last executing test programs: 12.094767628s ago: executing program 4 (id=2067): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) 11.868482824s ago: executing program 4 (id=2068): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [], {}, [{0x8, 0x1}, {}], {0x10, 0x1}}, 0x34, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r1, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') 11.812575318s ago: executing program 4 (id=2069): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x4101, 0x3) 2.924006777s ago: executing program 3 (id=2166): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 2.911176317s ago: executing program 3 (id=2167): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000040)=""/87, 0x57, 0x2, 0x0, 0x0) 2.890772539s ago: executing program 3 (id=2168): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000a40)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@grpquota}, {@noblock_validity}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x2e}}, {@resgid}, {@sysvgroups}, {@norecovery}, {@usrquota}]}, 0x1, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf6UmVQ+1YFtsJS3a3aSxbfBQK4ieCtZ6rzHZhJBNNmQ3bROKpHhXEFHBkycvgn+AIP0TRCjoXaoooq0ePKgrOztb27jbRLrd6Tf5fGA67zvv7j7P27Az88687ARwaJ2PiFsRMRIRlyNiPN+e5ku77dadzutePH80316SaLXu/iWJJN/W/awkX5+IiJ2IOBoRX/tKxDeT/43b2NpemavVqht5vdJcXa80travLK/OLVWXqmszM9PXZ2/MXpudGkg/JyLi5pf+8IPv/vTLN3/52Qe/u/enS99qpzWWt7/aj0HqdL2U/V90jUbExrsIVoCRfF3q0/6dkSEmAwDAntrn+B+NiE9l5//jMZKdnQIAAAAHSesLY/HPJKIFAAAAHFhpNgc2Scv5XICxSNNyuTOH9+NxPK3VG83PLNY31xY6c2UnopQuLteqU/lc4YkoJe36dD7Htlu/uqs+ExGnIuL748eyenm+Xlso+uIHAAAAHBIndo3//z6ejf+PFJ0XAAAAMGATRScAAAAAvHPG/wAAAHDwGf8DAADAgfbV27fbS6v7/OuF+1ubK/X7VxaqjZXy6uZ8eb6+sV5eqteXst/sW93r82r1+vrnYm3zYaVZbTQrja3te6v1zbXmveXXHoENAAAADNGpc09+m0TEzuePZUvbB0UnBQxFskd79pCQZ3nl90NICBiakaITAAozWnQCQGFKRScAFG6v6wB9J+/8avC5AAAA78bkJ/rf/3dtAA62tOgEAIChc/8fDq/S6zMArxWXCVCUj+zR/vb3/1ut/yshAABg4MayJUnL+b3AsUjTcjniZPZYgFKyuFyrTuXjg9+Ml46069PZO5M95wwDAAAAAAAAAAAAAAAAAAAAAAAAAB2tVhItAAAA4ECLSP+YZL/mHzE5fnFs9/WBD5J/jGfriHjw47s/fDjXbG5Mt7f/9eX25o/y7VeLuIIBAAAA7NYdp3fH8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwSC+eP5rvLsOM++cvRsREz/jnjmaro1GKiON/S2L0lfclETEygPg7jyPidK/4STutmIhOFr3iHyswfhoRJwYQHw6zJ+39z61e3780zmfr3t+/0Xx5W/33f2l0938jffY/J/cZ48zTn1f6xn8ccWa09/6nGz/pE//CPuN/4+vb2/3aWj+JmOx5/Elei1Vprq5XGlvbV5ZX55aqS9W1mZnp67M3Zq/NTlUWl2vV/N+eMb73yV/8+039P94n/sQe/b+4z/7/6+nD5x/rFEu94l+60Pv4e7pP/DQ/9n06L7fbJ7vlnU75VWd/9uuzb+r/Qp/+v/z79zjQtmNe2mf/L9/59rN9vhQAGILG1vbKXK1W3fgwFtJ4L9JQGEjhyPuRhkKnUPSeCQAAGLT/nvQXnQkAAAAAAAAAAAAAAAAAAAAcXsP4ObHdMXeK6SoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv9JwAA///NOtlz") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000001980)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0xc, r1, 0x0, 0x81}) 2.703528163s ago: executing program 3 (id=2170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB='system_u::bject_r:ptch0 unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 0'], 0x67) 2.675029545s ago: executing program 3 (id=2171): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x18, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 2.653924766s ago: executing program 3 (id=2173): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.110518216s ago: executing program 0 (id=2175): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 2.097542067s ago: executing program 0 (id=2177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 2.041179591s ago: executing program 0 (id=2178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2.040964041s ago: executing program 2 (id=2179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2.040651191s ago: executing program 0 (id=2180): syz_usb_connect(0x0, 0x4ff, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x9, 0xd1, 0x27, 0x8, 0x2040, 0xb900, 0xc814, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4ed, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb9, 0x20, 0xc, 0x26, 0x84, 0x37, 0x0, [], [{{0x9, 0x5, 0x8, 0x1, 0x40, 0xfb, 0x1d, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0xc7, 0x53, 0x1, [@generic={0x8c, 0x23, "92854820896f1b2520701d8bb62765c147b957c09b811ff29109963927e10071962a85990197476da3b6fe395cb508db1dfc46963fdf1da3953f135dbbce1d497e991600745d3af066e24f99fe47f5b81774eb3eebcdcced27f320d71f5ad81f876283681b7fc0081cf0f9bd5a3a86fe3062a0b9f3a792228eafd9b3024d278ced8a014950e669bea748"}, @generic={0x84, 0x21, "ffcd084a01d5b59e4b7bfd3e768d9e1a41566c8dfe05ac61050d092caada6eae91a191c483e6805f29f152180a6cb1d42217cce5c4a8203a4c95d3334b5d000b508e4c6bd5c5ca10bf8319ce87642ca2310d8bf7dbaa93114579ed334ea44cf78db252b2c9f8a1d4938ddd9cf1e7ae2003d7cf0406bc75e1b62f6a7c3342e0e6b7b3"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x4, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x55, 0x5db}, @generic={0x87, 0x6, "6b405e908656ce16c307af1e74c4ea18fda985b472d803ea0bb96c5203da2a43f4bea1e41c31a49ccb5a1ed30696985761f6900e62c343fbce9a2cc6f0d3cdddf0fa1028808b1e6a04f31623795f91c8ae934dac9268925ebe62cd66e2cb590e633b075790110e4cbb0c613aed33aba38c8498644477a493e7c96473df01077b45038ac303"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0xe7, 0x81, 0x9}}, {{0x9, 0x5, 0x7, 0x2, 0x3df, 0xf5, 0x0, 0x7}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x7, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x1, 0x0, 0xcc, [@generic={0xac, 0x5, "56f3ae37d166b5e36f2e6fa5bb049a707ee0412e1a56edf84ea0e36199fef1aa2bd86bbeb15e2bab42dc11cf0f8a01e139b02d89f9571d39a2925542dfe4f0668685e985b3a884b2f0f5e2267e4d26ebe74908209641de8f4270ec750008cc10c25b7d4087e58cd0642f9430194bdd9ea94fbe6d9ae2ba4b4cecfda795dbf48e9d2f80d20f3dd3fb73776f540fa302f455f9ecc9858b9e1d3dae836132f54aed2c276f838a8247d83920"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xff, 0x57, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xff7f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x9}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x4, 0x2, 0x8, [@generic={0xe4, 0x3, "55d30160469afbba3b2755be91fed903ee6d944553f7ccaf89cd857076a6b529834919a5f18b1a80aeeb4f6699056054a9da7f842f6e3a2680889dfbaf4f798127502edc08a905b273822b0dca0a49069e656723510d4ee9a8cfcc33cac1f60a1eab7c994ace961a6dd9b550e014ca0f3a86574cc3ce7ea2a6665a31da3dbaf16e5b02b835f421159cac6af9bbe49b1f29f691b9ac07e8cef9ec6b20e95f672de26f44237033a3b8773cf2b1de086367808bade150db5adc3a7f8f0c51b4800648b5a61cd8d8fd37fa79090159cd50da9ccc59623bb815f81a91b595d4eec8058984"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2e, 0x6}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0xd, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x0, 0x4}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0x4, 0x81, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x7ff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x10, 0x9, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @generic={0xfb, 0xb, "d8adf6ff61615783fb9daf93e55e639c5538278d638cc39bc8c9f4c8e6c53a5dd054b2af8821cf30cf66f1866e7afed4e1ec069834b2a4f3918028394c3b5258cb6e23d516eb746d2213ceec5ce271ce7e85c47f3fd65b074f4187dc249cd133cd7ebf0ac7ba269c1c14d32e538452a57a92e8d47e26d167f73d145709096778daf5989fcb37215bdd7de51c58af4f1fc4e973e3d5c3ada9e6f306780b06dd3c190080b50d4967f6a7450f91caaeb2f5461a5b2384b703d04105fd4d343ec4d49fa3770510f414a295f5443aae0d9df78cf2920a8cd1dab1320c33adb4de7ea981d0ede760b7c28cce980ea21c481c95456b91e6c2480dc8ef"}]}}]}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="050f0f00f2f5"], 0x7, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x40a}}, {0x5, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x66, &(0x7f0000000100)=@string={0x66, 0x3, "ffabec925982a0d0cf94344a3c749c0ef04fb1a0138a62ba11337510d39de4a1981a257f3e627814a6188cd85a7b758a97f2bd23c930a6c45a1a6c4788871e4d90b1f8d4a8a3c2943a95ecc4831393f88fc0b021f9a297321371665b9956ede07840c751"}}, {0xd6, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, {0x7d, &(0x7f0000000280)=@string={0x7d, 0x3, "ed5ad35c160528f66fa46f16eaaa102c79c1c8718a88cf97664076329cb5c7c08f171280101131e7525361328aa0856cd2487a8dd81d95993e3611e6a659e888bce89a3b2cb4d37c9417ef26e04daae1505fb45163b3872cc520693a6a1035f3034db9c9f5c4f8a4aaf5241041418f9867aa829a7ca39dbf2983ba"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x401}}]}) close(0xffffffffffffffff) syz_usb_connect(0x5, 0x553, &(0x7f0000000a40)={{0x12, 0x1, 0x310, 0x39, 0x66, 0x99, 0x20, 0x9022, 0xd632, 0x5e01, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x541, 0x3, 0x6, 0xc, 0x10, 0xd, [{{0x9, 0x4, 0x17, 0x7, 0x1, 0xf4, 0xfd, 0x7b, 0x2, [@hid_hid={0x9, 0x21, 0x8, 0x10, 0x1, {0x22, 0x54}}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "0377"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x8001}, [@dmm={0x7, 0x24, 0x14, 0x2, 0xfffb}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x18}, @dmm={0x7, 0x24, 0x14, 0x8, 0xe}, @mdlm_detail={0x22, 0x24, 0x13, 0x8, "46335aa54435cebbb9448ff7d3feba314dc471b7d06cd7a1ef8f7f6ee91c"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x4, 0x3, 0x6, [@generic={0x1c, 0x11, "dfd62c0e86a2d47be9b80d0d4da5a27055abb6e01e0dec4ab5f6"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x911a}]}}]}}, {{0x9, 0x4, 0x1c, 0x6, 0x7, 0x2a, 0x89, 0xe7, 0xff, [@uac_as, @hid_hid={0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x2f5}}], [{{0x9, 0x5, 0x6, 0x2, 0x40, 0xc, 0xfe, 0x3, [@generic={0x74, 0x1, "e4333389b9849d78647e6a8d00b535aeb3687bd0b2faba5ffc267dff632df088b16176d6b27627549e64490d827356559bbe21b9800fcff01f0afb480eb5a65935bd8f111e1f9047a06c91632919ae0371045438529e368f3afffc4f693cda78b1dd55d138639721dbd05eee5a6e2b0024a9"}, @generic={0xd5, 0x2, "568dd3ec6409ccac2c1f129266b9922f7043d6b264c982bf87b5d14e40e38ca9e11574858c8e6fb191b803d2edcfa4c00b7c33c9ad992bf9f28b92ed616ac0a5de2b374344457c2a528e59d0d5279817b2b1ef960aab7bd7f5bdcf51d588a7bc2ac1852e5328f0bb95dd875f7be5851929a2ff7563396c2e78b0fe79fce22c9ddfe60da5bbbc4b74e1898888fb5223b137c74bbf51bd6ebb86bb730f825c4ba9e8ace61db91751687bbc5db7731b029e9bb921a8d4e9aea2a84af86d2113654956eb8cb895c7ef4d4591f7ccb57c76374bfcce"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf8, 0xb2b}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x3f, 0x2, 0x9, [@generic={0xa, 0xe, "5d3c8617e64f254a"}, @generic={0x29, 0x23, "bd033a931577dbe80a6a9d28aa67dca7c29ba141d2c940ec7e7e964bc645c16b47a2a6bb53a7b6"}]}}, {{0x9, 0x5, 0x8, 0x18, 0x400, 0x28, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x2, 0x5af, 0x9, 0x8d, 0x2, [@generic={0x48, 0x7, "30e22db61ed82adcbc5a7dc6b324b41c978847a30c3a1039e30c21bae0e0f008e2dca4e44f05b6fb596592244b1bd99ea95e8587209527c5ab30e42c36204107c876b482ec82"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x84, 0x8000}]}}, {{0x9, 0x5, 0xf, 0x18, 0x40, 0x2, 0x4, 0x6, [@generic={0x97, 0x2, "1435b86124bbf22328d0e1c84edfdf0bf204d249140b8f466b55702866629668975f9d2c50884a4277e55853d10034d62c977d698897709c60f9d3dedefdb1c2ac9c08dc5c9940d935927675d9a4a9de6157f8a931b6ae4976adb774d45f0e247b45c0d106d45327666c1e7dbca67bd885c98235751acd32587102c9794eea152a48ee5400ad5f0bf60e6a8c32045e43055f59f32a"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x1, 0xc2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1}]}}]}}, {{0x9, 0x4, 0x0, 0xc4, 0x7, 0x4, 0xa2, 0xe3, 0xfc, [], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x9, 0x3, 0x2, [@generic={0x8f, 0xe, "f53faa13641a06bfb975147a7aa0d70d8e57fcff77ee126f5c9c82cfbcf1402faf441ded46c717d548acab95c3ad89d017353782f948bf19b36226f0fbc67b305c926c887bc09d51f3311a64159811d2e74b1da26d3f829a4934791438bf563d400313cedf59b05254790f75a0e0eebb313f4f9d1f1a6d28d7651f6362cf803ced512353f21134e80f1def921a"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0xfc, 0x9, 0x0, [@generic={0x51, 0x8, "a68ca99e74b009299653e310a07440fad28c1fa3d16c3ec79c0998d8627c673ad3059c6f36afa28cb03bf24420e5417a8b8afd80ae506d772c20d749ee0058af5ecc8c5036d1999881d23823e53afc"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x7f, 0x0, 0x5, [@generic={0x98, 0x21, "d87f493baac1b32c10abdab5e210f7e0b00c8c84a3ba694f0ad94ecd1f0db8bd75287772fa575bdb12b59a7a87ba494dd0aae08db348f1e0231f91eb29ceca340c060fc6960f63639813591f2bc32887540ea2154aaf217bbbdca6de383f8be882c79adf97ffc57ca96654398e66fea576e894f0530b07c7ed1aa154c70db15e7494650286ccf50fd3e43b2fbc90018e142d25c3e760"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0x9}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x3, 0x0, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe3, 0xff5d}]}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0xf7, 0x10, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x3, 0x7f, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xfd, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1000}]}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0x3, 0x3, 0x3}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x40, 0x2, 0x4, 0x40, 0xfb}, 0xf5, &(0x7f0000000fc0)={0x5, 0xf, 0xf5, 0x2, [@generic={0xdc, 0x10, 0x4, "c7234c2e9a08c03fab36cebe51dc6dd0834af62f5ac59a01707bfddd5132d3bfaf72c3b7d985c65059e0be524e8d483faa110cc5efef162781deaef8ab97b7eb9cfcc44c2a75214fed586b5894bd2f85d31269db5cc2b04d47640cf9d7792c50bf49b85d4a5de0e165dcab6482796968f6b6eb5aa4a30070899c630c2287f93bbbdce9e4003c8c4eb5a85f8a8a1dfc4f6935a17a4628c08c317cabbf1db25b573b237931c5f924956f01a6751ebf6020c6cce99677bb39fb8dc5dd3d14e9d5fe0c933af28c179c7f842158733e590731cd00048bdd97b4e884"}, @ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0xa, 0xf, 0x7, [0xffc000, 0x3f30]}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1c05}}, {0x35, &(0x7f0000000240)=@string={0x35, 0x3, "5a9200581a1f58f9cc3743f0b553f0fb0e646a6a4acc4897c646ad4b7dc9b49ee18c05c5716f5246e112a145938ed026188c5b"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x2009}}, {0x94, &(0x7f0000001140)=@string={0x94, 0x3, "bd95ef9cf575027134f90563dd8f17b7f7b2ef975bd1ea399caa2f1b46471fcb938a391e5990d257bc7a9fedf274ed58dc40846611389641f6b2674f4d4f3b53cc3d0fa518be619d3d79268bc71dee4a239e70389ce4660a7923a7b92310ed7d26eefd74858705784aed1f8a9ee679bff1a6018f6453fe0c828ab69c20e86a150e2d66a22f1b266768ae25762563dcc1b59a"}}, {0x29, &(0x7f0000001200)=ANY=[@ANYBLOB="290380c144b0e7bff75f9076a2623a8588ed6e1b13d4248c785600322ed16236cf0254b957b543ebe0"]}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000008c0)=0x3, 0x4) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 2.040305551s ago: executing program 2 (id=2181): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000300)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@user_xattr}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x20000}, 0x20) 1.660870059s ago: executing program 2 (id=2182): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000406241a00000009058c0300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x3, 0x0, 0x7a2, 0x6, 0x800, 0x40000000, 0x811, 0x0, 0x4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.412654207s ago: executing program 2 (id=2184): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) ppoll(&(0x7f00000007c0)=[{r2, 0x550}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 987.661628ms ago: executing program 1 (id=2187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000800)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0xd, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'tunl0\x00'}}}}}, 0x34}}, 0x0) 909.480984ms ago: executing program 4 (id=2183): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x54f8, &(0x7f0000010140)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x200002000001, 0x3, 0x1, 0x800, 0x0, 0x2401}) 892.455275ms ago: executing program 1 (id=2188): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000038500000086000000850000000800000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 764.557894ms ago: executing program 1 (id=2189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000380)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000001f00)=ANY=[@ANYBLOB="01"], 0x0) 740.945966ms ago: executing program 1 (id=2190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 707.686349ms ago: executing program 1 (id=2191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9046c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4e0664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa7666b5ded16ee7025f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b3a2327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4f4ab9e85bf8c6d71a2214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f4f5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51700eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6cd28cf28fe2ee593e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c191355391771f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18abde34ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310d69e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74df190c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f2708e09ae8268dcc15411483b8506386aa0ece2a94c320b002c77f82cb3cc96c34f7831844cc748e662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae4c697bfc674e03231c42f7eaaf5166bbc4653c71805f9448416e379cc1c40f8f866c9b319a849dd00ff9b84857436ed362c4632bfc3fa7357c24f15bbb07bd91893e61df7eb6dc5e071a9cc2faa7a32a91c4d982f5cfb725dca80b23874877a4980dbd70cda040b1ce527e7188159df77b493efbbd7bfe2680bf44e49eb68e5e33a0a5726072b2699d6244cd5c4a82bf18c668a3d43cec78c5fe1f12283d5dde6d0ea0b1b81ee7c065c938577e4ec93f22f1e6106f337625b7f7798011a60a75c35731fe44fa4fc6add59bac24d045a5780a0737b0f09e9127e9df798a1a58434b00d64ea6121afab030d1100905b6b5ecfd2991dd523098dbfaa85c0067884f987dde054a7ba1a95c1815c40a45878dd97a2721b28db7c52230dc999c4416b2af946ee708001cac72dd4ee55eae2d598cff47e4b929f3"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x35917}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 