last executing test programs: 7.486385341s ago: executing program 2 (id=270): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000044c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000004380), 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) 4.553073322s ago: executing program 3 (id=320): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 4.312994829s ago: executing program 3 (id=321): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c201000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000f, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4.275322114s ago: executing program 3 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) close(r2) 4.185829274s ago: executing program 3 (id=323): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, &(0x7f0000000cc0)={0x2dcb71be21af0475, 0x14, 0x6, "b52df059dc4b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.948623922s ago: executing program 2 (id=327): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0xf, {0xf, 0x0, "000200796d8d812b3427383e9c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) 3.403970985s ago: executing program 1 (id=330): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xc8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0) sendfile(r1, r1, 0x0, 0x7a680000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4, 0x100000001}) 3.293881238s ago: executing program 1 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000940), 0x10001, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 2.874873987s ago: executing program 1 (id=332): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x3a) 2.001110698s ago: executing program 2 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) close(r2) 2.000908168s ago: executing program 3 (id=334): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ec13060000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00228000000000000000fc"], 0x0}, 0x0) 1.999659308s ago: executing program 1 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 1.98370836s ago: executing program 2 (id=336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb921"], 0xfdef) 1.914310498s ago: executing program 1 (id=340): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fchdir(r0) close(r0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.89910234s ago: executing program 1 (id=341): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 1.889572631s ago: executing program 2 (id=343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="f2ff0500000005000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.137635538s ago: executing program 0 (id=347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 1.11913537s ago: executing program 0 (id=348): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000000010040"]) 1.086822974s ago: executing program 4 (id=349): unshare(0x2000400) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000200)) 1.075853155s ago: executing program 4 (id=350): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r0, &(0x7f0000006480)={0x2020}, 0x2020) r1 = socket(0x2, 0x1, 0x0) listen(r1, 0x0) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) 1.071457956s ago: executing program 0 (id=351): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x2401, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="6110a200000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a48c9eaf3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71c206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b134000000000000000962895496d4f6e9cc54db6c7205a6b06ff7f0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) close(r1) 1.027617441s ago: executing program 4 (id=352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r2], 0x20}}, 0x0) 944.432491ms ago: executing program 4 (id=353): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800083}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c) 905.951115ms ago: executing program 0 (id=354): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000480)={0x0, 0x0, "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", "c1591aa6e2260f1c98cfa650be9b308b5f0a68e62155c2674b54145a02ebf32bd911f144d977db51aaf44ed84819e4c108531700a248eb4e1848c940f0d6e6ed6e01cc984f88eb2cb2e32f37f1d24d64f0fddcd0365db765c41ebca86919dd4962e8303ca1c87b378984fb89a31f7f428969c26eefa17600f1f9a5131f30377a62dff2272790491766bff3e66dbc555afc151f1001081c131cf7b3e8322f96e112591e5136c202b81add3284de1568a5e7ae1547840d8feb5520947fb3e685e5b2604b8daa55460f8b092c0309f4ccc82fef612c9df520f0c9181852c00f4b96c7928bf2826803400cfd4c884e425da271f763750d0b1eefde185a73b789f80d259e19cb8c29cfea126e37410b223e86535b047a2513c9ae01282dae270994caad9b31d205926dbc9d1ff7dd2b3a92c2223af2ed1d1a78075a5f8492309fcb817d2ad76f83dcfba099d0de9835c58c7b8c60802cae8ef5ef0451dbb38ee75e4fbff7f07160d03b611d44ff8eb7ec87d8236866531da0748086633ce382241ca283a3b02c6ebccb39aaf6f8a8413af7c639fd4eede8584db73005e5c7f153a01d9464b529b5621248312ac92c56ea03b7e66be001f89fcfde6b8c7263ebcb41c16ebb81a150e9d0f12254a468f0df510b651a0dcd54926313582a467e1ccfd0175aa5caf6c5c0e339e5b5318f8f157a10a490f10cf4ef41c815000176ced4267fe768da28608a1fcd65144024d05f90144b0283a226d9feac9fa2eb833a4667d421d74f37ea9d2e464afe23ff302708a915645f0aec8cbced10d7000e47b0fccf4ab967b9b765d66b134e8f8a6434b5ca61bfa2eb30362a1b997ae0662c3aa84ed4a6076353bdab8dbfaaa29a4fbf73bd5927de11c6233786b6329e027aab1861e915ad3fcbf8f11e75d43b84fd67e525f59aa35274590ae4817336e87e282866c805959d75d484009a5f3cd6993fb8901b7034ec866cc8d666eed232453434659f16a782ca73d75862671615826a0dca2b312a7142c7eac1ebc867c3982759b4ea5841345d9eaac9d24c11b33b712acc2c7ab6cbffe2d40030989d63be25f78d6ac3e128cff6a75ba54784e08b377a0e2dfcaf5e35f07674edfa94f40a5644437597902ef86ce88ab6cca5f477070e97c38203ed2d0a8ef85f6351e30f7cbdd03ba056e273f0ccc9eb5c604f50a4536ec6ae2e75c4d654b4846ec247135d41db697a8b2e15ff203d8ad0bbeb896bc1fbaad9212d761d6cacb6ec58caa3e48920588bfae3a433e0d5a6ad10c93d0c6d3b9bdc02ca5a44004c7df9666b24c8e86350cd09272e70faa4b45f0c6cae0ba3b4c64932442b6bc389527513cbbef88e77880be295bdc1cee61a667d891fcc0c58ce066ac4223ef45ebc9e4b99399e0d906ddb5d982d0e0094b8e370a9fe90ee93b239452a8dab55daceb7130207db8fbf31e2a46c2e112b062bfac4f44ec2ddddf84bc4dac89fd413e818ab6fabcdf8e8c9af9d004806e298c8926284d45c61aa5d8264e4c15b8040b4fc4bc1c4481e693c8e78c9ad114473ad90f2e0f88a8d61602dad4ad1b4b9e2c9edd32e2477233ad6a1d68f00e4a3bac8c49393a6a4718cdeed1db10814acc0df7554f632f03fe2d2fa110bcaa563b7aad9ec89f1ac8d9f85b896e6706121f0aca7bb577a3adbb8f40396ba2f30b0149b0d84cb9fda934922f2b8395d598b941e94c639a6565a785aceac8502d6f98333f40f628b31b5e89e661da8b8f4488418b969f734382ef66d7c4535bd145c6932f72348001fc4022b112ed2f237f28208efccefd126f6b69947d6bbfe12acf03a0b8ead41bf6cab2f66cf2ad8f7e791f4fd2c092882287df3a0cd8e4da0f8367afe2e2ddab9972319f320e0c832c8cd613056fbac2e114c029fb6c2836c25528dc6b08633ee144be4f35977ac8212740c4bf3b106f018f72441557d4179105f2a4ecd5e659f85513786000c7f765891b45cb99de9ebe7e7246e1c151ef09e628d846acbfd40870365d6e73f16589dc21afbbcfb05ae7cc940db9a09d73c2a0d4d0cf60cfccda8a26622785a9084e434825d559828e1b5fdc4ad21ce397d961565da804fa4675204527bfb23a26e83af6f8cbeb34615520e73984ac2dc99caee322882a604a273cad36f469f79bd60da6299634811e88214d035385c42ecdca7e1155b7bfa75dabdffcb8c0226c29bfe654dd74ca5cf37f4b712fb8ceca7dd02f872874cd635daf6835d65f0cc41feb4d5c69767cce74905ff778c4eeec9c680b1d1d9548b9ac2c38547ca446ed847f40aa0c8b862c2ad462d885f8888d7883d6ed0404173e3cd1042e91b1d1c168df877d5bd782c5e884f01d4874813610f212316e18dfa4b9545698853dd719e31535fd8462e141ca9c492dea095515acc4b520cdcb5869210dcf6ee266cbe901ef3fa203b1b8320077f443db2793e343eadf915f1fb3d9a6d93ebe15f29e2e53e768bb9d1b240e44a25ff6487c6c906262e895b15b05fd4b4d7c6097fba23fe897695ee80fce1df5a67cd692976d029d1fbe8e6650322a532a506886f96b6ce80fa3ca74e01d155ee358bac518ed92045cef375b0627d5bb7d55bd4bab481352cf5bb616abc84042b4772c993220429aa31abf90e978790ea75172d497e86e04bcf6f7dc1aa7b82515b0b5b02c9561ac88100984d0978ce6dddacfdb3387f70697d3b9bda68c49c61c0b1107769bd144d08f7a5029831c481a24322b54f7bdb2f705179128dbc0b9797e4204bd64a97f1be1a0f5f791d29678eb7ec554c1763cfd89746bde2a59e8a351e4b6b68e6cef04842c77fa0ba09713e06444a32ef97c5f30ab2b3dbe62581910207f77d1a8147cbfbf585cff3c8e8affbe6a39e1e67c8402945571b5fdc9df4b3601257f74d0bd6838cfa7cc98982c18a46c4bafbb55d54593d7f8de4d7a3f7522757a8144de4e5d5bdf7f369245a40b187d0f3fd5cd0b55ab229f777d0692b6ea697974d4b235e1e3e086e5ef7cfffb7b9690ce065030dca0f4120800aa4baaa50898c6b62882ce4caf9bc2056405127975e298bf1182ecfd7e4f3d9afc324efa789a0df5c7361efc2e8b09e9e93e41e160044abbcc822ce8e0dcf807bca8119cf70a319425be0422ace9e287ece1ddfaf64baaf918bfc5fe2c8c13ccb6f95161774de239fa13ea9d78831c672afcc1f3a69887e73c7671dff3fabfe425873138d8c5d94feb8e909eb40ad267c6aea1a56e5681c4bd5a6a3412399eb9d8c7a8d9b7bf4f8ebb21b4c05fbddae70b893e3dacdd1e8164105f6bfa77e9cd109c6fe3cbf02ee3a6257694b38bc28526b8ed8b250398e52c36f9fa76f38d7b44959a4384d99f9238a5911706289cb2ca83034ee61ba96d6c2b94c9e3ae94eb95f9c68e1303936b261ebf4301263c6b2afab431ae6405aeb5dc4d433ccca110e8bccfd7825374ad1c00ca4803a624e91841ff9aa5c0bd50b522ec3597e6cb5cae606aeb238046d56ed741cdd26955f6bf1e1ae634ef7846411cb5d03d54a207ad9da79e278bad477128c94adec4090a9a81b93c94ff44f8c1cdcda83404ccd273360dc97a4279ccb7cbe0c2098716f80e49b96c9dd0839c36f09631c79fcb8be144f0a662d2fff0d0aefb603bb41c2532b4467e3e89358c8c449610ae8a17c38a5d7df4e42b39fd85e83cc765f62870e100f0a496eaf9ab32d6d091c261fe1a9e46d96cf2f6bbbd51dbe6524766300bf64443f48d66c00c263b49f688bc26568215c9147465808a1ad4645471a0473d07ae9e22c9b2bee9406ba2973bdf73b69a902d29bc2fb8d3fd13281cc2636ee6b4e3c53cd6c23931a861bbecd77b233b8bcf3c59042a956f86a706dccc8dd6484c99ebf17be19697163b8845dfea69f04269c3138efb9590c91f69656bff5a060cb0071d70b04aceda6e26379a0c5ef53ce98c31c692f50c2ed0c9ec234deeb600c5276dddb4fe365ee4a4d1aef19ed3902fe6b066cf64a95a3b13431baa27a87dbf3fe6e20dcc08b0969d27ec4f70c31e9425cdcc20b32f9066d21e93baf142b05c51149d6c027673f7c830c215ea5df81249d97a602ae529c37594aca4d9c4b94ffc47c384cb6917cc10089bd62008d3af1e0bb3ccf57b3ddb0ba9a4639321efb04365e182e6f4aa6a405edc5b7d67d977826a22f896651eb7006622fe54aa6f882b423d5514d50ae71d9f104fdea37c4f375a06765461e73988b215643dedce8f1e2274bd88018b2b70ea8b61696c321317ff050f5cbca5d58e897c1c4594faf6ab6187849a5b6d165296221d0042c2cc978970e56d66cf94a629edcee577472c8431f273f3ba2f1b1651d2ee9a8d267bb04afe149a5d1da0a2873af4f84de1bb061b9fef15b5c6001b4097bdb1c546254d67729f554d3179e16bebe54a1b44d7c0babd011974ed5e0f0613609d7488be25cb570738ca3254c9d1c7e91df8a7b18ed7ba0e0c51d5cff53d246830bb09b9e65f1ac385ac18033c4bcca80b52cd2a2d5c94e95971bfd3fbaa23cc271d8f5db537812b807cece731a65504cc5e78ca2c29451c93c93bef48d2c81118f2e148e52e48e90266b0f1395505405bd4f7c043b4c0c6728a9d2130017e3bcab00387939287f54792d5ff7fe29ac29e710ad035e1a1c3f89d28586cba58efc2e035181057913058977e953324f99103c53698097e4baa2705c87b817da5010a61368385985c87e37a5135e7d2efb936e727027d2c3c84bbb09895e6826194e53aa7a4de8507257feec52f65874ff1c3ce755d32be27bd6e2fab67b18b784aea76f4d109875db21d4855b74a22440216ae39a01bf380554d97aee72668d356bcbe288e61f5a72ea7568ce90310e75c10be7a49a0d86cd6dc3642b52b288b3d6b29e6e2e7e98d4818f9d891e28f65250ed779d07242a39391f464a52803cc4f52c470b2a396897ff1bd9ca173f577a1e5d232dd80a8a304521a32c109d53b25592f8415dc0781b641b05598dae475015daa7046ed75257ef9f20d164e5c3e083a67f89d3a58da4829074428ce8fb8bd8a3268506a5daca615637e8c344374c84480146de20fe4a01c0e4f513d96e1e2fec8f054a5fa55e4997e95c2107344591578fa3f01722b89416196171f52aeb729d03153065619a170dcf527b597944044869b0ce6b3a385142dc44191af5a6db221a379030c0b416c4c637c091d10ee8f3d19e9fb1a182aa25b38516e615dcb949e692e99f1d4bcd47d56a839aade991166d3b7a11377b2140db02411170dd548bff1a7ada4eaa6cd0657e79805e0029987859f9bd949dc5dc4593e86efecea47fa85ff9a5d9495d1c78d91ee986da85cef8c293c9b6c28a06a2d6f1cc67d36782649a16270e0eb28018451430ea09c2edd08357e6e90a5ebd6d94ecca3510a66a33214b"}) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 886.858427ms ago: executing program 4 (id=355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef0001000000002c", @ANYRES16], 0x66) 885.734117ms ago: executing program 0 (id=365): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r2}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f0000003400)=[{&(0x7f0000001f00)=""/83, 0x53}], 0x1, 0x10, 0x6) 805.357927ms ago: executing program 4 (id=356): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0xf, {0xf, 0x0, "000200796d8d812b3427383e9c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) 801.539237ms ago: executing program 0 (id=367): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0xa6, 0xff, 0x5, 0x40, 0xabcd, 0xcdee, 0x5b9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9c, 0x0, 0x3, 0x1, 0x3, 0x51, 0x0, [], [{{0x9, 0x5, 0xa}}, {{0x9, 0x5, 0x3, 0x13}}, {{0x9, 0x5, 0xf}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 79.044811ms ago: executing program 3 (id=357): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x2}) 0s ago: executing program 2 (id=358): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xa}]}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 19.405893][ T28] audit: type=1400 audit(1729769060.422:66): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.406799][ T281] cgroup: Unknown subsys name 'net' [ 19.414042][ T28] audit: type=1400 audit(1729769060.422:67): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.420716][ T28] audit: type=1400 audit(1729769060.432:68): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.420846][ T281] cgroup: Unknown subsys name 'devices' [ 19.549469][ T281] cgroup: Unknown subsys name 'hugetlb' [ 19.554993][ T281] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 19.683443][ T28] audit: type=1400 audit(1729769060.702:69): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.700559][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.706547][ T28] audit: type=1400 audit(1729769060.702:70): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.733563][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.740414][ T28] audit: type=1400 audit(1729769060.702:71): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.771812][ T28] audit: type=1400 audit(1729769060.742:72): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.797025][ T28] audit: type=1400 audit(1729769060.742:73): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.822462][ T28] audit: type=1400 audit(1729769060.752:74): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.848020][ T28] audit: type=1400 audit(1729769060.752:75): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.376494][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.383474][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.390792][ T292] device bridge_slave_0 entered promiscuous mode [ 20.397402][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.404429][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.411759][ T292] device bridge_slave_1 entered promiscuous mode [ 20.434193][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.441296][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.448764][ T291] device bridge_slave_0 entered promiscuous mode [ 20.455471][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.462619][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.469766][ T291] device bridge_slave_1 entered promiscuous mode [ 20.507479][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.514710][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.521982][ T293] device bridge_slave_0 entered promiscuous mode [ 20.529542][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.536487][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.543862][ T293] device bridge_slave_1 entered promiscuous mode [ 20.617925][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.624783][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.632196][ T295] device bridge_slave_0 entered promiscuous mode [ 20.649381][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.656210][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.663593][ T295] device bridge_slave_1 entered promiscuous mode [ 20.679193][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.686157][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.693495][ T294] device bridge_slave_0 entered promiscuous mode [ 20.715006][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.722081][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.729345][ T294] device bridge_slave_1 entered promiscuous mode [ 20.854490][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.861465][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.868624][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.875559][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.904958][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.911852][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.926236][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.933152][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.940245][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.947113][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.974862][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.982125][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.990178][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.997210][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.004270][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.012330][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.021140][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.040010][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.093307][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.120122][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.127527][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.134878][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.143263][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.151633][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.158482][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.165741][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.173857][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.180800][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.188177][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.195377][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.203526][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.210490][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.230385][ T293] device veth0_vlan entered promiscuous mode [ 21.240553][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.248291][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.255963][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.264541][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.272973][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.280116][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.287451][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.295527][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.302712][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.309976][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.318119][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.324948][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.332346][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.340399][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.347335][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.354555][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.362590][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.370563][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.377419][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.384993][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.405723][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.413428][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.420963][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.429110][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.436833][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.445180][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.461568][ T293] device veth1_macvtap entered promiscuous mode [ 21.479494][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.487627][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.495603][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.504138][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.511999][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.519961][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.528043][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.535382][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.543255][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.551009][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.558988][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.566680][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.574844][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.582769][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.590810][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.616653][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.624894][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.633220][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.641681][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.649877][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.657920][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.676258][ T294] device veth0_vlan entered promiscuous mode [ 21.686404][ T292] device veth0_vlan entered promiscuous mode [ 21.692640][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.700717][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.708838][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.717365][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.726381][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.734294][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.742264][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.750844][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.759355][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.767154][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.775258][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.782743][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.790270][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.797598][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.807219][ T295] device veth0_vlan entered promiscuous mode [ 21.814888][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.822893][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.830910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.838383][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.861231][ T294] device veth1_macvtap entered promiscuous mode [ 21.868940][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.877228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.885348][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.893853][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.901998][ T291] device veth0_vlan entered promiscuous mode [ 21.911198][ T295] device veth1_macvtap entered promiscuous mode [ 21.926912][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.936362][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.944221][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.956698][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.966126][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.974459][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.982509][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.990843][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.002733][ T292] device veth1_macvtap entered promiscuous mode [ 22.015379][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.023435][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.031559][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.044434][ T291] device veth1_macvtap entered promiscuous mode [ 22.066830][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.075488][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.084034][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.092096][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.100372][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.108591][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.117184][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.125527][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.133770][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.142211][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.150291][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.185829][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.194330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.241069][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.249549][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.296621][ T331] loop2: detected capacity change from 0 to 256 [ 22.324170][ T329] syz.3.7[329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 22.324244][ T329] syz.3.7[329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 22.353590][ T339] loop2: detected capacity change from 0 to 128 [ 22.499156][ T344] kworker/u4:3: attempt to access beyond end of device [ 22.499156][ T344] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 22.708975][ T362] gretap0: refused to change device tx_queue_len [ 22.715161][ T362] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 22.827890][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 22.912629][ T373] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.087745][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.095276][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.189117][ T377] syz.0.24 (377) used greatest stack depth: 21320 bytes left [ 23.211214][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.217585][ T379] device syzkaller0 entered promiscuous mode [ 23.222459][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.222520][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 23.247127][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.261532][ T24] usb 5-1: config 0 descriptor?? [ 23.362443][ T381] loop0: detected capacity change from 0 to 40427 [ 23.373015][ T381] F2FS-fs (loop0): invalid crc value [ 23.381223][ T381] F2FS-fs (loop0): Found nat_bits in checkpoint [ 23.401245][ T381] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 23.477886][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.488888][ T6] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 23.499726][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.510459][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.521236][ T19] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 23.530298][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.542732][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.550802][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 23.551055][ T291] syz-executor: attempt to access beyond end of device [ 23.551055][ T291] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 