last executing test programs: 4.920925894s ago: executing program 0 (id=774): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0000070000000700b27814d0fc"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.023900104s ago: executing program 0 (id=805): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x22, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d80), 0x0}) 2.778131745s ago: executing program 2 (id=812): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) close_range(r1, 0xffffffffffffffff, 0x0) 2.751238618s ago: executing program 2 (id=813): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000f80)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@dmask={'dmask', 0x3d, 0x1ff}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0x8}}, {@utf8}, {@fmask={'fmask', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) 2.713036251s ago: executing program 4 (id=814): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 2.680661193s ago: executing program 4 (id=815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x10) 2.656514226s ago: executing program 4 (id=816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000540)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.591134061s ago: executing program 4 (id=817): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cc]}, 0x45c) ioctl$UI_SET_PROPBIT(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000005c0), 0x200005d8) 2.590340171s ago: executing program 2 (id=818): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2e, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_mount_image$fuse(&(0x7f0000000100), 0x0, 0x2000000, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@allow_other}], [{@appraise}]}}, 0x1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 2.505974128s ago: executing program 2 (id=819): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8086, &(0x7f0000000480)={[{@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa2a4}}]}, 0x1, 0x4a9, &(0x7f0000001040)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2.287577687s ago: executing program 2 (id=820): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2.193692525s ago: executing program 2 (id=821): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x90, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.054020976s ago: executing program 4 (id=822): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200), 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.261022373s ago: executing program 4 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000005c0)}, 0x20) syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000003000000000000080045000024000000000015"], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c9024", @ANYRES16=r1], 0x0) 1.221551716s ago: executing program 1 (id=825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3fc}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.141434184s ago: executing program 1 (id=826): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 1.092612458s ago: executing program 1 (id=827): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800083}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c) 991.058076ms ago: executing program 1 (id=829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x8, &(0x7f00000001c0)) 885.001115ms ago: executing program 0 (id=833): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4140aecd, &(0x7f00000001c0)=ANY=[]) 853.166768ms ago: executing program 0 (id=835): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000240)='syscall\x00') syz_usb_disconnect(0xffffffffffffffff) syz_fuse_handle_req(r2, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 630.104526ms ago: executing program 1 (id=836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 629.943147ms ago: executing program 3 (id=837): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000001c0)=""/59, 0x3b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008031, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000040)=""/56, 0x38) 617.241847ms ago: executing program 3 (id=838): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@noinit_itable}, {@nobh}, {@i_version}]}, 0x1, 0xb90, &(0x7f0000003380)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_open_dev$vcsu(0x0, 0x1, 0x10000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20008}) 605.641009ms ago: executing program 1 (id=839): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r1}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000020100102505a1a4400000000001090244000101000000090400001602020000052406000005240000000d240f01060000000000000000090581032000000000090582020800000000090503020002"], 0x0) 486.118909ms ago: executing program 3 (id=840): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@link_local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}}}, 0x0) 399.631766ms ago: executing program 3 (id=841): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 353.68061ms ago: executing program 3 (id=842): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000af00)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) lgetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) 331.106442ms ago: executing program 3 (id=843): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r2) 133.563648ms ago: executing program 0 (id=844): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x11, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0xfff}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@acl}]}, 0x2, 0x247, &(0x7f0000000480)="$eJzs3T1oLFUYBuB3ZneNuXeRqzaC+AMiooFw7QSba6MQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFjZnURishp1484l8zwwmZ+cM98Zdt6z28xugMa6kuRaklaSqSSdJMXxBndXy5XD3fXJ7fmk13vip2LQrtqvHPW7nGQtyUNJtsoiL7WTlc1n9n7Zeey+N5c7976/+fTkWC/y0P7e7uMH782+8dHMgytffPXDbJFr6f7pus5fMeRYu0hu+T+KXSeKdt0j4J+Ye+3Dr/u5vzXJPYP8d1KmevHeWrphq5MH3v2rvm//+OXt4xwrcP56vU7/PXCtBzROmaSbopxOUm2X5fR09Rn+m9al8uXFpVenXlxcXnih7pkKOC/dZPfRTyY+vnwi/9+3qvwDF1c//0/ObXzb3z5o1T0aYCzuqFb9/E89t3p/5B8aR/6hueQfmkv+obnkH5pL/qG55B8ujIlTRzp/30H+obnkH5pL/qG5jucfAGiW3kTdTyADdal7/gEAAAAAAAAAAAAAAAAAAE5bn9yeP1rGVfOzd5L9R5K0h9VvDX6POLlx8PfSz0W/2R+KqttInr1rxBOM6IOan76+6bt6639+Z731VxeStdeTXG23T99/xeH999/dfMb/O8+PWOBfKk7sP/zUeOuf9NtGvfVndpJP+/PP1WHzT5nbBuvh80/37K9YPtMrv454AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMbm9wAAAP//dCltUw==") r0 = syz_clone(0x0, 0x0, 0x61, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x2e4}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 0s ago: executing program 0 (id=845): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8086, &(0x7f0000000480)={[{@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa2a4}}]}, 0x1, 0x4a9, &(0x7f0000001040)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.121420][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.129839][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.137531][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.145990][ T1410] device veth0_vlan entered promiscuous mode [ 57.161408][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.170684][ T1410] device veth1_macvtap entered promiscuous mode [ 57.180816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.193790][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.229336][ T1432] loop4: detected capacity change from 0 to 512 [ 57.283174][ T432] petalynx 0003:18B1:0037.0013: collection stack underflow [ 57.290239][ T432] petalynx 0003:18B1:0037.0013: item 0 1 0 12 parsing failed [ 57.297498][ T318] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 57.305297][ T432] petalynx 0003:18B1:0037.0013: parse failed [ 57.313272][ T432] petalynx: probe of 0003:18B1:0037.0013 failed with error -22 [ 57.315608][ T1432] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.400: inode #1: comm syz.4.400: iget: illegal inode # [ 57.333665][ T1432] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.400: error while reading EA inode 1 err=-117 [ 57.346357][ T1432] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.400: inode #1: comm syz.4.400: iget: illegal inode # [ 57.359423][ T1432] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.400: error while reading EA inode 1 err=-117 [ 57.371921][ T1432] EXT4-fs (loop4): 1 orphan inode deleted [ 57.377781][ T1432] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 57.486006][ T329] usb 3-1: USB disconnect, device number 11 [ 57.499807][ T1442] loop4: detected capacity change from 0 to 256 [ 57.533180][ T1442] exfat: Deprecated parameter 'namecase' [ 57.538752][ T1442] exfat: Deprecated parameter 'utf8' [ 57.543956][ T1442] exfat: Deprecated parameter 'namecase' [ 57.577285][ T1442] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 57.603159][ T8] device bridge_slave_1 left promiscuous mode [ 57.609165][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.616677][ T8] device bridge_slave_0 left promiscuous mode [ 57.623752][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.632027][ T8] device veth0_vlan left promiscuous mode [ 57.662413][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.674444][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.684078][ T318] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 57.693555][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.702146][ T318] usb 1-1: config 0 descriptor?? [ 58.082048][ T1457] loop2: detected capacity change from 0 to 512 [ 58.142798][ T1457] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.153846][ T1457] EXT4-fs (loop2): 1 truncate cleaned up [ 58.159303][ T1457] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 58.178235][ T1457] syz.2.416[1457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.178318][ T1457] syz.2.416[1457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.190970][ T318] belkin 0003:1020:0006.0014: item fetching failed at offset 4/5 [ 58.210187][ T318] belkin 0003:1020:0006.0014: parse failed [ 58.215994][ T318] belkin: probe of 0003:1020:0006.0014 failed with error -22 [ 58.240586][ T1460] loop1: detected capacity change from 0 to 1024 [ 58.273731][ T1460] EXT4-fs (loop1): Ignoring removed oldalloc option [ 58.293670][ T1460] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 58.325107][ T1004] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /26/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.346775][ T1004] EXT4-fs error (device loop1): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.366312][ T1004] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 58.377748][ T1004] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /26/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.399509][ T1004] EXT4-fs error (device loop1): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.418630][ T1004] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 58.430207][ T318] usb 1-1: USB disconnect, device number 11 [ 58.431209][ T1004] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /26/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.457437][ T1004] EXT4-fs error (device loop1): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.476981][ T1004] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 58.491712][ T1004] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /26/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.515579][ T1004] EXT4-fs error (device loop1): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.535401][ T1004] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 58.548488][ T1004] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /26/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.570022][ T1004] EXT4-fs error (device loop1): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.590505][ T1004] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 58.602473][ T1004] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 58.614465][ T1004] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 58.626300][ T1004] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 58.638174][ T1004] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 58.650173][ T1004] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 58.876558][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.883441][ T1474] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.890640][ T1474] device bridge_slave_0 entered promiscuous mode [ 58.898756][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.905868][ T1474] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.913372][ T1474] device bridge_slave_1 entered promiscuous mode [ 58.969820][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.976696][ T1474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.983819][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.990562][ T1474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.013711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.021460][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.029098][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.039755][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.047881][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.054767][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.065160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.073549][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.080379][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.092404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.103638][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.117899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.125992][ T329] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 59.138277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.146386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.153974][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.162690][ T1474] device veth0_vlan entered promiscuous mode [ 59.175161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.184309][ T1474] device veth1_macvtap entered promiscuous mode [ 59.194426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.204183][ T1014] device bridge_slave_1 left promiscuous mode [ 59.210130][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.217529][ T1014] device bridge_slave_0 left promiscuous mode [ 59.223756][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.242345][ T1304] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 59.306246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.374687][ T1487] loop1: detected capacity change from 0 to 4096 [ 59.444913][ T1487] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: writeback. [ 59.513007][ T329] usb 3-1: config 1 interface 0 has no altsetting 0 [ 59.533962][ T1490] syz.1.430[1490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.534043][ T1490] syz.1.430[1490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.578181][ T1494] loop1: detected capacity change from 0 to 1024 [ 59.622495][ T1304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.633181][ T1494] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 59.636921][ T1304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.651847][ T1494] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 59.652259][ T1304] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 59.687339][ T1304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.695271][ T329] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 59.704763][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.716054][ T1304] usb 1-1: config 0 descriptor?? [ 59.720889][ T329] usb 3-1: Product: syz [ 59.724881][ T329] usb 3-1: Manufacturer: syz [ 59.729249][ T329] usb 3-1: SerialNumber: syz [ 60.103704][ T299] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 60.183551][ T1304] petalynx 0003:18B1:0037.0015: collection stack underflow [ 60.190635][ T1304] petalynx 0003:18B1:0037.0015: item 0 1 0 12 parsing failed [ 60.198110][ T1304] petalynx 0003:18B1:0037.0015: parse failed [ 60.203962][ T1304] petalynx: probe of 0003:18B1:0037.0015 failed with error -22 [ 60.394897][ T1304] usb 1-1: USB disconnect, device number 12 [ 60.423855][ T329] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 60.462403][ T299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.472533][ T299] usb 2-1: config 0 has no interfaces? [ 60.477905][ T299] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 60.486776][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.495554][ T299] usb 2-1: config 0 descriptor?? [ 60.582641][ T299] Bluetooth: hci0: command 0x1003 tx timeout [ 60.588565][ T47] Bluetooth: hci0: sending frame failed (-49) [ 60.625739][ T299] usb 3-1: USB disconnect, device number 12 [ 60.632554][ T299] usblp0: removed [ 60.734514][ T1304] usb 2-1: USB disconnect, device number 8 [ 60.920048][ T1510] loop0: detected capacity change from 0 to 2048 [ 60.964135][ T1510] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.980586][ T1510] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.995582][ T1510] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 61.007979][ T1510] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.007979][ T1510] [ 61.017612][ T1510] EXT4-fs (loop0): Total free blocks count 0 [ 61.023461][ T1510] EXT4-fs (loop0): Free/Dirty block details [ 61.029179][ T1510] EXT4-fs (loop0): free_blocks=2415919104 [ 61.034733][ T1510] EXT4-fs (loop0): dirty_blocks=16 [ 61.039651][ T1510] EXT4-fs (loop0): Block reservation details [ 61.045487][ T1510] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 61.051843][ T1514] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 61.064317][ T1514] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.064317][ T1514] [ 61.135510][ T1518] loop0: detected capacity change from 0 to 256 [ 61.170984][ T1516] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.178050][ T1516] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.185597][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 61.185612][ T30] audit: type=1326 audit(1729101585.134:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1524 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5409cbaff9 code=0x7ffc0000 [ 61.217583][ T1516] device bridge_slave_0 entered promiscuous mode [ 61.222033][ T1517] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 61.230030][ T1516] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.241125][ T30] audit: type=1326 audit(1729101585.184:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1524 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5409cbaff9 code=0x7ffc0000 [ 61.243899][ T1516] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.276382][ T1516] device bridge_slave_1 entered promiscuous mode [ 61.293609][ T1517] FAT-fs (loop0): Filesystem has been set read-only [ 61.305485][ T1527] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1527 comm=syz.1.443 [ 61.306615][ T30] audit: type=1326 audit(1729101585.214:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1524 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5409cbaff9 code=0x7ffc0000 [ 61.353502][ T30] audit: type=1326 audit(1729101585.214:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1524 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f5409cbaff9 code=0x7ffc0000 [ 61.354485][ T1529] loop2: detected capacity change from 0 to 1024 [ 61.381586][ T30] audit: type=1326 audit(1729101585.214:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1524 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5409cbaff9 code=0x7ffc0000 [ 61.512601][ T1544] syz.0.450[1544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.512683][ T1544] syz.0.450[1544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.533114][ T1516] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.551004][ T1516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.558150][ T1516] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.565023][ T1516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.616595][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.626355][ T30] audit: type=1326 audit(1729101585.574:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1552 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec6ff9ff9 code=0x7ffc0000 [ 61.649696][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.657633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.665530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.673021][ T30] audit: type=1326 audit(1729101585.574:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1552 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec6ff9ff9 code=0x7ffc0000 [ 61.681771][ T1557] loop1: detected capacity change from 0 to 128 [ 61.712676][ T30] audit: type=1326 audit(1729101585.574:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1552 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f9ec6ff9ff9 code=0x7ffc0000 [ 61.736345][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.745071][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.748233][ T30] audit: type=1326 audit(1729101585.574:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1552 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec6ff9ff9 code=0x7ffc0000 [ 61.751936][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.755846][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.786900][ T30] audit: type=1400 audit(1729101585.724:546): avc: denied { listen } for pid=1558 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.791017][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.816013][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.823327][ T1557] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.834822][ T1557] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 61.860216][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.877562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.894655][ T1516] device veth0_vlan entered promiscuous mode [ 61.902456][ T1304] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 61.917148][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.925497][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.933766][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.941243][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.949093][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.960169][ T1516] device veth1_macvtap entered promiscuous mode [ 61.974403][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.985015][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.042155][ T1570] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3602751755 (461152224640 ns) > initial count (197015925504 ns). Using initial count to start timer. [ 62.073155][ T1573] loop2: detected capacity change from 0 to 256 [ 62.116427][ T1573] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 62.132541][ T63] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 62.186724][ T1578] loop2: detected capacity change from 0 to 2048 [ 62.206434][ T1578] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 62.224050][ T1578] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 62.282346][ T1304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.293648][ T1304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.303982][ T1304] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 62.313058][ T1304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.325483][ T1304] usb 1-1: config 0 descriptor?? [ 62.373036][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 62.512292][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.526753][ T63] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 62.540147][ T63] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 62.549102][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.557663][ T63] usb 2-1: config 0 descriptor?? [ 62.672527][ T1302] Bluetooth: hci0: command 0x1001 tx timeout [ 62.678414][ T47] Bluetooth: hci0: sending frame failed (-49) [ 62.696147][ T1597] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 62.734124][ T1601] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 62.813226][ T1304] smartjoyplus 0003:6666:8801.0016: unknown main item tag 0x0 [ 62.826598][ T1304] smartjoyplus 0003:6666:8801.0016: ignoring exceeding usage max [ 62.836126][ T1304] smartjoyplus 0003:6666:8801.0016: usage index exceeded [ 62.843126][ T1304] smartjoyplus 0003:6666:8801.0016: item 0 0 2 0 parsing failed [ 62.851149][ T1304] smartjoyplus 0003:6666:8801.0016: parse failed [ 62.864390][ T1304] smartjoyplus: probe of 0003:6666:8801.0016 failed with error -22 [ 62.922331][ T63] usbhid 2-1:0.0: can't add hid device: -71 [ 62.928200][ T63] usbhid: probe of 2-1:0.0 failed with error -71 [ 62.943681][ T63] usb 2-1: USB disconnect, device number 9 [ 63.017501][ T6] usb 1-1: USB disconnect, device number 13 [ 63.262350][ T299] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 63.466013][ T1633] loop1: detected capacity change from 0 to 128 [ 63.502314][ T299] usb 4-1: Using ep0 maxpacket: 8 [ 63.514899][ T1633] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.525481][ T1633] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 63.608688][ T1633] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:427: inode #2: comm syz.1.489: No space for directory leaf checksum. Please run e2fsck -D. [ 63.636034][ T1474] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=1012, inode=2371082376, rec_len=16063, size=1024 fake=0 [ 63.656134][ T299] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.667294][ T1474] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 63.684306][ T1474] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 63.700178][ T1474] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 63.717332][ T1474] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 63.731723][ T1474] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 63.750915][ T1474] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 63.770334][ T1474] EXT4-fs error (device loop1): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory block failed checksum [ 63.783644][ T1474] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 63.800660][ T1474] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 63.814896][ T1474] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 63.829507][ T1474] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 63.837116][ T1652] loop0: detected capacity change from 0 to 512 [ 63.843780][ T1474] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 63.852503][ T299] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.873644][ T1474] EXT4-fs error (device loop1): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory block failed checksum [ 63.873940][ T299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.886417][ T1474] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 63.896875][ T299] usb 4-1: Product: syz [ 63.913247][ T299] usb 4-1: Manufacturer: syz [ 63.914028][ T1474] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 63.918202][ T1652] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 63.932429][ T1474] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 63.937692][ T299] usb 4-1: SerialNumber: syz [ 63.954691][ T1474] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 63.957634][ T1652] EXT4-fs (loop0): mount failed [ 63.973584][ T1474] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 64.064447][ T1652] loop0: detected capacity change from 0 to 128 [ 64.132302][ T638] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 64.168393][ T1658] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1658 comm=syz.0.500 [ 64.257721][ T1662] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.264745][ T1662] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.271976][ T1662] device bridge_slave_0 entered promiscuous mode [ 64.279117][ T1662] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.286007][ T1662] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.293457][ T1662] device bridge_slave_1 entered promiscuous mode [ 64.344761][ T1662] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.351617][ T1662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.358765][ T1662] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.365635][ T1662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.388826][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.396381][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.404110][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.413891][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.421952][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.428830][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.437582][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.445859][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.452738][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.466843][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.476218][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.482357][ T63] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 64.492403][ T638] usb 3-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 64.502869][ T638] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.512750][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.521120][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.529358][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.537031][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.546347][ T1662] device veth0_vlan entered promiscuous mode [ 64.557430][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.566770][ T1662] device veth1_macvtap entered promiscuous mode [ 64.577122][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.585506][ T638] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 64.594520][ T638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 64.602457][ T638] usb 3-1: SerialNumber: syz [ 64.614568][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.659306][ T1669] capability: warning: `syz.1.504' uses deprecated v2 capabilities in a way that may be insecure [ 64.716450][ T1676] syz.1.507[1676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.716514][ T1676] syz.1.507[1676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.742359][ T1304] Bluetooth: hci0: command 0x1009 tx timeout [ 64.862943][ T638] usb 3-1: 0:2 : does not exist [ 64.882316][ T63] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.892288][ T63] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.912990][ T8] device bridge_slave_1 left promiscuous mode [ 64.919109][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.929568][ T8] device bridge_slave_0 left promiscuous mode [ 64.935958][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.940052][ T1688] loop1: detected capacity change from 0 to 1024 [ 64.950292][ T8] device veth1_macvtap left promiscuous mode [ 64.956178][ T8] device veth0_vlan left promiscuous mode [ 64.982344][ T63] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 64.991220][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 65.003608][ T63] usb 1-1: SerialNumber: syz [ 65.011373][ T1688] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,abort,,errors=continue. Quota mode: none. [ 65.111983][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.119766][ T299] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 65.126742][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.134436][ T299] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 65.139926][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.147690][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.155323][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.162904][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.170426][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.178431][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.186133][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.193666][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.201172][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.208773][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.216330][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.223934][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.231529][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.239130][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.246692][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.254252][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.261720][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.269357][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.276889][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.280645][ T1301] usb 3-1: USB disconnect, device number 13 [ 65.284411][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.284436][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.284456][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.284477][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.284508][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.291210][ T63] usb 1-1: 0:2 : does not exist [ 65.297836][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.297862][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.319794][ T63] usb 1-1: USB disconnect, device number 14 [ 65.328581][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.362961][ T299] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 65.373131][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.380707][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.382286][ T1304] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 65.392143][ T299] usb 4-1: USB disconnect, device number 6 [ 65.406920][ T638] hid-generic 0000:0000:FFFFFFFF.0017: unknown main item tag 0x0 [ 65.414898][ T299] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 65.445618][ T638] hid-generic 0000:0000:FFFFFFFF.0017: hidraw0: HID v0.01 Device [syz0] on syz0 [ 65.802368][ T1304] usb 2-1: config 0 has no interfaces? [ 65.811567][ T1304] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 65.820870][ T1304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.829982][ T1304] usb 2-1: config 0 descriptor?? [ 66.295282][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 66.295299][ T30] audit: type=1400 audit(1729101590.244:599): avc: denied { bind } for pid=1744 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.361458][ T1304] usb 2-1: USB disconnect, device number 10 [ 66.367799][ T30] audit: type=1400 audit(1729101590.314:600): avc: denied { append } for pid=1750 comm="syz.2.527" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.414743][ T30] audit: type=1400 audit(1729101590.364:601): avc: denied { associate } for pid=1753 comm="syz.3.528" name="2" dev="devpts" ino=5 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 66.495334][ T30] audit: type=1326 audit(1729101590.444:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93e0d9ff9 code=0x7ffc0000 [ 66.538650][ T30] audit: type=1326 audit(1729101590.464:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe93e0d8990 code=0x7ffc0000 [ 66.562597][ T30] audit: type=1326 audit(1729101590.464:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe93e0db827 code=0x7ffc0000 [ 66.589441][ T30] audit: type=1326 audit(1729101590.464:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe93e0d9ff9 code=0x7ffc0000 [ 66.659482][ T30] audit: type=1326 audit(1729101590.464:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe93e0db827 code=0x7ffc0000 [ 66.682811][ T30] audit: type=1326 audit(1729101590.464:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe93e0d8c8a code=0x7ffc0000 [ 66.709918][ T30] audit: type=1326 audit(1729101590.464:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93e0d9ff9 code=0x7ffc0000 [ 66.783641][ T1772] device veth0_vlan left promiscuous mode [ 66.789610][ T1772] device veth0_vlan entered promiscuous mode [ 66.812849][ T1772] syz.2.536 (1772) used greatest stack depth: 19136 bytes left [ 66.913377][ T1791] loop2: detected capacity change from 0 to 1024 [ 66.928630][ T1795] loop1: detected capacity change from 0 to 2048 [ 66.965791][ T1791] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 66.985306][ T1795] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.994570][ T1791] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000000006,mblk_io_submit,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,inlinecrypt,bsddf,,errors=continue. Quota mode: none. [ 67.113205][ T1811] mmap: syz.2.552 (1811) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 67.166311][ T1818] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 67.207797][ T1825] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.248977][ T1829] netlink: 'syz.3.560': attribute type 15 has an invalid length. [ 67.402297][ T299] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 67.618404][ T1841] netlink: 'syz.3.565': attribute type 15 has an invalid length. [ 67.642561][ T299] usb 2-1: Using ep0 maxpacket: 8 [ 67.762446][ T299] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 67.773857][ T299] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 67.783536][ T299] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 67.792569][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.012337][ T638] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 68.072394][ T299] usb 2-1: string descriptor 0 read error: -71 [ 68.078679][ T299] hub 2-1:32.0: USB hub found [ 68.142329][ T299] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 68.182582][ T299] usb 2-1: USB disconnect, device number 11 [ 68.342432][ T1302] Bluetooth: hci1: command 0x1003 tx timeout [ 68.348375][ T728] Bluetooth: hci1: sending frame failed (-49) [ 68.382376][ T638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.393346][ T638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.402938][ T638] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 68.411756][ T638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.420326][ T638] usb 4-1: config 0 descriptor?? [ 68.822717][ T318] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 68.903252][ T638] betop 0003:20BC:5500.0018: unknown main item tag 0x0 [ 68.910118][ T638] betop 0003:20BC:5500.0018: unexpected long global item [ 68.917210][ T638] betop 0003:20BC:5500.0018: parse failed [ 68.922823][ T638] betop: probe of 0003:20BC:5500.0018 failed with error -22 [ 69.019315][ T1855] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.026193][ T1855] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.033512][ T1855] device bridge_slave_0 entered promiscuous mode [ 69.040390][ T1855] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.047261][ T1855] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.054472][ T1855] device bridge_slave_1 entered promiscuous mode [ 69.106401][ T1302] usb 4-1: USB disconnect, device number 7 [ 69.108951][ T1855] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.119049][ T1855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.126195][ T1855] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.133075][ T1855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.161916][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.170441][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.177973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.185365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.192557][ T318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.203307][ T318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.212880][ T318] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 69.221653][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.231176][ T318] usb 2-1: config 0 descriptor?? [ 69.234735][ T1304] Bluetooth: hci2: command 0x1003 tx timeout [ 69.241811][ T729] Bluetooth: hci2: sending frame failed (-49) [ 69.249609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.257857][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.264768][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.273701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.281896][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.288773][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.296003][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.304272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.320425][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.333365][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.341292][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.349049][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.357638][ T1855] device veth0_vlan entered promiscuous mode [ 69.374496][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.383899][ T1855] device veth1_macvtap entered promiscuous mode [ 69.395057][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.407695][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.702483][ T299] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 69.712694][ T318] hid (null): bogus close delimiter [ 69.803351][ T8] device bridge_slave_1 left promiscuous mode [ 69.809418][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.817031][ T8] device bridge_slave_0 left promiscuous mode [ 69.823088][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.831114][ T8] device veth1_macvtap left promiscuous mode [ 69.837159][ T8] device veth0_vlan left promiscuous mode [ 69.972486][ T318] usb 2-1: language id specifier not provided by device, defaulting to English [ 70.062354][ T299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.073242][ T299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.082760][ T299] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 70.091550][ T299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.100782][ T299] usb 5-1: config 0 descriptor?? [ 70.212415][ T318] uclogic 0003:256C:006D.0019: failed retrieving Huion firmware version: -71 [ 70.221125][ T318] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 70.228411][ T318] uclogic: probe of 0003:256C:006D.0019 failed with error -71 [ 70.236732][ T318] usb 2-1: USB disconnect, device number 12 [ 70.422712][ T1302] Bluetooth: hci1: command 0x1001 tx timeout [ 70.428709][ T729] Bluetooth: hci1: sending frame failed (-49) [ 70.594631][ T299] isku 0003:1E7D:319C.