last executing test programs: 14.598395546s ago: executing program 2 (id=1721): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000240)=[@acquire, @increfs={0x400c6314, 0x2}], 0x0, 0x0, 0x0}) 14.556340919s ago: executing program 2 (id=1722): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x65, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 14.54592675s ago: executing program 2 (id=1723): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000084c05e60c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="20013f00a3"], 0x0}) 12.377915745s ago: executing program 2 (id=1753): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000001000)='./file1\x00', 0x2000480, &(0x7f0000001040), 0x1, 0x793, &(0x7f0000001180)="$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") r0 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) timer_settime(0x0, 0x201b19afde518f8d, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) 11.517910558s ago: executing program 2 (id=1760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getgroups(0x1, &(0x7f0000000280)=[0xee01]) 8.704167978s ago: executing program 2 (id=1761): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 7.139632001s ago: executing program 1 (id=1765): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) 6.506955406s ago: executing program 1 (id=1765): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) 5.529881098s ago: executing program 1 (id=1765): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) 4.020019357s ago: executing program 1 (id=1765): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) 3.174657299s ago: executing program 4 (id=1796): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)={0x2a, 0x29, 0x0, {0x0, [{{0x0, 0x3, 0x4}, 0x9, 0x28, 0x7, './file2'}]}}, 0x2a) sendfile(r1, r1, &(0x7f0000000240), 0x7f03) 2.835984948s ago: executing program 4 (id=1797): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000300)={[{@discard}, {@acl}, {@dioread_nolock}, {@errors_remount}, {@nouser_xattr}, {@lazytime}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000401c1b3e1b00000000000109026a00010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ac0)={0x24, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x22, 0x5, {[@local=@item_4]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x147000) 2.629514736s ago: executing program 1 (id=1765): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) 1.890690629s ago: executing program 3 (id=1801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x5000) 1.864924s ago: executing program 3 (id=1803): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 1.828548294s ago: executing program 3 (id=1806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xe65, 0x3a, 'E', 0x3a, 'syz1', 0x3a, './file0', 0x3a, [0x46]}, 0x2d) 1.777557968s ago: executing program 3 (id=1809): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) 1.76110478s ago: executing program 0 (id=1810): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x2, 0x0, 0x2000000000903, 0x8}, 0x20) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 1.741539041s ago: executing program 3 (id=1811): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$eJzs3c9rI2UYwPEnaTa/lm1yEEVB+qAXvQxt9KwG2QUx4NLdiLuCMLudaMiYlJlQiYitJ6/izX9AcNljbwX1H+jFW7148dZLQdAi4shMZtr8mCRNmpLWfj9Q8kze95mZNzOE5w3M28MPvvm0UXONmtmWZFYlISJyLFKUpEQS4WsyiNPSa0devfnHwYv3Hjx8t1yp3F5XvVO+/1pJVZdXfvzsi1zYbS8j+8WPDo9Kv+8/u//84b/3P6m7Wne12WqrqY9av7XNR7alG3W3YajetS3TtbTedC2n297qttfs1uZmR83mxq38pmO5rprNjjasjrZb2nY6an5s1ptqGIbeysv1kh3Y9hKTc6pP1tfN8owHfDxjHubtb8/zxjQ7TtlcEjFyQy3VJxd6XgAA4FIaqP+/i2qEoiRPCspE31xguP6P4qD+96vO0/r/6Us/t2++v7sc1v976bj6//Vfu/l99b9/9LnX/z8MbA9XRFfe9jSdz1X/43JYSQ+91T/18+v/fDh/D3z14dPVIKD+BwAAAAAAAAAAAAAAAAAAAADgKjj2vILneYXoNfo7fYQg3I62xj1ojCtn1PXPhCsKnNwP+F+69+ChZIMH91LLIvbXW9Wtavc1bI86rkpB/gnuh1B3wYmdoFF9RfnJ3g7zt7eqS0FLWUTFFkvWpCDFvvwgvvNO5faadvXnJ1J5P78m9SC/JAV5Jj6/FJufllde7sk3pCC/PJaW2LIRfo9F+V+uqb79XmUgPxf0i/PmxV8WAAAAAADmylDNhtPn2Pm7YajGtftzeemdnw//PnAyv16NnZ+nCi+kFjt2AAAAAACuCzf9ecO0bctxOyODnEzqkwn3Nn4/8UFqms5+cBAEN8b1WeoZ4Vn3nA7/g8YUJy/TjdS07T8zEvthRku49jVlz/GpmnY0/jN0zk57CRw3Of3YLcdd8c9HZxpOTxD9bDSqj9yddc+jgmjl3Emdn/v2+79mO0QiXLW3t+mN3eyEkQZBYuCdnQk37ZHnTTyfGxf5nQMAAABgMaKiP+dG77y12BMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAamusyaSOCRY8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCz+CwAA//+9m/li") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000340)='./bus\x00', r1, 0xee01) 1.661514748s ago: executing program 3 (id=1812): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000100)=@ready={0x0, 0x0, 0x8, "447c9db7", {0x1, 0x4, 0xf, 0x1, 0x1}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x82, 0x7, 0x6}}}}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.199826117s ago: executing program 1 (id=1765): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) 386.124077ms ago: executing program 4 (id=1813): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x81, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000c) 346.15965ms ago: executing program 4 (id=1814): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x6, {0x2, 0x4e20, @multicast2}, 'ip6tnl0\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 331.262342ms ago: executing program 4 (id=1815): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 317.870602ms ago: executing program 4 (id=1816): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/195, 0xc3}}], 0x1, 0x0, 0x0) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) 245.663739ms ago: executing program 0 (id=1817): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x1, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 226.005761ms ago: executing program 0 (id=1818): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "478b78d5acd8471f999e618e1ae67906"}}}}}}, 0x0) 207.661392ms ago: executing program 0 (id=1819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6, 0x2d0, &(0x7f00000003c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000000c0)) 117.08667ms ago: executing program 0 (id=1820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x22000, 0x1000, &(0x7f0000000000/0x1000)=nil}) 0s ago: executing program 0 (id=1821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): xt=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.575720][ T3772] EXT4-fs warning (device loop4): ext4_group_extend:1847: will only finish group (8193 blocks, 7937 new) [ 117.617086][ T3772] EXT4-fs warning (device loop4): ext4_group_extend:1852: can't read last block, resize aborted [ 117.621681][ T3711] device veth0_vlan entered promiscuous mode [ 117.634564][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.643301][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.658358][ T3711] device veth1_macvtap entered promiscuous mode [ 117.665223][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.672541][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.684464][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.701945][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.710052][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.730526][ T3782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 117.737405][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.753646][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.762303][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.770526][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.822612][ T3786] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3956. macoff=92 [ 117.889104][ T3803] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 117.901428][ T30] audit: type=1326 audit(1729033606.103:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 117.935230][ T30] audit: type=1326 audit(1729033606.103:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 117.959519][ T30] audit: type=1326 audit(1729033606.103:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 117.987638][ T30] audit: type=1326 audit(1729033606.103:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 118.019989][ T30] audit: type=1326 audit(1729033606.133:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 118.060599][ T3809] xt_bpf: check failed: parse error [ 118.077431][ T30] audit: type=1326 audit(1729033606.133:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 118.125251][ T30] audit: type=1326 audit(1729033606.133:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 118.149269][ T3273] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 118.159009][ T30] audit: type=1326 audit(1729033606.133:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 118.183656][ T30] audit: type=1326 audit(1729033606.133:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.0.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 118.254561][ T3837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'. [ 118.264430][ T3837] device vlan2 entered promiscuous mode [ 118.270074][ T3837] device team_slave_0 entered promiscuous mode [ 118.276826][ T3837] device team_slave_0 left promiscuous mode [ 118.328815][ T3839] loop0: detected capacity change from 0 to 256 [ 118.441080][ T3845] loop0: detected capacity change from 0 to 256 [ 118.476746][ T3845] exfat: Deprecated parameter 'utf8' [ 118.528941][ T3845] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 118.556507][ T3273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.567249][ T3273] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.579881][ T3273] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.588882][ T3273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.601339][ T3273] usb 5-1: config 0 descriptor?? [ 118.627396][ T3849] kvm: MWAIT instruction emulated as NOP! [ 118.841896][ T3868] loop0: detected capacity change from 0 to 1024 [ 118.857950][ T3868] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.087545][ T3273] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 119.095817][ T3273] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 119.114905][ T3883] loop1: detected capacity change from 0 to 2048 [ 119.121277][ T3273] plantronics 0003:047F:FFFF.0043: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 119.236791][ T60] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 119.246449][ T1159] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 119.366611][ T310] usb 5-1: USB disconnect, device number 26 [ 119.596484][ T60] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 119.604397][ T60] usb 1-1: config 0 has no interface number 0 [ 119.610372][ T60] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.621064][ T60] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.656455][ T1159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.667184][ T1159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.676717][ T1159] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 119.685527][ T1159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.693998][ T1159] usb 4-1: config 0 descriptor?? [ 119.706632][ T60] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 119.715535][ T60] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 119.723335][ T60] usb 1-1: Manufacturer: syz [ 119.728563][ T60] usb 1-1: config 0 descriptor?? [ 120.146419][ T3273] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 120.167107][ T1159] elo 0003:04E7:0030.0044: item fetching failed at offset 2/5 [ 120.174510][ T1159] elo 0003:04E7:0030.0044: parse failed [ 120.180020][ T1159] elo: probe of 0003:04E7:0030.0044 failed with error -22 [ 120.208204][ T60] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.0045/input/input33 [ 120.219790][ T60] sony 0003:054C:03D5.0045: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 120.369375][ T1159] usb 4-1: USB disconnect, device number 17 [ 120.410881][ T60] usb 1-1: USB disconnect, device number 30 [ 120.536472][ T3273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.547289][ T3273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.556931][ T3273] usb 5-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 120.565770][ T3273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.574541][ T3273] usb 5-1: config 0 descriptor?? [ 121.047562][ T3273] smartjoyplus 0003:6666:8801.0046: unknown main item tag 0x0 [ 121.058128][ T3273] smartjoyplus 0003:6666:8801.0046: ignoring exceeding usage max [ 121.079744][ T3273] smartjoyplus 0003:6666:8801.0046: usage index exceeded [ 121.095253][ T3273] smartjoyplus 0003:6666:8801.0046: item 0 0 2 0 parsing failed [ 121.110661][ T3273] smartjoyplus 0003:6666:8801.0046: parse failed [ 121.124640][ T3273] smartjoyplus: probe of 0003:6666:8801.0046 failed with error -22 [ 121.250275][ T1109] usb 5-1: USB disconnect, device number 27 [ 121.288363][ T3917] loop0: detected capacity change from 0 to 40427 [ 121.321655][ T3917] F2FS-fs (loop0): invalid crc value [ 121.333729][ T3917] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.373588][ T3917] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 121.380329][ T3917] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 121.420395][ T3917] F2FS-fs (loop0): Unrecognized mount option " Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔" or missing value [ 121.436243][ T3917] attempt to access beyond end of device [ 121.436243][ T3917] loop0: rw=2049, want=45104, limit=40427 [ 121.476518][ T839] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 121.716435][ T839] usb 2-1: Using ep0 maxpacket: 32 [ 121.816409][ T1159] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 121.836465][ T839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.847187][ T839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.856705][ T839] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 121.865520][ T839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.873980][ T839] usb 2-1: config 0 descriptor?? [ 121.896440][ T1109] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 122.196684][ T1159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.207445][ T1159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.216968][ T1159] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 122.225789][ T1159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.234747][ T1159] usb 1-1: config 0 descriptor?? [ 122.256508][ T1109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.267287][ T1109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.276797][ T1109] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 122.285587][ T1109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.294119][ T1109] usb 4-1: config 0 descriptor?? [ 122.357426][ T839] lua 0003:1E7D:2C2E.0047: global environment stack underflow [ 122.364801][ T839] lua 0003:1E7D:2C2E.0047: item 0 0 1 11 parsing failed [ 122.371759][ T839] lua 0003:1E7D:2C2E.0047: parse failed [ 122.377169][ T839] lua: probe of 0003:1E7D:2C2E.0047 failed with error -22 [ 122.421801][ T3958] loop4: detected capacity change from 0 to 1024 [ 122.507732][ T3958] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 122.557936][ T3273] usb 2-1: USB disconnect, device number 32 [ 122.579522][ T3965] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 122.694833][ T3969] loop4: detected capacity change from 0 to 40427 [ 122.717046][ T1159] arvo 0003:1E7D:30D4.0048: item fetching failed at offset 5/7 [ 122.724523][ T1159] arvo 0003:1E7D:30D4.0048: parse failed [ 122.729999][ T1159] arvo: probe of 0003:1E7D:30D4.0048 failed with error -22 [ 122.767476][ T3969] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 122.776047][ T3969] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 122.784754][ T3969] F2FS-fs (loop4): invalid crc value [ 122.791224][ T3969] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.812899][ T3969] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 122.819862][ T3969] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 122.840521][ T3078] attempt to access beyond end of device [ 122.840521][ T3078] loop4: rw=2049, want=45104, limit=40427 [ 122.919898][ T3273] usb 1-1: USB disconnect, device number 31 [ 122.956044][ T3975] loop4: detected capacity change from 0 to 128 [ 122.969937][ T1109] usb 4-1: USB disconnect, device number 18 [ 123.038136][ T3975] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.048599][ T3975] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 123.217402][ T3982] loop4: detected capacity change from 0 to 40427 [ 123.299626][ T3982] F2FS-fs (loop4): invalid crc value [ 123.305981][ T3982] F2FS-fs (loop4): Found nat_bits in checkpoint [ 123.327793][ T3982] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 123.334564][ T3982] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 123.352151][ T3982] attempt to access beyond end of device [ 123.352151][ T3982] loop4: rw=2049, want=45112, limit=40427 [ 123.363355][ T60] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 123.370980][ T3078] attempt to access beyond end of device [ 123.370980][ T3078] loop4: rw=2049, want=45120, limit=40427 [ 123.450248][ T3988] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 123.515849][ T3992] xt_hashlimit: size too large, truncated to 1048576 [ 123.725266][ T3994] loop0: detected capacity change from 0 to 40427 [ 123.731628][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.742385][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.751902][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 123.768784][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.779196][ T3994] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 123.786716][ T60] usb 2-1: config 0 descriptor?? [ 123.799952][ T3994] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 123.809263][ T4007] loop3: detected capacity change from 0 to 128 [ 123.825625][ T3994] F2FS-fs (loop0): invalid crc value [ 123.836389][ T3994] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.872823][ T3994] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 123.879838][ T3994] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.886777][ T4016] loop4: detected capacity change from 0 to 2048 [ 123.895345][ T4007] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.905986][ T4007] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 123.944751][ T1604] attempt to access beyond end of device [ 123.944751][ T1604] loop0: rw=2049, want=40968, limit=40427 [ 123.956252][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 123.965548][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 123.966838][ T4016] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,grpjquota=,,errors=continue. Quota mode: none. [ 124.133282][ T4028] input: syz0 as /devices/virtual/input/input34 [ 124.267186][ T60] logitech-djreceiver 0003:046D:C70E.004A: unknown main item tag 0x0 [ 124.275084][ T60] logitech-djreceiver 0003:046D:C70E.004A: unknown main item tag 0x0 [ 124.284359][ T60] logitech-djreceiver 0003:046D:C70E.004A: unknown main item tag 0x0 [ 124.292293][ T60] logitech-djreceiver 0003:046D:C70E.004A: unknown main item tag 0x0 [ 124.301190][ T60] logitech-djreceiver 0003:046D:C70E.004A: unknown main item tag 0x0 [ 124.309148][ T60] logitech-djreceiver 0003:046D:C70E.004A: unknown main item tag 0x0 [ 124.316982][ T60] logitech-djreceiver 0003:046D:C70E.004A: unknown main item tag 0x0 [ 124.326434][ T314] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 124.395622][ T4046] loop0: detected capacity change from 0 to 40427 [ 124.436478][ T1159] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 124.469654][ T3273] usb 2-1: USB disconnect, device number 33 [ 124.496721][ T4046] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 124.504308][ T4046] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 124.513126][ T4046] F2FS-fs (loop0): invalid crc value [ 124.521603][ T4046] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.543397][ T4046] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 124.550301][ T4046] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.568963][ T4046] attempt to access beyond end of device [ 124.568963][ T4046] loop0: rw=2049, want=45104, limit=40427 [ 124.596446][ T314] usb 4-1: Using ep0 maxpacket: 16 [ 124.726546][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.737442][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.826466][ T1159] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 124.834358][ T1159] usb 5-1: config 0 has no interface number 0 [ 124.840361][ T1159] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.851125][ T1159] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.876513][ T314] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 124.885372][ T314] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 124.893546][ T314] usb 4-1: Product: syz [ 124.897603][ T314] usb 4-1: Manufacturer: syz [ 124.902431][ T314] usb 4-1: config 0 descriptor?? [ 124.936442][ T1159] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 124.945275][ T1159] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 124.953852][ T1159] usb 5-1: Manufacturer: syz [ 124.958766][ T1159] usb 5-1: config 0 descriptor?? [ 124.984608][ T4057] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 125.397438][ T314] kovaplus 0003:1E7D:2D50.004B: item fetching failed at offset 6/7 [ 125.405291][ T314] kovaplus 0003:1E7D:2D50.004B: parse failed [ 125.411151][ T314] kovaplus: probe of 0003:1E7D:2D50.004B failed with error -22 [ 125.435146][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 125.435161][ T30] audit: type=1326 audit(1729033613.633:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 125.467536][ T1159] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.004C/input/input35 [ 125.471024][ T30] audit: type=1326 audit(1729033613.633:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 125.483767][ T1159] sony 0003:054C:03D5.004C: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18 [ 125.514906][ T30] audit: type=1326 audit(1729033613.633:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 125.561331][ T30] audit: type=1326 audit(1729033613.633:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 125.584985][ T30] audit: type=1326 audit(1729033613.633:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 125.611479][ T30] audit: type=1400 audit(1729033613.763:1340): avc: denied { ioctl } for pid=4073 comm="syz.1.1480" path="/49/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.640796][ T1159] usb 4-1: USB disconnect, device number 19 [ 125.695641][ T314] usb 5-1: USB disconnect, device number 28 [ 125.740836][ T4082] loop1: detected capacity change from 0 to 2048 [ 125.769594][ T4072] loop0: detected capacity change from 0 to 40427 [ 125.806930][ T4072] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 125.814466][ T4072] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 125.823457][ T4082] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 125.830645][ T4072] F2FS-fs (loop0): invalid crc value [ 125.839152][ T4072] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.848179][ T4082] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 125.871428][ T4072] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 125.878530][ T4072] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 125.903545][ T1604] attempt to access beyond end of device [ 125.903545][ T1604] loop0: rw=2049, want=45104, limit=40427 [ 126.103871][ T4096] loop1: detected capacity change from 0 to 256 [ 126.131836][ T30] audit: type=1400 audit(1729033614.333:1341): avc: denied { create } for pid=4095 comm="syz.1.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 126.151185][ T30] audit: type=1400 audit(1729033614.333:1342): avc: denied { getopt } for pid=4095 comm="syz.1.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 126.316420][ T314] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 126.389157][ T4105] loop3: detected capacity change from 0 to 40427 [ 126.405994][ T4105] F2FS-fs (loop3): invalid crc value [ 126.412810][ T4105] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.438551][ T4105] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 126.458763][ T3711] attempt to access beyond end of device [ 126.458763][ T3711] loop3: rw=2049, want=45104, limit=40427 [ 126.548854][ T4122] loop3: detected capacity change from 0 to 512 [ 126.576382][ T314] usb 1-1: Using ep0 maxpacket: 32 [ 126.647798][ T4122] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 126.663623][ T4122] ext4 filesystem being mounted at /29/bus supports timestamps until 2038 (0x7fffffff) [ 126.716485][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.727579][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.737375][ T314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 126.750167][ T314] usb 1-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 126.759164][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.767861][ T314] usb 1-1: config 0 descriptor?? [ 126.805879][ T2899] bridge0: port 3(syz_tun) entered disabled state [ 126.815877][ T2899] device syz_tun left promiscuous mode [ 126.821922][ T2899] bridge0: port 3(syz_tun) entered disabled state [ 126.856834][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.863713][ T4130] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.870942][ T4130] device bridge_slave_0 entered promiscuous mode [ 126.878035][ T4130] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.884921][ T4130] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.892130][ T4130] device bridge_slave_1 entered promiscuous mode [ 126.932960][ T4130] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.939805][ T4130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.946922][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.953681][ T4130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.975765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.983306][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.990523][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.001788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.009870][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.016936][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.025558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.033901][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.040748][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.059086][ T4137] raw_sendmsg: syz.1.1500 forgot to set AF_INET. Fix it! [ 127.070031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.087276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.095456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.108024][ T4130] device veth0_vlan entered promiscuous mode [ 127.116607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.124370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.131819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.155870][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.164911][ T4130] device veth1_macvtap entered promiscuous mode [ 127.175595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.188839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.249085][ T314] itetech 0003:048D:8595.004D: unknown main item tag 0x0 [ 127.256397][ T314] itetech 0003:048D:8595.004D: unknown main item tag 0x0 [ 127.263276][ T314] itetech 0003:048D:8595.004D: unknown main item tag 0x0 [ 127.270422][ T314] itetech 0003:048D:8595.004D: unknown main item tag 0x0 [ 127.277449][ T314] itetech 0003:048D:8595.004D: unknown main item tag 0x0 [ 127.285260][ T314] itetech 0003:048D:8595.004D: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.0-1/input0 [ 127.309632][ T4149] loop4: detected capacity change from 0 to 2048 [ 127.357262][ T10] device bridge_slave_1 left promiscuous mode [ 127.363199][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.370668][ T10] device bridge_slave_0 left promiscuous mode [ 127.377067][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.384085][ T4149] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 127.391838][ T10] device veth1_macvtap left promiscuous mode [ 127.397820][ T4149] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 127.397948][ T10] device veth0_vlan left promiscuous mode [ 127.448849][ T3273] usb 1-1: USB disconnect, device number 32 [ 127.466389][ T1159] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 127.636192][ T30] audit: type=1326 audit(1729033615.833:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.3.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008f25eff9 code=0x7ffc0000 [ 127.659516][ T30] audit: type=1326 audit(1729033615.833:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.3.