-1: USB disconnect, device number 12 [ 105.011273][ T2635] loop3: detected capacity change from 0 to 256 [ 105.020737][ T2635] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 105.033365][ T2635] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 105.045939][ T28] audit: type=1400 audit(1719985160.160:673): avc: denied { write } for pid=2634 comm="syz.3.825" name="file2" dev="loop3" ino=1048666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.070535][ T28] audit: type=1400 audit(1719985160.160:674): avc: denied { ioctl } for pid=2634 comm="syz.3.825" path="/4/file2/file2" dev="loop3" ino=1048666 ioctlcmd=0x5607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.265811][ T2649] loop1: detected capacity change from 0 to 256 [ 105.292737][ T2649] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1768846636 (3537693272 ns) > initial count (1927074542 ns). Using initial count to start timer. [ 105.374772][ T2651] loop3: detected capacity change from 0 to 256 [ 105.381129][ T2651] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 105.786937][ T2651] loop3: detected capacity change from 0 to 40427 [ 105.793694][ T28] audit: type=1400 audit(1719985160.910:675): avc: denied { mounton } for pid=2641 comm="syz.3.828" path="/7/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 105.838621][ T2651] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.885196][ T2651] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.917459][ T28] audit: type=1400 audit(1719985161.030:676): avc: denied { setattr } for pid=2641 comm="syz.3.828" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.451027][ T2683] loop1: detected capacity change from 0 to 256 [ 106.462374][ T2683] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 106.480807][ T2683] incfs: iterate_incfs_dir / -22 [ 106.494629][ T28] audit: type=1400 audit(1719985161.610:677): avc: denied { rmdir } for pid=293 comm="syz-executor" name=".index" dev="loop1" ino=1048668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.760463][ T2717] loop4: detected capacity change from 0 to 512 [ 106.767356][ T2717] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.780883][ T2717] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.828643][ T295] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 106.848735][ T2719] loop0: detected capacity change from 0 to 256 [ 106.864092][ T2717] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.880208][ T2719] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 106.880414][ T2717] EXT4-fs (loop4): 1 truncate cleaned up [ 106.897884][ T2717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.912724][ T2719] incfs: iterate_incfs_dir / -22 [ 106.941352][ T2717] EXT4-fs (loop4): unmounting filesystem. [ 106.955206][ T28] audit: type=1326 audit(1719985162.070:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2722 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a17975b99 code=0x7ffc0000 [ 107.001648][ T28] audit: type=1326 audit(1719985162.070:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2722 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1a17975b99 code=0x7ffc0000 [ 107.038097][ T28] audit: type=1326 audit(1719985162.100:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2722 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a17975b99 code=0x7ffc0000 [ 107.062167][ T28] audit: type=1326 audit(1719985162.100:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2724 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a179a7b85 code=0x7ffc0000 [ 107.083085][ T295] usb 2-1: Using ep0 maxpacket: 32 [ 107.088558][ T28] audit: type=1326 audit(1719985162.110:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2722 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a17975b99 code=0x7ffc0000 [ 107.213030][ T295] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.229637][ T295] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.265977][ T295] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.304947][ T295] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 107.328407][ T295] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.351720][ T295] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 107.506405][ T2748] loop3: detected capacity change from 0 to 512 [ 107.528401][ T2748] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.868: Parent and EA inode have the same ino 15 [ 107.540675][ T295] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.540878][ T2748] EXT4-fs (loop3): Remounting filesystem read-only [ 107.549636][ T295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.556546][ T2748] EXT4-fs (loop3): 1 orphan inode deleted [ 107.570750][ T2748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.893154][ T295] usb 2-1: Product: syz [ 107.897193][ T295] usb 2-1: Manufacturer: syz [ 107.901693][ T295] usb 2-1: SerialNumber: syz [ 107.922578][ T2753] ext4: Unknown parameter '/dev/input/event#' [ 107.943397][ T295] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 107.945055][ T2581] EXT4-fs error (device loop3): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 107.950004][ T295] cdc_ncm 2-1:1.0: bind() failure [ 107.951094][ T295] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 107.970830][ T2581] EXT4-fs (loop3): Remounting filesystem read-only [ 107.974992][ T295] cdc_ncm 2-1:1.1: bind() failure [ 107.994874][ T2581] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 15 [ 108.008645][ T2581] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 15 [ 108.055495][ T2581] EXT4-fs (loop3): unmounting filesystem. [ 108.197013][ T2761] cgroup: Bad value for 'name' [ 108.210624][ T2761] 9pnet: Could not find request transport: rdm [ 108.273112][ T313] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.383717][ T299] usb 2-1: USB disconnect, device number 14 [ 108.615561][ T2759] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.622409][ T2759] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.630154][ T2759] device bridge_slave_0 entered promiscuous mode [ 108.637312][ T2759] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.644281][ T2759] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.651666][ T2759] device bridge_slave_1 entered promiscuous mode [ 108.707045][ T2759] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.713913][ T2759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.720987][ T2759] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.722988][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.727822][ T2759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.738654][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.755208][ T313] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 108.764145][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.772659][ T313] usb 3-1: config 0 descriptor?? [ 108.796502][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.804106][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.811263][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.820486][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.828553][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.835441][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.847018][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.855091][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.861949][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.875554][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.894107][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.902585][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.917117][ T2759] device veth0_vlan entered promiscuous mode [ 108.923459][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.942187][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.949843][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.967473][ T2759] device veth1_macvtap entered promiscuous mode [ 108.977468][ T965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.002330][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.011248][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.248779][ T10] device bridge_slave_1 left promiscuous mode [ 109.254875][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.262226][ T10] device bridge_slave_0 left promiscuous mode [ 109.268645][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.287383][ T10] device veth1_macvtap left promiscuous mode [ 109.293702][ T10] device veth0_vlan left promiscuous mode [ 109.351542][ T2798] loop1: detected capacity change from 0 to 256 [ 109.359423][ T2798] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 109.910494][ T2796] loop1: detected capacity change from 0 to 40427 [ 110.018619][ T2801] loop4: detected capacity change from 0 to 512 [ 110.077624][ T2796] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.129670][ T2796] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.148660][ T295] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.203564][ T313] uclogic 0003:256C:006D.0012: interface is invalid, ignoring [ 110.449584][ T2801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.546936][ T2801] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038 (0x7fffffff) [ 111.246124][ T2817] syz.2.870[2817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.246206][ T2817] syz.2.870[2817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.267423][ T291] EXT4-fs (loop4): unmounting filesystem. [ 111.314459][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 111.314474][ T28] audit: type=1400 audit(1719985166.430:689): avc: denied { mounton } for pid=2824 comm="syz.4.891" path="/216/file0" dev="tmpfs" ino=1212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 111.360012][ T28] audit: type=1400 audit(1719985166.470:690): avc: denied { mount } for pid=2826 comm="syz.1.892" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 111.382057][ T28] audit: type=1400 audit(1719985166.470:691): avc: denied { mounton } for pid=2826 comm="syz.1.892" path="/154/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 