last executing test programs: 3.297549236s ago: executing program 1 (id=774): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000020007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 3.154301456s ago: executing program 1 (id=776): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) 2.150070844s ago: executing program 1 (id=797): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 2.106532867s ago: executing program 1 (id=798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 1.989726865s ago: executing program 1 (id=801): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x3, 0x5, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x64000600) 1.804800397s ago: executing program 0 (id=803): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fallocate(r0, 0x0, 0x0, 0x1001f0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 1.753485921s ago: executing program 1 (id=804): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x53, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffe]}, 0x0, 0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 1.532521176s ago: executing program 0 (id=807): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="98"], 0x298) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.415443314s ago: executing program 0 (id=808): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}], 0x1) 1.096786466s ago: executing program 3 (id=816): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) 895.641179ms ago: executing program 0 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) 883.44983ms ago: executing program 0 (id=818): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70c0000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000400b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x18, &(0x7f0000000b00)=ANY=[], 0x0, 0xff, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000040)="61df712bc884fed5722780b605a7", 0x0, 0x10000, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 827.144874ms ago: executing program 3 (id=819): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000007000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000400)=ANY=[]) 748.16082ms ago: executing program 0 (id=820): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x400c620e, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "6e3565c0"}, @main=@item_012={0x1, 0x0, 0xb, 'i'}]}}, 0x0}, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) 670.632584ms ago: executing program 3 (id=821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r2, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) 670.262155ms ago: executing program 4 (id=822): r0 = socket(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 669.980595ms ago: executing program 3 (id=823): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000003c80)='}', 0x1}], 0x1}}], 0x1, 0x16da) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @local}]}, 0x28}}, 0x0) 639.778016ms ago: executing program 4 (id=824): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@nojournal_checksum}, {@nombcache}, {@errors_remount}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bh}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfa, 0x55d, &(0x7f0000000980)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x38b, &(0x7f0000000440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) 625.551378ms ago: executing program 3 (id=825): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) 531.363854ms ago: executing program 3 (id=826): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000dc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00222200000096231307f7940ef7070c00000016b8ef0a1a708300"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 323.616528ms ago: executing program 4 (id=827): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) 294.50199ms ago: executing program 2 (id=810): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 280.031001ms ago: executing program 4 (id=828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x94}}}}}}, 0x0) 214.595255ms ago: executing program 4 (id=829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x2]}, 0x0, 0x8) 214.263925ms ago: executing program 2 (id=830): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 213.906845ms ago: executing program 2 (id=831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 189.289277ms ago: executing program 4 (id=832): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x6835, 0x9, 0x15, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002e40)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe3a) 129.574371ms ago: executing program 2 (id=833): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e300000000000000000000000050021000000000008000a00", @ANYRES32=r4], 0x44}}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 105.958993ms ago: executing program 2 (id=834): keyctl$update(0x2, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x0, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000200)={'syz0\x00', {}, 0x50, [0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x101], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fff], [0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe61], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): using dummy_hcd [ 54.229233][ T1333] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.243868][ T1333] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 54.258587][ T1333] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 54.271071][ T1333] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.271071][ T1333] [ 54.280631][ T1333] EXT4-fs (loop2): Total free blocks count 0 [ 54.286423][ T1333] EXT4-fs (loop2): Free/Dirty block details [ 54.292263][ T1333] EXT4-fs (loop2): free_blocks=66060288 [ 54.297694][ T1333] EXT4-fs (loop2): dirty_blocks=64 [ 54.298398][ T1338] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.302807][ T1333] EXT4-fs (loop2): Block reservation details [ 54.314792][ T1338] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.314792][ T1338] [ 54.320995][ T1333] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 54.358506][ T308] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 54.365187][ T308] arvo 0003:1E7D:30D4.0017: item fetching failed at offset 5/7 [ 54.373409][ T308] arvo 0003:1E7D:30D4.0017: parse failed [ 54.379089][ T308] arvo: probe of 0003:1E7D:30D4.0017 failed with error -22 [ 54.400629][ T1340] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 54.410152][ T1340] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 54.557875][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.568690][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.578744][ T6] usb 4-1: USB disconnect, device number 9 [ 54.578763][ T309] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 54.593763][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.606433][ T309] usb 5-1: config 0 descriptor?? [ 55.088154][ T309] hid (null): bogus close delimiter [ 55.296986][ T1375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'. [ 55.398896][ T1382] serio: Serial port pts0 [ 55.577895][ T309] uclogic 0003:256C:006D.0018: failed retrieving Huion firmware version: -71 [ 55.586644][ T309] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 55.594253][ T309] uclogic: probe of 0003:256C:006D.0018 failed with error -71 [ 55.603150][ T309] usb 5-1: USB disconnect, device number 8 [ 55.610331][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 55.610344][ T30] audit: type=1400 audit(1726500648.070:533): avc: denied { mount } for pid=1394 comm="syz.2.391" name="/" dev="configfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.651038][ T30] audit: type=1400 audit(1726500648.110:534): avc: denied { read } for pid=1394 comm="syz.2.391" name="/" dev="configfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.672745][ T30] audit: type=1400 audit(1726500648.110:535): avc: denied { open } for pid=1394 comm="syz.2.391" path="/27/file0" dev="configfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.695503][ T30] audit: type=1400 audit(1726500648.130:536): avc: denied { unmount } for pid=1045 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.918220][ T1417] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.925068][ T1417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.948158][ T1419] loop2: detected capacity change from 0 to 2048 [ 55.989085][ T1419] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.007795][ T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 56.076888][ T30] audit: type=1326 audit(1726500648.530:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1428 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e7f18ef9 code=0x7ffc0000 [ 56.101069][ T30] audit: type=1326 audit(1726500648.540:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1428 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e7f18ef9 code=0x7ffc0000 [ 56.125024][ T30] audit: type=1326 audit(1726500648.540:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1428 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8e7f18ef9 code=0x7ffc0000 [ 56.148815][ T30] audit: type=1326 audit(1726500648.540:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1428 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e7f18ef9 code=0x7ffc0000 [ 56.154396][ T1429] loop2: detected capacity change from 0 to 2048 [ 56.172852][ T30] audit: type=1326 audit(1726500648.540:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1428 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e7f18ef9 code=0x7ffc0000 [ 56.201968][ T30] audit: type=1326 audit(1726500648.540:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1428 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb8e7f18ef9 code=0x7ffc0000 [ 56.278223][ T1429] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 56.289347][ T1429] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,delalloc,,errors=continue. Quota mode: none. [ 56.335832][ T1434] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 56.347898][ T42] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 56.404097][ T1441] loop2: detected capacity change from 0 to 128 [ 56.437821][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.448836][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.458402][ T6] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 56.467215][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.476871][ T1441] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.481616][ T6] usb 2-1: config 0 descriptor?? [ 56.487945][ T1441] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 56.527755][ T1441] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 56.538097][ T1441] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes) [ 56.549005][ T1441] overlayfs: upper fs does not support tmpfile. [ 56.555124][ T1441] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes) [ 56.587801][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 56.614425][ T1448] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1448 comm=syz.0.411 [ 56.651291][ T1452] loop0: detected capacity change from 0 to 128 [ 56.707841][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.721300][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.728519][ T1452] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.734494][ T42] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 56.753645][ T1452] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 56.761697][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.801647][ T42] usb 5-1: config 0 descriptor?? [ 57.018899][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.026551][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.034248][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.041840][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.049508][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.057108][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.064747][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.072389][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.080206][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.087874][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.095683][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.097780][ T308] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 57.103485][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.118446][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.126058][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.133802][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.141534][ T6] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 57.147813][ T309] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 57.149359][ T6] hid-thrustmaster 0003:044F:B65D.0019: unbalanced collection at end of report description [ 57.166839][ T6] hid-thrustmaster 0003:044F:B65D.0019: parse failed with error -22 [ 57.174947][ T6] hid-thrustmaster: probe of 0003:044F:B65D.0019 failed with error -22 [ 57.238445][ T6] usb 2-1: USB disconnect, device number 9 [ 57.332467][ T42] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001A/input/input16 [ 57.387812][ T309] usb 1-1: Using ep0 maxpacket: 16 [ 57.409287][ T42] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 57.467912][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.478901][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.488798][ T308] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 57.497758][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.506205][ T308] usb 4-1: config 0 descriptor?? [ 57.513675][ T309] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.541665][ T1466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.418'. [ 57.678028][ T309] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 57.686939][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.694736][ T309] usb 1-1: Product: syz [ 57.698729][ T309] usb 1-1: Manufacturer: syz [ 57.703122][ T309] usb 1-1: SerialNumber: syz [ 57.708091][ T309] usb 1-1: config 0 descriptor?? [ 57.743069][ T6] usb 5-1: USB disconnect, device number 9 [ 57.998605][ T308] sony 0003:054C:0268.001B: unknown main item tag 0x0 [ 58.005241][ T308] sony 0003:054C:0268.001B: unknown main item tag 0x0 [ 58.011969][ T308] sony 0003:054C:0268.001B: unknown main item tag 0x0 [ 58.018515][ T308] sony 0003:054C:0268.001B: unknown main item tag 0x0 [ 58.025086][ T308] sony 0003:054C:0268.001B: unknown main item tag 0x0 [ 58.033173][ T308] sony 0003:054C:0268.001B: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 58.044844][ T308] sony 0003:054C:0268.001B: failed to claim input [ 58.187887][ T309] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 58.194208][ T309] usb 1-1: No valid video chain found. [ 58.208576][ T6] usb 4-1: USB disconnect, device number 10 [ 