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008f25eff9 code=0x7ffc0000 [ 127.702004][ T4159] loop3: detected capacity change from 0 to 512 [ 127.736489][ T1159] usb 2-1: Using ep0 maxpacket: 16 [ 127.741657][ T4159] EXT4-fs (loop3): Unrecognized mount option "subj_user=wg1" or missing value [ 127.810079][ T4159] xt_hashlimit: size too large, truncated to 1048576 [ 127.915364][ T4170] input: syz1 as /devices/virtual/input/input36 [ 128.032377][ T4183] syz.4.1519[4183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.032426][ T4183] syz.4.1519[4183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.046477][ T1159] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 128.081437][ T1159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.090679][ T1159] usb 2-1: Product: syz [ 128.094685][ T1159] usb 2-1: Manufacturer: syz [ 128.099296][ T1159] usb 2-1: SerialNumber: syz [ 128.107464][ T1159] usb 2-1: config 0 descriptor?? [ 128.148373][ T1159] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 128.157305][ T1159] usb 2-1: Detected FT232H [ 128.190911][ T4185] loop2: detected capacity change from 0 to 40427 [ 128.236394][ T60] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 128.266387][ T1109] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 128.297929][ T4185] F2FS-fs (loop2): invalid crc value [ 128.304494][ T4185] F2FS-fs (loop2): Found nat_bits in checkpoint [ 128.325714][ T4185] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 128.332334][ T4185] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 128.349983][ T4185] attempt to access beyond end of device [ 128.349983][ T4185] loop2: rw=2049, want=45112, limit=40427 [ 128.364582][ T4130] attempt to access beyond end of device [ 128.364582][ T4130] loop2: rw=2049, want=45120, limit=40427 [ 128.366611][ T1159] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 128.396404][ T314] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 128.476442][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 128.554728][ T4200] loop2: detected capacity change from 0 to 512 [ 128.598549][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.609377][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.618978][ T60] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 128.627941][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.638708][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.646478][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.656441][ T1109] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 128.665480][ T60] usb 4-1: config 0 descriptor?? [ 128.670322][ T1109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.678647][ T1109] usb 1-1: config 0 descriptor?? [ 128.686950][ T1159] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 128.687222][ T4200] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.696263][ T1159] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 128.705097][ T4200] EXT4-fs (loop2): 1 orphan inode deleted [ 128.716315][ T4200] EXT4-fs (loop2): 1 truncate cleaned up [ 128.723405][ T4200] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,sb=0x0000000000000009,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 128.755879][ T4200] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 128.770284][ T4200] EXT4-fs (loop2): Remounting filesystem read-only [ 128.806455][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.817396][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.827534][ T314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.841156][ T314] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.850144][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.861532][ T314] usb 5-1: config 0 descriptor?? [ 128.909600][ T26] usb 2-1: USB disconnect, device number 34 [ 128.916105][ T26] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 128.927344][ T26] ftdi_sio 2-1:0.0: device disconnected [ 129.008208][ T4213] loop2: detected capacity change from 0 to 40427 [ 129.096740][ T4213] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 129.104334][ T4213] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 129.113145][ T4213] F2FS-fs (loop2): invalid crc value [ 129.119546][ T4213] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.142738][ T4213] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 129.149687][ T4213] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.157723][ T60] playstation 0003:054C:0CE6.004E: unknown main item tag 0x0 [ 129.166099][ T1109] cypress 0003:04B4:07B1.004F: unknown main item tag 0x6 [ 129.177431][ T1109] cypress 0003:04B4:07B1.004F: item fetching failed at offset 4/5 [ 129.185084][ T60] playstation 0003:054C:0CE6.004E: unknown main item tag 0x0 [ 129.185681][ T4130] attempt to access beyond end of device [ 129.185681][ T4130] loop2: rw=2049, want=40968, limit=40427 [ 129.192486][ T1109] cypress 0003:04B4:07B1.004F: parse failed [ 129.203757][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 129.209144][ T60] playstation 0003:054C:0CE6.004E: unknown main item tag 0x0 [ 129.219836][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 129.224903][ T60] playstation 0003:054C:0CE6.004E: unknown main item tag 0x0 [ 129.241590][ T1109] cypress: probe of 0003:04B4:07B1.004F failed with error -22 [ 129.249650][ T60] playstation 0003:054C:0CE6.004E: unknown main item tag 0x0 [ 129.257803][ T60] playstation 0003:054C:0CE6.004E: unknown main item tag 0x0 [ 129.265010][ T60] playstation 0003:054C:0CE6.004E: unknown main item tag 0x0 [ 129.273373][ T60] playstation 0003:054C:0CE6.004E: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 129.375764][ T481] usb 1-1: USB disconnect, device number 33 [ 129.382328][ T314] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 129.386457][ T60] playstation 0003:054C:0CE6.004E: Invalid byte count transferred, expected 20 got 0 [ 129.391095][ T314] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 129.401921][ T60] playstation 0003:054C:0CE6.004E: Failed to retrieve DualSense pairing info: -22 [ 129.406635][ T314] plantronics 0003:047F:FFFF.0050: No inputs registered, leaving [ 129.415159][ T60] playstation 0003:054C:0CE6.004E: Failed to get MAC address from DualSense [ 129.433115][ T60] playstation 0003:054C:0CE6.004E: Failed to create dualsense. [ 129.440661][ T314] plantronics 0003:047F:FFFF.0050: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 129.455179][ T60] playstation: probe of 0003:054C:0CE6.004E failed with error -22 [ 129.616444][ T1159] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 129.642558][ T481] usb 4-1: USB disconnect, device number 20 [ 129.906391][ T1109] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 129.996447][ T1159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.007193][ T1159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.016722][ T1159] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 130.025546][ T1159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.034473][ T1159] usb 3-1: config 0 descriptor?? [ 130.156403][ T60] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 130.266455][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.278161][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.287819][ T1109] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 130.296662][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.305413][ T1109] usb 2-1: config 0 descriptor?? [ 130.396421][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 130.476396][ T481] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 130.507626][ T1159] uclogic 0003:5543:0781.0051: item fetching failed at offset 5/7 [ 130.515401][ T1159] uclogic 0003:5543:0781.0051: parse failed [ 130.517057][ T60] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.521916][ T1159] uclogic: probe of 0003:5543:0781.0051 failed with error -22 [ 130.532208][ T60] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.666465][ T60] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 130.675364][ T60] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 130.683539][ T60] usb 1-1: Product: syz [ 130.687512][ T60] usb 1-1: Manufacturer: syz [ 130.716815][ T1159] usb 3-1: USB disconnect, device number 34 [ 130.727008][ T60] hub 1-1:4.0: USB hub found [ 130.756493][ T481] usb 4-1: Using ep0 maxpacket: 16 [ 130.788188][ T1109] hid-rmi 0003:06CB:81A7.0052: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 130.896464][ T481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.907185][ T481] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.920115][ T481] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.929775][ T481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.938250][ T481] usb 4-1: config 0 descriptor?? [ 130.946487][ T60] hub 1-1:4.0: 2 ports detected [ 130.990246][ T1109] usb 2-1: USB disconnect, device number 35 [ 131.430797][ T481] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0053/input/input37 [ 131.506389][ T310] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 131.506411][ T60] hub 1-1:4.0: set hub depth failed [ 131.520555][ T481] microsoft 0003:045E:07DA.0053: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 131.555515][ T60] usb 1-1: USB disconnect, device number 34 [ 131.556775][ T4261] loop4: detected capacity change from 0 to 2048 [ 131.598076][ T4261] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.658506][ T4275] syz.4.1553[4275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.658578][ T4275] syz.4.1553[4275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.701686][ T4277] loop4: detected capacity change from 0 to 2048 [ 131.767522][ T4277] loop4: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 131.768126][ T4277] loop4: p3 start 4259840 is beyond EOD, [ 131.839360][ T60] usb 4-1: USB disconnect, device number 21 [ 131.860680][ T314] usb 5-1: USB disconnect, device number 29 [ 131.867713][ T4277] truncated [ 131.936375][ T1109] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 131.976461][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.987330][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.997129][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.010045][ T310] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.018999][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.027270][ T310] usb 3-1: config 0 descriptor?? [ 132.121213][ T101] loop4: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 132.121630][ T101] loop4: p3 start 4259840 is beyond EOD, [ 132.176381][ T1109] usb 2-1: Using ep0 maxpacket: 32 [ 132.217429][ T101] truncated [ 132.336472][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.347416][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.357181][ T1109] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 132.366091][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.374107][ T39] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 132.382470][ T1109] usb 2-1: config 0 descriptor?? [ 132.497349][ T310] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 132.504571][ T310] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 132.535090][ T310] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 132.553481][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 132.553496][ T30] audit: type=1326 audit(1729033620.753:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7901ee0ff9 code=0x7ffc0000 [ 132.560887][ T310] plantronics 0003:047F:FFFF.0054: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 132.607070][ T30] audit: type=1326 audit(1729033620.753:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7901ee0ff9 code=0x7ffc0000 [ 132.633777][ T2942] udevd[2942]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 132.657609][ T851] udevd[851]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 132.657866][ T324] udevd[324]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 132.669012][ T2941] udevd[2941]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 132.687377][ T326] udevd[326]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 132.697846][ T315] udevd[315]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory [ 132.715429][ T4290] udevd[4290]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory [ 132.724638][ T4293] udevd[4293]: inotify_add_watch(7, /dev/loop4p12, 10) failed: No such file or directory [ 132.734558][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory [ 132.742598][ T4295] udevd[4295]: inotify_add_watch(7, /dev/loop4p14, 10) failed: No such file or directory [ 132.746530][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.787671][ T30] audit: type=1326 audit(1729033620.753:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7901ee0ff9 code=0x7ffc0000 [ 132.806516][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.909389][ T30] audit: type=1326 audit(1729033620.753:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7901ee0ff9 code=0x7ffc0000 [ 132.918124][ T39] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 132.938169][ T30] audit: type=1326 audit(1729033620.753:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7901ee0ff9 code=0x7ffc0000 [ 132.976620][ T30] audit: type=1326 audit(1729033620.753:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7901ee0ff9 code=0x7ffc0000 [ 133.002909][ T30] audit: type=1326 audit(1729033620.813:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7901ee0ff9 code=0x7ffc0000 [ 133.031876][ T30] audit: type=1326 audit(1729033620.813:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7901ee0ff9 code=0x7ffc0000 [ 133.060037][ T30] audit: type=1326 audit(1729033620.853:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7901ee0ff9 code=0x7ffc0000 [ 133.090513][ T30] audit: type=1326 audit(1729033620.933:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7901ee0ff9 code=0x7ffc0000 [ 133.093531][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.118746][ T839] usb 3-1: USB disconnect, device number 35 [ 133.137847][ T39] usb 1-1: config 0 descriptor?? [ 133.162618][ T1109] lua 0003:1E7D:2C2E.0055: global environment stack underflow [ 133.177186][ T1109] lua 0003:1E7D:2C2E.0055: item 0 0 1 11 parsing failed [ 133.189224][ T1109] lua 0003:1E7D:2C2E.0055: parse failed [ 133.195807][ T1109] lua: probe of 0003:1E7D:2C2E.0055 failed with error -22 [ 133.231219][ T4305] loop4: detected capacity change from 0 to 1024 [ 133.543890][ T4305] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.617611][ T39] lg-g15 0003:046D:C222.0056: unknown main item tag 0x0 [ 133.648266][ T39] lg-g15 0003:046D:C222.0056: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 133.684918][ T39] usb 2-1: USB disconnect, device number 36 [ 133.935487][ T4320] loop3: detected capacity change from 0 to 4096 [ 133.953934][ T6] usb 1-1: USB disconnect, device number 35 [ 133.979031][ T4320] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.016400][ T314] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 134.048563][ T4338] loop4: detected capacity change from 0 to 512 [ 134.128255][ T4338] EXT4-fs (loop4): 1 orphan inode deleted [ 134.133800][ T4338] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 134.154591][ T4338] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038 (0x7fffffff) [ 134.234351][ T4350] loop1: detected capacity change from 0 to 1024 [ 134.235340][ T4348] loop4: detected capacity change from 0 to 2048 [ 134.266720][ T4348] loop4: p1 < > p4 [ 134.270737][ T4348] loop4: p4 size 8388608 extends beyond EOD, truncated [ 134.296411][ T39] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 134.297903][ T4350] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.371569][ T101] loop4: p1 < > p4 [ 134.375712][ T101] loop4: p4 size 8388608 extends beyond EOD, truncated [ 134.446617][ T314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.476393][ T314] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 134.485248][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.536398][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 134.557090][ T314] usb 3-1: config 0 descriptor?? [ 137.668796][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 137.668813][ T30] audit: type=1400 audit(1729033625.873:1383): avc: denied { setattr } for pid=4360 comm="syz.0.1586" name="file0" dev="incremental-fs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.706486][ T314] usb 3-1: can't set config #0, error -71 [ 137.712961][ T314] usb 3-1: USB disconnect, device number 36 [ 137.721274][ T30] audit: type=1326 audit(1729033625.923:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 137.744565][ T39] usb 4-1: device descriptor read/all, error -71 [ 137.760659][ T30] audit: type=1326 audit(1729033625.923:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 137.784060][ T30] audit: type=1326 audit(1729033625.923:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 137.808006][ T30] audit: type=1326 audit(1729033625.923:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 137.832093][ T30] audit: type=1326 audit(1729033625.923:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 137.858184][ T30] audit: type=1326 audit(1729033625.923:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 137.881753][ T30] audit: type=1326 audit(1729033625.923:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 137.905352][ T30] audit: type=1326 audit(1729033625.923:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 137.929057][ T30] audit: type=1326 audit(1729033625.923:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f48c5829ff9 code=0x7ffc0000 [ 137.996408][ T1109] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 138.035541][ T4392] overlayfs: missing 'workdir' [ 138.059699][ T4394] loop0: detected capacity change from 0 to 512 [ 138.136840][ T4394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 138.151480][ T4394] EXT4-fs (loop0): 1 truncate cleaned up [ 138.157009][ T4394] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 138.236386][ T1109] usb 5-1: Using ep0 maxpacket: 16 [ 138.276203][ T4403] loop2: detected capacity change from 0 to 128 [ 138.352163][ T4403] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 138.357050][ T1109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.387102][ T1109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.412527][ T1109] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.435305][ T1109] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.454347][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.471474][ T1109] usb 5-1: config 0 descriptor?? [ 138.478707][ T4403] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 138.489354][ T4403] FAT-fs (loop2): Filesystem has been set read-only [ 138.512573][ T4409] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.521566][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.529284][ T4409] device bridge_slave_0 entered promiscuous mode [ 138.548165][ T4409] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.563526][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.575510][ T4409] device bridge_slave_1 entered promiscuous mode [ 138.886385][ T476] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 138.986412][ T39] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 139.421320][ T1109] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0057/input/input38 [ 139.434457][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.442410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.450352][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.458616][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.466040][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.473617][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.482028][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.489951][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.496797][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.500997][ T1109] microsoft 0003:045E:07DA.0057: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 139.504275][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.523732][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.531994][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.538840][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.546150][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.556079][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.563870][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.571099][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.579368][ T4409] device veth0_vlan entered promiscuous mode [ 139.588892][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.597699][ T4409] device veth1_macvtap entered promiscuous mode [ 139.606763][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.614795][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.624008][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.677287][ T839] usb 5-1: USB disconnect, device number 30 [ 139.936398][ T1159] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 139.956968][ T4463] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 139.974777][ T4463] SELinux: failed to load policy [ 139.995393][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1631'. [ 140.037981][ T4471] netem: change failed [ 140.176543][ T1159] usb 1-1: Using ep0 maxpacket: 32 [ 140.326529][ T1159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.337367][ T1159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.346937][ T1159] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.355748][ T1159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.364271][ T1159] usb 1-1: config 0 descriptor?? [ 140.427061][ T1159] hub 1-1:0.0: USB hub found [ 140.496418][ T6] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 140.556427][ T39] usb 4-1: device descriptor read/64, error -71 [ 140.646553][ T1159] hub 1-1:0.0: 16 ports detected [ 140.666459][ T1159] hub 1-1:0.0: insufficient power available to use all downstream ports [ 140.856521][ T1159] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 140.862725][ T1159] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 140.876440][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.886514][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 140.895330][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.904907][ T6] usb 5-1: config 0 descriptor?? [ 140.916499][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 140.986464][ T1159] usbhid 1-1:0.0: can't add hid device: -71 [ 140.992224][ T1159] usbhid: probe of 1-1:0.0 failed with error -71 [ 141.029177][ T1159] usb 1-1: USB disconnect, device number 36 [ 141.036551][ T39] usb 4-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 141.045570][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.059336][ T39] usb 4-1: config 0 descriptor?? [ 141.096898][ T39] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 141.176460][ T6] usb 5-1: string descriptor 0 read error: -71 [ 141.182601][ T6] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 141.189396][ T6] usb 5-1: No valid video chain found. [ 141.195220][ T6] usb 5-1: USB disconnect, device number 31 [ 141.226401][ T314] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 141.317169][ T39] usb 4-1: Detected FT8U232AM [ 141.322611][ T39] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 141.331223][ T39] usb 4-1: USB disconnect, device number 24 [ 141.337381][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 141.346691][ T39] ftdi_sio 4-1:0.0: device disconnected [ 141.372758][ T4497] loop2: detected capacity change from 0 to 2048 [ 141.457754][ T4497] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.468213][ T4497] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 141.478722][ T314] usb 2-1: Using ep0 maxpacket: 16 [ 141.483139][ T4497] xt_hashlimit: size too large, truncated to 1048576 [ 141.606506][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.629541][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.638071][ T476] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 141.639398][ T314] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 141.669528][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.688454][ T4509] syz.4.1650[4509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.688524][ T4509] syz.4.1650[4509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.700530][ T314] usb 2-1: config 0 descriptor?? [ 142.014879][ T4537] loop3: detected capacity change from 0 to 40427 [ 142.021372][ T476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.036929][ T39] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 142.042430][ T4537] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 142.048646][ T476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.062573][ T4537] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 142.071151][ T476] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.081165][ T4537] F2FS-fs (loop3): invalid crc value [ 142.085859][ T476] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.098637][ T476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.108020][ T476] usb 1-1: config 0 descriptor?? [ 142.108282][ T4537] F2FS-fs (loop3): Found nat_bits in checkpoint [ 142.157399][ T4537] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 142.159198][ T4554] loop4: detected capacity change from 0 to 256 [ 142.164253][ T4537] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 142.187216][ T314] hid-multitouch 0003:1FD2:6007.0058: unknown global tag 0xc [ 142.194461][ T314] hid-multitouch 0003:1FD2:6007.0058: item 0 0 1 12 parsing failed [ 142.202423][ T314] hid-multitouch: probe of 0003:1FD2:6007.0058 failed with error -22 [ 142.206792][ T3711] attempt to access beyond end of device [ 142.206792][ T3711] loop3: rw=524288, want=45072, limit=40427 [ 142.221644][ T3711] attempt to access beyond end of device [ 142.221644][ T3711] loop3: rw=0, want=45072, limit=40427 [ 142.235413][ T3711] attempt to access beyond end of device [ 142.235413][ T3711] loop3: rw=2049, want=45104, limit=40427 [ 142.390346][ T4303] usb 2-1: USB disconnect, device number 38 [ 142.415577][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.416475][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.422596][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.433190][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.441361][ T4558] device bridge_slave_0 entered promiscuous mode [ 142.449952][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 142.464870][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.473279][ T39] usb 3-1: config 0 descriptor?? [ 142.478160][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.484990][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.492732][ T4558] device bridge_slave_1 entered promiscuous mode [ 142.537509][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.544451][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.551551][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.558416][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.579424][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.587379][ T476] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 142.594596][ T476] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 142.594665][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.602473][ T476] plantronics 0003:047F:FFFF.0059: No inputs registered, leaving [ 142.616304][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.617862][ T476] plantronics 0003:047F:FFFF.0059: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 142.640460][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.648424][ T839] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 142.651394][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.662862][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.670307][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.678439][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.685272][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.698900][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.707846][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.724930][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.735750][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.743779][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.751239][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.759474][ T4558] device veth0_vlan entered promiscuous mode [ 142.771253][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.780395][ T4558] device veth1_macvtap entered promiscuous mode [ 142.806679][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.817346][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.851242][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 142.851256][ T30] audit: type=1400 audit(1729033631.053:1411): avc: denied { mounton } for pid=4564 comm="syz.3.1672" path="/proc/4/cgroup" dev="proc" ino=36272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 142.887762][ T476] usb 1-1: USB disconnect, device number 37 [ 142.900576][ T323] device bridge_slave_1 left promiscuous mode [ 142.908287][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.932618][ T323] device bridge_slave_0 left promiscuous mode [ 142.939010][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.947325][ T323] device veth1_macvtap left promiscuous mode [ 142.953234][ T323] device veth0_vlan left promiscuous mode [ 142.977567][ T39] lg-g15 0003:046D:C222.005A: unknown main item tag 0x0 [ 142.984367][ T39] lg-g15 0003:046D:C222.005A: item fetching failed at offset 10/11 [ 142.993255][ T39] lg-g15: probe of 0003:046D:C222.005A failed with error -22 [ 143.003236][ T4576] loop3: detected capacity change from 0 to 256 [ 143.026606][ T839] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.033222][ T4576] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 143.041127][ T839] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.136466][ T839] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.148486][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.156712][ T839] usb 5-1: SerialNumber: syz [ 143.204068][ T1109] usb 3-1: USB disconnect, device number 37 [ 143.410353][ T4605] loop0: detected capacity change from 0 to 256 [ 143.437095][ T839] usb 5-1: 0:2 : does not exist [ 143.441855][ T839] usb 5-1: unit 32 not found! [ 143.458303][ T839] usb 5-1: USB disconnect, device number 32 [ 143.490873][ T4605] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 143.526833][ T476] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 143.615713][ T30] audit: type=1400 audit(1729033631.813:1412): avc: denied { mount } for pid=4612 comm="syz.0.1694" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 143.653328][ T4615] loop0: detected capacity change from 0 to 512 [ 143.678198][ T4615] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.689313][ T4615] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 143.733143][ T30] audit: type=1400 audit(1729033631.933:1413): avc: denied { bind } for pid=4619 comm="syz.2.