111.404991][ T295] usb 4-1: Using ep0 maxpacket: 32 [ 111.419991][ T28] audit: type=1400 audit(1719985166.530:692): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 111.442951][ T313] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 111.450634][ T2830] loop1: detected capacity change from 0 to 256 [ 111.533026][ T295] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 111.541474][ T295] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 111.550403][ T295] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 111.559763][ T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.570160][ T295] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.579777][ T295] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 111.592508][ T295] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 111.601629][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.610342][ T295] usb 4-1: config 0 descriptor?? [ 111.687998][ T2836] loop1: detected capacity change from 0 to 512 [ 111.755158][ T2836] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 111.764959][ T2836] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 111.774995][ T2836] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 111.814930][ T2836] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 111.822842][ T2836] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 111.833477][ T2836] EXT4-fs (loop1): orphan cleanup on readonly fs [ 111.843320][ T2836] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.895: bg 0: block 34: padding at end of block bitmap is not set [ 111.858910][ T2836] Quota error (device loop1): write_blk: dquota write failed [ 111.866475][ T2836] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 111.879304][ T2836] EXT4-fs (loop1): 1 truncate cleaned up [ 111.885901][ T2836] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 112.005182][ T295] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 112.022596][ T295] usb 4-1: USB disconnect, device number 8 [ 112.029289][ T295] usblp0: removed [ 112.043129][ T313] usb 1-1: Using ep0 maxpacket: 32 [ 112.203496][ T313] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 112.212511][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.221678][ T313] usb 1-1: config 0 descriptor?? [ 112.476677][ T293] EXT4-fs (loop1): unmounting filesystem. [ 112.560918][ T315] usb 3-1: USB disconnect, device number 9 [ 112.573214][ T313] usb 1-1: USB disconnect, device number 13 [ 112.594968][ T28] audit: type=1400 audit(1719985167.710:693): avc: denied { bind } for pid=2845 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.616099][ T28] audit: type=1400 audit(1719985167.710:694): avc: denied { name_bind } for pid=2845 comm="syz.1.897" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 112.637335][ T28] audit: type=1400 audit(1719985167.710:695): avc: denied { node_bind } for pid=2845 comm="syz.1.897" saddr=600::ff03:0:0:0 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 112.772485][ T295] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.867004][ T2854] loop2: detected capacity change from 0 to 256 [ 112.875182][ T2854] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 113.188027][ T2854] loop2: detected capacity change from 0 to 40427 [ 113.209292][ T2863] loop3: detected capacity change from 0 to 256 [ 113.266677][ T2854] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.311049][ T662] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.321679][ T2854] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.347406][ T2870] loop4: detected capacity change from 0 to 512 [ 113.427503][ T2870] EXT4-fs (loop4): 1 orphan inode deleted [ 113.437394][ T2870] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.446340][ T2870] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038 (0x7fffffff) [ 113.573119][ T2876] loop3: detected capacity change from 0 to 512 [ 113.634280][ T2876] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 113.644023][ T2876] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 113.653623][ T2876] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 113.739696][ T2876] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 113.747629][ T2876] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 113.758117][ T2876] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.768216][ T2876] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.907: bg 0: block 34: padding at end of block bitmap is not set [ 113.783080][ T2876] Quota error (device loop3): write_blk: dquota write failed [ 113.792640][ T2876] EXT4-fs (loop3): 1 truncate cleaned up [ 113.799568][ T2876] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.085203][ T291] EXT4-fs (loop4): unmounting filesystem. [ 114.219345][ T2902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.918'. [ 114.267331][ T2910] loop1: detected capacity change from 0 to 512 [ 114.751664][ T2759] EXT4-fs (loop3): unmounting filesystem. [ 114.782361][ T2913] loop3: detected capacity change from 0 to 512 [ 114.805792][ T2913] EXT4-fs (loop3): 1 orphan inode deleted [ 114.811669][ T2913] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.821056][ T2913] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 114.854868][ T313] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 114.923080][ T728] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.272530][ T2759] EXT4-fs (loop3): unmounting filesystem. [ 115.462958][ T728] usb 5-1: Using ep0 maxpacket: 32 [ 115.513399][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.546718][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.623085][ T728] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.640498][ T728] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.654156][ T313] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 115.682964][ T728] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.698036][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.712386][ T2939] loop3: detected capacity change from 0 to 512 [ 115.756118][ T728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.816134][ T313] usb 3-1: config 0 descriptor?? [ 115.858471][ T728] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.026206][ T728] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.142469][ T2939] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.170608][ T728] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 116.249384][ T728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.278109][ T2939] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 116.366812][ T728] usb 5-1: config 0 descriptor?? [ 116.685966][ T728] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.700374][ T2947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 116.719843][ T728] usb 5-1: USB disconnect, device number 8 [ 116.740720][ T728] usblp0: removed [ 116.775854][ T2951] sit: Src spoofed 0.0.0.0/2002:0:104:: -> 0.0.0.0/2002:: [ 116.806747][ T2955] loop0: detected capacity change from 0 to 512 [ 116.825266][ T2955] EXT4-fs (loop0): 1 orphan inode deleted [ 116.830853][ T2955] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.840056][ T2955] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038 (0x7fffffff) [ 116.973356][ T2759] EXT4-fs (loop3): unmounting filesystem. [ 117.005317][ T2366] EXT4-fs (loop0): unmounting filesystem. [ 117.033149][ T313] uclogic 0003:256C:006D.0013: interface is invalid, ignoring [ 117.049095][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 117.049110][ T28] audit: type=1400 audit(1719985172.160:700): avc: denied { create } for pid=2970 comm="syz.3.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 117.076043][ T28] audit: type=1400 audit(1719985172.190:701): avc: denied { sys_admin } for pid=2970 comm="syz.3.942" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 117.134319][ T2975] loop3: detected capacity change from 0 to 512 [ 117.149677][ T28] audit: type=1400 audit(1719985172.260:702): avc: denied { mounton } for pid=2978 comm="syz.0.945" path="/54/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 117.177436][ T2975] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 117.189217][ T2975] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.943: iget: bad i_size value: -67835469387268086 [ 117.202292][ T2975] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.943: couldn't read orphan inode 15 (err -117) [ 117.214299][ T2975] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 117.222804][ T2975] ext2 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 117.311616][ T728] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.481277][ T2990] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 117.592898][ T728] usb 5-1: Using ep0 maxpacket: 32 [ 117.665201][ T2991] syz.2.909[2991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.665300][ T2991] syz.2.909[2991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.723023][ T728] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.760312][ T728] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 117.783613][ T728] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 117.792973][ T728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.802674][ T728] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.815616][ T728] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.828621][ T728] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 117.842122][ T728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.860879][ T728] usb 5-1: config 0 descriptor?? [ 117.892988][ T728] usb 5-1: can't set config #0, error -71 [ 117.899381][ T728] usb 5-1: USB disconnect, device number 9 [ 118.254620][ T2998] loop0: detected capacity change from 0 to 512 [ 118.456280][ T2998] EXT4-fs (loop0): 1 orphan inode deleted [ 118.496753][ T2998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.573598][ T2998] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038 (0x7fffffff) [ 118.653294][ T2759] EXT4-fs (loop3): unmounting filesystem. [ 118.979736][ T313] usb 3-1: USB disconnect, device number 10 [ 