515.916882ms ago: executing program 1 (id=2192): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 410.04847ms ago: executing program 4 (id=2193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) io_setup(0x23, &(0x7f0000000280)=0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 208.974525ms ago: executing program 4 (id=2194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10, 0x0}, 0x0) 108.783702ms ago: executing program 2 (id=2185): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 48.651257ms ago: executing program 0 (id=2195): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x820, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) write$selinux_attr(r1, &(0x7f0000000140)='system_u:object_r:udev_tbl_t:s0\x00', 0x20) 46.759097ms ago: executing program 2 (id=2196): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000013c0)=ANY=[@ANYBLOB="03011400012918000e3580009f0001140000002f0600ac14142ee0000003808a8972bd0b72e410820c520f061fecfdfe4b88942a31f48597e36e039b1c599db6e466749c2d05f64c8303fbda34fb8825f80200e3e46304f7ff00ffffca88facaff978d"], 0xdd12}], 0x1}, 0x0) 0s ago: executing program 0 (id=2197): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) kernel console output (not intermixed with test programs): FAT-fs (loop0): error, clusters badly computed (729 != 731) [ 148.510381][ T517] lenovo 0003:17EF:6047.0040: Failed to switch middle button: -71 [ 148.514290][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.518772][ T4471] FAT-fs (loop0): error, clusters badly computed (730 != 732) [ 148.533318][ T517] lenovo 0003:17EF:6047.0040: Fn-lock setting failed: -71 [ 148.534152][ T4471] FAT-fs (loop0): error, clusters badly computed (731 != 733) [ 148.549950][ T4471] FAT-fs (loop0): error, clusters badly computed (732 != 734) [ 148.550657][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.558756][ T4471] FAT-fs (loop0): error, clusters badly computed (733 != 735) [ 148.565304][ T517] lenovo 0003:17EF:6047.0040: Sensitivity setting failed: -71 [ 148.573562][ T4471] FAT-fs (loop0): error, clusters badly computed (734 != 736) [ 148.580105][ T4722] device veth0_vlan entered promiscuous mode [ 148.587206][ T4471] FAT-fs (loop0): error, clusters badly computed (735 != 737) [ 148.600089][ T4471] FAT-fs (loop0): error, clusters badly computed (736 != 738) [ 148.602287][ T517] usb 4-1: USB disconnect, device number 25 [ 148.608290][ T4471] FAT-fs (loop0): error, clusters badly computed (737 != 739) [ 148.621766][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.629183][ T4471] FAT-fs (loop0): error, clusters badly computed (738 != 740) [ 148.629238][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.636955][ T4471] FAT-fs (loop0): error, clusters badly computed (739 != 741) [ 148.651273][ T4471] FAT-fs (loop0): error, clusters badly computed (740 != 742) [ 148.652216][ T292] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 148.659289][ T4471] FAT-fs (loop0): error, clusters badly computed (741 != 743) [ 148.669389][ T4722] device veth1_macvtap entered promiscuous mode [ 148.675637][ T4471] FAT-fs (loop0): error, clusters badly computed (742 != 744) [ 148.688656][ T292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.688689][ T4471] FAT-fs (loop0): error, clusters badly computed (743 != 745) [ 148.697802][ T292] usb 3-1: Product: syz [ 148.708936][ T292] usb 3-1: Manufacturer: syz [ 148.712538][ T4471] FAT-fs (loop0): error, clusters badly computed (744 != 746) [ 148.724336][ T292] usb 3-1: SerialNumber: syz [ 148.725090][ T4471] FAT-fs (loop0): error, clusters badly computed (745 != 747) [ 148.735786][ T292] r8152-cfgselector 3-1: config 0 descriptor?? [ 148.736920][ T4471] FAT-fs (loop0): error, clusters badly computed (746 != 748) [ 148.750232][ T4471] FAT-fs (loop0): error, clusters badly computed (747 != 749) [ 148.752921][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.766390][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.775166][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.785166][ T4471] FAT-fs (loop0): error, clusters badly computed (748 != 750) [ 148.795418][ T4471] FAT-fs (loop0): error, clusters badly computed (749 != 751) [ 148.803678][ T4471] FAT-fs (loop0): error, clusters badly computed (750 != 752) [ 148.811368][ T4471] FAT-fs (loop0): error, clusters badly computed (751 != 753) [ 148.819705][ T4471] FAT-fs (loop0): error, clusters badly computed (752 != 754) [ 148.828352][ T4471] FAT-fs (loop0): error, clusters badly computed (753 != 755) [ 148.836729][ T4471] FAT-fs (loop0): error, clusters badly computed (754 != 756) [ 148.844901][ T4471] FAT-fs (loop0): error, clusters badly computed (755 != 757) [ 148.871852][ T4471] FAT-fs (loop0): error, clusters badly computed (756 != 758) [ 148.880761][ T4471] FAT-fs (loop0): error, clusters badly computed (757 != 759) [ 148.898373][ T4471] FAT-fs (loop0): error, clusters badly computed (758 != 760) [ 148.922550][ T4471] FAT-fs (loop0): error, clusters badly computed (759 != 761) [ 148.930364][ T4471] FAT-fs (loop0): error, clusters badly computed (760 != 762) [ 148.938068][ T4471] FAT-fs (loop0): error, clusters badly computed (761 != 763) [ 148.986035][ T4471] FAT-fs (loop0): error, clusters badly computed (762 != 764) [ 149.008112][ T4471] FAT-fs (loop0): error, clusters badly computed (763 != 765) [ 149.016286][ T292] r8152-cfgselector 3-1: Unknown version 0x0000 [ 149.027647][ T4745] input: syz1 as /devices/virtual/input/input34 [ 149.034608][ T4471] FAT-fs (loop0): error, clusters badly computed (764 != 766) [ 149.042011][ T292] r8152-cfgselector 3-1: Unknown version 0x0000 [ 149.048736][ T292] r8152-cfgselector 3-1: bad CDC descriptors [ 149.080192][ T4471] FAT-fs (loop0): error, clusters badly computed (765 != 767) [ 149.094503][ T292] r8152-cfgselector 3-1: Unknown version 0x0000 [ 149.103067][ T292] r8152-cfgselector 3-1: USB disconnect, device number 26 [ 149.124753][ T4471] FAT-fs (loop0): error, clusters badly computed (766 != 768) [ 149.136053][ T4471] FAT-fs (loop0): error, clusters badly computed (767 != 769) [ 149.155908][ T4471] FAT-fs (loop0): error, clusters badly computed (768 != 770) [ 149.174869][ T4471] FAT-fs (loop0): error, clusters badly computed (769 != 771) [ 149.183966][ T4471] FAT-fs (loop0): error, clusters badly computed (770 != 772) [ 149.199231][ T4471] FAT-fs (loop0): error, clusters badly computed (771 != 773) [ 149.207606][ T4471] FAT-fs (loop0): error, clusters badly computed (772 != 774) [ 149.216889][ T4471] FAT-fs (loop0): error, clusters badly computed (773 != 775) [ 149.225956][ T4471] FAT-fs (loop0): error, clusters badly computed (774 != 776) [ 149.245076][ T4471] FAT-fs (loop0): error, clusters badly computed (775 != 777) [ 149.256043][ T4471] FAT-fs (loop0): error, clusters badly computed (776 != 778) [ 149.285703][ T4471] FAT-fs (loop0): error, clusters badly computed (777 != 779) [ 149.307582][ T4471] FAT-fs (loop0): error, clusters badly computed (778 != 780) [ 149.365152][ T4743] loop4: detected capacity change from 0 to 40427 [ 149.393536][ T4743] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 149.404160][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 149.408914][ T4750] loop1: detected capacity change from 0 to 40427 [ 149.418480][ T4743] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 149.434711][ T4743] F2FS-fs (loop4): Found nat_bits in checkpoint [ 149.464149][ T4743] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 149.471167][ T4743] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 149.496062][ T4743] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 149.505805][ T4743] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 149.533104][ T4750] F2FS-fs (loop1): invalid crc value [ 149.538634][ T3477] udevd[3477]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 149.543692][ T470] udevd[470]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 149.587215][ T4750] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.669214][ T4787] loop2: detected capacity change from 0 to 512 [ 149.679173][ T4750] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 149.688401][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 149.706798][ T3477] udevd[3477]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 149.729546][ T4750] overlayfs: failed to resolve './bus/file0': -2 [ 149.736796][ T4787] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1753: inode #1: comm syz.2.1753: iget: illegal inode # [ 149.756435][ T4787] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1753: error while reading EA inode 1 err=-117 [ 149.760478][ T4786] loop0: detected capacity change from 0 to 8192 [ 149.778310][ T4787] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1753: inode #1: comm syz.2.1753: iget: illegal inode # [ 149.780216][ T324] udevd[324]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 149.804215][ T4446] attempt to access beyond end of device [ 149.804215][ T4446] loop1: rw=524288, want=45072, limit=40427 [ 149.816764][ T4787] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1753: error while reading EA inode 1 err=-117 [ 149.829545][ T4446] attempt to access beyond end of device [ 149.829545][ T4446] loop1: rw=0, want=45072, limit=40427 [ 149.840912][ T4787] EXT4-fs (loop2): 1 orphan inode deleted [ 149.856009][ T4787] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 149.857974][ T4786] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.899486][ T3477] udevd[3477]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 149.903737][ T4793] serio: Serial port ptm0 [ 149.929778][ T368] attempt to access beyond end of device [ 149.929778][ T368] loop1: rw=2049, want=41056, limit=40427 [ 149.944715][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 149.945335][ T4795] binder: 4794:4795 ioctl c018620b 0 returned -14 [ 149.967675][ T4787] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1753: invalid indirect mapped block 234881024 (level 0) [ 149.967872][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 150.095626][ T4808] loop0: detected capacity change from 0 to 256 [ 150.202960][ T4820] loop2: detected capacity change from 0 to 512 [ 150.264489][ T45] device bridge_slave_1 left promiscuous mode [ 150.270499][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.278523][ T45] device bridge_slave_0 left promiscuous mode [ 150.284713][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.292778][ T45] device veth1_macvtap left promiscuous mode [ 150.298617][ T45] device veth0_vlan left promiscuous mode [ 150.304232][ T312] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 150.313244][ T4820] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.324594][ T4820] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038 (0x7fffffff) [ 150.435573][ T4823] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.442516][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.449611][ T4823] device bridge_slave_0 entered promiscuous mode [ 150.456656][ T4823] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.463582][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.470735][ T4823] device bridge_slave_1 entered promiscuous mode [ 150.522315][ T4823] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.529180][ T4823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.536302][ T4823] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.543071][ T4823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.565643][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.573312][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.580406][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.591712][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.599847][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.606691][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.615330][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.623597][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.630422][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.643817][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.664051][ T4823] device veth0_vlan entered promiscuous mode [ 150.671054][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.680022][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.687945][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.695007][ T310] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 150.702579][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.709781][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.717437][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 150.728416][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 150.739644][ T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.752458][ T312] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.755024][ T4823] device veth1_macvtap entered promiscuous mode [ 150.761341][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.780442][ T312] usb 4-1: config 0 descriptor?? [ 150.791969][ T2307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.802039][ T4802] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.809867][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.821604][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.393405][ T45] device bridge_slave_1 left promiscuous mode [ 151.399380][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.442422][ T45] device bridge_slave_0 left promiscuous mode [ 151.448406][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.503091][ T45] device veth1_macvtap left promiscuous mode [ 151.508934][ T45] device veth0_vlan left promiscuous mode [ 151.672003][ T310] usb 3-1: device descriptor read/all, error -71 [ 151.673112][ T4842] loop4: detected capacity change from 0 to 256 [ 151.739400][ T4842] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 151.832982][ T312] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 151.840304][ T312] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 151.840766][ T4863] loop1: detected capacity change from 0 to 256 [ 151.856108][ T312] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 151.865237][ T312] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 151.872755][ T312] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 151.880051][ T312] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 151.882583][ T4863] exfat: Deprecated parameter 'namecase' [ 151.892711][ T312] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 151.893246][ T4863] exfat: Deprecated parameter 'utf8' [ 151.899838][ T312] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 151.905342][ T4863] exfat: Deprecated parameter 'namecase' [ 151.917909][ T312] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 151.925202][ T312] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 151.932442][ T312] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 151.939675][ T312] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 151.946886][ T312] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 151.954392][ T312] plantronics 0003:047F:FFFF.0041: No inputs registered, leaving [ 151.957020][ T4863] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 151.980867][ T312] plantronics 0003:047F:FFFF.0041: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 152.035074][ T4873] tipc: Started in network mode [ 152.039794][ T4873] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 152.046172][ T517] usb 4-1: USB disconnect, device number 26 [ 152.051553][ T4876] loop1: detected capacity change from 0 to 512 [ 152.063777][ T4873] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 152.073327][ T4873] tipc: Enabled bearer , priority 10 [ 152.084674][ T324] udevd[324]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 152.127130][ T4876] EXT4-fs (loop1): 1 truncate cleaned up [ 152.140254][ T4884] loop0: detected capacity change from 0 to 128 [ 152.146490][ T4876] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 152.171212][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 152.187321][ T3477] udevd[3477]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 152.214654][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:0' failed: Read-only file system [ 152.272661][ T4896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4896 comm=syz.1.1797 [ 