last executing test programs: 2.747849017s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f00003af000/0x3000)=nil, 0x3000, 0x0) 2.730542589s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x1, &(0x7f0000000340)=@raw=[@ldst], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.687156026s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1c5002, 0x0) ftruncate(r3, 0x5d801) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x107042, 0x0) write(r5, &(0x7f0000000400)="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", 0x353c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={0x0}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000240)={0x3920e, r2}) 2.534514239s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='ext4_allocate_blocks\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r2}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 2.480849348s ago: executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x5, &(0x7f0000000080)=[{0x2d, 0x0, 0x3}, {}, {}, {}, {0x6}]}) 2.480311098s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) 2.425062417s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) dup3(r3, r4, 0x0) 2.414538228s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, &(0x7f0000000780)={0x2020}, 0x2020) dup2(r1, r2) 2.413606428s ago: executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/173, 0xad}], 0x1, 0x37, 0x0) 2.40438558s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.396784201s ago: executing program 4: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_evict_inode\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000000), &(0x7f0000000180)=r0}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') 2.387284162s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0x100000530) 2.381082184s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x31, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@lld}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002100010000000000000000000a00000000000002"], 0x1c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r4, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00'}, 0x10) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='quota,alloc_mode=default,usrjquota=\\\'%#--+[:,flush_merge,resuid=', @ANYRESHEX=0x0, @ANYBLOB="2c6261636b67726f756e645f67633d73796e632c6e6f6c617a7974696d652c6a71666d743d76667376312c657874656e745f63616368652c6772706a71756f74613d666c7573685f6d657267652c66617374626f6f742c6e6f666c7573685f6d657267652c0038908b64095c58226c3d76204cc8c8f778a8cd7e32a4d42314eb8bce7a97ec5889ff28465d04debeed280593fe106e3c1d97275aef6d029eec69fc67ea099b92b81d"], 0x1, 0x54ff, &(0x7f0000000a40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000312000000120333d7"], 0x0, 0x0, 0x0}, 0x0) 2.353345988s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 2.33607144s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_sync_file_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='ext4_sync_file_enter\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r4, &(0x7f0000000980), 0x12) 2.302465476s ago: executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3158}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001040)={0x14, 0x0, &(0x7f0000001000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.542046193s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) 1.374960338s ago: executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@private}, {@in=@dev, 0x0, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@grpquota}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@delalloc}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0) 1.034649531s ago: executing program 0: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c81, &(0x7f0000005780)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b1fac57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000665988ad55f281047000000000000000003000000000100", "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"}) 1.028700462s ago: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x54}, {0xa4}, {0x6}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 320.664371ms ago: executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r2, &(0x7f00000007c0)}, 0x20) 308.454703ms ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 296.183375ms ago: executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x27, 0x3, 0x0, 0x0, 0x7fff, 0x6, 0x1000}}, 0x50) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x11000, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000280)=""/144, 0x90}, {&(0x7f0000000200)=""/16, 0x10}, {&(0x7f0000000340)=""/73, 0x49}, {&(0x7f0000000400)=""/143, 0x8f}], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1a343e, 0x8) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r5, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000041) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ftruncate(r6, 0x2008002) write$FUSE_IOCTL(r4, &(0x7f00000006c0)={0x20, 0x0, r1, {0x6, 0x0, 0xffff, 0x2}}, 0x20) listen(r4, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 209.119608ms ago: executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c0600000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 185.083372ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000500)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) getgroups(0x0, 0x0) 173.073803ms ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r0) 133.03853ms ago: executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fa0000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x98) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300), 0x48) 118.135692ms ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000040000000e200000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 107.806024ms ago: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e8b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='fib6_table_lookup\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000ac0)="9d3a681ff560de92456d871feea7b891f3c456fa7f70820800000000000000000020000000000000", 0x28, 0x0, 0x0, 0x0) 0s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='block_split\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='block_split\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) kernel console output (not intermixed with test programs): td_printk_skb: 74 callbacks suppressed [ 92.821483][ T28] audit: type=1326 audit(1717451301.148:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39c887cf69 code=0x0 [ 93.027610][ T518] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 93.217900][ T345] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 93.226985][ T345] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001A/input/input35 [ 93.308859][ T345] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 93.387564][ T518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.398298][ T518] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.410967][ T518] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.419839][ T518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.428558][ T518] usb 4-1: config 0 descriptor?? [ 93.433194][ T346] usb 5-1: USB disconnect, device number 11 [ 93.908044][ T518] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 93.915304][ T518] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 93.922536][ T518] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 93.929679][ T518] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 93.936863][ T518] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 93.944095][ T518] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 93.951346][ T518] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 93.958787][ T518] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 93.966545][ T518] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 93.974150][ T2690] loop4: detected capacity change from 0 to 2048 [ 93.975040][ T518] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 93.998990][ T2690] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.017491][ T346] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 94.019701][ T2371] EXT4-fs (loop4): unmounting filesystem. [ 94.135289][ T28] audit: type=1326 audit(1717451302.458:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f940c27a6e7 code=0x7ffc0000 [ 94.159038][ T28] audit: type=1326 audit(1717451302.458:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f940c2403c9 code=0x7ffc0000 [ 94.182903][ T28] audit: type=1326 audit(1717451302.458:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940c27cf69 code=0x7ffc0000 [ 94.206721][ T28] audit: type=1326 audit(1717451302.458:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f940c27a6e7 code=0x7ffc0000 [ 94.230478][ T28] audit: type=1326 audit(1717451302.458:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f940c2403c9 code=0x7ffc0000 [ 94.254173][ T28] audit: type=1326 audit(1717451302.458:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940c27cf69 code=0x7ffc0000 [ 94.277923][ T28] audit: type=1326 audit(1717451302.458:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f940c27a6e7 code=0x7ffc0000 [ 94.301720][ T28] audit: type=1326 audit(1717451302.458:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f940c2403c9 code=0x7ffc0000 [ 94.325419][ T28] audit: type=1326 audit(1717451302.458:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940c27cf69 code=0x7ffc0000 [ 94.330127][ T327] usb 4-1: USB disconnect, device number 16 [ 94.447521][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.458334][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.468047][ T346] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.476899][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.486863][ T346] usb 3-1: config 0 descriptor?? [ 94.528976][ T2709] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.573561][ T2713] loop0: detected capacity change from 0 to 512 [ 94.580565][ T2713] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.587968][ T2713] EXT4-fs: journaled quota format not specified [ 94.967731][ T346] hid (null): bogus close delimiter [ 95.017507][ T327] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 95.347978][ T346] usb 3-1: language id specifier not provided by device, defaulting to English [ 95.461931][ T2748] loop3: detected capacity change from 0 to 512 [ 95.468312][ T2748] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.475961][ T2748] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.3: inline data xattr refers to an external xattr inode [ 95.491255][ T2748] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 95.503442][ T2748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.521691][ T2489] EXT4-fs (loop3): unmounting filesystem. [ 95.579294][ T327] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.589439][ T327] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.677594][ T327] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 95.686518][ T327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 95.694406][ T327] usb 1-1: SerialNumber: syz [ 95.788807][ T346] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001C/input/input37 [ 95.801027][ T346] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001C/input/input38 [ 95.813561][ T346] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001C/input/input39 [ 95.827158][ T346] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001C/input/input40 [ 95.840166][ T346] uclogic 0003:256C:006D.001C: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 95.977899][ T327] usb 1-1: 0:2 : does not exist [ 95.984008][ T327] usb 1-1: USB disconnect, device number 15 [ 95.999981][ T39] usb 3-1: USB disconnect, device number 9 [ 96.710236][ T2796] loop0: detected capacity change from 0 to 512 [ 96.716895][ T2796] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.742338][ T2796] EXT4-fs: journaled quota format not specified [ 96.845418][ T2809] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.847502][ T346] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 97.007500][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 97.105651][ T2825] loop0: detected capacity change from 0 to 512 [ 97.112654][ T2825] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.128495][ T2825] EXT4-fs (loop0): failed to initialize system zone (-117) [ 97.135590][ T2825] EXT4-fs (loop0): mount failed [ 97.217652][ T346] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.227600][ T346] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.307663][ T346] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.316658][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.324617][ T346] usb 4-1: SerialNumber: syz [ 97.367552][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.378477][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.388167][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 97.397235][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.454947][ T2830] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.465536][ T2830] device gretap0 entered promiscuous mode [ 97.508086][ T2830] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.517595][ T2830] 0ªX¹¦D: renamed from gretap0 [ 97.525818][ T2830] device 30ªX¹¦D left promiscuous mode [ 97.533952][ T2830] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 97.581949][ T6] usb 3-1: config 0 descriptor?? [ 97.618808][ T346] usb 4-1: 0:2 : does not exist [ 97.625190][ T346] usb 4-1: USB disconnect, device number 17 [ 97.927496][ T345] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 98.057684][ T6] hid (null): bogus close delimiter [ 98.113345][ T2850] syz-executor.3[2850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.113399][ T2850] syz-executor.3[2850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.126333][ T28] kauditd_printk_skb: 12924 callbacks suppressed [ 98.126347][ T28] audit: type=1400 audit(1717451306.458:14323): avc: denied { read } for pid=2849 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.205378][ T2857] loop0: detected capacity change from 0 to 256 [ 98.270065][ T2857] kvm: emulating exchange as write [ 98.287587][ T6] usb 3-1: language id specifier not provided by device, defaulting to English [ 98.377583][ T345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.388504][ T345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.398743][ T345] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 98.408000][ T345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.427121][ T345] usb 5-1: config 0 descriptor?? [ 98.851274][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001D/input/input41 [ 98.863953][ T6] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001D/input/input42 [ 98.876308][ T6] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001D/input/input43 [ 98.889204][ T6] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001D/input/input44 [ 98.901903][ T6] uclogic 0003:256C:006D.001D: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 98.928389][ T2834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.936732][ T2834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.948582][ T345] hid-generic 0003:1B1C:1B3E.001E: unknown main item tag 0x7 [ 98.955837][ T345] hid-generic 0003:1B1C:1B3E.001E: unknown main item tag 0x4 [ 98.969555][ T345] hid-generic 0003:1B1C:1B3E.001E: failed to start in urb: -90 [ 98.977085][ T6] usb 3-1: USB disconnect, device number 10 [ 98.983089][ T345] hid-generic 0003:1B1C:1B3E.001E: hidraw1: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 99.007508][ T346] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 99.151353][ T345] usb 5-1: USB disconnect, device number 12 [ 99.367872][ T346] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.378728][ T346] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.467504][ T346] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 99.476412][ T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.484764][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.491994][ T346] usb 1-1: SerialNumber: syz [ 99.497167][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.508821][ T2889] device bridge_slave_0 entered promiscuous mode [ 99.516129][ T2889] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.523227][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.534113][ T2889] device bridge_slave_1 entered promiscuous mode [ 99.610419][ T2889] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.617293][ T2889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.624511][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.631375][ T2889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.657313][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.670396][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.682802][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.734416][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.743913][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.750809][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.758260][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.767050][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.773922][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.842014][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.893937][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.982753][ T346] usb 1-1: 0:2 : does not exist [ 100.001112][ T346] usb 1-1: USB disconnect, device number 16 [ 100.018676][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.040718][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.057169][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.067315][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.075455][ T2889] device veth0_vlan entered promiscuous mode [ 100.100874][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.111494][ T2889] device veth1_macvtap entered promiscuous mode [ 100.126546][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.139263][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.199364][ T8] device bridge_slave_1 left promiscuous mode [ 100.205859][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.223691][ T8] device bridge_slave_0 left promiscuous mode [ 100.236121][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.259253][ T8] device veth1_macvtap left promiscuous mode [ 100.270462][ T8] device veth0_vlan left promiscuous mode [ 100.312029][ T2942] loop0: detected capacity change from 0 to 512 [ 100.320366][ T2942] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.337022][ T2942] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 100.368119][ T2942] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz-executor.0: inode #15: comm syz-executor.0: iget: illegal inode # [ 100.417905][ T2942] EXT4-fs (loop0): Remounting filesystem read-only [ 100.424898][ T2942] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 100.439791][ T2942] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.466673][ T2942] EXT4-fs error (device loop0): ext4_lookup:1855: comm syz-executor.0: inode #15: comm syz-executor.0: iget: illegal inode # [ 100.485029][ T2942] EXT4-fs (loop0): Remounting filesystem read-only [ 100.530555][ T2351] EXT4-fs (loop0): unmounting filesystem. [ 100.592803][ T2955] loop0: detected capacity change from 0 to 512 [ 100.612042][ T2955] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.650297][ T2955] EXT4-fs (loop0): failed to initialize system zone (-117) [ 100.662850][ T2955] EXT4-fs (loop0): mount failed [ 100.994844][ T2977] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.005636][ T2977] device 30ªX¹¦D entered promiscuous mode [ 101.047814][ T2977] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.057295][ T2977] 1ªX¹¦D: renamed from 30ªX¹¦D [ 101.065821][ T2977] device 31ªX¹¦D left promiscuous mode [ 101.074118][ T2977] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 101.291702][ T2984] loop1: detected capacity change from 0 to 512 [ 101.301461][ T2986] process 'syz-executor.4' launched './file0' with NULL argv: empty string added [ 101.322683][ T2984] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.368680][ T2984] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 101.385989][ T2984] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz-executor.1: inode #15: comm syz-executor.1: iget: illegal inode # [ 101.399832][ T2984] EXT4-fs (loop1): Remounting filesystem read-only [ 101.406340][ T2984] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 101.418676][ T2984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.450829][ T2984] EXT4-fs error (device loop1): ext4_lookup:1855: comm syz-executor.1: inode #15: comm syz-executor.1: iget: illegal inode # [ 101.483848][ T2984] EXT4-fs (loop1): Remounting filesystem read-only [ 101.499433][ T2998] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.509382][ T2889] EXT4-fs (loop1): unmounting filesystem. [ 101.519976][ T3000] tipc: Started in network mode [ 101.524654][ T3000] tipc: Node identity , cluster identity 4711 [ 101.532993][ T3000] tipc: Failed to set node id, please configure manually [ 101.545587][ T3000] tipc: Enabling of bearer rejected, failed to enable media [ 101.600721][ T28] audit: type=1400 audit(1717451309.928:14324): avc: denied { create } for pid=3014 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 101.656872][ T3024] loop3: detected capacity change from 0 to 512 [ 101.664193][ T3024] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.688791][ T3024] EXT4-fs (loop3): failed to initialize system zone (-117) [ 101.691315][ T28] audit: type=1400 audit(1717451310.018:14325): avc: denied { ioctl } for pid=3031 comm="syz-executor.0" path="/root/syzkaller-testdir812760081/syzkaller.1NRWUF/80/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.701817][ T3024] EXT4-fs (loop3): mount failed [ 101.726618][ T3032] Source file dentry negative [ 101.773724][ T3038] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.874917][ T28] audit: type=1326 audit(1717451310.188:14326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a26e7a6e7 code=0x7ffc0000 [ 101.899009][ T28] audit: type=1326 audit(1717451310.188:14327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a26e403c9 code=0x7ffc0000 [ 101.951494][ T28] audit: type=1326 audit(1717451310.188:14328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a26e7cf69 code=0x7ffc0000 [ 101.977174][ T28] audit: type=1326 audit(1717451310.188:14329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a26e7a6e7 code=0x7ffc0000 [ 102.433512][ T28] audit: type=1326 audit(1717451310.188:14330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a26e403c9 code=0x7ffc0000 [ 102.449992][ T3048] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.467159][ T3048] device gretap0 entered promiscuous mode [ 102.476191][ T28] audit: type=1326 audit(1717451310.188:14331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a26e7cf69 code=0x7ffc0000 [ 102.500139][ T3048] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.509439][ T3048] 0ªX¹¦D: renamed from gretap0 [ 102.515103][ T3048] device 30ªX¹¦D left promiscuous mode [ 102.521254][ T3048] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 102.540914][ T28] audit: type=1326 audit(1717451310.188:14332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a26e7a6e7 code=0x7ffc0000 [ 102.638152][ T3069] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.197491][ T431] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 103.264343][ T3111] loop1: detected capacity change from 0 to 512 [ 103.271232][ T3111] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.280719][ T3111] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 103.290907][ T3111] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz-executor.1: inode #15: comm syz-executor.1: iget: illegal inode # [ 103.304414][ T3111] EXT4-fs (loop1): Remounting filesystem read-only [ 103.310873][ T3111] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 103.323194][ T3111] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.333512][ T3111] EXT4-fs error (device loop1): ext4_lookup:1855: comm syz-executor.1: inode #15: comm syz-executor.1: iget: illegal inode # [ 103.346561][ T3111] EXT4-fs (loop1): Remounting filesystem read-only [ 103.356087][ T2889] EXT4-fs (loop1): unmounting filesystem. [ 103.428011][ T346] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 103.472707][ T3118] loop1: detected capacity change from 0 to 2048 [ 103.489033][ T3118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.513896][ T2889] EXT4-fs (loop1): unmounting filesystem. [ 103.520436][ T28] kauditd_printk_skb: 245 callbacks suppressed [ 103.520450][ T28] audit: type=1400 audit(1717451311.848:14578): avc: denied { write } for pid=3121 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.547039][ T28] audit: type=1400 audit(1717451311.848:14579): avc: denied { nlmsg_write } for pid=3121 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.571285][ T431] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 103.582438][ T431] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 103.593667][ T431] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 103.607466][ T431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.623662][ T28] audit: type=1400 audit(1717451311.948:14580): avc: denied { relabelfrom } for pid=3128 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 103.643852][ T28] audit: type=1400 audit(1717451311.948:14581): avc: denied { relabelto } for pid=3128 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 103.643878][ T3101] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.703304][ T3131] incfs: iterate_incfs_dir / -22 [ 103.818021][ T28] audit: type=1400 audit(1717451312.148:14582): avc: denied { append } for pid=3147 comm="syz-executor.1" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.841311][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.852284][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.863395][ T346] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 103.872360][ T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.880935][ T346] usb 1-1: config 0 descriptor?? [ 104.057501][ T327] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 104.337999][ T3109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.346411][ T3109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.358569][ T346] hid-generic 0003:1B1C:1B3E.001F: unknown main item tag 0x7 [ 104.365795][ T346] hid-generic 0003:1B1C:1B3E.001F: unknown main item tag 0x4 [ 104.373971][ T346] hid-generic 0003:1B1C:1B3E.001F: failed to start in urb: -90 [ 104.381925][ T346] hid-generic 0003:1B1C:1B3E.001F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 104.417570][ T327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.428288][ T327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.437838][ T327] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 104.446661][ T327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.454861][ T327] usb 5-1: config 0 descriptor?? [ 104.496046][ T3182] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 104.496043][ T28] audit: type=1400 audit(1717451312.818:14583): avc: denied { relabelfrom } for pid=3181 comm="syz-executor.3" name="NETLINK" dev="sockfs" ino=29064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.530713][ T28] audit: type=1400 audit(1717451312.858:14584): avc: denied { relabelto } for pid=3181 comm="syz-executor.3" name="NETLINK" dev="sockfs" ino=29064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 104.566107][ T345] usb 1-1: USB disconnect, device number 17 [ 104.578016][ T3184] tipc: Started in network mode [ 104.582756][ T3184] tipc: Node identity , cluster identity 4711 [ 104.588923][ T3184] tipc: Failed to set node id, please configure manually [ 104.595811][ T3184] tipc: Enabling of bearer rejected, failed to enable media [ 104.617106][ T28] audit: type=1400 audit(1717451312.938:14585): avc: denied { map } for pid=3185 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.641783][ T28] audit: type=1400 audit(1717451312.938:14586): avc: denied { write } for pid=3185 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.957915][ T327] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 104.966929][ T327] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0020/input/input48 [ 105.048977][ T327] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 105.163952][ T224] usb 5-1: USB disconnect, device number 13 [ 105.228327][ T3206] loop0: detected capacity change from 0 to 40427 [ 105.235178][ T3206] F2FS-fs (loop0): Invalid log sectors per block(3) log sectorsize(10) [ 105.243404][ T3206] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 105.253537][ T3206] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045589454292453) [ 105.276012][ T3206] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 105.283038][ T3206] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 105.357528][ T431] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 105.364911][ T431] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input47 [ 105.375134][ T431] usb 3-1: USB disconnect, device number 11 [ 105.571084][ T3219] loop0: detected capacity change from 0 to 1024 [ 105.578426][ T3219] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 105.586831][ T3219] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.598056][ T3219] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 105.611456][ T3219] journal_init_common: Cannot get buffer for journal superblock [ 