last executing test programs: 4.507290395s ago: executing program 4 (id=255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.477209548s ago: executing program 4 (id=256): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d0001070000000904000005030000000921000000012205000905810300000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) syz_usb_disconnect(r0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='V', 0x1}], 0x1, 0x0, 0x0) 3.622154886s ago: executing program 2 (id=271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r2}, 0x38) 2.834351489s ago: executing program 2 (id=275): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.811766141s ago: executing program 2 (id=276): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$tun(r1, &(0x7f0000000240)={@void, @val, @ipv6=@icmpv6={0x0, 0x6, "41b0ca", 0x70, 0x3a, 0x0, @rand_addr=' \x01\x00', @empty, {[@routing={0x0, 0x4, 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x0, 0x0, '\x00', [@generic]}, @fragment, @dstopts={0x0, 0x2, '\x00', [@pad1, @calipso={0x7, 0x8}, @jumbo]}], @ni={0x8c}}}}, 0xa2) 2.770736025s ago: executing program 2 (id=277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.728969219s ago: executing program 2 (id=278): bind$netlink(0xffffffffffffffff, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000540)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.672556514s ago: executing program 2 (id=279): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000880)={0x0, 0x11, 0x6, "475d451488ca"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000380)={0xb9a71a8eb99a8dec, 0x17, 0x6a, "2acf170a7abbd140718aa1f7d4c53d709a96e5421dd53d2af7ccb906647134e05b317ed89a58792b9925acc9b2422957c066c67c8b206c646ae37d515d2284def3deb11c3256b75ea43c22f8031162450b7ff2c9374a51b8281769e173c32364c15a65acd9b45374e211"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x3}}) 2.335254355s ago: executing program 1 (id=284): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000440)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000200)=""/2, 0x2}}, 0x11c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0xfffffffffffffed6}}, 0x1006) write$UHID_INPUT(r0, &(0x7f0000002800)={0xc, {"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", 0x1000}}, 0x1006) 2.252543932s ago: executing program 3 (id=286): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "12279dfe7e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.242132973s ago: executing program 1 (id=287): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x296, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.178342399s ago: executing program 1 (id=288): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0100f3ff"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "84e5821a"}]}}, 0x0}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b4c, &(0x7f0000000080)) 2.005666825s ago: executing program 4 (id=289): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) 1.015021527s ago: executing program 0 (id=291): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x5}, {0x80000100, 0x3, 0x0, 0x5}, 0x401, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x32}, 0x2, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', './file0'}, 0xb) 996.067118ms ago: executing program 0 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000020007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x3a9, 0x0, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x0) 979.54241ms ago: executing program 0 (id=293): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) 913.736436ms ago: executing program 0 (id=294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0xfffd, 0x0, 0x0, 0x0, 0x0, "e318ff8c00368458"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)) 913.039806ms ago: executing program 0 (id=295): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @dev}, 0x1c) write$binfmt_misc(r0, 0x0, 0x0) 848.578522ms ago: executing program 0 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_connect(0x0, 0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022200010000000009040000010103510009050313000000000007250103"], 0x0) 302.376572ms ago: executing program 3 (id=297): socket$nl_route(0x10, 0x3, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00003d9000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 198.724471ms ago: executing program 1 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fe0006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r3, 0xf7000, 0x0, 0x3) 198.193031ms ago: executing program 3 (id=299): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x1000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7) 120.511209ms ago: executing program 3 (id=300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r2, 0xb, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480), 0x0, 0x0}, 0x40) 107.67748ms ago: executing program 1 (id=301): r0 = socket$inet6(0xa, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002500)={0x2020}, 0x2020) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 101.128971ms ago: executing program 3 (id=302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ustat(0x800, 0x0) 82.017562ms ago: executing program 4 (id=303): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 64.300814ms ago: executing program 3 (id=304): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='fus\x9cebFQv\nk\xaa\x10\xc4\t\x9fR\x93\xef\x89lk', 0x0) ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4204, r1, 0x201, &(0x7f0000000000)) 25.863677ms ago: executing program 4 (id=305): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000044700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x2, 0x7, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.652179ms ago: executing program 1 (id=306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c000100000040000000000007000000", @ANYRES32=r2, @ANYBLOB="8000a6000a000200aaaaaaaaaabb000008000f00fe"], 0x30}}, 0x0) 0s ago: executing program 4 (id=307): connect$vsock_stream(0xffffffffffffffff, &(0x7f00000008c0)={0x28, 0x0, 0x0, @host}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0xfffd, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000800)=""/116, 0x18}], 0x300) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 19.251554][ T28] audit: type=1400 audit(1727698047.808:66): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.252805][ T278] cgroup: Unknown subsys name 'net' [ 19.255306][ T28] audit: type=1400 audit(1727698047.808:67): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.259488][ T28] audit: type=1400 audit(1727698047.808:68): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.259631][ T278] cgroup: Unknown subsys name 'devices' [ 19.380289][ T278] cgroup: Unknown subsys name 'hugetlb' [ 19.385898][ T278] cgroup: Unknown subsys name 'rlimit' [ 19.516700][ T28] audit: type=1400 audit(1727698048.068:69): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.539785][ T28] audit: type=1400 audit(1727698048.068:70): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.564296][ T28] audit: type=1400 audit(1727698048.068:71): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.596250][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.605027][ T28] audit: type=1400 audit(1727698048.168:72): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.630577][ T28] audit: type=1400 audit(1727698048.168:73): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.643639][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.656337][ T28] audit: type=1400 audit(1727698048.198:74): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.689951][ T28] audit: type=1400 audit(1727698048.198:75): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.502439][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.509339][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.516879][ T290] device bridge_slave_0 entered promiscuous mode [ 20.533671][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.540540][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.547806][ T288] device bridge_slave_0 entered promiscuous mode [ 20.554567][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.561460][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.568773][ T290] device bridge_slave_1 entered promiscuous mode [ 20.590416][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.597254][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.604580][ T288] device bridge_slave_1 entered promiscuous mode [ 20.652140][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.659046][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.666298][ T289] device bridge_slave_0 entered promiscuous mode [ 20.683916][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.690889][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.698321][ T289] device bridge_slave_1 entered promiscuous mode [ 20.725938][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.732835][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.740139][ T291] device bridge_slave_0 entered promiscuous mode [ 20.746570][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.753684][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.761018][ T292] device bridge_slave_0 entered promiscuous mode [ 20.774627][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.781724][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.788926][ T291] device bridge_slave_1 entered promiscuous mode [ 20.795336][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.802250][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.809425][ T292] device bridge_slave_1 entered promiscuous mode [ 20.989151][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.996007][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.003134][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.009907][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.043307][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.050174][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.057254][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.064067][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.076508][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.083393][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.090496][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.097250][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.110563][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.117414][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.124558][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.131316][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.168601][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.175460][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.182611][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.189457][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.222533][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.229921][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.237550][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.245030][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.252401][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.259907][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.266953][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.274090][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.281194][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.288337][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.296653][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.304001][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.328892][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.337145][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.345250][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.352097][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.359541][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.367574][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.374430][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.381645][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.389658][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.396483][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.403691][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.411668][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.418512][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.425658][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.433808][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.481521][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.488797][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.496715][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.503570][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.510729][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.518769][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.525714][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.532931][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.540931][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.548826][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.556924][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.564834][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.572098][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.579359][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.587276][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.594123][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.601314][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.609369][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.616197][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.623583][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.630874][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.638117][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.646225][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.654402][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.661248][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.668463][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.676598][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.684659][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.691502][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.713749][ T289] device veth0_vlan entered promiscuous mode [ 21.719862][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.728366][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.736486][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.745097][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.753251][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.761195][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.769119][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.776416][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.792556][ T290] device veth0_vlan entered promiscuous mode [ 21.809207][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.817269][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.825599][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.834286][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.842067][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.849958][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.858042][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.866123][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.873557][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.888360][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.896279][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.904476][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.912630][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.922542][ T289] device veth1_macvtap entered promiscuous mode [ 21.933387][ T290] device veth1_macvtap entered promiscuous mode [ 21.942220][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.949783][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.957947][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.977689][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.985878][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.993447][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.000742][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.008762][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.016908][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.024998][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.033105][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.041683][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.050791][ T292] device veth0_vlan entered promiscuous mode [ 22.068292][ T288] device veth0_vlan entered promiscuous mode [ 22.075091][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.083512][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.091322][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.099584][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.107581][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.130225][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.137466][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.146699][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.154954][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.165708][ T291] device veth0_vlan entered promiscuous mode [ 22.178453][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.197254][ T288] device veth1_macvtap entered promiscuous mode [ 22.213556][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.221656][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.229162][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.236365][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.244410][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.252750][ T292] device veth1_macvtap entered promiscuous mode [ 22.283284][ T320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.284142][ T291] device veth1_macvtap entered promiscuous mode [ 22.321553][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.329929][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.338328][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.346597][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.355217][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.363581][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.371723][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.379966][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.388163][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.408176][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.416344][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.424931][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.433058][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.648066][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.726169][ T345] loop3: detected capacity change from 0 to 40427 [ 22.733483][ T345] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 22.740336][ T345] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 22.750945][ T345] F2FS-fs (loop3): Found nat_bits in checkpoint [ 22.788519][ T345] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 22.795374][ T345] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 22.802788][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 22.823869][ T291] syz-executor: attempt to access beyond end of device [ 22.823869][ T291] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 22.888060][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 23.027903][ T351] syz.3.13 (351) used greatest stack depth: 20496 bytes left [ 23.048200][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 23.188179][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.199097][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.208652][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.221296][ T6] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 23.230138][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.238973][ T6] usb 3-1: config 0 descriptor?? [ 23.248237][ T311] usb 2-1: string descriptor 0 read error: -22 [ 23.254335][ T311] usb 2-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 23.263299][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.273137][ T311] usb 2-1: config 0 descriptor?? [ 23.319168][ T311] hub 2-1:0.0: bad descriptor, ignoring hub [ 23.325224][ T311] hub: probe of 2-1:0.0 failed with error -5 [ 23.333378][ T311] usb 2-1: Found UVC 0.00 device (17dc:0202) [ 23.340244][ T311] usb 2-1: No valid video chain found. [ 23.439629][ T365] loop0: detected capacity change from 0 to 256 [ 23.452811][ T365] FAT-fs (loop0): bogus number of FAT sectors [ 23.462009][ T365] FAT-fs (loop0): Can't find a valid FAT filesystem [ 23.638274][ T24] usb 2-1: USB disconnect, device number 2 [ 23.699286][ T6] ryos 0003:1E7D:31CE.0001: unknown main item tag 0x0 [ 23.708645][ T6] ryos 0003:1E7D:31CE.0001: unbalanced delimiter at end of report description [ 23.720379][ T6] ryos 0003:1E7D:31CE.0001: parse failed [ 23.725932][ T6] ryos: probe of 0003:1E7D:31CE.0001 failed with error -22 [ 23.800741][ T383] loop0: detected capacity change from 0 to 256 [ 23.807191][ T383] exfat: Deprecated parameter 'namecase' [ 23.817782][ T383] exfat: Deprecated parameter 'utf8' [ 23.825307][ T383] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 23.901088][ T6] usb 3-1: USB disconnect, device number 2 [ 23.940737][ T354] syz.3.14 (354) used greatest stack depth: 19112 bytes left [ 23.945089][ T391] loop0: detected capacity change from 0 to 512 [ 23.970135][ T391] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 23.971012][ T393] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 23.983525][ T391] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 24.092631][ T391] EXT4-fs (loop0): 1 truncate cleaned up [ 24.108329][ T398] loop3: detected capacity change from 0 to 512 [ 24.118201][ T391] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 24.162733][ T290] EXT4-fs (loop0): unmounting filesystem. [ 24.185168][ T398] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 24.251832][ T398] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.31: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 24.318903][ T408] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz.3.31: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 24.346984][ T399] loop1: detected capacity change from 0 to 40427 [ 24.356205][ T408] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz.3.31: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 24.358457][ T407] device pim6reg1 entered promiscuous mode [ 24.381365][ T399] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 24.398289][ T399] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 24.398957][ T408] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz.3.31: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 24.428323][ T408] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz.3.31: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 24.429783][ T399] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 24.460029][ T408] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz.3.31: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 24.485814][ T399] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 24.493828][ T399] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 24.506227][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 24.506243][ T28] audit: type=1400 audit(24.486:160): avc: denied { create } for pid=414 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.544520][ T408] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz.3.31: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 24.572420][ T408] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 18: comm syz.3.31: lblock 23 mapped to illegal pblock 18 (length 1) [ 24.586851][ T408] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 19: comm syz.3.31: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 24.609884][ T419] loop0: detected capacity change from 0 to 1024 [ 24.610553][ T399] syz.1.32: attempt to access beyond end of device [ 24.610553][ T399] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 24.629800][ T408] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 20: comm syz.3.31: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 24.658126][ T399] syz.1.32: attempt to access beyond end of device [ 24.658126][ T399] loop1: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 24.675339][ T424] loop2: detected capacity change from 0 to 256 [ 24.675966][ T399] syz.1.32: attempt to access beyond end of device [ 24.675966][ T399] loop1: rw=2049, sector=53264, nr_sectors = 8 limit=40427 [ 24.688488][ T424] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 24.708976][ T419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 24.735257][ T28] audit: type=1400 audit(24.716:161): avc: denied { write } for pid=418 comm="syz.0.37" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.756400][ T28] audit: type=1400 audit(24.736:162): avc: denied { open } for pid=418 comm="syz.0.37" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.774171][ T424] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 24.774171][ T424] [ 24.777928][ T28] audit: type=1400 audit(24.736:163): avc: denied { read } for pid=418 comm="syz.0.37" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.808057][ T424] exFAT-fs (loop2): Filesystem has been set read-only [ 24.810662][ T28] audit: type=1400 audit(24.736:164): avc: denied { map } for pid=418 comm="syz.0.37" path="/15/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.817709][ T289] syz-executor: attempt to access beyond end of device [ 24.817709][ T289] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 24.838273][ T28] audit: type=1400 audit(24.736:165): avc: denied { execute } for pid=418 comm="syz.0.37" path="/15/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.838303][ T28] audit: type=1400 audit(24.756:166): avc: denied { append } for pid=423 comm="syz.2.40" path="/3/file2/pids.current" dev="loop2" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.878102][ T424] exFAT-fs (loop2): error, failed to bmap (inode : ffff88811dde1990 iblock : 0, err : -5) [ 24.908083][ T290] EXT4-fs (loop0): unmounting filesystem. [ 24.914233][ T428] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 24.914233][ T428] [ 24.926958][ T428] exFAT-fs (loop2): error, failed to bmap (inode : ffff88811dde3250 iblock : 0, err : -5) [ 24.958792][ T28] audit: type=1400 audit(24.946:167): avc: denied { mount } for pid=429 comm="syz.0.43" name="/" dev="ramfs" ino=15797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 25.020752][ T28] audit: type=1400 audit(24.986:168): avc: denied { name_bind } for pid=431 comm="syz.0.44" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 25.048048][ T311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.056058][ T28] audit: type=1400 audit(24.986:169): avc: denied { node_bind } for pid=431 comm="syz.0.44" saddr=::ffff:127.0.0.1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.082103][ T291] EXT4-fs (loop3): unmounting filesystem. [ 25.206296][ T448] syz.3.51[448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.206358][ T448] syz.3.51[448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.286783][ T458] loop3: detected capacity change from 0 to 256 [ 25.304146][ T458] exfat: Deprecated parameter 'utf8' [ 25.312262][ T458] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 25.358084][ T318] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.408079][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.408279][ T294] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.428161][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.439033][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.448544][ T311] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 25.457346][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.466134][ T311] usb 5-1: config 0 descriptor?? [ 25.628111][ T314] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.658052][ T294] usb 2-1: Using ep0 maxpacket: 32 [ 25.768119][ T318] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 25.778105][ T294] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 25.779263][ T318] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 25.789162][ T294] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.800546][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.811107][ T294] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.821014][ T318] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 25.830900][ T294] usb 2-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 25.839421][ T6] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 25.852292][ T294] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 25.860875][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.869929][ T294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.877519][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.894300][ T6] usb 3-1: config 0 descriptor?? [ 25.908208][ T435] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 25.938532][ T6] usb-storage 3-1:0.0: USB Mass Storage device detected [ 25.950109][ T311] hid-led 0003:27B8:01ED.0002: item fetching failed at offset 1/5 [ 25.958265][ T311] hid-led: probe of 0003:27B8:01ED.0002 failed with error -22 [ 25.998169][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.009115][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.018722][ T314] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 26.027632][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.036333][ T314] usb 4-1: config 0 descriptor?? [ 26.148105][ T318] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 26.149836][ T311] usb 3-1: USB disconnect, device number 3 [ 26.161559][ T6] usb 5-1: USB disconnect, device number 2 [ 26.171816][ T318] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input4 [ 26.186011][ T318] usb 1-1: USB disconnect, device number 2 [ 26.369018][ T294] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 26.375788][ T294] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 26.382587][ T294] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 26.389331][ T294] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 26.395953][ T294] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 26.403594][ T294] ntrig 0003:1B96:000A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 26.519036][ T314] uclogic 0003:28BD:0074.0004: interface is invalid, ignoring [ 26.630385][ T294] usb 2-1: USB disconnect, device number 3 [ 26.721716][ T311] usb 4-1: USB disconnect, device number 2 [ 26.856795][ T476] input: syz0 as /devices/virtual/input/input5 [ 26.958073][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 26.968165][ T314] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.208164][ T314] usb 3-1: Using ep0 maxpacket: 16 [ 27.328407][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.328425][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.339365][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.339405][ T6] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 27.339427][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.340514][ T6] usb 5-1: config 0 descriptor?? [ 27.361105][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.391432][ T314] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.404303][ T314] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 27.414373][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.423039][ T314] usb 3-1: config 0 descriptor?? [ 27.518065][ T313] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.601825][ T494] loop1: detected capacity change from 0 to 2048 [ 27.619613][ T494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.665722][ T289] EXT4-fs (loop1): unmounting filesystem. [ 27.686289][ T498] loop1: detected capacity change from 0 to 2048 [ 27.709522][ T498] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.758123][ T313] usb 1-1: Using ep0 maxpacket: 16 [ 27.758221][ T498] support for cryptoloop has been removed. Use dm-crypt instead. [ 27.830752][ T289] EXT4-fs (loop1): unmounting filesystem. [ 27.839014][ T470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.847490][ T470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.878214][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.896234][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.899960][ T314] wacom 0003:056A:0022.0005: unbalanced collection at end of report description [ 27.905999][ T313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.927573][ T313] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 27.928489][ T314] wacom 0003:056A:0022.0005: parse failed [ 27.937557][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.953286][ T313] usb 1-1: config 0 descriptor?? [ 27.968277][ T314] wacom: probe of 0003:056A:0022.0005 failed with error -22 [ 28.018703][ T502] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.025548][ T502] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.032885][ T502] device bridge_slave_0 entered promiscuous mode [ 28.041536][ T502] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.049415][ T502] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.056726][ T502] device bridge_slave_1 entered promiscuous mode [ 28.064305][ T6] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 28.071198][ T6] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 28.077844][ T6] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 28.084872][ T6] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 28.091524][ T6] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 28.098198][ T6] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 28.104913][ T6] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 28.111559][ T6] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 28.118148][ T6] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 28.124734][ T6] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 28.131554][ T6] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 28.138247][ T6] sony 0003:054C:024B.0006: unexpected long global item [ 28.145168][ T6] sony 0003:054C:024B.0006: parse failed [ 28.150718][ T6] sony: probe of 0003:054C:024B.0006 failed with error -22 [ 28.158271][ T314] usb 3-1: USB disconnect, device number 4 [ 28.226905][ T502] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.233806][ T502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.241027][ T502] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.247862][ T502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.272083][ T6] usb 5-1: USB disconnect, device number 3 [ 28.279650][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.287461][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.295255][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.313263][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.321913][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.328793][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.336323][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.345012][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.351894][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.371700][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.379712][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.396937][ T502] device veth0_vlan entered promiscuous mode [ 28.404199][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.408379][ T509] loop3: detected capacity change from 0 to 40427 [ 28.413956][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.426359][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.433822][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.442172][ T509] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 28.458296][ T509] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 28.458502][ T502] device veth1_macvtap entered promiscuous mode [ 28.467727][ T313] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0007/input/input6 [ 28.475437][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.492591][ T10] device bridge_slave_1 left promiscuous mode [ 28.492591][ T509] F2FS-fs (loop3): Found nat_bits in checkpoint [ 28.504933][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.512517][ T10] device bridge_slave_0 left promiscuous mode [ 28.518661][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.526843][ T10] device veth1_macvtap left promiscuous mode [ 28.532793][ T10] device veth0_vlan left promiscuous mode [ 28.540986][ T509] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 28.548292][ T509] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 28.549399][ T313] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 28.589406][ T509] syz.3.75: attempt to access beyond end of device [ 28.589406][ T509] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 28.658601][ T313] usb 1-1: USB disconnect, device number 3 [ 28.674788][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.699263][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.981862][ T550] loop3: detected capacity change from 0 to 512 [ 28.988224][ T550] ======================================================= [ 28.988224][ T550] WARNING: The mand mount option has been deprecated and [ 28.988224][ T550] and is ignored by this kernel. Remove the mand [ 28.988224][ T550] option from the mount to silence this warning. [ 28.988224][ T550] ======================================================= [ 29.025725][ T550] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz.3.90: iget: bogus i_mode (0) [ 29.037131][ T550] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.90: couldn't read orphan inode 17 (err -117) [ 29.048945][ T550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 29.061169][ T550] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.90: bg 0: block 7: invalid block bitmap [ 29.078973][ T291] EXT4-fs (loop3): unmounting filesystem. [ 29.088159][ T301] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.104348][ T554] loop3: detected capacity change from 0 to 2048 [ 29.119377][ T554] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 29.131581][ T554] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.146256][ T554] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 29.158544][ T554] EXT4-fs (loop3): This should not happen!! Data will be lost [ 29.158544][ T554] [ 29.168358][ T313] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 29.168682][ T554] EXT4-fs (loop3): Total free blocks count 0 [ 29.181609][ T554] EXT4-fs (loop3): Free/Dirty block details [ 29.192909][ T554] EXT4-fs (loop3): free_blocks=2415919104 [ 29.198592][ T554] EXT4-fs (loop3): dirty_blocks=48 [ 29.203614][ T554] EXT4-fs (loop3): Block reservation details [ 29.209420][ T554] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 29.215630][ T558] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 29.328119][ T301] usb 2-1: Using ep0 maxpacket: 32 [ 29.428099][ T313] usb 5-1: Using ep0 maxpacket: 16 [ 29.448164][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.459022][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.468819][ T301] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 29.477671][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.486471][ T301] usb 2-1: config 0 descriptor?? [ 29.518055][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.528784][ T301] hub 2-1:0.0: USB hub found [ 29.548159][ T313] usb 5-1: config 0 has no interfaces? [ 29.709663][ T581] loop2: detected capacity change from 0 to 256 [ 29.719124][ T581] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 29.738216][ T313] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 29.747394][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.755236][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 29.755260][ T28] audit: type=1400 audit(29.749:211): avc: denied { execute } for pid=580 comm="syz.2.101" path="/12/file0/blkio.bfq.io_service_time" dev="loop2" ino=1048618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.785459][ T313] usb 5-1: Product: syz [ 29.789481][ T313] usb 5-1: Manufacturer: syz [ 29.793971][ T313] usb 5-1: SerialNumber: syz [ 29.803839][ T313] r8152-cfgselector 5-1: config 0 descriptor?? [ 29.828093][ T301] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 29.878132][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.888957][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.898712][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 29.907608][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.920502][ T24] usb 1-1: config 0 descriptor?? [ 29.948087][ T301] usbhid 2-1:0.0: can't add hid device: -71 [ 29.953960][ T301] usbhid: probe of 2-1:0.0 failed with error -71 [ 29.990095][ T301] usb 2-1: USB disconnect, device number 4 [ 30.006209][ T28] audit: type=1400 audit(29.999:212): avc: denied { setopt } for pid=590 comm="syz.2.106" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.025559][ T28] audit: type=1400 audit(29.999:213): avc: denied { read } for pid=590 comm="syz.2.106" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.080090][ T28] audit: type=1400 audit(30.079:214): avc: denied { map } for pid=594 comm="syz.2.108" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.108901][ T28] audit: type=1400 audit(30.079:215): avc: denied { execute } for pid=594 comm="syz.2.108" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.138709][ T324] usb 5-1: config 0 descriptor?? [ 30.357826][ T596] loop4: detected capacity change from 0 to 1024 [ 30.368649][ T564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.371577][ T28] audit: type=1400 audit(30.369:216): avc: denied { setattr } for pid=605 comm="syz.3.112" name="file0" dev="incremental-fs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.376914][ T564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.418536][ T596] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 30.428648][ T596] EXT4-fs (loop4): orphan cleanup on readonly fs [ 30.451364][ T596] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.88: Invalid inode table block 0 in block_group 0 [ 30.479387][ T596] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 30.488885][ T596] EXT4-fs error (device loop4): ext4_quota_write:7159: inode #3: comm syz.4.88: mark_inode_dirty error [ 30.500340][ T596] Quota error (device loop4): write_blk: dquota write failed [ 30.512728][ T596] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 30.513285][ T614] loop3: detected capacity change from 0 to 256 [ 30.523194][ T596] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.88: Failed to acquire dquot type 0 [ 30.529062][ T614] exfat: Deprecated parameter 'namecase' [ 30.545101][ T614] exfat: Deprecated parameter 'utf8' [ 30.550408][ T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.552016][ T596] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.88: Invalid inode table block 0 in block_group 0 [ 30.560762][ T614] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 30.570787][ T596] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 30.595509][ T596] EXT4-fs error (device loop4): ext4_ext_truncate:4430: inode #15: comm syz.4.88: mark_inode_dirty error [ 30.606821][ T596] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.88: Invalid inode table block 0 in block_group 0 [ 30.619720][ T596] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 30.628979][ T28] audit: type=1400 audit(30.619:217): avc: denied { read write } for pid=616 comm="syz.3.117" name="uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 30.629942][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.658530][ T301] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.660619][ T596] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 30.666690][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.674750][ T28] audit: type=1400 audit(30.619:218): avc: denied { open } for pid=616 comm="syz.3.117" path="/dev/uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 30.681651][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.705662][ T24] sony 0003:054C:024B.0009: unknown main item tag 0x0 [ 30.711449][ T596] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.88: Invalid inode table block 0 in block_group 0 [ 30.717439][ T24] sony 0003:054C:024B.0009: unknown main item tag 0x0 [ 30.729634][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.736436][ T24] sony 0003:054C:024B.0009: unknown main item tag 0x0 [ 30.743861][ T596] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 30.750114][ T24] sony 0003:054C:024B.0009: unknown main item tag 0x0 [ 30.759482][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.765827][ T24] sony 0003:054C:024B.0009: unknown main item tag 0x0 [ 30.773492][ T596] EXT4-fs error (device loop4): ext4_truncate:4302: inode #15: comm syz.4.88: mark_inode_dirty error [ 30.779897][ T24] sony 0003:054C:024B.0009: unknown main item tag 0x0 [ 30.790889][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.797106][ T24] sony 0003:054C:024B.0009: unknown main item tag 0x0 [ 30.804635][ T596] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 30.811029][ T24] sony 0003:054C:024B.0009: unknown main item tag 0x0 [ 30.819803][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.826240][ T24] sony 0003:054C:024B.0009: unknown main item tag 0x0 [ 30.833696][ T596] EXT4-fs (loop4): 1 truncate cleaned up [ 30.840118][ T24] sony 0003:054C:024B.0009: unknown main item tag 0x0 [ 30.845627][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.852279][ T24] sony 0003:054C:024B.0009: unknown main item tag 0x0 [ 30.859497][ T596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.865932][ T24] sony 0003:054C:024B.0009: unexpected long global item [ 30.881326][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.881674][ T24] sony 0003:054C:024B.0009: parse failed [ 30.894104][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.894616][ T24] sony: probe of 0003:054C:024B.0009 failed with error -22 [ 30.908074][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.912906][ T24] usb 1-1: USB disconnect, device number 4 [ 30.915545][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.928334][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.928928][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.946550][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.948632][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.954301][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.971283][ T311] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 30.980214][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.988124][ T324] usb 5-1: can't set config #0, error -71 [ 30.988521][ T510] usb 5-1: USB disconnect, device number 4 [ 30.994171][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.001630][ T311] usb 3-1: config 0 descriptor?? [ 31.017008][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.037288][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.047419][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.057518][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.065046][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.075980][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.083432][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.093396][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.100808][ T301] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 31.109977][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.117191][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.124831][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.132873][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.141037][ T301] usb 2-1: config 0 descriptor?? [ 31.145889][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.153365][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.160823][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.168314][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.175525][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.183907][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.191295][ T318] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 31.199342][ T318] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 31.485743][ T288] EXT4-fs (loop4): unmounting filesystem. [ 31.492895][ T318] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.605301][ T631] input: syz0 as /devices/virtual/input/input7 [ 31.625344][ T301] uclogic 0003:5543:0042.000B: No inputs registered, leaving [ 31.646172][ T301] uclogic 0003:5543:0042.000B: hidraw1: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 31.822576][ T6] usb 2-1: USB disconnect, device number 5 [ 31.878117][ T318] usb 4-1: config 0 has no interfaces? [ 31.885452][ T318] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 31.904859][ T318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.923693][ T318] usb 4-1: config 0 descriptor?? [ 31.929652][ T633] loop0: detected capacity change from 0 to 40427 [ 31.937395][ T633] F2FS-fs (loop0): invalid crc value [ 31.952623][ T633] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.958146][ T311] usb 3-1: string descriptor 0 read error: -71 [ 31.978116][ T311] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 32.000232][ T311] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 32.006562][ T633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.038506][ T311] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 32.058279][ T311] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 32.076630][ T311] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 32.086089][ T633] syz.0.123: attempt to access beyond end of device [ 32.086089][ T633] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 32.093820][ T311] usb 3-1: USB disconnect, device number 5 [ 32.163374][ T290] syz-executor: attempt to access beyond end of device [ 32.163374][ T290] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 32.171271][ T6] usb 4-1: USB disconnect, device number 3 [ 32.498070][ T318] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 32.633767][ T674] syz.2.140 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.668065][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.768414][ T688] netlink: 'syz.2.147': attribute type 1 has an invalid length. [ 32.862561][ T698] loop2: detected capacity change from 0 to 1024 [ 32.868910][ T301] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.876799][ T698] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.883557][ T318] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 32.894789][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.905968][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.915837][ T318] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 32.928934][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 32.934097][ T318] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 32.943265][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.952237][ T318] usb 5-1: config 0 descriptor?? [ 32.958714][ T698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.013482][ T292] EXT4-fs (loop2): unmounting filesystem. [ 33.046871][ T710] serio: Serial port ptm0 [ 33.051696][ T6] usb 2-1: config 0 has no interfaces? [ 33.228138][ T301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.238164][ T6] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 33.247010][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.255266][ T301] usb 1-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 33.264475][ T6] usb 2-1: Product: syz [ 33.268499][ T6] usb 2-1: Manufacturer: syz [ 33.272879][ T6] usb 2-1: SerialNumber: syz [ 33.277842][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.286374][ T301] usb 1-1: config 0 descriptor?? [ 33.291474][ T6] r8152-cfgselector 2-1: config 0 descriptor?? [ 33.328444][ T510] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.328681][ T301] usb-storage 1-1:0.0: USB Mass Storage device detected [ 33.438877][ T318] thrustmaster 0003:044F:B653.000C: unknown main item tag 0x2 [ 33.446289][ T318] thrustmaster 0003:044F:B653.000C: item fetching failed at offset 5/7 [ 33.454606][ T318] thrustmaster 0003:044F:B653.000C: parse failed [ 33.460848][ T318] thrustmaster: probe of 0003:044F:B653.000C failed with error -22 [ 33.534936][ T311] usb 1-1: USB disconnect, device number 5 [ 33.588482][ T368] usb 2-1: config 0 descriptor?? [ 33.642430][ T314] usb 5-1: USB disconnect, device number 5 [ 33.688132][ T510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.699021][ T510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.709044][ T510] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 33.717916][ T510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.726640][ T510] usb 3-1: config 0 descriptor?? [ 33.801641][ T726] loop1: detected capacity change from 0 to 1024 [ 33.809779][ T726] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 