119.507048][ T28] audit: type=1400 audit(1719985174.620:703): avc: denied { map } for pid=3016 comm="syz.3.956" path="/dev/ashmem" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.535096][ T2995] loop4: detected capacity change from 0 to 512 [ 119.581294][ T2995] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.590140][ T2995] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038 (0x7fffffff) [ 119.612123][ T2366] EXT4-fs (loop0): unmounting filesystem. [ 119.681146][ T3019] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.752979][ T965] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 119.763957][ T291] EXT4-fs (loop4): unmounting filesystem. [ 120.108410][ T3033] loop1: detected capacity change from 0 to 512 [ 120.115244][ T3033] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 120.125031][ T3033] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.961: iget: bad i_size value: -67835469387268086 [ 120.138177][ T3033] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.961: couldn't read orphan inode 15 (err -117) [ 120.150157][ T3033] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.158802][ T3033] ext2 filesystem being mounted at /175/file0 supports timestamps until 2038 (0x7fffffff) [ 120.347653][ T3037] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 120.442971][ T965] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.585425][ T3046] loop0: detected capacity change from 0 to 256 [ 120.612985][ T728] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 120.633297][ T965] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.642202][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.650428][ T965] usb 3-1: Product: syz [ 120.655093][ T965] usb 3-1: Manufacturer: syz [ 120.659511][ T965] usb 3-1: SerialNumber: syz [ 120.789795][ T3054] loop4: detected capacity change from 0 to 512 [ 120.805033][ T3054] EXT4-fs (loop4): 1 orphan inode deleted [ 120.810730][ T3054] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 120.819640][ T3054] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038 (0x7fffffff) [ 120.921783][ T291] EXT4-fs (loop4): unmounting filesystem. [ 120.927433][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 120.942415][ T3058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.970'. [ 121.000391][ T293] EXT4-fs (loop1): unmounting filesystem. [ 121.012998][ T728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.033033][ T728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.047303][ T728] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 121.059512][ T728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.068495][ T728] usb 4-1: config 0 descriptor?? [ 121.097003][ T3060] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.192984][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 121.363403][ T24] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 121.381038][ T24] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 121.415872][ T3076] loop4: detected capacity change from 0 to 256 [ 121.422408][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 121.509951][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 121.545538][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 121.823023][ T965] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 121.829396][ T965] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 121.837542][ T965] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 121.896357][ T3092] loop4: detected capacity change from 0 to 512 [ 121.903901][ T3092] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 121.914071][ T3092] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.983: iget: bad i_size value: -67835469387268086 [ 121.933420][ T3092] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.983: couldn't read orphan inode 15 (err -117) [ 121.946212][ T3092] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.954801][ T3092] ext2 filesystem being mounted at /240/file0 supports timestamps until 2038 (0x7fffffff) [ 122.047221][ T965] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 122.056131][ T965] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 122.081973][ T28] audit: type=1400 audit(1719985177.190:704): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 122.083253][ T965] usb 3-1: USB disconnect, device number 11 [ 122.109801][ T28] audit: type=1400 audit(1719985177.220:705): avc: denied { read } for pid=139 comm="dhcpcd" name="n15" dev="tmpfs" ino=6277 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.133393][ T965] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 122.158176][ T28] audit: type=1400 audit(1719985177.220:706): avc: denied { open } for pid=139 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=6277 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.185995][ T28] audit: type=1400 audit(1719985177.220:707): avc: denied { getattr } for pid=139 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=6277 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.213811][ T3105] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 122.243019][ T24] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 122.257311][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.262817][ T3100] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.265669][ T728] uclogic 0003:256C:006D.0014: interface is invalid, ignoring [ 122.290124][ T24] usb 1-1: config 0 descriptor?? [ 122.343326][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 122.349116][ T28] audit: type=1400 audit(1719985177.460:708): avc: denied { create } for pid=3104 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.374542][ T24] hub: probe of 1-1:0.0 failed with error -5 [ 122.398400][ T28] audit: type=1400 audit(1719985177.460:709): avc: denied { write } for pid=3104 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=6293 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.424849][ T28] audit: type=1400 audit(1719985177.460:710): avc: denied { append } for pid=3104 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=6293 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.452693][ T28] audit: type=1400 audit(1719985177.480:711): avc: denied { unlink } for pid=3116 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=6293 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.529129][ T28] audit: type=1326 audit(1719985177.640:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3130 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31dfb75b99 code=0x7ffc0000 [ 122.592552][ T28] audit: type=1326 audit(1719985177.640:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3130 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f31dfb75b99 code=0x7ffc0000 [ 122.673201][ T24] usb 1-1: USB disconnect, device number 14 [ 122.826079][ T291] EXT4-fs (loop4): unmounting filesystem. [ 123.473115][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 123.732932][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 123.948296][ T3172] loop1: detected capacity change from 0 to 512 [ 124.024415][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.236157][ T438] usb 4-1: USB disconnect, device number 10 [ 125.354698][ T3188] loop3: detected capacity change from 0 to 512 [ 125.380118][ T3188] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.389350][ T3188] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 125.393032][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 125.410108][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 125.410179][ T3188] netlink: 'syz.3.1006': attribute type 4 has an invalid length. [ 125.418430][ T24] usb 5-1: SerialNumber: syz [ 125.427013][ T3188] netlink: 'syz.3.1006': attribute type 11 has an invalid length. [ 125.540889][ T24] usb 5-1: config 0 descriptor?? [ 125.805480][ T2759] EXT4-fs (loop3): unmounting filesystem. [ 127.283063][ T24] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 127.476069][ T24] usb 5-1: No valid video chain found. [ 127.484095][ T24] usb 5-1: USB disconnect, device number 10 [ 127.569834][ T3234] loop3: detected capacity change from 0 to 512 [ 127.613116][ T438] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 127.973722][ T3269] loop1: detected capacity change from 0 to 512 [ 128.063008][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 128.184827][ T3269] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.194036][ T3269] ext4 filesystem being mounted at /197/bus supports timestamps until 2038 (0x7fffffff) [ 128.303058][ T19] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 128.323047][ T438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.333941][ T438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.343719][ T438] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.352572][ T438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.363757][ T438] usb 3-1: config 0 descriptor?? [ 128.473058][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.485513][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.495382][ T24] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 128.504572][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.516155][ T24] usb 5-1: config 0 descriptor?? [ 128.552889][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 128.559233][ T293] EXT4-fs (loop1): unmounting filesystem. [ 128.672938][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.708366][ T3299] loop1: detected capacity change from 0 to 512 [ 128.763296][ T19] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 128.772594][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 128.780982][ T19] usb 1-1: SerialNumber: syz [ 128.810357][ T19] usb 1-1: config 0 descriptor?? [ 128.820056][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 128.820083][ T28] audit: type=1400 audit(1719985183.930:718): avc: denied { write } for pid=3306 comm="syz.3.1043" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 128.946262][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 128.952337][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 