58.390999][ T309] usb 1-1: USB disconnect, device number 9 [ 58.797419][ T1489] loop1: detected capacity change from 0 to 128 [ 58.829816][ T1491] loop4: detected capacity change from 0 to 2048 [ 58.839411][ T1489] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.857900][ T1489] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 58.896010][ T1491] EXT4-fs (loop4): Ignoring removed nobh option [ 58.913696][ T1491] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,nodioread_nolock,,errors=continue. Quota mode: none. [ 58.998797][ T1509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.009979][ T309] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 59.017334][ T1509] exFAT-fs (loop0): unable to read boot sector [ 59.023585][ T1509] exFAT-fs (loop0): failed to read boot sector [ 59.030903][ T1509] exFAT-fs (loop0): failed to recognize exfat type [ 59.071688][ T1514] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 59.145248][ T1510] loop1: detected capacity change from 0 to 40427 [ 59.197829][ T6] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 59.200707][ T1510] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 59.211696][ T1510] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 59.222136][ T1510] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 59.242671][ T1510] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 59.249792][ T1510] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 59.262485][ T1510] attempt to access beyond end of device [ 59.262485][ T1510] loop1: rw=10241, want=53256, limit=40427 [ 59.273962][ T1510] attempt to access beyond end of device [ 59.273962][ T1510] loop1: rw=2049, want=53264, limit=40427 [ 59.286494][ T1510] attempt to access beyond end of device [ 59.286494][ T1510] loop1: rw=2049, want=53328, limit=40427 [ 59.301192][ T1031] attempt to access beyond end of device [ 59.301192][ T1031] loop1: rw=2049, want=45104, limit=40427 [ 59.377952][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.388949][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.398597][ T309] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 59.407409][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.415795][ T309] usb 3-1: config 0 descriptor?? [ 59.589621][ T6] usb 5-1: config index 0 descriptor too short (expected 47968, got 96) [ 59.590831][ T1527] loop3: detected capacity change from 0 to 128 [ 59.597959][ T6] usb 5-1: config 237 has too many interfaces: 229, using maximum allowed: 32 [ 59.612688][ T6] usb 5-1: config 237 has an invalid descriptor of length 0, skipping remainder of the config [ 59.622724][ T6] usb 5-1: config 237 has 0 interfaces, different from the descriptor's value: 229 [ 59.652283][ T1527] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.663317][ T1527] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 59.709150][ T1532] syz.1.454[1532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.709197][ T1532] syz.1.454[1532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.726862][ T1535] syz.3.443[1535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.738239][ T1535] syz.3.443[1535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.750842][ T1535] syz.3.443[1535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.762127][ T1535] syz.3.443[1535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.777946][ T6] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 59.807770][ T6] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 59.815585][ T6] usb 5-1: Product: syz [ 59.827772][ T6] usb 5-1: Manufacturer: syz [ 59.868221][ T309] hid (null): bogus close delimiter [ 60.077879][ T309] usb 3-1: language id specifier not provided by device, defaulting to English [ 60.118769][ T6] usb 5-1: USB disconnect, device number 10 [ 60.518795][ T309] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001C/input/input17 [ 60.531715][ T309] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001C/input/input18 [ 60.544149][ T309] uclogic 0003:256C:006D.001C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 60.604719][ T1550] loop3: detected capacity change from 0 to 128 [ 60.660496][ T1550] attempt to access beyond end of device [ 60.660496][ T1550] loop3: rw=0, want=241, limit=128 [ 60.687787][ T8] attempt to access beyond end of device [ 60.687787][ T8] loop3: rw=1, want=1041, limit=128 [ 60.724507][ T6] usb 3-1: USB disconnect, device number 5 [ 60.788508][ T47] Bluetooth: hci1: sending frame failed (-49) [ 60.847010][ T1553] loop1: detected capacity change from 0 to 40427 [ 60.938077][ T1553] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 60.945706][ T1553] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 60.954476][ T1553] F2FS-fs (loop1): invalid crc value [ 60.960944][ T1553] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.983513][ T1553] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 60.990511][ T1553] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 61.003879][ T1553] attempt to access beyond end of device [ 61.003879][ T1553] loop1: rw=2049, want=77960, limit=40427 [ 61.022459][ T1553] attempt to access beyond end of device [ 61.022459][ T1553] loop1: rw=10241, want=45104, limit=40427 [ 61.109788][ T1553] attempt to access beyond end of device [ 61.109788][ T1553] loop1: rw=2049, want=80056, limit=40427 [ 61.125392][ T1553] attempt to access beyond end of device [ 61.125392][ T1553] loop1: rw=2049, want=81920, limit=40427 [ 61.167766][ T6] Bluetooth: hci0: command 0x1003 tx timeout [ 61.173608][ T47] Bluetooth: hci0: sending frame failed (-49) [ 61.320721][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 61.329816][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 61.343514][ T1576] syz.2.457[1576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.343584][ T1576] syz.2.457[1576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.356307][ T1576] syz.2.457[1576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.367511][ T1576] syz.2.457[1576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.536542][ T1585] loop1: detected capacity change from 0 to 1024 [ 61.638308][ T1585] EXT4-fs error (device loop1): ext4_fill_super:4831: inode #2: comm syz.1.462: casefold flag without casefold feature [ 61.650867][ T1585] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 61.660899][ T1585] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.747164][ T1592] loop1: detected capacity change from 0 to 256 [ 61.790444][ T1592] exFAT-fs (loop1): failed to load upcase table (idx : 0x00003798, chksum : 0xe8cdb6a2, utbl_chksum : 0xe619d30d) [ 61.821640][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 61.821655][ T30] audit: type=1400 audit(1726500654.280:617): avc: denied { read append } for pid=1591 comm="syz.1.464" path="/45/file0/cpuacct.usage_percpu_sys" dev="loop1" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.860433][ T30] audit: type=1400 audit(1726500654.310:618): avc: denied { map } for pid=1591 comm="syz.1.464" path="/45/file0/cpuacct.usage_percpu_sys" dev="loop1" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.932368][ T1596] loop1: detected capacity change from 0 to 512 [ 61.940561][ T1583] loop4: detected capacity change from 0 to 131072 [ 61.970484][ T1583] F2FS-fs (loop4): Found nat_bits in checkpoint [ 61.992126][ T1583] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 62.002775][ T1596] EXT4-fs (loop1): Ignoring removed bh option [ 62.012866][ T1596] EXT4-fs error (device loop1): __ext4_iget:4892: inode #12: block 2: comm syz.1.466: invalid block [ 62.024014][ T1596] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.466: couldn't read orphan inode 12 (err -117) [ 62.043316][ T1596] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 62.211204][ T30] audit: type=1326 audit(1726500654.670:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52e511ef9 code=0x7ffc0000 [ 62.234586][ T30] audit: type=1326 audit(1726500654.670:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52e511ef9 code=0x7ffc0000 [ 62.259323][ T30] audit: type=1326 audit(1726500654.670:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff52e511ef9 code=0x7ffc0000 [ 62.282826][ T30] audit: type=1326 audit(1726500654.670:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52e511ef9 code=0x7ffc0000 [ 62.306286][ T30] audit: type=1326 audit(1726500654.670:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52e511ef9 code=0x7ffc0000 [ 62.330085][ T30] audit: type=1326 audit(1726500654.670:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff52e511ef9 code=0x7ffc0000 [ 62.353931][ T30] audit: type=1326 audit(1726500654.670:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52e511ef9 code=0x7ffc0000 [ 62.377786][ T30] audit: type=1326 audit(1726500654.670:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52e511ef9 code=0x7ffc0000 [ 62.400927][ T308] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 62.617838][ T309] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 62.647824][ T308] usb 2-1: Using ep0 maxpacket: 32 [ 62.847824][ T485] Bluetooth: hci1: command 0x1003 tx timeout [ 62.853662][ T1579] Bluetooth: hci1: sending frame failed (-49) [ 62.857786][ T309] usb 5-1: Using ep0 maxpacket: 8 [ 62.927939][ T308] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 62.936805][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.944710][ T308] usb 2-1: Product: syz [ 62.948603][ T308] usb 2-1: Manufacturer: syz [ 62.953018][ T308] usb 2-1: SerialNumber: syz [ 62.958388][ T308] usb 2-1: config 0 descriptor?? [ 62.977875][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.988583][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.998598][ T309] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.011219][ T309] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 63.020138][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.028537][ T309] usb 5-1: config 0 descriptor?? [ 63.257783][ T485] Bluetooth: hci0: command 0x1001 tx timeout [ 63.263642][ T1579] Bluetooth: hci0: sending frame failed (-49) [ 63.487790][ T42] Bluetooth: hci2: command 0x1003 tx timeout [ 63.493682][ T1579] Bluetooth: hci2: sending frame failed (-49) [ 63.509319][ T309] hid-steam 0003:28DE:1102.001D: unknown main item tag 0x0 [ 63.516613][ T309] hid-steam 0003:28DE:1102.001D: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 63.528491][ T309] hid-steam 0003:28DE:1102.001E: unknown main item tag 0x0 [ 63.536058][ T309] hid-steam 0003:28DE:1102.001E: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 63.607788][ T309] hid-steam 0003:28DE:1102.001D: Steam Controller 'XXXXXXXXXX' connected [ 63.616568][ T309] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.001D/input/input19 [ 63.647867][ T308] (unnamed net_device) (uninitialized): Assigned a random MAC address: be:bc:f7:0c:6d:0e [ 63.659614][ T308] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 63.728530][ T1609] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.001D/input/input20 [ 63.741204][ T6] usb 5-1: USB disconnect, device number 11 [ 63.751647][ T6] hid-steam 0003:28DE:1102.001D: Steam Controller 'XXXXXXXXXX' disconnected [ 63.850521][ T308] usb 2-1: USB disconnect, device number 10 [ 63.867821][ T138] net eth1: rx_urb submit failed: -19 [ 64.532238][ T1663] overlayfs: statfs failed on './file0' [ 64.758387][ T1680] netlink: 60 bytes leftover after parsing attributes in process `syz.4.489'. [ 64.834670][ T1694] loop4: detected capacity change from 0 to 512 [ 64.837825][ T6] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 64.909684][ T1694] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.916059][ T1694] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.495: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 64.934402][ T1694] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.495: Bad quota inode: 4, type: 1 [ 64.937793][ T60] Bluetooth: hci1: command 0x1001 tx timeout [ 64.945393][ T1694] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.950882][ T1579] Bluetooth: hci1: sending frame failed (-49) [ 64.965312][ T1694] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 64.977637][ T1694] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.103914][ T1208] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /33/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 65.124489][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 65.130549][ T1208] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 65.149103][ T1208] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 65.248340][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.259645][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.269243][ T6] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 65.278093][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.286282][ T6] usb 2-1: config 0 descriptor?? [ 65.327858][ T60] Bluetooth: hci0: command 0x1009 tx timeout [ 65.346901][ T1698] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.353767][ T1698] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.361181][ T1698] device bridge_slave_0 entered promiscuous mode [ 65.368068][ T1698] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.374890][ T1698] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.382187][ T1698] device bridge_slave_1 entered promiscuous mode [ 65.429610][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.436788][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.445618][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.453720][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.461684][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.468530][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.475705][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.494284][ T1698] device veth0_vlan entered promiscuous mode [ 65.500460][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.508488][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.515607][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.522780][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.530902][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.538857][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.545675][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.553313][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.561142][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.569022][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.576815][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.584610][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.592659][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.601151][ T60] Bluetooth: hci2: command 0x1001 tx timeout [ 65.605875][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.606977][ T1579] Bluetooth: hci2: sending frame failed (-49) [ 