last executing test programs: 6.884927847s ago: executing program 2 (id=2732): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d492e4ff000109021b19f1000000d40904150001da40df0009", @ANYRES32], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130000000000080014"], 0x4c}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x3b4, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="bb7d", @ANYRES16=r2, @ANYRESOCT=r7, @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0"], 0x398}}, 0x0) 3.682037572s ago: executing program 2 (id=2761): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.677939212s ago: executing program 4 (id=2762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 3.628218087s ago: executing program 4 (id=2763): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x3c}}, 0x0) 3.628065937s ago: executing program 4 (id=2764): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f000000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40184810, &(0x7f00000000c0)) 1.652147139s ago: executing program 2 (id=2767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x4698) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2}) 1.651983118s ago: executing program 2 (id=2768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414bb000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000032000000ac1414000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b928773"], 0x154}}, 0x0) 1.651735438s ago: executing program 2 (id=2769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001000)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="0800050001000000b4000880"], 0xd8}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000018c0)={0x110, r3, 0x1, 0x0, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0xec, 0x8, 0x0, 0x1, [{0x4}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "348c947b862ea0c0216c1945654be1c283f96ac562687ff6518a33ca404c4535"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a9d1d68eef63a27a7cda33880b9daf60f0cdfad01183056fba8a34abe7994903"}]}, {0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 1.651603059s ago: executing program 2 (id=2770): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x7f}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.488181253s ago: executing program 4 (id=2772): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.419974199s ago: executing program 0 (id=2774): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006a0001"], 0x1c}}, 0x0) 1.419797649s ago: executing program 0 (id=2775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000001380)) 1.387586932s ago: executing program 0 (id=2776): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000004080)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000004c80)=""/83, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001040)=0x1) 1.322617378s ago: executing program 0 (id=2778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_sec_ctx={0x1}]}, 0x30}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) syz_emit_ethernet(0xae, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf7003829000000f200785eb9e779f21e00fdff0000ff020000000000000000000000000001"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) readv(0xffffffffffffffff, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x6b}, {0x0}], 0x2) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, 0x0) 1.262892734s ago: executing program 0 (id=2780): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 1.262704874s ago: executing program 3 (id=2781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x840) 1.262544304s ago: executing program 3 (id=2782): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001f"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=@v1={0x2, "43dc"}, 0x3, 0x2) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 651.12011ms ago: executing program 4 (id=2783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009902"]) 635.437061ms ago: executing program 4 (id=2784): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x18, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 404.177962ms ago: executing program 0 (id=2785): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x2, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "c0"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x9, 0x20, 0x7}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x2998}, @country_functional={0x6, 0x24, 0x7, 0x6, 0x180}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x92, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0xb, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x80, 0x1, 0x1}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000002c0)=ANY=[]) 403.994483ms ago: executing program 3 (id=2786): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) 403.838053ms ago: executing program 3 (id=2787): openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}}, 0x14}}, 0x4000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x26002) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 403.763153ms ago: executing program 3 (id=2788): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r0, &(0x7f0000001200)=""/162, 0xa2) 381.236495ms ago: executing program 3 (id=2789): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040ef1b47600000000000010902240001000000000904000001030002000921000000012205000905810300000c0000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x409, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect(0x2, 0xb7d, &(0x7f0000000400)={{0x12, 0x1, 0x211, 0x74, 0xf2, 0xbb, 0x20, 0xfd9, 0x2c, 0x4c5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6b, 0x3, 0x1, 0xf3, 0xd0, 0xe, [{{0x9, 0x4, 0x26, 0xfb, 0xf, 0x80, 0xcc, 0xe5, 0x1, [@hid_hid={0x9, 0x21, 0xff8, 0x4e, 0x1, {0x22, 0x376}}], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0xe2, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x75, 0x200}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x2, 0x1, 0x1, [@generic={0x85, 0x1, "b90f1fed88451c7385f25a32a18dc30de4447e7cec70cef5a1e22a9d170e771c3ee98c43cfda6b32a90b14e80d2042ad85894ff1737cd67e1c20749799c57520fbcff24dcbc2f7c8bf3006a9bde2e128048fc8affb07c0382ad7e7c671b95cb9e34a340cbb094510b5f8377c9eccc90f80a4adf9e40f2a1061b07405d3b55b2465ff42"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x3, 0x1, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x40}]}}, {{0x9, 0x5, 0x4, 0x10, 0x28, 0x0, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81a456291372f656, 0x4, 0x8}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x40, 0xa, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x91}, @generic={0xcb, 0x21, "99416e0bbd6d9befcf4a470542c8abbc4a5d9839c9d67a307684ca22b615519ac7f68402122971fd11c1f6695fedae421f7b0f07b142c6ebffdab007275b261e5fef953b8989ba051820921de3a554ecf29b175becebdde0b143b90d13313db499e01c6c6873650c0918550934ba63a5aaa2962c83d18f26ce2a6f7050f0eb5b6977323b63d69500ae47f73b998b6dcf459b6670bd30ee239d58011636abad52f8101ff73221c3072070ceabf7f251ed31474b7afc938cc6f81207927cab2b70be70e155e8ce3ed177"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x3, 0xb, 0x9, [@generic={0xdc, 0x21, "009fc3d731cac55c0ad7f68e7dcf854c97b2c6fa0833625341cf443816dc8f618eed554bb41c7366d26c6d161114c36c59b52f6dc3492a87ee36493a25461b1593cfbd01ebaf15e68b68d185327404ea84e26f00e69a389f6e14213b00930f0338945a819b104ece9d279942e4960275c7f14eb274cf196fdfc37fc188af9b35edfe951d5b0358c8bcf2600d082a11008d3e6c956ffc4b2161b1c842e930968488fd734b4e580f1c9b7f30f04b3372b098ad8080d67f63202a98e36570bff713ba4c6a64abf6dc9642a4bd90c7da644c47635bc0dda60e8cba7c"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x1d, 0xf0, 0x8, [@generic={0x6c, 0x30, "b48237b554b728a58332341f7eeb43524f05fe4ce5ca368bce84a5645564c1c6d00839b92763d93c814ea86d5e7c7a86134568bbec7395aae2b018c898f884d761c14e0b39831f5e436e6b9d4ce6546d0da809bf0717b2432037037806ee4407b5762a6b3962f44171ed"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xfa, 0x9, 0x3, [@generic={0xf5, 0x23, "da7de8c96cf6d8531f094d7447b1c236213c62d06a4456b4e37892afd4d8131535bb114dd3f1885ea233c4dc6dc15d44d16e52f079a1fcacad9a69d7cc1f5ce99f5afac7c5823d09f7e9f98843af35355ae5eb19d489d1809c42acbc7204f842cfa0f1b7a41741c6727510c3d06342d617f95c874ece2be176c5a22ee8757b2fc6f300df17713d3084975078497957fd84e18c38e00190318541e98fa1f6a2abb3c66af8b2c3cba5c095d64f54383d22c96caf07d19f6843ddcaa6bf6723656a299ab316125a76550dd1803a8acc74bc1b16c581478c3adcb97c70329e9cb53511b526e42075787bddf2c5b782b26f7daa0bfe"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0xff, 0x77, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8d, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xb, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0x2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x9, 0xf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x90, 0x6}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0xd, 0x1, 0xee, [@generic={0x6, 0xc, "acc65a0b"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x56, 0x4}]}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0x2, 0x8a, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x6, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x3, 0x1, 0x2, [@generic={0xc9, 0x4, "d495d8c61a47c6f1d449f39219a11ff1d110bf62d22896564fd34c642d73756a0c38cf63a8a07855dbc1ecd86e44f28f8097b8f66c81aeab19ce4a494af784b56d8d689bdc548d60f7654739afef87d29d57c3c31cea25e69b96e6760d0d70631a5fd7776de6dec9d7d9c2d29fb04294e267426870f2bf8fdc9c3dd0a33e86305dab8467de5dbedc23ccf95c1d753ad84cce82d78e38238cfdeeb2d5482b40bc21979402ea683926beddcaa536e17afd46028162ef365c2faf5901df4510920e91bd4903b9fab6"}]}}]}}, {{0x9, 0x4, 0x22, 0x40, 0x3, 0x2, 0x62, 0x32, 0x1, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "d4"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x6, 0x1}, [@mdlm_detail={0x40, 0x24, 0x13, 0x4, "392a354f8db39d232cb5523a6d99df0846da276031decae7466b7911344cab570b6130692fca3f7e8578d9d3244dca303a94c2c65bf3717aead9dd80"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x58, 0xd, 0x5}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0x3, "d18dd5", "1146"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1000, 0x4, 0x0, "df9de675"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x8, 0x8, "6142af4f06"}]}], [{{0x9, 0x5, 0xe, 0x1, 0x200, 0xb, 0x3, 0x4, [@generic={0x74, 0x9, "47dd2911b984bc8b9bca5d41d07f8d8d86812f3d48fa17cf222da455ec391cca11d3f93d0f6cd33b132ae3193aeb725e06a0241db5418bfc92a2e98abe70fcc12b2261ea082e972abaaa25a775473ab5d30377e9e7bc717e91d06d55ceba37a0d455f670baf07e1798b1142e3819fcccaf20"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0xcc, 0xff, 0x61, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xebeb}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x4, 0x7, 0x7f, [@generic={0x95, 0xe, "8cce5fa245f28cef9deceea8400e1ee9661d9023154f0048e8e2a7542f6debb147fa95ca3a3042bc2334989e1601ac83ee61c45e7b389fb0c19d12a71e6c61354581ab3e701389828da12521896c98776eb9f49ac86385d0ea7f1f4b74c22f993f1c2d3df270f4ab487d2fa80a5a1fd459e48a40ff382de9f0824155c402ae23daa6dd28617e1774bd2009baf9ee1fd2f30b07"}]}}]}}, {{0x9, 0x4, 0x3, 0x4, 0xa, 0x85, 0x5d, 0xd0, 0x5, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "73eb3f63"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x2, 0x2, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2}, @mdlm={0x15, 0x24, 0x12, 0xcb7}]}], [{{0x9, 0x5, 0xc, 0x1, 0x400, 0x0, 0x10, 0x7, [@generic={0x1f, 0x1, "e3666051ef079a8e7da63fdec672fa3274d3c773d3f4fd34c4ecff7238"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x1}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x8, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x2, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1}]}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x81, 0x3, 0x4, [@generic={0xfc, 0x23, "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"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x4, 0x80, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0xe}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x9, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x7}, @generic={0xa5, 0x6, "328bc8030954c9bfa0a24e7fbcd1eb17b531dbf51b5fa2f9e2c7fe234d11f5289de5b4dd52d02561f6db541c14b78a1de5f306332c13bacfb7b67962c1433a5c7f115c90186a4abcb2df4434ca96d5ebb49b4ef42140c481cffe55150dd173cc5d1ba42158477c88bcbaeaa3421a3abe0f52a948935b6779bc825638d9c29c750a03051c61a1086a363aa2eec6c30060dc74cf8146c54f58e76f2a6d31bd4f40897b5a"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xe, 0xa, 0xfd, [@generic={0x27, 0xa, "ec39c53288e30e06c5b192882500128201100491f4ee0d8a206b39bd6184fc2aa6a3c57b6d"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xb, 0x3, 0x81, [@generic={0x5d, 0x10, "d5b4f5c2ed1aff0a118b05cdeba32e72b5c6b688941473575b6f2cf3c881da502f58dcf3e60faaf60027ccb0238cc365333d60433eca3bbc5fa11541c60d0900b6e7c5d0405223a3fab7574aa71b8dfd78b13e9d7aa72f8f8a4794"}, @generic={0xa8, 0x3, "099f26bf3a6725ca7b3d66406a9b56a2112316588fc7f333577b3ad868a79c9fab80f3b136404cc33f40705b9a68e17530dbefbf9fc09ef761d51189b1121a43484b410303d217ad2ad971ca223700cd82afa6dd601d4a162173572454e94586eab8617614a5f62a0a91b3daa20d8920f9d7866653fc5b66e6e6bc5fc0ef761699bd6ad2ac327d261b1d1c7ee8693b8a39c3e95269f2e6f0f5abad28b5f152a0206f14ffc1d9"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x1, 0xf9, 0x39, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x76}, @generic={0x33, 0x3, "764f413042be96b98e1628dc649cf999d103c03c8f90e0f47222b68842625d4c68f29411e0965c6e2eb3d7588adaa66ae8"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x3, 0x2, 0x0, [@generic={0x7d, 0x21, "c006ea6732d3f66b0be3992bf50ba98f8a2139b2aaed14b5ce706a2d332c2ed26b62c0d007fbeea61431e8e9e8c3746bcb5c34fb6b293499f70cb3977d5b29704be68f55ef9b18026cb92a6b6d28a924544e7052bff690c12e19b5277037ba19b4dcd19d8f3ca606b9033d27ae3601d8e2c64efbe34ab3f5334e46"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x2, 0x5, 0x4, 0xff, 0xf2}, 0x4e, &(0x7f0000000040)={0x5, 0xf, 0x4e, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "f0bedcc2c4cf8d2fc5e0c9c65523d8d2"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x2, 0x0, 0x66, [0xff3fa0, 0xff0f, 0xc03f, 0x3f00, 0xff0000, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0x0, 0x3ff, 0xf}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000280)={0xc, &(0x7f0000000140)={0x20, 0xf, 0x80, {0x80, 0xb, "2a5f115fb62fb88feec7b1214ad55dfc2713a1930fbeb4e3ddaef2d16e01a56475f4d94468fd0c55c19e89c8dc0007b79e87d571f4ba1e6cc3d6f417e329a657a8d6fce66a9d751877f1c15e6c43d68aef03b4ac276f3fbf370a0c5414f4c75f8b228e2bcbd7afd16e71f742201881e9366a229aacabde51ab361942913e"}}, &(0x7f0000000200)={0x0, 0x3, 0xf, @string={0xf, 0x3, "cfb441ca3ee1aaad54516c66f7"}}}, &(0x7f00000011c0)={0x24, &(0x7f0000000340)={0x20, 0x18, 0x64, "05b8e80022e6186caebef94f10ed50b5d45b20594a1c25548edf98e8a499e0f0c62993a86ff127346abd5a1827ee785e3a02843aa4dfc3ccf95e9a56fd91e84960d7f0a670971aacd437d54d2614849f23bc21f4e0f4b5371dcd2f0f8f3a23f09cccc672"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5e}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000001080)={0x20, 0x81, 0x2, "27e6"}, &(0x7f00000010c0)={0x20, 0x82, 0x3, "ee7360"}, &(0x7f0000001100)={0x20, 0x83, 0x2, "fe9e"}, &(0x7f0000001140)={0x20, 0x84, 0x3, "aa67cd"}, &(0x7f0000001180)={0x20, 0x85, 0x3, "2a3fe8"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 128.089328ms ago: executing program 1 (id=2790): syz_io_uring_setup(0x62b8, &(0x7f0000000200)={0x0, 0xe855, 0x10100, 0x1}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9b000/0x2000)=nil}) r3 = dup(r2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="449fa00908c01f0894adebc3816a1b4970f0779780c263bb97186b6b1301e73c23aaa78e97ca5fa6ff021a3bf1c3fd08d604e470da872a48fdfc225965a9bb39f7db7fab9000d49a57c0efc3910875213403c32873b8840b315068a0819380ee2a91506a05e07606edc2c1b6bfe9fad30e8ad721c9df73eb8c4a2dd07a99d2947392a5ac7b74a497aefdf5f6090c2da417ed248ede20de39170c44e95ac1a499ea331590eaf1d0a1388a8085805069a0b275", 