23.564455][ T19] usb 4-1: config 0 descriptor?? [ 23.639974][ T388] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 23.667843][ T6] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 23.676901][ T6] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 23.685326][ T6] usb 2-1: Manufacturer: syz [ 23.690921][ T6] usb 2-1: config 0 descriptor?? [ 23.799153][ T24] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 23.820600][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input4 [ 23.899512][ T24] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 24.018138][ T325] usb 5-1: USB disconnect, device number 2 [ 24.048513][ T19] cp2112 0003:10C4:EA90.0002: unexpected long global item [ 24.055611][ T19] cp2112 0003:10C4:EA90.0002: parse failed [ 24.061745][ T19] cp2112: probe of 0003:10C4:EA90.0002 failed with error -22 [ 24.178448][ T6] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 24.185615][ T6] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 24.194619][ T6] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 24.257947][ T325] usb 4-1: USB disconnect, device number 2 [ 24.449172][ T6] usb 2-1: USB disconnect, device number 2 [ 24.772695][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 24.772713][ T28] audit: type=1400 audit(1729769065.792:138): avc: denied { append } for pid=413 comm="syz.3.36" name="ppp" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 24.801484][ T28] audit: type=1400 audit(1729769065.792:139): avc: denied { open } for pid=413 comm="syz.3.36" path="/dev/ppp" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 24.801507][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 24.832259][ T28] audit: type=1400 audit(1729769065.792:140): avc: denied { ioctl } for pid=413 comm="syz.3.36" path="/dev/ppp" dev="devtmpfs" ino=137 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 24.857375][ T28] audit: type=1400 audit(1729769065.802:141): avc: denied { read } for pid=413 comm="syz.3.36" name="ppp" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 24.977813][ T296] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.043701][ T28] audit: type=1400 audit(1729769066.062:142): avc: denied { wake_alarm } for pid=426 comm="syz.3.42" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 25.090789][ T28] audit: type=1400 audit(1729769066.062:143): avc: denied { write } for pid=429 comm="syz.1.43" name="tcp" dev="proc" ino=4026532653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 25.189502][ T28] audit: type=1400 audit(1729769066.212:144): avc: denied { setopt } for pid=431 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 25.209051][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.220525][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.230458][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.235974][ T28] audit: type=1400 audit(1729769066.252:145): avc: denied { name_bind } for pid=446 comm="syz.3.50" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 25.270367][ T24] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 25.277412][ T28] audit: type=1400 audit(1729769066.252:146): avc: denied { node_bind } for pid=446 comm="syz.3.50" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.287779][ T296] usb 3-1: device descriptor read/64, error -71 [ 25.307067][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.316549][ T24] usb 5-1: config 0 descriptor?? [ 25.322106][ T28] audit: type=1400 audit(1729769066.342:147): avc: denied { create } for pid=448 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.349599][ T454] device veth0_vlan left promiscuous mode [ 25.355859][ T454] device veth0_vlan entered promiscuous mode [ 25.391431][ T458] loop0: detected capacity change from 0 to 512 [ 25.398348][ T458] ======================================================= [ 25.398348][ T458] WARNING: The mand mount option has been deprecated and [ 25.398348][ T458] and is ignored by this kernel. Remove the mand [ 25.398348][ T458] option from the mount to silence this warning. [ 25.398348][ T458] ======================================================= [ 25.433712][ T458] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.446966][ T458] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.55: invalid block [ 25.458899][ T458] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.55: invalid indirect mapped block 4294967295 (level 1) [ 25.472727][ T458] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.55: invalid indirect mapped block 4294967295 (level 1) [ 25.486737][ T458] EXT4-fs (loop0): 2 truncates cleaned up [ 25.492486][ T458] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 25.510836][ T291] EXT4-fs (loop0): unmounting filesystem. [ 25.577789][ T325] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.707811][ T296] usb 3-1: device descriptor read/64, error -71 [ 25.791459][ T476] loop0: detected capacity change from 0 to 256 [ 25.799196][ T24] uclogic 0003:5543:0003.0004: item fetching failed at offset 5/7 [ 25.807105][ T24] uclogic 0003:5543:0003.0004: parse failed [ 25.809647][ T476] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 25.813559][ T24] uclogic: probe of 0003:5543:0003.0004 failed with error -22 [ 25.824921][ T325] usb 2-1: Using ep0 maxpacket: 32 [ 25.860946][ T291] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000005) [ 25.870081][ T291] exFAT-fs (loop0): Filesystem has been set read-only [ 25.876924][ T291] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000005) [ 25.948948][ T291] syz-executor (291) used greatest stack depth: 21192 bytes left [ 25.977797][ T296] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.987889][ T325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.999336][ T325] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 26.008323][ T325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.020332][ T325] usb 2-1: config 0 descriptor?? [ 26.028073][ T428] usb 5-1: USB disconnect, device number 3 [ 26.068430][ T325] hub 2-1:0.0: USB hub found [ 26.103512][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.110463][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.118200][ T478] device bridge_slave_0 entered promiscuous mode [ 26.125430][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.132459][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.139898][ T478] device bridge_slave_1 entered promiscuous mode [ 26.210902][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.217914][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.225018][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.231905][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.247866][ T296] usb 3-1: device descriptor read/64, error -71 [ 26.269224][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.277101][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.285886][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.300699][ T325] hub 2-1:0.0: 2 ports detected [ 26.306342][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.314938][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.318427][ T492] loop3: detected capacity change from 0 to 512 [ 26.321952][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.335726][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.343927][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.349888][ T492] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.68: bg 0: block 441: padding at end of block bitmap is not set [ 26.350844][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.365127][ T492] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 26.380959][ T492] EXT4-fs (loop3): 1 orphan inode deleted [ 26.383014][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.386589][ T492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.395175][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.403245][ T492] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 26.418675][ T478] device veth0_vlan entered promiscuous mode [ 26.430013][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.438746][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.443009][ T492] process 'syz.3.68' launched './file1' with NULL argv: empty string added [ 26.446630][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.462809][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.470803][ T292] EXT4-fs (loop3): unmounting filesystem. [ 26.478728][ T478] device veth1_macvtap entered promiscuous mode [ 26.485627][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.499800][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.514832][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.648055][ T296] usb 3-1: device descriptor read/64, error -71 [ 26.747838][ T325] hub 2-1:0.0: set hub depth failed [ 26.767864][ T296] usb usb3-port1: attempt power cycle [ 26.777903][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.790675][ T325] usb 2-1: USB disconnect, device number 3 [ 26.817910][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.827792][ T60] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 27.017818][ T19] usb 4-1: Using ep0 maxpacket: 8 [ 27.067801][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 27.087834][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 27.138174][ T19] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 27.149177][ T19] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 27.158978][ T19] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 27.167786][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.177752][ T296] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.187824][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.198661][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.208541][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.221326][ T60] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 27.230202][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.238421][ T60] usb 5-1: config 0 descriptor?? [ 27.259418][ T505] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 27.271049][ T507] SELinux: failed to load policy [ 27.375175][ T509] loop1: detected capacity change from 0 to 16 [ 27.382063][ T509] erofs: (device loop1): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 27.417897][ T296] usb 3-1: device descriptor read/8, error -71 [ 27.457873][ T19] usb 4-1: string descriptor 0 read error: -71 [ 27.464340][ T19] hub 4-1:32.0: USB hub found [ 27.468952][ T6] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 27.477816][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.485650][ T6] usb 1-1: Product: syz [ 27.489733][ T6] usb 1-1: Manufacturer: syz [ 27.494166][ T6] usb 1-1: SerialNumber: syz [ 27.499339][ T6] usb 1-1: config 0 descriptor?? [ 27.547830][ T19] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 27.588012][ T19] usb 4-1: USB disconnect, device number 3 [ 27.689208][ T296] usb 3-1: device descriptor read/8, error -71 [ 27.801542][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input5 [ 27.879187][ T60] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 27.907788][ T39] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.957846][ T296] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 28.004549][ T428] usb 5-1: USB disconnect, device number 4 [ 28.127818][ T296] usb 3-1: device descriptor read/8, error -71 [ 28.148841][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 28.150553][ T532] loop3: detected capacity change from 0 to 512 [ 28.162718][ T532] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.84: inode #1: comm syz.3.84: iget: illegal inode # [ 28.175431][ T532] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.84: error while reading EA inode 1 err=-117 [ 28.188623][ T532] EXT4-fs (loop3): 1 orphan inode deleted [ 28.189830][ T6] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 28.194596][ T532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.229373][ T532] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.84: invalid indirect mapped block 234881024 (level 0) [ 28.252044][ T292] EXT4-fs (loop3): unmounting filesystem. [ 28.267897][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 28.289032][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 28.301837][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 28.313399][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.322678][ T39] usb 2-1: config 0 descriptor?? [ 28.337833][ T523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 28.358522][ T39] hub 2-1:0.0: USB hub found [ 28.397047][ T6] usb 1-1: USB disconnect, device number 2 [ 28.397814][ T296] usb 3-1: device descriptor read/8, error -71 [ 28.462069][ T559] loop3: detected capacity change from 0 to 256 [ 28.477410][ T559] exfat: Bad value for 'uid' [ 28.528434][ T296] usb usb3-port1: unable to enumerate USB device [ 28.577826][ T39] hub 2-1:0.0: 2 ports detected [ 29.024407][ T608] device syzkaller0 entered promiscuous mode [ 29.057886][ T39] hub 2-1:0.0: set hub depth failed [ 29.098497][ T39] usb 2-1: USB disconnect, device number 4 [ 29.199193][ T620] loop3: detected capacity change from 0 to 512 [ 29.209297][ T43] device bridge_slave_1 left promiscuous mode [ 29.215270][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.219630][ T620] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.231240][ T43] device bridge_slave_0 left promiscuous mode [ 29.231232][ T620] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 29.248023][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.264380][ T43] device veth1_macvtap left promiscuous mode [ 