last executing test programs: 3.417198676s ago: executing program 3 (id=323): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x18) 3.407209217s ago: executing program 3 (id=324): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 3.362792581s ago: executing program 3 (id=325): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x2, 0x2100, 0x0, 0x0) 3.362527661s ago: executing program 3 (id=326): r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x4008011, r1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0xffffffffffffff1e, 0x0, 0x0, &(0x7f00000014c0)=""/185, 0xb9}}], 0x1, 0x12030, 0x0) 3.362290371s ago: executing program 3 (id=327): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x5e, 0xbf, 0x6e, 0x20, 0x421, 0x3a, 0xe67e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) 3.220305653s ago: executing program 4 (id=329): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x7ff, 0x0) 2.465434358s ago: executing program 4 (id=331): syz_io_uring_setup(0x239, 0x0, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.397838954s ago: executing program 1 (id=337): socket$inet6(0xa, 0x3, 0x8000000003c) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) socket$igmp6(0xa, 0x3, 0x2) epoll_create1(0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1000}, 0x0, &(0x7f0000002840)={0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) 2.357467747s ago: executing program 0 (id=338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x63}}) 2.21162698s ago: executing program 0 (id=339): unshare(0x20040600) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x20000) 2.21061949s ago: executing program 0 (id=340): r0 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "6f7f5e18"}]}}, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.547200767s ago: executing program 3 (id=343): dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x5b43, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mbim_extended={0x8}, @mbim={0xc}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.542986827s ago: executing program 2 (id=344): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) r3 = dup2(r0, r2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x1, [@broadcast]}, 0x14) 1.484178912s ago: executing program 1 (id=345): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 1.483411942s ago: executing program 2 (id=346): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='workqueue_activate_work\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 1.436506166s ago: executing program 2 (id=347): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/207, 0xcf}], 0x1}, 0x0) 1.329452656s ago: executing program 2 (id=348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)='6', 0x1}], 0x1}}], 0x1, 0x4044c84) 1.315140757s ago: executing program 2 (id=349): connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x10200}], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 634.100845ms ago: executing program 1 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 624.039906ms ago: executing program 1 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 523.203045ms ago: executing program 1 (id=352): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000000)={'system_u:object_r:klogd_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) 486.925488ms ago: executing program 1 (id=353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 416.282104ms ago: executing program 2 (id=354): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc216, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="002205000000ff"], 0x0}, 0x0) 377.507277ms ago: executing program 4 (id=355): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 367.276988ms ago: executing program 4 (id=356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f08c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x40) 288.180545ms ago: executing program 4 (id=357): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x0, 0x1) 287.926635ms ago: executing program 4 (id=358): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x51, {[@main=@item_4={0x3, 0x0, 0x0, "4491ff73"}, @global=@item_4={0x3, 0x1, 0x0, "ca57f527"}]}}, 0x0}, 0x0) 61.199044ms ago: executing program 0 (id=359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 34.338776ms ago: executing program 0 (id=360): write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005fb75c2f084bf912b70002000000000000000000000008001e80", 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000000000000000000007"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=361): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) kernel console output (not intermixed with test programs): rt 2(bridge_slave_1) entered blocking state [ 20.478783][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.485862][ T290] device bridge_slave_1 entered promiscuous mode [ 20.554595][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.561480][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.568729][ T291] device bridge_slave_0 entered promiscuous mode [ 20.587235][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.594075][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.601303][ T291] device bridge_slave_1 entered promiscuous mode [ 20.611173][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.618029][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.625106][ T289] device bridge_slave_0 entered promiscuous mode [ 20.633044][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.639899][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.647127][ T289] device bridge_slave_1 entered promiscuous mode [ 20.675759][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.682788][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.689980][ T288] device bridge_slave_0 entered promiscuous mode [ 20.697707][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.704627][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.711940][ T288] device bridge_slave_1 entered promiscuous mode [ 20.781550][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.788551][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.795748][ T292] device bridge_slave_0 entered promiscuous mode [ 20.816616][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.823452][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.830750][ T292] device bridge_slave_1 entered promiscuous mode [ 20.852949][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.859893][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.937375][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.944217][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.951348][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.958117][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.969365][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.976220][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.983741][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.990554][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.004831][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.011687][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.018808][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.025561][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.051847][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.060236][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.067305][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.074413][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.081464][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.088418][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.095331][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.102973][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.110139][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.117399][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.125584][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.133568][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.140398][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.178325][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.185706][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.193997][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.200846][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.208047][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.215788][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.226774][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.234658][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.241437][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.256475][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.277479][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.285470][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.292333][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.299842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.307769][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.314588][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.321826][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.329555][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.337318][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.357503][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.365761][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.373647][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.380861][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.388148][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.395418][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.404768][ T290] device veth0_vlan entered promiscuous mode [ 21.416934][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.424902][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.431753][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.439276][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.447560][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.454375][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.462654][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.478546][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.485753][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.493106][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.501390][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.509375][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.516309][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.523532][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.531677][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.540166][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.547011][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.554149][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.562023][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.574405][ T290] device veth1_macvtap entered promiscuous mode [ 21.582009][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.589395][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.597505][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.605528][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.613386][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.621311][ T289] device veth0_vlan entered promiscuous mode [ 21.636969][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.644215][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.651596][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.659471][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.667251][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.675004][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.682848][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.690910][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.699015][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.706627][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.714337][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.721582][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.737080][ T289] device veth1_macvtap entered promiscuous mode [ 21.743484][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.751887][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.759657][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.767385][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.774908][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.782853][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.790713][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.798320][ T288] device veth0_vlan entered promiscuous mode [ 21.811228][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.819411][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.830561][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.838746][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.856767][ T291] device veth0_vlan entered promiscuous mode [ 21.863084][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.871289][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.879415][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.887355][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.895370][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.903430][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.911560][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.919307][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.927184][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.934436][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.947453][ T288] device veth1_macvtap entered promiscuous mode [ 21.961678][ T292] device veth0_vlan entered promiscuous mode [ 21.969489][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.981887][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.990432][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.998178][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.006515][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.014744][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.022742][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.035360][ T291] device veth1_macvtap entered promiscuous mode [ 22.051594][ T292] device veth1_macvtap entered promiscuous mode [ 