0xb2}], 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x800000}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 64.190444ms ago: executing program 1 (id=2791): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 63.875424ms ago: executing program 1 (id=2792): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 54.074745ms ago: executing program 1 (id=2793): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) 47.145256ms ago: executing program 1 (id=2794): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') write$binfmt_aout(r0, 0x0, 0x0) 0s ago: executing program 1 (id=2795): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "198b5609c237618839458e3dca5dd9b8"}}}]}, 0x48}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16=r0], 0x0) kernel console output (not intermixed with test programs): [ 453.434647][ T8395] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2004: bad orphan inode 17 [ 453.445130][ T8395] ext4_test_bit(bit=16, block=4) = 1 [ 453.450487][ T8395] is_bad_inode(inode)=0 [ 453.454472][ T8395] NEXT_ORPHAN(inode)=0 [ 453.458654][ T8395] max_ino=32 [ 453.467455][ T8395] i_nlink=1 [ 453.470473][ T8395] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 453.578588][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.585517][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.593004][ T8398] device bridge_slave_0 entered promiscuous mode [ 453.612393][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.626931][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.639527][ T8398] device bridge_slave_1 entered promiscuous mode [ 454.022067][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.028961][ T8398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.036148][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.043037][ T8398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.088896][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.098290][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.105950][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 454.113233][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 454.143732][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 454.152082][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.158959][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.176978][ T8413] loop3: detected capacity change from 0 to 2048 [ 454.183231][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 454.191172][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.198059][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.222072][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 454.229995][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 454.244236][ T8398] device veth0_vlan entered promiscuous mode [ 454.254570][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 454.263218][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 454.272060][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 454.280289][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 454.296718][ T8398] device veth1_macvtap entered promiscuous mode [ 454.304659][ T8413] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 454.317295][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 454.341592][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 454.373693][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 454.461572][ T8422] loop0: detected capacity change from 0 to 128 [ 454.478332][ T8419] loop1: detected capacity change from 0 to 512 [ 454.622931][ T8419] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 454.667394][ T380] device bridge_slave_1 left promiscuous mode [ 454.681228][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.689697][ T380] device bridge_slave_0 left promiscuous mode [ 454.695155][ T8422] attempt to access beyond end of device [ 454.695155][ T8422] loop0: rw=0, want=240, limit=128 [ 454.695837][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.716111][ T380] device veth1_macvtap left promiscuous mode [ 454.722001][ T380] device veth0_vlan left promiscuous mode [ 455.281568][ T3236] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 455.324129][ T2163] attempt to access beyond end of device [ 455.324129][ T2163] loop0: rw=1, want=1041, limit=128 [ 455.475850][ T3236] EXT4-fs (loop3): Remounting filesystem read-only [ 455.499213][ T8432] loop2: detected capacity change from 0 to 256 [ 455.563933][ T8435] loop3: detected capacity change from 0 to 512 [ 455.587583][ T8429] device dummy0 entered promiscuous mode [ 456.498187][ T8446] loop1: detected capacity change from 0 to 1024 [ 456.520190][ T8435] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 456.530069][ T8453] loop0: detected capacity change from 0 to 2048 [ 456.531192][ T8435] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038 (0x7fffffff) [ 456.570013][ T8453] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 456.816194][ T7871] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 456.875683][ T311] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 456.957065][ T7871] EXT4-fs (loop0): Remounting filesystem read-only [ 457.017702][ T8464] loop3: detected capacity change from 0 to 512 [ 457.046622][ T8464] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 457.095724][ T8464] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038 (0x7fffffff) [ 457.416899][ T8446] loop1: detected capacity change from 0 to 40427 [ 457.459925][ T8446] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 457.467218][ T8472] loop2: detected capacity change from 0 to 2048 [ 457.468028][ T8446] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 457.700307][ T8472] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 457.709441][ T8446] F2FS-fs (loop1): Found nat_bits in checkpoint [ 457.745743][ T311] usb 5-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 457.756082][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.762836][ T8446] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 457.770819][ T8446] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 457.804271][ T311] usb 5-1: Product: syz [ 457.808504][ T311] usb 5-1: Manufacturer: syz [ 457.844674][ T311] usb 5-1: SerialNumber: syz [ 457.849912][ T311] usb 5-1: config 0 descriptor?? [ 458.886606][ T7143] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 458.917632][ T311] usb 5-1: USB disconnect, device number 7 [ 458.924033][ T7143] EXT4-fs (loop2): Remounting filesystem read-only [ 459.802725][ T8497] loop1: detected capacity change from 0 to 2048 [ 459.929032][ T8516] loop4: detected capacity change from 0 to 128 [ 460.339297][ T8497] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 461.504769][ T8398] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 461.529288][ T8528] loop2: detected capacity change from 0 to 256 [ 461.556054][ T8398] EXT4-fs (loop1): Remounting filesystem read-only [ 461.643246][ T8533] loop4: detected capacity change from 0 to 1024 [ 461.654533][ T8535] loop2: detected capacity change from 0 to 512 [ 462.239488][ T8540] 9pnet: Insufficient options for proto=fd [ 462.990020][ T8535] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 463.000958][ T8535] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038 (0x7fffffff) [ 464.672495][ T8572] loop2: detected capacity change from 0 to 512 [ 464.700212][ T8572] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 464.700804][ T8578] loop4: detected capacity change from 0 to 256 [ 464.711359][ T8572] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038 (0x7fffffff) [ 464.729016][ T8577] loop3: detected capacity change from 0 to 128 [ 464.815745][ T26] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 464.860848][ T8582] loop3: detected capacity change from 0 to 512 [ 464.994269][ T8582] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 465.320793][ T8588] device dummy0 entered promiscuous mode [ 465.531434][ T26] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 465.579334][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.587306][ T26] usb 1-1: Product: syz [ 465.591295][ T26] usb 1-1: Manufacturer: syz [ 465.595901][ T26] usb 1-1: SerialNumber: syz [ 465.600725][ T26] usb 1-1: config 0 descriptor?? [ 465.893913][ T6] usb 1-1: USB disconnect, device number 15 [ 466.034283][ T8599] overlayfs: overlapping lowerdir path [ 466.662375][ T8608] loop1: detected capacity change from 0 to 512 [ 466.926556][ T8615] loop3: detected capacity change from 0 to 1024 [ 466.937324][ T8613] loop4: detected capacity change from 0 to 512 [ 467.109576][ T8608] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 467.145535][ T8608] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 467.157865][ T8613] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 467.747026][ T8624] loop0: detected capacity change from 0 to 128 [ 467.769464][ T8615] loop3: detected capacity change from 0 to 40427 [ 467.782973][ T30] audit: type=1400 audit(1727812971.403:2492): avc: denied { ioctl } for pid=8625 comm="syz.1.2062" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 467.783197][ T8626] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 467.894353][ T8629] device dummy0 entered promiscuous mode [ 467.988530][ T8615] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 468.055676][ T8615] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 468.086937][ T8615] F2FS-fs (loop3): Found nat_bits in checkpoint [ 468.124304][ T8634] loop4: detected capacity change from 0 to 2048 [ 468.151134][ T8615] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 468.158269][ T8615] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 468.237694][ T8634] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 468.266126][ T30] audit: type=1400 audit(1727812971.893:2493): avc: denied { write } for pid=8625 comm="syz.1.2062" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 468.495981][ T26] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 468.514215][ T8626] kvm: emulating exchange as write [ 469.503239][ T5917] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 469.521657][ T5917] EXT4-fs (loop4): Remounting filesystem read-only [ 469.809605][ T26] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 469.818878][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.827030][ T26] usb 1-1: Product: syz [ 469.831071][ T26] usb 1-1: Manufacturer: syz [ 469.835428][ T26] usb 1-1: SerialNumber: syz [ 469.845726][ T26] usb 1-1: config 0 descriptor?? [ 469.860731][ T8659] loop1: detected capacity change from 0 to 40427 [ 470.356228][ T8659] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 470.365158][ T8670] 9pnet: Insufficient options for proto=fd [ 470.365638][ T8659] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 470.402019][ T8659] F2FS-fs (loop1): Found nat_bits in checkpoint [ 470.469660][ T8659] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 470.477602][ T8659] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 470.580817][ T5508] usb 1-1: USB disconnect, device number 16 [ 470.773160][ T8681] loop2: detected capacity change from 0 to 128 [ 470.925658][ T1614] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 471.550008][ T1614] usb 5-1: Using ep0 maxpacket: 32 [ 471.584290][ T8697] loop3: detected capacity change from 0 to 2048 [ 471.665723][ T1614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.676568][ T1614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.686167][ T1614] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 471.695032][ T1614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.703375][ T1614] usb 5-1: config 0 descriptor?? [ 471.737334][ T8697] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 472.395685][ T1614] usbhid 5-1:0.0: can't add hid device: -71 [ 472.401480][ T1614] usbhid: probe of 5-1:0.0 failed with error -71 [ 472.408664][ T1614] usb 5-1: USB disconnect, device number 8 [ 472.443310][ T3236] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 472.458148][ T3236] EXT4-fs (loop3): Remounting filesystem read-only [ 473.216042][ T8724] 9pnet: Insufficient options for proto=fd [ 473.469760][ T8726] loop3: detected capacity change from 0 to 128 [ 473.884340][ T8735] loop3: detected capacity change from 0 to 512 [ 473.916635][ T8735] EXT4-fs (loop3): Test dummy encryption mode enabled [ 473.927608][ T8735] EXT4-fs error (device loop3): __ext4_iget:4892: inode #11: block 1: comm syz.3.2088: invalid block [ 473.938533][ T8735] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2088: couldn't read orphan inode 11 (err -117) [ 473.950479][ T8735] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 474.444446][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'. [ 474.554804][ T30] audit: type=1400 audit(1727812978.173:2494): avc: denied { write } for pid=8745 comm="syz.2.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 474.874195][ T8752] loop4: detected capacity change from 0 to 2048 [ 474.953620][ T8752] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 475.361752][ T8759] loop0: detected capacity change from 0 to 256 [ 475.815360][ T5917] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 475.830117][ T5917] EXT4-fs (loop4): Remounting filesystem read-only [ 476.766445][ T8780] loop4: detected capacity change from 0 to 128 [ 476.793568][ T8781] 9pnet: Insufficient options for proto=fd [ 477.814197][ T8796] loop4: detected capacity change from 0 to 2048 [ 477.882755][ T8800] loop3: detected capacity change from 0 to 256 [ 478.717456][ T8796] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 478.869274][ T8814] loop0: detected capacity change from 0 to 1024 [ 479.837957][ T8814] loop0: detected capacity change from 0 to 40427 [ 479.858730][ T5917] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 479.874508][ T5917] EXT4-fs (loop4): Remounting filesystem read-only [ 479.881893][ T8814] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 479.901099][ T8814] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 479.912515][ T8814] F2FS-fs (loop0): Found nat_bits in checkpoint [ 479.963899][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.975914][ T8814] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 479.982888][ T8814] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 479.993622][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.001409][ T8829] device bridge_slave_0 entered promiscuous mode [ 480.008617][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.015494][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.023607][ T8829] device bridge_slave_1 entered promiscuous mode [ 480.890632][ T8849] loop4: detected capacity change from 0 to 256 [ 480.943048][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 480.950595][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.956415][ T8849] exfat: Bad value for 'uid' [ 480.985657][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.995165][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 481.028417][ T450] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.035267][ T450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.133359][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 481.292865][ T8850] 9pnet: Insufficient options for proto=fd [ 481.311643][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 481.319888][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.326742][ T450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.333933][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 481.341932][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 481.349761][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 481.358846][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 