65.616465][ T1698] device veth1_macvtap entered promiscuous mode [ 65.632242][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.640262][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.648429][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.656403][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.749492][ T6] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 65.756713][ T6] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 65.764234][ T6] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 65.764960][ T1709] loop4: detected capacity change from 0 to 1024 [ 65.771515][ T6] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 65.785197][ T6] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 65.792534][ T6] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 65.800039][ T6] playstation 0003:054C:0CE6.001F: unknown main item tag 0x0 [ 65.807699][ T6] playstation 0003:054C:0CE6.001F: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0 [ 65.811908][ T1709] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000008,barrier=0x0000000000000004,norecovery,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 65.967879][ T6] playstation 0003:054C:0CE6.001F: Invalid reportID received, expected 9 got 0 [ 65.976704][ T6] playstation 0003:054C:0CE6.001F: Failed to retrieve DualSense pairing info: -22 [ 65.985842][ T6] playstation 0003:054C:0CE6.001F: Failed to get MAC address from DualSense [ 65.994324][ T6] playstation 0003:054C:0CE6.001F: Failed to create dualsense. [ 66.002183][ T6] playstation: probe of 0003:054C:0CE6.001F failed with error -22 [ 66.178994][ T309] usb 2-1: USB disconnect, device number 11 [ 66.358494][ T8] device bridge_slave_1 left promiscuous mode [ 66.364739][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.372125][ T8] device bridge_slave_0 left promiscuous mode [ 66.378205][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.385934][ T8] device veth1_macvtap left promiscuous mode [ 66.391885][ T8] device veth0_vlan left promiscuous mode [ 66.760211][ T1727] loop4: detected capacity change from 0 to 128 [ 66.819361][ T1727] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.829977][ T1727] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 66.868200][ T1727] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 66.877078][ T1727] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 66.935800][ T1730] loop4: detected capacity change from 0 to 512 [ 66.979225][ T1730] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 66.995046][ T1730] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff) [ 67.007822][ T482] Bluetooth: hci1: command 0x1009 tx timeout [ 67.017915][ T6] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 67.075434][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 67.075448][ T30] audit: type=1400 audit(1726500659.530:667): avc: denied { write } for pid=1733 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.110817][ T30] audit: type=1400 audit(1726500659.570:668): avc: denied { connect } for pid=1735 comm="syz.4.509" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.131264][ T30] audit: type=1400 audit(1726500659.570:669): avc: denied { read } for pid=1735 comm="syz.4.509" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.180001][ T1739] loop4: detected capacity change from 0 to 1024 [ 67.260421][ T1739] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,usrjquota=,lazytime,noblock_validity,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 67.283755][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 67.417849][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.428635][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.438183][ T6] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 67.447270][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.455953][ T6] usb 2-1: config 0 descriptor?? [ 67.607773][ T309] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 67.658061][ T482] Bluetooth: hci2: command 0x1009 tx timeout [ 67.929147][ T6] hid-picolcd 0003:04D8:F002.0020: unknown main item tag 0x0 [ 67.936392][ T6] hid-picolcd 0003:04D8:F002.0020: item fetching failed at offset 5/7 [ 67.944545][ T6] hid-picolcd 0003:04D8:F002.0020: device report parse failed [ 67.951927][ T6] hid-picolcd: probe of 0003:04D8:F002.0020 failed with error -22 [ 67.968163][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.978941][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.988725][ T309] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 67.997587][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.006014][ T309] usb 5-1: config 0 descriptor?? [ 68.130942][ T308] usb 2-1: USB disconnect, device number 12 [ 68.508619][ T309] hid-multitouch 0003:1FD2:6007.0021: item fetching failed at offset 3/5 [ 68.517260][ T309] hid-multitouch: probe of 0003:1FD2:6007.0021 failed with error -22 [ 68.713905][ T482] usb 5-1: USB disconnect, device number 12 [ 68.817124][ T1758] bpf_get_probe_write_proto: 6 callbacks suppressed [ 68.817135][ T1758] syz.1.517[1758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.823680][ T1758] syz.1.517[1758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.839796][ T1758] device pim6reg1 entered promiscuous mode [ 68.910179][ T1760] netlink: 'syz.1.518': attribute type 4 has an invalid length. [ 69.232455][ T1775] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.239474][ T1775] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.246714][ T1775] device bridge_slave_0 entered promiscuous mode [ 69.253912][ T1775] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.261243][ T1775] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.269285][ T1775] device bridge_slave_1 entered promiscuous mode [ 69.331167][ T30] audit: type=1400 audit(1726500661.790:670): avc: denied { audit_write } for pid=1792 comm="syz.4.531" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 69.353091][ T30] audit: type=1107 audit(1726500661.790:671): pid=1792 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 69.396290][ T1775] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.403176][ T1775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.410378][ T1775] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.417125][ T1775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.446098][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.456462][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.463938][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.487843][ T30] audit: type=1400 audit(1726500661.940:672): avc: denied { unlink } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.512683][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.521297][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.522184][ T1808] mmap: syz.1.538 (1808) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 69.528167][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.528397][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.566953][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.573932][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.581419][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.589385][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.606581][ T1775] device veth0_vlan entered promiscuous mode [ 69.614446][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.622931][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.634444][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.642737][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.653030][ T1816] bridge0: port 3(veth0_macvtap) entered blocking state [ 69.660160][ T1816] bridge0: port 3(veth0_macvtap) entered disabled state [ 69.667518][ T1816] device veth0_macvtap entered promiscuous mode [ 69.674127][ T1816] bridge0: port 3(veth0_macvtap) entered blocking state [ 69.680915][ T1816] bridge0: port 3(veth0_macvtap) entered forwarding state [ 69.693873][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.710059][ T1775] device veth1_macvtap entered promiscuous mode [ 69.720372][ T1818] loop4: detected capacity change from 0 to 512 [ 69.721298][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.737010][ T1818] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.742244][ T1820] loop1: detected capacity change from 0 to 256 [ 69.752783][ T1818] EXT4-fs (loop4): 1 truncate cleaned up [ 69.752806][ T1818] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 69.782707][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.801575][ T1820] FAT-fs (loop1): bogus number of FAT sectors [ 69.817258][ T1820] FAT-fs (loop1): Can't find a valid FAT filesystem [ 69.822868][ T1824] loop0: detected capacity change from 0 to 128 [ 69.839301][ T1824] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.850318][ T1824] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 69.906364][ T1831] loop0: detected capacity change from 0 to 128 [ 70.249165][ T1841] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 70.347790][ T891] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 70.408446][ T473] device bridge_slave_1 left promiscuous mode [ 70.414395][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.421839][ T473] device bridge_slave_0 left promiscuous mode [ 70.428043][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.435728][ T473] device veth1_macvtap left promiscuous mode [ 70.441673][ T473] device veth0_vlan left promiscuous mode [ 70.465803][ T30] audit: type=1400 audit(1726500662.920:673): avc: denied { ioctl } for pid=1843 comm="syz.0.551" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 70.491695][ T30] audit: type=1400 audit(1726500662.940:674): avc: denied { set_context_mgr } for pid=1843 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 70.587795][ T891] usb 2-1: Using ep0 maxpacket: 16 [ 70.707838][ T891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.718558][ T891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.728233][ T891] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 70.737375][ T891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.753268][ T891] usb 2-1: config 0 descriptor?? [ 70.768519][ T380] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 70.946158][ T1848] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.953283][ T1848] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.961082][ T1848] device bridge_slave_0 entered promiscuous mode [ 70.968964][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.975846][ T1848] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.983184][ T1848] device bridge_slave_1 entered promiscuous mode [ 71.047135][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.054181][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.061276][ T1848] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.068101][ T1848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.086294][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.093858][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.101123][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.118812][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.126811][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.133558][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.140717][ T380] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 71.150244][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.158054][ T380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.166225][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.173067][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.180541][ T380] usb 1-1: config 0 descriptor?? [ 71.185475][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.203432][ T1848] device veth0_vlan entered promiscuous mode [ 71.210322][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.219233][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.226914][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.234582][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.242437][ T891] saitek 0003:06A3:0621.0022: item fetching failed at offset 2/5 [ 71.250234][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.257962][ T891] saitek 0003:06A3:0621.0022: parse failed [ 71.263579][ T891] saitek: probe of 0003:06A3:0621.0022 failed with error -22 [ 71.277799][ T20] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 71.287317][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.296218][ T1848] device veth1_macvtap entered promiscuous mode [ 71.305282][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.321949][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.428726][ T1869] loop3: detected capacity change from 0 to 512 [ 71.444422][ T485] usb 2-1: USB disconnect, device number 13 [ 71.469763][ T1869] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.560: casefold flag without casefold feature [ 71.482496][ T1869] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.560: missing EA_INODE flag [ 71.494031][ T1869] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.560: error while reading EA inode 12 err=-117 [ 71.506404][ T1869] EXT4-fs (loop3): 1 orphan inode deleted [ 71.512196][ T1869] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.527796][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 71.548959][ T473] device bridge_slave_1 left promiscuous mode [ 71.555002][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.569886][ T473] device bridge_slave_0 left promiscuous mode [ 71.576206][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.584322][ T473] device veth1_macvtap left promiscuous mode [ 71.590193][ T30] audit: type=1400 audit(1726500664.040:675): avc: denied { write } for pid=1873 comm="syz.3.562" path="socket:[24643]" dev="sockfs" ino=24643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.614874][ T473] device veth0_vlan left promiscuous mode [ 71.658012][ T20] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 71.667552][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.676596][ T20] usb 5-1: config 0 descriptor?? [ 71.795783][ T1888] KVM: debugfs: duplicate directory 1888-5 [ 71.820617][ T1872] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.827518][ T1872] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.835041][ T1872] device bridge_slave_0 entered promiscuous mode [ 71.844112][ T1872] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.855681][ T1872] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.865552][ T1872] device bridge_slave_1 entered promiscuous mode [ 71.890377][ T30] audit: type=1400 audit(1726500664.350:676): avc: denied { watch } for pid=1899 comm="syz.3.571" path="/15/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 