105.619009][ T3219] EXT4-fs (loop0): Could not load journal inode [ 105.725234][ T3221] overlayfs: invalid redirect ((null)) [ 105.888802][ T3227] incfs: iterate_incfs_dir / -22 [ 106.177760][ T431] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 106.497489][ T224] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 106.548328][ T431] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.559089][ T431] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.568625][ T431] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 106.577561][ T431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.585897][ T431] usb 3-1: config 0 descriptor?? [ 106.617746][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.624689][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.632180][ T3269] device bridge_slave_0 entered promiscuous mode [ 106.638896][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.645850][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.653133][ T3269] device bridge_slave_1 entered promiscuous mode [ 106.694673][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.701533][ T3269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.708604][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.715399][ T3269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.735880][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.743615][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.750959][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.759825][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.768059][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.774896][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.784519][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.792486][ T6] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 106.800123][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.806941][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.828557][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.836851][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.844648][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.852542][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.859750][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.867412][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.877621][ T3269] device veth0_vlan entered promiscuous mode [ 106.887326][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.896187][ T3269] device veth1_macvtap entered promiscuous mode [ 106.905459][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.915718][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.923746][ T224] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 106.935422][ T224] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 106.946515][ T224] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 106.955347][ T224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.977557][ T3251] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.015606][ T3278] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.044793][ T3229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.053289][ T3229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.062831][ T8] device bridge_slave_1 left promiscuous mode [ 107.068961][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.076447][ T8] device bridge_slave_0 left promiscuous mode [ 107.082856][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.088593][ T431] hid-generic 0003:1B1C:1B3E.0021: unknown main item tag 0x7 [ 107.096968][ T431] hid-generic 0003:1B1C:1B3E.0021: unknown main item tag 0x4 [ 107.104362][ T431] hid-generic 0003:1B1C:1B3E.0021: failed to start in urb: -90 [ 107.112570][ T431] hid-generic 0003:1B1C:1B3E.0021: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 107.124689][ T8] device veth1_macvtap left promiscuous mode [ 107.130843][ T8] device veth0_vlan left promiscuous mode [ 107.207640][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.237658][ T3285] loop4: detected capacity change from 0 to 1024 [ 107.245158][ T3285] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 107.253641][ T3285] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 107.264417][ T3285] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 107.275860][ T3285] journal_init_common: Cannot get buffer for journal superblock [ 107.283462][ T3285] EXT4-fs (loop4): Could not load journal inode [ 107.291107][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.297316][ T39] usb 3-1: USB disconnect, device number 12 [ 107.300984][ T6] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 107.315493][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.326918][ T6] usb 1-1: config 0 descriptor?? [ 107.808468][ T6] hid (null): unknown global tag 0xd [ 107.816572][ T6] itetech 0003:258A:6A88.0022: unknown main item tag 0x2 [ 107.823612][ T6] itetech 0003:258A:6A88.0022: unknown main item tag 0x0 [ 107.830611][ T6] itetech 0003:258A:6A88.0022: unknown global tag 0xd [ 107.837250][ T6] itetech 0003:258A:6A88.0022: item 0 1 1 13 parsing failed [ 107.845146][ T6] itetech: probe of 0003:258A:6A88.0022 failed with error -22 [ 108.023524][ T19] usb 1-1: USB disconnect, device number 18 [ 108.309575][ T3325] loop4: detected capacity change from 0 to 1024 [ 108.317305][ T3325] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 108.325523][ T3325] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 108.336252][ T3325] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 108.346473][ T3325] journal_init_common: Cannot get buffer for journal superblock [ 108.353976][ T3325] EXT4-fs (loop4): Could not load journal inode [ 108.697598][ T224] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 108.706476][ T224] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input49 [ 108.720268][ T224] usb 2-1: USB disconnect, device number 9 [ 109.217582][ T2058] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 109.327597][ T19] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 109.421315][ T28] audit: type=1400 audit(1717451317.748:14587): avc: denied { map } for pid=3388 comm="syz-executor.1" path="socket:[28610]" dev="sockfs" ino=28610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.467611][ T2058] usb 1-1: Using ep0 maxpacket: 16 [ 109.587541][ T2058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.598334][ T2058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.607932][ T2058] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.620515][ T2058] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 109.629383][ T2058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.637592][ T2058] usb 1-1: config 0 descriptor?? [ 109.687540][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.698305][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.707824][ T19] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 109.716615][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.724940][ T19] usb 4-1: config 0 descriptor?? [ 109.827738][ T3334] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 110.100128][ T3346] loop0: detected capacity change from 0 to 512 [ 110.107070][ T3346] EXT4-fs: old and new quota format mixing [ 110.163158][ T2058] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0023/input/input50 [ 110.217560][ T3334] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 110.228778][ T3334] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 110.239993][ T3334] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 110.248937][ T3334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.273300][ T2058] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 110.287769][ T19] hid (null): unknown global tag 0xd [ 110.288621][ T3395] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 110.293773][ T19] itetech 0003:258A:6A88.0024: unknown main item tag 0x2 [ 110.307005][ T19] itetech 0003:258A:6A88.0024: unknown main item tag 0x0 [ 110.314010][ T19] itetech 0003:258A:6A88.0024: unknown global tag 0xd [ 110.320720][ T19] itetech 0003:258A:6A88.0024: item 0 1 1 13 parsing failed [ 110.328142][ T19] itetech: probe of 0003:258A:6A88.0024 failed with error -22 [ 110.377800][ T345] usb 1-1: USB disconnect, device number 19 [ 110.459711][ T28] audit: type=1400 audit(1717451318.788:14588): avc: denied { mounton } for pid=3416 comm="syz-executor.4" path="/proc/3416/task" dev="proc" ino=28649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 110.524527][ T224] usb 4-1: USB disconnect, device number 18 [ 110.885790][ T3434] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 111.158496][ T3452] syz-executor.0[3452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.158565][ T3452] syz-executor.0[3452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.686531][ T3509] loop0: detected capacity change from 0 to 512 [ 111.717998][ T3509] EXT4-fs (loop0): 1 truncate cleaned up [ 111.723596][ T3509] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.735691][ T3509] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5890: inode #18: comm syz-executor.0: bad extra_isize 10 (inode size 256) [ 111.755974][ T2351] EXT4-fs (loop0): unmounting filesystem. [ 111.778581][ T3522] loop0: detected capacity change from 0 to 512 [ 111.785575][ T3522] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.798631][ T3522] EXT4-fs (loop0): failed to initialize system zone (-117) [ 111.805686][ T3522] EXT4-fs (loop0): mount failed [ 111.957537][ T224] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 112.007604][ T3334] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 112.014976][ T3334] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input51 [ 112.025274][ T3334] usb 2-1: USB disconnect, device number 10 [ 112.107628][ T345] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 112.133010][ T3541] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.144496][ T3541] device 31ªX¹¦D entered promiscuous mode [ 112.183807][ T3541] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.193282][ T3541] 0ªX¹¦D: renamed from 31ªX¹¦D [ 112.201507][ T3541] device 30ªX¹¦D left promiscuous mode [ 112.209707][ T3541] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 112.317640][ T224] usb 4-1: Using ep0 maxpacket: 16 [ 112.457525][ T224] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 112.466185][ T224] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 112.476971][ T224] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.486517][ T224] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.555253][ T3548] loop2: detected capacity change from 0 to 1024 [ 112.562564][ T3548] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 112.571028][ T3548] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 112.581759][ T3548] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 112.592501][ T3548] journal_init_common: Cannot get buffer for journal superblock [ 112.600103][ T3548] EXT4-fs (loop2): Could not load journal inode [ 112.687608][ T345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.698879][ T345] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.717699][ T224] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.744296][ T345] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.753563][ T224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.762149][ T345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.779501][ T224] usb 4-1: Product: syz [ 112.783773][ T224] usb 4-1: Manufacturer: syz [ 112.790778][ T345] usb 5-1: config 0 descriptor?? [ 112.795616][ T224] usb 4-1: SerialNumber: syz [ 112.854559][ T28] audit: type=1400 audit(1717451321.178:14589): avc: denied { ioctl } for pid=3555 comm="syz-executor.0" path="socket:[30924]" dev="sockfs" ino=30924 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.117548][ T3334] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 113.167951][ T224] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 113.175601][ T224] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 113.203666][ T224] usb 4-1: USB disconnect, device number 19 [ 113.298746][ T345] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 113.305724][ T3562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.306535][ T345] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 113.322663][ T345] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 113.330074][ T345] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 113.337292][ T345] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 113.344527][ T345] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 113.351695][ T345] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 113.358935][ T345] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 113.366311][ T345] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 113.375136][ T345] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 113.557568][ T3334] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.589547][ T3570] loop2: detected capacity change from 0 to 40427 [ 113.596367][ T3570] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 113.603927][ T3570] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 113.614056][ T3570] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.636388][ T3570] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 113.647908][ T3570] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 113.654844][ T3570] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.667583][ T3334] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.676549][ T3334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 113.685950][ T2058] usb 5-1: USB disconnect, device number 14 [ 113.726271][ T3334] usb 1-1: SerialNumber: syz [ 114.127500][ T6] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 114.447664][ T3334] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 114.454761][ T3334] usb 1-1: USB disconnect, device number 20 [ 114.487564][ T6] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 114.498797][ T6] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 114.509958][ T6] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 114.518880][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.548894][ T3582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.559928][ T3607] input: syz0 as /devices/virtual/input/input52 [ 114.855468][ T3619] syz-executor.2[3619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.855509][ T3619] syz-executor.2[3619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.947603][ T431] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 115.029873][ T28] audit: type=1400 audit(1717451323.358:14590): avc: denied { accept } for pid=3636 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.101242][ T3641] syz-executor.0[3641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.101307][ T3641] syz-executor.0[3641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.304358][ T3627] loop2: detected capacity change from 0 to 131072 [ 115.322732][ T3627] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 115.327582][ T431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.331992][ T3627] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 115.342852][ T431] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.351550][ T3627] F2FS-fs (loop2): invalid crc value [ 115.353680][ T3627] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.367096][ T431] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.386198][ T431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.394594][ T431] usb 5-1: config 0 descriptor?? [ 115.401685][ T3627] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 115.408595][ T3627] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 115.590960][ T3660] loop2: detected capacity change from 0 to 128 [ 115.878058][ T431] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 115.885315][ T431] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 115.892503][ T431] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 115.899691][ T431] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 115.906872][ T431] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 115.914110][ T431] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 115.921294][ T431] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 115.928501][ T431] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 115.935807][ T431] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 115.943865][ T431] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 116.027528][ T3334] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 116.247530][ T6] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 116.254732][ T224] usb 5-1: USB disconnect, device number 15 [ 116.254980][ T6] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input53 [ 116.270692][ T6] usb 2-1: USB disconnect, device number 11 [ 116.277521][ T3334] usb 3-1: Using ep0 maxpacket: 16 [ 116.337526][ T431] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 116.407592][ T3334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.418293][ T3334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.427817][ T3334] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.440428][ T3334] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.449252][ T3334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.457643][ T3334] usb 3-1: config 0 descriptor?? [ 116.577484][ T431] usb 1-1: Using ep0 maxpacket: 16 [ 116.697533][ T431] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 116.706092][ T431] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 116.716655][ T431] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.726123][ T431] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.801113][ T3694] loop4: detected capacity change from 0 to 256 [ 116.810224][ T3694] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 116.825766][ T28] audit: type=1400 audit(1717451325.158:14591): avc: denied { append } for pid=3693 comm="syz-executor.4" path="/root/syzkaller-testdir1279034836/syzkaller.A7ancj/103/file1/blkio.bfq.io_serviced_recursive" dev="loop4" ino=1048701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.856532][ T28] audit: type=1400 audit(1717451325.158:14592): avc: denied { map } for pid=3693 comm="syz-executor.4" path="/root/syzkaller-testdir1279034836/syzkaller.A7ancj/103/file1/blkio.bfq.io_serviced_recursive" dev="loop4" ino=1048701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.886982][ T28] audit: type=1400 audit(1717451325.158:14593): avc: denied { execute } for pid=3693 comm="syz-executor.4" path="/root/syzkaller-testdir1279034836/syzkaller.A7ancj/103/file1/blkio.bfq.io_serviced_recursive" dev="loop4" ino=1048701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.920558][ T3676] loop2: detected capacity change from 0 to 512 [ 116.929975][ T3676] EXT4-fs: old and new quota format mixing [ 116.937539][ T431] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.946436][ T431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.954315][ T431] usb 1-1: Product: syz [ 116.964797][ T431] usb 1-1: Manufacturer: syz [ 116.973839][ T431] usb 1-1: SerialNumber: syz [ 116.973865][ T3700] input: syz0 as /devices/virtual/input/input54 [ 116.989832][ T3334] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0027/input/input55 [ 117.215268][ T3334] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 117.235787][ T3334] usb 3-1: USB disconnect, device number 13 [ 117.347630][ T431] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 117.354949][ T431] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 117.379183][ T431] usb 1-1: USB disconnect, device number 21 [ 117.527615][ T224] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 117.738214][ T19] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 117.755487][ T3726] loop2: detected capacity change from 0 to 256 [ 117.764562][ T3726] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 117.798455][ T3730] input: syz0 as /devices/virtual/input/input56 [ 117.897627][ T224] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 117.913118][ T224] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 117.932933][ T224] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 117.949471][ T224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.987520][ T3706] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 118.107539][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.118351][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.131139][ T19] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.140062][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.149310][ T19] usb 2-1: config 0 descriptor?? [ 118.367517][ T2058] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 118.464908][ T3756] loop2: detected capacity change from 0 to 256 [ 118.473769][ T3756] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 118.607508][ T2058] usb 1-1: Using ep0 maxpacket: 16 [ 118.623546][ T3762] loop2: detected capacity change from 0 to 256 [ 118.628537][ T19] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 118.632054][ T3762] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 118.636861][ T19] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 118.656336][ T19] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 118.666463][ T19] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 118.737559][ T2058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.739655][ T3774] loop2: detected capacity change from 0 to 256 [ 118.748553][ T2058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.754897][ T3774] FAT-fs (loop2): Unrecognized mount option "0x00000000000000000x0000000000000000" or missing value [ 118.764010][ T2058] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.787346][ T2058] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.796195][ T2058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.804903][ T2058] usb 1-1: config 0 descriptor?? [ 118.907869][ T345] usb 2-1: USB disconnect, device number 12 [ 118.946682][ T3776] loop2: detected capacity change from 0 to 512 [ 118.953360][ T3776] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.964570][ T3776] EXT4-fs (loop2): 1 truncate cleaned up [ 118.970049][ T3776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.269408][ T3742] loop0: detected capacity change from 0 to 512 [ 119.276115][ T3742] EXT4-fs: old and new quota format mixing [ 119.350756][ T2058] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0029/input/input58 [ 119.482462][ T2058] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 119.538915][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.545764][ T3781] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.553220][ T3781] device bridge_slave_0 entered promiscuous mode [ 119.565694][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.566716][ T345] usb 1-1: USB disconnect, device number 22 [ 119.573603][ T3781] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.586107][ T3781] device bridge_slave_1 entered promiscuous mode [ 119.629152][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.636000][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.643186][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.649984][ T3781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.669840][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.678374][ T2262] EXT4-fs (loop2): unmounting filesystem. [ 119.684582][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.694649][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.708130][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.716320][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.723174][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.730350][ T224] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 119.738026][ T224] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input57 [ 119.748498][ T224] usb 5-1: USB disconnect, device number 16 [ 119.754530][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.762343][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 119.771842][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.778701][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.798440][ T3788] loop2: detected capacity change from 0 to 128 [ 119.804979][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.805393][ T3788] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 119.812871][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.837731][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.845982][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.848182][ T3788] syz-executor.2: attempt to access beyond end of device [ 119.848182][ T3788] loop2: rw=2049, sector=625, nr_sectors = 1 limit=128 [ 119.854443][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.874797][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.877000][ T3788] syz-executor.2: attempt to access beyond end of device [ 119.877000][ T3788] loop2: rw=524288, sector=625, nr_sectors = 1 limit=128 [ 119.882885][ T3781] device veth0_vlan entered promiscuous mode [ 119.901956][ T3788] syz-executor.2: attempt to access beyond end of device [ 119.901956][ T3788] loop2: rw=0, sector=625, nr_sectors = 1 limit=128 [ 119.915365][ T3788] syz-executor.2: attempt to access beyond end of device [ 119.915365][ T3788] loop2: rw=0, sector=625, nr_sectors = 1 limit=128 [ 119.929187][ T3788] syz-executor.2: attempt to access beyond end of device [ 119.929187][ T3788] loop2: rw=0, sector=625, nr_sectors = 1 limit=128 [ 119.942708][ T3788] syz-executor.2: attempt to access beyond end of device [ 119.942708][ T3788] loop2: rw=0, sector=625, nr_sectors = 1 limit=128 [ 119.956157][ T3789] syz-executor.2: attempt to access beyond end of device [ 119.956157][ T3789] loop2: rw=0, sector=625, nr_sectors = 1 limit=128 [ 119.962623][ T3781] device veth1_macvtap entered promiscuous mode [ 119.975617][ T3789] syz-executor.2: attempt to access beyond end of device [ 119.975617][ T3789] loop2: rw=0, sector=625, nr_sectors = 1 limit=128 [ 119.989131][ T3789] syz-executor.2: attempt to access beyond end of device [ 119.989131][ T3789] loop2: rw=0, sector=625, nr_sectors = 1 limit=128 [ 119.989981][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.013832][ T8] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 120.017494][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.031248][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.169566][ T3797] loop1: detected capacity change from 0 to 40427 [ 120.176633][ T3797] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 120.184321][ T3797] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 120.195413][ T3797] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.220267][ T3797] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 120.232105][ T3797] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.240616][ T1486] device bridge_slave_1 left promiscuous mode [ 120.246608][ T1486] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.247354][ T3797] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.262573][ T1486] device bridge_slave_0 left promiscuous mode [ 120.269232][ T1486] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.289088][ T1486] device veth1_macvtap left promiscuous mode [ 120.295083][ T1486] device veth0_vlan left promiscuous mode [ 120.346237][ T3334] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 120.637604][ T3334] usb 3-1: Using ep0 maxpacket: 32 [ 120.671407][ T28] audit: type=1326 audit(1717451328.998:14594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3818 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940c27cf69 code=0x7ffc0000 [ 120.695583][ T28] audit: type=1326 audit(1717451328.998:14595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3818 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940c27cf69 code=0x7ffc0000 [ 120.719686][ T28] audit: type=1326 audit(1717451328.998:14596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3818 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f940c27cf69 code=0x7ffc0000 [ 120.743480][ T28] audit: type=1326 audit(1717451328.998:14597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3818 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940c27cf69 code=0x7ffc0000 [ 120.767908][ T28] audit: type=1326 audit(1717451328.998:14598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3818 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940c27cf69 code=0x7ffc0000 [ 120.791954][ T28] audit: type=1326 audit(1717451328.998:14599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3818 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940c27cf69 code=0x7ffc0000 [ 120.816060][ T28] audit: type=1326 audit(1717451328.998:14600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3818 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940c27cf69 code=0x7ffc0000 [ 120.840383][ T28] audit: type=1326 audit(1717451328.998:14601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3818 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940c27cf69 code=0x7ffc0000 [ 120.847621][ T3334] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.864479][ T28] audit: type=1326 audit(1717451328.998:14602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3818 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940c27cf69 code=0x7ffc0000 [ 120.897506][ T3334] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.925243][ T28] audit: type=1326 audit(1717451328.998:14603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3818 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940c27cf69 