481.367623][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 481.376468][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 481.385272][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 481.393993][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.420050][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 481.428510][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.488056][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.526771][ T8829] device veth0_vlan entered promiscuous mode [ 481.563683][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 481.574313][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.596882][ T8829] device veth1_macvtap entered promiscuous mode [ 481.613161][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 481.626728][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 481.651379][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 481.665638][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 481.740991][ T8867] loop1: detected capacity change from 0 to 512 [ 481.979634][ T415] device bridge_slave_1 left promiscuous mode [ 481.994118][ T8867] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 482.017575][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.041882][ T8867] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 482.066116][ T415] device bridge_slave_0 left promiscuous mode [ 482.119064][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.127352][ T415] device dummy0 left promiscuous mode [ 482.132620][ T415] device veth1_macvtap left promiscuous mode [ 482.167576][ T415] device veth0_vlan left promiscuous mode [ 483.494844][ T8889] loop3: detected capacity change from 0 to 256 [ 483.566194][ T8889] exfat: Bad value for 'uid' [ 484.503340][ T8876] loop4: detected capacity change from 0 to 40427 [ 484.898173][ T8876] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 484.932022][ T8876] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 484.958736][ T8876] F2FS-fs (loop4): Found nat_bits in checkpoint [ 485.011453][ T8876] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 485.019429][ T8876] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 485.196426][ T8923] 9pnet: Insufficient options for proto=fd [ 485.283466][ T8925] loop2: detected capacity change from 0 to 256 [ 487.115032][ T8955] loop0: detected capacity change from 0 to 2048 [ 487.273074][ T8955] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 488.136723][ T8975] loop3: detected capacity change from 0 to 512 [ 488.163485][ T7871] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 488.178358][ T7871] EXT4-fs (loop0): Remounting filesystem read-only [ 488.187940][ T8975] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 488.198974][ T8975] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038 (0x7fffffff) [ 488.319335][ T8981] loop0: detected capacity change from 0 to 2048 [ 488.329140][ T8983] loop2: detected capacity change from 0 to 256 [ 488.336832][ T8984] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 488.346248][ T8984] SELinux: security_context_str_to_sid(staff_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 488.347572][ T8981] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 490.413620][ T7871] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 491.165843][ T7871] EXT4-fs (loop0): Remounting filesystem read-only [ 491.230713][ T9014] loop2: detected capacity change from 0 to 2048 [ 491.277176][ T9014] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 493.335019][ T7143] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 493.403241][ T7143] EXT4-fs (loop2): Remounting filesystem read-only [ 493.438890][ T9044] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.445761][ T9044] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.452870][ T9044] device bridge_slave_0 entered promiscuous mode [ 493.459800][ T9044] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.466651][ T9044] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.475715][ T9044] device bridge_slave_1 entered promiscuous mode [ 493.585759][ T450] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 493.841089][ T9044] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.847998][ T9044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.855099][ T9044] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.861889][ T9044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.409156][ T5508] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.416726][ T5508] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.425399][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 494.435404][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 494.446550][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 494.454682][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 494.462877][ T5508] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.469753][ T5508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.476910][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 494.485016][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 494.737900][ T5508] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.741471][ T450] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 494.744777][ T5508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.765952][ T9075] loop1: detected capacity change from 0 to 512 [ 494.779121][ T450] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.787281][ T9075] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 494.791748][ T450] usb 1-1: Product: syz [ 494.809677][ T450] usb 1-1: Manufacturer: syz [ 494.809803][ T9044] device veth0_vlan entered promiscuous mode [ 494.824299][ T450] usb 1-1: SerialNumber: syz [ 494.826968][ T9044] device veth1_macvtap entered promiscuous mode [ 494.832686][ T450] usb 1-1: config 0 descriptor?? [ 494.850012][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 494.860196][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 494.878142][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 494.891473][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 494.899529][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 494.907897][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 494.916270][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 494.924032][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 494.966488][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 494.989988][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 494.998306][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 495.005849][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 495.013926][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 495.022250][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 495.030421][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 495.045241][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 495.053467][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 495.193367][ T9081] device dummy0 entered promiscuous mode [ 496.020661][ T5508] usb 1-1: USB disconnect, device number 17 [ 497.240188][ T415] device bridge_slave_1 left promiscuous mode [ 497.294284][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.331205][ T9123] loop3: detected capacity change from 0 to 2048 [ 497.337790][ T415] device bridge_slave_0 left promiscuous mode [ 497.353886][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.404396][ T415] device dummy0 left promiscuous mode [ 497.409655][ T415] device veth1_macvtap left promiscuous mode [ 497.415542][ T415] device veth0_vlan left promiscuous mode [ 497.694388][ T9123] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 497.822356][ T9124] loop1: detected capacity change from 0 to 40427 [ 497.843467][ T9124] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 497.851097][ T9124] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 497.851178][ T1614] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 497.869570][ T9124] F2FS-fs (loop1): Found nat_bits in checkpoint [ 497.922655][ T9124] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 497.929660][ T9124] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 498.226190][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 498.226213][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 498.234367][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 498.251615][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 498.285761][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 498.295200][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 498.309760][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 498.325611][ T1614] usb 5-1: Using ep0 maxpacket: 8 [ 498.385190][ T3236] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 498.400471][ T3236] EXT4-fs (loop3): Remounting filesystem read-only [ 498.485686][ T1614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.516968][ T1614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.537872][ T1614] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 498.560753][ T1614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.589268][ T1614] usb 5-1: config 0 descriptor?? [ 499.767538][ T9179] loop0: detected capacity change from 0 to 512 [ 500.574136][ T9182] loop1: detected capacity change from 0 to 128 [ 500.575049][ T9184] loop2: detected capacity change from 0 to 128 [ 500.593862][ T9179] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 500.604850][ T9179] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038 (0x7fffffff) [ 501.042200][ T9196] loop3: detected capacity change from 0 to 2048 [ 501.331244][ T9200] loop2: detected capacity change from 0 to 2048 [ 501.347262][ T9196] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 501.477433][ T9200] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 501.555551][ T9206] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 501.673492][ T9206] EXT4-fs (loop3): Remounting filesystem read-only [ 501.707570][ T9209] loop0: detected capacity change from 0 to 256 [ 501.735685][ T1614] usbhid 5-1:0.0: can't add hid device: -71 [ 501.741457][ T1614] usbhid: probe of 5-1:0.0 failed with error -71 [ 501.748584][ T9211] loop4: detected capacity change from 0 to 512 [ 501.778367][ T9213] loop3: detected capacity change from 0 to 512 [ 501.788490][ T1614] usb 5-1: USB disconnect, device number 9 [ 501.858292][ T9213] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 501.879312][ T9213] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038 (0x7fffffff) [ 501.890776][ T9211] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 501.904653][ T9211] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 502.282394][ T7143] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 502.299365][ T7143] EXT4-fs (loop2): Remounting filesystem read-only [ 502.547426][ T30] audit: type=1326 audit(1727813006.173:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.1.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 502.550968][ T9237] loop1: detected capacity change from 0 to 512 [ 502.681818][ T30] audit: type=1326 audit(1727813006.173:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.1.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 502.824283][ T30] audit: type=1326 audit(1727813006.173:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.1.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 502.863850][ T30] audit: type=1326 audit(1727813006.173:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.1.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 502.903519][ T30] audit: type=1326 audit(1727813006.173:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.1.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 502.908372][ T9237] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 502.927045][ T30] audit: type=1326 audit(1727813006.173:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.1.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 502.973133][ T9237] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2210: attempt to clear invalid blocks 1024 len 1 [ 503.019028][ T30] audit: type=1326 audit(1727813006.173:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.1.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 503.044987][ T9237] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2210: invalid indirect mapped block 1819239214 (level 0) [ 503.063146][ T9237] EXT4-fs (loop1): 1 truncate cleaned up [ 503.069682][ T9237] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,bsdgroups,nodelalloc,abort,noblock_validity,,errors=continue. Quota mode: none. [ 503.089584][ T30] audit: type=1326 audit(1727813006.173:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.1.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 503.113504][ T30] audit: type=1326 audit(1727813006.173:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.1.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd492caa033 code=0x7ffc0000 [ 503.138934][ T30] audit: type=1326 audit(1727813006.173:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.1.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd492ca8adf code=0x7ffc0000 [ 503.218039][ T9251] loop4: detected capacity change from 0 to 128 [ 503.305702][ T1985] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 504.655714][ T1985] usb 3-1: Using ep0 maxpacket: 16 [ 504.858914][ T9269] loop1: detected capacity change from 0 to 2048 [ 504.907230][ T9269] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 504.945816][ T1985] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 504.953869][ T1985] usb 3-1: config 0 has no interface number 0 [ 505.782238][ T9282] loop3: detected capacity change from 0 to 512 [ 505.809034][ T9284] loop2: detected capacity change from 0 to 512 [ 505.812164][ T1985] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 505.826003][ T1985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.833901][ T1985] usb 3-1: Product: syz [ 505.875445][ T9282] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 505.887612][ T9284] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 505.889313][ T1985] usb 3-1: Manufacturer: syz [ 505.901745][ T9284] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038 (0x7fffffff) [ 505.903122][ T9282] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038 (0x7fffffff) [ 506.089809][ T1985] usb 3-1: config 0 descriptor?? [ 506.395163][ T1985] usb 3-1: can't set config #0, error -71 [ 506.495705][ T1985] usb 3-1: USB disconnect, device number 6 [ 507.105702][ T311] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 507.123425][ T9317] loop3: detected capacity change from 0 to 512 [ 507.139923][ T9317] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 507.236510][ T8829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 507.265150][ T8829] EXT4-fs (loop1): Remounting filesystem read-only [ 507.355613][ T311] usb 3-1: Using ep0 maxpacket: 8 [ 507.362745][ T9319] loop1: detected capacity change from 0 to 512 [ 507.511303][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.571994][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.607218][ T9319] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 507.625754][ T311] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 507.637757][ T9319] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2229: attempt to clear invalid blocks 1024 len 1 [ 507.647973][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.658830][ T9319] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2229: invalid indirect mapped block 1819239214 (level 0) [ 507.670694][ T311] usb 3-1: config 0 descriptor?? [ 507.693054][ T9319] EXT4-fs (loop1): 1 truncate cleaned up [ 507.704330][ T9319] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,bsdgroups,nodelalloc,abort,noblock_validity,,errors=continue. Quota mode: none. [ 507.736370][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 507.736386][ T30] audit: type=1326 audit(1727813011.353:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd492ca8990 code=0x7ffc0000 [ 507.772463][ T30] audit: type=1326 audit(1727813011.363:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd492ca8d77 code=0x7ffc0000 [ 507.796231][ T30] audit: type=1326 audit(1727813011.363:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd492ca8990 code=0x7ffc0000 [ 507.820544][ T30] audit: type=1326 audit(1727813011.363:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd492ca9bfb code=0x7ffc0000 [ 507.843796][ T30] audit: type=1326 audit(1727813011.363:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd492ca8c8a code=0x7ffc0000 [ 507.941614][ T30] audit: type=1326 audit(1727813011.363:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 508.124191][ T30] audit: type=1326 audit(1727813011.393:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 508.147747][ T30] audit: type=1326 audit(1727813011.393:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 508.171173][ T30] audit: type=1326 audit(1727813011.393:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 508.194594][ T30] audit: type=1326 audit(1727813011.393:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 508.910213][ T9341] loop0: detected capacity change from 0 to 256 [ 509.738343][ T9343] loop1: detected capacity change from 0 to 40427 [ 509.757140][ T9348] 9pnet: Insufficient options for proto=fd [ 509.815528][ T9351] loop4: detected capacity change from 0 to 512 [ 509.822254][ T9343] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 509.832602][ T9343] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 509.852920][ T9343] F2FS-fs (loop1): Found nat_bits in checkpoint [ 509.860760][ T9351] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 509.872009][ T9351] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 509.890612][ T9343] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 509.901921][ T9343] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 510.008657][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 510.008680][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 510.017299][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 510.026316][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 510.033678][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 510.041525][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 510.049335][ T8829] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 510.383810][ T311] usbhid 3-1:0.0: can't add hid device: -71 [ 510.397658][ T311] usbhid: probe of 3-1:0.0 failed with error -71 [ 510.531079][ T311] usb 3-1: USB disconnect, device number 7 [ 511.374507][ T9381] loop1: detected capacity change from 0 to 2048 [ 512.538892][ T9381] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 513.394457][ T9391] loop0: detected capacity change from 0 to 8192 [ 513.711480][ T9392] loop2: detected capacity change from 0 to 40427 [ 513.846890][ T9392] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 513.905697][ T9392] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 513.965409][ T9392] F2FS-fs (loop2): Found nat_bits in checkpoint [ 513.967522][ T9422] loop0: detected capacity change from 0 to 512 [ 514.036076][ T9392] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 514.043307][ T9392] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 514.225059][ T9422] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 514.258200][ T9422] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038 (0x7fffffff) [ 514.768558][ T8829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 514.787907][ T8829] EXT4-fs (loop1): Remounting filesystem read-only [ 514.808376][ T9430] loop3: detected capacity change from 0 to 512 [ 514.989778][ T9430] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 515.007134][ T9430] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038 (0x7fffffff) [ 515.613318][ T9446] loop2: detected capacity change from 0 to 512 [ 515.633257][ T9446] EXT4-fs (loop2): error: could not find journal device path: error -2 [ 516.459200][ T9456] loop4: detected capacity change from 0 to 2048 [ 516.556554][ T9456] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 516.634463][ T9470] device dummy0 entered promiscuous mode [ 516.821685][ T9469] loop3: detected capacity change from 0 to 8192 [ 517.797479][ T9465] loop0: detected capacity change from 0 to 40427 [ 517.843630][ T9480] loop1: detected capacity change from 0 to 40427 [ 518.336057][ T9480] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 518.354355][ T9465] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 518.394401][ T9465] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 518.402528][ T9480] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 518.447963][ T9465] F2FS-fs (loop0): Found nat_bits in checkpoint [ 518.454507][ T9480] F2FS-fs (loop1): Found nat_bits in checkpoint [ 518.505397][ T9044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 518.520311][ T9044] EXT4-fs (loop4): Remounting filesystem read-only [ 518.520703][ T9465] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 518.527140][ T9480] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 518.533563][ T9465] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 518.540608][ T9480] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 519.549524][ T9515] loop2: detected capacity change from 0 to 512 [ 519.727126][ T9515] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 519.747012][ T9515] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038 (0x7fffffff) [ 520.262702][ T9532] loop2: detected capacity change from 0 to 128 [ 520.511581][ T9532] attempt to access beyond end of device [ 520.511581][ T9532] loop2: rw=0, want=240, limit=128 [ 520.599205][ T328] attempt to access beyond end of device [ 520.599205][ T328] loop2: rw=1, want=1041, limit=128 [ 520.652127][ T9539] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 521.007641][ T310] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 521.275840][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 521.955703][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.966818][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.976502][ T310] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 521.986254][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.717601][ T310] usb 2-1: config 0 descriptor?? [ 522.790142][ T9567] loop2: detected capacity change from 0 to 512 [ 523.068451][ T9567] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 523.095322][ T9561] loop0: detected capacity change from 0 to 40427 [ 523.101814][ T9567] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038 (0x7fffffff) [ 523.216070][ T9561] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 523.442717][ T9561] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 523.460045][ T9561] F2FS-fs (loop0): Found nat_bits in checkpoint [ 523.483682][ T9561] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 523.490633][ T9561] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 524.118698][ T9587] loop4: detected capacity change from 0 to 512 [ 524.316988][ T9597] loop2: detected capacity change from 0 to 128 [ 524.325432][ T9587] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 524.849981][ T9587] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 525.124194][ T9609] 9pnet: Insufficient options for proto=fd [ 526.078219][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 526.083979][ T310] usbhid: probe of 2-1:0.0 failed with error -71 [ 526.152991][ T310] usb 2-1: USB disconnect, device number 12 [ 527.178616][ T9640] loop3: detected capacity change from 0 to 256 [ 527.197018][ T9642] loop4: detected capacity change from 0 to 128 [ 527.256058][ T9640] exfat: Bad value for 'uid' [ 527.546394][ T9638] loop1: detected capacity change from 0 to 40427 [ 527.766164][ T9638] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 527.922553][ T9638] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 527.965257][ T9638] F2FS-fs (loop1): Found nat_bits in checkpoint [ 527.981608][ T9650] loop0: detected capacity change from 0 to 40427 [ 527.984512][ T9647] loop2: detected capacity change from 0 to 40427 [ 528.036016][ T9650] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 528.052974][ T9638] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 528.059924][ T9647] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 528.061797][ T9638] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 528.069020][ T9647] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 528.075056][ T9650] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 528.166277][ T9650] F2FS-fs (loop0): Found nat_bits in checkpoint [ 528.173002][ T9647] F2FS-fs (loop2): Found nat_bits in checkpoint [ 528.220369][ T9650] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 528.376582][ T9650] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 528.536597][ T9647] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 528.544112][ T9647] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 528.637009][ T9685] loop3: detected capacity change from 0 to 512 [ 528.648044][ T9685] EXT4-fs (loop3): Test dummy encryption mode enabled [ 528.658279][ T9685] EXT4-fs error (device loop3): __ext4_iget:4892: inode #11: block 1: comm syz.3.2319: invalid block [ 528.659268][ T7143] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 528.669880][ T7143] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 528.873337][ T7143] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 528.905667][ T7143] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 528.913039][ T7143] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 528.923951][ T7143] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 528.931710][ T9685] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2319: couldn't read orphan inode 11 (err -117) [ 528.951954][ T7143] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 528.957120][ T9690] loop1: detected capacity change from 0 to 128 [ 528.969163][ T9685] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 529.110905][ T9690] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2317'. [ 529.228282][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'. [ 529.459655][ T9699] loop2: detected capacity change from 0 to 256 [ 529.495946][ T9699] exfat: Bad value for 'uid' [ 529.512805][ T9703] loop4: detected capacity change from 0 to 128 [ 530.031943][ T9715] loop1: detected capacity change from 0 to 2048 [ 530.063771][ T9715] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 530.203063][ T9723] loop0: detected capacity change from 0 to 256 [ 530.234189][ T9716] loop4: detected capacity change from 0 to 40427 [ 530.286282][ T9716] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 530.293998][ T9716] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 530.307362][ T9716] F2FS-fs (loop4): Found nat_bits in checkpoint [ 530.331481][ T9716] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 530.338403][ T9716] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 531.013155][ T8829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 531.028991][ T8829] EXT4-fs (loop1): Remounting filesystem read-only [ 531.700799][ T9740] loop1: detected capacity change from 0 to 8192 [ 531.798503][ T9753] loop3: detected capacity change from 0 to 128 [ 532.158710][ T9753] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2336'. [ 532.357069][ T9762] loop2: detected capacity change from 0 to 256 [ 532.436223][ T9762] exfat: Bad value for 'uid' [ 532.642032][ T9773] 9pnet: Insufficient options for proto=fd [ 532.665362][ T9770] loop4: detected capacity change from 0 to 2048 [ 532.918060][ T9770] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 533.464601][ T9044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 533.480034][ T9044] EXT4-fs (loop4): Remounting filesystem read-only [ 534.244036][ T9806] 9pnet: Insufficient options for proto=fd [ 535.006264][ T9823] loop4: detected capacity change from 0 to 40427 [ 535.076163][ T9823] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 535.083764][ T9823] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 535.093968][ T9823] F2FS-fs (loop4): Found nat_bits in checkpoint [ 535.116573][ T9823] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 535.123432][ T9823] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 535.347645][ T9832] loop3: detected capacity change from 0 to 2048 [ 535.427772][ T9834] loop0: detected capacity change from 0 to 8192 [ 535.437899][ T9832] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 535.837003][ T9844] loop4: detected capacity change from 0 to 2048 [ 535.916803][ T9844] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 535.951863][ T9849] 9pnet: Insufficient options for proto=fd [ 536.699415][ T9044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 536.767787][ T9044] EXT4-fs (loop4): Remounting filesystem read-only [ 536.780039][ T9868] loop1: detected capacity change from 0 to 512 [ 536.792842][ T9870] loop0: detected capacity change from 0 to 2048 [ 536.879821][ T9874] 9pnet: Insufficient options for proto=fd [ 537.446197][ T9868] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 537.461332][ T9868] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038 (0x7fffffff) [ 537.472421][ T9870] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 537.474465][ T9882] loop2: detected capacity change from 0 to 256 [ 537.638810][ T9888] loop3: detected capacity change from 0 to 2048 [ 538.032283][ T7871] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 538.078218][ T7871] EXT4-fs (loop0): Remounting filesystem read-only [ 538.134259][ T9888] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 538.295415][ T9903] loop0: detected capacity change from 0 to 2048 [ 538.467015][ T9903] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 538.547472][ T9916] 9pnet: Insufficient options for proto=fd [ 539.034632][ T7871] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 539.206242][ T7871] EXT4-fs (loop0): Remounting filesystem read-only [ 539.414552][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 539.414568][ T30] audit: type=1326 audit(1727813043.033:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9927 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 539.444506][ T30] audit: type=1326 audit(1727813043.043:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9927 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 539.517596][ T9928] loop1: detected capacity change from 0 to 512 [ 539.527071][ T9932] 9pnet: Insufficient options for proto=fd [ 539.536154][ T30] audit: type=1326 audit(1727813043.043:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9927 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 539.886936][ T30] audit: type=1326 audit(1727813043.043:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9927 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 539.907044][ T9936] loop4: detected capacity change from 0 to 2048 [ 539.916514][ T30] audit: type=1326 audit(1727813043.043:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9927 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 539.919270][ T9928] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, [ 539.939778][ T30] audit: type=1326 audit(1727813043.043:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9927 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 539.939785][ T9928] block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 539.940745][ T9928] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2381: attempt to clear invalid blocks 1024 len 1 [ 539.947993][ T30] audit: type=1326 audit(1727813043.043:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9927 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 539.972485][ T9928] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2381: invalid indirect mapped block 1819239214 (level 0) [ 539.979487][ T30] audit: type=1326 audit(1727813043.043:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9927 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 539.992817][ T9928] EXT4-fs (loop1): 1 truncate cleaned up [ 540.029239][ T30] audit: type=1326 audit(1727813043.043:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9927 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 540.052241][ T9928] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,bsdgroups,nodelalloc,abort,noblock_validity,,errors=continue. Quota mode: none. [ 540.063412][ T30] audit: type=1326 audit(1727813043.043:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9927 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd492caa033 code=0x7ffc0000 [ 540.119244][ T9936] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 540.322172][ T9947] loop3: detected capacity change from 0 to 256 [ 540.922741][ T9044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 540.937831][ T9044] EXT4-fs (loop4): Remounting filesystem read-only [ 540.973070][ T9951] loop1: detected capacity change from 0 to 512 [ 541.717645][ T9951] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 541.813173][ T9951] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038 (0x7fffffff) [ 541.926127][ T9970] loop2: detected capacity change from 0 to 2048 [ 541.998290][ T9970] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 543.324644][ T9981] 9pnet: Insufficient options for proto=fd [ 543.562969][ T9992] 9pnet: Insufficient options for proto=fd [ 544.367319][T10000] loop2: detected capacity change from 0 to 256 [ 544.381055][T10002] loop0: detected capacity change from 0 to 2048 [ 544.406380][ T9996] loop1: detected capacity change from 0 to 8192 [ 545.146309][T10019] loop3: detected capacity change from 0 to 2048 [ 545.149905][T10002] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 545.175195][T10019] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 545.428419][T10029] loop4: detected capacity change from 0 to 512 [ 545.527052][T10029] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 545.538058][T10029] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038 (0x7fffffff) [ 545.588815][ T7871] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 545.615852][ T7871] EXT4-fs (loop0): Remounting filesystem read-only [ 545.633450][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 545.633465][ T30] audit: type=1326 audit(1727813049.253:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 546.204518][T10040] 9pnet: Insufficient options for proto=fd [ 546.453658][ T30] audit: type=1326 audit(1727813049.253:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 546.498219][ T30] audit: type=1326 audit(1727813049.263:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd492ca9ff9 code=0x7ffc0000 [ 547.538983][T10061] loop0: detected capacity change from 0 to 256 [ 547.895754][ T1612] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 548.205086][T10076] loop2: detected capacity change from 0 to 128 [ 548.364559][T10078] loop3: detected capacity change from 0 to 2048 [ 548.394816][T10074] loop1: detected capacity change from 0 to 40427 [ 548.417097][T10078] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 548.436320][T10074] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 548.444156][T10074] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 548.449071][ T1612] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 548.481209][T10074] F2FS-fs (loop1): Found nat_bits in checkpoint [ 548.513783][ T1612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.384993][T10074] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 549.399848][T10074] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 549.422582][ T1612] usb 1-1: Product: syz [ 549.429436][ T1612] usb 1-1: Manufacturer: syz [ 549.433873][ T1612] usb 1-1: SerialNumber: syz [ 549.440134][ T1612] usb 1-1: config 0 descriptor?? [ 549.451347][T10093] loop4: detected capacity change from 0 to 2048 [ 549.533514][ T3236] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 549.548634][ T3236] EXT4-fs (loop3): Remounting filesystem read-only [ 549.557730][T10093] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 550.294515][T10095] loop2: detected capacity change from 0 to 8192 [ 550.334515][T10066] device bridge0 entered promiscuous mode [ 550.343747][ T836] usb 1-1: USB disconnect, device number 18 [ 550.632848][T10109] loop4: detected capacity change from 0 to 256 [ 550.799764][T10114] loop2: detected capacity change from 0 to 256 [ 550.818937][T10116] 9pnet: Insufficient options for proto=fd [ 551.315586][ T1614] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 551.515021][T10126] loop4: detected capacity change from 0 to 512 [ 551.552896][T10126] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 551.562129][T10126] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 551.575017][T10126] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8042c01c, mo2=0002] [ 551.582966][ T1614] usb 1-1: Using ep0 maxpacket: 8 [ 551.587939][T10126] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 551.602577][T10126] EXT4-fs (loop4): 1 truncate cleaned up [ 551.608098][T10126] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 551.725721][ T1614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.737292][ T1614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.747254][ T1614] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 551.756326][ T1614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.765122][ T1614] usb 1-1: config 0 descriptor?? [ 551.932864][T10135] loop2: detected capacity change from 0 to 8192 [ 552.405761][ T1614] usbhid 1-1:0.0: can't add hid device: -71 [ 552.411633][ T1614] usbhid: probe of 1-1:0.0 failed with error -71 [ 552.432470][ T1614] usb 1-1: USB disconnect, device number 19 [ 553.268940][T10144] loop1: detected capacity change from 0 to 40427 [ 553.281439][T10144] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 553.289454][T10144] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 553.299993][T10144] F2FS-fs (loop1): Found nat_bits in checkpoint [ 554.129978][T10167] loop2: detected capacity change from 0 to 256 [ 554.186509][T10167] exfat: Bad value for 'uid' [ 554.191468][T10144] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 554.198759][T10144] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 554.212058][T10172] loop0: detected capacity change from 0 to 256 [ 557.643144][T10223] loop3: detected capacity change from 0 to 256 [ 557.657144][T10225] loop1: detected capacity change from 0 to 2048 [ 558.367897][T10225] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 558.758600][ T8829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 558.803954][ T8829] EXT4-fs (loop1): Remounting filesystem read-only [ 559.718096][T10236] loop4: detected capacity change from 0 to 40427 [ 559.826726][T10236] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 559.834386][T10236] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 559.845278][T10236] F2FS-fs (loop4): Found nat_bits in checkpoint [ 559.888058][T10236] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 559.902448][T10236] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 560.863641][ T311] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 561.561443][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 561.605694][ T20] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 561.835765][ T311] usb 4-1: unable to read config index 0 descriptor/all [ 561.922143][ T311] usb 4-1: can't read configurations, error -71 [ 562.386007][T10294] loop4: detected capacity change from 0 to 2048 [ 562.444395][T10294] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 562.456119][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 562.585664][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.981479][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.002552][ T20] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 563.015307][T10303] fuse: Bad value for 'user_id' [ 563.032384][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.054515][T10305] loop1: detected capacity change from 0 to 128 [ 563.067652][ T20] usb 3-1: config 0 descriptor?? [ 563.290397][ T9044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 563.476811][ T9044] EXT4-fs (loop4): Remounting filesystem read-only [ 564.895633][ T20] usbhid 3-1:0.0: can't add hid device: -71 [ 564.901623][ T20] usbhid: probe of 3-1:0.0 failed with error -71 [ 564.911026][ T20] usb 3-1: USB disconnect, device number 8 [ 565.114503][T10337] fuse: Bad value for 'user_id' [ 565.125155][T10330] loop2: detected capacity change from 0 to 8192 [ 566.132040][T10354] loop0: detected capacity change from 0 to 2048 [ 566.207859][T10354] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 566.449959][T10339] loop4: detected capacity change from 0 to 40427 [ 566.952013][T10339] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 567.020068][T10339] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 567.066451][ T7871] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 567.095820][ T7871] EXT4-fs (loop0): Remounting filesystem read-only [ 567.123259][T10339] F2FS-fs (loop4): Found nat_bits in checkpoint [ 567.176232][T10339] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 567.183191][T10339] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 568.534887][ T30] audit: type=1326 audit(1727813072.153:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10385 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 569.568938][ T30] audit: type=1326 audit(1727813073.193:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10385 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 569.613321][T10388] loop0: detected capacity change from 0 to 512 [ 569.623217][ T30] audit: type=1326 audit(1727813073.213:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10385 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 569.647071][ T30] audit: type=1326 audit(1727813073.213:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10385 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 570.264301][ T30] audit: type=1326 audit(1727813073.213:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10385 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 570.289535][ T30] audit: type=1326 audit(1727813073.213:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10385 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 570.313155][ T30] audit: type=1326 audit(1727813073.213:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10385 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 570.342367][T10388] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 570.357111][T10388] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2489: attempt to clear invalid blocks 1024 len 1 [ 570.357261][ T30] audit: type=1326 audit(1727813073.213:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10385 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 570.370981][T10388] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2489: invalid indirect mapped block 1819239214 (level 0) [ 570.409619][T10388] EXT4-fs (loop0): 1 truncate cleaned up [ 570.415114][T10388] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,bsdgroups,nodelalloc,abort,noblock_validity,,errors=continue. Quota mode: none. [ 570.430901][ T30] audit: type=1326 audit(1727813073.223:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10385 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 570.456566][ T30] audit: type=1326 audit(1727813073.223:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10385 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f92ee19a033 code=0x7ffc0000 [ 570.579931][T10411] fuse: Bad value for 'user_id' [ 570.616562][T10416] loop4: detected capacity change from 0 to 2048 [ 571.392122][T10416] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 571.436689][T10424] loop2: detected capacity change from 0 to 128 [ 572.043995][ T9044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 572.496427][ T9044] EXT4-fs (loop4): Remounting filesystem read-only [ 572.602948][T10451] loop0: detected capacity change from 0 to 8192 [ 573.808409][T10462] loop2: detected capacity change from 0 to 512 [ 573.815747][T10464] loop4: detected capacity change from 0 to 256 [ 573.816138][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 573.816150][ T30] audit: type=1326 audit(1727813077.423:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae827d3ff9 code=0x7ffc0000 [ 573.855375][ T30] audit: type=1326 audit(1727813077.423:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae827d3ff9 code=0x7ffc0000 [ 573.857704][T10461] fuse: Bad value for 'fd' [ 573.878837][ T30] audit: type=1326 audit(1727813077.423:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fae827d3ff9 code=0x7ffc0000 [ 573.906230][ T30] audit: type=1326 audit(1727813077.423:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae827d3ff9 code=0x7ffc0000 [ 573.982698][ T30] audit: type=1326 audit(1727813077.423:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae827d3ff9 code=0x7ffc0000 [ 574.011626][ T30] audit: type=1326 audit(1727813077.423:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae827d3ff9 code=0x7ffc0000 [ 574.032680][T10462] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 574.035437][ T30] audit: type=1326 audit(1727813077.423:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae827d3ff9 code=0x7ffc0000 [ 574.454149][ T30] audit: type=1326 audit(1727813077.423:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae827d3ff9 code=0x7ffc0000 [ 574.486794][T10462] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.2511: attempt to clear invalid blocks 1024 len 1 [ 574.506218][ T30] audit: type=1326 audit(1727813077.423:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae827d3ff9 code=0x7ffc0000 [ 574.515916][T10462] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2511: invalid indirect mapped block 1819239214 (level 0) [ 574.545400][ T30] audit: type=1326 audit(1727813077.423:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae827d3ff9 code=0x7ffc0000 [ 574.570864][T10462] EXT4-fs (loop2): 1 truncate cleaned up [ 574.661319][T10462] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,bsdgroups,nodelalloc,abort,noblock_validity,,errors=continue. Quota mode: none. [ 575.486718][T10484] loop0: detected capacity change from 0 to 128 [ 575.507843][T10481] loop4: detected capacity change from 0 to 2048 [ 575.565648][ T1985] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 575.587340][T10481] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 576.135815][ T1985] usb 4-1: Using ep0 maxpacket: 16 [ 576.293428][ T1985] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 576.301599][ T1985] usb 4-1: config 0 has no interface number 0 [ 576.339285][ T9044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 576.354305][ T9044] EXT4-fs (loop4): Remounting filesystem read-only [ 576.526962][ T1985] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 576.635037][ T1985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.643312][ T1985] usb 4-1: Product: syz [ 576.647528][ T1985] usb 4-1: Manufacturer: syz [ 576.652083][ T1985] usb 4-1: SerialNumber: syz [ 576.660435][ T1985] usb 4-1: config 0 descriptor?? [ 576.697807][ T1985] usb 4-1: Found UVC 0.00 device syz (046d:08d3) [ 576.705709][ T1985] usb 4-1: No valid video chain found. [ 576.792615][T10511] loop4: detected capacity change from 0 to 2048 [ 576.802184][T10503] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.809333][T10503] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.819145][T10503] device bridge_slave_0 entered promiscuous mode [ 576.833087][T10503] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.840086][T10503] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.848608][T10503] device bridge_slave_1 entered promiscuous mode [ 576.937831][ T1985] usb 4-1: USB disconnect, device number 17 [ 576.971777][T10511] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 577.348359][T10516] loop3: detected capacity change from 0 to 256 [ 578.347256][ T9044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 578.366189][ T9044] EXT4-fs (loop4): Remounting filesystem read-only [ 578.399656][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 578.407265][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 578.431999][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 578.441016][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 578.741016][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.747898][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.761903][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 578.770182][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 578.778526][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.785377][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.797812][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 578.810907][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 578.836149][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 578.844225][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 578.859323][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 578.910349][T10503] device veth0_vlan entered promiscuous mode [ 578.917158][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 578.925405][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 578.934065][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 578.942764][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 578.978757][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 578.987235][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 579.028965][T10503] device veth1_macvtap entered promiscuous mode [ 579.041674][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 579.071937][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 579.082326][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 579.113097][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 579.122065][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 579.245460][T10546] loop1: detected capacity change from 0 to 2048 [ 579.252465][ T328] device bridge_slave_1 left promiscuous mode [ 579.258469][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.265861][ T328] device bridge_slave_0 left promiscuous mode [ 579.271804][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.280125][ T328] device dummy0 left promiscuous mode [ 579.285411][ T328] device veth1_macvtap left promiscuous mode [ 579.291606][ T328] device veth0_vlan left promiscuous mode [ 579.302464][T10546] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 579.341064][T10552] 9pnet: Insufficient options for proto=fd [ 579.428027][T10555] loop0: detected capacity change from 0 to 256 [ 580.391872][T10573] loop3: detected capacity change from 0 to 2048 [ 580.401276][ T8829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 580.417106][ T8829] EXT4-fs (loop1): Remounting filesystem read-only [ 580.429952][T10573] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 581.287605][ T3236] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 581.304865][T10580] loop1: detected capacity change from 0 to 256 [ 581.377324][ T3236] EXT4-fs (loop3): Remounting filesystem read-only [ 583.824273][T10612] loop3: detected capacity change from 0 to 256 [ 583.904490][ T836] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 585.308692][T10628] loop3: detected capacity change from 0 to 2048 [ 585.335605][ T6] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 585.411425][T10628] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 585.421395][T10638] 9pnet: Insufficient options for proto=fd [ 585.550048][T10641] loop0: detected capacity change from 0 to 1024 [ 585.563835][T10641] EXT4-fs (loop0): Ignoring removed bh option [ 585.570379][T10641] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 585.804159][T10641] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 585.843299][ T3236] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 585.859120][ T3236] EXT4-fs (loop3): Remounting filesystem read-only [ 585.865596][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 585.881675][T10647] loop2: detected capacity change from 0 to 8192 [ 585.995637][ T6] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 586.007700][ T6] usb 5-1: config 0 has no interface number 0 [ 586.571880][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 586.580796][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.588603][ T6] usb 5-1: Product: syz [ 586.592586][ T6] usb 5-1: Manufacturer: syz [ 586.597026][ T6] usb 5-1: SerialNumber: syz [ 586.605473][ T6] usb 5-1: config 0 descriptor?? [ 586.666067][ T6] usb 5-1: Found UVC 0.00 device syz (046d:08d3) [ 586.672271][ T6] usb 5-1: No valid video chain found. [ 586.990395][T10669] loop3: detected capacity change from 0 to 256 [ 587.086070][ T6] usb 5-1: USB disconnect, device number 10 [ 587.100362][T10676] loop4: detected capacity change from 0 to 128 [ 587.165293][T10678] fuse: Bad value for 'fd' [ 587.809294][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 587.809309][ T30] audit: type=1326 audit(1727813091.433:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 587.919192][ T30] audit: type=1326 audit(1727813091.433:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 588.042968][T10697] 9pnet: Insufficient options for proto=fd [ 588.051695][T10694] loop0: detected capacity change from 0 to 512 [ 588.093265][ T30] audit: type=1326 audit(1727813091.473:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 588.131929][ T30] audit: type=1326 audit(1727813091.473:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 588.173384][ T30] audit: type=1326 audit(1727813091.473:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 588.211989][T10694] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 588.265746][ T30] audit: type=1326 audit(1727813091.603:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 588.354100][T10694] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2569: attempt to clear invalid blocks 1024 len 1 [ 588.391502][ T30] audit: type=1326 audit(1727813091.603:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 588.406532][T10694] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2569: invalid indirect mapped block 1819239214 (level 0) [ 588.429051][T10694] EXT4-fs (loop0): 1 truncate cleaned up [ 588.434533][T10694] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,bsdgroups,nodelalloc,abort,noblock_validity,,errors=continue. Quota mode: none. [ 588.450520][ T30] audit: type=1326 audit(1727813091.603:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 588.476695][ T30] audit: type=1326 audit(1727813091.623:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 588.503201][ T30] audit: type=1326 audit(1727813091.623:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 588.629523][ T1612] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 588.988255][ T1612] usb 2-1: Using ep0 maxpacket: 16 [ 589.042634][T10718] fuse: Bad value for 'fd' [ 589.135272][ T1612] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 589.143597][ T1612] usb 2-1: config 0 has no interface number 0 [ 589.164836][T10713] loop3: detected capacity change from 0 to 40427 [ 589.236107][T10713] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 589.246746][T10713] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 589.283431][T10713] F2FS-fs (loop3): Found nat_bits in checkpoint [ 589.305615][ T1612] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 589.321337][ T1612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.349064][ T1612] usb 2-1: Product: syz [ 589.354422][T10713] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 589.361375][ T1612] usb 2-1: Manufacturer: syz [ 589.361568][T10713] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 589.375134][ T1612] usb 2-1: SerialNumber: syz [ 589.389653][ T1612] usb 2-1: config 0 descriptor?? [ 589.446156][ T1612] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 589.456981][ T1612] usb 2-1: No valid video chain found. [ 589.536401][T10730] loop4: detected capacity change from 0 to 2048 [ 589.617258][T10730] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 590.327657][ T328] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 590.342571][ T328] EXT4-fs (loop4): Remounting filesystem read-only [ 590.612340][T10746] loop4: detected capacity change from 0 to 512 [ 590.634118][T10746] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 590.649232][T10746] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2581: attempt to clear invalid blocks 1024 len 1 [ 590.662613][T10746] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2581: invalid indirect mapped block 1819239214 (level 0) [ 590.677962][T10746] EXT4-fs (loop4): 1 truncate cleaned up [ 590.683505][T10746] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,bsdgroups,nodelalloc,abort,noblock_validity,,errors=continue. Quota mode: none. [ 591.113165][ T1985] usb 2-1: USB disconnect, device number 13 [ 591.147873][T10761] fuse: Invalid rootmode [ 591.176015][T10762] loop1: detected capacity change from 0 to 2048 [ 591.227526][T10770] loop2: detected capacity change from 0 to 512 [ 591.248173][T10773] loop3: detected capacity change from 0 to 2048 [ 591.256373][T10770] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 591.270951][T10770] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.2590: attempt to clear invalid blocks 1024 len 1 [ 591.285741][T10770] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2590: invalid indirect mapped block 1819239214 (level 0) [ 591.286397][T10762] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 591.316064][T10770] EXT4-fs (loop2): 1 truncate cleaned up [ 591.321520][T10770] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,bsdgroups,nodelalloc,abort,noblock_validity,,errors=continue. Quota mode: none. [ 591.352789][T10773] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 591.355795][T10779] 9pnet: Insufficient options for proto=fd [ 592.119220][T10791] loop4: detected capacity change from 0 to 2048 [ 592.129990][T10473] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 592.167683][T10473] EXT4-fs (loop3): Remounting filesystem read-only [ 592.404571][T10791] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 594.205834][ T9044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 594.237824][ T9044] EXT4-fs (loop4): Remounting filesystem read-only [ 594.246203][T10811] fuse: Invalid rootmode [ 594.252686][ T30] kauditd_printk_skb: 255 callbacks suppressed [ 594.252699][ T30] audit: type=1326 audit(1727813097.873:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 594.291413][ T8829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 594.316535][ T30] audit: type=1326 audit(1727813097.873:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 594.345731][ T30] audit: type=1326 audit(1727813097.873:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 594.369697][ T8829] EXT4-fs (loop1): Remounting filesystem read-only [ 594.378295][ T30] audit: type=1326 audit(1727813097.883:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92ee1cc0e5 code=0x7ffc0000 [ 594.421361][ T30] audit: type=1326 audit(1727813098.043:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f92ee199ff9 code=0x7ffc0000 [ 595.937423][T10843] 9pnet: Insufficient options for proto=fd [ 596.494098][T10851] loop1: detected capacity change from 0 to 2048 [ 596.792166][T10851] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 596.907732][T10861] loop0: detected capacity change from 0 to 256 [ 597.170762][T10864] loop3: detected capacity change from 0 to 128 [ 597.437195][ T8829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 597.455052][ T8829] EXT4-fs (loop1): Remounting filesystem read-only [ 598.202645][T10880] fuse: Invalid rootmode [ 600.220493][T10898] loop0: detected capacity change from 0 to 2048 [ 600.793902][T10898] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 601.054886][T10915] 9pnet: Insufficient options for proto=fd [ 601.075447][T10917] loop2: detected capacity change from 0 to 256 [ 601.380071][T10924] fuse: Bad value for 'rootmode' [ 601.392416][T10921] loop3: detected capacity change from 0 to 512 [ 601.509395][T10921] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 601.526355][T10921] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 601.544778][T10921] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8042c01c, mo2=0002] [ 601.805679][T10921] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 601.837809][ T7871] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 601.841248][T10921] EXT4-fs (loop3): 1 truncate cleaned up [ 601.852872][ T7871] EXT4-fs (loop0): Remounting filesystem read-only [ 601.865803][T10921] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 601.953500][T10503] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 602.895682][T10503] FAT-fs (loop2): Filesystem has been set read-only [ 603.092862][T10503] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 603.797049][T10947] loop0: detected capacity change from 0 to 8192 [ 603.836811][T10956] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.843685][T10956] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.851143][T10956] device bridge_slave_0 entered promiscuous mode [ 603.858284][T10956] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.865145][T10956] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.874762][T10956] device bridge_slave_1 entered promiscuous mode [ 603.994535][T10963] loop1: detected capacity change from 0 to 128 [ 604.052791][T10956] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.059673][T10956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.066765][T10956] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.073525][T10956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.105481][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 604.113214][ T1612] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.136617][ T1612] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.357732][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 604.370068][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 604.393503][ T1985] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.400380][ T1985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.407723][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 604.422239][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 604.438457][ T1985] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.445314][ T1985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.453629][T10972] loop3: detected capacity change from 0 to 2048 [ 604.469530][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 604.477551][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 604.485318][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 604.493235][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 604.509133][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 