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 70.697107][ T1881] loop1: detected capacity change from 0 to 512 [ 70.758613][ T1881] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 70.770067][ T1881] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 70.780003][ T1881] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.579: Corrupt directory, running e2fsck is recommended [ 70.794274][ T1881] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 70.802348][ T1881] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.579: corrupted in-inode xattr [ 70.814576][ T1881] EXT4-fs (loop1): Remounting filesystem read-only [ 70.820959][ T1881] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.579: couldn't read orphan inode 15 (err -117) [ 70.841283][ T1881] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 70.872330][ T299] isku 0003:1E7D:319C.001A: couldn't init struct isku_device [ 70.880623][ T299] isku 0003:1E7D:319C.001A: couldn't install keyboard [ 70.891226][ T1881] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 70.902986][ T1881] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 70.906039][ T299] isku: probe of 0003:1E7D:319C.001A failed with error -5 [ 70.914133][ T1881] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.579: Corrupt directory, running e2fsck is recommended [ 71.009266][ T1889] loop1: detected capacity change from 0 to 512 [ 71.031282][ T1887] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.038520][ T1887] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.043630][ T1889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.048159][ T1887] device bridge_slave_0 entered promiscuous mode [ 71.067038][ T1887] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.067494][ T1889] EXT4-fs (loop1): 1 truncate cleaned up [ 71.074181][ T1887] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.079423][ T1889] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 71.102774][ T1887] device bridge_slave_1 entered promiscuous mode [ 71.109609][ T1301] usb 5-1: USB disconnect, device number 7 [ 71.183460][ T1887] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.190354][ T1887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.197483][ T1887] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.204343][ T1887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.243524][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.250726][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.259257][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.268437][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.286632][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.294754][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.301600][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.309435][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.317539][ T1302] Bluetooth: hci2: command 0x1001 tx timeout [ 71.317780][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.330217][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.333624][ T729] Bluetooth: hci2: sending frame failed (-49) [ 71.354145][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.369492][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.408690][ T1895] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.415582][ T1895] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.422876][ T1895] device bridge_slave_0 entered promiscuous mode [ 71.429817][ T1895] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.436721][ T1895] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.444552][ T1895] device bridge_slave_1 entered promiscuous mode [ 71.479251][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.500881][ T10] device bridge_slave_1 left promiscuous mode [ 71.507053][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.514591][ T10] device bridge_slave_0 left promiscuous mode [ 71.520544][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.528720][ T10] device veth1_macvtap left promiscuous mode [ 71.534667][ T10] device veth0_vlan left promiscuous mode [ 71.647221][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 71.647237][ T30] audit: type=1400 audit(1729101595.594:722): avc: denied { read write } for pid=1899 comm="syz.4.588" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.650628][ T1887] device veth0_vlan entered promiscuous mode [ 71.663660][ T30] audit: type=1400 audit(1729101595.594:723): avc: denied { open } for pid=1899 comm="syz.4.588" path="/dev/raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.710436][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.718689][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.726283][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.751412][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.764016][ T1887] device veth1_macvtap entered promiscuous mode [ 71.777033][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.788902][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.811939][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.822050][ T30] audit: type=1400 audit(1729101595.764:724): avc: denied { mounton } for pid=1887 comm="syz-executor" path="/root/syzkaller.eAyarN/syz-tmp" dev="sda1" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.824674][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.855267][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.857397][ T30] audit: type=1400 audit(1729101595.804:725): avc: denied { mount } for pid=1887 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.862118][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.884454][ T30] audit: type=1400 audit(1729101595.804:726): avc: denied { mount } for pid=1887 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.892139][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.922398][ T318] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 71.922692][ T30] audit: type=1400 audit(1729101595.804:727): avc: denied { mounton } for pid=1887 comm="syz-executor" path="/root/syzkaller.eAyarN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.969675][ T30] audit: type=1400 audit(1729101595.804:728): avc: denied { mounton } for pid=1887 comm="syz-executor" path="/root/syzkaller.eAyarN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.997349][ T30] audit: type=1400 audit(1729101595.864:729): avc: denied { mounton } for pid=1887 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.997617][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.020356][ T30] audit: type=1400 audit(1729101595.864:730): avc: denied { mount } for pid=1887 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 72.050824][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.051279][ T30] audit: type=1400 audit(1729101595.864:731): avc: denied { mounton } for pid=1887 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 72.057696][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.092474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.101167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.118006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.126288][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.151891][ T1895] device veth0_vlan entered promiscuous mode [ 72.161586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.162282][ T318] usb 5-1: Using ep0 maxpacket: 32 [ 72.170709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.184405][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.192454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.213718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.221097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.228676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.237248][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.262393][ T1895] device veth1_macvtap entered promiscuous mode [ 72.274210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.282713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.290942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.298917][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 72.299332][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 72.321783][ T318] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 72.331047][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.339887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.348531][ T318] usb 5-1: config 0 descriptor?? [ 72.354371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.372522][ T1900] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 72.393244][ T318] hub 5-1:0.0: USB hub found [ 72.512518][ T1304] Bluetooth: hci1: command 0x1009 tx timeout [ 72.537567][ T1924] bridge: RTM_NEWNEIGH with invalid ether address [ 72.612300][ T318] hub 5-1:0.0: 2 ports detected [ 72.710896][ T10] device bridge_slave_1 left promiscuous mode [ 72.712282][ T299] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 72.717273][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.733471][ T10] device bridge_slave_0 left promiscuous mode [ 72.739714][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.748830][ T10] device veth1_macvtap left promiscuous mode [ 72.755087][ T10] device veth0_vlan left promiscuous mode [ 72.972357][ T299] usb 2-1: Using ep0 maxpacket: 16 [ 73.052536][ T20] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 73.092404][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.103482][ T299] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.116240][ T299] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.125046][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.133800][ T299] usb 2-1: config 0 descriptor?? [ 73.294208][ T318] usb 5-1: USB disconnect, device number 8 [ 73.382675][ T1304] Bluetooth: hci2: command 0x1009 tx timeout [ 73.422472][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.433327][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.442926][ T20] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 73.451808][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.460693][ T20] usb 4-1: config 0 descriptor?? [ 73.614281][ T299] HID 045e:07da: Invalid code 65791 type 1 [ 73.623416][ T299] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001B/input/input10 [ 73.636406][ T299] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 73.936708][ T1939] loop4: detected capacity change from 0 to 40427 [ 73.944731][ T20] hid-steam 0003:28DE:1142.001C: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 73.957684][ T1939] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 73.965689][ T1939] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 73.976202][ T1939] F2FS-fs (loop4): Found nat_bits in checkpoint [ 74.008314][ T1939] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 74.015290][ T1939] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 74.151243][ T1301] usb 4-1: USB disconnect, device number 8 [ 74.224375][ T1948] loop4: detected capacity change from 0 to 128 [ 74.273689][ T1948] EXT4-fs (loop4): Test dummy encryption mode enabled [ 74.281647][ T1948] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 74.294206][ T1948] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038 (0x7fffffff) [ 74.365710][ T1948] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 74.375433][ T1948] EXT4-fs (loop4): Online defrag not supported for encrypted files [ 74.436818][ T1304] usb 2-1: USB disconnect, device number 13 [ 74.453770][ T1954] binfmt_misc: register: failed to install interpreter file ./file0 [ 74.490494][ T1958] loop4: detected capacity change from 0 to 128 [ 74.583020][ T1958] FAT-fs (loop4): bogus number of reserved sectors [ 74.589440][ T1958] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 74.598827][ T1958] FAT-fs (loop4): Can't find a valid FAT filesystem [ 75.002271][ T638] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 75.133999][ T1977] loop1: detected capacity change from 0 to 40427 [ 75.223889][ T1977] F2FS-fs (loop1): invalid crc value [ 75.234379][ T1977] F2FS-fs (loop1): Found nat_bits in checkpoint [ 75.242416][ T638] usb 4-1: Using ep0 maxpacket: 8 [ 75.267990][ T1977] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 75.274882][ T1977] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 75.293357][ T1977] F2FS-fs (loop1): Unrecognized mount option "ÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value [ 75.309353][ T1977] attempt to access beyond end of device [ 75.309353][ T1977] loop1: rw=2049, want=45104, limit=40427 [ 75.362310][ T638] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 75.370455][ T638] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 75.378727][ T638] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 75.387685][ T638] usb 4-1: config 250 has no interface number 0 [ 75.393897][ T638] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 75.405341][ T638] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 75.415590][ T638] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.425670][ T638] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 75.435784][ T638] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 75.449064][ T638] usb 4-1: config 250 interface 228 has no altsetting 0 [ 75.592462][ T638] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 75.601528][ T638] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 75.609662][ T638] usb 4-1: Product: syz [ 75.614203][ T638] usb 4-1: SerialNumber: syz [ 75.664921][ T638] hub 4-1:250.228: bad descriptor, ignoring hub [ 75.671002][ T638] hub: probe of 4-1:250.228 failed with error -5 [ 75.752262][ T63] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 75.873419][ T638] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 75.961413][ T1987] loop4: detected capacity change from 0 to 131072 [ 76.064113][ T1987] F2FS-fs (loop4): invalid crc value [ 76.071166][ T1987] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 76.096751][ T1987] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 76.152491][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.163540][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.173364][ T63] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 76.182715][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.193181][ T63] usb 2-1: config 0 descriptor?? [ 76.446761][ T1999] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.454065][ T1999] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.461477][ T1999] device bridge_slave_0 entered promiscuous mode [ 76.468984][ T1999] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.476451][ T1999] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.484092][ T1999] device bridge_slave_1 entered promiscuous mode [ 76.522540][ T1969] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 76.565805][ T1999] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.572696][ T1999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.579863][ T1999] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.586748][ T1999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.615951][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.623207][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.630848][ T2005] loop4: detected capacity change from 0 to 40427 [ 