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.762318][ T4622] capability: warning: `syz.2.1697' uses 32-bit capabilities (legacy support in use) [ 143.762642][ T30] audit: type=1400 audit(1729033631.933:1414): avc: denied { setopt } for pid=4619 comm="syz.2.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.815257][ T30] audit: type=1400 audit(1729033632.013:1415): avc: denied { unlink } for pid=4409 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 143.864998][ T30] audit: type=1400 audit(1729033632.063:1416): avc: denied { mounton } for pid=4626 comm="syz.2.1700" path="/proc/92/task" dev="proc" ino=36361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 143.906524][ T476] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.932813][ T476] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.951656][ T476] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 143.970328][ T476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.988428][ T476] usb 2-1: config 0 descriptor?? [ 144.041902][ T4641] kvm: pic: non byte write [ 144.050076][ T4641] kvm: pic: non byte write [ 144.054474][ T4641] kvm: pic: non byte write [ 144.059176][ T4641] kvm: pic: non byte write [ 144.063488][ T4641] kvm: pic: non byte write [ 144.070396][ T4641] kvm: pic: non byte write [ 144.080464][ T4641] kvm: pic: non byte write [ 144.084051][ T4648] loop2: detected capacity change from 0 to 512 [ 144.084799][ T4641] kvm: pic: non byte write [ 144.095156][ T4641] kvm: pic: non byte write [ 144.099772][ T4641] kvm: pic: non byte write [ 144.108968][ T4648] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 144.108968][ T4648] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 144.108968][ T4648] [ 144.139839][ T4648] EXT4-fs (loop2): Ignoring removed bh option [ 144.145917][ T4648] EXT4-fs (loop2): Ignoring removed nobh option [ 144.156985][ T4648] EXT4-fs (loop2): Unrecognized mount option "euid<00000000000000000000" or missing value [ 144.192296][ T4662] SELinux: failed to load policy [ 144.215257][ T4666] netlink: 'syz.0.1716': attribute type 6 has an invalid length. [ 144.257346][ T30] audit: type=1400 audit(1729033632.463:1417): avc: denied { read } for pid=4670 comm="syz.2.1718" path="socket:[36623]" dev="sockfs" ino=36623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.306411][ T839] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 144.328637][ T30] audit: type=1326 audit(1729033632.533:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6684f9ff9 code=0x7ffc0000 [ 144.352369][ T30] audit: type=1326 audit(1729033632.533:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff6684f9ff9 code=0x7ffc0000 [ 144.376554][ T30] audit: type=1326 audit(1729033632.533:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6684f9ff9 code=0x7ffc0000 [ 144.388471][ T4679] binder: 4678:4679 ioctl c0306201 0 returned -14 [ 144.411625][ T4679] binder: 4678:4679 ioctl c0306201 20000480 returned -22 [ 144.476413][ T314] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 144.477287][ T476] petalynx 0003:18B1:0037.005B: collection stack underflow [ 144.490906][ T476] petalynx 0003:18B1:0037.005B: item 0 1 0 12 parsing failed [ 144.498366][ T476] petalynx 0003:18B1:0037.005B: parse failed [ 144.504152][ T476] petalynx: probe of 0003:18B1:0037.005B failed with error -22 [ 144.526518][ T1159] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 144.546517][ T839] usb 5-1: Using ep0 maxpacket: 32 [ 144.683799][ T476] usb 2-1: USB disconnect, device number 39 [ 144.696390][ T39] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 144.746392][ T314] usb 4-1: Using ep0 maxpacket: 16 [ 144.826464][ T839] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 144.835380][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.843313][ T839] usb 5-1: Product: syz [ 144.847335][ T839] usb 5-1: Manufacturer: syz [ 144.851708][ T839] usb 5-1: SerialNumber: syz [ 144.857016][ T839] usb 5-1: config 0 descriptor?? [ 144.886517][ T314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.896569][ T314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 144.897062][ T839] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 144.905334][ T314] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 144.921270][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.929169][ T1159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.936426][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 144.940191][ T1159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.954591][ T1159] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 144.963498][ T1159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.972002][ T1159] usb 1-1: config 0 descriptor?? [ 144.997313][ T314] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 145.056455][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.067202][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.076946][ T39] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 145.085765][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.094254][ T39] usb 3-1: config 0 descriptor?? [ 145.107408][ T839] usb 5-1: USB disconnect, device number 33 [ 145.204654][ T310] usb 4-1: USB disconnect, device number 25 [ 145.456649][ T1159] hid (null): report_id 1388856143 is invalid [ 145.466837][ T1159] hid-led 0003:27B8:01ED.005C: report_id 1388856143 is invalid [ 145.474244][ T1159] hid-led 0003:27B8:01ED.005C: item 0 4 1 8 parsing failed [ 145.481765][ T1159] hid-led: probe of 0003:27B8:01ED.005C failed with error -22 [ 145.577743][ T39] playstation 0003:054C:0CE6.005D: unknown main item tag 0x0 [ 145.587237][ T39] playstation 0003:054C:0CE6.005D: unknown main item tag 0x0 [ 145.594474][ T39] playstation 0003:054C:0CE6.005D: unknown main item tag 0x0 [ 145.605972][ T39] playstation 0003:054C:0CE6.005D: unknown main item tag 0x0 [ 145.620840][ T39] playstation 0003:054C:0CE6.005D: unknown main item tag 0x0 [ 145.642580][ T39] playstation 0003:054C:0CE6.005D: unknown main item tag 0x0 [ 145.654601][ T39] playstation 0003:054C:0CE6.005D: unknown main item tag 0x0 [ 145.664762][ T1159] usb 1-1: USB disconnect, device number 38 [ 145.665268][ T4710] loop4: detected capacity change from 0 to 512 [ 145.683782][ T39] playstation 0003:054C:0CE6.005D: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0 [ 145.703953][ T4712] loop1: detected capacity change from 0 to 2048 [ 145.745562][ T4710] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1732: bad orphan inode 17 [ 145.755997][ T4710] ext4_test_bit(bit=16, block=4) = 1 [ 145.756767][ T4712] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 145.761142][ T4710] is_bad_inode(inode)=0 [ 145.774552][ T4710] NEXT_ORPHAN(inode)=0 [ 145.779240][ T4710] max_ino=32 [ 145.782247][ T4710] i_nlink=1 [ 145.789802][ T4710] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.790217][ T4720] loop3: detected capacity change from 0 to 256 [ 145.806464][ T39] playstation 0003:054C:0CE6.005D: Invalid byte count transferred, expected 20 got 0 [ 145.806492][ T39] playstation 0003:054C:0CE6.005D: Failed to retrieve DualSense pairing info: -22 [ 145.806514][ T39] playstation 0003:054C:0CE6.005D: Failed to get MAC address from DualSense [ 145.806528][ T39] playstation 0003:054C:0CE6.005D: Failed to create dualsense. [ 145.845362][ T4710] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1732: bg 0: block 7: invalid block bitmap [ 145.846693][ T39] playstation: probe of 0003:054C:0CE6.005D failed with error -22 [ 145.901404][ T4712] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.903231][ T4720] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 145.921983][ T4712] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev loop1, type ext4) errno=-22 [ 145.934384][ T4724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1737'. [ 145.944420][ T4724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1737'. [ 145.954625][ T4720] exFAT-fs (loop3): hint_cluster is invalid (17) [ 145.964917][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 145.970970][ T4720] exFAT-fs (loop3): Filesystem has been set read-only [ 145.978066][ T4720] exFAT-fs (loop3): error, failed to bmap (inode : ffff88811aeec520 iblock : 8, err : -5) [ 145.989387][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 145.995189][ T4720] exFAT-fs (loop3): error, failed to bmap (inode : ffff88811aeec520 iblock : 8, err : -5) [ 146.005056][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.010877][ T4720] exFAT-fs (loop3): error, failed to bmap (inode : ffff88811aeec520 iblock : 9, err : -5) [ 146.020694][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.020827][ T39] usb 3-1: USB disconnect, device number 38 [ 146.026570][ T4720] exFAT-fs (loop3): error, failed to bmap (inode : ffff88811aeec520 iblock : 10, err : -5) [ 146.026602][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.048183][ T4720] exFAT-fs (loop3): error, failed to bmap (inode : ffff88811aeec520 iblock : 11, err : -5) [ 146.066495][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.072345][ T4720] exFAT-fs (loop3): error, failed to bmap (inode : ffff88811aeec520 iblock : 12, err : -5) [ 146.083261][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.089324][ T4720] exFAT-fs (loop3): error, failed to bmap (inode : ffff88811aeec520 iblock : 13, err : -5) [ 146.099473][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.105370][ T4720] exFAT-fs (loop3): error, failed to bmap (inode : ffff88811aeec520 iblock : 14, err : -5) [ 146.115265][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.121118][ T4720] exFAT-fs (loop3): error, failed to bmap (inode : ffff88811aeec520 iblock : 15, err : -5) [ 146.131057][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.152362][ T4720] exFAT-fs (loop3): error, failed to bmap (inode : ffff88811aeec520 iblock : 8, err : -5) [ 146.166538][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.172439][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.178804][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.184718][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.191099][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.197203][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.204189][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.220944][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.235268][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.241363][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.248126][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.255010][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.261460][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.268132][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.274839][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.291590][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.297581][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.303436][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.309494][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.315341][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.324671][ T4745] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 146.335506][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.346742][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.352552][ T4720] exFAT-fs (loop3): error, broken FAT chain. [ 146.446393][ T839] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 146.590071][ T4757] loop2: detected capacity change from 0 to 2048 [ 146.636432][ T1159] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 146.643839][ T310] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 146.667364][ T4757] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 146.673733][ T4757] EXT4-fs (loop2): mount failed [ 146.686394][ T839] usb 2-1: Using ep0 maxpacket: 8 [ 146.802237][ T4755] loop3: detected capacity change from 0 to 131072 [ 146.816491][ T839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.827199][ T839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.836899][ T839] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 146.845728][ T839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.854204][ T839] usb 2-1: config 0 descriptor?? [ 146.876398][ T1159] usb 5-1: Using ep0 maxpacket: 32 [ 146.886393][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 146.918254][ T4755] F2FS-fs (loop3): invalid crc value [ 146.925259][ T4755] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 146.945921][ T4755] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 147.135974][ T4773] loop3: detected capacity change from 0 to 512 [ 147.156603][ T1159] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 147.166306][ T1159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.166456][ T310] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 147.183181][ T1159] usb 5-1: Product: syz [ 147.187149][ T1159] usb 5-1: Manufacturer: syz [ 147.191526][ T1159] usb 5-1: SerialNumber: syz [ 147.196241][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.204295][ T1159] usb 5-1: config 0 descriptor?? [ 147.209131][ T310] usb 1-1: Product: syz [ 147.214011][ T310] usb 1-1: Manufacturer: syz [ 147.218465][ T310] usb 1-1: SerialNumber: syz [ 147.223658][ T310] usb 1-1: config 0 descriptor?? [ 147.227917][ T4773] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 147.240778][ T4773] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 147.347152][ T839] kone 0003:1E7D:2CED.005E: collection stack underflow [ 147.353877][ T839] kone 0003:1E7D:2CED.005E: item 0 1 0 12 parsing failed [ 147.360870][ T839] kone 0003:1E7D:2CED.005E: parse failed [ 147.366424][ T839] kone: probe of 0003:1E7D:2CED.005E failed with error -22 [ 147.590802][ T314] usb 2-1: USB disconnect, device number 40 [ 150.281471][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 150.475510][ T4796] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.482567][ T4796] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.489875][ T4796] device bridge_slave_0 entered promiscuous mode [ 150.500314][ T4796] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.507229][ T4796] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.514269][ T4796] device bridge_slave_1 entered promiscuous mode [ 150.564512][ T4796] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.571356][ T4796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.578474][ T4796] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.585227][ T4796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.613899][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.621582][ T4531] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.629098][ T4531] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.640591][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.648669][ T4531] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.655491][ T4531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.664201][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.672417][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.679275][ T4531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.696247][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.705566][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.722686][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.737797][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.745737][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.753452][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.763985][ T4796] device veth0_vlan entered promiscuous mode [ 150.776706][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.786266][ T4796] device veth1_macvtap entered promiscuous mode [ 150.812232][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.835540][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.846704][ T4804] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1767'. [ 150.862906][ T323] device bridge_slave_1 left promiscuous mode [ 150.872225][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.880896][ T323] device bridge_slave_0 left promiscuous mode [ 150.886937][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.895084][ T323] device veth1_macvtap left promiscuous mode [ 150.900924][ T323] device veth0_vlan left promiscuous mode [ 150.959626][ T4806] sch_fq: defrate 0 ignored. [ 151.007183][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 151.007198][ T30] audit: type=1326 audit(1729033639.213:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.1773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7901ee0ff9 code=0x0 [ 151.162854][ T4819] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.181577][ T4819] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.196988][ T4819] device bridge_slave_0 entered promiscuous mode [ 151.223912][ T4819] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.231738][ T4819] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.239109][ T4819] device bridge_slave_1 entered promiscuous mode [ 151.326408][ T1159] rtl8150 5-1:0.0: couldn't reset the device [ 151.332285][ T1159] rtl8150: probe of 5-1:0.0 failed with error -5 [ 151.347089][ T1159] usb 5-1: USB disconnect, device number 34 [ 151.375330][ T4819] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.376403][ T310] rtl8150 1-1:0.0: couldn't reset the device [ 151.382183][ T4819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.395112][ T4819] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.396727][ T310] rtl8150: probe of 1-1:0.0 failed with error -5 [ 151.401889][ T4819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.417117][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.419462][ T310] usb 1-1: USB disconnect, device number 39 [ 151.430392][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.460139][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.469062][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.496775][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.505110][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.513142][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.519985][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.527927][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.536090][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.544949][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.551803][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.559549][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.567571][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.579000][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.586886][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.591930][ T4815] loop0: detected capacity change from 0 to 131072 [ 151.601580][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.610482][ T313] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 151.616802][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.629346][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.639559][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.651121][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.651760][ T4815] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.658700][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.672266][ T4819] device veth0_vlan entered promiscuous mode [ 151.684422][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.691726][ T4815] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.692641][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.715447][ T4819] device veth1_macvtap entered promiscuous mode [ 151.736235][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.747541][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.755727][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.765517][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.773867][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.949482][ T323] device bridge_slave_1 left promiscuous mode [ 151.955498][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.963235][ T323] device bridge_slave_0 left promiscuous mode [ 151.969303][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.977364][ T323] device veth1_macvtap left promiscuous mode [ 151.983190][ T323] device veth0_vlan left promiscuous mode [ 151.996486][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 152.007521][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 152.018417][ T313] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.031095][ T313] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.039918][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.048233][ T313] usb 4-1: config 0 descriptor?? [ 152.066752][ T4829] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 152.107776][ T4841] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.114663][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.121922][ T4841] device bridge_slave_0 entered promiscuous mode [ 152.128874][ T4841] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.135787][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.143049][ T4841] device bridge_slave_1 entered promiscuous mode [ 152.184267][ T4841] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.191117][ T4841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.198249][ T4841] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.204986][ T4841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.212162][ T314] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 152.226842][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.234287][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.241477][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.246612][ T1159] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 152.258254][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.266309][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.273154][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.282244][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.290354][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.297197][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.309245][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.325813][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.334168][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.346882][ T4841] device veth0_vlan entered promiscuous mode [ 152.353406][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.361177][ T481] Bluetooth: hci0: command 0x1003 tx timeout [ 152.361461][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.367314][ T1612] Bluetooth: hci0: sending frame failed (-49) [ 152.374529][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.391034][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.400203][ T4841] device veth1_macvtap entered promiscuous mode [ 152.409133][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.418439][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.426714][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.456423][ T314] usb 5-1: Using ep0 maxpacket: 16 [ 152.507602][ T313] plantronics 0003:047F:FFFF.005F: unknown main item tag 0xd [ 152.515519][ T313] plantronics 0003:047F:FFFF.005F: No inputs registered, leaving [ 152.527507][ T313] plantronics 0003:047F:FFFF.005F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 152.606503][ T1159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.617365][ T1159] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.630097][ T1159] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.639012][ T1159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.647471][ T1159] usb 1-1: config 0 descriptor?? [ 152.736456][ T314] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 152.745456][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.753246][ T314] usb 5-1: Product: syz [ 152.757403][ T314] usb 5-1: Manufacturer: syz [ 152.761835][ T314] usb 5-1: SerialNumber: syz [ 152.769117][ T314] usb 5-1: config 0 descriptor?? [ 152.796782][ T481] usb 4-1: USB disconnect, device number 26 [ 152.808113][ T314] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 152.815605][ T314] usb 5-1: Detected FT232H [ 152.930454][ T323] device bridge_slave_1 left promiscuous mode [ 152.936479][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.943817][ T323] device bridge_slave_0 left promiscuous mode [ 152.950026][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.957728][ T323] device veth1_macvtap left promiscuous mode [ 152.963545][ T323] device veth0_vlan left promiscuous mode [ 153.016506][ T314] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 153.028883][ T4849] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.035715][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.043005][ T4849] device bridge_slave_0 entered promiscuous mode [ 153.049783][ T4849] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.056832][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.063961][ T4849] device bridge_slave_1 entered promiscuous mode [ 153.108623][ T4849] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.115461][ T4849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.122580][ T4849] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.129350][ T4849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.137406][ T1159] plantronics 0003:047F:FFFF.0060: item fetching failed at offset 14/15 [ 153.145723][ T1159] plantronics 0003:047F:FFFF.0060: parse failed [ 153.153268][ T1159] plantronics: probe of 0003:047F:FFFF.0060 failed with error -22 [ 153.153846][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.169099][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.176272][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.185105][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.193119][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.199952][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.208554][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.216561][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.223374][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.235738][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.244936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.263454][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.274623][ T4849] device veth0_vlan entered promiscuous mode [ 153.276523][ T314] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 153.287116][ T4849] device veth1_macvtap entered promiscuous mode [ 153.293641][ T314] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 153.302660][ T314] usb 5-1: USB disconnect, device number 35 [ 153.309783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.319009][ T314] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 153.328364][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.336245][ T4855] loop3: detected capacity change from 0 to 1024 [ 153.343904][ T314] ftdi_sio 5-1:0.0: device disconnected [ 153.352310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.368470][ T839] usb 1-1: USB disconnect, device number 40 [ 153.373351][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.383412][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.390883][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.410090][ T4855] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.494775][ T4855] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 153.509752][ T4855] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 153.523106][ T4855] EXT4-fs (loop3): This should not happen!! Data will be lost [ 153.523106][ T4855] [ 153.532733][ T4855] EXT4-fs (loop3): Total free blocks count 0 [ 153.538746][ T4855] EXT4-fs (loop3): Free/Dirty block details [ 153.544442][ T4855] EXT4-fs (loop3): free_blocks=68451041280 [ 153.550141][ T4855] EXT4-fs (loop3): dirty_blocks=16 [ 153.555180][ T4855] EXT4-fs (loop3): Block reservation details [ 153.561659][ T4855] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 153.936981][ T323] device bridge_slave_1 left promiscuous mode [ 153.942894][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.950200][ T323] device bridge_slave_0 left promiscuous mode [ 153.956109][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.971188][ T323] device veth1_macvtap left promiscuous mode [ 153.973865][ T4864] loop0: detected capacity change from 0 to 512 [ 153.984757][ T4865] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1783'. [ 153.984757][ T30] audit: type=1400 audit(1729033642.183:1451): avc: denied { nlmsg_read } for pid=4863 comm="syz.4.