22.082160][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.089920][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.114867][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.129009][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.137505][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.144973][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.153111][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.161202][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.168983][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.177131][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.185388][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.193984][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.230524][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.239390][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.248545][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.256763][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.264929][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.273275][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.297502][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.305592][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.372540][ T338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.419803][ T344] loop2: detected capacity change from 0 to 2048 [ 22.429153][ T343] loop0: detected capacity change from 0 to 2048 [ 22.464814][ T353] syz.4.15[353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 22.464876][ T353] syz.4.15[353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 22.502996][ T357] ªªªªªª: renamed from vlan0 [ 22.517759][ T344] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 22.542208][ T343] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 22.600042][ T368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 22.621755][ T343] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.636620][ T343] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 22.648954][ T343] EXT4-fs (loop0): This should not happen!! Data will be lost [ 22.648954][ T343] [ 22.658471][ T343] EXT4-fs (loop0): Total free blocks count 0 [ 22.664685][ T343] EXT4-fs (loop0): Free/Dirty block details [ 22.671069][ T343] EXT4-fs (loop0): free_blocks=2415919104 [ 22.676736][ T343] EXT4-fs (loop0): dirty_blocks=16 [ 22.681664][ T343] EXT4-fs (loop0): Block reservation details [ 22.689096][ T343] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 22.703752][ T343] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 22.731514][ T343] EXT4-fs (loop0): This should not happen!! Data will be lost [ 22.731514][ T343] [ 22.774723][ T343] syz.0.10 (343) used greatest stack depth: 22080 bytes left [ 22.879184][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 22.899621][ T378] loop1: detected capacity change from 0 to 40427 [ 22.927240][ T293] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.936352][ T378] ======================================================= [ 22.936352][ T378] WARNING: The mand mount option has been deprecated and [ 22.936352][ T378] and is ignored by this kernel. Remove the mand [ 22.936352][ T378] option from the mount to silence this warning. [ 22.936352][ T378] ======================================================= [ 23.001933][ T399] loop0: detected capacity change from 0 to 8192 [ 23.009281][ T378] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 23.017136][ T378] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 23.026374][ T378] F2FS-fs (loop1): invalid crc value [ 23.027535][ T399] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 23.041330][ T378] F2FS-fs (loop1): Found nat_bits in checkpoint [ 23.071741][ T378] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 23.078729][ T378] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 23.126191][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 23.141726][ T381] attempt to access beyond end of device [ 23.141726][ T381] loop1: rw=1, want=79880, limit=40427 [ 23.306688][ T293] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 23.316860][ T293] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 23.325800][ T293] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 23.334883][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.396227][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.406355][ T6] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 23.415276][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.423092][ T6] usb 5-1: Product: syz [ 23.427082][ T6] usb 5-1: Manufacturer: syz [ 23.431429][ T6] usb 5-1: SerialNumber: syz [ 23.436392][ T6] usb 5-1: config 0 descriptor?? [ 23.656222][ T293] usb 4-1: string descriptor 0 read error: -71 [ 23.657170][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 23.662895][ T293] usb 4-1: USB disconnect, device number 2 [ 23.681624][ T417] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 23.826271][ T26] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 23.836971][ T26] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 23.846839][ T26] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 23.858046][ T26] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 23.876906][ T430] loop2: detected capacity change from 0 to 1024 [ 23.947621][ T430] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 23.962477][ T430] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #14: comm syz.2.44: attempt to clear invalid blocks 1886221359 len 1 [ 24.029774][ T434] loop2: detected capacity change from 0 to 2048 [ 24.046325][ T26] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 24.055352][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.063463][ T26] usb 1-1: Product: syz [ 24.066476][ T434] loop2: p3 < > p4 < > [ 24.067480][ T26] usb 1-1: Manufacturer: syz [ 24.071716][ T434] loop2: partition table partially beyond EOD, [ 24.075885][ T26] usb 1-1: SerialNumber: syz [ 24.075910][ T434] truncated [ 24.089432][ T434] loop2: p3 start 4284289 is beyond EOD, truncated [ 24.136273][ T6] (unnamed net_device) (uninitialized): Assigned a random MAC address: d6:56:42:4f:31:7b [ 24.152680][ T6] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 24.153257][ T374] udevd[374]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 24.204775][ T443] loop3: detected capacity change from 0 to 512 [ 24.211755][ T374] udevd[374]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 24.243227][ T443] EXT4-fs (loop3): 1 truncate cleaned up [ 24.249921][ T443] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 24.296847][ T450] loop1: detected capacity change from 0 to 128 [ 24.315632][ T450] attempt to access beyond end of device [ 24.315632][ T450] loop1: rw=2049, want=233, limit=128 [ 24.334852][ T450] attempt to access beyond end of device [ 24.334852][ T450] loop1: rw=34817, want=129, limit=128 [ 24.347658][ T450] attempt to access beyond end of device [ 24.347658][ T450] loop1: rw=34817, want=233, limit=128 [ 24.359029][ T329] usb 5-1: USB disconnect, device number 2 [ 24.388160][ T466] incfs: mount failed -22 [ 24.479081][ T26] usb 1-1: USB disconnect, device number 2 [ 24.506287][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.866276][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 24.878237][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 24.889443][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 24.902763][ T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 24.902988][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 24.902999][ T30] audit: type=1400 audit(1724994440.002:165): avc: denied { append } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 24.911898][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.918489][ T30] audit: type=1400 audit(1724994440.002:166): avc: denied { open } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 24.957465][ T496] incfs: mount failed -22 [ 24.971086][ T30] audit: type=1400 audit(1724994440.002:167): avc: denied { getattr } for pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 24.975118][ T6] usb 3-1: config 0 descriptor?? [ 25.016262][ T446] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 25.024934][ T30] audit: type=1400 audit(1724994440.112:168): avc: denied { create } for pid=499 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 25.054989][ T30] audit: type=1400 audit(1724994440.112:169): avc: denied { connect } for pid=499 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 25.082991][ T30] audit: type=1400 audit(1724994440.112:170): avc: denied { write } for pid=499 comm="syz.0.61" path="socket:[15192]" dev="sockfs" ino=15192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 25.107612][ T30] audit: type=1400 audit(1724994440.142:171): avc: denied { create } for pid=501 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.132840][ T30] audit: type=1400 audit(1724994440.172:172): avc: denied { write } for pid=501 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.161450][ T30] audit: type=1400 audit(1724994440.172:173): avc: denied { read } for pid=501 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.185786][ T30] audit: type=1400 audit(1724994440.202:174): avc: denied { create } for pid=503 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.226176][ T293] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 25.411045][ T527] syz.0.72[527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.411110][ T527] syz.0.72[527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.458447][ T529] loop1: detected capacity change from 0 to 16 [ 25.478742][ T6] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.485966][ T6] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.493392][ T6] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.500644][ T6] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.508005][ T6] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.515294][ T6] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.522550][ T6] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.533971][ T529] erofs: (device loop1): mounted with root inode @ nid 36. [ 25.548331][ T6] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.555573][ T6] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.563050][ T6] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.570985][ T6] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.578501][ T6] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 25.588233][ T293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.591370][ T537] loop0: detected capacity change from 0 to 512 [ 25.603100][ T293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.615805][ T293] usb 5-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 25.617284][ T313] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.633502][ T6] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 25.646357][ T293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.664254][ T293] usb 5-1: config 0 descriptor?? [ 25.671054][ T537] EXT4-fs (loop0): 1 truncate cleaned up [ 25.677042][ T537] EXT4-fs (loop0): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 25.705321][ T289] EXT4-fs error (device loop0): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 25.726047][ T289] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 25.744766][ T289] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 25.777922][ T329] usb 3-1: USB disconnect, device number 2 [ 25.847344][ T289] syz-executor (289) used greatest stack depth: 20880 bytes left [ 25.936194][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 25.941690][ T547] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.948599][ T547] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.955654][ T547] device bridge_slave_0 entered promiscuous mode [ 25.956265][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.962530][ T547] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.976061][ T547] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.983192][ T547] device bridge_slave_1 entered promiscuous mode [ 26.021184][ T547] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.028033][ T547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.035092][ T547] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.041934][ T547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.061318][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.066321][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.079228][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.079332][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.095797][ T313] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 26.104691][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.104969][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.115514][ T313] usb 4-1: config 0 descriptor?? [ 26.135338][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.143423][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.150289][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.157882][ T313] hub 4-1:0.0: USB hub found [ 26.162416][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.170630][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.177501][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.185401][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.193220][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.208761][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.219495][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.228164][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.235455][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.237087][ T293] smartjoyplus 0003:0925:0005.0002: invalid report_count -1131642821 [ 26.245203][ T547] device veth0_vlan entered promiscuous mode [ 26.250633][ T293] smartjoyplus 0003:0925:0005.0002: item 0 4 1 9 parsing failed [ 26.263884][ T293] smartjoyplus 0003:0925:0005.0002: parse failed [ 26.270398][ T293] smartjoyplus: probe of 0003:0925:0005.0002 failed with error -22 [ 26.284855][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.294308][ T547] device veth1_macvtap entered promiscuous mode [ 26.317810][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.326266][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.337464][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.345911][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.355569][ T6] usb 2-1: New USB device found, idVendor=056a, idProduct=0038, bcdDevice= 0.00 [ 26.364459][ T313] hub 4-1:0.0: 1 port detected [ 26.365353][ T555] netlink: 'syz.2.83': attribute type 10 has an invalid length. [ 26.370435][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.386055][ T555] netlink: 132 bytes leftover after parsing attributes in process `syz.2.83'. [ 26.390902][ T6] usb 2-1: config 0 descriptor?? [ 26.429093][ T562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.85'. [ 26.438821][ T45] device bridge_slave_1 left promiscuous mode [ 26.444777][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.452792][ T45] device bridge_slave_0 left promiscuous mode [ 26.458865][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.467280][ T45] device veth1_macvtap left promiscuous mode [ 26.473160][ T45] device veth0_vlan left promiscuous mode [ 26.473326][ T551] usb 5-1: USB disconnect, device number 3 [ 26.559557][ T565] loop0: detected capacity change from 0 to 1024 [ 26.596617][ T565] EXT4-fs (loop0): Ignoring removed oldalloc option [ 26.607579][ T565] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 26.633638][ T565] syz.0.86[565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.633722][ T565] syz.0.86[565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.746285][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 26.766545][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 26.774547][ T6] usb 2-1: USB disconnect, device number 2 [ 26.885884][ T574] loop0: detected capacity change from 0 to 40427 [ 26.976517][ T574] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 26.984143][ T574] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 27.008141][ T574] F2FS-fs (loop0): invalid crc value [ 27.014668][ T574] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.020854][ T551] hub 4-1:0.0: activate --> -90 [ 27.038965][ T574] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 27.045855][ T574] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.066201][ T313] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.202950][ T586] capability: warning: `syz.1.94' uses deprecated v2 capabilities in a way that may be insecure [ 27.214263][ T586] tipc: Started in network mode [ 27.219205][ T586] tipc: Node identity ac1414aa, cluster identity 4711 [ 27.226025][ T586] tipc: Enabling of bearer rejected, failed to enable media [ 27.266242][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 27.416220][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.436289][ T313] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.487114][ T329] usb 4-1: USB disconnect, device number 3 [ 27.506230][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 27.516201][ T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.606347][ T313] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.615204][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.623214][ T313] usb 3-1: Product: syz [ 27.627175][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.637870][ T313] usb 3-1: Manufacturer: syz [ 27.642206][ T313] usb 3-1: SerialNumber: syz [ 27.646682][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.656940][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.669869][ T6] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 27.678759][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.687231][ T6] usb 5-1: config 0 descriptor?? [ 27.756251][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 27.796238][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 27.805816][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 27.815379][ T26] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.876264][ T310] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 27.884463][ T310] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 27.892876][ T310] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 27.901687][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 27.911175][ T310] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 27.920771][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 27.933521][ T310] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 27.942452][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.951024][ T310] usb 2-1: config 0 descriptor?? [ 28.016267][ T26] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 28.025120][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.032967][ T26] usb 1-1: Product: syz [ 28.036933][ T26] usb 1-1: Manufacturer: syz [ 28.041330][ T26] usb 1-1: SerialNumber: syz [ 28.086474][ T26] hub 1-1:1.0: bad descriptor, ignoring hub [ 28.092190][ T26] hub: probe of 1-1:1.0 failed with error -5 [ 28.167526][ T6] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 28.174618][ T6] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 28.181665][ T6] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 28.188665][ T6] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 28.195656][ T6] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 28.202732][ T6] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 28.210332][ T6] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 28.217541][ T310] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 28.228902][ T310] usb 2-1: USB disconnect, device number 3 [ 28.234868][ T6] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 28.242206][ T310] usblp0: removed [ 28.246234][ T6] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 28.253281][ T6] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 28.266192][ T329] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.267919][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input4 [ 28.288209][ T6] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 28.307280][ T26] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 28.377689][ T26] usb 5-1: USB disconnect, device number 4 [ 28.506223][ T329] usb 4-1: Using ep0 maxpacket: 8 [ 28.646381][ T551] usb 1-1: USB disconnect, device number 3 [ 28.652621][ T551] usblp0: removed [ 28.756229][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.786260][ T313] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 28.792517][ T313] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 28.800319][ T313] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 28.806331][ T329] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 28.815255][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.823005][ T329] usb 4-1: Product: syz [ 28.827104][ T329] usb 4-1: Manufacturer: syz [ 28.831566][ T329] usb 4-1: SerialNumber: syz [ 28.836558][ T329] r8152-cfgselector 4-1: config 0 descriptor?? [ 28.996259][ T313] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 29.001687][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 29.017832][ T313] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 29.029451][ T313] usb 3-1: USB disconnect, device number 3 [ 29.035497][ T313] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 29.126305][ T310] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 29.143223][ T310] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 29.152316][ T310] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 29.161212][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 29.171051][ T310] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 29.180593][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 29.204412][ T310] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 29.222906][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.238712][ T634] loop4: detected capacity change from 0 to 1024 [ 29.245594][ T310] usb 2-1: config 0 descriptor?? [ 29.276512][ T634] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 29.306257][ T329] r8152-cfgselector 4-1: Unknown version 0x0000 [ 29.312360][ T329] r8152-cfgselector 4-1: bad CDC descriptors [ 29.336578][ T329] r8152-cfgselector 4-1: Unknown version 0x0000 [ 29.353613][ T329] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 29.503533][ T643] loop2: detected capacity change from 0 to 128 [ 29.510339][ T310] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 29.525844][ T643] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.536353][ T643] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 29.636224][ T313] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 29.876206][ T662] usblp0:failed reading printer status (-32) [ 29.906367][ T329] usb 2-1: USB disconnect, device number 4 [ 29.915547][ T329] usblp0: removed [ 29.975440][ T669] loop3: detected capacity change from 0 to 512 [ 29.996226][ T313] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 30.006926][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.017969][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.027650][ T313] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 30.040505][ T313] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 30.049397][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.057576][ T669] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.071193][ T669] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.081524][ T313] usb 5-1: config 0 descriptor?? [ 30.091760][ T669] EXT4-fs (loop3): 1 truncate cleaned up [ 30.097640][ T669] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 30.131462][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 30.131475][ T30] audit: type=1400 audit(1724994445.222:194): avc: denied { create } for pid=668 comm="syz.3.115" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.215361][ T30] audit: type=1400 audit(1724994445.252:195): avc: denied { setattr } for pid=668 comm="syz.3.115" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.238254][ T30] audit: type=1400 audit(1724994445.252:196): avc: denied { write } for pid=668 comm="syz.3.115" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.268516][ T30] audit: type=1400 audit(1724994445.252:197): avc: denied { add_name } for pid=668 comm="syz.3.115" name="#1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.291475][ T30] audit: type=1400 audit(1724994445.252:198): avc: denied { remove_name } for pid=668 comm="syz.3.115" name="#1" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.315362][ T30] audit: type=1400 audit(1724994445.252:199): avc: denied { rename } for pid=668 comm="syz.3.115" name="#1" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.340315][ T30] audit: type=1400 audit(1724994445.252:200): avc: denied { unlink } for pid=668 comm="syz.3.115" name="#1" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 30.362204][ T30] audit: type=1400 audit(1724994445.252:201): avc: denied { unlink } for pid=668 comm="syz.3.115" name="#2" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.396554][ T30] audit: type=1400 audit(1724994445.262:202): avc: denied { setattr } for pid=668 comm="syz.3.115" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.424837][ T30] audit: type=1400 audit(1724994445.262:203): avc: denied { read } for pid=668 comm="syz.3.115" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.515700][ T680] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.523014][ T680] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.530580][ T680] device bridge_slave_0 entered promiscuous mode [ 30.540227][ T680] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.547410][ T680] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.554696][ T680] device bridge_slave_1 entered promiscuous mode [ 30.567825][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.577487][ T313] nintendo 0003:057E:2009.0004: hidraw0: USB HID v0.00 Device [HID 057e:2009] on usb-dummy_hcd.4-1/input0 [ 30.656088][ T680] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.662956][ T680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.670061][ T680] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.676833][ T680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.684901][ T313] nintendo 0003:057E:2009.0004: Failed to read stick cal, using defaults; ret=-38 [ 30.707974][ T313] nintendo 0003:057E:2009.0004: Analog stick positions may be inaccurate [ 30.715411][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.717274][ T313] nintendo 0003:057E:2009.0004: Failed to set report mode; ret=-38 [ 30.731686][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.733128][ T313] nintendo 0003:057E:2009.0004: probe - fail = -38 [ 30.745033][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.752155][ T313] nintendo: probe of 0003:057E:2009.0004 failed with error -38 [ 30.770315][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.778340][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.783931][ T313] usb 5-1: USB disconnect, device number 5 [ 30.785942][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.798225][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.805584][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.813986][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.820853][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.836726][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.844427][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.856491][ T680] device veth0_vlan entered promiscuous mode [ 30.862787][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.870581][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.877990][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.885162][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.899419][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.908208][ T680] device veth1_macvtap entered promiscuous mode [ 30.917128][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.928338][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.946425][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.957774][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.967045][ T381] device bridge_slave_1 left promiscuous mode [ 30.973050][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.980532][ T381] device bridge_slave_0 left promiscuous mode [ 30.986742][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.995775][ T381] device veth1_macvtap left promiscuous mode [ 30.996191][ T551] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.001786][ T381] device veth0_vlan left promiscuous mode [ 31.036408][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 31.046323][ T6] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 31.065344][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.065737][ T692] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 31.075431][ T6] usb 1-1: SerialNumber: syz [ 31.081282][ T692] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 31.126925][ T695] loop3: detected capacity change from 0 to 512 [ 31.166464][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 31.176089][ T26] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 31.218107][ T695] EXT4-fs (loop3): Test dummy encryption mode enabled [ 31.225117][ T695] EXT4-fs error (device loop3): ext4_fill_super:4831: inode #2: comm syz.3.126: casefold flag without casefold feature [ 31.237731][ T695] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 31.247685][ T695] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 31.264237][ T695] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 31.274321][ T695] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 31.283897][ T695] incfs: Can't find or create .index dir in ./file0 [ 31.290573][ T695] incfs: mount failed -22 [ 31.295993][ T695] incfs: Can't find or create .incomplete dir in ./file0 [ 31.307940][ T695] incfs: mount failed -22 [ 31.356345][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 31.366441][ T551] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 31.367919][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.377861][ T6] usb 1-1: 0:2 : does not exist [ 31.384903][ T26] usb 2-1: Product: syz [ 31.390292][ T551] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.397707][ T26] usb 2-1: Manufacturer: syz [ 31.404817][ T551] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.408845][ T26] usb 2-1: SerialNumber: syz [ 31.418448][ T551] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 31.435472][ T551] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 31.444356][ T551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.453005][ T551] usb 3-1: config 0 descriptor?? [ 31.596244][ T313] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 31.605523][ T6] usb 1-1: USB disconnect, device number 4 [ 31.626190][ T293] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.639604][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.686846][ T26] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 31.836288][ T313] usb 5-1: Using ep0 maxpacket: 32 [ 31.931403][ T26] usb 2-1: USB disconnect, device number 5 [ 31.938398][ T551] thrustmaster 0003:044F:B653.0005: unbalanced delimiter at end of report description [ 31.938602][ T26] usblp0: removed [ 31.952774][ T551] thrustmaster 0003:044F:B653.0005: parse failed [ 31.959062][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.969984][ T551] thrustmaster: probe of 0003:044F:B653.0005 failed with error -22 [ 31.977760][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.987350][ T293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.999916][ T293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.009524][ T313] usb 5-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 32.018346][ T293] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 32.027206][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.035187][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.043214][ T313] usb 5-1: config 0 descriptor?? [ 32.049169][ T293] usb 4-1: config 0 descriptor?? [ 32.152520][ T329] usb 3-1: USB disconnect, device number 4 [ 32.336249][ T60] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.527327][ T313] thrustmaster 0003:044F:B324.0006: item fetching failed at offset 0/3 [ 32.536776][ T293] hid-led 0003:1D34:000A.0007: unknown main item tag 0x0 [ 32.543860][ T313] thrustmaster 0003:044F:B324.0006: parse failed [ 32.550063][ T313] thrustmaster: probe of 0003:044F:B324.0006 failed with error -22 [ 32.576259][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 32.738260][ T293] hid-led 0003:1D34:000A.0007: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 32.750463][ T293] hid-led 0003:1D34:000A.0007: Dream Cheeky Webmail Notifier initialized [ 32.762558][ T293] usb 5-1: USB disconnect, device number 6 [ 32.768272][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.876209][ T60] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 32.885106][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.893239][ T60] usb 1-1: Product: syz [ 32.897495][ T60] usb 1-1: Manufacturer: syz [ 32.901907][ T60] usb 1-1: SerialNumber: syz [ 32.907296][ T60] usb 1-1: config 0 descriptor?? [ 32.941895][ T329] usb 4-1: USB disconnect, device number 5 [ 33.136215][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.147040][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.156612][ T6] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 33.165418][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.174158][ T6] usb 2-1: config 0 descriptor?? [ 33.247841][ T727] syz.2.138 (727) used greatest stack depth: 20624 bytes left [ 33.326540][ T735] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 33.566408][ T293] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 33.627023][ T725] syz.1.137[725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.627072][ T725] syz.1.137[725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.638089][ T60] (unnamed net_device) (uninitialized): Assigned a random MAC address: b2:b8:02:76:08:96 [ 33.660624][ T60] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 33.676205][ T397] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.689636][ T6] sony 0003:054C:0268.0008: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 33.703938][ T6] sony 0003:054C:0268.0008: failed to claim input [ 33.766270][ T313] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.856622][ T329] usb 1-1: USB disconnect, device number 5 [ 33.876293][ T138] net eth1: rx_urb submit failed: -19 [ 33.882064][ T60] usb 2-1: USB disconnect, device number 6 [ 33.936238][ T293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.947002][ T293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.957334][ T293] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 33.966259][ T293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.974907][ T293] usb 5-1: config 0 descriptor?? [ 34.056342][ T397] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 34.067490][ T397] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 34.078563][ T397] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 34.087394][ T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.106322][ T739] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 34.146279][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.157196][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.166965][ T313] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 34.175810][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.184495][ T313] usb 4-1: config 0 descriptor?? [ 34.346244][ T397] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 34.354180][ T397] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input5 [ 34.364372][ T397] usb 3-1: USB disconnect, device number 5 [ 34.379681][ T775] syz.0.147[775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.379755][ T775] syz.0.147[775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.447077][ T293] hid-multitouch 0003:1FD2:6007.0009: unknown main item tag 0x0 [ 34.465606][ T293] hid-multitouch 0003:1FD2:6007.0009: unknown main item tag 0x0 [ 34.473940][ T293] hid-multitouch 0003:1FD2:6007.0009: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 34.649647][ T329] usb 5-1: USB disconnect, device number 7 [ 34.677391][ T313] magicmouse 0003:05AC:0269.000A: item fetching failed at offset 6/7 [ 34.685612][ T313] magicmouse 0003:05AC:0269.000A: magicmouse hid parse failed [ 34.692975][ T313] magicmouse: probe of 0003:05AC:0269.000A failed with error -22 [ 34.879964][ T397] usb 4-1: USB disconnect, device number 6 [ 34.891575][ T806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 34.984018][ T812] netlink: 56 bytes leftover after parsing attributes in process `syz.2.164'. [ 34.993851][ T812] Zero length message leads to an empty skb [ 35.022946][ T819] syz.2.167[819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.023089][ T819] syz.2.167[819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.072564][ T823] loop0: detected capacity change from 0 to 256 [ 35.099154][ T825] loop2: detected capacity change from 0 to 512 [ 35.133876][ T825] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.170: inline data xattr refers to an external xattr inode [ 35.148714][ T825] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.170: couldn't read orphan inode 12 (err -117) [ 35.161158][ T825] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,data_err=ignore,norecovery,resuid=0x0000000000000000,prjquota,debug_want_extra_isize=0x0000000000000008,usrjquota=,resgid=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback. [ 35.215707][ T825] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz.2.170: Invalid inode table block 4117007063 in block_group 0 [ 35.229303][ T825] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 35.239104][ T825] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #2: comm syz.2.170: mark_inode_dirty error [ 35.258567][ T288] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 4117007063 in block_group 0 [ 35.272152][ T288] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 35.282000][ T288] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 35.293994][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 35.294010][ T30] audit: type=1400 audit(2000000000.750:250): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.320070][ T288] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 4117007063 in block_group 0 [ 35.333700][ T288] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 35.343157][ T288] EXT4-fs error (device loop2): __ext4_unlink:3281: inode #2: comm syz-executor: mark_inode_dirty error [ 35.389297][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm kworker/u4:4: Invalid inode table block 4117007063 in block_group 0 [ 35.506165][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 35.566713][ T30] audit: type=1400 audit(2000000001.020:251): avc: denied { getopt } for pid=841 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.647124][ T843] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.653964][ T843] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.661312][ T843] device bridge_slave_0 entered promiscuous mode [ 35.668028][ T843] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.674845][ T843] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.682073][ T843] device bridge_slave_1 entered promiscuous mode [ 35.723183][ T30] audit: type=1400 audit(2000000001.170:252): avc: denied { validate_trans } for pid=851 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 35.766025][ T30] audit: type=1400 audit(2000000001.210:253): avc: denied { create } for pid=856 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 35.786234][ T30] audit: type=1400 audit(2000000001.210:254): avc: denied { write } for pid=856 comm="syz.0.184" path="socket:[18466]" dev="sockfs" ino=18466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 35.811170][ T329] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.818680][ T30] audit: type=1400 audit(2000000001.210:255): avc: denied { nlmsg_read } for pid=856 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 35.820672][ T843] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.842553][ T30] audit: type=1400 audit(2000000001.210:256): avc: denied { read } for pid=856 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 35.845907][ T843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.872907][ T843] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.876765][ T859] loop0: detected capacity change from 0 to 512 [ 35.879704][ T843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.889469][ T26] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 35.900309][ T39] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 35.911537][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.922827][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.927776][ T859] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 35.932428][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 35.956736][ T859] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 35.976001][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.983694][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.990850][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.004417][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.012800][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.019669][ T480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.027031][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.034945][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.041788][ T480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.055534][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.066322][ T39] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 36.074719][ T843] device veth0_vlan entered promiscuous mode [ 36.081394][ T39] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 36.082217][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.089880][ T39] usb 5-1: Manufacturer: syz [ 36.098098][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.105555][ T39] usb 5-1: config 0 descriptor?? [ 36.109456][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.121084][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.128474][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.142389][ T843] device veth1_macvtap entered promiscuous mode [ 36.158425][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.166400][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 36.172971][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.182626][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.192085][ T8] device bridge_slave_1 left promiscuous mode [ 36.198251][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.205684][ T8] device bridge_slave_0 left promiscuous mode [ 36.213175][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.216296][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.230873][ T329] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 36.239811][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.240087][ T8] device veth1_macvtap left promiscuous mode [ 36.248282][ T329] usb 2-1: config 0 descriptor?? [ 36.255455][ T8] device veth0_vlan left promiscuous mode [ 36.286415][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.306874][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.326218][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 36.339132][ T26] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 36.348068][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.356871][ T26] usb 4-1: config 0 descriptor?? [ 36.378780][ T868] loop2: detected capacity change from 0 to 512 [ 36.453183][ T868] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 36.465446][ T868] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 