76.637609][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.645038][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.660648][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.669028][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.675909][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.683619][ T63] smartjoyplus 0003:6666:8801.001D: unknown main item tag 0x0 [ 76.683836][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.691018][ T63] smartjoyplus 0003:6666:8801.001D: ignoring exceeding usage max [ 76.699259][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.710966][ T63] smartjoyplus 0003:6666:8801.001D: usage index exceeded [ 76.713464][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.720510][ T63] smartjoyplus 0003:6666:8801.001D: item 0 0 2 0 parsing failed [ 76.735268][ T63] smartjoyplus 0003:6666:8801.001D: parse failed [ 76.741469][ T63] smartjoyplus: probe of 0003:6666:8801.001D failed with error -22 [ 76.742153][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.757852][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.761514][ T2005] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.775620][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.789299][ T1999] device veth0_vlan entered promiscuous mode [ 76.796002][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.805349][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.811298][ T2005] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.813200][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.848172][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.856767][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 76.856784][ T30] audit: type=1400 audit(1729101600.804:790): avc: denied { append } for pid=2004 comm="syz.4.623" path="/15/file0/memory.events" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.866518][ T1999] device veth1_macvtap entered promiscuous mode [ 76.908953][ T63] usb 2-1: USB disconnect, device number 14 [ 76.909521][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.920186][ T2005] attempt to access beyond end of device [ 76.920186][ T2005] loop4: rw=34817, want=79912, limit=40427 [ 76.938913][ T1014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.969911][ T30] audit: type=1400 audit(1729101600.914:791): avc: denied { write } for pid=2011 comm="syz.0.621" name="mcfilter6" dev="proc" ino=4026532756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 76.993965][ T1855] attempt to access beyond end of device [ 76.993965][ T1855] loop4: rw=2049, want=45104, limit=40427 [ 77.049326][ T30] audit: type=1400 audit(1729101600.994:792): avc: denied { setopt } for pid=2015 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.222677][ T1969] usb 4-1: failed to restore interface 228 altsetting 255 (error=-71) [ 77.230951][ T1304] usb 4-1: USB disconnect, device number 9 [ 77.238600][ T1304] usblp0: removed [ 77.352302][ T638] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 77.432546][ T63] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 77.452744][ T30] audit: type=1400 audit(1729101601.404:793): avc: denied { name_bind } for pid=2021 comm="syz.1.628" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 77.495311][ T30] audit: type=1400 audit(1729101601.424:794): avc: denied { node_bind } for pid=2021 comm="syz.1.628" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 77.526370][ T1014] device bridge_slave_1 left promiscuous mode [ 77.532568][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.540336][ T1014] device bridge_slave_0 left promiscuous mode [ 77.546927][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.555363][ T1014] device veth1_macvtap left promiscuous mode [ 77.561223][ T1014] device veth0_vlan left promiscuous mode [ 77.568779][ T30] audit: type=1400 audit(1729101601.514:795): avc: denied { create } for pid=2025 comm="syz.1.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.588568][ T30] audit: type=1400 audit(1729101601.534:796): avc: denied { ioctl } for pid=2025 comm="syz.1.630" path="socket:[25287]" dev="sockfs" ino=25287 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.665666][ T2024] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.672754][ T2024] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.679947][ T2024] device bridge_slave_0 entered promiscuous mode [ 77.687167][ T2024] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.694197][ T2024] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.701387][ T2024] device bridge_slave_1 entered promiscuous mode [ 77.712316][ T638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.723158][ T638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.732963][ T638] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 77.741862][ T638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.751234][ T638] usb 1-1: config 0 descriptor?? [ 77.793532][ T2024] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.800407][ T2024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.807550][ T2024] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.814411][ T2024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.836793][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.844482][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.851647][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.861518][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.870013][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.870343][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.881387][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.887668][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.892427][ T20] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 77.897680][ T63] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 77.920533][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.929457][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.932565][ T63] usb 5-1: config 0 descriptor?? [ 77.944244][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.951135][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.958764][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.967441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.987602][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.996838][ T30] audit: type=1400 audit(1729101601.944:797): avc: denied { create } for pid=2033 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.025720][ T30] audit: type=1400 audit(1729101601.944:798): avc: denied { connect } for pid=2033 comm="syz.3.632" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.033755][ T2024] device veth0_vlan entered promiscuous mode [ 78.051919][ T30] audit: type=1400 audit(1729101601.944:799): avc: denied { write } for pid=2033 comm="syz.3.632" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.077096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.086073][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.094250][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.111459][ T2024] device veth1_macvtap entered promiscuous mode [ 78.122535][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.146093][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.155571][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.225238][ T638] hid-steam 0003:28DE:1142.001E: unknown main item tag 0x0 [ 78.244055][ T638] hid-steam 0003:28DE:1142.001E: item fetching failed at offset 2/5 [ 78.263238][ T638] hid-steam 0003:28DE:1142.001E: steam_probe:parse of hid interface failed [ 78.271471][ T2039] loop2: detected capacity change from 0 to 128 [ 78.282355][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.293912][ T638] hid-steam: probe of 0003:28DE:1142.001E failed with error -22 [ 78.302808][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.316973][ T20] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 78.320548][ T2039] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.329225][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.337694][ T2039] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff) [ 78.352336][ T20] usb 2-1: config 0 descriptor?? [ 78.413280][ T63] elo 0003:04E7:0030.001F: item fetching failed at offset 5/7 [ 78.421039][ T63] elo 0003:04E7:0030.001F: parse failed [ 78.431636][ T63] elo: probe of 0003:04E7:0030.001F failed with error -22 [ 78.445187][ T1304] usb 1-1: USB disconnect, device number 15 [ 78.475202][ T2051] loop2: detected capacity change from 0 to 256 [ 78.525573][ T2051] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.572715][ T2051] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.652285][ T1014] device bridge_slave_1 left promiscuous mode [ 78.658276][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.743376][ T1014] device bridge_slave_0 left promiscuous mode [ 78.749447][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.783418][ T1014] device veth1_macvtap left promiscuous mode [ 79.126867][ T6] usb 5-1: USB disconnect, device number 9 [ 80.647997][ T2068] loop0: detected capacity change from 0 to 2048 [ 80.723375][ T2083] syz.2.649[2083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.723455][ T2083] syz.2.649[2083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.750798][ T2068] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 80.811594][ T2068] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.863263][ T20] belkin 0003:1020:0006.0020: item fetching failed at offset 4/5 [ 80.886743][ T20] belkin 0003:1020:0006.0020: parse failed [ 80.895851][ T2101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 80.906240][ T20] belkin: probe of 0003:1020:0006.0020 failed with error -22 [ 80.952364][ T1301] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 81.052254][ T1304] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 81.074714][ T1302] usb 2-1: USB disconnect, device number 15 [ 81.212239][ T1301] usb 5-1: Using ep0 maxpacket: 32 [ 81.302376][ T1304] usb 3-1: Using ep0 maxpacket: 16 [ 81.307605][ T63] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 81.332314][ T1301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.343377][ T1301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.353602][ T1301] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 81.362779][ T1301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.371467][ T1301] usb 5-1: config 0 descriptor?? [ 81.412908][ T1301] hub 5-1:0.0: USB hub found [ 81.422488][ T1304] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.433028][ T1304] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.524639][ T2113] loop0: detected capacity change from 0 to 40427 [ 81.552373][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 81.592538][ T1304] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.601601][ T1304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.610166][ T2113] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 81.617784][ T1304] usb 3-1: Product: syz [ 81.621997][ T1304] usb 3-1: Manufacturer: syz [ 81.626496][ T1304] usb 3-1: SerialNumber: syz [ 81.630817][ T2113] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.632657][ T1301] hub 5-1:0.0: 1 port detected [ 81.640575][ T2113] F2FS-fs (loop0): invalid crc value [ 81.650309][ T2113] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.681758][ T2113] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.688850][ T2113] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.842636][ T63] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 81.851560][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.859346][ T63] usb 4-1: Product: syz [ 81.863375][ T63] usb 4-1: Manufacturer: syz [ 81.867714][ T63] usb 4-1: SerialNumber: syz [ 81.873104][ T63] usb 4-1: config 0 descriptor?? [ 81.912763][ T63] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 81.962389][ T1304] usb 3-1: cannot find UAC_HEADER [ 81.967484][ T1304] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 81.979234][ T1304] usb 3-1: USB disconnect, device number 14 [ 82.082289][ T1302] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 82.116062][ T1301] usb 4-1: USB disconnect, device number 10 [ 82.272340][ T63] hub 5-1:0.0: activate --> -90 [ 82.322300][ T1302] usb 1-1: Using ep0 maxpacket: 16 [ 82.442357][ T1302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.453270][ T1302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.463694][ T1302] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.477314][ T1302] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.486554][ T1302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.498914][ T1302] usb 1-1: config 0 descriptor?? [ 82.505167][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 82.505182][ T30] audit: type=1326 audit(1729101606.454:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2134 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e0358ff9 code=0x7ffc0000 [ 82.534699][ T30] audit: type=1326 audit(1729101606.454:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2134 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e0358ff9 code=0x7ffc0000 [ 82.558111][ T30] audit: type=1326 audit(1729101606.454:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2134 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fc6e0358ff9 code=0x7ffc0000 [ 82.584851][ T30] audit: type=1326 audit(1729101606.454:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2134 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e0358ff9 code=0x7ffc0000 [ 82.613715][ T30] audit: type=1326 audit(1729101606.454:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2134 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e0358ff9 code=0x7ffc0000 [ 82.642109][ T30] audit: type=1400 audit(1729101606.584:851): avc: denied { bind } for pid=2138 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.678584][ T30] audit: type=1400 audit(1729101606.624:852): avc: denied { mount } for pid=2142 comm="syz.1.674" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 82.701186][ T1304] usb 5-1: USB disconnect, device number 10 [ 82.742739][ T30] audit: type=1400 audit(1729101606.694:853): avc: denied { unmount } for pid=1895 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 82.799406][ T30] audit: type=1400 audit(1729101606.714:854): avc: denied { write } for pid=2144 comm="syz.3.675" path="socket:[26655]" dev="sockfs" ino=26655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.858260][ T30] audit: type=1400 audit(1729101606.724:855): avc: denied { name_bind } for pid=2146 comm="syz.2.676" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 82.921821][ T2163] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 82.952350][ T63] usb 5-1-port1: config error [ 83.005054][ T1302] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 83.012103][ T1302] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 83.019332][ T1302] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 83.026427][ T1302] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 83.033566][ T1302] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 83.040549][ T1302] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 83.047580][ T1302] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 83.054706][ T1302] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 83.061714][ T1302] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 83.068957][ T1302] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 83.082327][ T1302] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0021/input/input11 [ 83.100631][ T1302] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 83.122287][ T20] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 83.221085][ T2124] UDC core: couldn't find an available UDC or it's busy: -16 [ 83.229257][ T2124] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 83.242262][ T63] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 83.251435][ T1302] usb 1-1: USB disconnect, device number 16 [ 83.382477][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 83.482313][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 83.512424][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.523207][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.532721][ T20] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 83.541525][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.550486][ T20] usb 4-1: config 0 descriptor?? [ 83.602364][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.613177][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.623127][ T63] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.632519][ T6] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 83.635700][ T1304] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 83.635769][ T63] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 83.659765][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.669118][ T63] usb 2-1: config 0 descriptor?? [ 83.779807][ T2182] loop0: detected capacity change from 0 to 512 [ 83.872322][ T1304] usb 3-1: Using ep0 maxpacket: 32 [ 83.877837][ T2182] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.889202][ T2182] EXT4-fs (loop0): 1 truncate cleaned up [ 83.894837][ T2182] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 83.992362][ T1304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 84.003403][ T1304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 84.014335][ T1304] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 84.031573][ T1304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.033387][ T20] hkems 0003:2006:0118.0022: unbalanced delimiter at end of report description [ 84.048340][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.050532][ T1304] usb 3-1: config 0 descriptor?? [ 84.064077][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.074342][ T20] hkems 0003:2006:0118.0022: parse failed [ 84.079911][ T20] hkems: probe of 0003:2006:0118.0022 failed with error -22 [ 84.087893][ T6] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 84.099176][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.107287][ T2180] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 84.122147][ T6] usb 5-1: config 0 descriptor?? [ 84.122910][ T1304] hub 3-1:0.0: USB hub found [ 84.153311][ T63] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 84.165306][ T63] koneplus 0003:1E7D:2E22.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 84.187087][ T2186] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.194274][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.201554][ T2186] device bridge_slave_0 entered promiscuous mode [ 84.208516][ T2186] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.215405][ T2186] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.222674][ T2186] device bridge_slave_1 entered promiscuous mode [ 84.255363][ T20] usb 4-1: USB disconnect, device number 11 [ 84.290989][ T2186] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.297869][ T2186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.305001][ T2186] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.311840][ T2186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.336387][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.344524][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.351798][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.358937][ T1304] hub 3-1:0.0: 2 ports detected [ 84.368533][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.372388][ T63] koneplus 0003:1E7D:2E22.0023: couldn't init struct koneplus_device [ 84.377647][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.384970][ T63] koneplus 0003:1E7D:2E22.0023: couldn't install mouse [ 84.391775][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.399486][ T63] koneplus: probe of 0003:1E7D:2E22.0023 failed with error -5 [ 84.420651][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.429142][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.436026][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.447558][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.457479][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.477188][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.490255][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.498751][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.506720][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.517414][ T2186] device veth0_vlan entered promiscuous mode [ 84.529022][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.538618][ T2186] device veth1_macvtap entered promiscuous mode [ 84.550069][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.559970][ T1014] device bridge_slave_1 left promiscuous mode [ 84.566583][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.574181][ T1014] device bridge_slave_0 left promiscuous mode [ 84.580172][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.588612][ T1014] device veth1_macvtap left promiscuous mode [ 84.594623][ T1014] device veth0_vlan left promiscuous mode [ 84.604987][ T1301] usb 2-1: USB disconnect, device number 16 [ 84.646690][ T6] hid-steam 0003:28DE:1142.0024: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 84.706128][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.848438][ T20] usb 5-1: USB disconnect, device number 11 [ 85.012647][ T6] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 85.044233][ T1304] usb 3-1: USB disconnect, device number 15 [ 85.052370][ T1299] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 85.259979][ T2212] device dummy0 entered promiscuous mode [ 85.266256][ T2212] device dummy0 left promiscuous mode [ 85.292482][ T1299] usb 4-1: Using ep0 maxpacket: 8 [ 85.412360][ T1299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.422325][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.423288][ T1299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.434376][ T6] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 85.443449][ T1299] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 85.461811][ T1299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.470522][ T1299] usb 4-1: config 0 descriptor?? [ 85.602408][ T20] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 85.632320][ T318] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 85.652425][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.661645][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.669493][ T6] usb 1-1: Product: syz [ 85.673689][ T6] usb 1-1: Manufacturer: syz [ 85.678085][ T6] usb 1-1: SerialNumber: syz [ 85.753943][ T2228] loop2: detected capacity change from 0 to 512 [ 85.825711][ T2228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.710: inode #1: comm syz.2.710: iget: illegal inode # [ 85.838725][ T2228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.710: error while reading EA inode 1 err=-117 [ 85.850958][ T2228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.710: inode #1: comm syz.2.710: iget: illegal inode # [ 85.864626][ T2228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.710: error while reading EA inode 1 err=-117 [ 85.876883][ T2228] EXT4-fs (loop2): 1 orphan inode deleted [ 85.882547][ T2228] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 85.914298][ T2228] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.710: invalid indirect mapped block 234881024 (level 0) [ 85.923889][ T2193] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 85.943718][ T1299] saitek 0003:06A3:0CCD.0025: unknown main item tag 0x0 [ 85.950546][ T1299] saitek 0003:06A3:0CCD.0025: unknown main item tag 0x0 [ 85.957371][ T1299] saitek 0003:06A3:0CCD.0025: item fetching failed at offset 2/11 [ 85.965394][ T1299] saitek 0003:06A3:0CCD.0025: parse failed [ 85.971025][ T1299] saitek: probe of 0003:06A3:0CCD.0025 failed with error -22 [ 85.991416][ T2233] kernel profiling enabled (shift: 9) [ 86.002557][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.013790][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.024048][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.034866][ T20] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 86.043726][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.053242][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.061432][ T318] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 86.070963][ T20] usb 2-1: config 0 descriptor?? [ 86.075860][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.084519][ T318] usb 5-1: config 0 descriptor?? [ 86.147437][ T2240] loop2: detected capacity change from 0 to 256 [ 86.155622][ T638] usb 4-1: USB disconnect, device number 12 [ 86.195553][ T2240] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 86.553762][ T20] smartjoyplus 0003:6666:8801.0027: unknown main item tag 0x0 [ 86.561878][ T20] smartjoyplus 0003:6666:8801.0027: ignoring exceeding usage max [ 86.570424][ T318] hid-multitouch 0003:1FD2:6007.0026: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 86.582148][ T299] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 86.590309][ T20] smartjoyplus 0003:6666:8801.0027: usage index exceeded [ 86.598554][ T20] smartjoyplus 0003:6666:8801.0027: item 0 0 2 0 parsing failed [ 86.606584][ T20] smartjoyplus 0003:6666:8801.0027: parse failed [ 86.612694][ T2193] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 86.612878][ T20] smartjoyplus: probe of 0003:6666:8801.0027 failed with error -22 [ 86.772771][ T1304] usb 5-1: USB disconnect, device number 12 [ 86.772764][ T318] usb 2-1: USB disconnect, device number 17 [ 86.852440][ T6] cdc_ncm 1-1:1.0: failed to get mac address [ 86.942328][ T20] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 86.972339][ T299] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.982614][ T299] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.062594][ T6] cdc_ncm 1-1:1.0: bind() failure [ 87.069039][ T299] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 87.077939][ T299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.085794][ T6] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 87.092054][ T299] usb 3-1: SerialNumber: syz [ 87.102327][ T6] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 87.109829][ T6] usb 1-1: USB disconnect, device number 17 [ 87.182295][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 87.303636][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 87.315392][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 87.333530][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 87.342563][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.354806][ T20] usb 4-1: config 0 descriptor?? [ 87.362999][ T299] usb 3-1: 0:2 : does not exist [ 87.369364][ T2255] loop4: detected capacity change from 0 to 512 [ 87.380541][ T299] usb 3-1: USB disconnect, device number 16 [ 87.386351][ T2246] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 87.402780][ T20] hub 4-1:0.0: USB hub found [ 87.423702][ T2255] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 87.435530][ T2255] EXT4-fs (loop4): mount failed [ 87.516760][ T2255] loop4: detected capacity change from 0 to 128 [ 87.592451][ T1299] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 87.612305][ T20] hub 4-1:0.0: 2 ports detected [ 87.627424][ T2262] device dummy0 entered promiscuous mode [ 87.634222][ T2262] device dummy0 left promiscuous mode [ 87.701043][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 87.701058][ T30] audit: type=1400 audit(1729101611.644:928): avc: denied { mounton } for pid=2267 comm="syz.4.726" path="/proc/63/task" dev="proc" ino=27808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 87.783146][ T30] audit: type=1326 audit(1729101611.734:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2276 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbab59ff9 code=0x7ffc0000 [ 87.808292][ T30] audit: type=1326 audit(1729101611.734:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2276 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbab59ff9 code=0x7ffc0000 [ 87.831452][ T30] audit: type=1326 audit(1729101611.734:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2276 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fbbbab59ff9 code=0x7ffc0000 [ 87.855559][ T1299] usb 2-1: Using ep0 maxpacket: 8 [ 87.861378][ T30] audit: type=1326 audit(1729101611.734:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2276 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbab59ff9 code=0x7ffc0000 [ 87.887610][ T30] audit: type=1326 audit(1729101611.734:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2276 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbab59ff9 code=0x7ffc0000 [ 87.952299][ T1304] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 87.983950][ T1299] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 87.992407][ T1299] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 88.002629][ T1299] usb 2-1: config 135 has no