71.973315][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.981599][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.002011][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.010289][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.018336][ T891] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.025167][ T891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.032435][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.043733][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.052500][ T891] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.059385][ T891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.066748][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.074736][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.092666][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.100381][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.108377][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.116038][ T1909] syz.1.575 uses obsolete (PF_INET,SOCK_PACKET) [ 72.116166][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.130617][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.176175][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.184346][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.192505][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.199787][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.210843][ T1872] device veth0_vlan entered promiscuous mode [ 72.220514][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.228588][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.237940][ T1872] device veth1_macvtap entered promiscuous mode [ 72.252204][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.259940][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.268636][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.277214][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.285316][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.315173][ T1915] loop3: detected capacity change from 0 to 1024 [ 72.348495][ T1915] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature [ 72.456101][ T1922] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 72.464036][ T1922] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 72.504106][ T1927] loop3: detected capacity change from 0 to 2048 [ 72.549245][ T1927] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.568080][ T8] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.577858][ T309] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 72.583150][ T8] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 72.590824][ T473] device bridge_slave_1 left promiscuous mode [ 72.607948][ T8] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.607948][ T8] [ 72.608297][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.617515][ T8] EXT4-fs (loop3): Total free blocks count 0 [ 72.630401][ T473] device bridge_slave_0 left promiscuous mode [ 72.636363][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.636876][ T8] EXT4-fs (loop3): Free/Dirty block details [ 72.648909][ T8] EXT4-fs (loop3): free_blocks=2415919104 [ 72.654417][ T8] EXT4-fs (loop3): dirty_blocks=16 [ 72.654501][ T473] device veth1_macvtap left promiscuous mode [ 72.659417][ T8] EXT4-fs (loop3): Block reservation details [ 72.665800][ T473] device veth0_vlan left promiscuous mode [ 72.671136][ T8] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 72.947897][ T380] usb 1-1: Cannot set autoneg [ 72.952495][ T380] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 72.961139][ T380] usb 1-1: USB disconnect, device number 10 [ 72.967877][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.978869][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.988490][ T42] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 72.995870][ T309] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 73.004688][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.014353][ T309] usb 3-1: config 0 descriptor?? [ 73.038266][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 73.038279][ T30] audit: type=1400 audit(1726500665.500:678): avc: denied { mounton } for pid=1934 comm="syz.1.585" path="/87/file0" dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 73.078058][ T1937] loop1: detected capacity change from 0 to 512 [ 73.159369][ T1937] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.170246][ T1937] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038 (0x7fffffff) [ 73.190801][ T30] audit: type=1400 audit(1726500665.650:679): avc: denied { rename } for pid=1936 comm="syz.1.586" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.212968][ T30] audit: type=1400 audit(1726500665.650:680): avc: denied { read } for pid=1936 comm="syz.1.586" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.235104][ T30] audit: type=1400 audit(1726500665.650:681): avc: denied { open } for pid=1936 comm="syz.1.586" path="/file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.257961][ T30] audit: type=1400 audit(1726500665.650:682): avc: denied { write } for pid=1936 comm="syz.1.586" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.278827][ T30] audit: type=1400 audit(1726500665.650:683): avc: denied { setattr } for pid=1936 comm="syz.1.586" name="#21" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.301337][ T30] audit: type=1400 audit(1726500665.650:684): avc: denied { link } for pid=1936 comm="syz.1.586" name="#21" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.323775][ T1937] syz.1.586 (1937) used greatest stack depth: 19472 bytes left [ 73.335628][ T30] audit: type=1400 audit(1726500665.800:685): avc: denied { unlink } for pid=1031 comm="syz-executor" name="file7" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.397828][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.408872][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.497856][ T42] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 73.498198][ T1942] loop1: detected capacity change from 0 to 40427 [ 73.518261][ T42] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 73.520349][ T1946] loop0: detected capacity change from 0 to 512 [ 73.526215][ T42] usb 4-1: Product: syz [ 73.535058][ T42] usb 4-1: config 0 descriptor?? [ 73.540542][ T1942] F2FS-fs (loop1): invalid crc value [ 73.543147][ T309] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 73.547412][ T1942] F2FS-fs (loop1): Found nat_bits in checkpoint [ 73.553894][ T309] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 73.579765][ T1942] F2FS-fs (loop1): Start checkpoint disabled! [ 73.586421][ T1942] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 73.602714][ T1942] handle_bad_sector: 14 callbacks suppressed [ 73.602728][ T1942] attempt to access beyond end of device [ 73.602728][ T1942] loop1: rw=2049, want=45112, limit=40427 [ 73.621349][ T1942] attempt to access beyond end of device [ 73.621349][ T1942] loop1: rw=0, want=45104, limit=40427 [ 73.633566][ T1941] attempt to access beyond end of device [ 73.633566][ T1941] loop1: rw=0, want=45104, limit=40427 [ 73.641027][ T1946] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.644605][ T1941] attempt to access beyond end of device [ 73.644605][ T1941] loop1: rw=0, want=45104, limit=40427 [ 73.656481][ T1946] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 73.667649][ T1942] attempt to access beyond end of device [ 73.667649][ T1942] loop1: rw=0, want=45104, limit=40427 [ 73.688384][ T1942] attempt to access beyond end of device [ 73.688384][ T1942] loop1: rw=0, want=45104, limit=40427 [ 73.700079][ T1942] attempt to access beyond end of device [ 73.700079][ T1942] loop1: rw=0, want=45104, limit=40427 [ 73.711684][ T1942] attempt to access beyond end of device [ 73.711684][ T1942] loop1: rw=0, want=45104, limit=40427 [ 73.739522][ T473] attempt to access beyond end of device [ 73.739522][ T473] loop1: rw=2049, want=40976, limit=40427 [ 73.757948][ T309] cp2112 0003:10C4:EA90.0023: error requesting version [ 73.775576][ T1952] loop0: detected capacity change from 0 to 1024 [ 73.775766][ T309] cp2112: probe of 0003:10C4:EA90.0023 failed with error -5 [ 73.782676][ T20] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 73.801063][ T20] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 73.812127][ T20] asix: probe of 5-1:0.0 failed with error -71 [ 73.819076][ T20] usb 5-1: USB disconnect, device number 13 [ 73.873961][ T1954] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 73.892323][ T1952] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,abort,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,auto_da_alloc=0x000000000000003f,,errors=continue. Quota mode: none. [ 73.951371][ T30] audit: type=1326 audit(1726500666.410:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1961 comm="syz.0.594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1b5eef9 code=0x0 [ 73.990647][ T891] usb 3-1: USB disconnect, device number 6 [ 74.028860][ T42] konepure 0003:1E7D:2DB4.0024: item fetching failed at offset 10/11 [ 74.037011][ T42] konepure 0003:1E7D:2DB4.0024: parse failed [ 74.043131][ T42] konepure: probe of 0003:1E7D:2DB4.0024 failed with error -22 [ 74.233839][ T891] usb 4-1: USB disconnect, device number 11 [ 74.299698][ T1960] loop1: detected capacity change from 0 to 131072 [ 74.322819][ T1960] F2FS-fs (loop1): invalid crc value [ 74.331522][ T1960] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.354140][ T1960] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 74.653356][ T1992] kvm: pic: non byte read [ 74.684781][ T1998] xt_hashlimit: size too large, truncated to 1048576 [ 74.948101][ T30] audit: type=1326 audit(1726500667.410:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2008 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4157b7def9 code=0x7ffc0000 [ 78.168656][ T2025] loop2: detected capacity change from 0 to 2048 [ 78.268820][ T2038] syz.0.623[2038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.268898][ T2038] syz.0.623[2038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.283159][ T2025] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.305429][ T2025] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 78.321681][ T2025] fs-verity: sha256 using implementation "sha256-avx2" [ 78.346799][ T2020] loop1: detected capacity change from 0 to 40427 [ 78.401930][ T2044] loop2: detected capacity change from 0 to 4096 [ 78.428124][ T2020] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 78.435738][ T2020] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 78.446886][ T2044] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.461212][ T2020] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.464566][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 78.464578][ T30] audit: type=1400 audit(1726500670.920:699): avc: denied { remount } for pid=2043 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.496708][ T2020] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 78.504182][ T2020] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.525177][ T2020] overlayfs: invalid origin (00000079007a6b616c6c6572000000000000000000000000000000000000000000000000000000000000000000000000) [ 78.545532][ T1031] f2fs_fill_dentries: 11 callbacks suppressed [ 78.545550][ T1031] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 78.551747][ T1031] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 78.559228][ T485] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 78.574664][ T1031] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 78.574684][ T1031] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 78.582132][ T1031] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 78.589865][ T1031] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 78.597418][ T1031] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 78.622991][ T2053] loop2: detected capacity change from 0 to 128 [ 78.715843][ T2053] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.726848][ T2053] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 80.042042][ T2060] loop4: detected capacity change from 0 to 1024 [ 81.093105][ T2060] EXT4-fs (loop4): Ignoring removed nobh option [ 81.099287][ T2060] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.111328][ T30] audit: type=1326 audit(1726500673.580:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2064 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4157b7def9 code=0x7ffc0000 [ 81.135119][ T485] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.145437][ T30] audit: type=1326 audit(1726500673.580:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2064 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4157b7def9 code=0x7ffc0000 [ 81.169015][ T30] audit: type=1326 audit(1726500673.580:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2064 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4157b7def9 code=0x7ffc0000 [ 81.192874][ T30] audit: type=1326 audit(1726500673.580:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2064 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4157b7def9 code=0x7ffc0000 [ 81.192958][ T2063] incfs_lookup_dentry err:-111 [ 81.216553][ T30] audit: type=1326 audit(1726500673.580:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2064 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4157b7def9 code=0x7ffc0000 [ 81.239022][ T2063] incfs: Can't find or create .index dir in ./file0 [ 81.244404][ T485] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.259724][ T485] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.260230][ T2060] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,dioread_nolock,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 81.267529][ T485] usb 1-1: SerialNumber: syz [ 81.268374][ T30] audit: type=1326 audit(1726500673.580:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2064 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4157b7def9 code=0x7ffc0000 [ 81.296555][ T2063] incfs: mount failed -111 [ 81.327821][ T485] usb 1-1: can't set config #1, error -71 [ 81.337864][ T485] usb 1-1: USB disconnect, device number 11 [ 81.347565][ T30] audit: type=1326 audit(1726500673.580:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2064 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4157b7def9 code=0x7ffc0000 [ 81.356331][ T2071] loop2: detected capacity change from 0 to 1024 [ 81.370822][ T30] audit: type=1326 audit(1726500673.580:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2064 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4157b7def9 code=0x7ffc0000 [ 81.400303][ T30] audit: type=1326 audit(1726500673.580:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2064 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4157b7def9 code=0x7ffc0000 [ 81.446761][ T2071] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.488994][ T2071] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 81.548281][ T2086] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 81.591902][ T2094] loop0: detected capacity change from 0 to 1024 [ 81.668327][ T2094] EXT4-fs (loop0): Ignoring removed orlov option [ 81.675956][ T2094] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 81.685540][ T2094] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 81.693752][ T2094] System zones: 0-1, 3-36 [ 81.699080][ T2094] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,resuid=0x0000000000000000,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 81.747815][ T20] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 81.777775][ T42] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 81.837783][ T485] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 81.906293][ T2100] loop0: detected capacity change from 0 to 512 [ 81.968122][ T2100] EXT4-fs (loop0): Ignoring removed nobh option [ 81.974240][ T2100] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.985054][ T2100] EXT4-fs (loop0): 1 truncate cleaned up [ 81.990570][ T2100] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 82.037790][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 82.077787][ T485] usb 3-1: Using ep0 maxpacket: 8 [ 82.107821][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.118732][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.128571][ T20] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 82.138122][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.150450][ T20] usb 2-1: config 0 descriptor?? [ 82.188176][ T42] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.198934][ T485] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.200281][ T42] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.219181][ T485] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.219522][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.235421][ T485] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.235634][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 82.257264][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.265199][ T485] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 82.265224][ T485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.282513][ T485] usb 3-1: config 0 descriptor?? [ 82.282988][ T42] usb 5-1: config 0 descriptor?? [ 82.538619][ T2084] UDC core: couldn't find an available UDC or it's busy: -16 [ 82.545822][ T2084] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.629516][ T20] hid-rmi 0003:06CB:81A7.0025: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 82.758710][ T485] hid-steam 0003:28DE:1102.0026: unknown main item tag 0x0 [ 82.765897][ T485] hid-steam 0003:28DE:1102.0026: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 82.777423][ T485] hid-steam 0003:28DE:1102.0027: unknown main item tag 0x0 [ 82.778645][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.785066][ T485] hid-steam 0003:28DE:1102.0027: hidraw1: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 82.796335][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.809704][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.816562][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.823878][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.835316][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.842765][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.849993][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.857011][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.864192][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.876103][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.877821][ T485] hid-steam 0003:28DE:1102.0026: Steam Controller 'XXXXXXXXXX' connected [ 82.883564][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.899115][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.906055][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.908386][ T485] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0026/input/input22 [ 82.913381][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.931633][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.938707][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.946107][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.953334][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.977804][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.987971][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 82.994907][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.009591][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.016610][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.024304][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.031504][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.038558][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.045588][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.052605][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.060067][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.067038][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.074262][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.081845][ T2117] loop0: detected capacity change from 0 to 40427 [ 83.082423][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.095253][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.102177][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.109094][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.115988][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.123027][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.129899][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.136826][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.143788][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.150748][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.157647][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.164637][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.172596][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.179550][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.185376][ T2084] UDC core: couldn't find an available UDC or it's busy: -16 [ 83.186511][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.193959][ T2084] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 83.200663][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.214895][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.219519][ T2117] F2FS-fs (loop0): invalid crc value [ 83.222548][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.228856][ T2117] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.233886][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.246903][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.253881][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.260871][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.266232][ T2117] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 83.267700][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.274709][ T2117] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 83.280955][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.295171][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.302146][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.308787][ T2117] attempt to access beyond end of device [ 83.308787][ T2117] loop0: rw=2049, want=45112, limit=40427 [ 83.309287][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x1 [ 83.321226][ T2117] attempt to access beyond end of device [ 83.321226][ T2117] loop0: rw=2049, want=45104, limit=40427 [ 83.327237][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.345366][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.352723][ T42] logitech 0003:046D:C50C.0028: unknown main item tag 0x0 [ 83.360013][ T42] logitech 0003:046D:C50C.0028: unexpected long global item [ 83.363938][ T1775] attempt to access beyond end of device [ 83.363938][ T1775] loop0: rw=2049, want=45120, limit=40427 [ 83.367659][ T42] logitech 0003:046D:C50C.0028: parse failed [ 83.384250][ T42] logitech: probe of 0003:046D:C50C.0028 failed with error -22 [ 83.392782][ T309] usb 2-1: USB disconnect, device number 14 [ 83.398718][ T891] usb 3-1: USB disconnect, device number 7 [ 83.410660][ T42] usb 5-1: USB disconnect, device number 14 [ 83.432555][ T891] hid-steam 0003:28DE:1102.0026: Steam Controller 'XXXXXXXXXX' disconnected [ 83.457937][ T2126] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 83.666299][ T2134] loop2: detected capacity change from 0 to 1024 [ 83.686921][ T2134] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.691906][ T2140] binder: 2139:2140 ioctl c0306201 20000380 returned -14 [ 83.768694][ T2134] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 83.854799][ T2164] syz.0.668[2164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.854873][ T2164] syz.0.668[2164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.867924][ T2164] syz.0.668[2164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.879109][ T2164] syz.0.668[2164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.906576][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 83.906589][ T30] audit: type=1326 audit(1726500676.360:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2167 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1b5eef9 code=0x7ffc0000 [ 83.952052][ T2168] loop0: detected capacity change from 0 to 512 [ 83.958444][ T30] audit: type=1326 audit(1726500676.400:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2167 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf1b5eef9 code=0x7ffc0000 [ 83.981935][ T30] audit: type=1326 audit(1726500676.400:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2167 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1b5eef9 code=0x7ffc0000 [ 84.005196][ T30] audit: type=1326 audit(1726500676.400:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2167 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf1b5eef9 code=0x7ffc0000 [ 84.028612][ T30] audit: type=1326 audit(1726500676.410:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2167 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1b5eef9 code=0x7ffc0000 [ 84.052102][ T30] audit: type=1326 audit(1726500676.410:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2167 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf1b5eef9 code=0x7ffc0000 [ 84.075388][ T30] audit: type=1326 audit(1726500676.410:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2167 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1b5eef9 code=0x7ffc0000 [ 84.079553][ T2168] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,user_xattr,,errors=continue. Quota mode: writeback. [ 84.098515][ T309] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 84.125599][ T891] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 84.128876][ T2168] ext4 filesystem being mounted at /43/bus supports timestamps until 2038 (0x7fffffff) [ 84.146230][ T30] audit: type=1326 audit(1726500676.410:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2167 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf1b5eef9 code=0x7ffc0000 [ 84.169953][ T30] audit: type=1326 audit(1726500676.410:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2167 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf1b5eef9 code=0x7ffc0000 [ 84.193206][ T30] audit: type=1326 audit(1726500676.410:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2167 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf1b5eef9 code=0x7ffc0000 [ 84.334261][ T2186] loop0: detected capacity change from 0 to 16 [ 84.345063][ T2186] erofs: (device loop0): mounted with root inode @ nid 36. [ 84.360933][ T2186] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 84.427800][ T891] usb 2-1: Using ep0 maxpacket: 8 [ 84.432872][ T309] usb 5-1: Using ep0 maxpacket: 16 [ 84.447532][ T2197] loop0: detected capacity change from 0 to 512 [ 84.509616][ T2197] EXT4-fs (loop0): 1 orphan inode deleted [ 84.515169][ T2197] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,quota,nodelalloc,sysvgroups,bsddf,dioread_lock,. Quota mode: writeback. [ 84.533456][ T2197] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038 (0x7fffffff) [ 84.557863][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.561038][ T2197] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz.0.681: Invalid inode table block 3161222217 in block_group 0 [ 84.568642][ T891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.581975][ T2197] EXT4-fs (loop0): Remounting filesystem read-only [ 84.592660][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.599046][ T2197] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 84.608536][ T891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.617814][ T2197] EXT4-fs error (device loop0): ext4_alloc_file_blocks:4527: inode #18: comm syz.0.681: mark_inode_dirty error [ 84.627411][ T891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.651301][ T891] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 84.660314][ T891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.662006][ T1775] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /48/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=3556041497, rec_len=21919, size=4096 fake=0 [ 84.669591][ T891] usb 2-1: config 0 descriptor?? [ 84.747850][ T309] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 84.756826][ T309] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 84.765023][ T309] usb 5-1: Product: syz [ 84.769476][ T309] usb 5-1: Manufacturer: syz [ 84.775008][ T309] usb 5-1: config 0 descriptor?? [ 84.876028][ T2203] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.883019][ T2203] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.890478][ T2203] device bridge_slave_0 entered promiscuous mode [ 84.899452][ T2203] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.906284][ T2203] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.913488][ T2203] device bridge_slave_1 entered promiscuous mode [ 84.948802][ T2204] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.955657][ T2204] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.962911][ T2204] device bridge_slave_0 entered promiscuous mode [ 84.971752][ T2204] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.978818][ T2204] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.985895][ T2204] device bridge_slave_1 entered promiscuous mode [ 85.044978][ T2203] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.051980][ T2203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.059138][ T2203] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.065911][ T2203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.084981][ T2204] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.091864][ T2204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.098940][ T2204] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.105792][ T2204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.115706][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.122874][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.130509][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.137539][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.162955][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.168913][ T891] hid-steam 0003:28DE:1102.0029: unknown main item tag 0x0 [ 85.170676][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.178485][ T891] hid-steam 0003:28DE:1102.0029: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 85.195151][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.196415][ T891] hid-steam 0003:28DE:1102.002A: unknown main item tag 0x0 [ 85.204932][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.211442][ T891] hid-steam 0003:28DE:1102.002A: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 85.220783][ T485] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.236027][ T485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.244437][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.253420][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.261682][ T485] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.269506][ T485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.276921][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.284816][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.292987][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.300615][ T891] hid-steam 0003:28DE:1102.0029: Steam Controller 'XXXXXXXXXX' connected [ 85.302154][ T891] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0029/input/input23 [ 85.314015][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.349934][ T309] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 85.355995][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.361926][ T309] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 85.377250][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.385791][ T309] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 85.394931][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.402550][ T309] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 85.413055][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.417807][ T309] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 85.426347][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.434416][ T309] kovaplus 0003:1E7D:2D50.002B: item fetching failed at offset 6/7 [ 85.434757][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.442787][ T309] kovaplus 0003:1E7D:2D50.002B: parse failed [ 85.458771][ T2156] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0029/input/input24 [ 85.460488][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.480593][ T309] kovaplus: probe of 0003:1E7D:2D50.002B failed with error -22 [ 85.491968][ T309] usb 2-1: USB disconnect, device number 15 [ 85.503036][ T309] hid-steam 0003:28DE:1102.0029: Steam Controller 'XXXXXXXXXX' disconnected [ 85.505438][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.528057][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.534932][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.542311][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.551235][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.564330][ T2203] device veth0_vlan entered promiscuous mode [ 85.574671][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.582856][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.590749][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.599241][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.606937][ T380] usb 5-1: USB disconnect, device number 15 [ 85.607082][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.620638][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.628734][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.635986][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.648758][ T45] device bridge_slave_1 left promiscuous mode [ 85.655210][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.664934][ T45] device bridge_slave_0 left promiscuous mode [ 85.671354][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.679949][ T45] device veth1_macvtap left promiscuous mode [ 85.685774][ T45] device veth0_vlan left promiscuous mode [ 85.771361][ T2203] device veth1_macvtap entered promiscuous mode [ 85.779698][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.787990][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.795998][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.815849][ T2226] netlink: 'syz.2.691': attribute type 27 has an invalid length. [ 85.854337][ T2226] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.861376][ T2226] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.903529][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.932111][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.940650][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.949135][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.957496][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.975925][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.989111][ T2204] device veth0_vlan entered promiscuous mode [ 85.998335][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.006075][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.031850][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.039265][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.055437][ T2204] device veth1_macvtap entered promiscuous mode [ 86.071700][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.078942][ T2249] loop2: detected capacity change from 0 to 256 [ 86.086459][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.094561][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.117572][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.128703][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.150513][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.172615][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.185747][ T2262] loop1: detected capacity change from 0 to 128 [ 86.236997][ T2262] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.251584][ T2254] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 86.260262][ T2262] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 86.291597][ T2254] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 86.329675][ T2262] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes) [ 86.352885][ T2262] overlayfs: upper fs does not support tmpfile. [ 86.359306][ T2262] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes) [ 86.424197][ T2281] syz.1.707[2281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.424264][ T2281] syz.1.707[2281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.443122][ T2281] loop1: detected capacity change from 0 to 1024 [ 86.508739][ T2281] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.529799][ T2281] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,bsddf,block_validity,dioread_nolock,noquota,errors=continue,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 86.555497][ T2281] EXT4-fs (loop1): shut down requested (0) [ 86.587866][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 86.619680][ T2299] loop3: detected capacity change from 0 to 512 [ 86.648382][ T2299] EXT4-fs (loop3): Ignoring removed bh option [ 86.655946][ T2299] EXT4-fs error (device loop3): __ext4_iget:4892: inode #15: block 1803188595: comm syz.3.717: invalid block [ 86.668388][ T2299] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.717: couldn't read orphan inode 15 (err -117) [ 86.680926][ T2299] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 86.757789][ T319] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 86.786139][ T2303] loop3: detected capacity change from 0 to 128 [ 86.837776][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 86.894162][ T2303] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.904775][ T2303] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 86.947685][ T2303] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes) [ 86.958729][ T2303] overlayfs: upper fs does not support tmpfile. [ 86.964982][ T2303] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes) [ 86.966327][ T2306] overlayfs: upper fs does not support tmpfile. [ 86.983223][ T45] device bridge_slave_1 left promiscuous mode [ 86.989206][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.999605][ T45] device bridge_slave_0 left promiscuous mode [ 87.004751][ T2306] overlayfs: upper fs does not support tmpfile. [ 87.005575][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.018791][ T26] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.027367][ T45] device veth1_macvtap left promiscuous mode [ 87.040063][ T319] usb 1-1: Using ep0 maxpacket: 32 [ 87.050416][ T45] device veth0_vlan left promiscuous mode [ 87.097798][ T26] usb 3-1: config 4 has an invalid interface number: 38 but max is 0 [ 87.105904][ T26] usb 3-1: config 4 has no interface number 0 [ 87.111888][ T26] usb 3-1: config 4 interface 38 has no altsetting 0 [ 87.168151][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.180900][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.198122][ T319] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.217600][ T319] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 87.230317][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.240282][ T319] usb 1-1: config 0 descriptor?? [ 87.277875][ T26] usb 3-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 1.18 [ 87.286939][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.295218][ T26] usb 3-1: Product: syz [ 87.299385][ T26] usb 3-1: Manufacturer: syz [ 87.303735][ T26] usb 3-1: SerialNumber: syz [ 87.348875][ T2328] SELinux: security_context_str_to_sid(s) failed for (dev ?, type ?) errno=-22 [ 87.368234][ T2328] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 87.397695][ T2333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 87.422835][ T2335] loop1: detected capacity change from 0 to 512 [ 87.431448][ T2340] loop4: detected capacity change from 0 to 128 [ 87.450574][ T2335] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.459659][ T2340] attempt to access beyond end of device [ 87.459659][ T2340] loop4: rw=34817, want=129, limit=128 [ 87.489186][ T2335] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=a002e018, mo2=0000] [ 87.497003][ T2335] EXT4-fs (loop1): failed to initialize system zone (-117) [ 87.504150][ T2335] EXT4-fs (loop1): mount failed [ 87.667861][ T26] usb 3-1: Found UVC 0.00 device syz (19ab:1000) [ 87.674268][ T26] usb 3-1: No valid video chain found. [ 87.680982][ T26] usb 3-1: USB disconnect, device number 8 [ 87.709240][ T319] ntrig 0003:1B96:000A.002C: unknown main item tag 0x0 [ 87.717811][ T319] ntrig 0003:1B96:000A.002C: unknown main item tag 0x0 [ 87.726741][ T2357] device pim6reg1 entered promiscuous mode [ 87.732990][ T319] ntrig 0003:1B96:000A.002C: unknown main item tag 0x0 [ 87.743259][ T319] ntrig 0003:1B96:000A.002C: unknown main item tag 0x0 [ 87.750286][ T319] ntrig 0003:1B96:000A.002C: unknown main item tag 0x0 [ 87.761976][ T319] ntrig 0003:1B96:000A.002C: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 87.814092][ T2361] ªªªªªª: renamed from vlan0 [ 87.890787][ T2356] loop4: detected capacity change from 0 to 40427 [ 87.908124][ T2356] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 87.918097][ T2356] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 87.927067][ T2356] F2FS-fs (loop4): invalid crc value [ 87.933559][ T2356] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.943533][ T319] usb 1-1: USB disconnect, device number 12 [ 87.968324][ T2356] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 87.975522][ T2356] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.006738][ T473] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 88.015893][ T473] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 88.035575][ T2376] kvm: emulating exchange as write [ 88.074828][ T2380] device pim6reg1 entered promiscuous mode [ 88.169011][ T2393] loop4: detected capacity change from 0 to 1024 [ 88.212366][ T2393] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 88.229338][ T2393] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noquota,barrier=0x0000000000000000,jqfmt=vfsv1,block_validity,mblk_io_submit,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 88.443712][ T2405] loop4: detected capacity change from 0 to 128 [ 88.506372][ T2405] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.527140][ T2405] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 88.589409][ T2405] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes) [ 88.606398][ T2412] loop0: detected capacity change from 0 to 128 [ 88.613181][ T2405] overlayfs: upper fs does not support tmpfile. [ 88.619743][ T2405] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes) [ 88.720427][ T2388] loop1: detected capacity change from 0 to 131072 [ 88.738011][ T2412] loop_set_status: loop0 () has still dirty pages (nrpages=16) [ 88.754448][ T2204] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 88.762460][ T2204] FAT-fs (loop0): Filesystem has been set read-only [ 88.767820][ T319] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 88.769379][ T2204] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 88.784589][ T2417] device pim6reg1 entered promiscuous mode [ 88.792032][ T2388] F2FS-fs (loop1): invalid crc value [ 88.809289][ T2388] F2FS-fs (loop1): Found nat_bits in checkpoint [ 88.832076][ T2388] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 88.842791][ T2388] F2FS-fs (loop1): Corrupted max_depth of 3: 16842753 [ 88.865257][ T2423] loop4: detected capacity change from 0 to 2048 [ 88.909491][ T2423] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.064190][ T2429] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.071677][ T2429] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.079132][ T2429] device bridge_slave_0 entered promiscuous mode [ 89.085981][ T2429] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.093991][ T2429] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.101191][ T2429] device bridge_slave_1 entered promiscuous mode [ 89.144694][ T2429] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.151564][ T2429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.158652][ T2429] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.165424][ T2429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.167864][ T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.184382][ T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.194470][ T319] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.207312][ T319] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.216268][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.225039][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.225055][ T319] usb 4-1: config 0 descriptor?? [ 89.236905][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.244104][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.257955][ T2232] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 89.265444][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.273680][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.282301][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.289242][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.296481][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.305035][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.313039][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.319866][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.327025][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.334986][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.342728][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.350670][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.358388][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.366400][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.378890][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.386664][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.394917][ T2429] device veth0_vlan entered promiscuous mode [ 89.401022][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.409057][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.422482][ T2429] device veth1_macvtap entered promiscuous mode [ 89.428839][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.436789][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.445041][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.457820][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.465836][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.473967][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.482085][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.509287][ T2232] usb 3-1: Using ep0 maxpacket: 16 [ 89.523289][ T473] device bridge_slave_1 left promiscuous mode [ 89.529691][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.536997][ T473] device bridge_slave_0 left promiscuous mode [ 89.543209][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.551900][ T473] device veth1_macvtap left promiscuous mode [ 89.557854][ T473] device veth0_vlan left promiscuous mode [ 89.647868][ T2232] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 89.655729][ T2232] usb 3-1: config 0 has no interface number 0 [ 89.661634][ T2232] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 89.672053][ T2232] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 89.708821][ T319] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 89.720057][ T319] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 89.797954][ T2232] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 89.807114][ T2232] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 89.814929][ T2232] usb 3-1: Product: syz [ 89.819097][ T2232] usb 3-1: SerialNumber: syz [ 89.824318][ T2232] usb 3-1: config 0 descriptor?? [ 89.978532][ T319] usb 4-1: USB disconnect, device number 12 [ 90.108547][ T2232] snd-usb-audio: probe of 3-1:0.2 failed with error -12 [ 90.115947][ T2232] usb 3-1: USB disconnect, device number 9 [ 90.499142][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 90.499157][ T30] audit: type=1400 audit(1726500682.950:787): avc: denied { map } for pid=2448 comm="syz.0.782" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.531104][ T30] audit: type=1400 audit(1726500682.950:788): avc: denied { execute } for pid=2448 comm="syz.0.782" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.558408][ T30] audit: type=1326 audit(1726500683.020:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f112aef9 code=0x7ffc0000 [ 90.588034][ T30] audit: type=1326 audit(1726500683.020:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f112aef9 code=0x7ffc0000 [ 90.589256][ T2455] loop0: detected capacity change from 0 to 128 [ 90.617309][ T30] audit: type=1326 audit(1726500683.020:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ff7f112aef9 code=0x7ffc0000 [ 90.649832][ T30] audit: type=1326 audit(1726500683.020:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f112aef9 code=0x7ffc0000 [ 90.674003][ T30] audit: type=1326 audit(1726500683.020:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f112aef9 code=0x7ffc0000 [ 90.699907][ T30] audit: type=1326 audit(1726500683.020:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7ff7f112aef9 code=0x7ffc0000 [ 90.733256][ T30] audit: type=1326 audit(1726500683.040:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f112aef9 code=0x7ffc0000 [ 90.756908][ T30] audit: type=1326 audit(1726500683.040:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f112aef9 code=0x7ffc0000 [ 90.781437][ T2232] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 90.793157][ T2455] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.804239][ T2455] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 90.854827][ T2455] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes) [ 90.879115][ T2455] overlayfs: upper fs does not support tmpfile. [ 90.885328][ T2455] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes) [ 91.047812][ T2232] usb 4-1: Using ep0 maxpacket: 8 [ 91.059080][ T2476] loop0: detected capacity change from 0 to 128 [ 91.168117][ T2232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.189068][ T2232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.212835][ T2472] loop4: detected capacity change from 0 to 40427 [ 91.219336][ T2232] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.234963][ T2232] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 91.244190][ T2232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.254477][ T2232] usb 4-1: config 0 descriptor?? [ 91.273782][ T2472] F2FS-fs (loop4): invalid crc value [ 91.318354][ T2472] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.396251][ T2472] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 91.412774][ T2472] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 91.482054][ T1698] attempt to access beyond end of device [ 91.482054][ T1698] loop4: rw=524288, want=45072, limit=40427 [ 91.512167][ T1698] attempt to access beyond end of device [ 91.512167][ T1698] loop4: rw=0, want=45072, limit=40427 [ 91.563784][ T1698] attempt to access beyond end of device [ 91.563784][ T1698] loop4: rw=2049, want=45104, limit=40427 [ 91.648209][ T2500] loop0: detected capacity change from 0 to 128 [ 91.712921][ T2500] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.729241][ T2500] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 91.762939][ T2503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2503 comm=syz.2.795 [ 91.777160][ T2232] hid-steam 0003:28DE:1102.002E: unknown main item tag 0x0 [ 91.795947][ T2500] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes) [ 91.809600][ T2232] hid-steam 0003:28DE:1102.002E: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 91.827864][ T2500] overlayfs: upper fs does not support tmpfile. [ 91.843669][ T2500] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes) [ 91.845094][ T2232] hid-steam 0003:28DE:1102.002F: unknown main item tag 0x0 [ 91.867002][ T2503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.795'. [ 91.876057][ T2232] hid-steam 0003:28DE:1102.002F: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 91.909638][ T2507] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.916801][ T2507] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.925812][ T2507] device bridge_slave_0 entered promiscuous mode [ 91.932981][ T2507] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.940076][ T2507] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.947395][ T2507] device bridge_slave_1 entered promiscuous mode [ 91.957839][ T2232] hid-steam 0003:28DE:1102.002E: Steam Controller 'XXXXXXXXXX' connected [ 91.977102][ T2517] loop0: detected capacity change from 0 to 4096 [ 91.980019][ T2520] loop2: detected capacity change from 0 to 256 [ 91.989582][ T2447] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.002E/input/input26 [ 92.001117][ T2232] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.002E/input/input25 [ 92.015513][ T2232] usb 4-1: USB disconnect, device number 13 [ 92.033262][ T2520] FAT-fs (loop2): Directory bread(block 64) failed [ 92.040853][ T2520] FAT-fs (loop2): Directory bread(block 65) failed [ 92.047244][ T2520] FAT-fs (loop2): Directory bread(block 66) failed [ 92.055294][ T2517] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.061966][ T2520] FAT-fs (loop2): Directory bread(block 67) failed [ 92.079666][ T2232] hid-steam 0003:28DE:1102.002E: Steam Controller 'XXXXXXXXXX' disconnected [ 92.088449][ T2520] FAT-fs (loop2): Directory bread(block 68) failed [ 92.095658][ T2520] FAT-fs (loop2): Directory bread(block 69) failed [ 92.105404][ T2520] FAT-fs (loop2): Directory bread(block 70) failed [ 92.112419][ T2520] FAT-fs (loop2): Directory bread(block 71) failed [ 92.136837][ T2520] FAT-fs (loop2): Directory bread(block 72) failed [ 92.143552][ T2520] FAT-fs (loop2): Directory bread(block 73) failed [ 92.184929][ T2507] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.191798][ T2507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.199076][ T2507] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.205842][ T2507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.237022][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.239327][ T2529] loop0: detected capacity change from 0 to 2048 [ 92.250870][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.258341][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.276603][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.280652][ T1872] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 92.285587][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.298754][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.313471][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.317845][ T1872] FAT-fs (loop2): Filesystem has been set read-only [ 92.321927][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.334652][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.342426][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.350970][ T2529] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.361710][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.381742][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.405181][ T2507] device veth0_vlan entered promiscuous mode [ 92.415681][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.423897][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.473684][ T2507] device veth1_macvtap entered promiscuous mode [ 92.487192][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.498179][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.505412][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.558082][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.568589][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.630918][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.640196][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.653037][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.685883][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.689742][ T2545] loop4: detected capacity change from 0 to 512 [ 92.719707][ T2547] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 92.762621][ T2545] EXT4-fs (loop4): Ignoring removed bh option [ 92.793448][ T2545] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 92.866598][ T2536] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.880444][ T2536] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.888224][ T2545] EXT4-fs (loop4): 1 truncate cleaned up [ 92.893675][ T2545] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 92.911372][ T2536] device bridge_slave_0 entered promiscuous mode [ 92.937584][ T2536] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.967817][ T2536] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.975554][ T2536] device bridge_slave_1 entered promiscuous mode [ 93.131915][ T2536] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.138696][ T2568] syz.3.819[2568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.138803][ T2536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.138814][ T2568] syz.3.819[2568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.157182][ T2536] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.175419][ T2536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.184737][ T2545] EXT4-fs warning (device loop4): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 93.265768][ T2228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.274723][ T2228] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.297014][ T2228] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.323147][ T2228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.325304][ T2579] loop4: detected capacity change from 0 to 1024 [ 93.338059][ T2228] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.344925][ T2228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.354438][ T2228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.363180][ T2228] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.370040][ T2228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.381144][ T2579] EXT4-fs (loop4): Ignoring removed bh option [ 93.392404][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.401167][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.420945][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.430144][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.438695][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.439001][ T2579] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,errors=remount-ro,norecovery,debug_want_extra_isize=0x0000000000000080,bh,nodelalloc,usrquota,noauto_da_alloc,. Quota mode: writeback. [ 93.446435][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.477770][ T26] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 93.480512][ T2536] device veth0_vlan entered promiscuous mode [ 93.494201][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.502066][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.515309][ T2536] device veth1_macvtap entered promiscuous mode [ 93.524771][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.526452][ T2579] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #18: block 115: comm syz.4.824: lblock 3 mapped to illegal pblock 115 (length 1) [ 93.538758][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.555782][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.563420][ T2579] EXT4-fs (loop4): Remounting filesystem read-only [ 93.591119][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.599236][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.607346][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.615872][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.727940][ T2232] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 93.739078][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 93.763728][ T2599] bridge0: port 3(vlan0) entered blocking state [ 93.771806][ T2599] bridge0: port 3(vlan0) entered disabled state [ 93.778847][ T2599] device vlan0 entered promiscuous mode [ 93.784507][ T2599] bridge0: port 3(vlan0) entered blocking state [ 93.790675][ T2599] bridge0: port 3(vlan0) entered forwarding state [ 93.798678][ T2599] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 93.815174][ T2599] device vlan0 left promiscuous mode [ 93.820520][ T2599] bridge0: port 3(vlan0) entered disabled state [ 93.857855][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.858876][ T2604] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 93.891944][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.903512][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.916731][ T26] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 93.925776][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.951481][ T26] usb 1-1: config 0 descriptor?? [ 93.962805][ T2608] input: syz0 as /devices/virtual/input/input27 [ 93.969610][ T2609] loop4: detected capacity change from 0 to 512 [ 93.976877][ T2608] ================================================================== [ 93.984842][ T2608] BUG: KASAN: use-after-free in mutex_lock+0xa9/0x1e0 [ 93.991432][ T2608] Write of size 8 at addr ffff8881228fb050 by task syz.2.835/2608 [ 93.999259][ T2608] [ 94.001413][ T2608] CPU: 1 PID: 2608 Comm: syz.2.835 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 94.012434][ T2608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 94.022340][ T2608] Call Trace: [ 94.025452][ T2608] [ 94.028243][ T2608] dump_stack_lvl+0x151/0x1c0 [ 94.028479][ T2232] usb 4-1: Using ep0 maxpacket: 16 [ 94.032746][ T2608] ? io_uring_drop_tctx_refs+0x190/0x190 [ 94.032778][ T2608] ? __wake_up_klogd+0xd5/0x110 [ 94.047851][ T2608] ? panic+0x760/0x760 [ 94.051752][ T2608] ? vfs_open+0x73/0x80 [ 94.055840][ T2608] print_address_description+0x87/0x3b0 [ 94.061213][ T2608] kasan_report+0x179/0x1c0 [ 94.065551][ T2608] ? mutex_lock+0xa9/0x1e0 [ 94.069805][ T2608] ? mutex_lock+0xa9/0x1e0 [ 94.074269][ T2608] kasan_check_range+0x293/0x2a0 [ 94.079006][ T2608] __kasan_check_write+0x14/0x20 [ 94.083779][ T2608] mutex_lock+0xa9/0x1e0 [ 94.087946][ T2608] ? wait_for_completion_killable_timeout+0x10/0x10 [ 94.094365][ T2608] steam_input_open+0x91/0x1a0 [ 94.098966][ T2608] ? steam_input_register+0xa70/0xa70 [ 94.104171][ T2608] ? __kasan_check_write+0x14/0x20 [ 94.109121][ T2608] ? mutex_lock_interruptible+0xb6/0x1e0 [ 94.114588][ T2608] ? __kasan_check_write+0x14/0x20 [ 94.119624][ T2608] input_open_device+0x1a5/0x310 [ 94.124397][ T2608] ? kobject_get_unless_zero+0x229/0x320 [ 94.129865][ T2608] evdev_open+0x3df/0x620 [ 94.134043][ T2608] chrdev_open+0x4f7/0x620 [ 94.138286][ T2608] ? cd_forget+0x170/0x170 [ 94.142537][ T2608] ? fsnotify_perm+0x4ba/0x5d0 [ 94.147139][ T2608] ? cd_forget+0x170/0x170 [ 94.151391][ T2608] do_dentry_open+0x81c/0xfd0 [ 94.155905][ T2608] vfs_open+0x73/0x80 [ 94.159722][ T2608] path_openat+0x26f0/0x2f40 [ 94.164154][ T2608] ? __kasan_slab_alloc+0xb1/0xe0 [ 94.169009][ T2608] ? kmem_cache_alloc+0xf5/0x200 [ 94.173783][ T2608] ? getname_flags+0xba/0x520 [ 94.178294][ T2608] ? __x64_sys_openat+0x243/0x290 [ 94.183156][ T2608] ? do_filp_open+0x460/0x460 [ 94.187673][ T2608] do_filp_open+0x21c/0x460 [ 94.192020][ T2608] ? vfs_tmpfile+0x2c0/0x2c0 [ 94.196440][ T2608] do_sys_openat2+0x13f/0x830 [ 94.200948][ T2608] ? do_sys_open+0x220/0x220 [ 94.205374][ T2608] ? debug_smp_processor_id+0x17/0x20 [ 94.210582][ T2608] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 94.216493][ T2608] ? exit_to_user_mode_prepare+0x39/0xa0 [ 94.221951][ T2608] ? irqentry_exit+0x12/0x40 [ 94.226378][ T2608] ? exc_page_fault+0x47a/0x7f0 [ 94.231292][ T2608] __x64_sys_openat+0x243/0x290 [ 94.235966][ T2608] ? __ia32_sys_open+0x270/0x270 [ 94.240742][ T2608] x64_sys_call+0x6bf/0x9a0 [ 94.245534][ T2608] do_syscall_64+0x3b/0xb0 [ 94.249767][ T2608] ? clear_bhb_loop+0x35/0x90 [ 94.254285][ T2608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.260010][ T2608] RIP: 0033:0x7f2c6c0a5890 [ 94.264360][ T2608] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 94.283791][ T2608] RSP: 002b:00007f2c6ad1fb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 94.292034][ T2608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2c6c0a5890 [ 94.299847][ T2608] RDX: 0000000000000000 RSI: 00007f2c6ad1fc10 RDI: 00000000ffffff9c [ 94.307656][ T2608] RBP: 00007f2c6ad1fc10 R08: 0000000000000000 R09: 0000000000000000 [ 94.315468][ T2608] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.323280][ T2608] R13: 0000000000000000 R14: 00007f2c6c25ef80 R15: 00007ffce4f58108 [ 94.331106][ T2608] [ 94.333954][ T2608] [ 94.336130][ T2608] Allocated by task 2232: [ 94.340301][ T2608] ____kasan_kmalloc+0xdb/0x110 [ 94.344980][ T2608] __kasan_kmalloc+0x9/0x10 [ 94.349406][ T2608] __kmalloc_track_caller+0x139/0x260 [ 94.354611][ T2608] devm_kmalloc+0x4f/0x160 [ 94.358955][ T2608] steam_probe+0x11d/0xa80 [ 94.363236][ T2608] hid_device_probe+0x261/0x390 [ 94.367910][ T2608] really_probe+0x28d/0x970 [ 94.372266][ T2608] __driver_probe_device+0x1a0/0x310 [ 94.377351][ T2608] driver_probe_device+0x54/0x3d0 [ 94.382215][ T2608] __device_attach_driver+0x2c5/0x470 [ 94.387421][ T2608] bus_for_each_drv+0x183/0x200 [ 94.392108][ T2608] __device_attach+0x312/0x510 [ 94.396707][ T2608] device_initial_probe+0x1a/0x20 [ 94.401569][ T2608] bus_probe_device+0xbe/0x1e0 [ 94.406166][ T2608] device_add+0xb60/0xf10 [ 94.410345][ T2608] hid_add_device+0x39c/0x4e0 [ 94.414858][ T2608] usbhid_probe+0xb0e/0xea0 [ 94.419205][ T2608] usb_probe_interface+0x5b6/0xa90 [ 94.424137][ T2608] really_probe+0x28d/0x970 [ 94.428477][ T2608] __driver_probe_device+0x1a0/0x310 [ 94.433594][ T2608] driver_probe_device+0x54/0x3d0 [ 94.438456][ T2608] __device_attach_driver+0x2c5/0x470 [ 94.443668][ T2608] bus_for_each_drv+0x183/0x200 [ 94.448359][ T2608] __device_attach+0x312/0x510 [ 94.452950][ T2608] device_initial_probe+0x1a/0x20 [ 94.457811][ T2608] bus_probe_device+0xbe/0x1e0 [ 94.462409][ T2608] device_add+0xb60/0xf10 [ 94.466576][ T2608] usb_set_configuration+0x190f/0x1e80 [ 94.471870][ T2608] usb_generic_driver_probe+0x8b/0x150 [ 94.477191][ T2608] usb_probe_device+0x144/0x260 [ 94.481853][ T2608] really_probe+0x28d/0x970 [ 94.486202][ T2608] __driver_probe_device+0x1a0/0x310 [ 94.491323][ T2608] driver_probe_device+0x54/0x3d0 [ 94.496200][ T2608] __device_attach_driver+0x2c5/0x470 [ 94.501383][ T2608] bus_for_each_drv+0x183/0x200 [ 94.506069][ T2608] __device_attach+0x312/0x510 [ 94.510668][ T2608] device_initial_probe+0x1a/0x20 [ 94.515529][ T2608] bus_probe_device+0xbe/0x1e0 [ 94.520127][ T2608] device_add+0xb60/0xf10 [ 94.524292][ T2608] usb_new_device+0x1038/0x1c00 [ 94.528980][ T2608] hub_event+0x2def/0x4770 [ 94.533418][ T2608] process_one_work+0x6bb/0xc10 [ 94.538100][ T2608] worker_thread+0xad5/0x12a0 [ 94.542615][ T2608] kthread+0x421/0x510 [ 94.546519][ T2608] ret_from_fork+0x1f/0x30 [ 94.550774][ T2608] [ 94.552945][ T2608] Freed by task 2232: [ 94.556774][ T2608] kasan_set_track+0x4b/0x70 [ 94.561194][ T2608] kasan_set_free_info+0x23/0x40 [ 94.566049][ T2608] ____kasan_slab_free+0x126/0x160 [ 94.571345][ T2608] __kasan_slab_free+0x11/0x20 [ 94.575945][ T2608] slab_free_freelist_hook+0xbd/0x190 [ 94.581156][ T2608] kfree+0xc8/0x220 [ 94.584797][ T2608] release_nodes+0xf1/0x230 [ 94.589138][ T2608] devres_release_all+0x148/0x1a0 [ 94.593996][ T2608] device_release_driver_internal+0x51a/0x7d0 [ 94.599987][ T2608] device_release_driver+0x19/0x20 [ 94.605021][ T2608] bus_remove_device+0x2f8/0x360 [ 94.609880][ T2608] device_del+0x663/0xe90 [ 94.614045][ T2608] hid_destroy_device+0x68/0x110 [ 94.618819][ T2608] usbhid_disconnect+0x9e/0xc0 [ 94.623423][ T2608] usb_unbind_interface+0x1fa/0x8c0 [ 94.628456][ T2608] device_release_driver_internal+0x50b/0x7d0 [ 94.634356][ T2608] device_release_driver+0x19/0x20 [ 94.639302][ T2608] bus_remove_device+0x2f8/0x360 [ 94.644252][ T2608] device_del+0x663/0xe90 [ 94.648422][ T2608] usb_disable_device+0x380/0x720 [ 94.653278][ T2608] usb_disconnect+0x32a/0x890 [ 94.657791][ T2608] hub_event+0x1d42/0x4770 [ 94.662043][ T2608] process_one_work+0x6bb/0xc10 [ 94.666730][ T2608] worker_thread+0xe02/0x12a0 [ 94.671254][ T2608] kthread+0x421/0x510 [ 94.675148][ T2608] ret_from_fork+0x1f/0x30 [ 94.679402][ T2608] [ 94.681572][ T2608] The buggy address belongs to the object at ffff8881228fb000 [ 94.681572][ T2608] which belongs to the cache kmalloc-512 of size 512 [ 94.695458][ T2608] The buggy address is located 80 bytes inside of [ 94.695458][ T2608] 512-byte region [ffff8881228fb000, ffff8881228fb200) [ 94.708824][ T2608] The buggy address belongs to the page: [ 94.714394][ T2608] page:ffffea00048a3e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881228f8c00 pfn:0x1228f8 [ 94.725835][ T2608] head:ffffea00048a3e00 order:2 compound_mapcount:0 compound_pincount:0 [ 94.733996][ T2608] flags: 0x4000000000010200(slab|head|zone=1) [ 94.739906][ T2608] raw: 4000000000010200 ffffea000480d608 ffffea0004945008 ffff888100042f00 [ 94.748325][ T2608] raw: ffff8881228f8c00 000000000010000f 00000001ffffffff 0000000000000000 [ 94.756735][ T2608] page dumped because: kasan: bad access detected [ 94.762992][ T2608] page_owner tracks the page as allocated [ 94.768627][ T2608] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 291, ts 19913484428, free_ts 0 [ 94.786913][ T2608] post_alloc_hook+0x1a3/0x1b0 [ 94.791452][ T2608] prep_new_page+0x1b/0x110 [ 94.795789][ T2608] get_page_from_freelist+0x3550/0x35d0 [ 94.801187][ T2608] __alloc_pages+0x27e/0x8f0 [ 94.805599][ T2608] new_slab+0x9a/0x4e0 [ 94.809597][ T2608] ___slab_alloc+0x39e/0x830 [ 94.814017][ T2608] __slab_alloc+0x4a/0x90 [ 94.818184][ T2608] kmem_cache_alloc_trace+0x142/0x210 [ 94.823393][ T2608] inetdev_init+0x83/0x4b0 [ 94.827643][ T2608] inetdev_event+0x205/0x10a0 [ 94.832418][ T2608] raw_notifier_call_chain+0x8c/0xf0 [ 94.837974][ T2608] call_netdevice_notifiers+0x145/0x1b0 [ 94.843354][ T2608] register_netdevice+0x1035/0x1390 [ 94.848387][ T2608] register_netdev+0x3c/0x50 [ 94.852817][ T2608] ip6gre_init_net+0x253/0x320 [ 94.857414][ T2608] ops_init+0x1cd/0x4a0 [ 94.861408][ T2608] page_owner free stack trace missing [ 94.866701][ T2608] [ 94.868870][ T2608] Memory state around the buggy address: [ 94.874557][ T2608] ffff8881228faf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.882552][ T2608] ffff8881228faf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.890526][ T2608] >ffff8881228fb000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.898417][ T2608] ^ [ 94.904931][ T2608] ffff8881228fb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.912828][ T2608] ffff8881228fb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.921161][ T2608] ================================================================== [ 94.929058][ T2608] Disabling lock debugging due to kernel taint [ 94.943636][ T2608] hid 0003:28DE:1102.002E: No HID_FEATURE_REPORT submitted - nothing to read [ 94.952615][ T2608] hid 0003:28DE:1102.002E: No HID_FEATURE_REPORT submitted - nothing to read [ 94.952941][ T347] device bridge_slave_1 left promiscuous mode [ 94.972662][ T2608] hid 0003:28DE:1102.002E: No HID_FEATURE_REPORT submitted - nothing to read [ 94.974588][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.993028][ T347] device bridge_slave_0 left promiscuous mode [ 94.997928][ T2608] hid 0003:28DE:1102.002E: No HID_FEATURE_REPORT submitted - nothing to read [ 95.007589][ T2608] hid 0003:28DE:1102.002E: No HID_FEATURE_REPORT submitted - nothing to read [ 95.018320][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.020409][ T2609] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.836: bg 0: block 5: invalid block bitmap [ 95.038114][ T2609] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 95.057806][ T2232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.064289][ T2609] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.836: invalid indirect mapped block 3 (level 2) [ 95.077744][ T2232] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.094396][ T2232] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.103283][ T2232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.111715][ T2232] usb 4-1: config 0 descriptor?? [ 95.117138][ T2609] EXT4-fs (loop4): 1 orphan inode deleted [ 95.122724][ T2609] EXT4-fs (loop4): 1 truncate cleaned up [ 95.128235][ T2609] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.449404][ T26] hid-steam 0003:28DE:1102.0030: unknown main item tag 0x0 [ 95.456624][ T26] hid-steam 0003:28DE:1102.0030: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 95.468250][ T26] hid-steam 0003:28DE:1102.0031: unknown main item tag 0x0 [ 95.477040][ T26] hid-steam 0003:28DE:1102.0031: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 95.567814][ T26] hid-steam 0003:28DE:1102.0030: Steam Controller 'XXXXXXXXXX' connected [ 95.576701][ T26] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0030/input/input28 [ 95.599052][ T2232] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 95.606138][ T2232] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 95.613617][ T2232] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 95.620688][ T2232] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 95.627678][ T2232] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 95.634961][ T2232] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 95.641987][ T2232] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 95.649070][ T2232] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 95.656053][ T2232] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 95.663492][ T2232] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 95.666682][ T2569] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0030/input/input29 [ 95.680983][ T2232] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0032/input/input30 [ 95.687587][ T2228] usb 1-1: USB disconnect, device number 13 [ 95.759906][ T2232] microsoft 0003:045E:07DA.0032: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 95.772259][ T2228] hid-steam 0003:28DE:1102.0030: Steam Controller 'XXXXXXXXXX' disconnected [ 96.014670][ T2228] usb 4-1: USB disconnect, device number 14