code=0x7ffc0000 [ 120.989323][ T3824] device vlan2 entered promiscuous mode [ 120.997939][ T3824] device erspan0 entered promiscuous mode [ 121.018192][ T3824] device erspan0 left promiscuous mode [ 121.052079][ T3827] loop1: detected capacity change from 0 to 256 [ 121.097570][ T3334] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 121.106496][ T3334] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 121.120349][ T3334] usb 3-1: Product: syz [ 121.124580][ T3334] usb 3-1: Manufacturer: syz [ 121.168118][ T3334] hub 3-1:4.0: USB hub found [ 121.191002][ T3839] loop4: detected capacity change from 0 to 128 [ 121.197753][ T3839] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 121.234276][ T3839] syz-executor.4: attempt to access beyond end of device [ 121.234276][ T3839] loop4: rw=2049, sector=625, nr_sectors = 1 limit=128 [ 121.252248][ T1486] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 121.377526][ T3334] hub 3-1:4.0: 2 ports detected [ 121.387099][ T3847] loop4: detected capacity change from 0 to 256 [ 121.393598][ T3847] FAT-fs (loop4): Unrecognized mount option "0x00000000000000000x0000000000000000" or missing value [ 121.407587][ T19] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 121.526020][ T3849] loop4: detected capacity change from 0 to 512 [ 121.532778][ T3849] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.544388][ T3849] EXT4-fs (loop4): 1 truncate cleaned up [ 121.549987][ T3849] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.767561][ T19] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 121.778623][ T19] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 121.789741][ T19] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 121.798593][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.817668][ T3835] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 121.908653][ T3853] loop0: detected capacity change from 0 to 40427 [ 121.915454][ T3853] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 121.923062][ T3853] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 121.933133][ T3853] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.954863][ T3853] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 121.966175][ T3853] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 121.973125][ T3853] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 122.340824][ T2371] EXT4-fs (loop4): unmounting filesystem. [ 122.522090][ T3876] syz-executor.4[3876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.522137][ T3876] syz-executor.4[3876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.543083][ T3878] loop4: detected capacity change from 0 to 512 [ 122.561647][ T3878] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.578580][ T3878] EXT4-fs (loop4): failed to initialize system zone (-117) [ 122.585771][ T3878] EXT4-fs (loop4): mount failed [ 122.683613][ T3334] hub 3-1:4.0: activate --> -90 [ 122.921254][ T3888] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.931717][ T3888] device 30ªX¹¦D entered promiscuous mode [ 122.979251][ T3888] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.988748][ T3888] 1ªX¹¦D: renamed from 30ªX¹¦D [ 122.997211][ T3888] device 31ªX¹¦D left promiscuous mode [ 123.005234][ T3888] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 123.238367][ T346] usb 3-1: USB disconnect, device number 14 [ 123.257524][ T3334] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 123.517597][ T19] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 123.525206][ T19] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input59 [ 123.535712][ T19] usb 2-1: USB disconnect, device number 13 [ 123.731792][ T3895] loop4: detected capacity change from 0 to 131072 [ 123.738835][ T3895] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 123.748497][ T3895] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 123.757293][ T3895] F2FS-fs (loop4): invalid crc value [ 123.764190][ T3895] F2FS-fs (loop4): Found nat_bits in checkpoint [ 123.790458][ T3895] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 123.797363][ T3895] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 124.013005][ T3922] input: syz0 as /devices/virtual/input/input60 [ 124.104240][ T3936] loop4: detected capacity change from 0 to 128 [ 124.121340][ T3936] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 124.219757][ T8] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 124.263304][ T3925] loop1: detected capacity change from 0 to 40427 [ 124.276259][ T3925] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 124.285160][ T3925] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 124.309059][ T3925] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.345122][ T3925] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 124.364641][ T3925] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 124.371849][ T3925] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.868050][ T3929] loop0: detected capacity change from 0 to 131072 [ 124.875230][ T3929] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 124.890992][ T3929] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 124.901055][ T3929] F2FS-fs (loop0): invalid crc value [ 124.917072][ T3929] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.943783][ T3965] input: syz0 as /devices/virtual/input/input61 [ 124.960194][ T3929] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 124.967138][ T3929] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 125.047554][ T19] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 125.098977][ T3981] input: syz0 as /devices/virtual/input/input62 [ 125.243491][ T3987] ------------[ cut here ]------------ [ 125.248835][ T3987] WARNING: CPU: 1 PID: 3987 at mm/page_alloc.c:5688 __alloc_pages+0xc0/0x780 [ 125.257382][ T3987] Modules linked in: [ 125.261158][ T3987] CPU: 1 PID: 3987 Comm: syz-executor.0 Not tainted 6.1.78-syzkaller-00137-gc36abc6d4212 #0 [ 125.271160][ T3987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 125.281176][ T3987] RIP: 0010:__alloc_pages+0xc0/0x780 [ 125.286343][ T3987] Code: 0b 72 13 44 89 e8 25 00 20 00 00 75 09 80 3d db b4 b4 05 00 74 0d 83 fb 0a 76 16 45 31 e4 e9 4e 03 00 00 c6 05 c5 b4 b4 05 01 <0f> 0b 83 fb 0a 77 ea 89 1c 24 44 23 2d 27 9f b7 05 65 48 8b 05 f7 [ 125.305930][ T3987] RSP: 0018:ffffc90003b8fa40 EFLAGS: 00010246 [ 125.311912][ T3987] RAX: 0000000000000000 RBX: 000000000000001a RCX: 0000000000000000 [ 125.319765][ T3987] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90003b8fae8 [ 125.327617][ T3987] RBP: ffffc90003b8fb78 R08: dffffc0000000000 R09: ffffc90003b8fad0 [ 125.335415][ T3987] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 125.343241][ T3987] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff92000771f54 [ 125.351067][ T3987] FS: 00007f6a27c826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 125.359904][ T3987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.366317][ T3987] CR2: 0000000000000000 CR3: 000000011dec8000 CR4: 00000000003506a0 [ 125.374157][ T3987] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.381953][ T3987] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 125.389775][ T3987] Call Trace: [ 125.392872][ T3987] [ 125.395650][ T3987] ? show_regs+0x58/0x60 [ 125.399759][ T3987] ? __warn+0x160/0x3d0 [ 125.403718][ T3987] ? __alloc_pages+0xc0/0x780 [ 125.407600][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 125.408261][ T3987] ? report_bug+0x4d5/0x7d0 [ 125.423167][ T3987] ? __alloc_pages+0xc0/0x780 [ 125.425435][ T19] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.427897][ T3987] ? handle_bug+0x41/0x70 [ 125.427927][ T3987] ? exc_invalid_op+0x1b/0x50 [ 125.427945][ T3987] ? asm_exc_invalid_op+0x1b/0x20 [ 125.427963][ T3987] ? __alloc_pages+0xc0/0x780 [ 125.427982][ T3987] ? do_vfs_ioctl+0xba7/0x29a0 [ 125.428004][ T3987] ? prep_new_page+0x110/0x110 [ 125.428019][ T3987] ? futex_wait+0x4b7/0x7e0 [ 125.428042][ T3987] __kmalloc_large_node+0x9e/0x1b0 [ 125.428066][ T3987] ? input_mt_init_slots+0xcf/0xa50 [ 125.428085][ T3987] __kmalloc+0xef/0x1e0 [ 125.428104][ T3987] input_mt_init_slots+0xcf/0xa50 [ 125.428121][ T3987] ? mutex_lock_interruptible+0xb1/0x1e0 [ 125.497080][ T3987] uinput_create_device+0x522/0x630 [ 125.502301][ T3987] uinput_ioctl_handler+0xa63/0x16a0 [ 125.507854][ T3987] ? uinput_release+0x50/0x50 [ 125.512448][ T3987] ? selinux_file_ioctl+0x3cc/0x540 [ 125.517597][ T3987] uinput_ioctl+0x28/0x30 [ 125.521754][ T3987] ? uinput_poll+0x120/0x120 [ 125.526180][ T3987] __se_sys_ioctl+0x114/0x190 [ 125.527555][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.530730][ T3987] __x64_sys_ioctl+0x7b/0x90 [ 125.543974][ T3987] do_syscall_64+0x3d/0xb0 [ 125.546200][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.548243][ T3987] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.548265][ T3987] RIP: 0033:0x7f6a26e7cf69 [ 125.558328][ T19] usb 5-1: SerialNumber: syz [ 125.561776][ T3987] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 125.587531][ T3956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 125.590041][ T3987] RSP: 002b:00007f6a27c820c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.605124][ T3987] RAX: ffffffffffffffda RBX: 00007f6a26fb3fa0 RCX: 00007f6a26e7cf69 [ 125.612912][ T3987] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 125.620713][ T3987] RBP: 00007f6a26eda706 R08: 0000000000000000 R09: 0000000000000000 [ 125.628521][ T3987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.636318][ T3987] R13: 000000000000000b R14: 00007f6a26fb3fa0 R15: 00007ffdca8c0aa8 [ 125.644156][ T3987] [ 125.646994][ T3987] ---[ end trace 0000000000000000 ]--- [ 125.738453][ T3995] input: syz0 as /devices/virtual/input/input64 [ 125.806590][ T3989] loop0: detected capacity change from 0 to 40427 [ 125.812021][ T3956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 125.817171][ T3989] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 125.827379][ T3989] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 125.842508][ T3989] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.878976][ T3989] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 125.891966][ T3989] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 125.899319][ T3989] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.018061][ T4013] Invalid ELF header magic: != ELF [ 126.023140][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 126.023153][ T28] audit: type=1400 audit(1717451334.348:14614): avc: denied { module_load } for pid=4012 comm="syz-executor.1" path="/sys/kernel/notes" dev="sysfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 126.350570][ T4020] input: syz0 as /devices/virtual/input/input66 [ 126.361421][ T19] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 126.715535][ T4027] loop0: detected capacity change from 0 to 128 [ 126.734846][ T4027] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 126.775045][ T4005] loop2: detected capacity change from 0 to 131072 [ 126.787479][ T4005] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 126.796782][ T4005] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 126.802466][ T4027] bio_check_eod: 17 callbacks suppressed [ 126.802485][ T4027] syz-executor.0: attempt to access beyond end of device [ 126.802485][ T4027] loop0: rw=2049, sector=625, nr_sectors = 1 limit=128 [ 126.824495][ T4005] F2FS-fs (loop2): invalid crc value [ 126.828615][ T4027] syz-executor.0: attempt to access beyond end of device [ 126.828615][ T4027] loop0: rw=524288, sector=625, nr_sectors = 1 limit=128 [ 126.843640][ T4027] syz-executor.0: attempt to access beyond end of device [ 126.843640][ T4027] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 126.857116][ T4027] syz-executor.0: attempt to access beyond end of device [ 126.857116][ T4027] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 126.870816][ T4027] syz-executor.0: attempt to access beyond end of device [ 126.870816][ T4027] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 126.884546][ T4027] syz-executor.0: attempt to access beyond end of device [ 126.884546][ T4027] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 126.898077][ T4031] syz-executor.0: attempt to access beyond end of device [ 126.898077][ T4031] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 126.898425][ T4005] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.911591][ T4031] syz-executor.0: attempt to access beyond end of device [ 126.911591][ T4031] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 126.930858][ T4031] syz-executor.0: attempt to access beyond end of device [ 126.930858][ T4031] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 126.980604][ T4005] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 126.987514][ T4005] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 126.995535][ T8] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 127.077252][ T4044] Invalid ELF header magic: != ELF [ 127.158416][ T28] audit: type=1400 audit(1717451335.488:14615): avc: denied { write } for pid=4050 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.198308][ T28] audit: type=1400 audit(1717451335.508:14616): avc: denied { bind } for pid=4050 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.224861][ T4053] SELinux: Context d is not valid (left unmapped). [ 127.235204][ T4055] loop0: detected capacity change from 0 to 128 [ 127.247626][ T4055] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 127.256769][ T28] audit: type=1400 audit(1717451335.508:14617): avc: denied { node_bind } for pid=4050 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 127.292297][ T4061] input: syz0 as /devices/virtual/input/input67 [ 127.316104][ T4055] syz-executor.0: attempt to access beyond end of device [ 127.316104][ T4055] loop0: rw=2049, sector=625, nr_sectors = 1 limit=128 [ 127.341522][ T8] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 127.743212][ T4089] loop0: detected capacity change from 0 to 1024 [ 127.858325][ T4089] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 127.870646][ T4089] EXT4-fs (loop0): barriers disabled [ 127.875788][ T4089] JBD2: no valid journal superblock found [ 127.881341][ T4089] EXT4-fs (loop0): error loading journal [ 127.917106][ T3560] usb 5-1: USB disconnect, device number 17 [ 127.927588][ T3560] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 127.946182][ T4095] loop1: detected capacity change from 0 to 128 [ 127.953278][ T4095] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 128.014340][ T8] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 128.060667][ T28] audit: type=1400 audit(1717451336.388:14618): avc: denied { ioctl } for pid=4108 comm="syz-executor.4" path="/dev/usbmon0" dev="devtmpfs" ino=139 