29.271039][ T292] EXT4-fs (loop3): unmounting filesystem. [ 29.274448][ T43] device veth0_vlan left promiscuous mode [ 29.323713][ T629] input: syz0 as /devices/virtual/input/input6 [ 29.398835][ T638] loop3: detected capacity change from 0 to 128 [ 29.459578][ T645] loop3: detected capacity change from 0 to 128 [ 29.509847][ T645] syz.3.119: attempt to access beyond end of device [ 29.509847][ T645] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 29.533681][ T344] kworker/u4:3: attempt to access beyond end of device [ 29.533681][ T344] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 29.589806][ T660] loop0: detected capacity change from 0 to 512 [ 29.597412][ T660] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 29.606175][ T660] EXT4-fs (loop0): invalid journal inode [ 29.611929][ T660] EXT4-fs (loop0): can't get journal size [ 29.632350][ T664] loop1: detected capacity change from 0 to 512 [ 29.637801][ T660] EXT4-fs (loop0): 1 truncate cleaned up [ 29.644031][ T660] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 29.652004][ T664] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 29.674122][ T478] EXT4-fs (loop0): unmounting filesystem. [ 29.697560][ T664] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.127: casefold flag without casefold feature [ 29.721098][ T664] EXT4-fs (loop1): 1 truncate cleaned up [ 29.728318][ T664] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 29.759064][ T295] EXT4-fs (loop1): unmounting filesystem. [ 29.793260][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 29.793277][ T28] audit: type=1400 audit(1729769070.812:283): avc: denied { read } for pid=673 comm="syz.0.130" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.847180][ T28] audit: type=1400 audit(1729769070.842:284): avc: denied { ioctl } for pid=673 comm="syz.0.130" path="/15/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.904993][ T28] audit: type=1400 audit(1729769070.862:285): avc: denied { create } for pid=677 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.930426][ T28] audit: type=1400 audit(1729769070.902:286): avc: denied { bind } for pid=677 comm="syz.0.132" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.950432][ T28] audit: type=1400 audit(1729769070.902:287): avc: denied { node_bind } for pid=677 comm="syz.0.132" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 29.972059][ T28] audit: type=1400 audit(1729769070.902:288): avc: denied { write } for pid=677 comm="syz.0.132" laddr=172.20.20.170 lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.013173][ T28] audit: type=1400 audit(1729769071.032:289): avc: denied { write } for pid=679 comm="syz.0.133" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.077758][ T303] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.078575][ T688] Illegal XDP return value 4291862088 on prog (id 86) dev N/A, expect packet loss! [ 30.307807][ T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 30.377845][ T19] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 30.426871][ T28] audit: type=1400 audit(1729769071.442:290): avc: denied { wake_alarm } for pid=692 comm="syz.3.138" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.467860][ T303] usb 2-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 30.476835][ T303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.485353][ T303] usb 2-1: config 0 descriptor?? [ 30.727937][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.738998][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.749174][ T6] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 30.758303][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.777470][ T6] usb 5-1: config 0 descriptor?? [ 30.782437][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.793521][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.797754][ T39] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.803067][ T19] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 30.819824][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.828434][ T19] usb 1-1: config 0 descriptor?? [ 30.868357][ T19] hub 1-1:0.0: USB hub found [ 30.998739][ T303] wacom 0003:056A:00B3.0006: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 31.008614][ T303] wacom 0003:056A:00B3.0006: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.1-1/input0 [ 31.020443][ T303] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B3.0006/input/input7 [ 31.167931][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.178787][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.188516][ T39] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 31.197472][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.206412][ T39] usb 4-1: config 0 descriptor?? [ 31.212018][ T303] usb 2-1: USB disconnect, device number 5 [ 31.281003][ T6] dragonrise 0003:0079:0006.0007: item fetching failed at offset 2/5 [ 31.291241][ T6] dragonrise 0003:0079:0006.0007: parse failed [ 31.297326][ T6] dragonrise: probe of 0003:0079:0006.0007 failed with error -22 [ 31.357848][ T19] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 31.467865][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 31.473635][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 31.484963][ T60] usb 5-1: USB disconnect, device number 5 [ 31.508263][ T19] usb 1-1: USB disconnect, device number 3 [ 31.688597][ T39] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 31.696034][ T39] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 31.782980][ T704] bridge0: port 3(syz_tun) entered blocking state [ 31.789389][ T704] bridge0: port 3(syz_tun) entered disabled state [ 31.796227][ T704] device syz_tun entered promiscuous mode [ 31.802028][ T704] bridge0: port 3(syz_tun) entered blocking state [ 31.808299][ T704] bridge0: port 3(syz_tun) entered forwarding state [ 31.889536][ T712] syz.1.146 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.928216][ T39] cp2112 0003:10C4:EA90.0008: error requesting version [ 31.935524][ T39] cp2112: probe of 0003:10C4:EA90.0008 failed with error -5 [ 32.008717][ T716] loop4: detected capacity change from 0 to 128 [ 32.015609][ T716] FAT-fs (loop4): bread failed, FSINFO block (sector = 4095) [ 32.127793][ T60] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.139689][ T296] usb 4-1: USB disconnect, device number 4 [ 32.159342][ T28] audit: type=1400 audit(1729769073.182:291): avc: denied { create } for pid=721 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.179095][ T28] audit: type=1400 audit(1729769073.182:292): avc: denied { connect } for pid=721 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.209503][ T19] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.218896][ T726] serio: Serial port ptm0 [ 32.457887][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 32.473097][ T740] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 32.482153][ T740] FAT-fs (loop9): unable to read boot sector [ 32.497859][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.514710][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.525089][ T60] usb 1-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 32.534394][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.546661][ T60] usb 1-1: config 0 descriptor?? [ 32.597822][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.608727][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.618496][ T19] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 32.627425][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.636501][ T19] usb 2-1: config 0 descriptor?? [ 32.849757][ T765] syz.4.168[765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.849803][ T765] syz.4.168[765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.010096][ T785] loop4: detected capacity change from 0 to 1024 [ 33.031713][ T60] wacom 0003:056A:00B8.0009: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 33.034250][ T785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.049989][ T60] wacom 0003:056A:00B8.0009: hidraw0: USB HID v0.00 Device [HID 056a:00b8] on usb-dummy_hcd.0-1/input0 [ 33.064609][ T60] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B8.0009/input/input10 [ 33.087261][ T294] EXT4-fs (loop4): unmounting filesystem. [ 33.115628][ T790] loop4: detected capacity change from 0 to 128 [ 33.122546][ T19] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0 [ 33.130524][ T19] hid-picolcd 0003:04D8:F002.000A: item fetching failed at offset 5/7 [ 33.138792][ T391] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.139263][ T19] hid-picolcd 0003:04D8:F002.000A: device report parse failed [ 33.164035][ T19] hid-picolcd: probe of 0003:04D8:F002.000A failed with error -22 [ 33.224302][ T800] loop4: detected capacity change from 0 to 128 [ 33.272588][ T806] input: syz0 as /devices/virtual/input/input13 [ 33.309212][ T296] usb 1-1: USB disconnect, device number 4 [ 33.329668][ T60] usb 2-1: USB disconnect, device number 6 [ 33.367385][ T808] loop4: detected capacity change from 0 to 512 [ 33.376237][ T808] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 33.387665][ T808] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 33.397868][ T808] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.187: Corrupt directory, running e2fsck is recommended [ 33.411315][ T808] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 33.419430][ T808] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.187: corrupted in-inode xattr [ 33.431441][ T808] EXT4-fs (loop4): Remounting filesystem read-only [ 33.438020][ T808] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.187: couldn't read orphan inode 15 (err -117) [ 33.449910][ T808] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.465454][ T808] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 33.477165][ T808] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 33.487064][ T808] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.187: Corrupt directory, running e2fsck is recommended [ 33.501012][ T808] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 33.512507][ T808] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 33.523107][ T808] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.187: Corrupt directory, running e2fsck is recommended [ 33.538392][ T808] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 33.549848][ T808] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 33.562007][ T808] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.187: Corrupt directory, running e2fsck is recommended [ 33.576560][ T808] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 33.585366][ T814] loop3: detected capacity change from 0 to 256 [ 33.591905][ T808] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #2: block 3: comm syz.4.187: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 33.594384][ T814] exfat: Deprecated parameter 'namecase' [ 33.618031][ T814] exfat: Deprecated parameter 'namecase' [ 33.624127][ T808] EXT4-fs (loop4): Remounting filesystem read-only [ 33.625741][ T814] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 33.642671][ T294] EXT4-fs (loop4): unmounting filesystem. [ 33.669097][ T816] Source file dentry negative [ 33.690752][ T292] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 33.701037][ T292] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 33.858315][ T295] bridge0: port 3(syz_tun) entered disabled state [ 33.866575][ T295] device syz_tun left promiscuous mode [ 33.872598][ T295] bridge0: port 3(syz_tun) entered disabled state [ 34.548540][ T387] device bridge_slave_1 left promiscuous mode [ 34.554616][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.592101][ T387] device bridge_slave_0 left promiscuous mode [ 34.601761][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.619285][ T387] device veth1_macvtap left promiscuous mode [ 34.639629][ T387] device veth0_vlan left promiscuous mode [ 34.927137][ T849] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.934056][ T849] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.941556][ T849] device bridge_slave_0 entered promiscuous mode [ 34.957193][ T849] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.964167][ T849] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.971471][ T849] device bridge_slave_1 entered promiscuous mode [ 34.979222][ T860] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.986056][ T860] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.993385][ T860] device bridge_slave_0 entered promiscuous mode [ 35.009112][ T860] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.016045][ T860] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.023415][ T860] device bridge_slave_1 entered promiscuous mode [ 35.042899][ T859] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.050073][ T859] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.057432][ T859] device bridge_slave_0 entered promiscuous mode [ 35.079237][ T859] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.086141][ T859] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.093464][ T859] device bridge_slave_1 entered promiscuous mode [ 35.097787][ T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 35.107470][ T855] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.114477][ T855] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.121679][ T855] device bridge_slave_0 entered promiscuous mode [ 35.144490][ T855] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.151548][ T855] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.158758][ T855] device bridge_slave_1 entered promiscuous