interface number 0 [ 88.008815][ T1299] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.172385][ T1299] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 88.181306][ T1299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.189237][ T1299] usb 2-1: Product: syz [ 88.193373][ T1304] usb 1-1: Using ep0 maxpacket: 8 [ 88.198274][ T1299] usb 2-1: Manufacturer: syz [ 88.202714][ T1299] usb 2-1: SerialNumber: syz [ 88.243129][ T1299] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 88.249392][ T1299] usb 2-1: No valid video chain found. [ 88.282339][ T553] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 88.290764][ T20] usb 4-1: USB disconnect, device number 13 [ 88.312358][ T1304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.323175][ T1304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.333144][ T1304] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 88.342036][ T1304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.351013][ T1304] usb 1-1: config 0 descriptor?? [ 88.448823][ T318] usb 2-1: USB disconnect, device number 18 [ 88.662415][ T553] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.673352][ T553] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 88.765014][ T30] audit: type=1400 audit(1729101612.714:934): avc: denied { create } for pid=2289 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.766617][ T2290] netlink: 172 bytes leftover after parsing attributes in process `syz.4.736'. [ 88.793694][ T30] audit: type=1400 audit(1729101612.714:935): avc: denied { write } for pid=2289 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.793729][ T30] audit: type=1400 audit(1729101612.714:936): avc: denied { nlmsg_write } for pid=2289 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.844389][ T1304] kone 0003:1E7D:2CED.0028: collection stack underflow [ 88.851349][ T1304] kone 0003:1E7D:2CED.0028: item 0 1 0 12 parsing failed [ 88.870567][ T1304] kone 0003:1E7D:2CED.0028: parse failed [ 88.877787][ T1304] kone: probe of 0003:1E7D:2CED.0028 failed with error -22 [ 88.912365][ T553] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.921280][ T553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.929368][ T553] usb 3-1: Product: syz [ 88.933554][ T553] usb 3-1: Manufacturer: syz [ 88.937967][ T553] usb 3-1: SerialNumber: syz [ 88.955117][ T2297] device dummy0 entered promiscuous mode [ 88.961342][ T2297] device dummy0 left promiscuous mode [ 89.051241][ T1299] usb 1-1: USB disconnect, device number 18 [ 89.100686][ T2307] loop1: detected capacity change from 0 to 512 [ 89.144163][ T2307] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 89.150559][ T2307] EXT4-fs (loop1): mount failed [ 89.155441][ T1304] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 89.193755][ T2286] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 89.229761][ T2307] loop1: detected capacity change from 0 to 128 [ 89.352289][ T20] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 89.522430][ T1304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.533208][ T1304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.542958][ T1304] usb 5-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 89.551814][ T1304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.559711][ T1299] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 89.568118][ T1304] usb 5-1: config 0 descriptor?? [ 89.596294][ T2316] loop0: detected capacity change from 0 to 256 [ 89.695169][ T2316] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 89.712436][ T30] audit: type=1400 audit(1729101613.654:937): avc: denied { execute } for pid=2315 comm="syz.0.746" path="/7/file0/cgroup.stat" dev="loop0" ino=1048679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.742879][ T20] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 89.751758][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.760673][ T20] usb 4-1: config 0 descriptor?? [ 91.003208][ T2286] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 91.712343][ T1299] usb 2-1: device descriptor read/all, error -71 [ 92.743328][ T20] usb 4-1: can't set config #0, error -71 [ 92.750180][ T20] usb 4-1: USB disconnect, device number 14 [ 92.992498][ T553] cdc_ncm 3-1:1.0: bind() failure [ 92.998173][ T553] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 93.004879][ T553] cdc_ncm 3-1:1.1: bind() failure [ 93.010609][ T553] usb 3-1: USB disconnect, device number 17 [ 93.050711][ T30] audit: type=1400 audit(1729101616.994:938): avc: denied { sys_admin } for pid=2331 comm="syz.1.750" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 93.073423][ T30] audit: type=1400 audit(1729101616.994:939): avc: denied { sys_ptrace } for pid=2331 comm="syz.1.750" capability=19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 93.273105][ T30] audit: type=1326 audit(1729101617.224:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7a72dff9 code=0x7ffc0000 [ 93.296951][ T30] audit: type=1326 audit(1729101617.224:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7a72dff9 code=0x7ffc0000 [ 93.320281][ T30] audit: type=1326 audit(1729101617.224:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7faf7a72dff9 code=0x7ffc0000 [ 93.343607][ T30] audit: type=1326 audit(1729101617.224:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7a72dff9 code=0x7ffc0000 [ 93.366698][ T30] audit: type=1326 audit(1729101617.224:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7a72dff9 code=0x7ffc0000 [ 93.412292][ T553] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 93.522254][ T1299] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 93.762327][ T1299] usb 4-1: Using ep0 maxpacket: 8 [ 93.802377][ T553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.813163][ T553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.822643][ T553] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.835258][ T553] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 93.844080][ T553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.852888][ T553] usb 3-1: config 0 descriptor?? [ 93.884234][ T1299] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 93.892685][ T1299] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 93.902811][ T1299] usb 4-1: config 135 has no interface number 0 [ 93.908825][ T1299] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.972454][ T1304] usbhid 5-1:0.0: can't add hid device: -71 [ 93.978269][ T1304] usbhid: probe of 5-1:0.0 failed with error -71 [ 93.985951][ T1304] usb 5-1: USB disconnect, device number 13 [ 94.072369][ T1299] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 94.081226][ T1299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.089068][ T1299] usb 4-1: Product: syz [ 94.093130][ T1299] usb 4-1: Manufacturer: syz [ 94.097452][ T1299] usb 4-1: SerialNumber: syz [ 94.152984][ T1299] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 94.159192][ T1299] usb 4-1: No valid video chain found. [ 94.353577][ T553] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 94.356642][ T1304] usb 4-1: USB disconnect, device number 15 [ 94.360752][ T553] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 94.373525][ T553] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 94.380566][ T553] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 94.387673][ T553] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 94.395423][ T553] prodikeys 0003:041E:2801.0029: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 94.566666][ T63] usb 3-1: USB disconnect, device number 18 [ 95.104635][ T2354] loop2: detected capacity change from 0 to 512 [ 95.130807][ T2354] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 95.137420][ T2354] EXT4-fs (loop2): mount failed [ 95.149138][ T2358] input: syz0 as /devices/virtual/input/input12 [ 95.229985][ T2354] loop2: detected capacity change from 0 to 128 [ 95.298690][ T2368] loop0: detected capacity change from 0 to 256 [ 95.308051][ T2368] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 95.362270][ T553] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 95.369715][ T30] audit: type=1400 audit(1729101619.314:945): avc: denied { mounton } for pid=2374 comm="syz.3.769" path="/46/file0" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.410570][ T30] audit: type=1400 audit(1729101619.314:946): avc: denied { ioctl } for pid=2374 comm="syz.3.769" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 95.622270][ T63] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 95.633858][ T30] audit: type=1326 audit(1729101619.584:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2397 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b9af8ff9 code=0x7ffc0000 [ 95.642292][ T553] usb 5-1: Using ep0 maxpacket: 32 [ 95.708516][ T2409] loop2: detected capacity change from 0 to 1024 [ 95.752347][ T299] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 95.773419][ T2409] EXT4-fs (loop2): Ignoring removed oldalloc option [ 95.794552][ T2409] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 95.952417][ T553] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=3a.75 [ 95.961606][ T553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.969888][ T553] usb 5-1: Product: syz [ 95.974315][ T553] usb 5-1: Manufacturer: syz [ 95.978717][ T553] usb 5-1: SerialNumber: syz [ 95.984314][ T553] usb 5-1: config 0 descriptor?? [ 95.992316][ T299] usb 1-1: Using ep0 maxpacket: 8 [ 96.023120][ T63] usb 2-1: too many endpoints for config 0 interface 0 altsetting 7: 253, using maximum allowed: 30 [ 96.024203][ T553] usb_ehset_test: probe of 5-1:0.0 failed with error -32 [ 96.036080][ T63] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.052060][ T63] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 96.065156][ T63] usb 2-1: config 0 interface 0 has no altsetting 0 [ 96.072254][ T63] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 96.082660][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.091994][ T63] usb 2-1: config 0 descriptor?? [ 96.112357][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.126317][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.138745][ T299] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 96.149266][ T299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.182665][ T299] usb 1-1: config 0 descriptor?? [ 96.243922][ T553] usb 5-1: USB disconnect, device number 14 [ 96.285732][ T2433] loop2: detected capacity change from 0 to 40427 [ 96.370094][ T2433] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 96.378105][ T2433] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.387803][ T2433] F2FS-fs (loop2): invalid crc value [ 96.394994][ T2433] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.443984][ T2433] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.454138][ T2433] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.473757][ T2433] attempt to access beyond end of device [ 96.473757][ T2433] loop2: rw=2049, want=45208, limit=40427 [ 96.584036][ T63] hid-generic 0003:060B:0001.002A: unknown main item tag 0x0 [ 96.592681][ T63] hid-generic 0003:060B:0001.002A: unknown main item tag 0x0 [ 96.599923][ T63] hid-generic 0003:060B:0001.002A: unknown main item tag 0x0 [ 96.607287][ T63] hid-generic 0003:060B:0001.002A: unknown main item tag 0x0 [ 96.614569][ T63] hid-generic 0003:060B:0001.002A: unknown main item tag 0x0 [ 96.622158][ T63] hid-generic 0003:060B:0001.002A: unknown main item tag 0x0 [ 96.629413][ T63] hid-generic 0003:060B:0001.002A: unknown main item tag 0x0 [ 96.646976][ T63] hid-generic 0003:060B:0001.002A: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.1-1/input0 [ 96.663682][ T299] steelseries_srws1 0003:1038:1410.002B: unknown main item tag 0xd [ 96.671436][ T299] steelseries_srws1 0003:1038:1410.002B: item fetching failed at offset 6/7 [ 96.685468][ T299] steelseries_srws1 0003:1038:1410.002B: parse failed [ 96.692994][ T299] steelseries_srws1: probe of 0003:1038:1410.002B failed with error -22 [ 96.716747][ T2461] device syzkaller0 entered promiscuous mode [ 96.797462][ T299] usb 2-1: USB disconnect, device number 21 [ 96.865835][ T1301] usb 1-1: USB disconnect, device number 19 [ 97.653213][ T299] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 97.664542][ T2493] loop2: detected capacity change from 0 to 256 [ 97.692436][ T553] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 97.699028][ T2493] exfat: Deprecated parameter 'namecase' [ 97.705654][ T1304] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 97.712693][ T2493] exfat: Deprecated parameter 'utf8' [ 97.718528][ T2493] exfat: Deprecated parameter 'namecase' [ 97.765696][ T2493] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 97.780554][ T2502] input: syz0 as /devices/virtual/input/input13 [ 97.857754][ T2507] loop2: detected capacity change from 0 to 512 [ 97.939899][ T2507] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 97.947649][ T2507] EXT4-fs (loop2): mount failed [ 98.012337][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.026982][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.028483][ T2507] loop2: detected capacity change from 0 to 128 [ 98.037212][ T299] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 98.051937][ T299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.062076][ T299] usb 1-1: config 0 descriptor?? [ 98.067090][ T553] usb 4-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 98.077288][ T553] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.092313][ T1304] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.109618][ T1304] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 98.122542][ T1304] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 98.134977][ T1304] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.144161][ T1304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.163214][ T553] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 98.177586][ T553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.186201][ T2485] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 98.194069][ T553] usb 4-1: SerialNumber: syz [ 98.301020][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 98.301037][ T30] audit: type=1400 audit(1729101622.244:994): avc: denied { create } for pid=2514 comm="syz.4.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.326038][ T30] audit: type=1400 audit(1729101622.254:995): avc: denied { connect } for pid=2514 comm="syz.4.