152.312391][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 152.312409][ T30] audit: type=1326 audit(1725287778.712:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c3d3aeb9 code=0x7ffc0000 [ 152.342264][ T30] audit: type=1326 audit(1725287778.712:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c3d3aeb9 code=0x7ffc0000 [ 152.367240][ T30] audit: type=1326 audit(1725287778.712:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91c3d3aeb9 code=0x7ffc0000 [ 152.390797][ T30] audit: type=1326 audit(1725287778.712:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c3d3aeb9 code=0x7ffc0000 [ 152.414813][ T30] audit: type=1326 audit(1725287778.712:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c3d3aeb9 code=0x7ffc0000 [ 152.438911][ T30] audit: type=1326 audit(1725287778.712:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91c3d3aeb9 code=0x7ffc0000 [ 152.462549][ T30] audit: type=1326 audit(1725287778.712:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c3d3aeb9 code=0x7ffc0000 [ 152.487561][ T30] audit: type=1326 audit(1725287778.712:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c3d3aeb9 code=0x7ffc0000 [ 152.511487][ T30] audit: type=1326 audit(1725287778.712:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91c3d3aeb9 code=0x7ffc0000 [ 152.538130][ T30] audit: type=1326 audit(1725287778.742:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c3d3aeb9 code=0x7ffc0000 [ 152.561675][ T20] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 152.992069][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.002940][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.012740][ T20] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 153.021570][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.030379][ T20] usb 5-1: config 0 descriptor?? [ 153.041974][ T517] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 153.075608][ T2307] tipc: Node number set to 1 [ 153.281969][ T517] usb 2-1: Using ep0 maxpacket: 32 [ 153.371985][ T2601] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 154.542649][ T517] usb 2-1: device descriptor read/all, error -71 [ 154.550049][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1821'. [ 154.582532][ T4949] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 154.832014][ T2307] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 154.992059][ T297] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 155.091994][ T2307] usb 4-1: Using ep0 maxpacket: 32 [ 155.261972][ T297] usb 1-1: Using ep0 maxpacket: 16 [ 155.417966][ T4969] loop1: detected capacity change from 0 to 131072 [ 155.442167][ T2307] usb 4-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 155.451030][ T2307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.458866][ T2307] usb 4-1: Product: syz [ 155.462920][ T2307] usb 4-1: Manufacturer: syz [ 155.467260][ T2307] usb 4-1: SerialNumber: syz [ 155.472702][ T4969] F2FS-fs (loop1): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 155.481107][ T4969] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 155.492293][ T4969] F2FS-fs (loop1): invalid crc value [ 155.493993][ T324] udevd[324]: symlink '../../loop1' '/dev/disk/by-uuid/ae71b7fd-767a-4c88-a53b-ea5e39a5f101.tmp-b7:1' failed: Read-only file system [ 155.499348][ T4969] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.548835][ T4969] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 155.555961][ T4969] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 155.576745][ T324] udevd[324]: symlink '../../loop1' '/dev/disk/by-uuid/ae71b7fd-767a-4c88-a53b-ea5e39a5f101.tmp-b7:1' failed: Read-only file system [ 155.592193][ T297] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 155.606159][ T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.614403][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 155.620148][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 155.628408][ T4969] F2FS-fs (loop1): inconsistent inode status, skip recovering inline_dots inode (ino:8, i_mode:24584, pino:3) [ 155.640400][ T297] usb 1-1: Product: syz [ 155.644991][ T20] usb 5-1: USB disconnect, device number 26 [ 155.650800][ T297] usb 1-1: Manufacturer: syz [ 155.655458][ T297] usb 1-1: SerialNumber: syz [ 155.662949][ T297] r8152-cfgselector 1-1: config 0 descriptor?? [ 155.722131][ T2307] aqc111: probe of 4-1:1.0 failed with error -22 [ 155.740386][ T2307] usb 4-1: USB disconnect, device number 27 [ 155.797313][ T4993] loop2: detected capacity change from 0 to 256 [ 155.853332][ T4993] FAT-fs (loop2): Directory bread(block 64) failed [ 155.865244][ T4993] FAT-fs (loop2): Directory bread(block 65) failed [ 155.871627][ T4993] FAT-fs (loop2): Directory bread(block 66) failed [ 155.878460][ T4993] FAT-fs (loop2): Directory bread(block 67) failed [ 155.885264][ T4993] FAT-fs (loop2): Directory bread(block 68) failed [ 155.892308][ T4993] FAT-fs (loop2): Directory bread(block 69) failed [ 155.904707][ T4993] FAT-fs (loop2): Directory bread(block 70) failed [ 155.911061][ T4993] FAT-fs (loop2): Directory bread(block 71) failed [ 155.917604][ T4993] FAT-fs (loop2): Directory bread(block 72) failed [ 155.924108][ T4993] FAT-fs (loop2): Directory bread(block 73) failed [ 155.942165][ T297] r8152-cfgselector 1-1: Unknown version 0x0000 [ 156.010154][ T8] attempt to access beyond end of device [ 156.010154][ T8] loop2: rw=1, want=1228, limit=256 [ 156.032157][ T20] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 156.086446][ T5016] loop2: detected capacity change from 0 to 128 [ 156.160085][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-uuid/8AF2-7539.tmp-b7:2' failed: Read-only file system [ 156.172200][ T297] r8152-cfgselector 1-1: Unknown version 0x0000 [ 156.179186][ T297] r8152-cfgselector 1-1: bad CDC descriptors [ 156.213085][ T297] r8152-cfgselector 1-1: Unknown version 0x0000 [ 156.225632][ T297] r8152-cfgselector 1-1: USB disconnect, device number 28 [ 156.272046][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 156.281969][ T312] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 156.374359][ T5020] loop2: detected capacity change from 0 to 32768 [ 156.422681][ T5020] loop2: p1 p2 p3 < p5 p6 > [ 156.427220][ T5020] loop2: p1 size 242222080 extends beyond EOD, truncated [ 156.434939][ T5020] loop2: p2 start 4294967295 is beyond EOD, truncated [ 156.450649][ T3477] udevd[3477]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 156.450671][ T466] udevd[466]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 156.461710][ T470] udevd[470]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 156.503093][ T5035] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.514346][ T5035] FAT-fs (loop3): unable to read boot sector [ 156.532008][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 156.556156][ T5037] tipc: Started in network mode [ 156.560950][ T5037] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 156.573242][ T5037] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:e000:0002 [ 156.581155][ T5037] tipc: Enabled bearer , priority 10 [ 156.587303][ T20] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 156.596551][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.608716][ T20] usb 5-1: Product: syz [ 156.613184][ T20] usb 5-1: Manufacturer: syz [ 156.617909][ T20] usb 5-1: SerialNumber: syz [ 156.623329][ T20] r8152-cfgselector 5-1: config 0 descriptor?? [ 156.657617][ T5045] loop0: detected capacity change from 0 to 512 [ 156.664373][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.675185][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.688217][ T312] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 156.697166][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.708103][ T312] usb 2-1: config 0 descriptor?? [ 156.716092][ T5045] EXT4-fs (loop0): 1 orphan inode deleted [ 156.721695][ T5045] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 156.745530][ T5045] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038 (0x7fffffff) [ 156.872004][ T2601] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 156.882149][ T20] r8152-cfgselector 5-1: Unknown version 0x0000 [ 156.912109][ T20] r8152-cfgselector 5-1: Unknown version 0x0000 [ 156.918295][ T20] r8152-cfgselector 5-1: bad CDC descriptors [ 156.942458][ T20] r8152-cfgselector 5-1: Unknown version 0x0000 [ 156.954050][ T20] r8152-cfgselector 5-1: USB disconnect, device number 27 [ 156.992401][ T297] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 157.029816][ T5073] loop0: detected capacity change from 0 to 512 [ 157.074783][ T5073] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1876: casefold flag without casefold feature [ 157.087574][ T5073] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.1876: missing EA_INODE flag [ 157.099074][ T5073] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1876: error while reading EA inode 2 err=-117 [ 157.111423][ T5073] EXT4-fs (loop0): 1 orphan inode deleted [ 157.117037][ T2601] usb 3-1: Using ep0 maxpacket: 16 [ 157.117216][ T5073] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.137046][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 157.141197][ T5073] overlayfs: invalid origin (0000) [ 157.213595][ T312] savu 0003:1E7D:2D5A.0042: item fetching failed at offset 2/5 [ 157.221218][ T312] savu 0003:1E7D:2D5A.0042: parse failed [ 157.226803][ T312] savu: probe of 0003:1E7D:2D5A.0042 failed with error -22 [ 157.242049][ T2601] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 157.251730][ T2601] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.262549][ T2601] usb 3-1: config 0 has no interface number 0 [ 157.268453][ T2601] usb 3-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.296984][ T5080] loop0: detected capacity change from 0 to 512 [ 157.362566][ T5080] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 157.368429][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 157.369820][ T5080] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.395295][ T297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.396664][ T5080] EXT4-fs (loop0): 1 orphan inode deleted [ 157.412920][ T2601] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 157.413200][ T5083] loop4: detected capacity change from 0 to 1024 [ 157.421776][ T2601] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 157.421803][ T2601] usb 3-1: Product: syz [ 157.428109][ T297] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.452560][ T5080] EXT4-fs (loop0): 1 truncate cleaned up [ 157.458018][ T5080] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,nolazytime,mblk_io_submit,inode_readahead_blks=0x0000000000000004,block_validity,quota,,errors=continue. Quota mode: writeback. [ 157.477197][ T297] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.478132][ T2601] usb 3-1: SerialNumber: syz [ 157.486116][ T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.490786][ T310] usb 2-1: USB disconnect, device number 32 [ 157.504350][ T297] usb 4-1: config 0 descriptor?? [ 157.511788][ T5080] EXT4-fs (loop0): shut down requested (2) [ 157.512595][ T2601] usb 3-1: config 0 descriptor?? [ 157.522287][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 157.522332][ T30] audit: type=1400 audit(1725287783.912:1424): avc: denied { create } for pid=5079 comm="syz.0.1879" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 157.542316][ T466] udevd[466]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 157.556405][ T470] udevd[470]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 157.573830][ T5083] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.589405][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 157.604559][ T470] udevd[470]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 157.629647][ T5089] syz.0.1883[5089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.629708][ T5089] syz.0.1883[5089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.645859][ T5089] loop0: detected capacity change from 0 to 512 [ 157.665258][ T30] audit: type=1326 audit(1725287784.062:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5090 comm="syz.4.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778eed8eb9 code=0x7ffc0000 [ 157.690761][ T5089] EXT4-fs (loop0): orphan cleanup on readonly fs [ 157.700669][ T30] audit: type=1326 audit(1725287784.082:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5090 comm="syz.4.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f778eed8eb9 code=0x7ffc0000 [ 157.702724][ T312] tipc: Node number set to 1 [ 157.724836][ T30] audit: type=1326 audit(1725287784.082:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5090 comm="syz.4.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778eed8eb9 code=0x7ffc0000 [ 157.728471][ T5089] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.1883: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 157.756959][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 157.783118][ T5089] EXT4-fs error (device loop0): ext4_quota_enable:6381: comm syz.0.1883: Bad quota inode: 4, type: 1 [ 157.794171][ T5089] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 157.810989][ T5089] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 157.817767][ T5089] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.833767][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1885'. [ 157.839431][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 157.843425][ T2601] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 157.871224][ T5089] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 157.872681][ T2601] usb 3-1: USB disconnect, device number 30 [ 157.889935][ T5089] EXT4-fs warning (device loop0): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 158.013431][ T297] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 158.050627][ T297] plantronics 0003:047F:FFFF.0043: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 158.166305][ T30] audit: type=1400 audit(1725287784.562:1428): avc: denied { setopt } for pid=5129 comm="syz.1.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.223562][ T292] usb 4-1: USB disconnect, device number 28 [ 158.267870][ T5134] loop0: detected capacity change from 0 to 256 [ 158.310249][ T5140] loop1: detected capacity change from 0 to 512 [ 158.353140][ T30] audit: type=1400 audit(1725287784.752:1429): avc: denied { getopt } for pid=5133 comm="syz.0.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 158.382612][ T324] udevd[324]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 158.399147][ T5140] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,,errors=continue. Quota mode: writeback. [ 158.412007][ T2601] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 158.423760][ T5140] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038 (0x7fffffff) [ 158.440702][ T3477] udevd[3477]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 158.456631][ T5147] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 158.470594][ T5147] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 158.523310][ T30] audit: type=1326 audit(1725287784.922:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b71a6eb9 code=0x7ffc0000 [ 158.546690][ T30] audit: type=1326 audit(1725287784.922:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f80b71a6eb9 code=0x7ffc0000 [ 158.570055][ T30] audit: type=1326 audit(1725287784.922:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b71a6eb9 code=0x7ffc0000 [ 158.593481][ T30] audit: type=1326 audit(1725287784.952:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b71a6eb9 code=0x7ffc0000 [ 158.692047][ T297] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 158.707900][ T5172] loop0: detected capacity change from 0 to 8192 [ 158.762127][ T292] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 158.782063][ T2601] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 158.792257][ T2601] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 158.803141][ T2601] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 158.821555][ T5174] syz.0.1917[5174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.821614][ T5174] syz.0.1917[5174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.878018][ T5180] syz.0.1920[5180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.889741][ T5180] syz.0.1920[5180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.972105][ T2601] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.992583][ T2601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.000481][ T2601] usb 5-1: Product: syz [ 159.004830][ T2601] usb 5-1: Manufacturer: syz [ 159.009233][ T2601] usb 5-1: SerialNumber: syz [ 159.084003][ T5189] loop0: detected capacity change from 0 to 40427 [ 159.112023][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.122072][ T292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.133419][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.133456][ T297] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 159.144989][ T292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.161575][ T292] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 159.170557][ T292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.170790][ T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.179415][ T292] usb 2-1: config 0 descriptor?? [ 159.190330][ T5189] F2FS-fs (loop0): Found nat_bits in checkpoint [ 159.199535][ T297] usb 3-1: config 0 descriptor?? [ 159.224815][ T5189] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.244988][ T4722] attempt to access beyond end of device [ 159.244988][ T4722] loop0: rw=2049, want=45112, limit=40427 [ 159.332071][ T2601] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 159.340400][ T2601] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 159.347986][ T2601] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 159.356705][ T2601] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 159.410808][ T5202] syz.0.1928[5202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.410881][ T5202] syz.0.1928[5202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.426566][ T2601] usb 5-1: USB disconnect, device number 28 [ 159.463634][ T5205] syz.0.1929[5205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.463742][ T5205] syz.0.1929[5205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.662922][ T292] belkin 0003:1020:0006.0044: report_id 0 is invalid [ 159.680551][ T292] belkin 0003:1020:0006.0044: item 0 0 1 8 parsing failed [ 159.682339][ T297] hid (null): bogus close delimiter [ 159.687744][ T292] belkin 0003:1020:0006.0044: parse failed [ 159.698192][ T292] belkin: probe of 0003:1020:0006.0044 failed with error -22 [ 159.811988][ T312] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 159.864698][ T2601] usb 2-1: USB disconnect, device number 33 [ 159.902305][ T297] usb 3-1: language id specifier not provided by device, defaulting to English [ 160.052026][ T312] usb 1-1: Using ep0 maxpacket: 16 [ 160.061973][ T292] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 160.071998][ T310] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 160.172000][ T312] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 160.179804][ T312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.189816][ T312] usb 1-1: config 0 has no interface number 0 [ 160.195722][ T312] usb 1-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.321978][ T292] usb 4-1: Using ep0 maxpacket: 32 [ 160.322080][ T312] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 160.336011][ T312] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 160.343995][ T312] usb 1-1: Product: syz [ 160.347970][ T312] usb 1-1: SerialNumber: syz [ 160.354599][ T312] usb 1-1: config 0 descriptor?? [ 160.432047][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.442798][ T310] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.455650][ T310] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.462028][ T292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.464497][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.475591][ T292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.483835][ T310] usb 5-1: config 0 descriptor?? [ 160.492574][ T292] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 160.506283][ T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.514754][ T292] usb 4-1: config 0 descriptor?? [ 160.562015][ T297] uclogic 0003:256C:006D.0045: failed retrieving string descriptor #100: -71 [ 160.570665][ T297] uclogic 0003:256C:006D.0045: failed retrieving pen parameters: -71 [ 160.578720][ T297] uclogic 0003:256C:006D.0045: failed probing pen v1 parameters: -71 [ 160.586801][ T297] uclogic 0003:256C:006D.0045: failed probing parameters: -71 [ 160.594199][ T297] uclogic: probe of 0003:256C:006D.0045 failed with error -71 [ 160.606140][ T297] usb 3-1: USB disconnect, device number 31 [ 160.632719][ T312] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 160.640175][ T312] usb 1-1: USB disconnect, device number 29 [ 160.652016][ T2307] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 160.891971][ T2307] usb 2-1: Using ep0 maxpacket: 32 [ 160.973121][ T292] lua 0003:1E7D:2C2E.0047: global environment stack underflow [ 160.973373][ T310] plantronics 0003:047F:FFFF.0046: No inputs registered, leaving [ 160.981785][ T292] lua 0003:1E7D:2C2E.0047: item 0 0 1 11 parsing failed [ 160.992244][ T310] plantronics 0003:047F:FFFF.0046: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 160.999844][ T292] lua 0003:1E7D:2C2E.0047: parse failed [ 161.012398][ T292] lua: probe of 0003:1E7D:2C2E.0047 failed with error -22 [ 161.022027][ T2307] usb 2-1: config 0 has no interfaces? [ 161.090632][ T5226] loop2: detected capacity change from 0 to 128 [ 161.115652][ T5226] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.126150][ T5226] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038 (0x7fffffff) [ 161.140948][ T5226] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 161.150406][ T5226] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 161.182020][ T2307] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 161.190885][ T2307] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 161.202923][ T3596] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory hole found for htree leaf block [ 161.211966][ T2307] usb 2-1: Product: syz [ 161.219697][ T2307] usb 2-1: Manufacturer: syz [ 161.224182][ T2307] usb 2-1: SerialNumber: syz [ 161.232240][ T2307] usb 2-1: config 0 descriptor?? [ 161.237341][ T292] usb 4-1: USB disconnect, device number 29 [ 161.237374][ T3596] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory hole found for htree leaf block [ 161.261027][ T3596] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory hole found for htree leaf block [ 161.262905][ T517] usb 5-1: USB disconnect, device number 29 [ 161.279828][ T3596] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory hole found for htree leaf block [ 161.293565][ T3596] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory hole found for htree leaf block [ 161.307563][ T3596] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory hole found for htree leaf block [ 161.320956][ T3596] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory hole found for htree leaf block [ 161.334176][ T3596] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory hole found for htree leaf block [ 161.347540][ T3596] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory hole found for htree leaf block [ 161.361012][ T3596] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory hole found for htree leaf block [ 161.435823][ T8] tipc: Disabling bearer [ 161.441190][ T8] tipc: Left network mode [ 161.447115][ T5232] bridge0: port 3(vlan2) entered blocking state [ 161.453342][ T5232] bridge0: port 3(vlan2) entered disabled state [ 161.459767][ T5232] device vlan2 entered promiscuous mode [ 161.487838][ T3643] usb 2-1: USB disconnect, device number 34 [ 161.568225][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.575121][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.582521][ T5238] device bridge_slave_0 entered promiscuous mode [ 161.591648][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.601662][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.609351][ T5238] device bridge_slave_1 entered promiscuous mode [ 161.703593][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.710433][ T5238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.717563][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.724333][ T5238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.740524][ T5255] loop0: detected capacity change from 0 to 2048 [ 161.750032][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.758186][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.766862][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.781446][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.789742][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.793307][ T5255] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.796610][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.814928][ T5257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1953'. [ 161.818667][ T5255] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 161.838563][ T5255] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 161.851025][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.860671][ T5255] EXT4-fs (loop0): This should not happen!! Data will be lost [ 161.860671][ T5255] [ 161.863422][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.877016][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.884212][ T5255] EXT4-fs (loop0): Total free blocks count 0 [ 161.890054][ T5255] EXT4-fs (loop0): Free/Dirty block details [ 161.902056][ T5255] EXT4-fs (loop0): free_blocks=2415919104 [ 161.907676][ T5255] EXT4-fs (loop0): dirty_blocks=16 [ 161.912825][ T5255] EXT4-fs (loop0): Block reservation details [ 161.912953][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.918660][ T5255] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 161.941765][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.950407][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.962965][ T2307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.970859][ T2307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.983507][ T2307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.002771][ T5238] device veth0_vlan entered promiscuous mode [ 162.033278][ T5270] loop3: detected capacity change from 0 to 128 [ 162.041318][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.050667][ T5238] device veth1_macvtap entered promiscuous mode [ 162.065622][ T5270] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 162.076882][ T312] kernel write not supported for file /83/timerslack_ns (pid: 312 comm: kworker/0:4) [ 162.083355][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.114389][ T8] device bridge_slave_1 left promiscuous mode [ 162.120358][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.149048][ T8] device bridge_slave_0 left promiscuous mode [ 162.161618][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.170705][ T8] device veth1_macvtap left promiscuous mode [ 162.176720][ T8] device veth0_vlan left promiscuous mode [ 162.184781][ T5290] loop3: detected capacity change from 0 to 128 [ 162.191387][ T5292] loop0: detected capacity change from 0 to 512 [ 162.201539][ T3477] udevd[3477]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 162.216548][ T5292] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1968: bg 0: block 5: invalid block bitmap [ 162.228990][ T5292] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6184: Corrupt filesystem [ 162.237665][ T5292] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1968: invalid indirect mapped block 3 (level 2) [ 162.252013][ T5292] EXT4-fs (loop0): 1 orphan inode deleted [ 162.257558][ T5292] EXT4-fs (loop0): 1 truncate cleaned up [ 162.264173][ T5290] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.274595][ T5292] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.285418][ T5290] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 162.300388][ T5292] EXT4-fs (loop0): shut down requested (2) [ 162.324092][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 162.338035][ T3477] udevd[3477]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system [ 162.360602][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.514613][ T5303] SELinux: security_context_str_to_sid(E) failed for (dev ?, type ?) errno=-22 [ 162.524002][ T5303] SELinux: security_context_str_to_sid(E) failed for (dev proc, type proc) errno=-22 [ 162.705946][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 162.705963][ T30] audit: type=1326 audit(1725287789.146:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.3.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca0d2beb9 code=0x7ffc0000 [ 162.735795][ T30] audit: type=1326 audit(1725287789.146:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.3.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca0d2beb9 code=0x7ffc0000 [ 162.748427][ T2307] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 162.761104][ T30] audit: type=1326 audit(1725287789.156:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.3.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f0ca0d2beb9 code=0x7ffc0000 [ 162.789507][ T312] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 162.790068][ T30] audit: type=1326 audit(1725287789.156:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.3.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca0d2beb9 code=0x7ffc0000 [ 162.820448][ T30] audit: type=1326 audit(1725287789.156:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.3.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca0d2beb9 code=0x7ffc0000 [ 162.883994][ T30] audit: type=1326 audit(1725287789.326:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5328 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca0d2beb9 code=0x7ffc0000 [ 162.907788][ T30] audit: type=1326 audit(1725287789.326:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5328 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f0ca0d2beb9 code=0x7ffc0000 [ 162.931901][ T30] audit: type=1326 audit(1725287789.326:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5328 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca0d2beb9 code=0x7ffc0000 [ 162.972468][ T30] audit: type=1326 audit(1725287789.346:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5328 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca0d2beb9 code=0x7ffc0000 [ 163.009379][ T5336] loop1: detected capacity change from 0 to 256 [ 163.025371][ T5336] exfat: Deprecated parameter 'namecase' [ 163.037019][ T5340] loop4: detected capacity change from 0 to 1024 [ 163.048264][ T5336] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 163.065208][ T30] audit: type=1400 audit(1725287789.506:1470): avc: denied { setattr } for pid=5335 comm="syz.1.1986" name="file0" dev="loop1" ino=1048762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.143253][ T3477] udevd[3477]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 163.155927][ T5340] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 163.177799][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.191905][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.194154][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 163.203989][ T5340] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 163.219912][ T312] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 163.229579][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.237665][ T5340] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 163.245693][ T5340] EXT4-fs (loop4): Remounting file system with no journal so ignoring journalled data option [ 163.255969][ T312] usb 1-1: config 0 descriptor?? [ 163.261284][ T5340] EXT4-fs (loop4): re-mounted. Opts: noblock_validity,mblk_io_submit,nomblk_io_submit,init_itable=0x0000000000000000,discard,journal_ioprio=0x0000000000000003,nodiscard,data=writeback,. Quota mode: writeback. [ 163.281635][ T2601] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 163.301696][ T4165] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /88/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0 [ 163.323606][ T4165] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0 [ 163.343675][ T4165] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /88/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0 [ 163.362079][ T2307] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 163.374066][ T2307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.374578][ T4165] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0 [ 163.381865][ T2307] usb 3-1: Product: syz [ 163.381884][ T2307] usb 3-1: Manufacturer: syz [ 163.410335][ T4165] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /88/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0 [ 163.410798][ T2307] usb 3-1: SerialNumber: syz [ 163.432077][ T4165] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0 [ 163.455825][ T2307] usb 3-1: config 0 descriptor?? [ 163.465593][ T4165] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /88/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0 [ 163.488980][ T4165] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0 [ 163.509408][ T4165] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /88/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0 [ 163.531047][ T5316] syz.0.1977[5316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.531130][ T5316] syz.0.1977[5316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.545668][ T4165] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0 [ 163.601974][ T2601] usb 4-1: Using ep0 maxpacket: 32 [ 163.956536][ T2307] usb 3-1: USB disconnect, device number 32 [ 163.977452][ T5357] loop1: detected capacity change from 0 to 512 [ 164.022080][ T2601] usb 4-1: device descriptor read/all, error -71 [ 164.025240][ T5357] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.033827][ T324] udevd[324]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 164.039622][ T5357] EXT4-fs (loop1): 1 truncate cleaned up [ 164.054556][ T5357] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.071551][ T324] udevd[324]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 164.099768][ T324] udevd[324]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 164.189953][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.197076][ T5361] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.204757][ T5361] device bridge_slave_0 entered promiscuous mode [ 164.211900][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.219035][ T5361] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.226484][ T5361] device bridge_slave_1 entered promiscuous mode [ 164.321112][ T5366] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.328014][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.335645][ T5366] device bridge_slave_0 entered promiscuous mode [ 164.342935][ T5366] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.349780][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.357549][ T5366] device bridge_slave_1 entered promiscuous mode [ 164.392528][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.399385][ T5361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.406519][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.413286][ T5361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.420542][ T312] hid-led: probe of 0003:27B8:01ED.0048 failed with error -71 [ 164.429186][ T312] usb 1-1: USB disconnect, device number 30 [ 164.478257][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.486124][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.495129][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.513562][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.521708][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.528588][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.535960][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.537080][ T5372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=5372 comm=syz.2.2002 [ 164.545268][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.563032][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.570738][ T8] device bridge_slave_1 left promiscuous mode [ 164.577214][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.584831][ T8] device bridge_slave_0 left promiscuous mode [ 164.590837][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.600397][ T8] device veth1_macvtap left promiscuous mode [ 164.608092][ T8] device veth0_vlan left promiscuous mode [ 164.711429][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.733077][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.754629][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.772760][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.780572][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.787962][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.795777][ T5361] device veth0_vlan entered promiscuous mode [ 164.817263][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.829057][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.837529][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.844409][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.851662][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.860935][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.867824][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.883637][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.891889][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.914349][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.934930][ T5361] device veth1_macvtap entered promiscuous mode [ 164.943350][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.973882][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.984288][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.992947][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.012298][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.024352][ T5366] device veth0_vlan entered promiscuous mode [ 165.030724][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.038147][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.059291][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.069119][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.080632][ T5366] device veth1_macvtap entered promiscuous mode [ 165.092444][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.100032][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.108964][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.135661][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.144112][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.189407][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.198714][ T5398] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 165.212139][ T292] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 165.266253][ T5394] loop4: detected capacity change from 0 to 40427 [ 165.345250][ T5394] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 165.351492][ T5394] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 165.353154][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 165.375469][ T5394] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 165.400636][ T5394] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 165.407717][ T5394] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 165.420688][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 165.442920][ T5361] attempt to access beyond end of device [ 165.442920][ T5361] loop4: rw=2049, want=45104, limit=40427 [ 165.492988][ T8] device bridge_slave_1 left promiscuous mode [ 165.498990][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.506953][ T8] device bridge_slave_0 left promiscuous mode [ 165.513366][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.521800][ T8] device veth1_macvtap left promiscuous mode [ 165.527992][ T8] device veth0_vlan left promiscuous mode [ 165.563800][ T5404] loop3: detected capacity change from 0 to 256 [ 165.582118][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.594257][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.605490][ T292] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 165.614844][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.644436][ T292] usb 1-1: config 0 descriptor?? [ 165.695623][ T5412] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 165.709692][ T5412] SELinux: security_context_str_to_sid(staff_u) failed for (dev tmpfs, type tmpfs) errno=-22 [ 165.951995][ T297] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 165.993122][ T5446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2031'. [ 166.123722][ T292] hid-led 0003:0FC5:B080.0049: item fetching failed at offset 0/3 [ 166.131797][ T292] hid-led: probe of 0003:0FC5:B080.0049 failed with error -22 [ 166.312083][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.322926][ T297] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.326845][ T292] usb 1-1: USB disconnect, device number 31 [ 166.335751][ T297] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.350346][ T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.359840][ T297] usb 3-1: config 0 descriptor?? [ 166.843160][ T297] plantronics 0003:047F:FFFF.004A: No inputs registered, leaving [ 166.852716][ T297] plantronics 0003:047F:FFFF.004A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 166.922038][ T312] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 166.940835][ T5470] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5470 comm=syz.3.2042 [ 167.003831][ T2841] Bluetooth: hci1: sending frame failed (-49) [ 167.047217][ T297] usb 3-1: USB disconnect, device number 33 [ 167.222178][ T63] Bluetooth: hci0: command 0x1003 tx timeout [ 167.228159][ T2841] Bluetooth: hci0: sending frame failed (-49) [ 167.262000][ T292] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 167.292059][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 167.303172][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 167.314114][ T312] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.326735][ T312] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.335613][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.344357][ T312] usb 5-1: config 0 descriptor?? [ 167.362076][ T5460] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.512015][ T292] usb 1-1: Using ep0 maxpacket: 8 [ 167.642057][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.652936][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.662412][ T292] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 167.674997][ T292] usb 1-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 167.683844][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.692238][ T292] usb 1-1: config 0 descriptor?? [ 167.805259][ T5491] netem: unknown loss type 0 [ 167.809855][ T5491] netem: change failed [ 167.823002][ T312] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 167.830362][ T312] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 167.837890][ T312] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 167.845373][ T312] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 167.853003][ T312] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 167.860278][ T312] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 167.868055][ T312] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 167.875505][ T312] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 167.883149][ T312] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 167.890582][ T312] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 167.898230][ T312] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 167.903657][ T5496] loop2: detected capacity change from 0 to 1024 [ 167.906054][ T312] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 167.919082][ T312] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 167.926943][ T312] plantronics 0003:047F:FFFF.004B: No inputs registered, leaving [ 167.936002][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 167.939321][ T312] plantronics 0003:047F:FFFF.004B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 167.960021][ T5496] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 167.960021][ T5496] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 167.960021][ T5496] [ 167.978351][ T5496] EXT4-fs (loop2): Ignoring removed nobh option [ 168.003597][ T5496] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,bsddf,sysvgroups,nouser_xattr,debug_want_extra_isize=0x0000000000000080,stripe=0x0000000000000005,jqfmt=vfsold,noauto_da_alloc,nobh,,errors=continue. Quota mode: none. [ 168.032857][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 168.051601][ T3643] usb 5-1: USB disconnect, device number 30 [ 168.203294][ T292] ntrig 0003:1B96:0010.004C: item fetching failed at offset 5/7 [ 168.211055][ T292] ntrig 0003:1B96:0010.004C: parse failed [ 168.216769][ T292] ntrig: probe of 0003:1B96:0010.004C failed with error -22 [ 168.256470][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 168.256488][ T30] audit: type=1400 audit(1725287794.696:1500): avc: denied { read } for pid=5507 comm="syz.2.2056" dev="sockfs" ino=38739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.302431][ T5512] loop2: detected capacity change from 0 to 512 [ 168.334947][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 168.344492][ T5512] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #3: comm syz.2.2058: corrupted inode contents [ 168.357958][ T5512] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #3: comm syz.2.2058: mark_inode_dirty error [ 168.370031][ T5512] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #3: comm syz.2.2058: corrupted inode contents [ 168.381886][ T5512] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.2058: mark_inode_dirty error [ 168.393454][ T5512] Quota error (device loop2): write_blk: dquota write failed [ 168.400679][ T5512] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 168.410711][ T5512] EXT4-fs error (device loop2): ext4_acquire_dquot:6187: comm syz.2.2058: Failed to acquire dquot type 0 [ 168.422384][ T312] usb 1-1: USB disconnect, device number 32 [ 168.424763][ T5512] EXT4-fs (loop2): 1 orphan inode deleted [ 168.433934][ T5512] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.445023][ T5512] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 168.459889][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 168.665362][ T30] audit: type=1326 audit(1725287795.106:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89ad7beb9 code=0x7ffc0000 [ 168.689071][ T30] audit: type=1326 audit(1725287795.106:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc89ad7beb9 code=0x7ffc0000 [ 168.713054][ T30] audit: type=1326 audit(1725287795.126:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89ad7beb9 code=0x7ffc0000 [ 168.736525][ T30] audit: type=1326 audit(1725287795.126:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89ad7beb9 code=0x7ffc0000 [ 168.760179][ T30] audit: type=1326 audit(1725287795.126:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc89ad7beb9 code=0x7ffc0000 [ 168.783669][ T30] audit: type=1326 audit(1725287795.156:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89ad7beb9 code=0x7ffc0000 [ 168.807178][ T30] audit: type=1326 audit(1725287795.156:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc89ad7beb9 code=0x7ffc0000 [ 168.830199][ T3643] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 168.962233][ T5524] loop0: detected capacity change from 0 to 1024 [ 168.996333][ T5524] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 169.006473][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 169.020308][ T5524] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000003,sysvgroups,grpquota,debug_want_extra_isize=0x0000000000000080,user_xattr,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 169.050888][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 169.062272][ T297] Bluetooth: hci1: command 0x1003 tx timeout [ 169.068522][ T2841] Bluetooth: hci1: sending frame failed (-49) [ 169.232040][ T3643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.242872][ T3643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.243449][ T5522] loop4: detected capacity change from 0 to 131072 [ 169.252760][ T3643] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.271502][ T3643] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 169.280328][ T3643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.288801][ T3643] usb 3-1: config 0 descriptor?? [ 169.302250][ T312] Bluetooth: hci0: command 0x1001 tx timeout [ 169.308101][ T2841] Bluetooth: hci0: sending frame failed (-49) [ 169.310096][ T5522] F2FS-fs (loop4): Test dummy encryption mode enabled [ 169.322478][ T5522] F2FS-fs (loop4): invalid crc value [ 169.327903][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:4' failed: Read-only file system [ 169.329371][ T5522] F2FS-fs (loop4): Found nat_bits in checkpoint [ 169.371564][ T5522] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 169.388835][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:4' failed: Read-only file system [ 169.492027][ T2307] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 169.613743][ T5540] syz.4.2067[5540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.613804][ T5540] syz.4.2067[5540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.648571][ T5544] loop4: detected capacity change from 0 to 16 [ 169.703678][ T5544] erofs: (device loop4): mounted with root inode @ nid 36. [ 169.708069][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 169.712707][ T5544] attempt to access beyond end of device [ 169.712707][ T5544] loop4: rw=0, want=40, limit=16 [ 169.738138][ T5544] erofs: (device loop4): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 169.747236][ T2307] usb 1-1: Using ep0 maxpacket: 8 [ 169.747472][ T5544] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 3599 @ nid 36 [ 169.761801][ T5544] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 3598 @ nid 36 [ 169.771655][ T5544] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 3597 @ nid 36 [ 169.781490][ T5544] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 3596 @ nid 36 [ 169.785926][ T3643] acrux 0003:1A34:0802.004D: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 169.802226][ T3643] acrux 0003:1A34:0802.004D: no inputs found [ 169.808023][ T3643] acrux 0003:1A34:0802.004D: Failed to enable force feedback support, error: -19 [ 169.872027][ T2307] usb 1-1: config 0 has an invalid interface number: 241 but max is 0 [ 169.880071][ T2307] usb 1-1: config 0 has no interface number 0 [ 169.885986][ T2307] usb 1-1: config 0 interface 241 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 169.899155][ T2307] usb 1-1: config 0 interface 241 has no altsetting 0 [ 169.905769][ T2307] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 169.914624][ T2307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.923076][ T2307] usb 1-1: config 0 descriptor?? [ 169.984240][ T3643] usb 3-1: USB disconnect, device number 34 [ 170.522073][ T2307] usb 1-1: language id specifier not provided by device, defaulting to English [ 170.782055][ T2307] asix 1-1:0.241 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 170.792154][ T2307] asix: probe of 1-1:0.241 failed with error -71 [ 170.800706][ T2307] usb 1-1: USB disconnect, device number 33 [ 171.142192][ T2307] Bluetooth: hci1: command 0x1001 tx timeout [ 171.148205][ T2841] Bluetooth: hci1: sending frame failed (-49) [ 171.364505][ T5557] capability: warning: `syz.2.2074' uses 32-bit capabilities (legacy support in use) [ 171.382013][ T312] Bluetooth: hci0: command 0x1009 tx timeout [ 171.410621][ T5563] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.421703][ T5563] FAT-fs (loop5): unable to read boot sector [ 171.438795][ T5565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2078'. [ 171.532018][ T2307] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 171.599581][ T5586] loop2: detected capacity change from 0 to 256 [ 171.665612][ T5585] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 171.719951][ T5588] loop2: detected capacity change from 0 to 512 [ 171.762658][ T5588] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.768757][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 171.773933][ T5588] EXT4-fs (loop2): 1 truncate cleaned up [ 171.788931][ T5588] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.912008][ T2307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 171.923021][ T2307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 171.934854][ T2307] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.947835][ T2307] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.956931][ T2307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.967419][ T2307] usb 1-1: config 0 descriptor?? [ 171.996870][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.003772][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.004158][ T5551] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 172.011083][ T5591] device bridge_slave_0 entered promiscuous mode [ 172.026457][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.033310][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.040490][ T5591] device bridge_slave_1 entered promiscuous mode [ 172.089222][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.096080][ T5591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.103198][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.110053][ T5591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.133769][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.141516][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.149177][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.173075][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.181300][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.189887][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.196750][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.203908][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.211875][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.218742][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.225923][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.233786][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.245566][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.253746][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.260929][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.271223][ T5591] device veth0_vlan entered promiscuous mode [ 172.281654][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.294252][ T5591] device veth1_macvtap entered promiscuous mode [ 172.306979][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.315441][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.383364][ T8] device bridge_slave_1 left promiscuous mode [ 172.389357][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.397496][ T8] device bridge_slave_0 left promiscuous mode [ 172.403579][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.411675][ T8] device veth1_macvtap left promiscuous mode [ 172.417797][ T8] device veth0_vlan left promiscuous mode [ 172.463261][ T2307] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 172.480796][ T2307] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 172.498306][ T2307] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 172.508226][ T2307] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 172.515532][ T2307] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 172.526441][ T2307] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 172.533762][ T2307] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 172.541024][ T2307] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 172.548248][ T2307] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 172.555481][ T2307] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 172.562751][ T2307] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 172.564600][ T5602] loop2: detected capacity change from 0 to 40427 [ 172.569938][ T2307] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 172.583721][ T2307] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 172.591346][ T2307] plantronics 0003:047F:FFFF.004E: No inputs registered, leaving [ 172.599811][ T2307] plantronics 0003:047F:FFFF.004E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 172.652417][ T5602] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 172.660051][ T5602] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 172.674160][ T5602] F2FS-fs (loop2): invalid crc value [ 172.676950][ T2307] usb 1-1: USB disconnect, device number 34 [ 172.682501][ T5602] F2FS-fs (loop2): Found nat_bits in checkpoint [ 172.725084][ T5602] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 172.731999][ T5602] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 173.060863][ T5615] loop2: detected capacity change from 0 to 40427 [ 173.152662][ T5615] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 173.160452][ T5615] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 173.161903][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 173.169782][ T5615] F2FS-fs (loop2): invalid crc value [ 173.189874][ T5615] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 173.221167][ T5615] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 173.228272][ T5615] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 173.228572][ T2307] Bluetooth: hci1: command 0x1009 tx timeout [ 173.243941][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 173.359443][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 173.359460][ T30] audit: type=1326 audit(1725287799.796:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.2.2101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff37fffeb9 code=0x0 [ 173.460630][ T5631] raw_sendmsg: syz.0.2102 forgot to set AF_INET. Fix it! [ 173.596954][ T5635] loop0: detected capacity change from 0 to 40427 [ 173.682309][ T5635] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 173.689930][ T5635] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 173.691595][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 173.701228][ T5635] F2FS-fs (loop0): Found nat_bits in checkpoint [ 173.741969][ T5635] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 173.748981][ T5635] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 173.761688][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 173.993816][ T5646] netlink: 'syz.0.2107': attribute type 25 has an invalid length. [ 174.001538][ T5646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2107'. [ 174.010984][ T5646] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2107'. [ 174.019814][ T5646] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2107'. [ 174.139730][ T30] audit: type=1326 audit(1725287800.576:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b71a6eb9 code=0x7ffc0000 [ 174.163305][ T30] audit: type=1326 audit(1725287800.576:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b71a6eb9 code=0x7ffc0000 [ 174.187315][ T30] audit: type=1326 audit(1725287800.576:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f80b71a6eb9 code=0x7ffc0000 [ 174.223499][ T30] audit: type=1326 audit(1725287800.576:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b71a6eb9 code=0x7ffc0000 [ 174.246906][ T30] audit: type=1326 audit(1725287800.606:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b71a6eb9 code=0x7ffc0000 [ 174.293119][ T5663] netlink: 'syz.0.2115': attribute type 12 has an invalid length. [ 174.300838][ T5663] netlink: 'syz.0.2115': attribute type 29 has an invalid length. [ 174.308734][ T5663] netlink: 'syz.0.2115': attribute type 2 has an invalid length. [ 174.316654][ T5663] netlink: 'syz.0.2115': attribute type 2 has an invalid length. [ 174.324384][ T5663] netlink: 'syz.0.2115': attribute type 1 has an invalid length. [ 174.332003][ T5663] netlink: 'syz.0.2115': attribute type 37 has an invalid length. [ 174.339633][ T5663] netlink: 'syz.0.2115': attribute type 2 has an invalid length. [ 174.347236][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.397766][ T5674] loop0: detected capacity change from 0 to 256 [ 174.417911][ T5677] loop2: detected capacity change from 0 to 512 [ 174.468007][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 174.481459][ T5677] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 174.493728][ T5677] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 174.508051][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 174.508896][ T5677] EXT4-fs (loop2): shut down requested (0) [ 174.548149][ T5684] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2124'. [ 174.655210][ T30] audit: type=1326 audit(1725287801.096:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.0.2127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80b71a6eb9 code=0x0 [ 175.536954][ T5702] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.544167][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.551538][ T5702] device bridge_slave_0 entered promiscuous mode [ 175.561359][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.568509][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.575993][ T5702] device bridge_slave_1 entered promiscuous mode [ 175.658544][ T30] audit: type=1326 audit(1725287802.096:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.2.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff37fffeb9 code=0x7ffc0000 [ 175.685689][ T5717] loop2: detected capacity change from 0 to 512 [ 175.694197][ T30] audit: type=1326 audit(1725287802.126:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.2.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7eff37fffeb9 code=0x7ffc0000 [ 175.712625][ T5708] loop0: detected capacity change from 0 to 40427 [ 175.722414][ T30] audit: type=1326 audit(1725287802.126:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.2.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7eff37fffef3 code=0x7ffc0000 [ 175.754807][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 175.769144][ T5717] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 175.785240][ T5717] ext4 filesystem being mounted at /19/bus supports timestamps until 2038 (0x7fffffff) [ 175.795623][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 175.813662][ T3477] udevd[3477]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 175.825427][ T5708] F2FS-fs (loop0): Found nat_bits in checkpoint [ 175.837217][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.844075][ T5702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.851172][ T5702] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.857968][ T5702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.867697][ T5708] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 175.880998][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 175.886421][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.909154][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.926492][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.926533][ T4722] attempt to access beyond end of device [ 175.926533][ T4722] loop0: rw=2049, want=45104, limit=40427 [ 175.956310][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.964329][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.971177][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.978687][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.986778][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.993635][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.013031][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.029180][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.037209][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.049637][ T5702] device veth0_vlan entered promiscuous mode [ 176.066541][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.084316][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.092189][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.104241][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.115635][ T5702] device veth1_macvtap entered promiscuous mode [ 176.126753][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.136619][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.162488][ T5736] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 176.172400][ T8] device bridge_slave_1 left promiscuous mode [ 176.173138][ T5736] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22 [ 176.178423][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.196164][ T8] device bridge_slave_0 left promiscuous mode [ 176.201974][ T297] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 176.207840][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.217607][ T8] device veth1_macvtap left promiscuous mode [ 176.223643][ T8] device veth0_vlan left promiscuous mode [ 176.402040][ T6] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 176.634021][ T5742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2146'. [ 176.657283][ T5744] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2147'. [ 176.844931][ T5753] loop1: detected capacity change from 0 to 40427 [ 176.922541][ T5753] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 176.930178][ T5753] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 176.939238][ T5753] F2FS-fs (loop1): invalid crc value [ 176.945743][ T5753] F2FS-fs (loop1): Found nat_bits in checkpoint [ 176.975986][ T5753] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 176.982941][ T5753] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 177.165784][ T5767] tipc: Enabling of bearer rejected, failed to enable media [ 177.220071][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.227302][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.234824][ T5765] device bridge_slave_0 entered promiscuous mode [ 177.241813][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.248743][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.255858][ T5765] device bridge_slave_1 entered promiscuous mode [ 177.262025][ T292] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 177.311782][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.318683][ T5765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.325821][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.332675][ T5765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.357033][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.364940][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.372778][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.381861][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.390020][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.396882][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.405447][ T368] tipc: Disabling bearer [ 177.410566][ T368] tipc: Left network mode [ 177.411783][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.422777][ T2601] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.429616][ T2601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.443497][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.463589][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.473672][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.490639][ T5765] device veth0_vlan entered promiscuous mode [ 177.496962][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.504911][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.513486][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.520753][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.535040][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.543240][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.553186][ T5765] device veth1_macvtap