33.818211][ T726] EXT4-fs (loop1): orphan cleanup on readonly fs [ 33.824874][ T726] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.134: Invalid inode table block 0 in block_group 0 [ 33.837471][ T726] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 33.846861][ T726] EXT4-fs error (device loop1): ext4_quota_write:7159: inode #3: comm syz.1.134: mark_inode_dirty error [ 33.858458][ T726] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.134: Failed to acquire dquot type 0 [ 33.869623][ T726] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.134: Invalid inode table block 0 in block_group 0 [ 33.882281][ T726] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 33.892465][ T726] EXT4-fs error (device loop1): ext4_ext_truncate:4430: inode #15: comm syz.1.134: mark_inode_dirty error [ 33.903898][ T726] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.134: Invalid inode table block 0 in block_group 0 [ 33.916497][ T726] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 33.926002][ T726] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 33.935143][ T726] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.134: Invalid inode table block 0 in block_group 0 [ 33.947805][ T726] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 33.957363][ T726] EXT4-fs error (device loop1): ext4_truncate:4302: inode #15: comm syz.1.134: mark_inode_dirty error [ 33.968794][ T726] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 33.977643][ T726] EXT4-fs (loop1): 1 truncate cleaned up [ 33.983434][ T726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.023611][ T314] usb 2-1: USB disconnect, device number 6 [ 34.038384][ T368] usb 2-1: can't set config #0, error -71 [ 34.149116][ T737] loop0: detected capacity change from 0 to 256 [ 34.167037][ T737] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2c83664b, utbl_chksum : 0xe619d30d) [ 34.288041][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.200779][ T502] EXT4-fs (loop1): unmounting filesystem. [ 35.221960][ T510] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 35.241135][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 35.241150][ T28] audit: type=1400 audit(35.239:235): avc: denied { mounton } for pid=736 comm="syz.0.164" path="/32/file2/bus" dev="loop0" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.251846][ T744] loop1: detected capacity change from 0 to 256 [ 35.285421][ T744] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 35.298151][ T737] loop0: detected capacity change from 256 to 0 [ 35.315197][ T28] audit: type=1400 audit(35.309:236): avc: denied { rename } for pid=736 comm="syz.0.164" name="file2" dev="loop0" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.318102][ T368] loop: Write error at byte offset 9223372036854857727, length 512. [ 35.349955][ C0] I/O error, dev loop0, sector 160 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 35.359471][ C0] Buffer I/O error on dev loop0, logical block 160, lost sync page write [ 35.380742][ C0] I/O error, dev loop0, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.396984][ C1] I/O error, dev loop0, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.407054][ C1] I/O error, dev loop0, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.410168][ T746] loop4: detected capacity change from 0 to 2048 [ 35.416905][ C1] I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.432463][ T290] exFAT-fs (loop0): error, failed to access to FAT (entry 0x00000005, err:-5) [ 35.441242][ T290] exFAT-fs (loop0): Filesystem has been set read-only [ 35.466118][ T746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 35.485157][ T746] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.500482][ T746] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 35.500527][ T324] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 35.512660][ T746] EXT4-fs (loop4): This should not happen!! Data will be lost [ 35.512660][ T746] [ 35.512675][ T746] EXT4-fs (loop4): Total free blocks count 0 [ 35.512761][ T746] EXT4-fs (loop4): Free/Dirty block details [ 35.512775][ T746] EXT4-fs (loop4): free_blocks=2415919104 [ 35.512788][ T746] EXT4-fs (loop4): dirty_blocks=48 [ 35.556824][ T746] EXT4-fs (loop4): Block reservation details [ 35.562764][ T746] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 35.648131][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.653954][ T510] usb 3-1: USB disconnect, device number 6 [ 35.799682][ T768] Illegal XDP return value 1421961035 on prog (id 95) dev syz_tun, expect packet loss! [ 35.816328][ T761] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.834576][ T761] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.842232][ T761] device bridge_slave_0 entered promiscuous mode [ 35.862003][ T761] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.881916][ T761] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.897840][ T761] device bridge_slave_1 entered promiscuous mode [ 35.946731][ T28] audit: type=1400 audit(35.939:237): avc: denied { read } for pid=771 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.058208][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.074342][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.094172][ T6] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 36.111446][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.129116][ T6] usb 2-1: config 0 descriptor?? [ 36.201166][ T779] loop3: detected capacity change from 0 to 256 [ 36.214448][ T781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 36.244528][ T779] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 36.412139][ T785] loop2: detected capacity change from 0 to 2048 [ 36.437270][ T790] loop3: detected capacity change from 0 to 512 [ 36.473183][ T785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.482024][ T790] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.509099][ T790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.549442][ T10] device bridge_slave_1 left promiscuous mode [ 36.555411][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.565418][ T785] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.599629][ T790] EXT4-fs (loop3): 1 truncate cleaned up [ 36.605401][ T10] device bridge_slave_0 left promiscuous mode [ 36.620336][ T6] hid-led 0003:27B8:01ED.000E: item fetching failed at offset 1/5 [ 36.645597][ T790] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.648463][ T785] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 36.654803][ T6] hid-led: probe of 0003:27B8:01ED.000E failed with error -22 [ 36.688450][ T28] audit: type=1400 audit(36.689:238): avc: denied { setattr } for pid=789 comm="syz.3.186" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.710041][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.729732][ T785] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.729732][ T785] [ 36.739536][ T785] EXT4-fs (loop2): Total free blocks count 0 [ 36.745472][ T785] EXT4-fs (loop2): Free/Dirty block details [ 36.751787][ T785] EXT4-fs (loop2): free_blocks=2415919104 [ 36.757594][ T10] device veth1_macvtap left promiscuous mode [ 36.757691][ T785] EXT4-fs (loop2): dirty_blocks=48 [ 36.764907][ T291] EXT4-fs (loop3): unmounting filesystem. [ 36.774336][ T785] EXT4-fs (loop2): Block reservation details [ 36.780484][ T10] device veth0_vlan left promiscuous mode [ 36.786123][ T785] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 36.808487][ T795] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 36.835150][ T24] usb 2-1: USB disconnect, device number 7 [ 37.068457][ T806] kvm: pic: non byte write [ 37.072923][ T806] kvm: pic: non byte write [ 37.077276][ T806] kvm: pic: non byte write [ 37.096095][ T806] kvm: pic: non byte write [ 37.105768][ T806] kvm: pic: non byte write [ 37.116845][ T806] kvm: pic: non byte write [ 37.116859][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.117140][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.128196][ T806] kvm: pic: non byte write [ 37.129822][ T810] TCP: tcp_parse_options: Illegal window scaling value 247 > 14 received [ 37.148203][ T806] kvm: pic: non byte write [ 37.153057][ T806] kvm: pic: non byte write [ 37.155623][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.157476][ T806] kvm: pic: non byte write [ 37.166063][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.180944][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.187834][ T510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.213174][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.226192][ T28] audit: type=1400 audit(37.219:239): avc: denied { watch } for pid=811 comm="syz.2.194" path="/proc/94/net" dev="proc" ino=17246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 37.227330][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.256355][ T510] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.263260][ T510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.300143][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.307820][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.318909][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.326768][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.352847][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.371463][ T761] device veth0_vlan entered promiscuous mode [ 37.381712][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.399143][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.412088][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.440184][ T761] device veth1_macvtap entered promiscuous mode [ 37.454059][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.463448][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.471915][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.489205][ T828] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=828 comm=syz.2.201 [ 37.505833][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.515666][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.538377][ T831] loop1: detected capacity change from 0 to 2048 [ 37.573670][ T28] audit: type=1400 audit(37.569:240): avc: denied { getopt } for pid=832 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.620302][ T831] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.641633][ T831] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.656652][ T831] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 37.668902][ T28] audit: type=1400 audit(37.589:241): avc: denied { sqpoll } for pid=832 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.669176][ T831] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.669176][ T831] [ 37.698718][ T831] EXT4-fs (loop1): Total free blocks count 0 [ 37.708562][ T831] EXT4-fs (loop1): Free/Dirty block details [ 37.716513][ T831] EXT4-fs (loop1): free_blocks=2415919104 [ 37.754128][ T831] EXT4-fs (loop1): dirty_blocks=48 [ 37.781145][ T831] EXT4-fs (loop1): Block reservation details [ 37.793767][ T831] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 37.800565][ T845] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 37.842202][ T853] loop4: detected capacity change from 0 to 512 [ 37.863408][ T853] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.875300][ T853] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.886593][ T853] EXT4-fs (loop4): orphan cleanup on readonly fs [ 37.898590][ T853] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3845: comm syz.4.211: Allocating blocks 41-42 which overlap fs metadata [ 37.912280][ T853] EXT4-fs (loop4): Remounting filesystem read-only [ 37.918959][ T853] Quota error (device loop4): write_blk: dquota write failed [ 37.926196][ T853] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 37.935910][ T853] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.211: Failed to acquire dquot type 0 [ 37.947526][ T853] EXT4-fs (loop4): 1 truncate cleaned up [ 37.953209][ T853] EXT4-fs (loop4): pa ffff88811dec99d8: logic 1, phys. 41, len 23 [ 37.960890][ T853] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 23 [ 37.971320][ T853] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.982012][ T28] audit: type=1400 audit(37.979:242): avc: denied { mounton } for pid=852 comm="syz.4.211" path="/38/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.005358][ T288] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 38.023926][ T288] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 38.048249][ T318] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.099794][ T288] EXT4-fs (loop4): unmounting filesystem. [ 38.128703][ T314] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.168192][ T510] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 38.226282][ T864] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.233190][ T864] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.240661][ T864] device bridge_slave_0 entered promiscuous mode [ 38.251564][ T864] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.258557][ T864] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.265746][ T864] device bridge_slave_1 entered promiscuous mode [ 38.319528][ T864] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.326541][ T864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.333664][ T864] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.333684][ T864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.365423][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.368121][ T314] usb 1-1: Using ep0 maxpacket: 32 [ 38.377857][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.385259][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.408174][ T510] usb 2-1: Using ep0 maxpacket: 16 [ 38.414611][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.417687][ T871] loop3: detected capacity change from 0 to 512 [ 38.422601][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.429518][ T871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.442856][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.452589][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.460614][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.461160][ T871] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.470335][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.482869][ T871] EXT4-fs (loop3): 1 orphan inode deleted [ 38.488077][ T318] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 38.493907][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.502751][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.513275][ T871] EXT4-fs (loop3): 1 truncate cleaned up [ 38.521507][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.526371][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.533283][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.533864][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.543163][ T871] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.551100][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.557726][ T510] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 38.566843][ T318] usb 3-1: config 0 descriptor?? [ 38.573357][ T314] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 38.591596][ T864] device veth0_vlan entered promiscuous mode [ 38.601326][ T510] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 38.621057][ T510] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.622179][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.629916][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.649142][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.651847][ T314] usb 1-1: config 0 descriptor?? [ 38.662735][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.663018][ T291] EXT4-fs (loop3): unmounting filesystem. [ 38.670792][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.694184][ T875] serio: Serial port ptm0 [ 38.699032][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.708507][ T864] device veth1_macvtap entered promiscuous mode [ 38.722684][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.730940][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.788146][ T510] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.797437][ T510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.805703][ T510] usb 2-1: Product: syz [ 38.809741][ T510] usb 2-1: Manufacturer: syz [ 38.814266][ T510] usb 2-1: SerialNumber: syz [ 38.888662][ T10] device bridge_slave_1 left promiscuous mode [ 38.894833][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.902339][ T10] device bridge_slave_0 left promiscuous mode [ 38.908384][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.916231][ T10] device veth1_macvtap left promiscuous mode [ 38.922352][ T10] device veth0_vlan left promiscuous mode [ 39.059453][ T318] hid-led 0003:27B8:01ED.000F: item fetching failed at offset 1/5 [ 39.067252][ T318] hid-led: probe of 0003:27B8:01ED.000F failed with error -22 [ 39.139285][ T314] hkems 0003:2006:0118.0010: unbalanced delimiter at end of report description [ 39.148257][ T314] hkems 0003:2006:0118.0010: parse failed [ 39.153803][ T314] hkems: probe of 0003:2006:0118.0010 failed with error -22 [ 39.278500][ T862] syz.1.215 uses obsolete (PF_INET,SOCK_PACKET) [ 39.288525][ T318] usb 3-1: USB disconnect, device number 7 [ 39.342240][ T314] usb 1-1: USB disconnect, device number 6 [ 39.358185][ T510] usb 2-1: 0:2 : does not exist [ 39.364466][ T510] usb 2-1: USB disconnect, device number 8 [ 39.569033][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.874892][ T890] loop0: detected capacity change from 0 to 2048 [ 39.919888][ T890] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.931366][ T890] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.946352][ T890] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 39.959023][ T890] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.959023][ T890] [ 39.968695][ T890] EXT4-fs (loop0): Total free blocks count 0 [ 39.974571][ T890] EXT4-fs (loop0): Free/Dirty block details [ 39.980466][ T890] EXT4-fs (loop0): free_blocks=2415919104 [ 39.988094][ T890] EXT4-fs (loop0): dirty_blocks=48 [ 39.993659][ T890] EXT4-fs (loop0): Block reservation details [ 40.000754][ T890] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 40.007185][ T905] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 40.065460][ T908] serio: Serial port ptm0 [ 40.138047][ T318] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.153599][ T913] loop0: detected capacity change from 0 to 256 [ 40.170815][ T899] loop1: detected capacity change from 0 to 40427 [ 40.179435][ T899] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 40.187063][ T899] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 40.200273][ T899] F2FS-fs (loop1): invalid crc value [ 40.206993][ T899] F2FS-fs (loop1): Found nat_bits in checkpoint [ 40.213298][ T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.266685][ T899] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 40.275437][ T899] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 40.378032][ T301] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 40.414504][ T923] loop1: detected capacity change from 0 to 128 [ 40.429969][ T923] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 40.458087][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 40.463972][ T920] loop0: detected capacity change from 0 to 40427 [ 40.474630][ T920] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 40.482664][ T920] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 40.493905][ T920] F2FS-fs (loop0): invalid crc value [ 40.499562][ T502] EXT4-fs (loop1): unmounting filesystem. [ 40.500396][ T920] F2FS-fs (loop0): Found nat_bits in checkpoint [ 40.518158][ T318] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 40.537560][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.551184][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.561142][ T318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 40.567091][ T920] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 40.580933][ T920] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 40.588270][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.598997][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.610424][ T920] syz.0.236: attempt to access beyond end of device [ 40.610424][ T920] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 40.629947][ T761] syz-executor: attempt to access beyond end of device [ 40.629947][ T761] loop0: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 40.648135][ T318] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 40.657818][ T318] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 40.666375][ T318] usb 3-1: Manufacturer: syz [ 40.674712][ T318] usb 3-1: config 0 descriptor?? [ 40.728125][ T39] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 40.738183][ T39] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 40.751585][ T39] usb 4-1: Product: syz [ 40.755599][ T39] usb 4-1: Manufacturer: syz [ 40.766085][ T936] loop0: detected capacity change from 0 to 512 [ 40.769274][ T39] usb 4-1: config 0 descriptor?? [ 40.772847][ T936] EXT4-fs: Ignoring removed i_version option [ 40.782881][ T936] EXT4-fs: Ignoring removed nobh option [ 40.788365][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.789328][ T936] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.799420][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.809527][ T314] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.818490][ T301] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 40.831004][ T936] EXT4-fs (loop0): 1 truncate cleaned up [ 40.834615][ T301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.840359][ T936] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.848620][ T301] usb 5-1: config 0 descriptor?? [ 40.864806][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 40.864819][ T28] audit: type=1400 audit(40.859:251): avc: denied { map } for pid=935 comm="syz.0.240" path="/9/bus/bus" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.881711][ T761] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /9/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 40.914732][ T761] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 40.934982][ T761] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /9/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 40.956660][ T761] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 40.976637][ T761] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /9/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 40.998185][ T761] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 41.018089][ T761] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /9/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 41.039547][ T761] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 41.059522][ T761] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /9/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 41.080553][ T314] usb 2-1: Using ep0 maxpacket: 16 [ 41.081116][ T761] EXT4-fs error (device loop0): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 41.169146][ T318] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 41.176173][ T318] appleir 0003:05AC:8243.0011: No inputs registered, leaving [ 41.184894][ T318] appleir 0003:05AC:8243.0011: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 41.200330][ T314] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 41.203571][ T761] EXT4-fs (loop0): unmounting filesystem. [ 41.228099][ T314] usb 2-1: config 0 has no interface number 0 [ 41.234040][ T314] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 41.249590][ T314] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 41.260376][ T39] kovaplus 0003:1E7D:2D50.0012: item fetching failed at offset 5/7 [ 41.268355][ T39] kovaplus 0003:1E7D:2D50.0012: parse failed [ 41.274170][ T39] kovaplus: probe of 0003:1E7D:2D50.0012 failed with error -22 [ 41.369467][ T301] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 41.377099][ T940] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.384096][ T940] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.391511][ T940] device bridge_slave_0 entered promiscuous mode [ 41.398162][ T314] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 41.407215][ T314] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 41.415170][ T314] usb 2-1: Product: syz [ 41.419182][ T314] usb 2-1: SerialNumber: syz [ 41.423667][ T940] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.427932][ T314] usb 2-1: config 0 descriptor?? [ 41.430946][ T940] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.442506][ T940] device bridge_slave_1 entered promiscuous mode [ 41.465033][ T318] usb 4-1: USB disconnect, device number 5 [ 41.506410][ T940] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.513303][ T940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.520392][ T940] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.527152][ T940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.551760][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.559951][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.567019][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.579423][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.587463][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.594335][ T510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.609184][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.617211][ T510] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.624064][ T510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.631269][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.639151][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.655962][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.668307][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.676313][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.683876][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.692222][ T940] device veth0_vlan entered promiscuous mode [ 41.705120][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.712124][ T314] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 41.720829][ T314] usb 2-1: USB disconnect, device number 9 [ 41.726916][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.728227][ T940] device veth1_macvtap entered promiscuous mode [ 41.753901][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.763913][ T10] device bridge_slave_1 left promiscuous mode [ 41.769979][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.777487][ T10] device bridge_slave_0 left promiscuous mode [ 