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.104987][ T4115] loop4: detected capacity change from 0 to 512 [ 128.106325][ T4114] loop1: detected capacity change from 0 to 1024 [ 128.120922][ T4114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.134515][ T28] audit: type=1400 audit(1717451336.458:14619): avc: denied { rename } for pid=4112 comm="syz-executor.1" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.162899][ T4115] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.173208][ T3781] EXT4-fs (loop1): unmounting filesystem. [ 128.175868][ T4115] ext4 filesystem being mounted at /root/syzkaller-testdir1279034836/syzkaller.A7ancj/142/file0 supports timestamps until 2038 (0x7fffffff) [ 128.204122][ T4125] loop2: detected capacity change from 0 to 128 [ 128.206432][ T4127] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 128.211360][ T4125] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 128.229264][ T4115] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz-executor.4: corrupted inode contents [ 128.252333][ T4115] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz-executor.4: mark_inode_dirty error [ 128.264233][ T4115] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz-executor.4: corrupted inode contents [ 128.278604][ T4115] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 128.301101][ T8] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 128.318024][ T2371] EXT4-fs (loop4): unmounting filesystem. [ 128.460759][ T4147] loop4: detected capacity change from 0 to 1024 [ 128.470496][ T4147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.472111][ T4135] loop2: detected capacity change from 0 to 40427 [ 128.486164][ T4135] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 128.494640][ T4135] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 128.495180][ T2371] EXT4-fs (loop4): unmounting filesystem. [ 128.503510][ T4135] F2FS-fs (loop2): invalid crc value [ 128.513789][ T28] audit: type=1400 audit(1717451336.838:14620): avc: denied { name_bind } for pid=4148 comm="syz-executor.0" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 128.518491][ T4135] F2FS-fs (loop2): Found nat_bits in checkpoint [ 128.557803][ T4158] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 128.588186][ T4160] loop4: detected capacity change from 0 to 128 [ 128.595659][ T4160] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 128.610911][ T4135] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 128.618268][ T4135] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 128.642791][ T8] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 128.690812][ T4165] loop4: detected capacity change from 0 to 512 [ 128.725134][ T4165] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.734169][ T4165] ext4 filesystem being mounted at /root/syzkaller-testdir1279034836/syzkaller.A7ancj/149/file0 supports timestamps until 2038 (0x7fffffff) [ 128.752044][ T4165] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz-executor.4: corrupted inode contents [ 128.765253][ T4165] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz-executor.4: mark_inode_dirty error [ 128.783535][ T4165] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz-executor.4: corrupted inode contents [ 128.798405][ T4165] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 128.839167][ T2371] EXT4-fs (loop4): unmounting filesystem. [ 128.890803][ T4184] overlayfs: failed to get inode (-116) [ 128.896263][ T4184] overlayfs: failed to get inode (-116) [ 128.937514][ T431] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 129.177516][ T431] usb 1-1: Using ep0 maxpacket: 16 [ 129.218868][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.285266][ T4194] loop1: detected capacity change from 0 to 40427 [ 129.292350][ T4194] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 129.297631][ T431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.299904][ T4194] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 129.312949][ T431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.319551][ T4194] F2FS-fs (loop1): invalid crc value [ 129.334773][ T4194] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.338750][ T431] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.366379][ T431] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.375338][ T431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.375760][ T4194] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 129.383741][ T431] usb 1-1: config 0 descriptor?? [ 129.394852][ T4194] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 129.458688][ T4213] Invalid ELF header magic: != ELF [ 129.850688][ T4167] loop0: detected capacity change from 0 to 512 [ 129.860921][ T4167] EXT4-fs: old and new quota format mixing [ 129.933030][ T431] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002A/input/input69 [ 130.143223][ T431] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 130.156212][ T431] usb 1-1: USB disconnect, device number 23 [ 130.421893][ T4244] loop1: detected capacity change from 0 to 131072 [ 130.428782][ T4244] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 130.437980][ T4244] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 130.446714][ T4244] F2FS-fs (loop1): invalid crc value [ 130.453552][ T4244] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.476373][ T4244] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 130.483461][ T4244] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 130.657185][ T4265] loop1: detected capacity change from 0 to 128 [ 130.664453][ T4265] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 130.669684][ T4267] loop0: detected capacity change from 0 to 512 [ 130.679936][ T4267] ext4: Bad value for 'commit' [ 130.690626][ T4267] input: syz1 as /devices/virtual/input/input70 [ 130.708611][ T8] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 130.901324][ T4271] loop1: detected capacity change from 0 to 1024 [ 130.918365][ T4271] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 130.931361][ T4271] EXT4-fs (loop1): barriers disabled [ 130.936518][ T4271] JBD2: no valid journal superblock found [ 130.942088][ T4271] EXT4-fs (loop1): error loading journal [ 131.123687][ T4279] loop2: detected capacity change from 0 to 16 [ 131.130589][ T4279] erofs: (device loop2): mounted with root inode @ nid 36. [ 131.139504][ T4279] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 131.149400][ T28] audit: type=1400 audit(1717451339.468:14621): avc: denied { watch watch_reads } for pid=4278 comm="syz-executor.2" path="/root/syzkaller-testdir2606455879/syzkaller.ueHwIA/210/file1" dev="loop2" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.267491][ T2397] Bluetooth: hci0: command 0x1003 tx timeout [ 131.268681][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.581787][ T345] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 131.663071][ T1486] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.847505][ T345] usb 5-1: Using ep0 maxpacket: 16 [ 131.882853][ T4304] loop0: detected capacity change from 0 to 131072 [ 131.889802][ T4304] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 131.896288][ T4304] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 131.904911][ T4304] F2FS-fs (loop0): invalid crc value [ 131.911497][ T4304] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.935270][ T4304] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 131.942213][ T4304] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 131.997708][ T345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.008677][ T345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.018431][ T345] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.031135][ T345] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.040105][ T345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.048765][ T345] usb 5-1: config 0 descriptor?? [ 132.142184][ T4325] loop0: detected capacity change from 0 to 128 [ 132.149410][ T4325] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 132.188201][ T4325] bio_check_eod: 49 callbacks suppressed [ 132.188218][ T4325] syz-executor.0: attempt to access beyond end of device [ 132.188218][ T4325] loop0: rw=2049, sector=625, nr_sectors = 1 limit=128 [ 132.208478][ T4325] syz-executor.0: attempt to access beyond end of device [ 132.208478][ T4325] loop0: rw=524288, sector=625, nr_sectors = 1 limit=128 [ 132.222336][ T4325] syz-executor.0: attempt to access beyond end of device [ 132.222336][ T4325] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 132.235986][ T4325] syz-executor.0: attempt to access beyond end of device [ 132.235986][ T4325] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 132.249366][ T4325] syz-executor.0: attempt to access beyond end of device [ 132.249366][ T4325] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 132.262619][ T4325] syz-executor.0: attempt to access beyond end of device [ 132.262619][ T4325] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 132.276078][ T4326] syz-executor.0: attempt to access beyond end of device [ 132.276078][ T4326] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 132.289461][ T4326] syz-executor.0: attempt to access beyond end of device [ 132.289461][ T4326] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 132.302824][ T4326] syz-executor.0: attempt to access beyond end of device [ 132.302824][ T4326] loop0: rw=0, sector=625, nr_sectors = 1 limit=128 [ 132.319878][ T1486] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 132.389467][ T4335] loop0: detected capacity change from 0 to 512 [ 132.395925][ T4335] ext4: Bad value for 'commit' [ 132.415194][ T4338] syz-executor.2[4338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.415242][ T4338] syz-executor.2[4338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.429235][ T4335] input: syz1 as /devices/virtual/input/input71 [ 132.519093][ T4290] loop4: detected capacity change from 0 to 512 [ 132.525932][ T4290] EXT4-fs: old and new quota format mixing [ 132.591538][ T345] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002B/input/input72 [ 132.685878][ T345] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 132.798946][ T3334] usb 5-1: USB disconnect, device number 18 [ 133.338209][ T4361] overlayfs: invalid redirect ((null)) [ 133.339764][ T4359] loop4: detected capacity change from 0 to 8192 [ 133.351123][ T4359] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.363832][ T28] audit: type=1400 audit(1717451341.688:14622): avc: denied { remount } for pid=4358 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 133.467473][ T4369] loop0: detected capacity change from 0 to 16 [ 133.474192][ T4369] erofs: (device loop0): mounted with root inode @ nid 36. [ 133.482508][ T4369] syz-executor.0: attempt to access beyond end of device [ 133.482508][ T4369] loop0: rw=0, sector=296, nr_sectors = 16 limit=16 [ 133.489945][ T4373] loop2: detected capacity change from 0 to 1024 [ 133.495900][ T4369] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 133.552947][ T4373] loop2: detected capacity change from 0 to 128 [ 133.667541][ T2397] Bluetooth: hci0: command 0x1003 tx timeout [ 133.673563][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.751041][ T28] audit: type=1400 audit(1717451342.078:14623): avc: denied { block_suspend } for pid=4380 comm="syz-executor.2" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.851987][ T4379] loop0: detected capacity change from 0 to 40427 [ 133.867509][ T4379] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 133.875102][ T4379] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 133.918899][ T4379] F2FS-fs (loop0): Found nat_bits in checkpoint [ 133.967479][ T3334] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 134.000937][ T4379] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 134.017471][ T4379] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 134.237314][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 134.238912][ T3334] usb 2-1: Using ep0 maxpacket: 16 [ 134.306670][ T28] audit: type=1400 audit(1717451342.628:14624): avc: denied { map } for pid=4395 comm="syz-executor.4" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.341969][ T4394] overlayfs: invalid redirect ((null)) [ 134.387789][ T3334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.403595][ T3334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.422302][ T3334] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.435186][ T3334] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.445805][ T3334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.448450][ T4401] loop0: detected capacity change from 0 to 512 [ 134.454338][ T3334] usb 2-1: config 0 descriptor?? [ 134.489813][ T4401] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 134.524902][ T4401] EXT4-fs (loop0): 1 truncate cleaned up [ 134.547511][ T4401] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.565825][ T4401] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz-executor.0: Siphash requires key [ 134.594975][ T2351] EXT4-fs (loop0): unmounting filesystem. [ 134.620562][ T4405] syz-executor.0[4405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.620638][ T4405] syz-executor.0[4405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.700985][ T4414] loop2: detected capacity change from 0 to 512 [ 134.734939][ T4414] EXT4-fs: Ignoring removed oldalloc option [ 134.746725][ T4414] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz-executor.2: Parent and EA inode have the same ino 15 [ 134.761156][ T4414] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 134.774028][ T4414] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz-executor.2: Parent and EA inode have the same ino 15 [ 134.786842][ T4414] EXT4-fs (loop2): 1 orphan inode deleted [ 134.793511][ T4414] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.805940][ T28] audit: type=1400 audit(1717451343.128:14625): avc: denied { rename } for pid=4413 comm="syz-executor.2" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 134.834721][ T2262] EXT4-fs (loop2): unmounting filesystem. [ 134.930617][ T4384] loop1: detected capacity change from 0 to 512 [ 134.941636][ T4384] EXT4-fs: old and new quota format mixing [ 135.013269][ T3334] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002C/input/input73 [ 135.221050][ T3334] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 135.234469][ T3334] usb 2-1: USB disconnect, device number 14 [ 135.357489][ T19] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 135.564690][ T4425] loop2: detected capacity change from 0 to 131072 [ 135.572228][ T4425] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 135.579181][ T4425] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 