entered promiscuous mode [ 177.562603][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.570055][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.574176][ T297] usb 3-1: device descriptor read/64, error -71 [ 177.578902][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.592096][ T6] usb 1-1: device descriptor read/64, error -71 [ 177.602261][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.610334][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.652267][ T292] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.662795][ T292] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.752062][ T292] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 177.761071][ T292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.768946][ T292] usb 2-1: SerialNumber: syz [ 177.853008][ T368] device bridge_slave_1 left promiscuous mode [ 177.859146][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.866714][ T368] device bridge_slave_0 left promiscuous mode [ 177.872755][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.880640][ T368] device veth1_macvtap left promiscuous mode [ 177.886509][ T368] device veth0_vlan left promiscuous mode [ 177.942845][ T297] usb 3-1: Using ep0 maxpacket: 16 [ 177.952044][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 178.062175][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.073375][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.074430][ T292] usb 2-1: 0:2 : does not exist [ 178.084300][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.098885][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.108731][ T297] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.121609][ T6] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 178.130532][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.138351][ T297] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 178.147664][ T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.155792][ T6] usb 1-1: config 0 descriptor?? [ 178.162635][ T292] usb 2-1: USB disconnect, device number 35 [ 178.166434][ T297] usb 3-1: config 0 descriptor?? [ 178.619705][ T5797] loop3: detected capacity change from 0 to 512 [ 178.633812][ T6] samsung 0003:0419:0001.004F: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 178.641751][ T5799] syz.1.2164[5799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.645572][ T5799] syz.1.2164[5799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.658663][ T297] ryos 0003:1E7D:31CE.0050: ignoring exceeding usage max [ 178.686317][ T3477] udevd[3477]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 178.690997][ T297] ryos 0003:1E7D:31CE.0050: ignoring exceeding usage max [ 178.704590][ T297] ryos 0003:1E7D:31CE.0050: usage index exceeded [ 178.706445][ T5797] EXT4-fs (loop3): 1 orphan inode deleted [ 178.710734][ T297] ryos 0003:1E7D:31CE.0050: item 0 0 2 2 parsing failed [ 178.710940][ T297] ryos 0003:1E7D:31CE.0050: parse failed [ 178.716954][ T5797] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 178.723196][ T297] ryos: probe of 0003:1E7D:31CE.0050 failed with error -22 [ 178.728984][ T5797] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 178.775857][ T324] udevd[324]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 178.799263][ T5804] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2169'. [ 178.814854][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 178.834406][ T292] usb 1-1: USB disconnect, device number 35 [ 178.860348][ T2601] usb 3-1: USB disconnect, device number 35 [ 179.111993][ T297] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 179.119598][ T6] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 179.354217][ T297] usb 2-1: Using ep0 maxpacket: 16 [ 179.362885][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 179.472095][ T297] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.483027][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.494517][ T297] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.504628][ T297] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 179.514352][ T297] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 179.524276][ T297] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 179.612070][ T297] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.619016][ T5830] loop2: detected capacity change from 0 to 40427 [ 179.621178][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 179.635668][ T297] usb 2-1: SerialNumber: syz [ 179.641352][ T5830] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 179.648483][ T5830] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 179.648789][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 179.656735][ T5810] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 179.673015][ T5830] F2FS-fs (loop2): invalid crc value [ 179.683162][ T5830] F2FS-fs (loop2): Found nat_bits in checkpoint [ 179.692477][ T297] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 179.700356][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.709659][ T297] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 179.716111][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.725418][ T6] usb 4-1: Product: syz [ 179.729238][ T5830] F2FS-fs (loop2): Start checkpoint disabled! [ 179.729429][ T6] usb 4-1: Manufacturer: syz [ 179.736342][ T5830] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 179.740106][ T6] usb 4-1: SerialNumber: syz [ 179.746617][ T5830] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 179.751174][ T312] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 179.764759][ T324] udevd[324]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 179.828531][ T5591] attempt to access beyond end of device [ 179.828531][ T5591] loop2: rw=524288, want=45072, limit=40427 [ 179.840237][ T5591] attempt to access beyond end of device [ 179.840237][ T5591] loop2: rw=0, want=45072, limit=40427 [ 179.870366][ T368] attempt to access beyond end of device [ 179.870366][ T368] loop2: rw=2049, want=41008, limit=40427 [ 179.920093][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.922390][ T2601] usb 2-1: USB disconnect, device number 36 [ 179.927032][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.940110][ T5836] device bridge_slave_0 entered promiscuous mode [ 179.947288][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.954234][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.961511][ T5836] device bridge_slave_1 entered promiscuous mode [ 180.001978][ T312] usb 1-1: Using ep0 maxpacket: 8 [ 180.043803][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.050686][ T5836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.057838][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.064718][ T5836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.093085][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.100381][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.108320][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.115610][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.132407][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.140409][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.147283][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.154509][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.162585][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.169415][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.195975][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.206200][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.213879][ T312] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 180.221841][ T312] usb 1-1: config 0 has no interface number 0 [ 180.228265][ T312] usb 1-1: config 0 interface 185 altsetting 32 endpoint 0x8 has an invalid bInterval 251, changing to 7 [ 180.239645][ T312] usb 1-1: config 0 interface 185 altsetting 32 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 180.251596][ T312] usb 1-1: config 0 interface 185 altsetting 32 endpoint 0x7 has an invalid bInterval 231, changing to 11 [ 180.263062][ T312] usb 1-1: config 0 interface 185 altsetting 32 has a duplicate endpoint with address 0x7, skipping [ 180.273707][ T312] usb 1-1: config 0 interface 185 altsetting 32 has a duplicate endpoint with address 0x7, skipping [ 180.282306][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.284267][ T312] usb 1-1: config 0 interface 185 altsetting 32 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 180.303028][ T312] usb 1-1: config 0 interface 185 altsetting 32 has an invalid endpoint with address 0x56, skipping [ 180.313639][ T312] usb 1-1: config 0 interface 185 altsetting 32 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 180.324509][ T312] usb 1-1: config 0 interface 185 altsetting 32 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 180.325174][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.337922][ T312] usb 1-1: config 0 interface 185 has no altsetting 0 [ 180.346744][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.359075][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.371821][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.378771][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.386090][ T5842] device bridge_slave_0 entered promiscuous mode [ 180.393344][ T5836] device veth0_vlan entered promiscuous mode [ 180.399470][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.406405][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.413736][ T5842] device bridge_slave_1 entered promiscuous mode [ 180.461690][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.472473][ T5836] device veth1_macvtap entered promiscuous mode [ 180.512127][ T312] usb 1-1: New USB device found, idVendor=2040, idProduct=b900, bcdDevice=c8.14 [ 180.524131][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.532532][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.540329][ T312] usb 1-1: Product: 䐊 [ 180.544763][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.553096][ T312] usb 1-1: Manufacturer: Њ [ 180.557437][ T312] usb 1-1: SerialNumber: ꯿鋬艙킠铏䨴琼ຜ俰ꂱ訓멢㌑ၵ鷓ꇤ᪘缥戾ᑸᢦ筚詵⎽ド쒦ᩚ䝬螈䴞놐퓸ꎨ铂锺쓬ᎃ삏↰ꋹ㊗焓学嚙䁸凇 [ 180.580436][ T312] usb 1-1: config 0 descriptor?? [ 180.593765][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 180.609082][ T5828] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 180.623371][ T5828] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 180.639370][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.652629][ T312] hub 1-1:0.185: bad descriptor, ignoring hub [ 180.658664][ T312] hub: probe of 1-1:0.185 failed with error -5 [ 180.665273][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.678248][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.685225][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.700506][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.709482][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.716353][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.724549][ T368] device bridge_slave_1 left promiscuous mode [ 180.730485][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.743351][ T368] device bridge_slave_0 left promiscuous mode [ 180.749309][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.763879][ T368] device veth1_macvtap left promiscuous mode [ 180.769836][ T368] device veth0_vlan left promiscuous mode [ 180.857248][ T5828] UDC core: couldn't find an available UDC or it's busy: -16 [ 180.864699][ T5828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 180.874691][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.882111][ T6] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 180.885052][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 180.889559][ T6] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 180.909575][ T5860] device wg1 entered promiscuous mode [ 180.918836][ T6] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 180.924943][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.945928][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 180.945942][ T30] audit: type=1400 audit(1725287807.386:1583): avc: denied { read write } for pid=5861 comm="syz.1.2192" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 180.947988][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 180.951843][ T30] audit: type=1400 audit(1725287807.386:1584): avc: denied { open } for pid=5861 comm="syz.1.2192" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 180.975781][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 180.984996][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.012093][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.027787][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.035385][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.042833][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.050337][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.051429][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.057987][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.070227][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.072977][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.090157][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 181.096837][ T5842] device veth0_vlan entered promiscuous mode [ 181.109714][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.117197][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.117958][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.124781][ T6] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 181.133144][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.142137][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.152547][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.159667][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.167047][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.167360][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.174441][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.181882][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.188715][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.196566][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.203699][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.220170][ T6] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 181.221583][ T5842] device veth1_macvtap entered promiscuous mode [ 181.234506][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.245219][ T6] usb 4-1: USB disconnect, device number 32 [ 181.251236][ T6] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 181.259703][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.265509][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.272998][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.280322][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.284166][ T3477] udevd[3477]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 181.294516][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.303450][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.321786][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.330167][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.331821][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.344855][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.353014][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.355885][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.360281][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.396710][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.419908][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.428092][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.436123][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.443797][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.456269][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.458231][ T5873] ------------[ cut here ]------------ [ 181.468786][ T5873] WARNING: CPU: 1 PID: 5873 at net/core/dev.c:3276 skb_checksum_help+0x3fe/0x590 [ 181.477739][ T5873] Modules linked in: [ 181.481433][ T5873] CPU: 1 PID: 5873 Comm: syz.2.2196 Not tainted 5.15.157-syzkaller-00896-g38761ec9fc9e #0 [ 181.481973][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.491173][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 181.508291][ T5873] RIP: 0010:skb_checksum_help+0x3fe/0x590 [ 181.509652][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.513812][ T5873] Code: eb e3 e8 15 e0 89 fd 48 8b 7d c8 e8 ac 01 00 00 bb ea ff ff ff eb ce e8 00 e0 89 fd 0f 0b bb ea ff ff ff eb c0 e8 f2 df 89 fd <0f> 0b bb ea ff ff ff eb b2 44 89 e9 80 e1 07 fe c1 38 c1 0f 8c 28 [ 181.529770][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.540472][ T5873] RSP: 0018:ffffc90000b16be0 EFLAGS: 00010287 [ 181.540497][ T5873] RAX: ffffffff83e68d0e RBX: 000000000000296d RCX: 0000000000040000 [ 181.540512][ T5873] RDX: ffffc90003bdb000 RSI: 00000000000007f2 RDI: 00000000000007f3 [ 181.569188][ T5873] RBP: ffffc90000b16c50 R08: ffffffff83e68bfb R09: fffff52000162d6e [ 181.576998][ T5873] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000003526 [ 181.584821][ T5873] R13: 0000000000003528 R14: 00000000bfc7ba5b R15: ffff88810e162140 [ 181.592622][ T5873] FS: 00007fd61b4116c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 181.598751][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.601366][ T5873] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.601386][ T5873] CR2: 000000002000f000 CR3: 0000000120c56000 CR4: 00000000003506a0 [ 181.616313][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.622823][ T5873] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.622840][ T5873] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 181.622854][ T5873] Call Trace: [ 181.622860][ T5873] [ 181.622878][ T5873] ? show_regs+0x58/0x60 [ 181.640243][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.645647][ T5873] ? __warn+0x160/0x2f0 [ 181.648796][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.651537][ T5873] ? skb_checksum_help+0x3fe/0x590 [ 181.651567][ T5873] ? report_bug+0x3d9/0x5b0 [ 181.660008][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.662835][ T5873] ? skb_checksum_help+0x3fe/0x590 [ 181.671268][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.674028][ T5873] ? handle_bug+0x41/0x70 [ 181.685517][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.690503][ T5873] ? exc_invalid_op+0x1b/0x50 [ 181.690534][ T5873] ? asm_exc_invalid_op+0x1b/0x20 [ 181.696167][ T297] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 181.702677][ T5873] ? skb_checksum_help+0x2eb/0x590 [ 181.702704][ T5873] ? skb_checksum_help+0x3fe/0x590 [ 181.702727][ T5873] ? skb_checksum_help+0x3fe/0x590 [ 181.702751][ T5873] ip_do_fragment+0x14f/0x1e10 [ 181.702770][ T5873] ? debug_smp_processor_id+0x17/0x20 [ 181.702789][ T5873] ? kasan_quarantine_put+0x34/0x1a0 [ 181.702812][ T5873] ? kmem_cache_free+0x116/0x2e0 [ 181.727381][ T297] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz0] on syz0 [ 181.730730][ T5873] ? ____kasan_slab_free+0x131/0x160 [ 181.757089][ T20] ================================================================== [ 181.760499][ T5873] ? ip_fragment+0x210/0x210 [ 181.765268][ T20] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 181.765314][ T20] Read of size 8 at addr ffff888122990c70 by task kworker/0:1/20 [ 181.774663][ T5873] ? ip_frag_next+0xa20/0xa20 [ 181.779764][ T20] [ 181.779775][ T20] CPU: 0 PID: 20 Comm: kworker/0:1 Not tainted 5.15.157-syzkaller-00896-g38761ec9fc9e #0 [ 181.787679][ T5873] ? slab_free_freelist_hook+0xbd/0x190 [ 181.792092][ T20] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 181.792109][ T20] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 181.799727][ T5873] ? kfree_skbmem+0x104/0x170 [ 181.807277][ T20] [ 181.807284][ T20] Call Trace: [ 181.807293][ T20] [ 181.807301][ T20] dump_stack_lvl+0x151/0x1c0 [ 181.811795][ T5873] ip_fragment+0x123/0x210 [ 181.813972][ T20] ? io_uring_drop_tctx_refs+0x190/0x190 [ 181.823611][ T5873] __ip_finish_output+0x229/0x360 [ 181.828975][ T20] ? panic+0x760/0x760 [ 181.838886][ T5873] ip_finish_output+0x31/0x210 [ 181.844775][ T20] ? __queue_delayed_work+0x16d/0x1f0 [ 181.849284][ T5873] ? ip_output+0x3e1/0x420 [ 181.851460][ T20] print_address_description+0x87/0x3b0 [ 181.854595][ T5873] ip_output+0x1d6/0x420 [ 181.857358][ T20] kasan_report+0x179/0x1c0 [ 181.861873][ T5873] ? ip_finish_output+0x210/0x210 [ 181.866122][ T20] ? __kasan_check_write+0x14/0x20 [ 181.866146][ T20] ? __list_del_entry_valid+0xa6/0x120 [ 181.871618][ T5873] ? ip_mc_finish_output+0x3c0/0x3c0 [ 181.876457][ T20] ? __list_del_entry_valid+0xa6/0x120 [ 181.880359][ T5873] ? prandom_u32+0x24c/0x290 [ 181.884960][ T20] __asan_report_load8_noabort+0x14/0x20 [ 181.890176][ T5873] ip_local_out+0x92/0xb0 [ 181.894428][ T20] __list_del_entry_valid+0xa6/0x120 [ 181.899800][ T5873] iptunnel_xmit+0x4b7/0x8a0 [ 181.903878][ T20] process_one_work+0x458/0xc10 [ 181.903905][ T20] worker_thread+0xad5/0x12a0 [ 181.908219][ T5873] ip_tunnel_xmit+0x1e1e/0x2760 [ 181.913079][ T20] ? _raw_spin_lock+0x1b0/0x1b0 [ 181.918029][ T5873] ? ip_tunnel_xmit+0x1c1/0x2760 [ 181.923323][ T20] kthread+0x421/0x510 [ 181.928443][ T5873] ? tnl_update_pmtu+0xba0/0xba0 [ 181.933733][ T20] ? worker_clr_flags+0x180/0x180 [ 181.933752][ T20] ? kthread_blkcg+0xd0/0xd0 [ 181.938162][ T5873] ? skb_push+0x5f/0x120 [ 181.943630][ T20] ret_from_fork+0x1f/0x30 [ 181.943658][ T20] [ 181.947794][ T5873] ? skb_mac_gso_segment+0x28e/0x490 [ 181.952917][ T20] [ 181.952923][ T20] Allocated by task 6: [ 181.952933][ T20] ____kasan_kmalloc+0xdb/0x110 [ 181.952953][ T20] __kasan_kmalloc+0x9/0x10 [ 181.952971][ T20] __kmalloc+0x13a/0x270 [ 181.957345][ T5873] ? gre_build_header+0x233/0x7a0 [ 181.962028][ T20] kvmalloc_node+0x1f0/0x4d0 [ 181.962049][ T20] alloc_netdev_mqs+0x8c/0xc90 [ 181.966548][ T5873] ipgre_xmit+0x87a/0xc30 [ 181.971230][ T20] alloc_etherdev_mqs+0x33/0x40 [ 181.975937][ T5873] dev_hard_start_xmit+0x228/0x620 [ 181.980686][ T20] usbnet_probe+0x1ff/0x2830 [ 181.984616][ T5873] __dev_queue_xmit+0x18b4/0x2e70 [ 181.989369][ T20] usb_probe_interface+0x5b6/0xa90 [ 181.994247][ T5873] ? dev_queue_xmit+0x20/0x20 [ 181.998662][ T20] really_probe+0x28d/0x970 [ 182.002789][ T5873] ? virtio_net_hdr_to_skb+0xa10/0x1130 [ 182.006990][ T20] __driver_probe_device+0x1a0/0x310 [ 182.009856][ T5873] ? fanout_demux_rollover+0xbe0/0xbe0 [ 182.014970][ T20] driver_probe_device+0x54/0x3d0 [ 182.014991][ T20] __device_attach_driver+0x2c5/0x470 [ 182.017145][ T5873] dev_queue_xmit+0x17/0x20 [ 182.021047][ T20] bus_for_each_drv+0x183/0x200 [ 182.025751][ T5873] packet_sendmsg+0x47a9/0x6350 [ 182.030071][ T20] __device_attach+0x312/0x510 [ 182.034166][ T5873] ? avc_denied+0x1b0/0x1b0 [ 182.039014][ T20] device_initial_probe+0x1a/0x20 [ 182.043466][ T5873] ? selinux_socket_sendmsg+0x243/0x340 [ 182.048039][ T20] bus_probe_device+0xbe/0x1e0 [ 182.048068][ T20] device_add+0xb60/0xf10 [ 182.052224][ T5873] ? selinux_socket_accept+0x5b0/0x5b0 [ 182.056908][ T20] usb_set_configuration+0x190f/0x1e80 [ 182.061841][ T5873] ? packet_getsockopt+0xea0/0xea0 [ 182.066268][ T20] usb_generic_driver_probe+0x8b/0x150 [ 182.066289][ T20] usb_probe_device+0x144/0x260 [ 182.071129][ T5873] ? check_stack_object+0x114/0x130 [ 182.076072][ T20] really_probe+0x28d/0x970 [ 182.076092][ T20] __driver_probe_device+0x1a0/0x310 [ 182.080610][ T5873] ? security_socket_sendmsg+0x82/0xb0 [ 182.084925][ T20] driver_probe_device+0x54/0x3d0 [ 182.084946][ T20] __device_attach_driver+0x2c5/0x470 [ 182.090317][ T5873] ? packet_getsockopt+0xea0/0xea0 [ 182.095438][ T20] bus_for_each_drv+0x183/0x200 [ 182.095459][ T20] __device_attach+0x312/0x510 [ 182.100726][ T5873] ____sys_sendmsg+0x59e/0x8f0 [ 182.105583][ T20] device_initial_probe+0x1a/0x20 [ 182.105605][ T20] bus_probe_device+0xbe/0x1e0 [ 182.110823][ T5873] ? __sys_sendmsg_sock+0x40/0x40 [ 182.115130][ T20] device_add+0xb60/0xf10 [ 182.115152][ T20] usb_new_device+0x1038/0x1c00 [ 182.119818][ T5873] ? import_iovec+0xe5/0x120 [ 182.124503][ T20] hub_event+0x2def/0x4770 [ 182.124523][ T20] process_one_work+0x6bb/0xc10 [ 182.129192][ T5873] ___sys_sendmsg+0x252/0x2e0 [ 182.133528][ T20] worker_thread+0xad5/0x12a0 [ 182.133546][ T20] kthread+0x421/0x510 [ 182.138404][ T5873] ? __sys_sendmsg+0x260/0x260 [ 182.143782][ T20] ret_from_fork+0x1f/0x30 [ 182.143803][ T20] [ 182.143809][ T20] Freed by task 6: [ 182.148386][ T5873] ? __kasan_check_write+0x14/0x20 [ 182.152625][ T20] kasan_set_track+0x4b/0x70 [ 182.152647][ T20] kasan_set_free_info+0x23/0x40 [ 182.157918][ T5873] ? __switch_to+0x62a/0x1190 [ 182.163212][ T20] ____kasan_slab_free+0x126/0x160 [ 182.163233][ T20] __kasan_slab_free+0x11/0x20 [ 182.168166][ T5873] ? bpf_trace_run2+0x210/0x210 [ 182.173457][ T20] slab_free_freelist_hook+0xbd/0x190 [ 182.173477][ T20] kfree+0xc8/0x220 [ 182.178149][ T5873] ? __fdget+0x1bc/0x240 [ 182.183175][ T20] kvfree+0x35/0x40 [ 182.183195][ T20] netdev_freemem+0x3f/0x60 [ 182.187519][ T5873] __se_sys_sendmsg+0x19a/0x260 [ 182.192636][ T20] netdev_release+0x7f/0xb0 [ 182.192656][ T20] device_release+0x95/0x1c0 [ 182.197931][ T5873] ? __x64_sys_sendmsg+0x90/0x90 [ 182.202799][ T20] kobject_put+0x178/0x260 [ 182.202822][ T20] put_device+0x1f/0x30 [ 182.208004][ T5873] ? __kasan_check_read+0x11/0x20 [ 182.212945][ T20] free_netdev+0x34f/0x440 [ 182.212966][ T20] usbnet_disconnect+0x245/0x390 [ 182.217633][ T5873] __x64_sys_sendmsg+0x7b/0x90 [ 182.222232][ T20] usb_unbind_interface+0x1fa/0x8c0 [ 182.222254][ T20] device_release_driver_internal+0x50b/0x7d0 [ 182.226832][ T5873] x64_sys_call+0x16a/0x9a0 [ 182.231694][ T20] device_release_driver+0x19/0x20 [ 182.236309][ T5873] do_syscall_64+0x3b/0xb0 [ 182.241153][ T20] bus_remove_device+0x2f8/0x360 [ 182.245336][ T5873] ? clear_bhb_loop+0x35/0x90 [ 182.250004][ T20] device_del+0x663/0xe90 [ 182.254444][ T5873] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.258694][ T20] usb_disable_device+0x380/0x720 [ 182.263388][ T5873] RIP: 0033:0x7fd61c793eb9 [ 182.267885][ T20] usb_disconnect+0x32a/0x890 [ 182.272427][ T5873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.276305][ T20] hub_event+0x1d42/0x4770 [ 182.280903][ T5873] RSP: 002b:00007fd61b411038 EFLAGS: 00000246 [ 182.285156][ T20] process_one_work+0x6bb/0xc10 [ 182.285176][ T20] worker_thread+0xe02/0x12a0 [ 182.287327][ T5873] ORIG_RAX: 000000000000002e [ 182.290899][ T20] kthread+0x421/0x510 [ 182.295849][ T5873] RAX: ffffffffffffffda RBX: 00007fd61c92ff80 RCX: 00007fd61c793eb9 [ 182.300259][ T20] ret_from_fork+0x1f/0x30 [ 182.305053][ T5873] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 182.309545][ T20] [ 182.309551][ T20] Last potentially related work creation: [ 182.314510][ T5873] RBP: 00007fd61c80193e R08: 0000000000000000 R09: 0000000000000000 [ 182.319094][ T20] kasan_save_stack+0x3b/0x60 [ 182.323797][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.328989][ T20] __kasan_record_aux_stack+0xd3/0xf0 [ 182.332656][ T5873] R13: 0000000000000000 R14: 00007fd61c92ff80 R15: 00007ffee15c6238 [ 182.336719][ T20] kasan_record_aux_stack_noalloc+0xb/0x10 [ 182.340382][ T5873] [ 182.344694][ T20] insert_work+0x56/0x320 [ 182.344715][ T20] __queue_work+0x92a/0xcd0 [ 182.344736][ T20] queue_work_on+0x105/0x170 [ 182.349383][ T5873] ---[ end trace 3970205618806840 ]--- [ 182.353724][ T20] usbnet_link_change+0xeb/0x100 [ 182.353754][ T20] usbnet_probe+0x1dd3/0x2830 [ 182.590931][ T20] usb_probe_interface+0x5b6/0xa90 [ 182.595874][ T20] really_probe+0x28d/0x970 [ 182.600222][ T20] __driver_probe_device+0x1a0/0x310 [ 182.605332][ T20] driver_probe_device+0x54/0x3d0 [ 182.610193][ T20] __device_attach_driver+0x2c5/0x470 [ 182.615420][ T20] bus_for_each_drv+0x183/0x200 [ 182.620087][ T20] __device_attach+0x312/0x510 [ 182.624688][ T20] device_initial_probe+0x1a/0x20 [ 182.629547][ T20] bus_probe_device+0xbe/0x1e0 [ 182.634146][ T20] device_add+0xb60/0xf10 [ 182.638314][ T20] usb_set_configuration+0x190f/0x1e80 [ 182.643608][ T20] usb_generic_driver_probe+0x8b/0x150 [ 182.648911][ T20] usb_probe_device+0x144/0x260 [ 182.653590][ T20] really_probe+0x28d/0x970 [ 182.657932][ T20] __driver_probe_device+0x1a0/0x310 [ 182.663050][ T20] driver_probe_device+0x54/0x3d0 [ 182.667910][ T20] __device_attach_driver+0x2c5/0x470 [ 182.673143][ T20] bus_for_each_drv+0x183/0x200 [ 182.677803][ T20] __device_attach+0x312/0x510 [ 182.682415][ T20] device_initial_probe+0x1a/0x20 [ 182.687267][ T20] bus_probe_device+0xbe/0x1e0 [ 182.691867][ T20] device_add+0xb60/0xf10 [ 182.696030][ T20] usb_new_device+0x1038/0x1c00 [ 182.700717][ T20] hub_event+0x2def/0x4770 [ 182.704969][ T20] process_one_work+0x6bb/0xc10 [ 182.709658][ T20] worker_thread+0xad5/0x12a0 [ 182.714174][ T20] kthread+0x421/0x510 [ 182.718075][ T20] ret_from_fork+0x1f/0x30 [ 182.722328][ T20] [ 182.724498][ T20] The buggy address belongs to the object at ffff888122990000 [ 182.724498][ T20] which belongs to the cache kmalloc-4k of size 4096 [ 182.738386][ T20] The buggy address is located 3184 bytes inside of [ 182.738386][ T20] 4096-byte region [ffff888122990000, ffff888122991000) [ 182.751667][ T20] The buggy address belongs to the page: [ 182.757145][ T20] page:ffffea00048a6400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x122990 [ 182.767200][ T20] head:ffffea00048a6400 order:3 compound_mapcount:0 compound_pincount:0 [ 182.775359][ T20] flags: 0x4000000000010200(slab|head|zone=1) [ 182.781268][ T20] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 182.789693][ T20] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 182.798098][ T20] page dumped because: kasan: bad access detected [ 182.804353][ T20] page_owner tracks the page as allocated [ 182.809903][ T20] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3643, ts 168059726188, free_ts 168059359558 [ 182.828824][ T20] post_alloc_hook+0x1a3/0x1b0 [ 182.833424][ T20] prep_new_page+0x1b/0x110 [ 182.837780][ T20] get_page_from_freelist+0x3550/0x35d0 [ 182.843145][ T20] __alloc_pages+0x27e/0x8f0 [ 182.847580][ T20] new_slab+0x9a/0x4e0 [ 182.851486][ T20] ___slab_alloc+0x39e/0x830 [ 182.855901][ T20] __slab_alloc+0x4a/0x90 [ 182.860068][ T20] kmem_cache_alloc_trace+0x142/0x210 [ 182.865274][ T20] kobject_uevent_env+0x269/0x700 [ 182.870146][ T20] kobject_uevent+0x1f/0x30 [ 182.874475][ T20] device_del+0xcbd/0xe90 [ 182.878642][ T20] device_destroy+0xb1/0x110 [ 182.883069][ T20] usb_deregister_dev+0x8e/0x280 [ 182.887843][ T20] hiddev_disconnect+0x87/0x180 [ 182.892538][ T20] hid_device_remove+0x19c/0x370 [ 182.897303][ T20] device_release_driver_internal+0x4c8/0x7d0 [ 182.903204][ T20] page last free stack trace: [ 182.907717][ T20] free_unref_page_prepare+0x7c8/0x7d0 [ 182.913013][ T20] free_unref_page+0xe8/0x750 [ 182.917526][ T20] free_compound_page+0x78/0xa0 [ 182.922212][ T20] __put_compound_page+0x73/0xb0 [ 182.926985][ T20] __put_page+0xbf/0xe0 [ 182.930977][ T20] skb_release_data+0x405/0xa80 [ 182.935666][ T20] __kfree_skb+0x50/0x70 [ 182.939745][ T20] tcp_rtx_queue_unlink_and_free+0x203/0x720 [ 182.945558][ T20] tcp_ack+0x23e0/0x68a0 [ 182.949639][ T20] tcp_rcv_established+0xcd6/0x1ac0 [ 182.954671][ T20] tcp_v4_do_rcv+0x3d7/0xa00 [ 182.959100][ T20] tcp_v4_rcv+0x23dd/0x2a70 [ 182.963439][ T20] ip_protocol_deliver_rcu+0x32f/0x710 [ 182.968731][ T20] ip_local_deliver+0x2c6/0x590 [ 182.973418][ T20] ip_sublist_rcv+0x7e2/0x980 [ 182.977938][ T20] ip_list_rcv+0x422/0x470 [ 182.982186][ T20] [ 182.984354][ T20] Memory state around the buggy address: [ 182.989825][ T20] ffff888122990b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 182.997724][ T20] ffff888122990b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.005634][ T20] >ffff888122990c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.013519][ T20] ^ [ 183.021069][ T20] ffff888122990c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.028967][ T20] ffff888122990d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.036868][ T20] ================================================================== [ 183.044762][ T20] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 183.057040][ T30] audit: type=1400 audit(1725287809.496:1585): avc: denied { write } for pid=278 comm="syz-executor" path="pipe:[14091]" dev="pipefs" ino=14091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 183.080606][ T312] usb 1-1: USB disconnect, device number 36 [ 183.148131][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 184.222857][ T368] device bridge_slave_1 left promiscuous mode [ 184.228915][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.236389][ T368] device bridge_slave_0 left promiscuous mode [ 184.242349][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.249957][ T368] device veth1_macvtap left promiscuous mode [ 184.255852][ T368] device veth0_vlan left promiscuous mode [ 185.543111][ T368] device bridge_slave_1 left promiscuous mode [ 185.549127][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.556526][ T368] device bridge_slave_0 left promiscuous mode [ 185.562562][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.570274][ T368] device bridge_slave_1 left promiscuous mode [ 185.576267][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.583521][ T368] device bridge_slave_0 left promiscuous mode [ 185.589437][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.597281][ T368] device bridge_slave_1 left promiscuous mode [ 185.603270][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.610464][ T368] device bridge_slave_0 left promiscuous mode [ 185.616471][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.624767][ T368] device veth1_macvtap left promiscuous mode [ 185.630570][ T368] device veth0_vlan left promiscuous mode [ 185.636411][ T368] device veth1_macvtap left promiscuous mode [ 185.642268][ T368] device veth0_vlan left promiscuous mode [ 185.648136][ T368] device veth1_macvtap left promiscuous mode [ 185.653974][ T368] device veth0_vlan left promiscuous mode