129.036699][ T24] usb 5-1: USB disconnect, device number 11 [ 129.233080][ T19] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 129.239875][ T19] usb 1-1: No valid video chain found. [ 129.413085][ T313] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 129.435941][ T24] usb 1-1: USB disconnect, device number 15 [ 129.470562][ T3323] loop4: detected capacity change from 0 to 512 [ 129.484618][ T3323] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.493849][ T3323] ext4 filesystem being mounted at /247/bus supports timestamps until 2038 (0x7fffffff) [ 129.513039][ T438] uclogic 0003:256C:006D.0015: interface is invalid, ignoring [ 129.722941][ T313] usb 4-1: Using ep0 maxpacket: 16 [ 129.828158][ T3336] input: syz0 as /devices/virtual/input/input14 [ 130.099160][ T3341] syz.2.1015[3341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.099241][ T3341] syz.2.1015[3341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.122987][ T313] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 130.158591][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.173687][ T313] usb 4-1: Product: syz [ 130.181901][ T313] usb 4-1: Manufacturer: syz [ 130.190488][ T313] usb 4-1: SerialNumber: syz [ 130.200263][ T291] EXT4-fs (loop4): unmounting filesystem. [ 130.205084][ T313] r8152-cfgselector 4-1: config 0 descriptor?? [ 130.287394][ T3354] loop4: detected capacity change from 0 to 256 [ 130.473257][ T313] r8152-cfgselector 4-1: Unknown version 0x0000 [ 130.772997][ T313] r8152-cfgselector 4-1: Unknown version 0x0000 [ 130.779483][ T313] r8152-cfgselector 4-1: bad CDC descriptors [ 130.796396][ T3363] loop1: detected capacity change from 0 to 512 [ 130.803006][ T313] r8152-cfgselector 4-1: Unknown version 0x0000 [ 130.809770][ T313] r8152-cfgselector 4-1: USB disconnect, device number 11 [ 131.383803][ T28] audit: type=1400 audit(1719985186.380:719): avc: denied { write } for pid=3366 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 131.410342][ T24] usb 3-1: USB disconnect, device number 12 [ 131.819799][ T3391] loop3: detected capacity change from 0 to 256 [ 131.852984][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 132.142124][ T28] audit: type=1400 audit(1719985187.240:720): avc: denied { watch_reads } for pid=3395 comm="syz.1.1069" path="/210" dev="tmpfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.164761][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 132.178499][ T3401] input: syz0 as /devices/virtual/input/input15 [ 132.322975][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.402902][ T19] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 132.423086][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 132.432170][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 132.440209][ T24] usb 3-1: SerialNumber: syz [ 132.445685][ T24] usb 3-1: config 0 descriptor?? [ 132.572896][ T39] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 132.642885][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 132.732951][ T24] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 132.739846][ T24] usb 3-1: No valid video chain found. [ 132.763054][ T19] usb 2-1: config 129 has an invalid interface number: 3 but max is 2 [ 132.771341][ T19] usb 2-1: config 129 has an invalid interface number: 181 but max is 2 [ 132.779640][ T19] usb 2-1: config 129 has an invalid interface number: 205 but max is 2 [ 132.788179][ T19] usb 2-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 132.796993][ T19] usb 2-1: config 129 has no interface number 0 [ 132.803331][ T19] usb 2-1: config 129 has no interface number 1 [ 132.809451][ T19] usb 2-1: config 129 has no interface number 2 [ 132.815620][ T19] usb 2-1: config 129 interface 3 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 132.826641][ T19] usb 2-1: config 129 interface 3 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 132.832894][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 132.837837][ T19] usb 2-1: config 129 interface 3 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 132.853075][ T19] usb 2-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 132.866457][ T19] usb 2-1: config 129 interface 181 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 132.877554][ T19] usb 2-1: config 129 interface 181 altsetting 2 endpoint 0x6 has an invalid bInterval 128, changing to 11 [ 132.888862][ T19] usb 2-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 132.899731][ T19] usb 2-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 132.910830][ T19] usb 2-1: config 129 interface 181 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 132.913995][ T28] audit: type=1400 audit(1719985188.030:721): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.925057][ T19] usb 2-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x70, skipping [ 132.925087][ T19] usb 2-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 132.925114][ T19] usb 2-1: config 129 interface 181 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 132.948281][ T313] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 132.985845][ T19] usb 2-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 132.996967][ T19] usb 2-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 133.005587][ T24] usb 3-1: USB disconnect, device number 13 [ 133.008289][ T19] usb 2-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 133.024906][ T19] usb 2-1: config 129 interface 205 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 133.038697][ T19] usb 2-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 133.049650][ T19] usb 2-1: config 129 interface 205 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 133.060774][ T19] usb 2-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 133.071583][ T19] usb 2-1: config 129 interface 205 altsetting 3 endpoint 0x8 has an invalid bInterval 38, changing to 9 [ 133.082801][ T19] usb 2-1: config 129 interface 205 altsetting 3 endpoint 0x8 has invalid wMaxPacketSize 0 [ 133.093155][ T19] usb 2-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 133.103982][ T19] usb 2-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 133.114649][ T19] usb 2-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 133.125330][ T19] usb 2-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 133.136003][ T19] usb 2-1: config 129 interface 205 altsetting 3 has an invalid endpoint with address 0xD7, skipping [ 133.146691][ T19] usb 2-1: config 129 interface 3 has no altsetting 0 [ 133.153268][ T19] usb 2-1: config 129 interface 181 has no altsetting 0 [ 133.160012][ T19] usb 2-1: config 129 interface 205 has no altsetting 0 [ 133.213001][ T39] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 133.221926][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.229930][ T39] usb 5-1: Product: syz [ 133.234402][ T39] usb 5-1: Manufacturer: syz [ 133.238847][ T39] usb 5-1: SerialNumber: syz [ 133.244528][ T39] r8152-cfgselector 5-1: config 0 descriptor?? [ 133.323020][ T19] usb 2-1: New USB device found, idVendor=05c6, idProduct=9062, bcdDevice=74.7a [ 133.332149][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.340172][ T19] usb 2-1: Product: 麝똼ᷡ튬怫튚鲺༓戫ᅣʐ迩ࡕ㽧볎難⡤惲诺啌౺ᒲ彖ה絓痣緭ヒ⮪罰᠋돂몹쿘ᮮ臭껯콻댝닞⊊귪컔жⲖ焉쇲ค䶯웪ꍼ曵쭱钕䰪ﲽ辈䁢䟯浈쀗喞园ꜹᳪ垈ᆷ䰫傽㭹屋׆꣣尢ꃅ㯩프ꢠ걽ᐼꇦᾲ믎ᶨ⧿旀妓泿Ṻ쎶ج擘ᛀ쒵ꈷ죳Ꙁ᥋뺌ႁ枛䫪蔘煋옒慄鐲錖苷苩䇧욶 [ 133.375055][ T19] usb 2-1: Manufacturer: Ђ [ 133.379477][ T19] usb 2-1: SerialNumber: ᔼ쵛죞早陜薵憎ᓢ냴噸浹⭈輤絷﫞ᘯ툥쒪㿥鐊䝻⌡싕牌ﮐ슈⁲ἣ巛噕⸊ⓑ湖䄰샯鉁錟즴얛Ⓗᯝ䦨訊馸齮뤩鑊멸竡⎆㌐ㆵ倇ꁪ쪁룰퐰䖧À滸鯱쐎幆럮轐㦱쭫翷넎ﶨ쏝ꩅ孮迄ⱴ痯◜୺최㹥￙ⰱ儌ᑘ勺땴頱ﱳ䏮榔⪨㑸ࠡﷁ䚟떀ṴᎹ␌碸쀚榍焹㆙ [ 133.423173][ T313] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.521200][ T39] r8152-cfgselector 5-1: Unknown version 0x0000 [ 133.633023][ T313] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.642262][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.650730][ T313] usb 4-1: Product: syz [ 133.669769][ T313] usb 4-1: Manufacturer: syz [ 133.723146][ T39] r8152-cfgselector 5-1: Unknown version 0x0000 [ 133.741415][ T39] r8152-cfgselector 5-1: bad CDC descriptors [ 133.749996][ T313] usb 4-1: SerialNumber: syz [ 133.813322][ T39] r8152-cfgselector 5-1: Unknown version 0x0000 [ 133.890551][ T39] r8152-cfgselector 5-1: USB disconnect, device number 12 [ 135.093140][ T313] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 135.099642][ T313] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 135.109080][ T313] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 135.186537][ T3443] loop4: detected capacity change from 0 to 256 [ 135.492943][ T313] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 135.517535][ T313] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 135.519656][ T19] usb 2-1: USB disconnect, device number 15 [ 135.531437][ T313] usb 4-1: USB disconnect, device number 12 [ 135.543602][ T313] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 135.622775][ T3463] input: syz0 as /devices/virtual/input/input16 [ 136.229994][ T3485] loop2: detected capacity change from 0 to 512 [ 136.259523][ T3485] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 136.269323][ T3485] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 136.278930][ T3485] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 136.293006][ T3485] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 136.300895][ T3485] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 136.309053][ T3485] EXT4-fs (loop2): orphan cleanup on readonly fs [ 136.315952][ T3485] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1095: bg 0: block 34: padding at end of block bitmap is not set [ 136.330339][ T3485] Quota error (device loop2): write_blk: dquota write failed [ 136.337740][ T3485] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 136.348079][ T3485] EXT4-fs (loop2): 1 truncate cleaned up [ 136.353850][ T3485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 136.402968][ T438] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 136.570766][ T2150] EXT4-fs (loop2): unmounting filesystem. [ 136.605430][ T3512] loop2: detected capacity change from 0 to 512 [ 136.652931][ T438] usb 1-1: Using ep0 maxpacket: 8 [ 