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.994036][ T323] device veth0_vlan left promiscuous mode [ 154.065714][ T4873] loop3: detected capacity change from 0 to 256 [ 154.079375][ T4864] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.080256][ T4873] exfat: Deprecated parameter 'namecase' [ 154.116433][ T4873] exfat: Deprecated parameter 'utf8' [ 154.116829][ T4864] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1781: invalid block [ 154.121543][ T4873] exfat: Deprecated parameter 'namecase' [ 154.139352][ T4864] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1781: invalid indirect mapped block 4294967295 (level 1) [ 154.162331][ T4864] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1781: invalid indirect mapped block 4294967295 (level 1) [ 154.176702][ T4864] EXT4-fs (loop0): 2 truncates cleaned up [ 154.182253][ T4864] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 154.218141][ T4873] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 154.308203][ T4875] loop4: detected capacity change from 0 to 40427 [ 154.308894][ T4864] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.326302][ T4864] EXT4-fs error (device loop0): ext4_remount:5845: comm syz.0.1781: Abort forced by user [ 154.337160][ T4864] EXT4-fs (loop0): Remounting filesystem read-only [ 154.344571][ T4867] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.351760][ T4867] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.359442][ T4867] device bridge_slave_0 entered promiscuous mode [ 154.366233][ T4867] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.369552][ T4875] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 154.379988][ T4875] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 154.388769][ T4867] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.389005][ T4875] F2FS-fs (loop4): invalid crc value [ 154.395978][ T4867] device bridge_slave_1 entered promiscuous mode [ 154.405254][ T4875] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.436540][ T1159] Bluetooth: hci0: command 0x1001 tx timeout [ 154.442435][ T1612] Bluetooth: hci0: sending frame failed (-49) [ 154.457136][ T4875] F2FS-fs (loop4): Start checkpoint disabled! [ 154.474849][ T4875] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 154.481980][ T4875] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 154.499899][ T30] audit: type=1400 audit(1729033642.703:1452): avc: denied { write } for pid=4894 comm="syz.0.1792" name="task" dev="proc" ino=39239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 154.526230][ T30] audit: type=1400 audit(1729033642.723:1453): avc: denied { add_name } for pid=4894 comm="syz.0.1792" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 154.539266][ T4893] loop0: detected capacity change from 0 to 256 [ 154.552605][ T30] audit: type=1400 audit(1729033642.723:1454): avc: denied { create } for pid=4894 comm="syz.0.1792" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 154.573063][ T30] audit: type=1400 audit(1729033642.723:1455): avc: denied { associate } for pid=4894 comm="syz.0.1792" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 154.622185][ T4528] attempt to access beyond end of device [ 154.622185][ T4528] loop4: rw=2049, want=40992, limit=40427 [ 154.633747][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.641526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.651301][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.659547][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.667619][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.674471][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.684486][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.692238][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.700418][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.706367][ T314] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 154.708862][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.722456][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.755972][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.767293][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.780716][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.795204][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.803047][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.810309][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.818280][ T4867] device veth0_vlan entered promiscuous mode [ 154.828817][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.840628][ T4867] device veth1_macvtap entered promiscuous mode [ 154.849818][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.860195][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.976379][ T314] usb 4-1: Using ep0 maxpacket: 16 [ 155.006398][ T310] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 155.116536][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.127473][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.137205][ T314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.149841][ T314] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 155.158663][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.167079][ T314] usb 4-1: config 0 descriptor?? [ 155.256988][ T323] device bridge_slave_1 left promiscuous mode [ 155.262952][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.269963][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 155.275068][ T323] device bridge_slave_0 left promiscuous mode [ 155.281101][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.288881][ T323] device veth1_macvtap left promiscuous mode [ 155.294724][ T323] device veth0_vlan left promiscuous mode [ 155.616459][ T310] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 155.625377][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.633497][ T310] usb 1-1: Product: syz [ 155.638743][ T314] koneplus 0003:1E7D:2E22.0061: unknown main item tag 0x0 [ 155.646498][ T310] usb 1-1: Manufacturer: syz [ 155.651164][ T314] koneplus 0003:1E7D:2E22.0061: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 155.662386][ T310] usb 1-1: SerialNumber: syz [ 155.672700][ T310] usb 1-1: config 0 descriptor?? [ 155.682415][ T4903] picdev_write: 73 callbacks suppressed [ 155.682429][ T4903] kvm: pic: non byte write [ 155.692201][ T4903] kvm: pic: non byte write [ 155.696750][ T4903] kvm: pic: non byte write [ 155.701060][ T4903] kvm: pic: non byte write [ 155.705379][ T4903] kvm: pic: non byte write [ 155.705718][ T4901] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.709908][ T4903] kvm: pic: non byte write [ 155.717222][ T4901] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.727768][ T4903] kvm: pic: non byte write [ 155.728260][ T4901] device bridge_slave_0 entered promiscuous mode [ 155.732129][ T4903] kvm: pic: non byte write [ 155.739522][ T4901] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.743029][ T310] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 155.749751][ T4901] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.763589][ T4903] kvm: pic: non byte write [ 155.764062][ T4901] device bridge_slave_1 entered promiscuous mode [ 155.767930][ T4903] kvm: pic: non byte write [ 155.772456][ T310] usb 1-1: Detected FT232H [ 155.812044][ T4909] loop4: detected capacity change from 0 to 1024 [ 155.846442][ T314] koneplus 0003:1E7D:2E22.0061: couldn't init struct koneplus_device [ 155.849858][ T4901] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.854455][ T314] koneplus 0003:1E7D:2E22.0061: couldn't install mouse [ 155.861200][ T4901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.861296][ T4901] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.869182][ T314] koneplus: probe of 0003:1E7D:2E22.0061 failed with error -5 [ 155.874895][ T4901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.891408][ T4909] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.920686][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.928745][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.935881][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.946521][ T310] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 155.953352][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.961439][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.968297][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.977472][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.985841][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.985852][ T4909] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, [ 155.992718][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.992720][ T4909] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 155.992952][ T4909] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 156.028813][ T4909] EXT4-fs (loop4): This should not happen!! Data will be lost [ 156.028813][ T4909] [ 156.038314][ T4909] EXT4-fs (loop4): Total free blocks count 0 [ 156.044069][ T4909] EXT4-fs (loop4): Free/Dirty block details [ 156.049972][ T4909] EXT4-fs (loop4): free_blocks=68451041280 [ 156.059753][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.066514][ T4909] EXT4-fs (loop4): dirty_blocks=16 [ 156.068032][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.072241][ T4909] EXT4-fs (loop4): Block reservation details [ 156.089049][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.095750][ T4909] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 156.101545][ T4901] device veth0_vlan entered promiscuous mode [ 156.109880][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.118449][ T314] usb 4-1: USB disconnect, device number 27 [ 156.131501][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.138949][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.152965][ T4901] device veth1_macvtap entered promiscuous mode [ 156.160476][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.180142][ T4913] loop4: detected capacity change from 0 to 512 [ 156.186620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.194907][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.203699][ T4913] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 156.203699][ T4913] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 156.203699][ T4913] [ 156.222149][ T4913] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.226437][ T310] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 156.234085][ T4913] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.241301][ T310] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 156.254464][ T4913] EXT4-fs (loop4): 1 orphan inode deleted [ 156.264186][ T4913] EXT4-fs (loop4): 1 truncate cleaned up [ 156.270873][ T4913] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,acl,dioread_nolock,errors=remount-ro,nouser_xattr,lazytime,. Quota mode: none. [ 156.276956][ T310] usb 1-1: USB disconnect, device number 41 [ 156.308269][ T310] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 156.318709][ T310] ftdi_sio 1-1:0.0: device disconnected [ 156.467826][ T323] device bridge_slave_1 left promiscuous mode [ 156.473743][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.481246][ T323] device bridge_slave_0 left promiscuous mode [ 156.487238][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.494963][ T323] device veth1_macvtap left promiscuous mode [ 156.500819][ T323] device veth0_vlan left promiscuous mode [ 156.517064][ T314] Bluetooth: hci0: command 0x1009 tx timeout [ 156.576455][ T481] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 156.966442][ T481] usb 5-1: config index 0 descriptor too short (expected 106, got 36) [ 156.974423][ T481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 156.985611][ T481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25189, setting to 1024 [ 156.998090][ T481] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 157.007043][ T481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.015484][ T481] usb 5-1: config 0 descriptor?? [ 157.112383][ T4927] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1802'. [ 157.178727][ T4935] binfmt_misc: register: failed to install interpreter file ./file0 [ 157.184546][ T4942] tmpfs: Unsupported parameter 'mpol' [ 157.198783][ T4942] sock: sock_timestamping_bind_phc: sock not bind to device [ 157.208497][ T4925] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.215655][ T30] audit: type=1400 audit(1729033645.413:1456): avc: denied { unmount } for pid=4558 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 157.219421][ T4925] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.245508][ T4925] device bridge_slave_0 entered promiscuous mode [ 157.250855][ T4948] loop3: detected capacity change from 0 to 128 [ 157.252914][ T4925] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.264647][ T4925] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.271723][ T4925] device bridge_slave_1 entered promiscuous mode [ 157.319062][ T4925] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.325890][ T4925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.333027][ T4925] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.339792][ T4925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.365127][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.372778][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.380974][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.389714][ T323] device bridge_slave_1 left promiscuous mode [ 157.395612][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.403440][ T323] device bridge_slave_0 left promiscuous mode [ 157.410044][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.418059][ T323] device veth1_macvtap left promiscuous mode [ 157.423879][ T323] device veth0_vlan left promiscuous mode [ 157.496386][ T313] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 157.508727][ T481] hid-generic 0003:1B1C:1B3E.0062: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 157.527830][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.535804][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.542641][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.549864][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.558670][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.566699][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.580636][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.588732][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.599497][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.607291][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.615254][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.622632][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.632288][ T4925] device veth0_vlan entered promiscuous mode [ 157.636374][ T839] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 157.645359][ T4925] device veth1_macvtap entered promiscuous mode [ 