36.497199][ T30] audit: type=1400 audit(2000000001.950:257): avc: denied { create } for pid=867 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.524876][ T30] audit: type=1400 audit(2000000001.970:258): avc: denied { setopt } for pid=867 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.587361][ T39] appleir 0003:05AC:8243.000B: item fetching failed at offset 0/1 [ 36.595209][ T39] appleir 0003:05AC:8243.000B: parse failed [ 36.602454][ T39] appleir: probe of 0003:05AC:8243.000B failed with error -22 [ 36.613208][ T872] loop2: detected capacity change from 0 to 512 [ 36.637800][ T872] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 36.653977][ T872] ext4 filesystem being mounted at /1/bus supports timestamps until 2038 (0x7fffffff) [ 36.787235][ T329] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 36.793844][ T329] arvo 0003:1E7D:30D4.000C: item fetching failed at offset 6/7 [ 36.816364][ T329] arvo 0003:1E7D:30D4.000C: parse failed [ 36.821830][ T329] arvo: probe of 0003:1E7D:30D4.000C failed with error -22 [ 36.837515][ T26] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 36.844567][ T26] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 36.876216][ T26] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 36.883259][ T26] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 36.896238][ T26] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 36.903287][ T26] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 36.910532][ T26] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 36.917773][ T26] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 36.924780][ T26] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 36.931886][ T26] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 36.943820][ T26] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000D/input/input6 [ 36.962098][ T26] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 36.976447][ T329] usb 5-1: USB disconnect, device number 8 [ 37.007425][ T863] usb 2-1: USB disconnect, device number 7 [ 37.014544][ T30] audit: type=1400 audit(2000000002.460:259): avc: denied { bind } for pid=879 comm="syz.0.189" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.068229][ T39] usb 4-1: USB disconnect, device number 7 [ 37.356203][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.596187][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 37.604441][ T894] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 37.614877][ T894] SELinux: security_context_str_to_sid(staff_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 37.649842][ T888] loop4: detected capacity change from 0 to 40427 [ 37.697017][ T888] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 37.704688][ T888] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 37.715368][ T888] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.716238][ T26] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 37.739615][ T26] usb 1-1: config 0 has no interface number 0 [ 37.749641][ T26] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 37.749861][ T888] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 37.766108][ T888] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 37.767980][ T26] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 37.820728][ T290] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 37.820746][ T290] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 37.828251][ T290] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 37.835612][ T290] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 37.843218][ T290] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 37.850681][ T290] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 37.858032][ T290] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 37.896250][ T26] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 37.912728][ T26] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 37.920603][ T26] usb 1-1: Product: syz [ 37.924589][ T26] usb 1-1: SerialNumber: syz [ 37.929231][ T39] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.937546][ T26] usb 1-1: config 0 descriptor?? [ 38.216915][ T26] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 38.225225][ T26] usb 1-1: USB disconnect, device number 6 [ 38.296271][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.306264][ T863] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 38.313577][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.396269][ T39] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 38.405395][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 38.413292][ T39] usb 3-1: SerialNumber: syz [ 38.460883][ T911] device pim6reg1 entered promiscuous mode [ 38.546257][ T863] usb 5-1: Using ep0 maxpacket: 16 [ 38.666240][ T863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.678045][ T39] usb 3-1: 0:2 : does not exist [ 38.682753][ T863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.694727][ T863] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.707721][ T863] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 38.716616][ T863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.730475][ T863] usb 5-1: config 0 descriptor?? [ 38.776201][ T60] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 38.837273][ T397] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.088765][ T26] usb 3-1: USB disconnect, device number 6 [ 39.136277][ T60] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.145778][ T60] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 39.155322][ T60] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.170142][ T939] device pim6reg1 entered promiscuous mode [ 39.206998][ T863] koneplus 0003:1E7D:2E22.000E: unknown main item tag 0x0 [ 39.214505][ T863] koneplus 0003:1E7D:2E22.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 39.226270][ T397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.239699][ T397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.240576][ T941] loop0: detected capacity change from 0 to 512 [ 39.249594][ T397] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 39.264467][ T397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.272803][ T397] usb 2-1: config 0 descriptor?? [ 39.298045][ T941] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 39.326272][ T60] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 39.335289][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.343157][ T60] usb 4-1: Product: syz [ 39.347328][ T60] usb 4-1: Manufacturer: syz [ 39.351750][ T60] usb 4-1: SerialNumber: syz [ 39.396759][ T60] hub 4-1:1.0: bad descriptor, ignoring hub [ 39.402522][ T60] hub: probe of 4-1:1.0 failed with error -5 [ 39.416240][ T863] koneplus 0003:1E7D:2E22.000E: couldn't init struct koneplus_device [ 39.424275][ T863] koneplus 0003:1E7D:2E22.000E: couldn't install mouse [ 39.432446][ T863] koneplus: probe of 0003:1E7D:2E22.000E failed with error -5 [ 39.606857][ T60] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 39.635116][ T293] usb 5-1: USB disconnect, device number 9 [ 39.777032][ T397] elo 0003:04E7:0030.000F: item fetching failed at offset 5/7 [ 39.784479][ T397] elo 0003:04E7:0030.000F: parse failed [ 39.791797][ T397] elo: probe of 0003:04E7:0030.000F failed with error -22 [ 39.946285][ T60] usb 4-1: USB disconnect, device number 8 [ 39.957758][ T60] usblp0: removed [ 39.982846][ T863] usb 2-1: USB disconnect, device number 8 [ 40.162182][ T965] syz.4.224 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.347208][ T978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.230'. [ 40.386556][ T982] process 'syz.4.232' launched './file0' with NULL argv: empty string added [ 40.395300][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 40.395313][ T30] audit: type=1400 audit(2000000005.840:295): avc: denied { execute_no_trans } for pid=981 comm="syz.4.232" path="/26/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.460691][ T988] loop4: detected capacity change from 0 to 512 [ 40.493432][ T988] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.235: bad orphan inode 17 [ 40.503621][ T988] ext4_test_bit(bit=16, block=4) = 1 [ 40.508963][ T988] is_bad_inode(inode)=0 [ 40.512923][ T988] NEXT_ORPHAN(inode)=0 [ 40.516970][ T988] max_ino=32 [ 40.519969][ T988] i_nlink=1 [ 40.522945][ T988] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.537866][ T988] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.235: bg 0: block 7: invalid block bitmap [ 40.571595][ T30] audit: type=1400 audit(2000000006.020:296): avc: denied { read } for pid=996 comm="syz.4.238" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.593796][ T863] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.593897][ T30] audit: type=1400 audit(2000000006.020:297): avc: denied { open } for pid=996 comm="syz.4.238" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.624853][ T30] audit: type=1400 audit(2000000006.020:298): avc: denied { ioctl } for pid=996 comm="syz.4.238" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.649783][ T30] audit: type=1400 audit(2000000006.020:299): avc: denied { set_context_mgr } for pid=996 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 40.696193][ T60] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.836189][ T551] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.936214][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 40.956297][ T863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.967053][ T863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.976637][ T863] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 40.985487][ T863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.994152][ T863] usb 1-1: config 0 descriptor?? [ 41.056250][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.067024][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.076539][ T60] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 41.085339][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.094104][ T60] usb 4-1: config 0 descriptor?? [ 41.096646][ T551] usb 2-1: Using ep0 maxpacket: 8 [ 41.137153][ T60] hub 4-1:0.0: USB hub found [ 41.246484][ T551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.257215][ T551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.266757][ T551] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 41.275567][ T551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.284139][ T551] usb 2-1: config 0 descriptor?? [ 41.396277][ T60] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 41.476382][ T863] hid (null): bogus close delimiter [ 41.669014][ T30] audit: type=1400 audit(2000000007.120:300): avc: denied { write } for pid=1016 comm="syz.4.246" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.669883][ T1017] incfs: Can't find or create .index dir in ./file0 [ 41.690760][ T30] audit: type=1400 audit(2000000007.120:301): avc: denied { add_name } for pid=1016 comm="syz.4.246" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.696762][ T1017] incfs: mount failed -14 [ 41.721374][ T60] usbhid 4-1:0.0: can't add hid device: -71 [ 41.727313][ T30] audit: type=1400 audit(2000000007.120:302): avc: denied { associate } for pid=1016 comm="syz.4.246" name=".index" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 41.748812][ T863] usb 1-1: language id specifier not provided by device, defaulting to English [ 41.748907][ T60] usbhid: probe of 4-1:0.0 failed with error -71 [ 41.767070][ T551] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 41.776647][ T551] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 41.784821][ T551] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 41.786916][ T60] usb 4-1: USB disconnect, device number 9 [ 41.792984][ T551] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 41.806219][ T551] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 41.814502][ T551] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 41.822336][ T551] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 41.830321][ T551] steelseries_srws1 0003:1038:1410.0011: missing HID_OUTPUT_REPORT 0 [ 41.839506][ T551] Bluetooth: hci0: command 0x1003 tx timeout [ 41.846583][ T962] Bluetooth: hci0: sending frame failed (-49) [ 41.870735][ T1020] user requested TSC rate below hardware speed [ 41.970735][ T30] audit: type=1326 audit(2000000007.420:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1027 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba38f7ef9 code=0x7ffc0000 [ 42.001611][ T26] usb 2-1: USB disconnect, device number 9 [ 42.006412][ T30] audit: type=1326 audit(2000000007.420:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1027 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba38f7ef9 code=0x7ffc0000 [ 42.104736][ T1034] syz.4.253[1034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.104806][ T1034] syz.4.253[1034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.126731][ T1034] syz.4.253[1034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.137887][ T1034] syz.4.253[1034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.187449][ T863] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0010/input/input7 [ 42.211656][ T863] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0010/input/input8 [ 42.236834][ T863] uclogic 0003:256C:006D.0010: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 42.393019][ T26] usb 1-1: USB disconnect, device number 7 [ 42.596199][ T863] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 42.836201][ T863] usb 4-1: Using ep0 maxpacket: 32 [ 42.913289][ T1054] device pim6reg1 entered promiscuous mode [ 42.956245][ T863] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 42.968818][ T863] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 42.977551][ T863] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 42.986333][ T863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.995772][ T863] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 43.005365][ T863] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 43.018252][ T863] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 43.027107][ T863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.035624][ T863] usb 4-1: config 0 descriptor?? [ 43.192708][ T1066] loop1: detected capacity change from 0 to 2048 [ 43.210824][ T1070] syz.4.269[1070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.210870][ T1070] syz.4.269[1070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.241943][ T1066] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.296773][ T863] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 43.309775][ T863] usb 4-1: USB disconnect, device number 10 [ 43.319141][ T863] usblp0: removed [ 43.326264][ T397] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 43.355043][ T1077] loop1: detected capacity change from 0 to 256 [ 43.440343][ T1077] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 43.452460][ T1077] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 43.467034][ T1077] exFAT-fs (loop1): hint_cluster is invalid (17) [ 43.473579][ T1077] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 43.481581][ T1077] exFAT-fs (loop1): Filesystem has been set read-only [ 43.506213][ T26] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 43.716239][ T397] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 43.724743][ T397] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 43.735406][ T397] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 4 [ 43.796199][ T60] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 43.826295][ T863] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 43.866279][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.877072][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.886537][ T26] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 43.895361][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.896241][ T551] Bluetooth: hci0: command 0x1001 tx timeout [ 43.903891][ T26] usb 5-1: config 0 descriptor?? [ 43.909913][ T962] Bluetooth: hci0: sending frame failed (-49) [ 43.946262][ T397] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 43.955603][ T397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.963405][ T397] usb 1-1: Product: syz [ 43.967385][ T397] usb 1-1: Manufacturer: syz [ 43.971779][ T397] usb 1-1: SerialNumber: syz [ 44.036231][ T60] usb 2-1: Using ep0 maxpacket: 8 [ 44.076241][ T863] usb 4-1: Using ep0 maxpacket: 32 [ 44.156374][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.167127][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.176720][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 44.189334][ T60] usb 2-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 44.198216][ T863] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 44.206325][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.214316][ T863] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 44.223244][ T60] usb 2-1: config 0 descriptor?? [ 44.228051][ T863] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 44.236881][ T863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.246362][ T863] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 44.255867][ T863] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.268809][ T863] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 44.277947][ T863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.287048][ T863] usb 4-1: config 0 descriptor?? [ 44.546865][ T863] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 44.606350][ T397] usb 1-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 44.614635][ T397] usb 1-1: found format II with max.bitrate = 0, frame size=2 [ 44.621922][ T397] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 44.649612][ T397] usb 1-1: USB disconnect, device number 8 [ 44.727011][ T60] ntrig 0003:1B96:0010.0013: item fetching failed at offset 5/7 [ 44.734639][ T60] ntrig 0003:1B96:0010.0013: parse failed [ 44.740385][ T60] ntrig: probe of 0003:1B96:0010.0013 failed with error -22 [ 44.896258][ T26] usb 5-1: string descriptor 0 read error: -71 [ 44.916243][ T1082] usblp0:failed reading printer status (-32) [ 44.916249][ T26] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71 [ 44.916278][ T26] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 44.938587][ T26] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71 [ 44.938803][ T397] usb 4-1: USB disconnect, device number 11 [ 44.946490][ T26] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 44.959758][ T293] usb 2-1: USB disconnect, device number 10 [ 44.960841][ T26] uclogic: probe of 0003:256C:006D.0012 failed with error -71 [ 44.970261][ T397] usblp0: removed [ 44.981027][ T26] usb 5-1: USB disconnect, device number 10 [ 45.007218][ T1086] loop0: detected capacity change from 0 to 128 [ 45.486059][ T1098] loop1: detected capacity change from 0 to 512 [ 45.509937][ T1098] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.517236][ T1103] xt_hashlimit: size too large, truncated to 1048576 [ 45.527584][ T1098] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.556899][ T1098] EXT4-fs (loop1): 1 truncate cleaned up [ 45.566285][ T1098] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,nodelalloc,sb=0x0000000000000003,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 45.593036][ T1106] loop3: detected capacity change from 0 to 512 [ 45.607880][ T1107] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 45.666507][ T1106] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 45.677899][ T1106] EXT4-fs (loop3): Unrecognized mount option "audit" or missing value [ 45.785913][ T1106] loop3: detected capacity change from 0 to 1024 [ 45.793930][ T1110] loop1: detected capacity change from 0 to 40427 [ 45.826949][ T1110] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 45.833703][ T1110] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 45.844062][ T1110] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 45.864215][ T1106] EXT4-fs (loop3): Unrecognized mount option "permit_directio" or missing value [ 45.879201][ T1110] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 45.886109][ T1110] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 45.906581][ T1110] attempt to access beyond end of device [ 45.906581][ T1110] loop1: rw=2049, want=53256, limit=40427 [ 45.918588][ T1110] attempt to access beyond end of device [ 45.918588][ T1110] loop1: rw=2049, want=53264, limit=40427 [ 45.930569][ T1110] attempt to access beyond end of device [ 45.930569][ T1110] loop1: rw=2049, want=53328, limit=40427 [ 45.942797][ T1110] syz.1.283 (1110) used greatest stack depth: 20448 bytes left [ 45.951373][ T291] attempt to access beyond end of device [ 45.951373][ T291] loop1: rw=2049, want=45104, limit=40427 [ 45.976199][ T397] Bluetooth: hci0: command 0x1009 tx timeout [ 46.146331][ T39] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 46.164444][ T1127] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 46.232417][ T1131] loop0: detected capacity change from 0 to 256 [ 46.328429][ T1131] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 46.340447][ T1131] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 46.358284][ T1131] exFAT-fs (loop0): hint_cluster is invalid (17) [ 46.364986][ T1131] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 46.372900][ T1131] exFAT-fs (loop0): Filesystem has been set read-only [ 46.379654][ T397] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 46.506222][ T39] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 46.506611][ T1142] loop0: detected capacity change from 0 to 128 [ 46.514411][ T39] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.530600][ T39] usb 4-1: config 0 has no interface number 0 [ 46.536748][ T39] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 46.549583][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 46.549598][ T30] audit: type=1400 audit(2000000012.010:331): avc: denied { read write } for pid=1141 comm="syz.0.294" name="event0" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.578914][ T39] usb 4-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.592118][ T30] audit: type=1400 audit(2000000012.010:332): avc: denied { open } for pid=1141 comm="syz.0.294" path="/dev/input/event0" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.616496][ T30] audit: type=1400 audit(2000000012.070:333): avc: denied { ioctl } for pid=1141 comm="syz.0.294" path="/dev/input/event0" dev="devtmpfs" ino=164 ioctlcmd=0x4502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.656164][ T397] usb 2-1: Using ep0 maxpacket: 16 [ 46.756292][ T39] usb 4-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 46.765307][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.773209][ T39] usb 4-1: Product: syz [ 46.777227][ T39] usb 4-1: Manufacturer: syz [ 46.781667][ T39] usb 4-1: SerialNumber: syz [ 46.787293][ T39] usb 4-1: config 0 descriptor?? [ 46.816211][ T397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.826735][ T39] usb 4-1: Found UVC 0.00 device syz (05ac:8600) [ 46.827028][ T397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.834526][ T39] usb 4-1: No valid video chain found. [ 46.842988][ T397] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.860720][ T397] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 46.869794][ T397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.881353][ T397] usb 2-1: config 0 descriptor?? [ 46.942212][ T1148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1148 comm=syz.0.296 [ 46.981954][ T1152] loop0: detected capacity change from 0 to 4096 [ 47.034523][ T1152] EXT4-fs (loop0): Ignoring removed nobh option [ 47.042895][ T1152] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,nobh,i_version,,errors=continue. Quota mode: writeback. [ 47.046409][ T26] usb 4-1: USB disconnect, device number 12 [ 47.065175][ T293] kernel write not supported for file bpf-prog (pid: 293 comm: kworker/0:2) [ 47.143258][ T30] audit: type=1400 audit(2000000012.590:334): avc: denied { read write } for pid=1159 comm="syz.0.301" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 47.167517][ T30] audit: type=1400 audit(2000000012.590:335): avc: denied { open } for pid=1159 comm="syz.0.301" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 47.241212][ T1164] loop0: detected capacity change from 0 to 256 [ 47.298224][ T1164] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 47.326450][ T1170] loop4: detected capacity change from 0 to 256 [ 47.333093][ T30] audit: type=1400 audit(2000000012.780:336): avc: denied { remove_name } for pid=1163 comm="syz.0.303" name=".index" dev="loop0" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.355967][ T30] audit: type=1400 audit(2000000012.780:337): avc: denied { rmdir } for pid=1163 comm="syz.0.303" name=".index" dev="loop0" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.400452][ T397] koneplus 0003:1E7D:2E22.0014: unknown main item tag 0x0 [ 47.418691][ T397] koneplus 0003:1E7D:2E22.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 47.438745][ T30] audit: type=1400 audit(2000000012.890:338): avc: denied { bind } for pid=1171 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.503074][ T30] audit: type=1400 audit(2000000012.950:339): avc: denied { name_bind } for pid=1178 comm="syz.0.310" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 47.602638][ T1181] loop3: detected capacity change from 0 to 1024 [ 47.616241][ T397] koneplus 0003:1E7D:2E22.0014: couldn't init struct koneplus_device [ 47.624428][ T397] koneplus 0003:1E7D:2E22.0014: couldn't install mouse [ 47.632936][ T397] koneplus: probe of 0003:1E7D:2E22.0014 failed with error -5 [ 47.644907][ T1181] EXT4-fs (loop3): Ignoring removed orlov option [ 47.651902][ T1181] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 47.668362][ T1181] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 47.758706][ T30] audit: type=1400 audit(2000000013.210:340): avc: denied { create } for pid=1187 comm="syz.3.313" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 47.853805][ T293] usb 2-1: USB disconnect, device number 11 [ 47.896162][ T39] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 48.032796][ T1197] loop4: detected capacity change from 0 to 40427 [ 48.089100][ T1200] input: syz0 as /devices/virtual/input/input10 [ 48.130914][ T1197] F2FS-fs (loop4): Found nat_bits in checkpoint [ 48.168953][ T1197] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 48.266296][ T39] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 48.277114][ T1197] loop4: detected capacity change from 40427 to 0 [ 48.285999][ C1] blk_update_request: I/O error, dev loop4, sector 28856 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 48.297737][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.308455][ C1] blk_update_request: I/O error, dev loop4, sector 28856 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 48.320257][ C1] blk_update_request: I/O error, dev loop4, sector 28856 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 48.331762][ C1] blk_update_request: I/O error, dev loop4, sector 28856 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 48.343408][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.352978][ C1] blk_update_request: I/O error, dev loop4, sector 28856 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 48.364810][ C1] blk_update_request: I/O error, dev loop4, sector 28856 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 48.380906][ C1] blk_update_request: I/O error, dev loop4, sector 28856 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 48.392589][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 48.405702][ C1] blk_update_request: I/O error, dev loop4, sector 28856 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 48.417183][ C0] blk_update_request: I/O error, dev loop4, sector 28856 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 48.417211][ T39] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 48.437589][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.438547][ C0] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 48.456188][ T1206] F2FS-fs (loop4): f2fs_commit_super fails to record reason:2 err:-5 [ 48.464664][ T39] usb 1-1: config 0 descriptor?? [ 48.475762][ T290] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 48.483552][ T290] CPU: 0 PID: 290 Comm: syz-executor Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 48.493338][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 48.503250][ T290] Call Trace: [ 48.506354][ T290] [ 48.509132][ T290] dump_stack_lvl+0x151/0x1c0 [ 48.513645][ T290] ? io_uring_drop_tctx_refs+0x190/0x190 [ 48.519115][ T290] ? arch_stack_walk+0xf3/0x140 [ 48.523809][ T290] dump_stack+0x15/0x20 [ 48.527792][ T290] f2fs_is_valid_blkaddr+0xc87/0x12d0 [ 48.533000][ T290] f2fs_map_blocks+0x1622/0x3ab0 [ 48.537773][ T290] ? __stack_depot_save+0x34/0x470 [ 48.542725][ T290] ? f2fs_do_map_lock+0x70/0x70 [ 48.547841][ T290] ? debug_smp_processor_id+0x17/0x20 [ 48.553051][ T290] ? try_charge_memcg+0x213/0x1550 [ 48.558002][ T290] f2fs_mpage_readpages+0xc9a/0x21a0 [ 48.563124][ T290] ? dquot_release_reservation_block+0xa0/0xa0 [ 48.569104][ T290] ? workingset_activation+0x3f0/0x3f0 [ 48.574404][ T290] f2fs_readahead+0xfd/0x250 [ 48.578825][ T290] ? blk_start_plug+0x5a/0x170 [ 48.583425][ T290] read_pages+0x15e/0xb00 [ 48.587592][ T290] ? lru_cache_add+0x279/0x540 [ 48.592196][ T290] ? page_cache_ra_unbounded+0x920/0x920 [ 48.597659][ T290] ? add_to_page_cache_lru+0x225/0x2c0 [ 48.602959][ T290] ? add_to_page_cache_locked+0x40/0x40 [ 48.608337][ T290] ? __stack_depot_save+0x34/0x470 [ 48.613285][ T290] page_cache_ra_unbounded+0x6cb/0x920 [ 48.618582][ T290] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 48.624917][ T290] ? _raw_spin_unlock+0x4d/0x70 [ 48.629601][ T290] ondemand_readahead+0x9c8/0xfa0 [ 48.634462][ T290] ? do_wp_page+0x979/0xb60 [ 48.638802][ T290] ? page_cache_sync_ra+0x4d0/0x4d0 [ 48.643834][ T290] ? debug_smp_processor_id+0x17/0x20 [ 48.649050][ T290] ? kasan_quarantine_put+0x34/0x1a0 [ 48.654169][ T290] ? selinux_inode_getattr+0x11f/0x3f0 [ 48.659464][ T290] ? fault_around_bytes_set+0xc0/0xc0 [ 48.664666][ T290] page_cache_sync_ra+0x2e9/0x4d0 [ 48.669527][ T290] ? force_page_cache_ra+0x420/0x420 [ 48.674733][ T290] ? do_handle_mm_fault+0x1807/0x2400 [ 48.679950][ T290] f2fs_readdir+0x52d/0xba0 [ 48.684285][ T290] ? f2fs_fill_dentries+0xd60/0xd60 [ 48.689406][ T290] ? avc_policy_seqno+0x1b/0x70 [ 48.694115][ T290] ? __kasan_check_read+0x11/0x20 [ 48.698949][ T290] ? security_file_permission+0x86/0xb0 [ 48.704331][ T290] iterate_dir+0x265/0x610 [ 48.708668][ T290] ? f2fs_fill_dentries+0xd60/0xd60 [ 48.713704][ T290] __se_sys_getdents64+0x1c1/0x460 [ 48.718652][ T290] ? __x64_sys_getdents64+0x90/0x90 [ 48.723683][ T290] ? filldir+0x680/0x680 [ 48.727773][ T290] __x64_sys_getdents64+0x7b/0x90 [ 48.732626][ T290] x64_sys_call+0x5ae/0x9a0 [ 48.736964][ T290] do_syscall_64+0x3b/0xb0 [ 48.741224][ T290] ? clear_bhb_loop+0x35/0x90 [ 48.745730][ T290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.751457][ T290] RIP: 0033:0x7feba392a093 [ 48.755712][ T290] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 32 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 48.775152][ T290] RSP: 002b:00007ffcf26aa4b8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 48.783398][ T290] RAX: ffffffffffffffda RBX: 000055555576a4e0 RCX: 00007feba392a093 [ 48.791211][ T290] RDX: 0000000000008000 RSI: 000055555576a4e0 RDI: 0000000000000005 [ 48.799108][ T290] RBP: 000055555576a4b4 R08: 0000000000000000 R09: 0000000000000000 [ 48.806926][ T290] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 48.814730][ T290] R13: 0000000000000010 R14: 000055555576a4b0 R15: 00007ffcf26ac760 [ 48.822547][ T290] [ 48.828885][ T290] F2FS-fs (loop4): f2fs_commit_super fails to record errors:2, err:-5 [ 48.850986][ T290] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 48.861337][ T1214] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 48.865537][ T290] CPU: 0 PID: 290 Comm: syz-executor Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 48.881809][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 48.891799][ T290] Call Trace: [ 48.894923][ T290] [ 48.897701][ T290] dump_stack_lvl+0x151/0x1c0 [ 48.902212][ T290] ? io_uring_drop_tctx_refs+0x190/0x190 [ 48.907680][ T290] dump_stack+0x15/0x20 [ 48.911673][ T290] f2fs_is_valid_blkaddr+0xc87/0x12d0 [ 48.916883][ T290] f2fs_get_read_data_page+0x50f/0x850 [ 48.922196][ T290] ? f2fs_get_block+0x1b0/0x1b0 [ 48.926864][ T290] ? force_page_cache_ra+0x420/0x420 [ 48.931984][ T290] f2fs_find_data_page+0x19c/0x420 [ 48.936932][ T290] f2fs_readdir+0x53a/0xba0 [ 48.941273][ T290] ? f2fs_fill_dentries+0xd60/0xd60 [ 48.946304][ T290] ? avc_policy_seqno+0x1b/0x70 [ 48.950990][ T290] ? __kasan_check_read+0x11/0x20 [ 48.955852][ T290] ? security_file_permission+0x86/0xb0 [ 48.961246][ T290] iterate_dir+0x265/0x610 [ 48.965491][ T290] ? f2fs_fill_dentries+0xd60/0xd60 [ 48.970520][ T290] __se_sys_getdents64+0x1c1/0x460 [ 48.975467][ T290] ? __x64_sys_getdents64+0x90/0x90 [ 48.980499][ T290] ? filldir+0x680/0x680 [ 48.984581][ T290] __x64_sys_getdents64+0x7b/0x90 [ 48.989441][ T290] x64_sys_call+0x5ae/0x9a0 [ 48.993779][ T290] do_syscall_64+0x3b/0xb0 [ 48.998032][ T290] ? clear_bhb_loop+0x35/0x90 [ 49.002545][ T290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.008273][ T290] RIP: 0033:0x7feba392a093 [ 49.012528][ T290] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 32 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 49.031969][ T290] RSP: 002b:00007ffcf26aa4b8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 49.040215][ T290] RAX: ffffffffffffffda RBX: 000055555576a4e0 RCX: 00007feba392a093 [ 49.048025][ T290] RDX: 0000000000008000 RSI: 000055555576a4e0 RDI: 0000000000000005 [ 49.055835][ T290] RBP: 000055555576a4b4 R08: 0000000000000000 R09: 0000000000000000 [ 49.063647][ T290] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 49.071458][ T290] R13: 0000000000000010 R14: 000055555576a4b0 R15: 00007ffcf26ac760 [ 49.079275][ T290] [ 49.104278][ T1216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.322'. [ 49.237350][ T290] syz-executor (290) used greatest stack depth: 20000 bytes left [ 49.293352][ T1226] loop1: detected capacity change from 0 to 40427 [ 49.317015][ T39] thrustmaster 0003:044F:B653.0015: unknown main item tag 0x0 [ 49.320177][ T1226] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 49.329736][ T39] thrustmaster 0003:044F:B653.0015: unknown main item tag 0x1 [ 49.332176][ T1226] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 49.339486][ T39] thrustmaster 0003:044F:B653.0015: unknown main item tag 0x0 [ 49.357940][ T39] thrustmaster 0003:044F:B653.0015: item fetching failed at offset 3/7 [ 49.364776][ T1226] F2FS-fs (loop1): Found nat_bits in checkpoint [ 49.366603][ T39] thrustmaster 0003:044F:B653.0015: parse failed [ 49.378562][ T39] thrustmaster: probe of 0003:044F:B653.0015 failed with error -22 [ 49.386912][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.393770][ T1232] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.401599][ T1232] device bridge_slave_0 entered promiscuous mode [ 49.404434][ T1226] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 49.414614][ T1226] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 49.428435][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.435381][ T1232] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.442776][ T1232] device bridge_slave_1 entered promiscuous mode [ 49.471561][ T291] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 49.471580][ T291] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 49.479180][ T291] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 49.486824][ T291] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 49.494187][ T291] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 49.502060][ T291] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 49.509502][ T291] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 49.556005][ T293] usb 1-1: USB disconnect, device number 9 [ 49.569110][ T551] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 49.593800][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.600681][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.607770][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.614534][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.647156][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.654851][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.662263][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.675455][ T1241] tipc: New replicast peer: 100.1.1.1 [ 49.680887][ T1241] tipc: Enabled bearer , priority 10 [ 49.687339][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.697844][ T397] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.704696][ T397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.724194][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.732271][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.739126][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.748320][ T1243] device gretap0 entered promiscuous mode [ 49.754115][ T1243] device vlan2 entered promiscuous mode [ 49.760246][ T1243] device gretap0 left promiscuous mode [ 49.772722][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.780504][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.788920][ T10] device bridge_slave_1 left promiscuous mode [ 49.794942][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.802587][ T10] device bridge_slave_0 left promiscuous mode [ 49.808713][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.816668][ T10] device veth1_macvtap left promiscuous mode [ 49.836216][ T551] usb 4-1: Using ep0 maxpacket: 32 [ 49.900369][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.912593][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.926902][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.941284][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.950934][ T1232] device veth0_vlan entered promiscuous mode [ 49.973831][ T1232] device veth1_macvtap entered promiscuous mode [ 49.980823][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.992422][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.006528][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.051953][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.059223][ T1246] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.072287][ T1246] device bridge_slave_0 entered promiscuous mode [ 50.080592][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.088907][ T1246] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.096325][ T1246] device bridge_slave_1 entered promiscuous mode [ 50.116277][ T551] usb 4-1: New USB device found, idVendor=0421, idProduct=003a, bcdDevice=e6.7e [ 50.132254][ T551] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.160429][ T551] usb 4-1: Product: syz [ 50.164431][ T551] usb 4-1: Manufacturer: syz [ 50.169152][ T551] usb 4-1: SerialNumber: syz [ 50.178683][ T551] usb 4-1: config 0 descriptor?? [ 50.186736][ T1261] Â: renamed from pim6reg1 [ 50.216634][ T551] usb 4-1: bad CDC descriptors [ 50.222634][ T551] cdc_acm 4-1:0.0: Zero length descriptor references [ 50.229466][ T551] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 50.235936][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.243986][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.258662][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.267804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.275903][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.282772][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.290020][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.299605][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.308083][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.314922][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.322581][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.337453][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.353061][ T1246] device veth0_vlan entered promiscuous mode [ 50.360092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.368522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.376492][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.383726][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.391145][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.399145][ T60] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 50.411636][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.424173][ T1246] device veth1_macvtap entered promiscuous mode [ 50.424570][ T293] usb 4-1: USB disconnect, device number 13 [ 50.434947][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.446968][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.551916][ T1268] loop2: detected capacity change from 0 to 256 [ 50.586302][ T313] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 50.631346][ T1268] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 50.643444][ T1268] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 50.657077][ T1268] exFAT-fs (loop2): hint_cluster is invalid (17) [ 50.663709][ T1268] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 50.671556][ T1268] exFAT-fs (loop2): Filesystem has been set read-only [ 50.780548][ T10] device bridge_slave_1 left promiscuous mode [ 50.786668][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.796367][ T293] tipc: Node number set to 2886997162 [ 50.802319][ T10] device bridge_slave_0 left promiscuous mode [ 50.808452][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 50.818599][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.825575][ T60] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 50.836050][ T10] device veth1_macvtap left promiscuous mode [ 50.842018][ T10] device veth0_vlan left promiscuous mode [ 50.847709][ T60] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.946247][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.957051][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.968419][ T313] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 50.970474][ T1277] netlink: 'syz.2.344': attribute type 4 has an invalid length. [ 50.977558][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.003593][ T1277] netlink: 'syz.2.344': attribute type 4 has an invalid length. [ 51.007399][ T313] usb 1-1: config 0 descriptor?? [ 51.016367][ T60] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 51.031498][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.042438][ T60] usb 5-1: Product: syz [ 51.047614][ T60] usb 5-1: Manufacturer: syz [ 51.055500][ T60] usb 5-1: SerialNumber: syz [ 51.097029][ T60] hub 5-1:1.0: bad descriptor, ignoring hub [ 51.102848][ T60] hub: probe of 5-1:1.0 failed with error -5 [ 51.196200][ T6] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 51.307239][ T60] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 51.497268][ T313] hid-led 0003:1D34:000A.0016: unknown main item tag 0x0 [ 51.556268][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.646383][ T293] usb 5-1: USB disconnect, device number 11 [ 51.652723][ T293] usblp0: removed [ 51.716694][ T313] hid-led 0003:1D34:000A.0016: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 51.727876][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.737666][ T313] hid-led 0003:1D34:000A.0016: Dream Cheeky Webmail Notifier initialized [ 51.746183][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.754066][ T6] usb 4-1: Product: syz [ 51.759554][ T6] usb 4-1: Manufacturer: syz [ 51.763968][ T6] usb 4-1: SerialNumber: syz [ 