41.783650][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.793438][ T10] device veth1_macvtap left promiscuous mode [ 41.799446][ T10] device veth0_vlan left promiscuous mode [ 41.799812][ T301] hid-led: probe of 0003:0FC5:B080.0013 failed with error -71 [ 41.814334][ T301] usb 5-1: USB disconnect, device number 6 [ 41.894030][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.012801][ T951] input: syz1 as /devices/virtual/input/input9 [ 42.052328][ T953] loop3: detected capacity change from 0 to 512 [ 42.059699][ T953] EXT4-fs: dax option not supported [ 42.068439][ T953] loop3: detected capacity change from 0 to 256 [ 42.074778][ T953] exfat: Deprecated parameter 'debug' [ 42.080491][ T953] exfat: Unknown parameter 'dax' [ 42.431352][ T953] loop3: detected capacity change from 0 to 40427 [ 42.442235][ T953] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 42.460041][ T953] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 42.506297][ T953] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.576421][ T28] audit: type=1400 audit(42.569:252): avc: denied { watch watch_reads } for pid=979 comm="syz.1.257" path="/23" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 42.620566][ T953] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 42.627433][ T953] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 42.659218][ T947] loop0: detected capacity change from 0 to 131072 [ 42.677148][ T947] F2FS-fs (loop0): Test dummy encryption mode enabled [ 42.687418][ T947] F2FS-fs (loop0): invalid crc value [ 42.704435][ T28] audit: type=1400 audit(42.699:253): avc: denied { ioctl } for pid=987 comm="syz.1.260" path="socket:[19543]" dev="sockfs" ino=19543 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.729576][ T947] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.781991][ T947] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 42.794024][ T947] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 42.802733][ T28] audit: type=1400 audit(42.799:254): avc: denied { mounton } for pid=946 comm="syz.0.243" path="/0/file0/bus" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.824861][ T28] audit: type=1400 audit(42.799:255): avc: denied { write } for pid=946 comm="syz.0.243" name="bus" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.848119][ T6] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 42.903107][ T28] audit: type=1400 audit(42.799:256): avc: denied { add_name } for pid=946 comm="syz.0.243" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.951991][ T1001] loop1: detected capacity change from 0 to 512 [ 42.958118][ T28] audit: type=1400 audit(42.799:257): avc: denied { remove_name } for pid=946 comm="syz.0.243" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.975336][ T1001] EXT4-fs: Ignoring removed i_version option [ 42.986563][ T1001] EXT4-fs: Ignoring removed nobh option [ 42.992716][ T1001] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.004673][ T1001] EXT4-fs (loop1): 1 truncate cleaned up [ 43.012859][ T28] audit: type=1400 audit(42.799:258): avc: denied { rename } for pid=946 comm="syz.0.243" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.028718][ T1001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.055391][ T28] audit: type=1400 audit(42.799:259): avc: denied { reparent } for pid=946 comm="syz.0.243" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.077801][ T28] audit: type=1400 audit(42.799:260): avc: denied { rmdir } for pid=946 comm="syz.0.243" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.099889][ T502] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /29/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 43.121546][ T502] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 43.148259][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 43.169654][ T502] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /29/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 43.207938][ T502] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 43.268566][ T502] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /29/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 43.278077][ T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.304462][ T502] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 43.324356][ T510] usb 3-1: USB disconnect, device number 8 [ 43.338792][ T6] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 43.349313][ T502] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /29/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 43.351782][ T1014] loop0: detected capacity change from 0 to 2048 [ 43.371092][ T502] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 43.379073][ T6] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.399997][ T502] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /29/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 43.407323][ T6] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.438227][ T502] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 43.458459][ T6] usb 5-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 43.471473][ T6] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 43.480495][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.491192][ T1014] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.526847][ T1014] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.573969][ T940] EXT4-fs (loop0): unmounting filesystem. [ 43.623007][ T502] EXT4-fs (loop1): unmounting filesystem. [ 43.718167][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.738009][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.828253][ T311] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 43.845220][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.847926][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.859283][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.860266][ T510] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.878099][ T311] usb 4-1: SerialNumber: syz [ 43.889800][ T1025] device bridge_slave_0 entered promiscuous mode [ 43.899040][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.905930][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.915015][ T1025] device bridge_slave_1 entered promiscuous mode [ 43.970005][ T6] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0 [ 43.980092][ T6] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0 [ 43.993931][ T6] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0 [ 44.011340][ T6] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0 [ 44.025870][ T6] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0 [ 44.046764][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.053662][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.060769][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.067519][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.076131][ T6] ntrig 0003:1B96:000A.0014: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 44.115826][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.125193][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.128408][ T510] usb 1-1: Using ep0 maxpacket: 16 [ 44.137815][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.148726][ T368] device bridge_slave_1 left promiscuous mode [ 44.155095][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.169704][ T311] usb 4-1: 0:2 : does not exist [ 44.174608][ T368] device bridge_slave_0 left promiscuous mode [ 44.177635][ T311] usb 4-1: unit 32 not found! [ 44.186781][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.194999][ T311] usb 4-1: USB disconnect, device number 6 [ 44.213749][ T368] device veth1_macvtap left promiscuous mode [ 44.220782][ T368] device veth0_vlan left promiscuous mode [ 44.224417][ T1032] input: syz1 as /devices/virtual/input/input10 [ 44.249558][ T6] usb 5-1: USB disconnect, device number 7 [ 44.258248][ T510] usb 1-1: config 0 has no interfaces? [ 44.359261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.367199][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.374061][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.381373][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.389428][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.396284][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.403649][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.411515][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.419141][ T510] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 44.427905][ T510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.436505][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.458859][ T510] usb 1-1: Product: syz [ 44.462855][ T510] usb 1-1: Manufacturer: syz [ 44.463285][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.467282][ T510] usb 1-1: SerialNumber: syz [ 44.484168][ T510] r8152-cfgselector 1-1: config 0 descriptor?? [ 44.491451][ T1025] device veth0_vlan entered promiscuous mode [ 44.498765][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.506545][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.513873][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.525670][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.534817][ T1025] device veth1_macvtap entered promiscuous mode [ 44.547000][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.555430][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.638209][ T39] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 44.696102][ T311] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 44.704769][ T1056] loop3: detected capacity change from 0 to 128 [ 44.705304][ T311] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 44.712911][ T1056] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 44.718832][ T311] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 44.772117][ T291] EXT4-fs (loop3): unmounting filesystem. [ 44.799227][ T1063] loop1: detected capacity change from 0 to 128 [ 44.808900][ T10] usb 1-1: config 0 descriptor?? [ 44.998151][ T39] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 45.018243][ T39] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 45.038607][ T1059] loop0: detected capacity change from 0 to 1024 [ 45.058044][ T311] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.066768][ T1059] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 45.075708][ T1059] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.082699][ T1059] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.272: Invalid inode table block 0 in block_group 0 [ 45.095432][ T1059] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 45.104855][ T1059] EXT4-fs error (device loop0): ext4_quota_write:7159: inode #3: comm syz.0.272: mark_inode_dirty error [ 45.116046][ T1059] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.272: Failed to acquire dquot type 0 [ 45.127162][ T1059] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.272: Invalid inode table block 0 in block_group 0 [ 45.128127][ T510] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 45.139697][ T1059] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 45.156274][ T1059] EXT4-fs error (device loop0): ext4_ext_truncate:4430: inode #15: comm syz.0.272: mark_inode_dirty error [ 45.167663][ T1059] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.272: Invalid inode table block 0 in block_group 0 [ 45.180298][ T1059] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 45.189648][ T39] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 45.189909][ T1059] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 45.198802][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.207148][ T1059] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.272: Invalid inode table block 0 in block_group 0 [ 45.214822][ T39] usb 3-1: Product: syz [ 45.227541][ T1059] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 45.231104][ T39] usb 3-1: Manufacturer: syz [ 45.240756][ T1059] EXT4-fs error (device loop0): ext4_truncate:4302: inode #15: comm syz.0.272: mark_inode_dirty error [ 45.244730][ T39] usb 3-1: SerialNumber: syz [ 45.255730][ T1059] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 45.263610][ T39] usb 3-1: config 0 descriptor?? [ 45.268909][ T1059] EXT4-fs (loop0): 1 truncate cleaned up [ 45.278783][ T1059] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.290714][ T1040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 45.299582][ T1040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 45.308095][ T6] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 45.318214][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 45.327096][ T24] usb 1-1: USB disconnect, device number 7 [ 45.338500][ T10] usb 1-1: can't set config #0, error -71 [ 45.378048][ T510] usb 2-1: Using ep0 maxpacket: 16 [ 45.438150][ T311] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 45.458083][ T311] usb 4-1: config 0 has no interface number 0 [ 45.464002][ T311] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.475100][ T311] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.485268][ T311] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 45.494424][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.502446][ T510] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.514256][ T1040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 