157.652244][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.660845][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.669056][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.679095][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.687243][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.696900][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.705243][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.711314][ T1109] usb 5-1: USB disconnect, device number 36 [ 157.866464][ T313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.876522][ T313] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.886422][ T839] usb 4-1: Using ep0 maxpacket: 8 [ 157.956557][ T313] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.965405][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.973365][ T313] usb 1-1: SerialNumber: syz [ 158.006473][ T839] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 158.014662][ T839] usb 4-1: config 179 has no interface number 0 [ 158.021413][ T839] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 158.032286][ T839] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 158.043570][ T839] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 158.054522][ T839] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 158.065740][ T839] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 158.078760][ T839] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 158.087569][ T839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.116544][ T4951] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 158.256933][ T313] usb 1-1: 0:2 : does not exist [ 158.262912][ T313] usb 1-1: USB disconnect, device number 42 [ 158.273520][ T323] device bridge_slave_1 left promiscuous mode [ 158.279850][ T4293] udevd[4293]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 158.282822][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.303017][ T323] device bridge_slave_0 left promiscuous mode [ 158.309246][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.317016][ T323] device veth1_macvtap left promiscuous mode [ 158.322821][ T323] device veth0_vlan left promiscuous mode [ 158.557020][ T313] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input40 [ 158.667349][ T4956] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.674236][ T4956] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.681703][ T4956] device bridge_slave_0 entered promiscuous mode [ 158.689014][ T4956] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.695841][ T4956] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.702981][ T4956] device bridge_slave_1 entered promiscuous mode [ 158.743104][ T4951] UDC core: couldn't find an available UDC or it's busy: -16 [ 158.756914][ T4951] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 158.775721][ T4973] loop0: detected capacity change from 0 to 256 [ 158.779403][ T4956] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.788654][ T4956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.795738][ T4956] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.802545][ T4956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.821662][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.829125][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.836113][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.845624][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.854745][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.861618][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.873376][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.881349][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.888176][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.901253][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.914170][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.933302][ T4956] device veth0_vlan entered promiscuous mode [ 158.940217][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.949034][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.957049][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.965562][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.977416][ T310] usb 4-1: USB disconnect, device number 28 [ 158.986362][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 158.987041][ T4956] device veth1_macvtap entered promiscuous mode [ 158.994536][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 159.008786][ T310] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 159.020203][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.023977][ T313] ================================================================== [ 159.032290][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.035817][ T313] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2f/0x120 [ 159.051363][ T313] Read of size 8 at addr ffff88811198e708 by task kworker/1:3/313 [ 159.058997][ T313] [ 159.061163][ T313] CPU: 1 PID: 313 Comm: kworker/1:3 Tainted: G W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 159.072617][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.082515][ T313] Workqueue: events binder_deferred_func [ 159.087981][ T313] Call Trace: [ 159.091114][ T313] [ 159.093882][ T313] dump_stack_lvl+0x151/0x1c0 [ 159.098395][ T313] ? io_uring_drop_tctx_refs+0x190/0x190 [ 159.103864][ T313] ? panic+0x760/0x760 [ 159.107771][ T313] ? kasan_quarantine_put+0x34/0x1a0 [ 159.112893][ T313] print_address_description+0x87/0x3b0 [ 159.118273][ T313] kasan_report+0x179/0x1c0 [ 159.122609][ T313] ? _raw_spin_lock+0xa4/0x1b0 [ 159.127209][ T313] ? __list_del_entry_valid+0x2f/0x120 [ 159.132506][ T313] ? __list_del_entry_valid+0x2f/0x120 [ 159.137799][ T313] __asan_report_load8_noabort+0x14/0x20 [ 159.143266][ T313] __list_del_entry_valid+0x2f/0x120 [ 159.148390][ T313] binder_release_work+0xcd/0x680 [ 159.153249][ T313] binder_deferred_func+0x1847/0x1bc0 [ 159.158456][ T313] ? read_word_at_a_time+0x12/0x20 [ 159.163410][ T313] process_one_work+0x6bb/0xc10 [ 159.168093][ T313] worker_thread+0xad5/0x12a0 [ 159.172607][ T313] kthread+0x421/0x510 [ 159.176510][ T313] ? worker_clr_flags+0x180/0x180 [ 159.181368][ T313] ? kthread_blkcg+0xd0/0xd0 [ 159.185796][ T313] ret_from_fork+0x1f/0x30 [ 159.190053][ T313] [ 159.192911][ T313] [ 159.195081][ T313] Allocated by task 4978: [ 159.199250][ T313] ____kasan_kmalloc+0xdb/0x110 [ 159.203936][ T313] __kasan_kmalloc+0x9/0x10 [ 159.208275][ T313] kmem_cache_alloc_trace+0x115/0x210 [ 159.213483][ T313] binder_thread_write+0x9f5/0x6ec0 [ 159.218516][ T313] binder_ioctl_write_read+0x205/0x7300 [ 159.223899][ T313] binder_ioctl+0x371/0x2640 [ 159.228323][ T313] __se_sys_ioctl+0x114/0x190 [ 159.232843][ T313] __x64_sys_ioctl+0x7b/0x90 [ 159.237265][ T313] x64_sys_call+0x98/0x9a0 [ 159.241520][ T313] do_syscall_64+0x3b/0xb0 [ 159.245769][ T313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.251500][ T313] [ 159.253668][ T313] Freed by task 313: [ 159.257402][ T313] kasan_set_track+0x4b/0x70 [ 159.261826][ T313] kasan_set_free_info+0x23/0x40 [ 159.266600][ T313] ____kasan_slab_free+0x126/0x160 [ 159.271548][ T313] __kasan_slab_free+0x11/0x20 [ 159.276145][ T313] slab_free_freelist_hook+0xbd/0x190 [ 159.281354][ T313] kfree+0xc8/0x220 [ 159.284998][ T313] binder_free_ref+0x128/0x260 [ 159.289600][ T313] binder_deferred_func+0x171c/0x1bc0 [ 159.294806][ T313] process_one_work+0x6bb/0xc10 [ 159.299493][ T313] worker_thread+0xad5/0x12a0 [ 159.304005][ T313] kthread+0x421/0x510 [ 159.307912][ T313] ret_from_fork+0x1f/0x30 [ 159.312166][ T313] [ 159.314335][ T313] The buggy address belongs to the object at ffff88811198e700 [ 159.314335][ T313] which belongs to the cache kmalloc-64 of size 64 [ 159.328049][ T313] The buggy address is located 8 bytes inside of [ 159.328049][ T313] 64-byte region [ffff88811198e700, ffff88811198e740) [ 159.340893][ T313] The buggy address belongs to the page: [ 159.346374][ T313] page:ffffea0004466380 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11198e [ 159.356429][ T313] flags: 0x4000000000000200(slab|zone=1) [ 159.361903][ T313] raw: 4000000000000200 ffffea0004929700 0000000c0000000c ffff888100042780 [ 159.370323][ T313] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 159.378735][ T313] page dumped because: kasan: bad access detected [ 159.384994][ T313] page_owner tracks the page as allocated [ 159.390539][ T313] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 104, ts 3566169750, free_ts 3564095212 [ 159.406161][ T313] post_alloc_hook+0x1a3/0x1b0 [ 159.410763][ T313] prep_new_page+0x1b/0x110 [ 159.415100][ T313] get_page_from_freelist+0x3550/0x35d0 [ 159.420482][ T313] __alloc_pages+0x27e/0x8f0 [ 159.424908][ T313] new_slab+0x9a/0x4e0 [ 159.428820][ T313] ___slab_alloc+0x39e/0x830 [ 159.433242][ T313] __slab_alloc+0x4a/0x90 [ 159.437408][ T313] __kmalloc+0x16d/0x270 [ 159.441485][ T313] kvmalloc_node+0x1f0/0x4d0 [ 159.445914][ T313] simple_xattr_alloc+0x43/0xa0 [ 159.450600][ T313] shmem_initxattrs+0x8d/0x200 [ 159.455199][ T313] security_inode_init_security+0x252/0x390 [ 159.460927][ T313] shmem_mknod+0xb8/0x1c0 [ 159.465093][ T313] shmem_create+0x2c/0x40 [ 159.469264][ T313] path_openat+0x13a8/0x2f40 [ 159.473686][ T313] do_filp_open+0x21c/0x460 [ 159.478030][ T313] page last free stack trace: [ 159.482540][ T313] free_unref_page_prepare+0x7c8/0x7d0 [ 159.487833][ T313] free_unref_page_list+0x14b/0xa60 [ 159.492867][ T313] release_pages+0x1310/0x1370 [ 159.497469][ T313] free_pages_and_swap_cache+0x8a/0xa0 [ 159.502762][ T313] tlb_finish_mmu+0x177/0x320 [ 159.507276][ T313] exit_mmap+0x40d/0x940 [ 159.511355][ T313] __mmput+0x95/0x310 [ 159.515174][ T313] mmput+0x5b/0x170 [ 159.518818][ T313] exec_mmap+0x46b/0x510 [ 159.522900][ T313] begin_new_exec+0xbcf/0x1f40 [ 159.527497][ T313] load_elf_binary+0x945/0x2750 [ 159.532186][ T313] bprm_execve+0x7ae/0x14a0 [ 159.536524][ T313] do_execveat_common+0x565/0x710 [ 159.541384][ T313] __x64_sys_execve+0x92/0xb0 [ 159.545899][ T313] x64_sys_call+0x1c5/0x9a0 [ 159.550238][ T313] do_syscall_64+0x3b/0xb0 [ 159.554493][ T313] [ 159.556660][ T313] Memory state around the buggy address: [ 159.562133][ T313] ffff88811198e600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 159.570031][ T313] ffff88811198e680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 159.577935][ T313] >ffff88811198e700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 159.585824][ T313] ^ [ 159.589994][ T313] ffff88811198e780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 159.597891][ T313] ffff88811198e800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 159.605786][ T313] ================================================================== [ 159.613683][ T313] Disabling lock debugging due to kernel taint [ 159.620393][ T313] general protection fault, probably for non-canonical address 0xf48ffc5ea0000027: 0000 [#1] PREEMPT SMP KASAN [ 159.631914][ T313] KASAN: maybe wild-memory-access in range [0xa48002f500000138-0xa48002f50000013f] [ 159.641029][ T313] CPU: 1 PID: 313 Comm: kworker/1:3 Tainted: G B W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 159.652135][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.662030][ T313] Workqueue: events binder_deferred_func [ 159.667499][ T313] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 159.673403][ T313] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 cc 90 48 ff 49 8b 17 4c 39 f2 75 [ 159.692842][ T313] RSP: 0018:ffffc90000a67c00 EFLAGS: 00010a06 [ 159.698744][ T313] RAX: 1490005ea0000027 RBX: ffff88812cf14c00 RCX: ffffffff826a1859 [ 159.706552][ T313] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff88811198e700 [ 159.714371][ T313] RBP: ffffc90000a67c20 R08: ffffffff8141997b R09: 0000000000000003 [ 159.722178][ T313] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: dffffc0000000000 [ 159.729987][ T313] R13: ffff88811198e700 R14: ffff88811198e700 R15: a48002f500000139 [ 159.737799][ T313] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 159.746566][ T313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.752988][ T313] CR2: 0000001b2f61fffc CR3: 0000000006a0f000 CR4: 00000000003506a0 [ 159.760973][ T313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.768784][ T313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 159.776682][ T313] Call Trace: [ 159.779806][ T313] [ 159.782588][ T313] ? __die_body+0x62/0xb0 [ 159.786751][ T313] ? die_addr+0x9f/0xd0 [ 159.790742][ T313] ? exc_general_protection+0x311/0x4b0 [ 159.796126][ T313] ? check_panic_on_warn+0x65/0xb0 [ 159.801072][ T313] ? asm_exc_general_protection+0x27/0x30 [ 159.806628][ T313] ? check_panic_on_warn+0x5b/0xb0 [ 159.811578][ T313] ? __list_del_entry_valid+0x49/0x120 [ 159.816880][ T313] ? __list_del_entry_valid+0x75/0x120 [ 159.822331][ T313] binder_release_work+0xcd/0x680 [ 159.827267][ T313] binder_deferred_func+0x1847/0x1bc0 [ 159.832473][ T313] ? read_word_at_a_time+0x12/0x20 [ 159.837429][ T313] process_one_work+0x6bb/0xc10 [ 159.842109][ T313] worker_thread+0xad5/0x12a0 [ 159.846623][ T313] kthread+0x421/0x510 [ 159.850523][ T313] ? worker_clr_flags+0x180/0x180 [ 159.855388][ T313] ? kthread_blkcg+0xd0/0xd0 [ 159.859813][ T313] ret_from_fork+0x1f/0x30 [ 159.864073][ T313] [ 159.866928][ T313] Modules linked in: [ 159.870955][ T313] ---[ end trace a39e34fd4c601da6 ]--- [ 159.876218][ T313] RIP: 0010:__list_del_entry_valid+0x75/0x120 [ 159.882295][ T313] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 cc 90 48 ff 49 8b 17 4c 39 f2 75 [ 159.901805][ T313] RSP: 0018:ffffc90000a67c00 EFLAGS: 00010a06 [ 159.907688][ T313] RAX: 1490005ea0000027 RBX: ffff88812cf14c00 RCX: ffffffff826a1859 [ 159.915452][ T313] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff88811198e700 [ 159.915912][ T4982] incfs: Options parsing error. -22 [ 159.923268][ T313] RBP: ffffc90000a67c20 R08: ffffffff8141997b R09: 0000000000000003 [ 159.928596][ T4982] incfs: mount failed -22 [ 159.936083][ T313] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: dffffc0000000000 [ 159.948085][ T313] R13: ffff88811198e700 R14: ffff88811198e700 R15: a48002f500000139 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 159.952819][ T30] audit: type=1400 audit(1729033648.163:1457): avc: denied { write } for pid=280 comm="syz-executor" path="pipe:[13440]" dev="pipefs" ino=13440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 159.955871][ T313] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 159.987825][ T313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.994218][ T313] CR2: 0000001b2f61fffc CR3: 0000000006a0f000 CR4: 00000000003506a0 [ 160.002091][ T313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.010142][ T313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.018097][ T313] Kernel panic - not syncing: Fatal exception [ 160.024134][ T313] Kernel Offset: disabled [ 160.028254][ T313] Rebooting in 86400 seconds..