51.936304][ T293] usb 1-1: USB disconnect, device number 10 [ 51.993583][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 51.993598][ T30] audit: type=1400 audit(2000000017.440:351): avc: denied { compute_member } for pid=1295 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 52.148961][ T1304] IPv6: NLM_F_CREATE should be specified when creating new route [ 52.156625][ T1304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.163615][ T1304] IPv6: NLM_F_CREATE should be set when creating new route [ 52.170685][ T1304] IPv6: NLM_F_CREATE should be set when creating new route [ 52.326232][ T313] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 52.336199][ T863] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 52.454623][ T1310] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 52.465470][ T39] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 52.566211][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 52.686246][ T313] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.697277][ T313] usb 3-1: config 0 interface 0 has no altsetting 0 [ 52.703692][ T313] usb 3-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 52.712579][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.720945][ T313] usb 3-1: config 0 descriptor?? [ 52.726289][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 52.746269][ T863] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 52.758003][ T863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.768934][ T863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.778506][ T863] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 52.846297][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.857064][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.866769][ T863] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 52.875624][ T863] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 52.883551][ T39] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 52.892381][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.900351][ T863] usb 2-1: Manufacturer: syz [ 52.905541][ T863] usb 2-1: config 0 descriptor?? [ 52.910567][ T39] usb 5-1: config 0 descriptor?? [ 52.916310][ T6] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 52.922591][ T6] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 52.930070][ T6] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 53.126237][ T6] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 53.147257][ T6] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 53.160860][ T6] usb 4-1: USB disconnect, device number 14 [ 53.167303][ T30] audit: type=1400 audit(2000000018.620:352): avc: denied { read } for pid=138 comm="dhcpcd" name="n18" dev="tmpfs" ino=2833 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.192422][ T6] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 53.202231][ T30] audit: type=1400 audit(2000000018.620:353): avc: denied { open } for pid=138 comm="dhcpcd" path="/run/udev/data/n18" dev="tmpfs" ino=2833 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.227478][ T313] logitech 0003:046D:C216.0017: unexpected long global item [ 53.231121][ T30] audit: type=1400 audit(2000000018.620:354): avc: denied { getattr } for pid=138 comm="dhcpcd" path="/run/udev/data/n18" dev="tmpfs" ino=2833 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.234721][ T313] logitech 0003:046D:C216.0017: parse failed [ 53.261973][ T30] audit: type=1400 audit(2000000018.660:355): avc: denied { create } for pid=1319 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.287480][ T30] audit: type=1400 audit(2000000018.660:356): avc: denied { write } for pid=1319 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=2836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.291585][ T313] logitech: probe of 0003:046D:C216.0017 failed with error -22 [ 53.313633][ T30] audit: type=1400 audit(2000000018.660:357): avc: denied { append } for pid=1319 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=2836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.326606][ T313] ================================================================== [ 53.352477][ T313] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 53.353630][ T30] audit: type=1400 audit(2000000018.740:358): avc: denied { unlink } for pid=1330 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=2836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.360108][ T313] Read of size 8 at addr ffff88810b0f4c70 by task kworker/0:4/313 [ 53.360123][ T313] [ 53.360128][ T313] CPU: 0 PID: 313 Comm: kworker/0:4 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 53.360145][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 53.360155][ T313] Workqueue: events linkwatch_event [ 53.417310][ T313] Call Trace: [ 53.420433][ T313] [ 53.423211][ T313] dump_stack_lvl+0x151/0x1c0 [ 53.427723][ T313] ? io_uring_drop_tctx_refs+0x190/0x190 [ 53.433201][ T313] ? panic+0x760/0x760 [ 53.437096][ T313] print_address_description+0x87/0x3b0 [ 53.442477][ T313] kasan_report+0x179/0x1c0 [ 53.446817][ T313] ? __kasan_check_write+0x14/0x20 [ 53.451764][ T313] ? __list_del_entry_valid+0xa6/0x120 [ 53.457082][ T313] ? __list_del_entry_valid+0xa6/0x120 [ 53.462363][ T313] __asan_report_load8_noabort+0x14/0x20 [ 53.467826][ T313] __list_del_entry_valid+0xa6/0x120 [ 53.472950][ T313] process_one_work+0x458/0xc10 [ 53.477631][ T313] worker_thread+0xad5/0x12a0 [ 53.482146][ T313] ? _raw_spin_lock+0x1b0/0x1b0 [ 53.486918][ T313] kthread+0x421/0x510 [ 53.490820][ T313] ? worker_clr_flags+0x180/0x180 [ 53.495685][ T313] ? kthread_blkcg+0xd0/0xd0 [ 53.500109][ T313] ret_from_fork+0x1f/0x30 [ 53.504359][ T313] [ 53.507224][ T313] [ 53.509393][ T313] Allocated by task 6: [ 53.513300][ T313] ____kasan_kmalloc+0xdb/0x110 [ 53.517984][ T313] __kasan_kmalloc+0x9/0x10 [ 53.522325][ T313] __kmalloc+0x13a/0x270 [ 53.526407][ T313] kvmalloc_node+0x1f0/0x4d0 [ 53.530838][ T313] alloc_netdev_mqs+0x8c/0xc90 [ 53.535441][ T313] alloc_etherdev_mqs+0x33/0x40 [ 53.540117][ T313] usbnet_probe+0x1ff/0x2830 [ 53.544545][ T313] usb_probe_interface+0x5b6/0xa90 [ 53.549491][ T313] really_probe+0x28d/0x970 [ 53.553831][ T313] __driver_probe_device+0x1a0/0x310 [ 53.558952][ T313] driver_probe_device+0x54/0x3d0 [ 53.563851][ T313] __device_attach_driver+0x2c5/0x470 [ 53.569019][ T313] bus_for_each_drv+0x183/0x200 [ 53.573707][ T313] __device_attach+0x312/0x510 [ 53.578305][ T313] device_initial_probe+0x1a/0x20 [ 53.583166][ T313] bus_probe_device+0xbe/0x1e0 [ 53.587766][ T313] device_add+0xb60/0xf10 [ 53.591936][ T313] usb_set_configuration+0x190f/0x1e80 [ 53.597227][ T313] usb_generic_driver_probe+0x8b/0x150 [ 53.602524][ T313] usb_probe_device+0x144/0x260 [ 53.607209][ T313] really_probe+0x28d/0x970 [ 53.611547][ T313] __driver_probe_device+0x1a0/0x310 [ 53.616669][ T313] driver_probe_device+0x54/0x3d0 [ 53.621530][ T313] __device_attach_driver+0x2c5/0x470 [ 53.626738][ T313] bus_for_each_drv+0x183/0x200 [ 53.631424][ T313] __device_attach+0x312/0x510 [ 53.636023][ T313] device_initial_probe+0x1a/0x20 [ 53.640888][ T313] bus_probe_device+0xbe/0x1e0 [ 53.645483][ T313] device_add+0xb60/0xf10 [ 53.649776][ T313] usb_new_device+0x1038/0x1c00 [ 53.654458][ T313] hub_event+0x2def/0x4770 [ 53.658709][ T313] process_one_work+0x6bb/0xc10 [ 53.663398][ T313] worker_thread+0xad5/0x12a0 [ 53.667908][ T313] kthread+0x421/0x510 [ 53.671814][ T313] ret_from_fork+0x1f/0x30 [ 53.676066][ T313] [ 53.678237][ T313] Freed by task 6: [ 53.681882][ T313] kasan_set_track+0x4b/0x70 [ 53.686308][ T313] kasan_set_free_info+0x23/0x40 [ 53.691081][ T313] ____kasan_slab_free+0x126/0x160 [ 53.696027][ T313] __kasan_slab_free+0x11/0x20 [ 53.700627][ T313] slab_free_freelist_hook+0xbd/0x190 [ 53.705836][ T313] kfree+0xc8/0x220 [ 53.709480][ T313] kvfree+0x35/0x40 [ 53.713125][ T313] netdev_freemem+0x3f/0x60 [ 53.717464][ T313] netdev_release+0x7f/0xb0 [ 53.721818][ T313] device_release+0x95/0x1c0 [ 53.726335][ T313] kobject_put+0x178/0x260 [ 53.730572][ T313] put_device+0x1f/0x30 [ 53.734563][ T313] free_netdev+0x34f/0x440 [ 53.738825][ T313] usbnet_disconnect+0x245/0x390 [ 53.743590][ T313] usb_unbind_interface+0x1fa/0x8c0 [ 53.748624][ T313] device_release_driver_internal+0x50b/0x7d0 [ 53.754526][ T313] device_release_driver+0x19/0x20 [ 53.759475][ T313] bus_remove_device+0x2f8/0x360 [ 53.764247][ T313] device_del+0x663/0xe90 [ 53.768417][ T313] usb_disable_device+0x380/0x720 [ 53.773272][ T313] usb_disconnect+0x32a/0x890 [ 53.777799][ T313] hub_event+0x1d42/0x4770 [ 53.782044][ T313] process_one_work+0x6bb/0xc10 [ 53.786727][ T313] worker_thread+0xe02/0x12a0 [ 53.791240][ T313] kthread+0x421/0x510 [ 53.795145][ T313] ret_from_fork+0x1f/0x30 [ 53.799402][ T313] [ 53.801571][ T313] Last potentially related work creation: [ 53.807127][ T313] kasan_save_stack+0x3b/0x60 [ 53.811641][ T313] __kasan_record_aux_stack+0xd3/0xf0 [ 53.816940][ T313] kasan_record_aux_stack_noalloc+0xb/0x10 [ 53.822574][ T313] insert_work+0x56/0x320 [ 53.826741][ T313] __queue_work+0x92a/0xcd0 [ 53.831079][ T313] queue_work_on+0x105/0x170 [ 53.835505][ T313] usbnet_link_change+0xeb/0x100 [ 53.840279][ T313] usbnet_probe+0x1dd3/0x2830 [ 53.844791][ T313] usb_probe_interface+0x5b6/0xa90 [ 53.849740][ T313] really_probe+0x28d/0x970 [ 53.854078][ T313] __driver_probe_device+0x1a0/0x310 [ 53.859198][ T313] driver_probe_device+0x54/0x3d0 [ 53.864065][ T313] __device_attach_driver+0x2c5/0x470 [ 53.869268][ T313] bus_for_each_drv+0x183/0x200 [ 53.873953][ T313] __device_attach+0x312/0x510 [ 53.878555][ T313] device_initial_probe+0x1a/0x20 [ 53.883412][ T313] bus_probe_device+0xbe/0x1e0 [ 53.888020][ T313] device_add+0xb60/0xf10 [ 53.892183][ T313] usb_set_configuration+0x190f/0x1e80 [ 53.897477][ T313] usb_generic_driver_probe+0x8b/0x150 [ 53.902857][ T313] usb_probe_device+0x144/0x260 [ 53.907544][ T313] really_probe+0x28d/0x970 [ 53.911884][ T313] __driver_probe_device+0x1a0/0x310 [ 53.917005][ T313] driver_probe_device+0x54/0x3d0 [ 53.921952][ T313] __device_attach_driver+0x2c5/0x470 [ 53.927157][ T313] bus_for_each_drv+0x183/0x200 [ 53.931847][ T313] __device_attach+0x312/0x510 [ 53.936445][ T313] device_initial_probe+0x1a/0x20 [ 53.941307][ T313] bus_probe_device+0xbe/0x1e0 [ 53.945907][ T313] device_add+0xb60/0xf10 [ 53.950071][ T313] usb_new_device+0x1038/0x1c00 [ 53.954757][ T313] hub_event+0x2def/0x4770 [ 53.959013][ T313] process_one_work+0x6bb/0xc10 [ 53.963700][ T313] worker_thread+0xad5/0x12a0 [ 53.968213][ T313] kthread+0x421/0x510 [ 53.972117][ T313] ret_from_fork+0x1f/0x30 [ 53.976457][ T313] [ 53.978630][ T313] The buggy address belongs to the object at ffff88810b0f4000 [ 53.978630][ T313] which belongs to the cache kmalloc-4k of size 4096 [ 53.992517][ T313] The buggy address is located 3184 bytes inside of [ 53.992517][ T313] 4096-byte region [ffff88810b0f4000, ffff88810b0f5000) [ 54.005881][ T313] The buggy address belongs to the page: [ 54.011444][ T313] page:ffffea00042c3c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b0f0 [ 54.021508][ T313] head:ffffea00042c3c00 order:3 compound_mapcount:0 compound_pincount:0 [ 54.029661][ T313] flags: 0x4000000000010200(slab|head|zone=1) [ 54.035572][ T313] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 54.043987][ T313] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 54.052409][ T313] page dumped because: kasan: bad access detected [ 54.058656][ T313] page_owner tracks the page as allocated [ 54.064298][ T313] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6, ts 51807400134, free_ts 51657126039 [ 54.086079][ T313] post_alloc_hook+0x1a3/0x1b0 [ 54.090676][ T313] prep_new_page+0x1b/0x110 [ 54.095024][ T313] get_page_from_freelist+0x3550/0x35d0 [ 54.100407][ T313] __alloc_pages+0x27e/0x8f0 [ 54.105085][ T313] new_slab+0x9a/0x4e0 [ 54.108997][ T313] ___slab_alloc+0x39e/0x830 [ 54.113427][ T313] __slab_alloc+0x4a/0x90 [ 54.117589][ T313] __kmalloc+0x16d/0x270 [ 54.121662][ T313] kvmalloc_node+0x1f0/0x4d0 [ 54.126090][ T313] alloc_netdev_mqs+0x8c/0xc90 [ 54.130689][ T313] alloc_etherdev_mqs+0x33/0x40 [ 54.135376][ T313] usbnet_probe+0x1ff/0x2830 [ 54.139822][ T313] usb_probe_interface+0x5b6/0xa90 [ 54.144750][ T313] really_probe+0x28d/0x970 [ 54.149088][ T313] __driver_probe_device+0x1a0/0x310 [ 54.154209][ T313] driver_probe_device+0x54/0x3d0 [ 54.159072][ T313] page last free stack trace: [ 54.163585][ T313] free_unref_page_prepare+0x7c8/0x7d0 [ 54.168877][ T313] free_unref_page+0xe8/0x750 [ 54.173398][ T313] __free_pages+0x61/0xf0 [ 54.177556][ T313] __free_slab+0xec/0x1d0 [ 54.181734][ T313] __unfreeze_partials+0x165/0x1a0 [ 54.186669][ T313] put_cpu_partial+0xc4/0x120 [ 54.191186][ T313] __slab_free+0x1c8/0x290 [ 54.195437][ T313] ___cache_free+0x109/0x120 [ 54.199870][ T313] qlink_free+0x4d/0x90 [ 54.203856][ T313] qlist_free_all+0x44/0xb0 [ 54.208197][ T313] kasan_quarantine_reduce+0x15a/0x180 [ 54.213489][ T313] __kasan_slab_alloc+0x2f/0xe0 [ 54.218178][ T313] slab_post_alloc_hook+0x53/0x2c0 [ 54.223131][ T313] kmem_cache_alloc+0xf5/0x200 [ 54.227723][ T313] getname_flags+0xba/0x520 [ 54.232064][ T313] __x64_sys_unlink+0x3c/0x50 [ 54.236757][ T313] [ 54.238920][ T313] Memory state around the buggy address: [ 54.244392][ T313] ffff88810b0f4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 54.252287][ T313] ffff88810b0f4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 54.260187][ T313] >ffff88810b0f4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 54.268084][ T313] ^ [ 54.275636][ T313] ffff88810b0f4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 54.283544][ T313] ffff88810b0f4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 54.291437][ T313] ================================================================== [ 54.299339][ T313] Disabling lock debugging due to kernel taint [ 54.367313][ T863] appleir 0003:05AC:8243.0018: item fetching failed at offset 0/1 [ 54.372880][ T293] usb 3-1: USB disconnect, device number 7 [ 54.375894][ T39] hid-picolcd 0003:04D8:F002.0019: unknown main item tag 0x0 [ 54.393960][ T863] appleir 0003:05AC:8243.0018: parse failed [ 54.401557][ T39] hid-picolcd 0003:04D8:F002.0019: item fetching failed at offset 5/7 [ 54.413733][ T863] appleir: probe of 0003:05AC:8243.0018 failed with error -22 [ 54.421192][ T39] hid-picolcd 0003:04D8:F002.0019: device report parse failed [ 54.435817][ T39] hid-picolcd: probe of 0003:04D8:F002.0019 failed with error -22 [ 54.569639][ T39] usb 2-1: USB disconnect, device number 12 [ 54.596553][ T293] usb 5-1: USB disconnect, device number 12