137.081824][ T438] usb 1-1: config 129 has an invalid interface number: 3 but max is 2 [ 137.090585][ T438] usb 1-1: config 129 has an invalid interface number: 181 but max is 2 [ 137.098818][ T438] usb 1-1: config 129 has an invalid interface number: 205 but max is 2 [ 137.106964][ T438] usb 1-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 137.115612][ T438] usb 1-1: config 129 has no interface number 0 [ 137.121654][ T438] usb 1-1: config 129 has no interface number 1 [ 137.127782][ T438] usb 1-1: config 129 has no interface number 2 [ 137.133845][ T438] usb 1-1: config 129 interface 3 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 137.144631][ T438] usb 1-1: config 129 interface 3 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 137.155181][ T19] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 137.162522][ T438] usb 1-1: config 129 interface 3 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 137.173411][ T438] usb 1-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 137.184114][ T438] usb 1-1: config 129 interface 181 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 137.195124][ T438] usb 1-1: config 129 interface 181 altsetting 2 endpoint 0x6 has an invalid bInterval 128, changing to 11 [ 137.206369][ T438] usb 1-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 137.217031][ T438] usb 1-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 137.227793][ T438] usb 1-1: config 129 interface 181 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 137.238731][ T438] usb 1-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x70, skipping [ 137.249408][ T438] usb 1-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 137.260080][ T438] usb 1-1: config 129 interface 181 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 137.269972][ T438] usb 1-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 137.280797][ T438] usb 1-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 137.291619][ T438] usb 1-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 137.302537][ T438] usb 1-1: config 129 interface 205 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 137.314147][ T438] usb 1-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 137.324983][ T438] usb 1-1: config 129 interface 205 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 137.336091][ T438] usb 1-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 137.347045][ T438] usb 1-1: config 129 interface 205 altsetting 3 endpoint 0x8 has an invalid bInterval 38, changing to 9 [ 137.358297][ T438] usb 1-1: config 129 interface 205 altsetting 3 endpoint 0x8 has invalid wMaxPacketSize 0 [ 137.368211][ T438] usb 1-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 137.379236][ T438] usb 1-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 137.390415][ T438] usb 1-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 137.401555][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 137.406662][ T438] usb 1-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 137.417393][ T438] usb 1-1: config 129 interface 205 altsetting 3 has an invalid endpoint with address 0xD7, skipping [ 137.428201][ T438] usb 1-1: config 129 interface 3 has no altsetting 0 [ 137.434950][ T438] usb 1-1: config 129 interface 181 has no altsetting 0 [ 137.441651][ T438] usb 1-1: config 129 interface 205 has no altsetting 0 [ 137.512669][ T28] audit: type=1400 audit(1719985192.620:722): avc: denied { read } for pid=3529 comm="syz.1.1108" dev="sockfs" ino=31402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.603081][ T438] usb 1-1: New USB device found, idVendor=05c6, idProduct=9062, bcdDevice=74.7a [ 137.612093][ T438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.614268][ T28] audit: type=1400 audit(1719985192.720:723): avc: denied { read } for pid=3529 comm="syz.1.1108" name="ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.620196][ T438] usb 1-1: Product: 麝똼ᷡ튬怫튚鲺༓戫ᅣʐ迩ࡕ㽧볎難⡤惲诺啌౺ᒲ彖ה絓痣緭ヒ⮪罰᠋돂몹쿘ᮮ臭껯콻댝닞⊊귪컔жⲖ焉쇲ค䶯웪ꍼ曵쭱钕䰪ﲽ辈䁢䟯浈쀗喞园ꜹᳪ垈ᆷ䰫傽㭹屋׆꣣尢ꃅ㯩프ꢠ걽ᐼꇦᾲ믎ᶨ⧿旀妓泿Ṻ쎶ج擘ᛀ쒵ꈷ죳Ꙁ᥋뺌ႁ枛䫪蔘煋옒慄鐲錖苷苩䇧욶 [ 137.643084][ T28] audit: type=1400 audit(1719985192.720:724): avc: denied { open } for pid=3529 comm="syz.1.1108" path="/dev/ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.678546][ T438] usb 1-1: Manufacturer: Ђ [ 137.703025][ T313] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 137.705732][ T438] usb 1-1: SerialNumber: ᔼ쵛죞早陜薵憎ᓢ냴噸浹⭈輤絷﫞ᘯ툥쒪㿥鐊䝻⌡싕牌ﮐ슈⁲ἣ巛噕⸊ⓑ湖䄰샯鉁錟즴얛Ⓗᯝ䦨訊馸齮뤩鑊멸竡⎆㌐ㆵ倇ꁪ쪁룰퐰䖧À滸鯱쐎幆럮轐㦱쭫翷넎ﶨ쏝ꩅ孮迄ⱴ痯◜୺최㹥￙ⰱ儌ᑘ勺땴頱ﱳ䏮榔⪨㑸ࠡﷁ䚟떀ṴᎹ␌碸쀚榍焹㆙ [ 137.746987][ T19] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 137.755867][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.763686][ T19] usb 4-1: Product: syz [ 137.767642][ T19] usb 4-1: Manufacturer: syz [ 137.772065][ T19] usb 4-1: SerialNumber: syz [ 137.777277][ T19] usb 4-1: config 0 descriptor?? [ 137.782915][ T728] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 138.030394][ T3510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.038805][ T3510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.192976][ T313] usb 5-1: not running at top speed; connect to a high speed hub [ 138.202365][ T438] usb 1-1: USB disconnect, device number 16 [ 138.202487][ T728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.218923][ T728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.228533][ T728] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 138.237497][ T728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.246186][ T728] usb 3-1: config 0 descriptor?? [ 138.293006][ T313] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 138.302328][ T313] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 138.312322][ T313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.434787][ T3534] device pim6reg1 entered promiscuous mode [ 138.494974][ T19] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 138.503039][ T313] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.511984][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.519767][ T313] usb 5-1: Product: syz [ 138.523787][ T313] usb 5-1: Manufacturer: syz [ 138.528122][ T313] usb 5-1: SerialNumber: syz [ 138.615102][ T28] audit: type=1400 audit(1719985193.730:725): avc: denied { ioctl } for pid=3545 comm="syz.0.1112" path="pid:[4026532291]" dev="nsfs" ino=4026532291 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 138.647378][ T3552] loop0: detected capacity change from 0 to 256 [ 138.659217][ T3552] FAT-fs (loop0): Directory bread(block 64) failed [ 138.665941][ T3552] FAT-fs (loop0): Directory bread(block 65) failed [ 138.672314][ T3552] FAT-fs (loop0): Directory bread(block 66) failed [ 138.678891][ T3552] FAT-fs (loop0): Directory bread(block 67) failed [ 138.686124][ T3552] FAT-fs (loop0): Directory bread(block 68) failed [ 138.692743][ T3552] FAT-fs (loop0): Directory bread(block 69) failed [ 138.702268][ T2945] usb 4-1: USB disconnect, device number 13 [ 138.709595][ T3552] FAT-fs (loop0): Directory bread(block 70) failed [ 138.713500][ T139] net eth1: rx_urb submit failed: -19 [ 138.717586][ T3552] FAT-fs (loop0): Directory bread(block 71) failed [ 138.727648][ T3552] FAT-fs (loop0): Directory bread(block 72) failed [ 138.734200][ T3552] FAT-fs (loop0): Directory bread(block 73) failed [ 138.743093][ T438] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 138.771461][ T3552] syz.0.1113: attempt to access beyond end of device [ 138.771461][ T3552] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 138.913005][ T313] usb 5-1: 0:2 : does not exist [ 138.920720][ T313] usb 5-1: USB disconnect, device number 13 [ 138.930527][ T662] udevd[662]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 138.963117][ T728] usb 3-1: string descriptor 0 read error: -71 [ 138.983090][ T728] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #200: -71 [ 138.992125][ T728] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 139.056452][ T728] uclogic 0003:256C:006D.0016: failed probing pen v2 parameters: -71 [ 139.133858][ T728] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 139.141408][ T728] uclogic: probe of 0003:256C:006D.0016 failed with error -71 [ 139.199637][ T728] usb 3-1: USB disconnect, device number 14 [ 139.352937][ T438] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.380694][ T3579] loop3: detected capacity change from 0 to 40427 [ 139.387554][ T3579] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 139.395390][ T3579] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 139.406065][ T3579] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.441580][ T3579] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 139.448553][ T3579] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.473390][ T2759] syz-executor: attempt to access beyond end of device [ 139.473390][ T2759] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 139.523038][ T438] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.541416][ T438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.553899][ T438] usb 2-1: Product: syz [ 139.557934][ T438] usb 2-1: Manufacturer: syz [ 139.562483][ T438] usb 2-1: SerialNumber: syz [ 140.083230][ T3598] loop3: detected capacity change from 0 to 512 [ 140.128769][ T3598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 140.138256][ T3598] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038 (0x7fffffff) [ 140.557701][ T19] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 140.757581][ T438] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 140.777436][ T438] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 140.785748][ T438] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 140.812928][ T313] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 140.893888][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 140.973001][ T438] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 140.985611][ T438] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 141.013406][ T438] usb 2-1: USB disconnect, device number 16 [ 141.023159][ T438] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 