mode [ 35.301459][ T860] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.308325][ T860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.315533][ T860] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.322435][ T860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.330388][ T855] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.337535][ T855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.344614][ T855] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.351419][ T855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.367840][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 35.372644][ T849] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.379674][ T849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.386809][ T849] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.393699][ T849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.416873][ T859] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.423753][ T859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.430966][ T859] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.437833][ T859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.448768][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.456032][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.463414][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.471024][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.478496][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.485557][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.492906][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.500075][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.520186][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.543440][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.551788][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.573063][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.581323][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.589744][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.596597][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.604074][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.612393][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.620710][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.627632][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.644958][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.652318][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.667911][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.676846][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.685184][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.687925][ T6] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 35.693407][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.701972][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.709859][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.717102][ T6] usb 5-1: Product: syz [ 35.724805][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.728143][ T6] usb 5-1: Manufacturer: syz [ 35.728161][ T6] usb 5-1: SerialNumber: syz [ 35.732821][ T6] usb 5-1: config 0 descriptor?? [ 35.735586][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.757324][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.765660][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.772640][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.781237][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.790016][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.798339][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.805461][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.825693][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.832981][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.840469][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.848671][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.856554][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.863418][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.870563][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.878639][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.886960][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.893901][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.901142][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.909740][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.917745][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.924580][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.932015][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.940184][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.949100][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.956225][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.973379][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.981741][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.989874][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.997857][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.005912][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.020251][ T849] device veth0_vlan entered promiscuous mode [ 36.027892][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.036596][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.043944][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.059784][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.068028][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.075791][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.083917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.102161][ T849] device veth1_macvtap entered promiscuous mode [ 36.117249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.126524][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.135003][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.142337][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.149692][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.157598][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.165638][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.173484][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.181464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.194993][ T860] device veth0_vlan entered promiscuous mode [ 36.207369][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.215653][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.224086][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.231926][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.244771][ T859] device veth0_vlan entered promiscuous mode [ 36.251234][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.258399][ T6] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 36.264740][ T6] usb 5-1: No valid video chain found. [ 36.270974][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.286343][ T860] device veth1_macvtap entered promiscuous mode [ 36.302149][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.310204][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.318663][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.326858][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.335033][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.343117][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.351314][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.363118][ T855] device veth0_vlan entered promiscuous mode [ 36.369403][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.377342][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.385116][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.399688][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.407668][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.416287][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.424608][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.432751][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.444668][ T859] device veth1_macvtap entered promiscuous mode [ 36.478816][ T387] device bridge_slave_1 left promiscuous mode [ 36.484939][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.506563][ T387] device bridge_slave_0 left promiscuous mode [ 36.515097][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.523216][ T387] device bridge_slave_1 left promiscuous mode [ 36.529420][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.536896][ T387] device bridge_slave_0 left promiscuous mode [ 36.542943][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.550785][ T387] device veth1_macvtap left promiscuous mode [ 36.556872][ T387] device veth0_vlan left promiscuous mode [ 36.562750][ T387] device veth1_macvtap left promiscuous mode [ 36.568665][ T387] device veth0_vlan left promiscuous mode [ 36.707087][ T855] device veth1_macvtap entered promiscuous mode [ 36.718262][ T296] usb 5-1: USB disconnect, device number 6 [ 36.733896][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.750920][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.763152][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.774552][ T60] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 36.782777][ T881] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 36.783115][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.802917][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.814313][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.822583][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.830148][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.838187][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.846522][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.854771][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.890320][ T891] loop0: detected capacity change from 0 to 256 [ 36.916051][ T891] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 36.941346][ T895] loop3: detected capacity change from 0 to 256 [ 36.949937][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 36.949954][ T28] audit: type=1400 audit(1729769077.972:313): avc: denied { append } for pid=890 comm="syz.0.213" path="/0/file2/blkio.bfq.io_merged_recursive" dev="loop0" ino=1048630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.019179][ T895] FAT-fs (loop3): Directory bread(block 64) failed [ 37.025688][ T895] FAT-fs (loop3): Directory bread(block 65) failed [ 37.033194][ T895] FAT-fs (loop3): Directory bread(block 66) failed [ 37.041245][ T895] FAT-fs (loop3): Directory bread(block 67) failed [ 37.049465][ T895] FAT-fs (loop3): Directory bread(block 68) failed [ 37.055883][ T895] FAT-fs (loop3): Directory bread(block 69) failed [ 37.062356][ T895] FAT-fs (loop3): Directory bread(block 70) failed [ 37.069281][ T895] FAT-fs (loop3): Directory bread(block 71) failed [ 37.075725][ T895] FAT-fs (loop3): Directory bread(block 72) failed [ 37.082296][ T895] FAT-fs (loop3): Directory bread(block 73) failed [ 37.146394][ T28] audit: type=1400 audit(1729769078.162:314): avc: denied { map } for pid=894 comm="syz.3.224" path="socket:[18927]" dev="sockfs" ino=18927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.169541][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.185630][ T28] audit: type=1400 audit(1729769078.162:315): avc: denied { read } for pid=894 comm="syz.3.224" path="socket:[18927]" dev="sockfs" ino=18927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.201445][ T902] loop2: detected capacity change from 0 to 40427 [ 37.210243][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.233223][ T902] F2FS-fs (loop2): heap/no_heap options were deprecated [ 37.267120][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 37.267189][ T902] F2FS-fs (loop2): invalid crc value [ 37.293604][ T902] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.307796][ T60] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 37.334775][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.337785][ T910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.349932][ T910] IPv6: NLM_F_CREATE should be set when creating new route [ 37.367244][ T60] usb 2-1: config 0 descriptor?? [ 37.377257][ T902] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.430717][ T28] audit: type=1400 audit(1729769078.452:316): avc: denied { mounton } for pid=901 comm="syz.2.227" path="/4/file0/file2" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.454751][ T860] syz-executor: attempt to access beyond end of device [ 37.454751][ T860] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 37.465610][ T923] IPv6: Can't replace route, no match found [ 37.469354][ T28] audit: type=1400 audit(1729769078.452:317): avc: denied { setattr } for pid=901 comm="syz.2.227" name="work" dev="loop2" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.496511][ T860] syz-executor: attempt to access beyond end of device [ 37.496511][ T860] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 37.517371][ T28] audit: type=1400 audit(1729769078.452:318): avc: denied { remove_name } for pid=901 comm="syz.2.227" name="#5" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.544781][ T387] kworker/u4:4: attempt to access beyond end of device [ 37.544781][ T387] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 37.545325][ T28] audit: type=1400 audit(1729769078.452:319): avc: denied { rename } for pid=901 comm="syz.2.227" name="#5" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.580327][ T28] audit: type=1400 audit(1729769078.452:320): avc: denied { unlink } for pid=901 comm="syz.2.227" name="#5" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.602613][ T28] audit: type=1400 