45.522174][ T311] usb 4-1: config 0 descriptor?? [ 45.527034][ T1040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 45.534415][ T510] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.544349][ T510] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.557742][ T510] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 45.567826][ T510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.576638][ T510] usb 2-1: config 0 descriptor?? [ 45.582506][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 45.708096][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.844091][ T940] EXT4-fs (loop0): unmounting filesystem. [ 45.875687][ T1071] loop0: detected capacity change from 0 to 1024 [ 45.882291][ T1071] EXT4-fs: Ignoring removed nobh option [ 45.887702][ T1071] EXT4-fs: Ignoring removed orlov option [ 45.894058][ T6] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 45.903086][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.911512][ T6] usb 5-1: Product: syz [ 45.915608][ T6] usb 5-1: Manufacturer: syz [ 45.920439][ T6] usb 5-1: SerialNumber: syz [ 45.935388][ T6] usb 5-1: config 0 descriptor?? [ 45.941957][ T1071] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.956912][ T1071] EXT4-fs error (device loop0): __ext4_remount:6412: comm syz.0.290: Abort forced by user [ 45.971092][ T1071] EXT4-fs (loop0): Remounting filesystem read-only [ 45.983727][ T1071] EXT4-fs (loop0): unmounting filesystem. [ 45.988110][ T39] dm9601: No valid MAC address in EEPROM, using a2:0c:02:e1:13:a9 [ 46.072703][ T510] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0017/input/input12 [ 46.149342][ T510] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 46.188188][ T6] usb 5-1: Found UVC 0.00 device syz (8086:0b03) [ 46.194958][ T6] usb 5-1: No valid video chain found. [ 46.218179][ T311] uclogic 0003:28BD:0094.0016: failed retrieving string descriptor #100: -71 [ 46.226923][ T311] uclogic 0003:28BD:0094.0016: failed retrieving pen parameters: -71 [ 46.235494][ T311] uclogic 0003:28BD:0094.0016: pen probing failed: -71 [ 46.242371][ T311] uclogic 0003:28BD:0094.0016: failed probing parameters: -71 [ 46.249871][ T311] uclogic: probe of 0003:28BD:0094.0016 failed with error -71 [ 46.268536][ T311] usb 4-1: USB disconnect, device number 7 [ 46.290794][ T24] usb 2-1: USB disconnect, device number 10 [ 46.391218][ T314] usb 5-1: USB disconnect, device number 8 [ 46.438055][ T510] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 46.769556][ T39] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 46.790717][ T39] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, a2:0c:02:e1:13:a9 [ 46.808552][ T510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 46.827858][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 46.827873][ T28] audit: type=1400 audit(46.819:264): avc: denied { execstack } for pid=1108 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.837391][ T39] usb 3-1: USB disconnect, device number 9 [ 46.866416][ T28] audit: type=1400 audit(46.859:265): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 46.875183][ T510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 46.919679][ T39] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 46.958105][ T510] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 46.985617][ T510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.011426][ T510] usb 1-1: config 0 descriptor?? [ 47.020515][ T24] ================================================================== [ 47.028409][ T24] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 47.036051][ T24] Read of size 8 at addr ffff888119feecf0 by task kworker/1:0/24 [ 47.043600][ T24] [ 47.045769][ T24] CPU: 1 PID: 24 Comm: kworker/1:0 Not tainted 6.1.99-syzkaller-00091-g110595418159 #0 [ 47.055228][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 47.065130][ T24] Workqueue: events linkwatch_event [ 47.070178][ T24] Call Trace: [ 47.073281][ T24] [ 47.076062][ T24] dump_stack_lvl+0x151/0x1b7 [ 47.080575][ T24] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 47.085868][ T24] ? _printk+0xd1/0x111 [ 47.089863][ T24] ? __virt_addr_valid+0x242/0x2f0 [ 47.094808][ T24] print_report+0x158/0x4e0 [ 47.099147][ T24] ? __virt_addr_valid+0x242/0x2f0 [ 47.104098][ T24] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 47.110183][ T24] ? __list_del_entry_valid+0xa6/0x130 [ 47.115463][ T24] kasan_report+0x13c/0x170 [ 47.119805][ T24] ? __list_del_entry_valid+0xa6/0x130 [ 47.125108][ T24] __asan_report_load8_noabort+0x14/0x20 [ 47.130567][ T24] __list_del_entry_valid+0xa6/0x130 [ 47.135687][ T24] process_one_work+0x4d7/0xcb0 [ 47.140381][ T24] worker_thread+0xa60/0x1260 [ 47.144895][ T24] kthread+0x26d/0x300 [ 47.148792][ T24] ? worker_clr_flags+0x1a0/0x1a0 [ 47.153653][ T24] ? kthread_blkcg+0xd0/0xd0 [ 47.158087][ T24] ret_from_fork+0x1f/0x30 [ 47.158125][ T24] [ 47.158133][ T24] [ 47.158138][ T24] Allocated by task 39: [ 47.158147][ T24] kasan_set_track+0x4b/0x70 [ 47.158174][ T24] kasan_save_alloc_info+0x1f/0x30 [ 47.158201][ T24] __kasan_kmalloc+0x9c/0xb0 [ 47.158226][ T24] __kmalloc_node+0xb4/0x1e0 [ 47.158250][ T24] kvmalloc_node+0x221/0x640 [ 47.158274][ T24] alloc_netdev_mqs+0x8c/0xf90 [ 47.158297][ T24] alloc_etherdev_mqs+0x36/0x40 [ 47.158322][ T24] usbnet_probe+0x207/0x27c0 [ 47.158346][ T24] usb_probe_interface+0x5b6/0xa90 [ 47.158364][ T24] really_probe+0x2b8/0x920 [ 47.158384][ T24] __driver_probe_device+0x1a0/0x310 [ 47.158403][ T24] driver_probe_device+0x54/0x3d0 [ 47.158423][ T24] __device_attach_driver+0x2e3/0x490 [ 47.158443][ T24] bus_for_each_drv+0x183/0x200 [ 47.158472][ T24] __device_attach+0x312/0x510 [ 47.158490][ T24] device_initial_probe+0x1a/0x20 [ 47.158509][ T24] bus_probe_device+0xbe/0x1e0 [ 47.158537][ T24] device_add+0xb60/0xf10 [ 47.158561][ T24] usb_set_configuration+0x190f/0x1e80 [ 47.158580][ T24] usb_generic_driver_probe+0x8b/0x150 [ 47.158609][ T24] usb_probe_device+0x144/0x260 [ 47.158628][ T24] really_probe+0x2b8/0x920 [ 47.158647][ T24] __driver_probe_device+0x1a0/0x310 [ 47.158666][ T24] driver_probe_device+0x54/0x3d0 [ 47.158686][ T24] __device_attach_driver+0x2e3/0x490 [ 47.158707][ T24] bus_for_each_drv+0x183/0x200 [ 47.158736][ T24] __device_attach+0x312/0x510 [ 47.158755][ T24] device_initial_probe+0x1a/0x20 [ 47.158774][ T24] bus_probe_device+0xbe/0x1e0 [ 47.158801][ T24] device_add+0xb60/0xf10 [ 47.158825][ T24] usb_new_device+0xf2f/0x1820 [ 47.158847][ T24] hub_event+0x2db1/0x4830 [ 47.158871][ T24] process_one_work+0x73d/0xcb0 [ 47.158897][ T24] worker_thread+0xa60/0x1260 [ 47.158928][ T24] kthread+0x26d/0x300 [ 47.158948][ T24] ret_from_fork+0x1f/0x30 [ 47.158968][ T24] [ 47.158972][ T24] Freed by task 39: [ 47.158981][ T24] kasan_set_track+0x4b/0x70 [ 47.159006][ T24] kasan_save_free_info+0x2b/0x40 [ 47.159034][ T24] ____kasan_slab_free+0x131/0x180 [ 47.360352][ T24] __kasan_slab_free+0x11/0x20 [ 47.364971][ T24] __kmem_cache_free+0x218/0x3b0 [ 47.369723][ T24] kfree+0x7a/0xf0 [ 47.373281][ T24] kvfree+0x35/0x40 [ 47.376928][ T24] netdev_freemem+0x3f/0x60 [ 47.381266][ T24] netdev_release+0x7f/0xb0 [ 47.385607][ T24] device_release+0x95/0x1c0 [ 47.390035][ T24] kobject_put+0x178/0x260 [ 47.394286][ T24] put_device+0x1f/0x30 [ 47.398279][ T24] free_netdev+0x393/0x480 [ 47.402530][ T24] usbnet_disconnect+0x245/0x390 [ 47.407305][ T24] usb_unbind_interface+0x1fa/0x8c0 [ 47.412339][ T24] device_release_driver_internal+0x53e/0x870 [ 47.418241][ T24] device_release_driver+0x19/0x20 [ 47.423188][ T24] bus_remove_device+0x2fa/0x360 [ 47.427962][ T24] device_del+0x663/0xe90 [ 47.432129][ T24] usb_disable_device+0x380/0x720 [ 47.436988][ T24] usb_disconnect+0x32a/0x890 [ 47.441507][ T24] hub_event+0x1ed8/0x4830 [ 47.445755][ T24] process_one_work+0x73d/0xcb0 [ 47.450442][ T24] worker_thread+0xd71/0x1260 [ 47.454954][ T24] kthread+0x26d/0x300 [ 47.458862][ T24] ret_from_fork+0x1f/0x30 [ 47.463112][ T24] [ 47.465283][ T24] Last potentially related work creation: [ 47.470840][ T24] kasan_save_stack+0x3b/0x60 [ 47.475351][ T24] __kasan_record_aux_stack+0xb4/0xc0 [ 47.480559][ T24] kasan_record_aux_stack_noalloc+0xb/0x10 [ 47.486202][ T24] insert_work+0x56/0x310 [ 47.490366][ T24] __queue_work+0x9b6/0xd70 [ 47.494707][ T24] queue_work_on+0x105/0x170 [ 47.499131][ T24] usbnet_link_change+0xeb/0x100 [ 47.503905][ T24] usbnet_probe+0x1dbe/0x27c0 [ 47.508420][ T24] usb_probe_interface+0x5b6/0xa90 [ 47.513366][ T24] really_probe+0x2b8/0x920 [ 47.517704][ T24] __driver_probe_device+0x1a0/0x310 [ 47.522826][ T24] driver_probe_device+0x54/0x3d0 [ 47.527688][ T24] __device_attach_driver+0x2e3/0x490 [ 47.532898][ T24] bus_for_each_drv+0x183/0x200 [ 47.537583][ T24] __device_attach+0x312/0x510 [ 47.542183][ T24] device_initial_probe+0x1a/0x20 [ 47.547046][ T24] bus_probe_device+0xbe/0x1e0 [ 47.551645][ T24] device_add+0xb60/0xf10 [ 47.555812][ T24] usb_set_configuration+0x190f/0x1e80 [ 47.561103][ T24] usb_generic_driver_probe+0x8b/0x150 [ 47.566399][ T24] usb_probe_device+0x144/0x260 [ 47.571085][ T24] really_probe+0x2b8/0x920 [ 47.575428][ T24] __driver_probe_device+0x1a0/0x310 [ 47.580547][ T24] driver_probe_device+0x54/0x3d0 [ 47.585582][ T24] __device_attach_driver+0x2e3/0x490 [ 47.590787][ T24] bus_for_each_drv+0x183/0x200 [ 47.595474][ T24] __device_attach+0x312/0x510 [ 47.600072][ T24] device_initial_probe+0x1a/0x20 [ 47.604935][ T24] bus_probe_device+0xbe/0x1e0 [ 47.609534][ T24] device_add+0xb60/0xf10 [ 47.613699][ T24] usb_new_device+0xf2f/0x1820 [ 47.618301][ T24] hub_event+0x2db1/0x4830 [ 47.622554][ T24] process_one_work+0x73d/0xcb0 [ 47.627239][ T24] worker_thread+0xa60/0x1260 [ 47.631754][ T24] kthread+0x26d/0x300 [ 47.635658][ T24] ret_from_fork+0x1f/0x30 [ 47.639915][ T24] [ 47.642085][ T24] The buggy address belongs to the object at ffff888119fee000 [ 47.642085][ T24] which belongs to the cache kmalloc-4k of size 4096 [ 47.655975][ T24] The buggy address is located 3312 bytes inside of [ 47.655975][ T24] 4096-byte region [ffff888119fee000, ffff888119fef000) [ 47.669249][ T24] [ 47.671420][ T24] The buggy address belongs to the physical page: [ 47.677677][ T24] page:ffffea000467fa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119fe8 [ 47.687749][ T24] head:ffffea000467fa00 order:3 compound_mapcount:0 compound_pincount:0 [ 47.695893][ T24] flags: 0x4000000000010200(slab|head|zone=1) [ 47.701806][ T24] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 47.710220][ T24] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 47.718633][ T24] page dumped because: kasan: bad access detected [ 47.724892][ T24] page_owner tracks the page as allocated [ 47.730438][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 864, tgid 864 (syz-executor), ts 38307129293, free_ts 37897536910 [ 47.752830][ T24] post_alloc_hook+0x213/0x220 [ 47.757431][ T24] prep_new_page+0x1b/0x110 [ 47.761771][ T24] get_page_from_freelist+0x27ea/0x2870 [ 47.767150][ T24] __alloc_pages+0x3a1/0x780 [ 47.771579][ T24] alloc_slab_page+0x6c/0xf0 [ 47.776006][ T24] new_slab+0x90/0x3e0 [ 47.779912][ T24] ___slab_alloc+0x6f9/0xb80 [ 47.784335][ T24] __slab_alloc+0x5d/0xa0 [ 47.788504][ T24] __kmem_cache_alloc_node+0x1af/0x250 [ 47.793798][ T24] kmalloc_trace+0x2a/0xa0 [ 47.798049][ T24] kobject_uevent_env+0x262/0x720 [ 47.802913][ T24] kobject_uevent+0x1f/0x30 [ 47.807254][ T24] __kobject_del+0xee/0x300 [ 47.811589][ T24] kobject_put+0x1cc/0x260 [ 47.815841][ T24] net_rx_queue_update_kobjects+0x42a/0x4a0 [ 47.821574][ T24] netif_set_real_num_rx_queues+0x105/0x1e0 [ 47.827301][ T24] page last free stack trace: [ 47.831813][ T24] free_unref_page_prepare+0x83d/0x850 [ 47.837105][ T24] free_unref_page+0xb2/0x5c0 [ 47.841622][ T24] __free_pages+0x61/0xf0 [ 47.845785][ T24] __free_slab+0xce/0x1a0 [ 47.849954][ T24] __unfreeze_partials+0x165/0x1a0 [ 47.854897][ T24] put_cpu_partial+0xa9/0x100 [ 47.859410][ T24] __slab_free+0x1c8/0x280 [ 47.863667][ T24] ___cache_free+0xc6/0xd0 [ 47.867917][ T24] qlist_free_all+0xc5/0x140 [ 47.872343][ T24] kasan_quarantine_reduce+0x15a/0x180 [ 47.877639][ T24] __kasan_slab_alloc+0x24/0x80 [ 47.882328][ T24] slab_post_alloc_hook+0x53/0x2c0 [ 47.887273][ T24] kmem_cache_alloc+0x175/0x2c0 [ 47.891969][ T24] security_file_alloc+0x29/0x120 [ 47.896824][ T24] __alloc_file+0xb2/0x2a0 [ 47.901077][ T24] alloc_empty_file+0x95/0x180 [ 47.905677][ T24] [ 47.907844][ T24] Memory state around the buggy address: [ 47.913318][ T24] ffff888119feeb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.921213][ T24] ffff888119feec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.929113][ T24] >ffff888119feec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.937004][ T24] ^ [ 47.944559][ T24] ffff888119feed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.952460][ T24] ffff888119feed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.960352][ T24] ================================================================== [ 47.968253][ T24] Disabling lock debugging due to kernel taint [ 48.048941][ T510] usb 1-1: MIDIStreaming interface descriptor not found [ 48.058392][ T510] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 48.071602][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.255318][ T39] usb 1-1: USB disconnect, device number 8