141.136774][ T2759] EXT4-fs (loop3): unmounting filesystem. [ 141.173181][ T19] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 141.182201][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.195000][ T19] usb 3-1: Product: syz [ 141.198998][ T19] usb 3-1: Manufacturer: syz [ 141.212875][ T19] usb 3-1: SerialNumber: syz [ 141.221385][ T19] r8152-cfgselector 3-1: config 0 descriptor?? [ 141.243505][ T313] usb 5-1: Using ep0 maxpacket: 8 [ 141.382973][ T313] usb 5-1: config 129 has an invalid interface number: 3 but max is 2 [ 141.391174][ T313] usb 5-1: config 129 has an invalid interface number: 181 but max is 2 [ 141.399635][ T313] usb 5-1: config 129 has an invalid interface number: 205 but max is 2 [ 141.408136][ T313] usb 5-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 141.417042][ T313] usb 5-1: config 129 has no interface number 0 [ 141.423878][ T313] usb 5-1: config 129 has no interface number 1 [ 141.430019][ T313] usb 5-1: config 129 has no interface number 2 [ 141.436487][ T313] usb 5-1: config 129 interface 3 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 141.447624][ T313] usb 5-1: config 129 interface 3 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 141.458404][ T313] usb 5-1: config 129 interface 3 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 141.469551][ T313] usb 5-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 141.482960][ T19] r8152-cfgselector 3-1: Unknown version 0x0000 [ 141.487614][ T313] usb 5-1: config 129 interface 181 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 141.513604][ T313] usb 5-1: config 129 interface 181 altsetting 2 endpoint 0x6 has an invalid bInterval 128, changing to 11 [ 141.525534][ T313] usb 5-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 141.536946][ T313] usb 5-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 141.554748][ T313] usb 5-1: config 129 interface 181 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 141.566212][ T313] usb 5-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x70, skipping [ 141.577309][ T313] usb 5-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 141.588575][ T313] usb 5-1: config 129 interface 181 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 141.598865][ T313] usb 5-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 141.610134][ T313] usb 5-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 141.621846][ T313] usb 5-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 141.632959][ T313] usb 5-1: config 129 interface 205 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 141.643495][ T313] usb 5-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 141.654572][ T313] usb 5-1: config 129 interface 205 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 141.666573][ T313] usb 5-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 141.677790][ T313] usb 5-1: config 129 interface 205 altsetting 3 endpoint 0x8 has an invalid bInterval 38, changing to 9 [ 141.679178][ T3627] loop3: detected capacity change from 0 to 131072 [ 141.689408][ T313] usb 5-1: config 129 interface 205 altsetting 3 endpoint 0x8 has invalid wMaxPacketSize 0 [ 141.705119][ T313] usb 5-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 141.716960][ T313] usb 5-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 141.723324][ T19] r8152-cfgselector 3-1: Unknown version 0x0000 [ 141.728143][ T313] usb 5-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 141.735335][ T19] r8152-cfgselector 3-1: bad CDC descriptors [ 141.745054][ T313] usb 5-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 141.765167][ T313] usb 5-1: config 129 interface 205 altsetting 3 has an invalid endpoint with address 0xD7, skipping [ 141.771003][ T19] r8152-cfgselector 3-1: Unknown version 0x0000 [ 141.776846][ T313] usb 5-1: config 129 interface 3 has no altsetting 0 [ 141.789131][ T313] usb 5-1: config 129 interface 181 has no altsetting 0 [ 141.794817][ T19] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 141.796694][ T313] usb 5-1: config 129 interface 205 has no altsetting 0 [ 141.804126][ T3627] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.815928][ T28] audit: type=1400 audit(1719985196.920:726): avc: denied { setopt } for pid=3646 comm="syz.1.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.889970][ T3627] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.912240][ T3627] 9pnet_fd: Insufficient options for proto=fd [ 141.959034][ T3647] loop1: detected capacity change from 0 to 40427 [ 141.966048][ T3647] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 141.973682][ T3647] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 142.003027][ T313] usb 5-1: New USB device found, idVendor=05c6, idProduct=9062, bcdDevice=74.7a [ 142.014932][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.029819][ T313] usb 5-1: Product: 麝똼ᷡ튬怫튚鲺༓戫ᅣʐ迩ࡕ㽧볎難⡤惲诺啌౺ᒲ彖ה絓痣緭ヒ⮪罰᠋돂몹쿘ᮮ臭껯콻댝닞⊊귪컔жⲖ焉쇲ค䶯웪ꍼ曵쭱钕䰪ﲽ辈䁢䟯浈쀗喞园ꜹᳪ垈ᆷ䰫傽㭹屋׆꣣尢ꃅ㯩프ꢠ걽ᐼꇦᾲ믎ᶨ⧿旀妓泿Ṻ쎶ج擘ᛀ쒵ꈷ죳Ꙁ᥋뺌ႁ枛䫪蔘煋옒慄鐲錖苷苩䇧욶 [ 142.065365][ T3647] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.100687][ T313] usb 5-1: Manufacturer: Ђ [ 142.105074][ T3647] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 142.113817][ T313] usb 5-1: SerialNumber: ᔼ쵛죞早陜薵憎ᓢ냴噸浹⭈輤絷﫞ᘯ툥쒪㿥鐊䝻⌡싕牌ﮐ슈⁲ἣ巛噕⸊ⓑ湖䄰샯鉁錟즴얛Ⓗᯝ䦨訊馸齮뤩鑊멸竡⎆㌐ㆵ倇ꁪ쪁룰퐰䖧À滸鯱쐎幆럮轐㦱쭫翷넎ﶨ쏝ꩅ孮迄ⱴ痯◜୺최㹥￙ⰱ儌ᑘ勺땴頱ﱳ䏮榔⪨㑸ࠡﷁ䚟떀ṴᎹ␌碸쀚榍焹㆙ [ 142.151482][ T3647] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 142.158785][ T3647] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 142.516200][ T28] audit: type=1326 audit(1719985197.620:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.1.1127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31dfb75b99 code=0x0 [ 142.605367][ T295] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 142.643337][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 142.643364][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 142.650735][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 142.669387][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 142.688094][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 142.695861][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 142.703737][ T293] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 142.916741][ T313] usb 5-1: USB disconnect, device number 14 [ 142.931748][ T3662] loop3: detected capacity change from 0 to 40427 [ 142.940555][ T3662] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 143.013036][ T3662] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 143.099159][ T3662] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.235298][ T3662] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 143.242270][ T3662] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.253012][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.275853][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.285726][ T28] audit: type=1400 audit(1719985198.390:728): avc: denied { mounton } for pid=3676 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 143.316827][ T295] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 143.326105][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.326768][ T2759] syz-executor: attempt to access beyond end of device [ 143.326768][ T2759] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 143.338767][ T295] usb 1-1: config 0 descriptor?? [ 143.378696][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.388714][ T3676] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.396198][ T3676] device bridge_slave_0 entered promiscuous mode [ 143.410516][ T3676] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.417706][ T3676] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.425121][ T3676] device bridge_slave_1 entered promiscuous mode [ 143.461528][ T395] bridge0: port 3(gretap0) entered disabled state [ 143.473748][ T395] device gretap0 left promiscuous mode [ 143.479045][ T395] bridge0: port 3(gretap0) entered disabled state [ 143.595920][ T3676] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.602771][ T3676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.609940][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.616811][ T3676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.634086][ T395] device bridge_slave_1 left promiscuous mode [ 143.640335][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.648019][ T395] device bridge_slave_0 left promiscuous mode [ 143.702103][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.718553][ T395] device veth1_macvtap left promiscuous mode [ 143.727434][ T395] device veth0_vlan left promiscuous mode [ 143.862884][ T2945] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 144.182946][ T295] usb 1-1: string descriptor 0 read error: -71 [ 144.202953][ T295] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #200: -71 [ 144.213008][ T295] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71 [ 144.220961][ T295] uclogic 0003:256C:006D.0017: failed probing pen v2 parameters: -71 [ 144.229224][ T295] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 144.240360][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.240838][ T295] uclogic: probe of 0003:256C:006D.0017 failed with error -71 [ 144.254878][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.256657][ T295] usb 1-1: USB disconnect, device number 17 [ 144.305673][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.313686][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.328893][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.337424][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.345440][ T2945] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.410692][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.417593][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.424957][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.433722][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.441831][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.448693][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.457700][ T728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.465695][ T728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.483744][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.492747][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.501932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.512420][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.522591][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.531448][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.551228][ T3703] input: syz0 as /devices/virtual/input/input17 [ 144.561851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.570536][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.713171][ T2945] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.737850][ T3676] device veth0_vlan entered promiscuous mode [ 144.752256][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.755879][ T2945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.760832][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.773045][ T2945] usb 4-1: Product: syz [ 144.777756][ T3676] device veth1_macvtap entered promiscuous mode [ 144.780112][ T2945] usb 4-1: Manufacturer: syz [ 144.790559][ T2945] usb 4-1: SerialNumber: syz [ 144.791643][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.802632][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.811639][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.823398][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.831890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.293006][ T19] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 145.532892][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 145.652997][ T19] usb 1-1: config 129 has an invalid interface number: 3 but max is 2 [ 145.661200][ T19] usb 1-1: config 129 has an invalid interface number: 181 but max is 2 [ 145.669567][ T19] usb 1-1: config 129 has an invalid interface number: 205 but max is 2 [ 145.677817][ T19] usb 1-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 145.686507][ T19] usb 1-1: config 129 has no interface number 0 [ 145.692505][ T19] usb 1-1: config 129 has no interface number 1 [ 145.698796][ T19] usb 1-1: config 129 has no interface number 2 [ 145.704884][ T19] usb 1-1: config 129 interface 3 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 145.715731][ T19] usb 1-1: config 129 interface 3 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 145.726354][ T19] usb 1-1: config 129 interface 3 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 145.737210][ T19] usb 1-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 145.747886][ T19] usb 1-1: config 129 interface 181 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 145.758740][ T19] usb 1-1: config 129 interface 181 altsetting 2 endpoint 0x6 has an invalid bInterval 128, changing to 11 [ 145.769911][ T19] usb 1-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 145.780870][ T19] usb 1-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 145.791991][ T19] usb 1-1: config 129 interface 181 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 145.803084][ T19] usb 1-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x70, skipping [ 145.813840][ T19] usb 1-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 145.824521][ T19] usb 1-1: config 129 interface 181 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 145.834433][ T19] usb 1-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 145.845176][ T19] usb 1-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 145.855843][ T19] usb 1-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 145.866687][ T19] usb 1-1: config 129 interface 205 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 145.882916][ T19] usb 1-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 145.895046][ T19] usb 1-1: config 129 interface 205 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 145.906451][ T19] usb 1-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 145.913049][ T2945] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 145.917883][ T19] usb 1-1: config 129 interface 205 altsetting 3 endpoint 0x8 has an invalid bInterval 38, changing to 9 [ 145.925099][ T3730] loop4: detected capacity change from 0 to 512 [ 145.934568][ T19] usb 1-1: config 129 interface 205 altsetting 3 endpoint 0x8 has invalid wMaxPacketSize 0 [ 145.941197][ T2945] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 145.951035][ T19] usb 1-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 145.957852][ T2945] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 145.969419][ T19] usb 1-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 145.983469][ T3730] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.984949][ T19] usb 1-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 146.005545][ T19] usb 1-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 146.016768][ T19] usb 1-1: config 129 interface 205 altsetting 3 has an invalid endpoint with address 0xD7, skipping [ 146.027747][ T19] usb 1-1: config 129 interface 3 has no altsetting 0 [ 146.034481][ T19] usb 1-1: config 129 interface 181 has no altsetting 0 [ 146.041441][ T19] usb 1-1: config 129 interface 205 has no altsetting 0 [ 146.053003][ T3730] EXT4-fs (loop4): 1 truncate cleaned up [ 146.058533][ T3730] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.087550][ T291] EXT4-fs (loop4): unmounting filesystem. [ 146.109519][ T3737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1153'. [ 146.123801][ T2945] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 146.131485][ T2945] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 146.150449][ T2945] usb 4-1: USB disconnect, device number 14 [ 146.158239][ T2945] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 146.483046][ T19] usb 1-1: New USB device found, idVendor=05c6, idProduct=9062, bcdDevice=74.7a [ 146.492029][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.500307][ T19] usb 1-1: Product: 麝똼ᷡ튬怫튚鲺༓戫ᅣʐ迩ࡕ㽧볎難⡤惲诺啌౺ᒲ彖ה絓痣緭ヒ⮪罰᠋돂몹쿘ᮮ臭껯콻댝닞⊊귪컔жⲖ焉쇲ค䶯웪ꍼ曵쭱钕䰪ﲽ辈䁢䟯浈쀗喞园ꜹᳪ垈ᆷ䰫傽㭹屋׆꣣尢ꃅ㯩프ꢠ걽ᐼꇦᾲ믎ᶨ⧿旀妓泿Ṻ쎶ج擘ᛀ쒵ꈷ죳Ꙁ᥋뺌ႁ枛䫪蔘煋옒慄鐲錖苷苩䇧욶 [ 146.535604][ T19] usb 1-1: Manufacturer: Ђ [ 146.539964][ T19] usb 1-1: SerialNumber: ᔼ쵛죞早陜薵憎ᓢ냴噸浹⭈輤絷﫞ᘯ툥쒪㿥鐊䝻⌡싕牌ﮐ슈⁲ἣ巛噕⸊ⓑ湖䄰샯鉁錟즴얛Ⓗᯝ䦨訊馸齮뤩鑊멸竡⎆㌐ㆵ倇ꁪ쪁룰퐰䖧À滸鯱쐎幆럮轐㦱쭫翷넎ﶨ쏝ꩅ孮迄ⱴ痯◜୺최㹥￙ⰱ儌ᑘ勺땴頱ﱳ䏮榔⪨㑸ࠡﷁ䚟떀ṴᎹ␌碸쀚榍焹㆙ [ 146.582926][ T39] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 146.879550][ T3754] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1160'. [ 146.888572][ T3754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1160'. [ 146.898122][ T3754] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1160'. [ 146.907074][ T3754] netlink: 'syz.2.1160': attribute type 3 has an invalid length. [ 146.914932][ T3754] netlink: 'syz.2.1160': attribute type 2 has an invalid length. [ 146.922480][ T3754] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1160'. [ 146.993117][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.012402][ T3760] input: syz0 as /devices/virtual/input/input18 [ 147.133407][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.194573][ T39] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 147.249090][ T19] usb 1-1: USB disconnect, device number 18 [ 147.254787][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.293350][ T39] usb 5-1: config 0 descriptor?? [ 147.509083][ T3774] loop2: detected capacity change from 0 to 256 [ 149.066686][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 149.122983][ T39] usb 5-1: string descriptor 0 read error: -71 [ 149.163045][ T39] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71 [ 149.171868][ T39] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 149.179905][ T39] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71 [ 149.188088][ T39] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 149.195538][ T39] uclogic: probe of 0003:256C:006D.0018 failed with error -71 [ 149.208280][ T39] usb 5-1: USB disconnect, device number 15 [ 149.238365][ T3803] loop0: detected capacity change from 0 to 512 [ 149.583091][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.793311][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.802699][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.812470][ T24] usb 3-1: Product: syz [ 149.817947][ T24] usb 3-1: Manufacturer: syz [ 149.822558][ T24] usb 3-1: SerialNumber: syz [ 149.870709][ T3821] input: syz0 as /devices/virtual/input/input19 [ 149.984740][ T3823] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 150.015031][ T3823] pim6reg0: linktype set to 774 [ 150.297639][ T3830] loop4: detected capacity change from 0 to 256 [ 150.912945][ T39] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 150.985600][ T3852] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 150.991273][ T3852] pim6reg0: linktype set to 774 [ 151.003095][ T19] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 151.053009][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 151.059506][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 151.068840][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 151.127509][ T3857] device pim6reg1 entered promiscuous mode [ 151.173029][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 151.262987][ T24] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 151.272738][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 151.287857][ T24] usb 3-1: USB disconnect, device number 16 [ 151.299200][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 151.309603][ T39] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 151.322149][ T39] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 151.330385][ T39] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 151.362252][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 151.363012][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.372674][ T39] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 151.390639][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.402320][ T19] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 151.411977][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.436563][ T19] usb 4-1: config 0 