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.354589][ T30] audit: type=1400 audit(1729101622.304:996): avc: denied { write } for pid=2514 comm="syz.4.822" path="socket:[28785]" dev="sockfs" ino=28785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.421034][ T1304] usb 2-1: USB disconnect, device number 22 [ 98.453058][ T553] usb 4-1: 0:2 : does not exist [ 98.472727][ T20] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 98.554390][ T299] isku 0003:1E7D:319C.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 98.762358][ T299] isku 0003:1E7D:319C.002C: couldn't init struct isku_device [ 98.769615][ T299] isku 0003:1E7D:319C.002C: couldn't install keyboard [ 98.777320][ T299] isku: probe of 0003:1E7D:319C.002C failed with error -5 [ 98.832383][ T20] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.874946][ T299] usb 4-1: USB disconnect, device number 16 [ 98.960922][ T30] audit: type=1400 audit(1729101622.904:997): avc: denied { nlmsg_write } for pid=2517 comm="syz.1.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 98.981754][ T318] usb 1-1: USB disconnect, device number 20 [ 99.002310][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.011176][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.019481][ T20] usb 3-1: Product: syz [ 99.023544][ T20] usb 3-1: Manufacturer: syz [ 99.027887][ T20] usb 3-1: SerialNumber: syz [ 99.147859][ T30] audit: type=1326 audit(1729101623.094:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7a72dff9 code=0x7ffc0000 [ 99.180803][ T30] audit: type=1326 audit(1729101623.114:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7faf7a72dff9 code=0x7ffc0000 [ 99.204463][ T30] audit: type=1326 audit(1729101623.114:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7a72dff9 code=0x7ffc0000 [ 99.266052][ T30] audit: type=1400 audit(1729101623.214:1001): avc: denied { unlink } for pid=2527 comm="syz.1.826" name="#d" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.268107][ T2528] overlayfs: filesystem on './file0' not supported as upperdir [ 99.313400][ T30] audit: type=1400 audit(1729101623.264:1002): avc: denied { read } for pid=2529 comm="syz.1.827" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.336039][ T30] audit: type=1400 audit(1729101623.264:1003): avc: denied { open } for pid=2529 comm="syz.1.827" path="/dev/ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.450643][ T2536] overlayfs: failed to resolve './file0/../file0': -2 [ 99.512330][ T318] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 99.762263][ T318] usb 5-1: Using ep0 maxpacket: 8 [ 99.882308][ T318] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 99.890554][ T318] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 99.900984][ T318] usb 5-1: config 135 has no interface number 0 [ 99.907291][ T318] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.963811][ T2561] syz.3.841[2561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.963870][ T2561] syz.3.841[2561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.976205][ T2561] syz.3.841[2561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.987788][ T2561] syz.3.841[2561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.072342][ T318] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 100.092588][ T299] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 100.100220][ T318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.101351][ T2567] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2567 comm=syz.3.843 [ 100.109665][ T318] usb 5-1: Product: syz [ 100.124956][ T318] usb 5-1: Manufacturer: syz [ 100.129311][ T318] usb 5-1: SerialNumber: syz [ 100.173118][ T318] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 100.179364][ T318] usb 5-1: No valid video chain found. [ 100.192310][ T20] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 100.198612][ T20] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 100.205923][ T20] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 100.272809][ T2569] loop0: detected capacity change from 0 to 128 [ 100.332308][ T299] usb 2-1: Using ep0 maxpacket: 16 [ 100.344400][ T2569] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000fff,journal_ioprio=0x0000000000000002,acl,,errors=continue. Quota mode: none. [ 100.380570][ T1304] usb 5-1: USB disconnect, device number 15 [ 100.402329][ T20] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 100.409764][ T20] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 100.436266][ T2573] loop0: detected capacity change from 0 to 512 [ 100.443048][ T20] usb 3-1: USB disconnect, device number 19 [ 100.449085][ T20] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 100.457431][ T299] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.469003][ T299] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 100.480198][ T299] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 100.498766][ T299] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.510109][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.520932][ T318] ================================================================== [ 100.528857][ T318] BUG: KASAN: use-after-free in worker_thread+0xaaa/0x12a0 [ 100.535855][ T318] Read of size 8 at addr ffff88810e4d4c60 by task kworker/0:3/318 [ 100.543499][ T318] [ 100.545760][ T318] CPU: 0 PID: 318 Comm: kworker/0:3 Tainted: G W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 100.557575][ T318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.567846][ T318] Workqueue: 0x0 (events) [ 100.572241][ T318] Call Trace: [ 100.575389][ T318] [ 100.578136][ T318] dump_stack_lvl+0x151/0x1c0 [ 100.582753][ T318] ? io_uring_drop_tctx_refs+0x190/0x190 [ 100.588200][ T318] ? panic+0x760/0x760 [ 100.592111][ T318] ? __schedule+0xcd4/0x1590 [ 100.596622][ T318] print_address_description+0x87/0x3b0 [ 100.602048][ T318] kasan_report+0x179/0x1c0 [ 100.606403][ T318] ? _raw_spin_lock_irqsave+0x210/0x210 [ 100.612206][ T318] ? worker_thread+0xaaa/0x12a0 [ 100.616910][ T318] ? worker_thread+0xaaa/0x12a0 [ 100.621586][ T318] __asan_report_load8_noabort+0x14/0x20 [ 100.627023][ T318] worker_thread+0xaaa/0x12a0 [ 100.631540][ T318] kthread+0x421/0x510 [ 100.635523][ T318] ? worker_clr_flags+0x180/0x180 [ 100.640383][ T318] ? kthread_blkcg+0xd0/0xd0 [ 100.645013][ T318] ret_from_fork+0x1f/0x30 [ 100.649338][ T318] [ 100.652202][ T318] [ 100.654623][ T318] Allocated by task 20: [ 100.659161][ T318] ____kasan_kmalloc+0xdb/0x110 [ 100.664273][ T318] __kasan_kmalloc+0x9/0x10 [ 100.668973][ T318] __kmalloc+0x13a/0x270 [ 100.673233][ T318] kvmalloc_node+0x1f0/0x4d0 [ 100.677870][ T318] alloc_netdev_mqs+0x8c/0xc90 [ 100.682466][ T318] alloc_etherdev_mqs+0x33/0x40 [ 100.687164][ T318] usbnet_probe+0x1fc/0x2840 [ 100.691754][ T318] usb_probe_interface+0x5b6/0xa90 [ 100.696712][ T318] really_probe+0x28d/0x970 [ 100.701294][ T318] __driver_probe_device+0x1a0/0x310 [ 100.706853][ T318] driver_probe_device+0x54/0x3d0 [ 100.712067][ T318] __device_attach_driver+0x2c5/0x470 [ 100.717303][ T318] bus_for_each_drv+0x183/0x200 [ 100.724235][ T318] __device_attach+0x312/0x510 [ 100.728968][ T318] device_initial_probe+0x1a/0x20 [ 100.734049][ T318] bus_probe_device+0xbe/0x1e0 [ 100.738717][ T318] device_add+0xb60/0xf10 [ 100.742817][ T318] usb_set_configuration+0x190f/0x1e80 [ 100.748109][ T318] usb_generic_driver_probe+0x8b/0x150 [ 100.753403][ T318] usb_probe_device+0x144/0x260 [ 100.758259][ T318] really_probe+0x28d/0x970 [ 100.762624][ T318] __driver_probe_device+0x1a0/0x310 [ 100.768236][ T318] driver_probe_device+0x54/0x3d0 [ 100.773103][ T318] __device_attach_driver+0x2c5/0x470 [ 100.778521][ T318] bus_for_each_drv+0x183/0x200 [ 100.783330][ T318] __device_attach+0x312/0x510 [ 100.787927][ T318] device_initial_probe+0x1a/0x20 [ 100.792779][ T318] bus_probe_device+0xbe/0x1e0 [ 100.797383][ T318] device_add+0xb60/0xf10 [ 100.801555][ T318] usb_new_device+0x1038/0x1c00 [ 100.806321][ T318] hub_event+0x2def/0x4770 [ 100.810568][ T318] process_one_work+0x6bb/0xc10 [ 100.815269][ T318] worker_thread+0xad5/0x12a0 [ 100.819763][ T318] kthread+0x421/0x510 [ 100.823666][ T318] ret_from_fork+0x1f/0x30 [ 100.827933][ T318] [ 100.830089][ T318] Freed by task 20: [ 100.833738][ T318] kasan_set_track+0x4b/0x70 [ 100.838163][ T318] kasan_set_free_info+0x23/0x40 [ 100.842933][ T318] ____kasan_slab_free+0x126/0x160 [ 100.847885][ T318] __kasan_slab_free+0x11/0x20 [ 100.852580][ T318] slab_free_freelist_hook+0xbd/0x190 [ 100.857775][ T318] kfree+0xc8/0x220 [ 100.861421][ T318] kvfree+0x35/0x40 [ 100.865419][ T318] netdev_freemem+0x3f/0x60 [ 100.869766][ T318] netdev_release+0x7f/0xb0 [ 100.874090][ T318] device_release+0x95/0x1c0 [ 100.878519][ T318] kobject_put+0x178/0x260 [ 100.882772][ T318] put_device+0x1f/0x30 [ 100.886764][ T318] free_netdev+0x34f/0x440 [ 100.891190][ T318] usbnet_disconnect+0x245/0x390 [ 100.895964][ T318] usb_unbind_interface+0x1fa/0x8c0 [ 100.900999][ T318] device_release_driver_internal+0x50b/0x7d0 [ 100.906901][ T318] device_release_driver+0x19/0x20 [ 100.911848][ T318] bus_remove_device+0x2f8/0x360 [ 100.916708][ T318] device_del+0x663/0xe90 [ 100.920872][ T318] usb_disable_device+0x380/0x720 [ 100.925733][ T318] usb_disconnect+0x32a/0x890 [ 100.930246][ T318] hub_event+0x1d42/0x4770 [ 100.934500][ T318] process_one_work+0x6bb/0xc10 [ 100.939187][ T318] worker_thread+0xe02/0x12a0 [ 100.943708][ T318] kthread+0x421/0x510 [ 100.947606][ T318] ret_from_fork+0x1f/0x30 [ 100.951858][ T318] [ 100.954029][ T318] Last potentially related work creation: [ 100.959584][ T318] kasan_save_stack+0x3b/0x60 [ 100.964182][ T318] __kasan_record_aux_stack+0xd3/0xf0 [ 100.969388][ T318] kasan_record_aux_stack_noalloc+0xb/0x10 [ 100.975029][ T318] insert_work+0x56/0x320 [ 100.979196][ T318] __queue_work+0x92a/0xcd0 [ 100.983538][ T318] queue_work_on+0x105/0x170 [ 100.987963][ T318] usbnet_link_change+0xeb/0x100 [ 100.992735][ T318] usbnet_probe+0x1dcb/0x2840 [ 100.997251][ T318] usb_probe_interface+0x5b6/0xa90 [ 101.002196][ T318] really_probe+0x28d/0x970 [ 101.006535][ T318] __driver_probe_device+0x1a0/0x310 [ 101.011661][ T318] driver_probe_device+0x54/0x3d0 [ 101.016518][ T318] __device_attach_driver+0x2c5/0x470 [ 101.021727][ T318] bus_for_each_drv+0x183/0x200 [ 101.026409][ T318] __device_attach+0x312/0x510 [ 101.031011][ T318] device_initial_probe+0x1a/0x20 [ 101.035872][ T318] bus_probe_device+0xbe/0x1e0 [ 101.040470][ T318] device_add+0xb60/0xf10 [ 101.044636][ T318] usb_set_configuration+0x190f/0x1e80 [ 101.049929][ T318] usb_generic_driver_probe+0x8b/0x150 [ 101.055282][ T318] usb_probe_device+0x144/0x260 [ 101.059913][ T318] really_probe+0x28d/0x970 [ 101.064249][ T318] __driver_probe_device+0x1a0/0x310 [ 101.069372][ T318] driver_probe_device+0x54/0x3d0 [ 101.074231][ T318] __device_attach_driver+0x2c5/0x470 [ 101.079447][ T318] bus_for_each_drv+0x183/0x200 [ 101.084125][ T318] __device_attach+0x312/0x510 [ 101.088812][ T318] device_initial_probe+0x1a/0x20 [ 101.093682][ T318] bus_probe_device+0xbe/0x1e0 [ 101.098367][ T318] device_add+0xb60/0xf10 [ 101.102530][ T318] usb_new_device+0x1038/0x1c00 [ 101.107214][ T318] hub_event+0x2def/0x4770 [ 101.111466][ T318] process_one_work+0x6bb/0xc10 [ 101.116154][ T318] worker_thread+0xad5/0x12a0 [ 101.120668][ T318] kthread+0x421/0x510 [ 101.124572][ T318] ret_from_fork+0x1f/0x30 [ 101.128826][ T318] [ 101.130994][ T318] The buggy address belongs to the object at ffff88810e4d4000 [ 101.130994][ T318] which belongs to the cache kmalloc-4k of size 4096 [ 101.145045][ T318] The buggy address is located 3168 bytes inside of [ 101.145045][ T318] 4096-byte region [ffff88810e4d4000, ffff88810e4d5000) [ 101.158936][ T318] The buggy address belongs to the page: [ 101.164492][ T318] page:ffffea0004393400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e4d0 [ 101.174798][ T318] head:ffffea0004393400 order:3 compound_mapcount:0 compound_pincount:0 [ 101.182917][ T318] flags: 0x4000000000010200(slab|head|zone=1) [ 101.188844][ T318] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 101.197352][ T318] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 101.205754][ T318] page dumped because: kasan: bad access detected [ 101.212144][ T318] page_owner tracks the page as allocated [ 101.217657][ T318] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 102, ts 4729931702, free_ts 0 [ 101.235542][ T318] post_alloc_hook+0x1a3/0x1b0 [ 101.240133][ T318] prep_new_page+0x1b/0x110 [ 101.244474][ T318] get_page_from_freelist+0x3550/0x35d0 [ 101.249852][ T318] __alloc_pages+0x27e/0x8f0 [ 101.254278][ T318] new_slab+0x9a/0x4e0 [ 101.258186][ T318] ___slab_alloc+0x39e/0x830 [ 101.262611][ T318] __slab_alloc+0x4a/0x90 [ 101.266779][ T318] kmem_cache_alloc_trace+0x142/0x210 [ 101.271986][ T318] kobject_uevent_env+0x269/0x700 [ 101.276846][ T318] kobject_synth_uevent+0x4eb/0xae0 [ 101.281880][ T318] uevent_store+0x4b/0x70 [ 101.286045][ T318] drv_attr_store+0x78/0xa0 [ 101.290386][ T318] sysfs_kf_write+0x123/0x140 [ 101.294897][ T318] kernfs_fop_write_iter+0x2c4/0x410 [ 101.300019][ T318] vfs_write+0xd5d/0x1110 [ 101.304184][ T318] ksys_write+0x199/0x2c0 [ 101.308351][ T318] page_owner free stack trace missing [ 101.313558][ T318] [ 101.315727][ T318] Memory state around the buggy address: [ 101.321199][ T318] ffff88810e4d4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.329095][ T318] ffff88810e4d4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.337010][ T318] >ffff88810e4d4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.344977][ T318] ^ [ 101.352104][ T318] ffff88810e4d4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.360003][ T318] ffff88810e4d4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.367899][ T318] ================================================================== [ 101.375792][ T318] Disabling lock debugging due to kernel taint [ 101.383000][ T2556] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 101.407008][ T2573] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 101.418103][ T2573] EXT4-fs (loop0): mount failed [ 101.456675][ T2573] loop0: detected capacity change from 0 to 128 [ 101.463789][ T299] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 101.672797][ T299] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 101.679942][ T299] usb 2-1: USB disconnect, device number 23