audit(1729769078.452:321): avc: denied { unlink } for pid=901 comm="syz.2.227" name="#6" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.625884][ T28] audit: type=1400 audit(1729769078.452:322): avc: denied { append } for pid=901 comm="syz.2.227" path="/4/file0/file2/blkio.bfq.io_wait_time_recursive" dev="overlay" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.687787][ T698] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 37.697831][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.838894][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.845844][ T932] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.853630][ T932] device bridge_slave_0 entered promiscuous mode [ 37.862145][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.869071][ T932] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.876358][ T932] device bridge_slave_1 entered promiscuous mode [ 37.878639][ T60] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 37.889333][ T60] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 37.896076][ T60] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 37.903254][ T60] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 37.910107][ T60] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 37.918182][ T60] ntrig 0003:1B96:000A.000B: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 37.928004][ T698] usb 5-1: Using ep0 maxpacket: 16 [ 37.947801][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 37.972998][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.979879][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.986928][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.993802][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.011712][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.019663][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.027483][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.040684][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.048885][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.055718][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.063290][ T698] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.073187][ T698] usb 5-1: config 0 interface 0 has no altsetting 0 [ 38.074855][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.079950][ T698] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 38.079982][ T698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.098845][ T698] usb 5-1: config 0 descriptor?? [ 38.106218][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.121670][ T60] ntrig 0003:1B96:000A.000B: Firmware version: 0.0.0.0.0 (0000 0000) [ 38.131001][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.140782][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.153952][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.160802][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.168085][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 38.176943][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.188476][ T24] usb 1-1: config 0 descriptor?? [ 38.196415][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.205522][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.221828][ T932] device veth0_vlan entered promiscuous mode [ 38.228292][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.236408][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.244917][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.252840][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.266027][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.275179][ T932] device veth1_macvtap entered promiscuous mode [ 38.284349][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.294152][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.333880][ T39] usb 2-1: USB disconnect, device number 7 [ 38.342193][ T43] device bridge_slave_1 left promiscuous mode [ 38.349814][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.357397][ T43] device bridge_slave_0 left promiscuous mode [ 38.363878][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.377602][ T43] device veth1_macvtap left promiscuous mode [ 38.384405][ T43] device veth0_vlan left promiscuous mode [ 38.444182][ T947] loop2: detected capacity change from 0 to 128 [ 38.455723][ T947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.464342][ T947] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 38.498630][ T947] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:426: inode #2: comm syz.2.245: No space for directory leaf checksum. Please run e2fsck -D. [ 38.523696][ T932] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 0 [ 38.544967][ T932] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 1024 [ 38.560193][ T932] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 2048 [ 38.576733][ T932] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 3072 [ 38.593741][ T932] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 4096 [ 38.608952][ T932] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 5120 [ 38.609455][ T698] kye 0003:0458:0138.000C: unknown main item tag 0x0 [ 38.625018][ T932] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 6144 [ 38.631704][ T698] kye 0003:0458:0138.000C: unknown main item tag 0x0 [ 38.647425][ T932] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 7168 [ 38.655013][ T698] kye 0003:0458:0138.000C: unexpected long global item [ 38.674447][ T932] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 8192 [ 38.674472][ T698] kye 0003:0458:0138.000C: parse failed [ 38.674502][ T698] kye: probe of 0003:0458:0138.000C failed with error -22 [ 38.690691][ T24] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.705858][ T932] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /3/file0/lost+found: directory fails checksum at offset 9216 [ 38.708761][ T24] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.730804][ T24] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.738149][ T24] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.745626][ T24] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.753262][ T24] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.772435][ T24] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.788015][ T24] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.795579][ T24] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.803512][ T24] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 38.849419][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000D/input/input15 [ 38.862788][ T24] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 39.005302][ T24] usb 5-1: USB disconnect, device number 7 [ 39.025998][ T314] usb 1-1: USB disconnect, device number 5 [ 39.103966][ T963] syz.3.252[963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.104050][ T963] syz.3.252[963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.133315][ T932] EXT4-fs (loop2): unmounting filesystem. [ 39.268696][ T975] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.275949][ T975] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.283570][ T975] device bridge_slave_0 entered promiscuous mode [ 39.293019][ T975] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.300125][ T975] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.307232][ T975] device bridge_slave_1 entered promiscuous mode [ 39.353049][ T975] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.359942][ T975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.367048][ T975] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.373945][ T975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.391513][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.398848][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.406103][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.417812][ T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.426146][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.434518][ T698] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.441500][ T698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.448996][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.456947][ T698] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.463812][ T698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.471023][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.478860][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.495030][ T975] device veth0_vlan entered promiscuous mode [ 39.501736][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.510077][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.518224][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.525472][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.546861][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.556782][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.575125][ T975] device veth1_macvtap entered promiscuous mode [ 39.590257][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.597898][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.606104][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.634011][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.637861][ T314] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.642827][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.667756][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 39.672008][ T990] loop4: detected capacity change from 0 to 512 [ 39.694699][ T990] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.264: bg 0: block 393: padding at end of block bitmap is not set [ 39.720074][ T990] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 39.730138][ T990] EXT4-fs (loop4): 2 truncates cleaned up [ 39.735715][ T990] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.782953][ T294] EXT4-fs (loop4): unmounting filesystem. [ 39.789285][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.800248][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.810088][ T6] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 39.820515][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.820805][ T344] device bridge_slave_1 left promiscuous mode [ 39.841207][ T6] usb 2-1: config 0 descriptor?? [ 39.848739][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.860107][ T344] device bridge_slave_0 left promiscuous mode [ 39.870242][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.884899][ T344] device veth1_macvtap left promiscuous mode [ 39.890901][ T344] device veth0_vlan left promiscuous mode [ 39.997387][ T1018] loop0: detected capacity change from 0 to 1024 [ 40.004060][ T1018] EXT4-fs: Ignoring removed orlov option [ 40.010796][ T1018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.033539][ T1018] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.042022][ T314] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 40.050253][ T314] usb 4-1: config 0 has no interface number 1 [ 40.056336][ T314] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 40.067315][ T859] EXT4-fs (loop0): unmounting filesystem. [ 40.072928][ T314] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 40.086144][ T314] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 40.096815][ T314] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 40.123836][ T314] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 40.132788][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.141741][ T314] usb 4-1: config 0 descriptor?? [ 40.177914][ T296] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.178680][ T314] usb 4-1: MIDIStreaming interface descriptor not found [ 40.224390][ T1031] loop0: detected capacity change from 0 to 512 [ 40.239594][ T1031] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 40.248541][ T1031] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 40.269927][ T859] EXT4-fs (loop0): unmounting filesystem. [ 40.284385][ T1037] netlink: 'syz.0.280': attribute type 6 has an invalid length. [ 40.318801][ T6] hid-multitouch 0003:1FD2:6007.000E: unknown main item tag 0x0 [ 40.326422][ T6] hid-multitouch 0003:1FD2:6007.000E: unknown main item tag 0x0 [ 40.334528][ T6] hid-multitouch 0003:1FD2:6007.000E: unknown main item tag 0x0 [ 40.342077][ T6] hid-multitouch 0003:1FD2:6007.000E: unknown main item tag 0x0 [ 40.349680][ T6] hid-multitouch 0003:1FD2:6007.000E: unknown main item tag 0x0 [ 40.357567][ T6] hid-multitouch 0003:1FD2:6007.000E: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 40.406467][ T24] usb 4-1: USB disconnect, device number 5 [ 40.427848][ T296] usb 3-1: Using ep0 maxpacket: 32 [ 40.538123][ T6] usb 2-1: USB disconnect, device number 8 [ 40.567798][ T296] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 40.576377][ T296] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 40.585079][ T296] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 40.593955][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.603473][ T296] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.612935][ T296] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 40.626148][ T296] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 40.637042][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.646176][ T296] usb 3-1: config 0 descriptor?? [ 40.787806][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 40.908507][ T296] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 40.920082][ T296] usb 3-1: USB disconnect, device number 6 [ 40.927056][ T296] usblp0: removed [ 41.030712][ T1060] loop3: detected capacity change from 0 to 1024 [ 41.037205][ T1060] EXT4-fs: Ignoring removed orlov option [ 41.043141][ T1060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.060494][ T1062] loop1: detected capacity change from 0 to 256 [ 41.067350][ T1062] FAT-fs (loop1): bogus number of FAT sectors [ 41.070835][ T1060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.075408][ T1062] FAT-fs (loop1): Can't find a valid FAT filesystem [ 41.102061][ T855] EXT4-fs (loop3): unmounting filesystem. [ 41.137248][ T1070] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 41.187869][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.201413][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.218533][ T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 41.227915][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.239249][ T24] usb 5-1: config 0 descriptor?? [ 41.338961][ T1084] loop3: detected capacity change from 0 to 1024 [ 41.353868][ T1084] EXT4-fs: Ignoring removed orlov option [ 41.362550][ T1084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.379397][ T1084] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.420998][ T1090] loop1: detected capacity change from 0 to 16 [ 41.430556][ T1090] erofs: (device loop1): mounted with root inode @ nid 36. [ 41.435099][ T855] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 41.454662][ T855] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 41.465154][ T855] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 41.468386][ T296] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 41.487611][ T855] EXT4-fs (loop3): unmounting filesystem. [ 41.619041][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.625893][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.633263][ T1099] device bridge_slave_0 entered promiscuous mode [ 41.639649][ T39] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.652877][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.661698][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.669232][ T1099] device bridge_slave_1 entered promiscuous mode [ 41.720897][ T24] input: HID 28bd:1903 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:1903.000F/input/input16 [ 41.732991][ T296] usb 3-1: Using ep0 maxpacket: 32 [ 41.739121][ T24] uclogic 0003:28BD:1903.000F: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.4-1/input0 [ 41.806344][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.813263][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.820464][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.827323][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.857010][ T1110] loop1: detected capacity change from 0 to 40427 [ 41.865314][ T1110] F2FS-fs (loop1): heap/no_heap options were deprecated [ 41.874919][ T1110] F2FS-fs (loop1): invalid crc value [ 41.880340][ T296] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 41.881699][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.888903][ T296] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 41.897648][ T1110] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.904461][ T296] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 41.911393][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.919662][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 41.931258][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.943395][ T296] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 41.948575][ T698] usb 5-1: USB disconnect, device number 8 [ 41.953109][ T296] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.959114][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.972231][ T296] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 41.988218][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.000964][ T296] usb 3-1: config 0 descriptor?? [ 42.011103][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.019162][ T1110] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.020751][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.033667][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.047882][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.048240][ T39] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 42.058753][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.066452][ T39] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 42.071369][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.081809][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.098952][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.111790][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.125645][ T849] syz-executor: attempt to access beyond end of device [ 42.125645][ T849] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 42.129911][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.142588][ T849] syz-executor: attempt to access beyond end of device [ 42.142588][ T849] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 42.153528][ T1099] device veth0_vlan entered promiscuous mode [ 42.171446][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.179491][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.184820][ T991] kworker/u4:5: attempt to access beyond end of device [ 42.184820][ T991] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 42.186828][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.214796][ T1099] device veth1_macvtap entered promiscuous mode [ 42.221789][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.232739][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.242604][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.261098][ T296] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 42.288422][ T8] device bridge_slave_1 left promiscuous mode [ 42.296677][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.303945][ T39] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.313126][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.321131][ T8] device bridge_slave_0 left promiscuous mode [ 42.321153][ T39] usb 1-1: Product: syz [ 42.327085][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.331772][ T39] usb 1-1: Manufacturer: syz [ 42.343684][ T8] device veth1_macvtap left promiscuous mode [ 42.349841][ T8] device veth0_vlan left promiscuous mode [ 42.350370][ T39] usb 1-1: SerialNumber: syz [ 42.485210][ T1120] loop3: detected capacity change from 0 to 512 [ 42.501829][ T1120] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.318: casefold flag without casefold feature [ 42.517375][ T1120] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.318: missing EA_INODE flag [ 42.529856][ T1120] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.318: error while reading EA inode 12 err=-117 [ 42.543349][ T1120] EXT4-fs (loop3): 1 orphan inode deleted [ 42.549077][ T1120] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.571473][ T1099] EXT4-fs (loop3): unmounting filesystem. [ 42.582549][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.589682][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.599286][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 42.599304][ T28] audit: type=1400 audit(1729769083.622:346): avc: denied { read write } for pid=1009 comm="syz.2.270" name="lp0" dev="devtmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 42.608911][ T1122] device bridge_slave_0 entered promiscuous mode [ 42.641838][ T28] audit: type=1400 audit(1729769083.622:347): avc: denied { open } for pid=1009 comm="syz.2.270" path="/dev/usb/lp0" dev="devtmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 42.666965][ T28] audit: type=1400 audit(1729769083.682:348): avc: denied { ioctl } for pid=1009 comm="syz.2.270" path="/dev/usb/lp0" dev="devtmpfs" ino=517 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 42.668535][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.699090][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.706569][ T1122] device bridge_slave_1 entered promiscuous mode [ 42.737738][ T314] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 42.737834][ T39] usb 1-1: 0:2 : does not exist [ 42.761327][ T39] usb 1-1: USB disconnect, device number 6 [ 42.778568][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.785458][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.792568][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.799374][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.829268][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.831595][ T1131] syz.3.320[1131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.836667][ T1131] syz.3.320[1131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.852202][ T1131] loop3: detected capacity change from 0 to 256 [ 42.858354][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.879728][ T1131] FAT-fs (loop3): bogus number of FAT sectors [ 42.885780][ T1131] FAT-fs (loop3): Can't find a valid FAT filesystem [ 42.893123][ T698] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.908279][ T936] usb 3-1: USB disconnect, device number 7 [ 42.914720][ T936] usblp0: removed [ 42.918761][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.938725][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.945605][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.952986][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.961700][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.968602][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.989990][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.019343][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.037372][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.048558][ T1122] device veth0_vlan entered promiscuous mode [ 43.061987][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.070384][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.078999][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.094490][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.102375][ T314] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 43.115145][ T1122] device veth1_macvtap entered promiscuous mode [ 43.121565][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.126585][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.132554][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.149931][ T314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 43.162881][ T314] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 43.172295][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.182080][ T314] usb 5-1: config 0 descriptor?? [ 43.192188][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.221252][ T1140] loop1: detected capacity change from 0 to 256 [ 43.457911][ T698] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.508328][ T8] device bridge_slave_1 left promiscuous mode [ 43.514438][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.521980][ T8] device bridge_slave_0 left promiscuous mode [ 43.528294][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.535829][ T8] device veth1_macvtap left promiscuous mode [ 43.542103][ T8] device veth0_vlan left promiscuous mode [ 43.649224][ T314] nintendo 0003:057E:2009.0010: collection stack underflow [ 43.656323][ T314] nintendo 0003:057E:2009.0010: item 0 4 0 12 parsing failed [ 43.663821][ T314] nintendo 0003:057E:2009.0010: HID parse failed [ 43.670830][ T314] nintendo 0003:057E:2009.0010: probe - fail = -22 [ 43.677348][ T314] nintendo: probe of 0003:057E:2009.0010 failed with error -22 [ 43.707824][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 43.817906][ T698] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 43.829380][ T698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.838405][ T698] usb 4-1: config 0 descriptor?? [ 43.858852][ T6] usb 5-1: USB disconnect, device number 9 [ 43.877593][ T1152] loop1: detected capacity change from 0 to 1024 [ 43.884144][ T1152] EXT4-fs: Ignoring removed orlov option [ 43.892547][ T1152] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.909336][ T1152] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.948336][ T1122] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 43.962916][ T1122] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 43.972698][ T1122] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 43.986551][ T1122] EXT4-fs (loop1): unmounting filesystem. [ 44.098618][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.109586][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.119239][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 44.128122][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.139170][ T24] usb 3-1: config 0 descriptor?? [ 44.145914][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.152881][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.160155][ T1159] device bridge_slave_0 entered promiscuous mode [ 44.166763][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.173933][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.181484][ T39] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 44.181884][ T1159] device bridge_slave_1 entered promiscuous mode [ 44.226797][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.234036][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.241182][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.248421][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.270058][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.278404][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.285592][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.303586][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.307865][ T698] usb 4-1: Cannot set MAC address [ 44.312110][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.316998][ T698] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 