descriptor?? [ 151.460176][ T728] ================================================================== [ 151.468075][ T728] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260 [ 151.475097][ T728] Read of size 8 at addr ffff88812a3a8ce0 by task kworker/1:5/728 [ 151.482738][ T728] [ 151.484938][ T728] CPU: 1 PID: 728 Comm: kworker/1:5 Not tainted 6.1.84-syzkaller-00131-g81e9f0610c73 #0 [ 151.494453][ T728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 151.504347][ T728] Workqueue: 0x0 (rcu_gp) [ 151.508607][ T728] Call Trace: [ 151.511726][ T728] [ 151.514500][ T728] dump_stack_lvl+0x151/0x1b7 [ 151.519017][ T728] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 151.524411][ T728] ? _printk+0xd1/0x111 [ 151.528404][ T728] ? __virt_addr_valid+0x242/0x2f0 [ 151.533380][ T728] print_report+0x158/0x4e0 [ 151.537699][ T728] ? __virt_addr_valid+0x242/0x2f0 [ 151.542639][ T728] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 151.548718][ T728] ? worker_thread+0xa36/0x1260 [ 151.553403][ T728] kasan_report+0x13c/0x170 [ 151.557739][ T728] ? worker_thread+0xa36/0x1260 [ 151.562430][ T728] __asan_report_load8_noabort+0x14/0x20 [ 151.567900][ T728] worker_thread+0xa36/0x1260 [ 151.572418][ T728] kthread+0x26d/0x300 [ 151.576318][ T728] ? worker_clr_flags+0x1a0/0x1a0 [ 151.581175][ T728] ? kthread_blkcg+0xd0/0xd0 [ 151.585600][ T728] ret_from_fork+0x1f/0x30 [ 151.589856][ T728] [ 151.592724][ T728] [ 151.594885][ T728] Allocated by task 24: [ 151.598876][ T728] kasan_set_track+0x4b/0x70 [ 151.603303][ T728] kasan_save_alloc_info+0x1f/0x30 [ 151.608286][ T728] __kasan_kmalloc+0x9c/0xb0 [ 151.612677][ T728] __kmalloc_node+0xb4/0x1e0 [ 151.617102][ T728] kvmalloc_node+0x221/0x640 [ 151.621533][ T728] alloc_netdev_mqs+0x8c/0xf90 [ 151.626135][ T728] alloc_etherdev_mqs+0x36/0x40 [ 151.630823][ T728] usbnet_probe+0x207/0x27c0 [ 151.633142][ T3903] loop4: detected capacity change from 0 to 256 [ 151.635242][ T728] usb_probe_interface+0x5b6/0xa90 [ 151.646267][ T728] really_probe+0x2b8/0x920 [ 151.650603][ T728] __driver_probe_device+0x1a0/0x310 [ 151.655724][ T728] driver_probe_device+0x54/0x3d0 [ 151.660580][ T728] __device_attach_driver+0x2e3/0x490 [ 151.665790][ T728] bus_for_each_drv+0x183/0x200 [ 151.670488][ T728] __device_attach+0x312/0x510 [ 151.675076][ T728] device_initial_probe+0x1a/0x20 [ 151.680038][ T728] bus_probe_device+0xbe/0x1e0 [ 151.684623][ T728] device_add+0xb60/0xf10 [ 151.688786][ T728] usb_set_configuration+0x190f/0x1e80 [ 151.694084][ T728] usb_generic_driver_probe+0x8b/0x150 [ 151.699375][ T728] usb_probe_device+0x144/0x260 [ 151.704062][ T728] really_probe+0x2b8/0x920 [ 151.708404][ T728] __driver_probe_device+0x1a0/0x310 [ 151.713523][ T728] driver_probe_device+0x54/0x3d0 [ 151.718384][ T728] __device_attach_driver+0x2e3/0x490 [ 151.723600][ T728] bus_for_each_drv+0x183/0x200 [ 151.728278][ T728] __device_attach+0x312/0x510 [ 151.733052][ T728] device_initial_probe+0x1a/0x20 [ 151.737909][ T728] bus_probe_device+0xbe/0x1e0 [ 151.742510][ T728] device_add+0xb60/0xf10 [ 151.746699][ T728] usb_new_device+0xf2f/0x1820 [ 151.751276][ T728] hub_event+0x2db1/0x4830 [ 151.755527][ T728] process_one_work+0x73d/0xcb0 [ 151.760214][ T728] worker_thread+0xa60/0x1260 [ 151.764726][ T728] kthread+0x26d/0x300 [ 151.768634][ T728] ret_from_fork+0x1f/0x30 [ 151.772888][ T728] [ 151.775057][ T728] Freed by task 24: [ 151.778701][ T728] kasan_set_track+0x4b/0x70 [ 151.783128][ T728] kasan_save_free_info+0x2b/0x40 [ 151.787991][ T728] ____kasan_slab_free+0x131/0x180 [ 151.792935][ T728] __kasan_slab_free+0x11/0x20 [ 151.797536][ T728] __kmem_cache_free+0x218/0x3b0 [ 151.802309][ T728] kfree+0x7a/0xf0 [ 151.805867][ T728] kvfree+0x35/0x40 [ 151.809512][ T728] netdev_freemem+0x3f/0x60 [ 151.813854][ T728] netdev_release+0x7f/0xb0 [ 151.818198][ T728] device_release+0x95/0x1c0 [ 151.822622][ T728] kobject_put+0x178/0x260 [ 151.826873][ T728] put_device+0x1f/0x30 [ 151.830865][ T728] free_netdev+0x393/0x480 [ 151.835117][ T728] usbnet_disconnect+0x245/0x390 [ 151.839890][ T728] usb_unbind_interface+0x1fa/0x8c0 [ 151.844927][ T728] device_release_driver_internal+0x53e/0x870 [ 151.850824][ T728] device_release_driver+0x19/0x20 [ 151.855770][ T728] bus_remove_device+0x2fa/0x360 [ 151.860562][ T728] device_del+0x663/0xe90 [ 151.864715][ T728] usb_disable_device+0x380/0x720 [ 151.869688][ T728] usb_disconnect+0x32a/0x890 [ 151.874199][ T728] hub_event+0x1ed8/0x4830 [ 151.878454][ T728] process_one_work+0x73d/0xcb0 [ 151.883138][ T728] worker_thread+0xd71/0x1260 [ 151.887663][ T728] kthread+0x26d/0x300 [ 151.891561][ T728] ret_from_fork+0x1f/0x30 [ 151.895813][ T728] [ 151.897993][ T728] Last potentially related work creation: [ 151.903624][ T728] kasan_save_stack+0x3b/0x60 [ 151.908145][ T728] __kasan_record_aux_stack+0xb4/0xc0 [ 151.913361][ T728] kasan_record_aux_stack_noalloc+0xb/0x10 [ 151.919073][ T728] insert_work+0x56/0x310 [ 151.923499][ T728] __queue_work+0x9b6/0xd70 [ 151.927836][ T728] queue_work_on+0x105/0x170 [ 151.932437][ T728] usbnet_link_change+0xeb/0x100 [ 151.937212][ T728] usbnet_probe+0x1dbe/0x27c0 [ 151.941723][ T728] usb_probe_interface+0x5b6/0xa90 [ 151.946680][ T728] really_probe+0x2b8/0x920 [ 151.951012][ T728] __driver_probe_device+0x1a0/0x310 [ 151.956309][ T728] driver_probe_device+0x54/0x3d0 [ 151.961164][ T728] __device_attach_driver+0x2e3/0x490 [ 151.966372][ T728] bus_for_each_drv+0x183/0x200 [ 151.971059][ T728] __device_attach+0x312/0x510 [ 151.975659][ T728] device_initial_probe+0x1a/0x20 [ 151.980520][ T728] bus_probe_device+0xbe/0x1e0 [ 151.985120][ T728] device_add+0xb60/0xf10 [ 151.989327][ T728] usb_set_configuration+0x190f/0x1e80 [ 151.994579][ T728] usb_generic_driver_probe+0x8b/0x150 [ 151.999876][ T728] usb_probe_device+0x144/0x260 [ 152.004650][ T728] really_probe+0x2b8/0x920 [ 152.008989][ T728] __driver_probe_device+0x1a0/0x310 [ 152.014110][ T728] driver_probe_device+0x54/0x3d0 [ 152.018968][ T728] __device_attach_driver+0x2e3/0x490 [ 152.024177][ T728] bus_for_each_drv+0x183/0x200 [ 152.028873][ T728] __device_attach+0x312/0x510 [ 152.033463][ T728] device_initial_probe+0x1a/0x20 [ 152.038322][ T728] bus_probe_device+0xbe/0x1e0 [ 152.042924][ T728] device_add+0xb60/0xf10 [ 152.047087][ T728] usb_new_device+0xf2f/0x1820 [ 152.051689][ T728] hub_event+0x2db1/0x4830 [ 152.055942][ T728] process_one_work+0x73d/0xcb0 [ 152.060628][ T728] worker_thread+0xa60/0x1260 [ 152.065143][ T728] kthread+0x26d/0x300 [ 152.069047][ T728] ret_from_fork+0x1f/0x30 [ 152.073299][ T728] [ 152.075469][ T728] The buggy address belongs to the object at ffff88812a3a8000 [ 152.075469][ T728] which belongs to the cache kmalloc-4k of size 4096 [ 152.089357][ T728] The buggy address is located 3296 bytes inside of [ 152.089357][ T728] 4096-byte region [ffff88812a3a8000, ffff88812a3a9000) [ 152.102635][ T728] [ 152.104806][ T728] The buggy address belongs to the physical page: [ 152.111058][ T728] page:ffffea0004a8ea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12a3a8 [ 152.121124][ T728] head:ffffea0004a8ea00 order:3 compound_mapcount:0 compound_pincount:0 [ 152.129288][ T728] flags: 0x4000000000010200(slab|head|zone=1) [ 152.135196][ T728] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 152.143608][ T728] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 152.152020][ T728] page dumped because: kasan: bad access detected [ 152.158277][ T728] page_owner tracks the page as allocated [ 152.163822][ T728] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 293, tgid 293 (syz-executor), ts 23587304537, free_ts 0 [ 152.183959][ T728] post_alloc_hook+0x213/0x220 [ 152.188560][ T728] prep_new_page+0x1b/0x110 [ 152.192900][ T728] get_page_from_freelist+0x27ea/0x2870 [ 152.198299][ T728] __alloc_pages+0x3a1/0x780 [ 152.202707][ T728] alloc_slab_page+0x6c/0xf0 [ 152.207131][ T728] new_slab+0x90/0x3e0 [ 152.211039][ T728] ___slab_alloc+0x6f9/0xb80 [ 152.215464][ T728] __slab_alloc+0x5d/0xa0 [ 152.219629][ T728] __kmem_cache_alloc_node+0x1af/0x250 [ 152.224924][ T728] __kmalloc_node_track_caller+0xa2/0x1e0 [ 152.230650][ T728] kmemdup+0x29/0x60 [ 152.234385][ T728] __addrconf_sysctl_register+0xad/0x3e0 [ 152.239852][ T728] addrconf_sysctl_register+0x141/0x1a0 [ 152.245235][ T728] ipv6_add_dev+0xbd7/0x11a0 [ 152.249660][ T728] addrconf_notify+0x6d2/0xe10 [ 152.254260][ T728] raw_notifier_call_chain+0x8c/0xf0 [ 152.259379][ T728] page_owner free stack trace missing [ 152.264590][ T728] [ 152.266756][ T728] Memory state around the buggy address: [ 152.272231][ T728] ffff88812a3a8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.280135][ T728] ffff88812a3a8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.288027][ T728] >ffff88812a3a8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.295919][ T728] ^ [ 152.302954][ T728] ffff88812a3a8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.310853][ T728] ffff88812a3a8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.318986][ T728] ================================================================== [ 152.326891][ T728] Disabling lock debugging due to kernel taint [ 152.812959][ T19] usb 4-1: string descriptor 0 read error: -71 [ 152.832938][ T19] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #200: -71 [ 152.841563][ T19] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71 [ 152.849487][ T19] uclogic 0003:256C:006D.0019: failed probing pen v2 parameters: -71 [ 152.857381][ T19] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 152.864660][ T19] uclogic: probe of 0003:256C:006D.0019 failed with error -71 [ 152.873114][ T19] usb 4-1: USB disconnect, device number 15 [ 152.972953][ T39] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 152.981847][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.994621][ T39] usb 1-1: config 0 descriptor?? [ 153.033246][ T39] hub 1-1:0.0: bad descriptor, ignoring hub [ 153.039086][ T39] hub: probe of 1-1:0.0 failed with error -5 [ 153.363115][ T39] usb 1-1: USB disconnect, device number 19