135.591455][ T4425] F2FS-fs (loop2): invalid crc value [ 135.602037][ T4425] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.641270][ T4425] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 135.648257][ T4425] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 135.761347][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 135.847535][ T19] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 135.866520][ T19] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 135.886773][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.970591][ T4453] syz-executor.2[4453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.970663][ T4453] syz-executor.2[4453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.057566][ T19] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.087474][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.095403][ T19] usb 1-1: Product: syz [ 136.102147][ T19] usb 1-1: Manufacturer: syz [ 136.106559][ T19] usb 1-1: SerialNumber: syz [ 136.280739][ T28] audit: type=1326 audit(1717451344.608:14626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c887cf69 code=0x7ffc0000 [ 136.318399][ T28] audit: type=1326 audit(1717451344.608:14627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39c887cf69 code=0x7ffc0000 [ 136.343896][ T4487] loop4: detected capacity change from 0 to 256 [ 136.356144][ T28] audit: type=1326 audit(1717451344.608:14628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c887cf69 code=0x7ffc0000 [ 136.381892][ T28] audit: type=1326 audit(1717451344.608:14629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39c887cf69 code=0x7ffc0000 [ 136.408745][ T28] audit: type=1326 audit(1717451344.638:14630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c887cf69 code=0x7ffc0000 [ 136.432905][ T28] audit: type=1326 audit(1717451344.638:14631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39c887a6e7 code=0x7ffc0000 [ 136.457169][ T19] usb 1-1: 0:2 : does not exist [ 136.460171][ T28] audit: type=1326 audit(1717451344.638:14632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39c88403c9 code=0x7ffc0000 [ 136.488010][ T28] audit: type=1326 audit(1717451344.638:14633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f39c887cf69 code=0x7ffc0000 [ 136.488117][ T19] usb 1-1: USB disconnect, device number 24 [ 136.512987][ T28] audit: type=1326 audit(1717451344.638:14634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39c887a6e7 code=0x7ffc0000 [ 136.547924][ T28] audit: type=1326 audit(1717451344.638:14635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39c88403c9 code=0x7ffc0000 [ 136.578384][ T4496] device batadv_slave_1 entered promiscuous mode [ 136.585192][ T4496] device batadv_slave_1 left promiscuous mode [ 136.643226][ T4512] loop1: detected capacity change from 0 to 512 [ 136.660881][ T4512] ext4: Bad value for 'commit' [ 136.710128][ T4512] input: syz1 as /devices/virtual/input/input74 [ 136.899217][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 137.047498][ T19] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 137.407573][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.427513][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.437081][ T19] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 137.451775][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.460317][ T19] usb 5-1: config 0 descriptor?? [ 137.737511][ T431] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 137.757480][ T3334] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 137.938823][ T19] wacom 0003:056A:00F8.002D: item fetching failed at offset 0/5 [ 137.946461][ T19] wacom 0003:056A:00F8.002D: parse failed [ 137.952342][ T19] wacom: probe of 0003:056A:00F8.002D failed with error -22 [ 137.977528][ T431] usb 1-1: Using ep0 maxpacket: 8 [ 138.097574][ T431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.108320][ T431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.117830][ T431] usb 1-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 138.126647][ T431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.134930][ T431] usb 1-1: config 0 descriptor?? [ 138.144553][ T224] usb 5-1: USB disconnect, device number 19 [ 138.150399][ T3334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 138.160457][ T3334] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 138.327618][ T3334] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 138.336529][ T3334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.344396][ T3334] usb 2-1: Product: syz [ 138.348293][ T3334] usb 2-1: Manufacturer: syz [ 138.352710][ T3334] usb 2-1: SerialNumber: syz [ 138.357654][ T3334] usb 2-1: config 0 descriptor?? [ 138.508081][ T4560] input: syz1 as /devices/virtual/input/input75 [ 138.619746][ T431] hid-multitouch 0003:18D1:5028.002E: hidraw0: USB HID v0.00 Device [HID 18d1:5028] on usb-dummy_hcd.0-1/input0 [ 138.619852][ T3334] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 138.640854][ T3334] usb 2-1: USB disconnect, device number 15 [ 138.670362][ T4565] loop4: detected capacity change from 0 to 512 [ 138.679080][ T4565] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 138.697395][ T4565] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 138.717785][ T4565] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 138.733356][ T4565] ext4 filesystem being mounted at /root/syzkaller-testdir1279034836/syzkaller.A7ancj/174/file0 supports timestamps until 2038 (0x7fffffff) [ 138.757276][ T2371] EXT4-fs (loop4): unmounting filesystem. [ 138.769510][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.776670][ T4568] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.784047][ T4568] device bridge_slave_0 entered promiscuous mode [ 138.791239][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.798294][ T4568] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.805596][ T4568] device bridge_slave_1 entered promiscuous mode [ 138.822300][ T3560] usb 1-1: USB disconnect, device number 25 [ 138.889712][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.896605][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.903720][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.910481][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.920241][ T4580] loop4: detected capacity change from 0 to 512 [ 138.928894][ T4580] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 138.936525][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.950200][ T4580] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 138.966234][ T4580] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 138.966243][ T3334] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.966326][ T4580] ext4 filesystem being mounted at /root/syzkaller-testdir1279034836/syzkaller.A7ancj/178/file0 supports timestamps until 2038 (0x7fffffff) [ 138.995688][ T3334] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.006412][ T2371] EXT4-fs (loop4): unmounting filesystem. [ 139.018570][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.026714][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.033650][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.041150][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.050680][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.057581][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.071045][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.079209][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.092741][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.104083][ T4568] device veth0_vlan entered promiscuous mode [ 139.110407][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.118305][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.125539][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.142149][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.150446][ T4591] device batadv_slave_1 entered promiscuous mode [ 139.157384][ T4591] device batadv_slave_1 left promiscuous mode [ 139.164148][ T4568] device veth1_macvtap entered promiscuous mode [ 139.179428][ T3334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.192450][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.238286][ T8] device bridge_slave_1 left promiscuous mode [ 139.244234][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.251719][ T8] device bridge_slave_0 left promiscuous mode [ 139.257823][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.265256][ T8] device veth1_macvtap left promiscuous mode [ 139.271205][ T8] device veth0_vlan left promiscuous mode [ 139.578867][ T4644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.592255][ T4644] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4644 comm=syz-executor.1 [ 139.605694][ T4644] overlayfs: unrecognized mount option "\" or missing value [ 139.697498][ T345] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 139.727604][ T224] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 140.007603][ T224] usb 4-1: Using ep0 maxpacket: 8 [ 140.067667][ T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 140.077311][ T345] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 140.137558][ T224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.148449][ T224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.158079][ T224] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 140.166924][ T224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.175215][ T224] usb 4-1: config 0 descriptor?? [ 140.237732][ T345] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 140.246601][ T345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.254471][ T345] usb 1-1: Product: syz [ 140.258446][ T345] usb 1-1: Manufacturer: syz [ 140.262815][ T345] usb 1-1: SerialNumber: syz [ 140.268127][ T345] usb 1-1: config 0 descriptor?? [ 140.332557][ T4673] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.345824][ T4673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4673 comm=syz-executor.2 [ 140.359193][ T4673] overlayfs: unrecognized mount option "\" or missing value [ 140.519438][ T345] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 140.526684][ T345] usb 1-1: USB disconnect, device number 26 [ 140.639563][ T224] hid-multitouch 0003:18D1:5028.002F: hidraw0: USB HID v0.00 Device [HID 18d1:5028] on usb-dummy_hcd.3-1/input0 [ 140.844158][ T345] usb 4-1: USB disconnect, device number 20 [ 140.859959][ T4685] loop1: detected capacity change from 0 to 512 [ 140.868932][ T4685] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 140.887202][ T4685] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 140.899710][ T4685] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.908095][ T4685] ext4 filesystem being mounted at /root/syzkaller-testdir1403090287/syzkaller.amS4Jn/88/file0 supports timestamps until 2038 (0x7fffffff) [ 140.937091][ T3781] EXT4-fs (loop1): unmounting filesystem. [ 140.968898][ T4691] loop1: detected capacity change from 0 to 512 [ 140.977404][ T4691] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 140.992322][ T4691] EXT4-fs (loop1): Remounting filesystem read-only [ 140.998778][ T4691] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4278190080 (level 0) [ 141.013302][ T4691] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 141.019870][ T4680] loop4: detected capacity change from 0 to 131072 [ 141.033506][ T4691] EXT4-fs (loop1): 1 truncate cleaned up [ 141.034673][ T4680] F2FS-fs (loop4): invalid crc value [ 141.039055][ T4691] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 141.058978][ T4680] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.076325][ T3781] EXT4-fs (loop1): unmounting filesystem. [ 141.120614][ T4680] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 141.266382][ T4706] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.320924][ T4706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4706 comm=syz-executor.2 [ 141.358096][ T4706] overlayfs: unrecognized mount option "\" or missing value [ 141.508957][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 141.508971][ T28] audit: type=1326 audit(1717451349.838:14696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c887cf69 code=0x7ffc0000 [ 141.539361][ T28] audit: type=1326 audit(1717451349.838:14697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c887cf69 code=0x7ffc0000 [ 141.563461][ T28] audit: type=1326 audit(1717451349.838:14698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39c887cf69 code=0x7ffc0000 [ 141.587360][ T28] audit: type=1326 audit(1717451349.838:14699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c887cf69 code=0x7ffc0000 [ 141.587480][ T345] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 141.611309][ T28] audit: type=1326 audit(1717451349.838:14700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c887cf69 code=0x7ffc0000 [ 141.642462][ T28] audit: type=1326 audit(1717451349.868:14701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39c887cf69 code=0x7ffc0000 [ 141.679167][ T28] audit: type=1326 audit(1717451349.998:14702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c887cf69 code=0x7ffc0000 [ 141.703072][ T28] audit: type=1326 audit(1717451349.998:14703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39c887a6e7 code=0x7ffc0000 [ 141.727680][ T28] audit: type=1326 audit(1717451349.998:14704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39c88403c9 code=0x7ffc0000 [ 141.751519][ T28] audit: type=1326 audit(1717451349.998:14705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39c887a6e7 code=0x7ffc0000 [ 141.824813][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.839807][ T4740] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4740 comm=syz-executor.4 [ 141.853474][ T4740] overlayfs: unrecognized mount option "\" or missing value [ 142.037631][ T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.051598][ T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.067773][ T431] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 142.068017][ T345] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 142.084165][ T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.092614][ T345] usb 1-1: config 0 descriptor?? [ 142.427559][ T3334] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 142.435059][ T431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.445883][ T431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.455438][ T431] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.468040][ T431] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 142.476973][ T431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.485136][ T431] usb 4-1: config 0 descriptor?? [ 142.507530][ T2058] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 142.558138][ T4708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.566419][ T4708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.578160][ T345] hid-generic 0003:1B1C:1B3E.0030: unknown main item tag 0x7 [ 142.585426][ T345] hid-generic 0003:1B1C:1B3E.0030: unknown main item tag 0x4 [ 142.592765][ T345] hid-generic 0003:1B1C:1B3E.0030: failed to start in urb: -90 [ 142.600557][ T345] hid-generic 0003:1B1C:1B3E.0030: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 142.785400][ T345] usb 1-1: USB disconnect, device number 27 [ 142.827541][ T3334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.838394][ T3334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.847939][ T3334] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 142.856883][ T3334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.865262][ T3334] usb 2-1: config 0 descriptor?? [ 142.867604][ T2058] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.880739][ T2058] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 142.968186][ T431] elecom 0003:056E:00FD.0031: unknown main item tag 0x0 [ 142.974973][ T431] elecom 0003:056E:00FD.0031: unknown main item tag 0x0 [ 142.981845][ T431] elecom 0003:056E:00FD.0031: unknown main item tag 0x0 [ 142.988555][ T431] elecom 0003:056E:00FD.0031: unknown main item tag 0x0 [ 142.995413][ T431] elecom 0003:056E:00FD.0031: unknown main item tag 0x0 [ 143.002411][ T431] elecom 0003:056E:00FD.0031: unknown main item tag 0x0 [ 143.009274][ T431] elecom 0003:056E:00FD.0031: unknown main item tag 0x0 [ 143.015954][ T431] elecom 0003:056E:00FD.0031: unknown main item tag 0x0 [ 143.022842][ T431] elecom 0003:056E:00FD.0031: unknown main item tag 0x0 [ 143.029711][ T431] elecom 0003:056E:00FD.0031: unknown main item tag 0x0 [ 143.036470][ T431] elecom 0003:056E:00FD.0031: unknown main item tag 0x0 [ 143.043721][ T431] elecom 0003:056E:00FD.0031: hidraw0: USB HID v0.00 Device [HID 056e:00fd] on usb-dummy_hcd.3-1/input0 [ 143.057551][ T2058] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.066447][ T2058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.074350][ T2058] usb 3-1: Product: syz [ 143.078370][ T2058] usb 3-1: Manufacturer: syz [ 143.082735][ T2058] usb 3-1: SerialNumber: syz [ 143.172972][ T345] usb 4-1: USB disconnect, device number 21 [ 143.328505][ T4789] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 143.337767][ T3334] hid (null): bogus close delimiter [ 143.437540][ T431] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 143.547552][ T3334] usb 2-1: language id specifier not provided by device, defaulting to English [ 143.677530][ T431] usb 5-1: Using ep0 maxpacket: 16 [ 143.797563][ T431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.808353][ T431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.817897][ T431] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.830520][ T431] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.839387][ T431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.847596][ T431] usb 5-1: config 0 descriptor?? [ 143.876844][ T4831] EXT4-fs warning (device sda1): ext4_group_extend:1869: can't shrink FS - resize aborted [ 143.987945][ T4789] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 144.110393][ T4839] device pim6reg1 entered promiscuous mode [ 144.113034][ T4781] loop1: detected capacity change from 0 to 40427 [ 144.127059][ T4781] F2FS-fs (loop1): Mismatch valid blocks 5 vs. 7 [ 144.133585][ T4781] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 144.227731][ T2058] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 144.234118][ T2058] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 144.241369][ T2058] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 144.249265][ T3334] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0032/input/input76 [ 144.262734][ T3334] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0032/input/input77 [ 144.278387][ T3334] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0032/input/input78 [ 144.295504][ T3334] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0032/input/input79 [ 144.310501][ T4796] loop4: detected capacity change from 0 to 512 [ 144.317661][ T4796] EXT4-fs: old and new quota format mixing [ 144.332040][ T3334] uclogic 0003:256C:006D.0032: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 144.393447][ T431] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0033/input/input80 [ 144.439418][ T2058] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 144.469284][ T2058] usb 3-1: USB disconnect, device number 15 [ 144.475289][ T2058] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 144.516431][ T3334] usb 2-1: USB disconnect, device number 16 [ 144.600531][ T431] microsoft 0003:045E:07DA.0033: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 144.613439][ T431] usb 5-1: USB disconnect, device number 20 [ 144.619646][ T19] ================================================================== [ 144.627522][ T19] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 144.635168][ T19] Read of size 8 at addr ffff8881144cecf0 by task kworker/0:1/19 [ 144.642707][ T19] 2024/06/03 21:49:12 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 144.644880][ T19] CPU: 0 PID: 19 Comm: kworker/0:1 Tainted: G W 6.1.78-syzkaller-00137-gc36abc6d4212 #0 [ 144.655814][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 144.665711][ T19] Workqueue: rcu_gp srcu_invoke_callbacks [ 144.671266][ T19] Call Trace: [ 144.674387][ T19] [ 144.677167][ T19] dump_stack_lvl+0x151/0x1b7 [ 144.681677][ T19] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 144.686965][ T19] ? _printk+0xd1/0x111 [ 144.691050][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 144.696029][ T19] print_report+0x158/0x4e0 [ 144.700331][ T19] ? __this_cpu_preempt_check+0x13/0x20 [ 144.705713][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 144.710785][ T19] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 144.716840][ T19] ? __list_del_entry_valid+0xa6/0x130 [ 144.722310][ T19] kasan_report+0x13c/0x170 [ 144.726735][ T19] ? __list_del_entry_valid+0xa6/0x130 [ 144.732036][ T19] __asan_report_load8_noabort+0x14/0x20 [ 144.737501][ T19] __list_del_entry_valid+0xa6/0x130 [ 144.742623][ T19] process_one_work+0x4d7/0xcb0 [ 144.747307][ T19] worker_thread+0xa60/0x1260 [ 144.751857][ T19] kthread+0x26d/0x300 [ 144.755813][ T19] ? worker_clr_flags+0x1a0/0x1a0 [ 144.760684][ T19] ? kthread_blkcg+0xd0/0xd0 [ 144.765109][ T19] ret_from_fork+0x1f/0x30 [ 144.769440][ T19] [ 144.772306][ T19] [ 144.774472][ T19] Allocated by task 2058: [ 144.778639][ T19] kasan_set_track+0x4b/0x70 [ 144.783068][ T19] kasan_save_alloc_info+0x1f/0x30 [ 144.788013][ T19] __kasan_kmalloc+0x9c/0xb0 [ 144.792444][ T19] __kmalloc_node+0xb4/0x1e0 [ 144.796867][ T19] kvmalloc_node+0x221/0x640 [ 144.801292][ T19] alloc_netdev_mqs+0x8c/0xf90 [ 144.805890][ T19] alloc_etherdev_mqs+0x36/0x40 [ 144.810605][ T19] usbnet_probe+0x207/0x27c0 [ 144.815011][ T19] usb_probe_interface+0x5b6/0xa90 [ 144.819957][ T19] really_probe+0x2b8/0x920 [ 144.824298][ T19] __driver_probe_device+0x1a0/0x310 [ 144.829510][ T19] driver_probe_device+0x54/0x3d0 [ 144.834360][ T19] __device_attach_driver+0x2e3/0x490 [ 144.839719][ T19] bus_for_each_drv+0x183/0x200 [ 144.844491][ T19] __device_attach+0x312/0x510 [ 144.849085][ T19] device_initial_probe+0x1a/0x20 [ 144.853975][ T19] bus_probe_device+0xbe/0x1e0 [ 144.858631][ T19] device_add+0xb60/0xf10 [ 144.862801][ T19] usb_set_configuration+0x190f/0x1e80 [ 144.868093][ T19] usb_generic_driver_probe+0x8b/0x150 [ 144.873391][ T19] usb_probe_device+0x144/0x260 [ 144.878074][ T19] really_probe+0x2b8/0x920 [ 144.882417][ T19] __driver_probe_device+0x1a0/0x310 [ 144.887549][ T19] driver_probe_device+0x54/0x3d0 [ 144.892395][ T19] __device_attach_driver+0x2e3/0x490 [ 144.897604][ T19] bus_for_each_drv+0x183/0x200 [ 144.902527][ T19] __device_attach+0x312/0x510 [ 144.907114][ T19] device_initial_probe+0x1a/0x20 [ 144.912063][ T19] bus_probe_device+0xbe/0x1e0 [ 144.916746][ T19] device_add+0xb60/0xf10 [ 144.920912][ T19] usb_new_device+0xf32/0x1810 [ 144.925598][ T19] hub_event+0x2db1/0x4830 [ 144.929850][ T19] process_one_work+0x73d/0xcb0 [ 144.934548][ T19] worker_thread+0xa60/0x1260 [ 144.939050][ T19] kthread+0x26d/0x300 [ 144.942957][ T19] ret_from_fork+0x1f/0x30 [ 144.947209][ T19] [ 144.949390][ T19] Freed by task 2058: [ 144.953200][ T19] kasan_set_track+0x4b/0x70 [ 144.957625][ T19] kasan_save_free_info+0x2b/0x40 [ 144.962484][ T19] ____kasan_slab_free+0x131/0x180 [ 144.967432][ T19] __kasan_slab_free+0x11/0x20 [ 144.972031][ T19] __kmem_cache_free+0x218/0x3b0 [ 144.976806][ T19] kfree+0x7a/0xf0 [ 144.980365][ T19] kvfree+0x35/0x40 [ 144.984009][ T19] netdev_freemem+0x3f/0x60 [ 144.988348][ T19] netdev_release+0x7f/0xb0 [ 144.992688][ T19] device_release+0x95/0x1c0 [ 144.997188][ T19] kobject_put+0x178/0x260 [ 145.001374][ T19] put_device+0x1f/0x30 [ 145.005360][ T19] free_netdev+0x393/0x480 [ 145.009614][ T19] usbnet_disconnect+0x245/0x390 [ 145.014475][ T19] usb_unbind_interface+0x1fa/0x8c0 [ 145.019517][ T19] device_release_driver_internal+0x53e/0x870 [ 145.025409][ T19] device_release_driver+0x19/0x20 [ 145.030359][ T19] bus_remove_device+0x2fa/0x360 [ 145.035130][ T19] device_del+0x663/0xe90 [ 145.039300][ T19] usb_disable_device+0x380/0x720 [ 145.044167][ T19] usb_disconnect+0x32a/0x890 [ 145.048669][ T19] hub_event+0x1ed8/0x4830 [ 145.052924][ T19] process_one_work+0x73d/0xcb0 [ 145.057611][ T19] worker_thread+0xd71/0x1260 [ 145.062134][ T19] kthread+0x26d/0x300 [ 145.066036][ T19] ret_from_fork+0x1f/0x30 [ 145.070283][ T19] [ 145.072455][ T19] Last potentially related work creation: [ 145.078021][ T19] kasan_save_stack+0x3b/0x60 [ 145.082519][ T19] __kasan_record_aux_stack+0xb4/0xc0 [ 145.087728][ T19] kasan_record_aux_stack_noalloc+0xb/0x10 [ 145.093372][ T19] insert_work+0x56/0x310 [ 145.097539][ T19] __queue_work+0x9b6/0xd70 [ 145.101874][ T19] queue_work_on+0x105/0x170 [ 145.106311][ T19] usbnet_link_change+0xeb/0x100 [ 145.111075][ T19] usbnet_probe+0x1dbe/0x27c0 [ 145.115589][ T19] usb_probe_interface+0x5b6/0xa90 [ 145.120550][ T19] really_probe+0x2b8/0x920 [ 145.124875][ T19] __driver_probe_device+0x1a0/0x310 [ 145.129999][ T19] driver_probe_device+0x54/0x3d0 [ 145.134856][ T19] __device_attach_driver+0x2e3/0x490 [ 145.140066][ T19] bus_for_each_drv+0x183/0x200 [ 145.144758][ T19] __device_attach+0x312/0x510 [ 145.149354][ T19] device_initial_probe+0x1a/0x20 [ 145.154213][ T19] bus_probe_device+0xbe/0x1e0 [ 145.159161][ T19] device_add+0xb60/0xf10 [ 145.163326][ T19] usb_set_configuration+0x190f/0x1e80 [ 145.168620][ T19] usb_generic_driver_probe+0x8b/0x150 [ 145.173916][ T19] usb_probe_device+0x144/0x260 [ 145.178599][ T19] really_probe+0x2b8/0x920 [ 145.182941][ T19] __driver_probe_device+0x1a0/0x310 [ 145.188067][ T19] driver_probe_device+0x54/0x3d0 [ 145.192922][ T19] __device_attach_driver+0x2e3/0x490 [ 145.198139][ T19] bus_for_each_drv+0x183/0x200 [ 145.202816][ T19] __device_attach+0x312/0x510 [ 145.207418][ T19] device_initial_probe+0x1a/0x20 [ 145.212287][ T19] bus_probe_device+0xbe/0x1e0 [ 145.216880][ T19] device_add+0xb60/0xf10 [ 145.221045][ T19] usb_new_device+0xf32/0x1810 [ 145.225643][ T19] hub_event+0x2db1/0x4830 [ 145.229905][ T19] process_one_work+0x73d/0xcb0 [ 145.234590][ T19] worker_thread+0xa60/0x1260 [ 145.239100][ T19] kthread+0x26d/0x300 [ 145.243007][ T19] ret_from_fork+0x1f/0x30 [ 145.247255][ T19] [ 145.249427][ T19] The buggy address belongs to the object at ffff8881144ce000 [ 145.249427][ T19] which belongs to the cache kmalloc-4k of size 4096 [ 145.263315][ T19] The buggy address is located 3312 bytes inside of [ 145.263315][ T19] 4096-byte region [ffff8881144ce000, ffff8881144cf000) [ 145.276764][ T19] [ 145.278934][ T19] The buggy address belongs to the physical page: [ 145.285195][ T19] page:ffffea0004513200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1144c8 [ 145.295337][ T19] head:ffffea0004513200 order:3 compound_mapcount:0 compound_pincount:0 [ 145.303411][ T19] flags: 0x4000000000010200(slab|head|zone=1) [ 145.309335][ T19] raw: 4000000000010200 ffffea00044e8e00 dead000000000002 ffff888100043380 [ 145.317734][ T19] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 145.326152][ T19] page dumped because: kasan: bad access detected [ 145.332405][ T19] page_owner tracks the page as allocated [ 145.337954][ T19] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 964, tgid 964 (syz-executor.2), ts 47201025482, free_ts 45902412632 [ 145.360523][ T19] post_alloc_hook+0x213/0x220 [ 145.365121][ T19] prep_new_page+0x1b/0x110 [ 145.369460][ T19] get_page_from_freelist+0x27ea/0x2870 [ 145.374843][ T19] __alloc_pages+0x3a1/0x780 [ 145.379267][ T19] alloc_slab_page+0x6c/0xf0 [ 145.383693][ T19] new_slab+0x90/0x3e0 [ 145.387604][ T19] ___slab_alloc+0x6f9/0xb80 [ 145.392037][ T19] __slab_alloc+0x5d/0xa0 [ 145.396205][ T19] __kmem_cache_alloc_node+0x1af/0x250 [ 145.401491][ T19] __kmalloc_node_track_caller+0xa2/0x1e0 [ 145.407050][ T19] kmemdup+0x29/0x60 [ 145.410776][ T19] __devinet_sysctl_register+0xac/0x2a0 [ 145.416159][ T19] devinet_sysctl_register+0x16a/0x1e0 [ 145.421454][ T19] inetdev_init+0x2b4/0x4e0 [ 145.425796][ T19] inetdev_event+0x205/0x1110 [ 145.430303][ T19] raw_notifier_call_chain+0x8c/0xf0 [ 145.435424][ T19] page last free stack trace: [ 145.439940][ T19] free_unref_page_prepare+0x83d/0x850 [ 145.445233][ T19] free_unref_page+0xb2/0x5c0 [ 145.449743][ T19] __free_pages+0x61/0xf0 [ 145.453914][ T19] __free_slab+0xce/0x1a0 [ 145.458078][ T19] __unfreeze_partials+0x165/0x1a0 [ 145.463035][ T19] put_cpu_partial+0xa9/0x100 [ 145.467545][ T19] __slab_free+0x1c8/0x280 [ 145.471888][ T19] ___cache_free+0xc6/0xd0 [ 145.476136][ T19] qlist_free_all+0xc5/0x140 [ 145.480589][ T19] kasan_quarantine_reduce+0x15a/0x180 [ 145.485938][ T19] __kasan_slab_alloc+0x24/0x80 [ 145.490626][ T19] slab_post_alloc_hook+0x53/0x2c0 [ 145.495571][ T19] kmem_cache_alloc_node+0x18a/0x2d0 [ 145.500706][ T19] __alloc_skb+0xcc/0x2d0 [ 145.504866][ T19] __ip_append_data+0x26f0/0x3930 [ 145.509718][ T19] ip_append_data+0x120/0x190 [ 145.514234][ T19] [ 145.516401][ T19] Memory state around the buggy address: [ 145.521875][ T19] ffff8881144ceb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.529770][ T19] ffff8881144cec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.537669][ T19] >ffff8881144cec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.545566][ T19] ^ [ 145.553219][ T19] ffff8881144ced00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.561104][ T19] ffff8881144ced80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.568998][ T19] ================================================================== [ 145.576899][ T19] Disabling lock debugging due to kernel taint