604.518268][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 604.526877][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 604.534575][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 604.553751][T10956] device veth0_vlan entered promiscuous mode [ 604.562362][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 604.572056][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 604.584710][T10972] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 604.602766][T10978] 9pnet: Insufficient options for proto=fd [ 604.621601][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 604.648721][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 604.673866][T10956] device veth1_macvtap entered promiscuous mode [ 604.689849][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 604.701419][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 604.723760][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 604.756538][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 604.845125][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 604.870969][T10983] loop4: detected capacity change from 0 to 512 [ 604.889757][ T328] device bridge_slave_1 left promiscuous mode [ 604.912717][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.984423][ T328] device bridge_slave_0 left promiscuous mode [ 605.117052][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.135630][ T328] device veth1_macvtap left promiscuous mode [ 605.139060][T10983] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 605.141457][ T328] device veth0_vlan left promiscuous mode [ 605.165660][T10983] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038 (0x7fffffff) [ 605.182225][ T3236] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 605.213495][ T3236] EXT4-fs (loop3): Remounting filesystem read-only [ 605.329109][T10992] loop0: detected capacity change from 0 to 512 [ 606.506485][T10992] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 606.521549][T10992] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 606.531036][T10992] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8042c01c, mo2=0002] [ 606.539745][T10992] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 606.671585][T10992] EXT4-fs (loop0): 1 truncate cleaned up [ 606.679460][T10992] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 607.719365][T11023] loop4: detected capacity change from 0 to 256 [ 607.874944][T11033] loop0: detected capacity change from 0 to 2048 [ 608.408161][T11033] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 608.498086][ T7871] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 608.517059][ T7871] EXT4-fs (loop0): Remounting filesystem read-only [ 610.225856][T11057] loop2: detected capacity change from 0 to 512 [ 610.248045][T11058] loop0: detected capacity change from 0 to 2048 [ 610.273970][T11058] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 610.305908][T11057] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 610.319857][T11057] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 610.395021][T11074] loop4: detected capacity change from 0 to 2048 [ 611.299100][T11074] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 612.560822][ T9044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 612.595751][ T9044] EXT4-fs (loop4): Remounting filesystem read-only [ 612.762843][ T7871] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 612.801701][ T7871] EXT4-fs (loop0): Remounting filesystem read-only [ 614.538452][T11139] loop0: detected capacity change from 0 to 8192 [ 615.064991][T11143] loop3: detected capacity change from 0 to 2048 [ 615.099101][T11149] loop4: detected capacity change from 0 to 512 [ 615.156092][T11143] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 615.385549][T11149] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 615.407172][T11149] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038 (0x7fffffff) [ 615.589837][ T3236] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 615.605358][ T3236] EXT4-fs (loop3): Remounting filesystem read-only [ 615.719657][T11163] loop0: detected capacity change from 0 to 2048 [ 615.836436][T11163] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 616.546092][ T7871] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 616.575809][ T7871] EXT4-fs (loop0): Remounting filesystem read-only [ 618.336957][ T30] audit: type=1400 audit(1727813121.963:3211): avc: denied { create } for pid=11219 comm="syz.2.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 618.366814][ T30] audit: type=1400 audit(1727813121.963:3212): avc: denied { write } for pid=11219 comm="syz.2.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 618.389374][T11228] binder: 11226:11228 ioctl 4018620d 0 returned -22 [ 618.396152][ T30] audit: type=1400 audit(1727813122.013:3213): avc: denied { read } for pid=11226 comm="syz.3.2709" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 618.418947][ T30] audit: type=1400 audit(1727813122.013:3214): avc: denied { open } for pid=11226 comm="syz.3.2709" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 618.419322][T11232] netlink: 'syz.2.2711': attribute type 3 has an invalid length. [ 618.443281][ T30] audit: type=1400 audit(1727813122.013:3215): avc: denied { ioctl } for pid=11226 comm="syz.3.2709" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 618.502703][T11238] request_module fs-qnx4 succeeded, but still no fs? [ 618.521997][T11244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2714'. [ 618.534988][ T30] audit: type=1400 audit(1727813122.163:3216): avc: denied { bind } for pid=11243 comm="syz.0.2714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 618.605577][ T1612] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 618.845570][ T1985] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 618.860941][T11252] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2718'. [ 618.869834][ T1612] usb 5-1: Using ep0 maxpacket: 16 [ 618.881022][ T30] audit: type=1400 audit(1727813122.503:3217): avc: denied { create } for pid=11253 comm="syz.1.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 618.906827][ T30] audit: type=1400 audit(1727813122.533:3218): avc: denied { setopt } for pid=11255 comm="syz.1.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 618.926488][ T30] audit: type=1400 audit(1727813122.533:3219): avc: denied { ioctl } for pid=11255 comm="syz.1.2720" path="socket:[51486]" dev="sockfs" ino=51486 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 618.951790][ T30] audit: type=1400 audit(1727813122.533:3220): avc: denied { write } for pid=11255 comm="syz.1.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 619.025593][ T1612] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 619.033818][ T1612] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 619.042045][ T1612] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 619.050154][ T1612] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 619.058102][ T1612] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 619.068931][ T1612] usb 5-1: config 0 has no interface number 0 [ 619.078948][T11263] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2723'. [ 619.079245][ T1612] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 619.088258][T11263] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2723'. [ 619.098648][ T1612] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 619.121542][ T1612] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 619.131557][ T1612] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.144626][ T1612] usb 5-1: config 0 interface 125 has no altsetting 0 [ 619.151305][ T1612] usb 5-1: config 0 interface 125 has no altsetting 2 [ 619.305570][ T450] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 619.315812][ T1985] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.327276][ T1985] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 619.336191][ T1612] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 619.345238][ T1985] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 619.354489][ T1612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.362354][ T1985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.370203][ T1612] usb 5-1: Product: syz [ 619.374118][ T1612] usb 5-1: Manufacturer: syz [ 619.378660][ T1612] usb 5-1: SerialNumber: syz [ 619.383689][ T1985] usb 4-1: config 0 descriptor?? [ 619.393228][ T1612] usb 5-1: config 0 descriptor?? [ 619.535567][ T20] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 619.555631][ T450] usb 2-1: Using ep0 maxpacket: 16 [ 619.627680][ T310] usb 4-1: USB disconnect, device number 18 [ 619.648095][ T1985] usb 5-1: USB disconnect, device number 11 [ 619.685618][ T450] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.696432][ T450] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.705992][ T1612] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 619.713297][ T450] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 619.722147][ T450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.730627][ T450] usb 2-1: config 0 descriptor?? [ 619.895620][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.906349][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.915885][ T20] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 619.924696][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.933207][ T20] usb 1-1: config 0 descriptor?? [ 619.965702][ T1612] usb 3-1: Using ep0 maxpacket: 8 [ 620.085597][ T1612] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 620.093803][ T1612] usb 3-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 620.102292][ T1612] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 620.111151][ T1612] usb 3-1: config 0 has no interface number 0 [ 620.117417][ T1612] usb 3-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 620.151459][T11290] loop0: detected capacity change from 0 to 7 [ 620.216722][ T450] hid-generic 0003:1532:011B.0001: item fetching failed at offset 3/5 [ 620.224840][ T450] hid-generic: probe of 0003:1532:011B.0001 failed with error -22 [ 620.245610][ T1612] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 620.254442][ T1612] usb 3-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 620.262757][ T1612] usb 3-1: Product: syz [ 620.266754][ T1612] usb 3-1: Manufacturer: syz [ 620.271835][ T1612] usb 3-1: config 0 descriptor?? [ 620.416681][ T836] usb 2-1: USB disconnect, device number 14 [ 620.475575][ T311] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 620.475580][ T1614] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 620.475653][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 620.496164][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 620.503365][ T20] usb 1-1: USB disconnect, device number 21 [ 620.715589][ T1614] usb 5-1: Using ep0 maxpacket: 8 [ 620.715589][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 620.875608][ T311] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 620.884530][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.893209][ T311] usb 4-1: config 0 descriptor?? [ 621.005615][ T1614] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 621.014557][ T1614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.022380][ T1614] usb 5-1: Product: syz [ 621.026375][ T1614] usb 5-1: Manufacturer: syz [ 621.030772][ T1614] usb 5-1: SerialNumber: syz [ 621.175585][ T311] usb 4-1: string descriptor 0 read error: -71 [ 621.182154][ T311] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 621.189898][ T311] usb 4-1: USB disconnect, device number 19 [ 621.205602][ T1612] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 621.317061][ T1614] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 621.445572][ T1612] usb 2-1: Using ep0 maxpacket: 8 [ 621.565608][ T1612] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 621.573892][ T1612] usb 2-1: config 150 has no interface number 0 [ 621.579951][ T1612] usb 2-1: config 150 interface 204 has no altsetting 0 [ 621.586741][ T1612] usb 2-1: config 150 interface 1 has no altsetting 0 [ 621.710963][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2750'. [ 621.720159][T11330] device bridge_slave_1 left promiscuous mode [ 621.726497][T11330] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.733922][T11330] device bridge_slave_0 left promiscuous mode [ 621.739952][T11330] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.745617][ T1612] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 621.755852][ T1612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.764535][ T1612] usb 2-1: Product: syz [ 621.768749][ T1612] usb 2-1: Manufacturer: syz [ 621.773270][ T1612] usb 2-1: SerialNumber: syz [ 621.884967][T11346] tipc: Started in network mode [ 621.889783][T11346] tipc: Node identity , cluster identity 4711 [ 621.895916][T11346] tipc: Failed to set node id, please configure manually [ 621.902765][T11346] tipc: Enabling of bearer rejected, failed to enable media [ 622.055581][ T311] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 622.090645][ T1612] usb 5-1: USB disconnect, device number 12 [ 622.097350][ T1612] usblp0: removed [ 622.215559][ T836] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 622.415601][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.426342][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.435925][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 622.449012][ T311] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 622.457847][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.466111][ T311] usb 1-1: config 0 descriptor?? [ 622.583079][ T1612] usb 3-1: USB disconnect, device number 9 [ 622.615959][ T836] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 622.624830][ T836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.633377][ T836] usb 4-1: config 0 descriptor?? [ 622.875568][ T1985] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 622.956286][ T311] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 622.965121][ T311] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 622.973966][ T311] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 622.986151][ T1612] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 623.275618][ T1985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.286422][ T1985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.295977][ T1985] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 623.308706][ T1985] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.318076][ T1985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.326444][ T1985] usb 5-1: config 0 descriptor?? [ 623.365668][ T1612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 623.377026][ T1612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.386618][ T1612] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 623.395412][ T1612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.403781][ T1612] usb 3-1: config 0 descriptor?? [ 623.446097][ T1612] hub 3-1:0.0: USB hub found [ 623.655673][ T1612] hub 3-1:0.0: 1 port detected [ 623.940060][ T836] usb 2-1: USB disconnect, device number 15 [ 624.096372][ T1612] usb 3-1: USB disconnect, device number 10 [ 624.325578][ T1985] usbhid 5-1:0.0: can't add hid device: -71 [ 624.331329][ T1985] usbhid: probe of 5-1:0.0 failed with error -71 [ 624.338376][ T1985] usb 5-1: USB disconnect, device number 13 [ 624.355889][ T836] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 624.599096][T11374] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2768'. [ 624.765708][ T836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.779169][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 624.779182][ T30] audit: type=1400 audit(1727813128.403:3234): avc: denied { sys_module } for pid=11379 comm="syz.0.2771" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 624.785354][ T836] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 624.817276][ T836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.825900][ T836] usb 2-1: config 0 descriptor?? [ 624.841308][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2774'. [ 624.865979][T11391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2772'. [ 624.885585][ T1614] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 624.935748][ T1985] usb 4-1: USB disconnect, device number 20 [ 624.996282][ T30] audit: type=1326 audit(1727813128.623:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.0.2780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92ee199ff9 code=0x0 [ 625.055961][T11408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2782'. [ 625.095848][ T311] usb 1-1: USB disconnect, device number 22 [ 625.101869][ T30] audit: type=1400 audit(1727813128.723:3236): avc: denied { write } for pid=11402 comm="syz.0.2780" name="ns" dev="proc" ino=51149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 625.123327][ T30] audit: type=1400 audit(1727813128.723:3237): avc: denied { add_name } for pid=11402 comm="syz.0.2780" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 625.145665][ T30] audit: type=1400 audit(1727813128.723:3238): avc: denied { create } for pid=11402 comm="syz.0.2780" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 625.167869][ T30] audit: type=1400 audit(1727813128.723:3239): avc: denied { associate } for pid=11402 comm="syz.0.2780" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 625.305601][ T1614] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.316332][ T1614] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 625.505601][ T1614] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.514494][ T1614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.522291][ T1614] usb 3-1: Product: syz [ 625.526302][ T1614] usb 3-1: Manufacturer: syz [ 625.530689][ T1614] usb 3-1: SerialNumber: syz [ 625.776350][T11378] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 625.925582][ T20] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 626.095591][ T1985] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 626.138861][ T450] usb 2-1: USB disconnect, device number 16 [ 626.175606][ T294] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 626.183026][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 626.325622][ T20] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 626.335563][ T1985] usb 1-1: Using ep0 maxpacket: 16 [ 626.336110][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 626.349784][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.358266][ T20] usb 5-1: config 0 descriptor?? [ 626.375614][T11416] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 626.396037][ T20] hub 5-1:0.0: bad descriptor, ignoring hub [ 626.401966][ T20] hub: probe of 5-1:0.0 failed with error -5 [ 626.408015][ T20] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 626.455618][ T1985] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.465604][ T1985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 626.476252][ T1985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.485664][ T1985] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 626.495150][ T1985] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.565609][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.575212][ T294] usb 4-1: New USB device found, idVendor=1bef, idProduct=6047, bcdDevice= 0.00 [ 626.584020][ T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.585608][ T1985] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 626.592584][ T294] usb 4-1: config 0 descriptor?? [ 626.601065][ T450] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 626.612877][ T1985] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 626.620652][ T1985] usb 1-1: Manufacturer: syz [ 626.625739][T11378] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 626.632533][ T1985] usb 1-1: config 0 descriptor?? [ 626.875620][ T1614] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 626.881934][T11419] UDC core: couldn't find an available UDC or it's busy: -16 [ 626.882122][ T1614] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 626.889358][T11419] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 626.896623][ T1614] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 626.965603][ T450] usb 2-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 626.975808][ T450] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 626.984585][ T450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.993229][ T450] usb 2-1: config 0 descriptor?? [ 627.076870][ T30] audit: type=1400 audit(1727813130.703:3240): avc: denied { nlmsg_write } for pid=11427 comm="syz.3.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 627.099489][ T1614] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 627.117429][ T1614] usb 3-1: USB disconnect, device number 11 [ 627.122085][ T30] audit: type=1400 audit(1727813130.743:3241): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 627.126597][ T294] hid-generic 0003:1BEF:6047.0003: unknown main item tag 0x0 [ 627.154095][ T1614] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 627.162913][ T294] hid-generic 0003:1BEF:6047.0003: unknown main item tag 0x0 [ 627.173480][ T294] hid-generic 0003:1BEF:6047.0003: unknown main item tag 0x0 [ 627.186397][ T294] hid-generic 0003:1BEF:6047.0003: unknown main item tag 0x0 [ 627.193648][ T294] hid-generic 0003:1BEF:6047.0003: unknown main item tag 0x0 [ 627.209763][ T294] hid-generic 0003:1BEF:6047.0003: hidraw0: USB HID v0.00 Device [HID 1bef:6047] on usb-dummy_hcd.3-1/input0 [ 627.230980][ T294] ================================================================== [ 627.238853][ T294] BUG: KASAN: use-after-free in worker_thread+0xaaa/0x12a0 [ 627.245883][ T294] Read of size 8 at addr ffff88811751cc60 by task kworker/0:2/294 [ 627.253526][ T294] [ 627.255692][ T294] CPU: 0 PID: 294 Comm: kworker/0:2 Not tainted 5.15.161-syzkaller-00463-g8e36931104ac #0 [ 627.260795][ T450] usb 2-1: USB disconnect, device number 17 [ 627.265407][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 627.265421][ T294] Workqueue: 0x0 (usb_hub_wq) [ 627.285635][ T294] Call Trace: [ 627.288760][ T294] [ 627.291534][ T294] dump_stack_lvl+0x151/0x1c0 [ 627.296043][ T294] ? io_uring_drop_tctx_refs+0x190/0x190 [ 627.301582][ T294] ? panic+0x760/0x760 [ 627.305417][ T294] ? read_word_at_a_time+0x12/0x20 [ 627.310366][ T294] print_address_description+0x87/0x3b0 [ 627.315746][ T294] kasan_report+0x179/0x1c0 [ 627.320085][ T294] ? worker_thread+0xaaa/0x12a0 [ 627.324772][ T294] ? worker_thread+0xaaa/0x12a0 [ 627.329459][ T294] __asan_report_load8_noabort+0x14/0x20 [ 627.334926][ T294] worker_thread+0xaaa/0x12a0 [ 627.339444][ T294] kthread+0x421/0x510 [ 627.343346][ T294] ? worker_clr_flags+0x180/0x180 [ 627.348206][ T294] ? kthread_blkcg+0xd0/0xd0 [ 627.352632][ T294] ret_from_fork+0x1f/0x30 [ 627.356897][ T294] [ 627.359750][ T294] [ 627.361919][ T294] Allocated by task 1614: [ 627.366084][ T294] ____kasan_kmalloc+0xdb/0x110 [ 627.370771][ T294] __kasan_kmalloc+0x9/0x10 [ 627.375110][ T294] __kmalloc+0x13a/0x270 [ 627.379190][ T294] kvmalloc_node+0x1f0/0x4d0 [ 627.383616][ T294] alloc_netdev_mqs+0x8c/0xc90 [ 627.388215][ T294] alloc_etherdev_mqs+0x33/0x40 [ 627.392903][ T294] usbnet_probe+0x1ff/0x2830 [ 627.397327][ T294] usb_probe_interface+0x5b6/0xa90 [ 627.402276][ T294] really_probe+0x28d/0x970 [ 627.406636][ T294] __driver_probe_device+0x1a0/0x310 [ 627.411736][ T294] driver_probe_device+0x54/0x3d0 [ 627.416597][ T294] __device_attach_driver+0x2c5/0x470 [ 627.421805][ T294] bus_for_each_drv+0x183/0x200 [ 627.426494][ T294] __device_attach+0x312/0x510 [ 627.431092][ T294] device_initial_probe+0x1a/0x20 [ 627.435951][ T294] bus_probe_device+0xbe/0x1e0 [ 627.440551][ T294] device_add+0xb60/0xf10 [ 627.444717][ T294] usb_set_configuration+0x190f/0x1e80 [ 627.450013][ T294] usb_generic_driver_probe+0x8b/0x150 [ 627.455305][ T294] usb_probe_device+0x144/0x260 [ 627.459992][ T294] really_probe+0x28d/0x970 [ 627.464331][ T294] __driver_probe_device+0x1a0/0x310 [ 627.469452][ T294] driver_probe_device+0x54/0x3d0 [ 627.474313][ T294] __device_attach_driver+0x2c5/0x470 [ 627.479522][ T294] bus_for_each_drv+0x183/0x200 [ 627.484209][ T294] __device_attach+0x312/0x510 [ 627.488814][ T294] device_initial_probe+0x1a/0x20 [ 627.493754][ T294] bus_probe_device+0xbe/0x1e0 [ 627.498355][ T294] device_add+0xb60/0xf10 [ 627.502519][ T294] usb_new_device+0x1038/0x1c00 [ 627.507208][ T294] hub_event+0x2def/0x4770 [ 627.511459][ T294] process_one_work+0x6bb/0xc10 [ 627.516147][ T294] worker_thread+0xad5/0x12a0 [ 627.520658][ T294] kthread+0x421/0x510 [ 627.524564][ T294] ret_from_fork+0x1f/0x30 [ 627.528818][ T294] [ 627.530987][ T294] Freed by task 1614: [ 627.534811][ T294] kasan_set_track+0x4b/0x70 [ 627.539232][ T294] kasan_set_free_info+0x23/0x40 [ 627.544005][ T294] ____kasan_slab_free+0x126/0x160 [ 627.548964][ T294] __kasan_slab_free+0x11/0x20 [ 627.553553][ T294] slab_free_freelist_hook+0xbd/0x190 [ 627.558761][ T294] kfree+0xc8/0x220 [ 627.562408][ T294] kvfree+0x35/0x40 [ 627.566053][ T294] netdev_freemem+0x3f/0x60 [ 627.570391][ T294] netdev_release+0x7f/0xb0 [ 627.574733][ T294] device_release+0x95/0x1c0 [ 627.579157][ T294] kobject_put+0x178/0x260 [ 627.583409][ T294] put_device+0x1f/0x30 [ 627.587403][ T294] free_netdev+0x34f/0x440 [ 627.591655][ T294] usbnet_disconnect+0x245/0x390 [ 627.596429][ T294] usb_unbind_interface+0x1fa/0x8c0 [ 627.601461][ T294] device_release_driver_internal+0x50b/0x7d0 [ 627.607366][ T294] device_release_driver+0x19/0x20 [ 627.612312][ T294] bus_remove_device+0x2f8/0x360 [ 627.617084][ T294] device_del+0x663/0xe90 [ 627.621251][ T294] usb_disable_device+0x380/0x720 [ 627.626110][ T294] usb_disconnect+0x32a/0x890 [ 627.630624][ T294] hub_event+0x1d42/0x4770 [ 627.634877][ T294] process_one_work+0x6bb/0xc10 [ 627.639563][ T294] worker_thread+0xe02/0x12a0 [ 627.644078][ T294] kthread+0x421/0x510 [ 627.647983][ T294] ret_from_fork+0x1f/0x30 [ 627.652236][ T294] [ 627.654405][ T294] Last potentially related work creation: [ 627.659963][ T294] kasan_save_stack+0x3b/0x60 [ 627.664473][ T294] __kasan_record_aux_stack+0xd3/0xf0 [ 627.669681][ T294] kasan_record_aux_stack_noalloc+0xb/0x10 [ 627.675323][ T294] insert_work+0x56/0x320 [ 627.679487][ T294] __queue_work+0x92a/0xcd0 [ 627.683829][ T294] queue_work_on+0x105/0x170 [ 627.688254][ T294] usbnet_link_change+0xeb/0x100 [ 627.693030][ T294] usbnet_probe+0x1dd3/0x2830 [ 627.697540][ T294] usb_probe_interface+0x5b6/0xa90 [ 627.702489][ T294] really_probe+0x28d/0x970 [ 627.706827][ T294] __driver_probe_device+0x1a0/0x310 [ 627.711948][ T294] driver_probe_device+0x54/0x3d0 [ 627.716809][ T294] __device_attach_driver+0x2c5/0x470 [ 627.722015][ T294] bus_for_each_drv+0x183/0x200 [ 627.726703][ T294] __device_attach+0x312/0x510 [ 627.731302][ T294] device_initial_probe+0x1a/0x20 [ 627.736162][ T294] bus_probe_device+0xbe/0x1e0 [ 627.740763][ T294] device_add+0xb60/0xf10 [ 627.744930][ T294] usb_set_configuration+0x190f/0x1e80 [ 627.750224][ T294] usb_generic_driver_probe+0x8b/0x150 [ 627.755519][ T294] usb_probe_device+0x144/0x260 [ 627.760203][ T294] really_probe+0x28d/0x970 [ 627.764544][ T294] __driver_probe_device+0x1a0/0x310 [ 627.769665][ T294] driver_probe_device+0x54/0x3d0 [ 627.774525][ T294] __device_attach_driver+0x2c5/0x470 [ 627.779733][ T294] bus_for_each_drv+0x183/0x200 [ 627.784418][ T294] __device_attach+0x312/0x510 [ 627.789020][ T294] device_initial_probe+0x1a/0x20 [ 627.793879][ T294] bus_probe_device+0xbe/0x1e0 [ 627.798481][ T294] device_add+0xb60/0xf10 [ 627.802646][ T294] usb_new_device+0x1038/0x1c00 [ 627.807332][ T294] hub_event+0x2def/0x4770 [ 627.811584][ T294] process_one_work+0x6bb/0xc10 [ 627.816271][ T294] worker_thread+0xad5/0x12a0 [ 627.820786][ T294] kthread+0x421/0x510 [ 627.824692][ T294] ret_from_fork+0x1f/0x30 [ 627.828943][ T294] [ 627.831112][ T294] The buggy address belongs to the object at ffff88811751c000 [ 627.831112][ T294] which belongs to the cache kmalloc-4k of size 4096 [ 627.845000][ T294] The buggy address is located 3168 bytes inside of [ 627.845000][ T294] 4096-byte region [ffff88811751c000, ffff88811751d000) [ 627.858281][ T294] The buggy address belongs to the page: [ 627.863761][ T294] page:ffffea00045d4600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117518 [ 627.873816][ T294] head:ffffea00045d4600 order:3 compound_mapcount:0 compound_pincount:0 [ 627.881973][ T294] flags: 0x4000000000010200(slab|head|zone=1) [ 627.887881][ T294] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 627.896298][ T294] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 627.904712][ T294] page dumped because: kasan: bad access detected [ 627.910967][ T294] page_owner tracks the page as allocated [ 627.916515][ T294] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 10956, ts 603903948993, free_ts 600157800278 [ 627.937087][ T294] post_alloc_hook+0x1a3/0x1b0 [ 627.941686][ T294] prep_new_page+0x1b/0x110 [ 627.946024][ T294] get_page_from_freelist+0x3550/0x35d0 [ 627.951405][ T294] __alloc_pages+0x27e/0x8f0 [ 627.955833][ T294] new_slab+0x9a/0x4e0 [ 627.959738][ T294] ___slab_alloc+0x39e/0x830 [ 627.964166][ T294] __slab_alloc+0x4a/0x90 [ 627.968331][ T294] kmem_cache_alloc_trace+0x142/0x210 [ 627.973537][ T294] kobject_uevent_env+0x269/0x700 [ 627.978398][ T294] kobject_uevent+0x1f/0x30 [ 627.982736][ T294] netdev_queue_update_kobjects+0x1c0/0x400 [ 627.988466][ T294] netdev_register_kobject+0x270/0x320 [ 627.993763][ T294] register_netdevice+0xde9/0x1390 [ 627.998706][ T294] veth_newlink+0x72e/0xe20 [ 628.003048][ T294] rtnl_newlink+0x1495/0x2050 [ 628.007560][ T294] rtnetlink_rcv_msg+0x951/0xc40 [ 628.012333][ T294] page last free stack trace: [ 628.016846][ T294] free_unref_page_prepare+0x7c8/0x7d0 [ 628.022142][ T294] free_unref_page+0xe8/0x750 [ 628.026656][ T294] __free_pages+0x61/0xf0 [ 628.030820][ T294] __free_slab+0xec/0x1d0 [ 628.034985][ T294] __unfreeze_partials+0x165/0x1a0 [ 628.039932][ T294] put_cpu_partial+0xc4/0x120 [ 628.044446][ T294] __slab_free+0x1c8/0x290 [ 628.048698][ T294] ___cache_free+0x109/0x120 [ 628.053125][ T294] qlink_free+0x4d/0x90 [ 628.057117][ T294] qlist_free_all+0x44/0xb0 [ 628.061456][ T294] kasan_quarantine_reduce+0x15a/0x180 [ 628.066755][ T294] __kasan_slab_alloc+0x2f/0xe0 [ 628.071440][ T294] slab_post_alloc_hook+0x53/0x2c0 [ 628.076386][ T294] kmem_cache_alloc+0xf5/0x200 [ 628.080986][ T294] prepare_creds+0x2f/0x6a0 [ 628.085325][ T294] do_faccessat+0xee/0x860 [ 628.089578][ T294] [ 628.091750][ T294] Memory state around the buggy address: [ 628.097219][ T294] ffff88811751cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 628.105117][ T294] ffff88811751cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 628.113014][ T294] >ffff88811751cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 628.120912][ T294] ^ [ 628.127943][ T294] ffff88811751cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 628.135841][ T294] ffff88811751cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 628.143737][ T294] ================================================================== [ 628.151633][ T294] Disabling lock debugging due to kernel taint [ 628.165004][T11428] UDC core: couldn't find an available UDC or it's busy: -16 [ 628.173043][T11428] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 628.625667][ T294] usb 5-1: USB disconnect, device number 14 [ 628.839366][ T294] usb 1-1: USB disconnect, device number 23 [ 629.192023][ T294] usb 4-1: USB disconnect, device number 21