44.324105][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.324580][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.333533][ T698] usb 4-1: USB disconnect, device number 6 [ 44.342269][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.359483][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.369081][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.376802][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.397941][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.410842][ T1159] device veth0_vlan entered promiscuous mode [ 44.418034][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.426008][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.433685][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.446459][ T1159] device veth1_macvtap entered promiscuous mode [ 44.453165][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.463639][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.474495][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.598064][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.608935][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.609109][ T344] device bridge_slave_1 left promiscuous mode [ 44.624599][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.624953][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 44.644611][ T344] device bridge_slave_0 left promiscuous mode [ 44.645861][ T24] wacom 0003:056A:00B8.0011: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 44.650768][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.660709][ T24] wacom 0003:056A:00B8.0011: hidraw0: USB HID v0.00 Device [HID 056a:00b8] on usb-dummy_hcd.2-1/input0 [ 44.677563][ T39] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 44.686561][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.686833][ T344] device veth1_macvtap left promiscuous mode [ 44.695162][ T24] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B8.0011/input/input17 [ 44.700609][ T344] device veth0_vlan left promiscuous mode [ 44.718701][ T39] usb 1-1: config 0 descriptor?? [ 44.858474][ T936] usb 3-1: USB disconnect, device number 8 [ 45.198421][ T39] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 45.205361][ T39] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 45.212383][ T39] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 45.219126][ T39] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 45.225735][ T39] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 45.233167][ T39] ntrig 0003:1B96:000A.0012: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 45.417789][ T39] ntrig 0003:1B96:000A.0012: Firmware version: 0.0.0.0.0 (0000 0000) [ 45.624174][ T6] usb 1-1: USB disconnect, device number 7 [ 45.647767][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.747763][ T39] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 45.747763][ T698] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 45.997977][ T698] usb 3-1: Using ep0 maxpacket: 16 [ 46.037869][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.049045][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.058681][ T24] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 46.067503][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.076132][ T24] usb 4-1: config 0 descriptor?? [ 46.117843][ T698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.117843][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.142032][ T698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.152124][ T698] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 46.161070][ T698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.172551][ T698] usb 3-1: config 0 descriptor?? [ 46.190997][ T1195] loop0: detected capacity change from 0 to 1024 [ 46.200303][ T1195] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 46.215543][ T1195] syz.0.346 (pid 1195) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 46.229883][ T859] EXT4-fs (loop0): unmounting filesystem. [ 46.297961][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.306957][ T28] audit: type=1400 audit(1729769087.322:349): avc: denied { append } for pid=1205 comm="syz.0.351" name="ppp" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.331570][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.340446][ T39] usb 2-1: Product: syz [ 46.344699][ T39] usb 2-1: Manufacturer: syz [ 46.349546][ T39] usb 2-1: SerialNumber: syz [ 46.569693][ T24] zydacron 0003:13EC:0006.0013: unknown main item tag 0x0 [ 46.576723][ T24] zydacron 0003:13EC:0006.0013: unknown main item tag 0x0 [ 46.584150][ T24] zydacron 0003:13EC:0006.0013: unknown main item tag 0x0 [ 46.591507][ T24] zydacron 0003:13EC:0006.0013: unknown main item tag 0x0 [ 46.599846][ T24] zydacron 0003:13EC:0006.0013: item fetching failed at offset 4/5 [ 46.607794][ T24] zydacron 0003:13EC:0006.0013: parse failed [ 46.613627][ T24] zydacron: probe of 0003:13EC:0006.0013 failed with error -22 [ 46.648603][ T698] savu 0003:1E7D:2D5A.0014: item fetching failed at offset 2/5 [ 46.656139][ T698] savu 0003:1E7D:2D5A.0014: parse failed [ 46.661611][ T698] savu: probe of 0003:1E7D:2D5A.0014 failed with error -22 [ 46.771084][ T698] usb 4-1: USB disconnect, device number 7 [ 46.827782][ T314] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 46.847848][ T6] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 46.855387][ T24] usb 3-1: USB disconnect, device number 9 [ 47.187817][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.198806][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.208721][ T6] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 47.216911][ T6] usb 1-1: config 0 has no interface number 1 [ 47.222983][ T314] usb 5-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 47.231906][ T6] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 47.241523][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.249520][ T6] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 47.260656][ T314] usb 5-1: config 0 descriptor?? [ 47.265492][ T6] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 47.275241][ T6] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 47.285188][ T6] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 47.296468][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.306506][ T6] usb 1-1: config 0 descriptor?? [ 47.348243][ T6] usb 1-1: MIDIStreaming interface descriptor not found [ 47.487791][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 47.494292][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 47.501848][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 47.551425][ T296] usb 1-1: USB disconnect, device number 8 [ 47.567773][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 47.647744][ T936] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 47.738634][ T314] wacom 0003:056A:00B8.0015: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 47.748648][ T314] wacom 0003:056A:00B8.0015: hidraw0: USB HID v0.00 Device [HID 056a:00b8] on usb-dummy_hcd.4-1/input0 [ 47.760095][ T314] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B8.0015/input/input20 [ 47.907817][ T39] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 47.918016][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 47.932108][ T39] usb 2-1: USB disconnect, device number 9 [ 47.938531][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 47.948206][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 47.960861][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 47.973791][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.994925][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.004189][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.021184][ T24] usb 4-1: config 0 descriptor?? [ 48.026572][ T296] ================================================================== [ 48.034466][ T296] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 48.042186][ T296] Read of size 8 at addr ffff888117b5acf0 by task kworker/1:3/296 [ 48.049836][ T296] [ 48.051999][ T296] CPU: 1 PID: 296 Comm: kworker/1:3 Not tainted 6.1.99-syzkaller-00075-g5722a4dd8b27 #0 [ 48.061555][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.071443][ T296] Workqueue: events linkwatch_event [ 48.076472][ T296] Call Trace: [ 48.079692][ T296] [ 48.082546][ T296] dump_stack_lvl+0x151/0x1b7 [ 48.087062][ T296] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 48.092359][ T296] ? _printk+0xd1/0x111 [ 48.096352][ T296] ? __virt_addr_valid+0x242/0x2f0 [ 48.101300][ T296] print_report+0x158/0x4e0 [ 48.105642][ T296] ? __virt_addr_valid+0x242/0x2f0 [ 48.110584][ T296] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 48.116833][ T296] ? __list_del_entry_valid+0xa6/0x130 [ 48.122129][ T296] kasan_report+0x13c/0x170 [ 48.126467][ T296] ? __list_del_entry_valid+0xa6/0x130 [ 48.131818][ T296] ? neigh_periodic_work+0xafb/0xb60 [ 48.136888][ T296] __asan_report_load8_noabort+0x14/0x20 [ 48.142352][ T296] __list_del_entry_valid+0xa6/0x130 [ 48.147565][ T296] process_one_work+0x4d7/0xcb0 [ 48.152339][ T296] worker_thread+0xa60/0x1260 [ 48.156853][ T296] kthread+0x26d/0x300 [ 48.160925][ T296] ? worker_clr_flags+0x1a0/0x1a0 [ 48.165788][ T296] ? kthread_blkcg+0xd0/0xd0 [ 48.170317][ T296] ret_from_fork+0x1f/0x30 [ 48.174697][ T296] [ 48.177550][ T296] [ 48.179720][ T296] Allocated by task 39: [ 48.183733][ T296] kasan_set_track+0x4b/0x70 [ 48.188142][ T296] kasan_save_alloc_info+0x1f/0x30 [ 48.193108][ T296] __kasan_kmalloc+0x9c/0xb0 [ 48.197748][ T296] __kmalloc_node+0xb4/0x1e0 [ 48.202416][ T296] kvmalloc_node+0x221/0x640 [ 48.206811][ T296] alloc_netdev_mqs+0x8c/0xf90 [ 48.211426][ T296] alloc_etherdev_mqs+0x36/0x40 [ 48.216094][ T296] usbnet_probe+0x207/0x27c0 [ 48.220523][ T296] usb_probe_interface+0x5b6/0xa90 [ 48.225468][ T296] really_probe+0x2b8/0x920 [ 48.229895][ T296] __driver_probe_device+0x1a0/0x310 [ 48.235020][ T296] driver_probe_device+0x54/0x3d0 [ 48.239875][ T296] __device_attach_driver+0x2e3/0x490 [ 48.245171][ T296] bus_for_each_drv+0x183/0x200 [ 48.249869][ T296] __device_attach+0x312/0x510 [ 48.254465][ T296] device_initial_probe+0x1a/0x20 [ 48.259316][ T296] bus_probe_device+0xbe/0x1e0 [ 48.263927][ T296] device_add+0xb60/0xf10 [ 48.268175][ T296] usb_set_configuration+0x190f/0x1e80 [ 48.273487][ T296] usb_generic_driver_probe+0x8b/0x150 [ 48.279004][ T296] usb_probe_device+0x144/0x260 [ 48.283718][ T296] really_probe+0x2b8/0x920 [ 48.288022][ T296] __driver_probe_device+0x1a0/0x310 [ 48.293144][ T296] driver_probe_device+0x54/0x3d0 [ 48.298005][ T296] __device_attach_driver+0x2e3/0x490 [ 48.303364][ T296] bus_for_each_drv+0x183/0x200 [ 48.308045][ T296] __device_attach+0x312/0x510 [ 48.312990][ T296] device_initial_probe+0x1a/0x20 [ 48.317849][ T296] bus_probe_device+0xbe/0x1e0 [ 48.322468][ T296] device_add+0xb60/0xf10 [ 48.326621][ T296] usb_new_device+0xf2f/0x1820 [ 48.331222][ T296] hub_event+0x2db1/0x4830 [ 48.335489][ T296] process_one_work+0x73d/0xcb0 [ 48.340166][ T296] worker_thread+0xa60/0x1260 [ 48.344845][ T296] kthread+0x26d/0x300 [ 48.348763][ T296] ret_from_fork+0x1f/0x30 [ 48.353008][ T296] [ 48.355175][ T296] Freed by task 39: [ 48.358828][ T296] kasan_set_track+0x4b/0x70 [ 48.363248][ T296] kasan_save_free_info+0x2b/0x40 [ 48.368110][ T296] ____kasan_slab_free+0x131/0x180 [ 48.373056][ T296] __kasan_slab_free+0x11/0x20 [ 48.377659][ T296] __kmem_cache_free+0x218/0x3b0 [ 48.382430][ T296] kfree+0x7a/0xf0 [ 48.385990][ T296] kvfree+0x35/0x40 [ 48.389634][ T296] netdev_freemem+0x3f/0x60 [ 48.394065][ T296] netdev_release+0x7f/0xb0 [ 48.398526][ T296] device_release+0x95/0x1c0 [ 48.402948][ T296] kobject_put+0x178/0x260 [ 48.407202][ T296] put_device+0x1f/0x30 [ 48.411283][ T296] free_netdev+0x393/0x480 [ 48.415530][ T296] usbnet_disconnect+0x245/0x390 [ 48.420419][ T296] usb_unbind_interface+0x1fa/0x8c0 [ 48.425517][ T296] device_release_driver_internal+0x53e/0x870 [ 48.431414][ T296] device_release_driver+0x19/0x20 [ 48.436361][ T296] bus_remove_device+0x2fa/0x360 [ 48.441143][ T296] device_del+0x663/0xe90 [ 48.445306][ T296] usb_disable_device+0x380/0x720 [ 48.450467][ T296] usb_disconnect+0x32a/0x890 [ 48.455099][ T296] hub_event+0x1ed8/0x4830 [ 48.459350][ T296] process_one_work+0x73d/0xcb0 [ 48.464149][ T296] worker_thread+0xd71/0x1260 [ 48.468648][ T296] kthread+0x26d/0x300 [ 48.472551][ T296] ret_from_fork+0x1f/0x30 [ 48.476802][ T296] [ 48.478988][ T296] Last potentially related work creation: [ 48.484618][ T296] kasan_save_stack+0x3b/0x60 [ 48.489414][ T296] __kasan_record_aux_stack+0xb4/0xc0 [ 48.494772][ T296] kasan_record_aux_stack_noalloc+0xb/0x10 [ 48.500411][ T296] insert_work+0x56/0x310 [ 48.504583][ T296] __queue_work+0x9b6/0xd70 [ 48.508919][ T296] queue_work_on+0x105/0x170 [ 48.513347][ T296] usbnet_link_change+0xeb/0x100 [ 48.518129][ T296] usbnet_probe+0x1dbe/0x27c0 [ 48.522644][ T296] usb_probe_interface+0x5b6/0xa90 [ 48.527589][ T296] really_probe+0x2b8/0x920 [ 48.532020][ T296] __driver_probe_device+0x1a0/0x310 [ 48.537218][ T296] driver_probe_device+0x54/0x3d0 [ 48.542078][ T296] __device_attach_driver+0x2e3/0x490 [ 48.547286][ T296] bus_for_each_drv+0x183/0x200 [ 48.551972][ T296] __device_attach+0x312/0x510 [ 48.556583][ T296] device_initial_probe+0x1a/0x20 [ 48.561435][ T296] bus_probe_device+0xbe/0x1e0 [ 48.566118][ T296] device_add+0xb60/0xf10 [ 48.570288][ T296] usb_set_configuration+0x190f/0x1e80 [ 48.575669][ T296] usb_generic_driver_probe+0x8b/0x150 [ 48.581150][ T296] usb_probe_device+0x144/0x260 [ 48.586284][ T296] really_probe+0x2b8/0x920 [ 48.590708][ T296] __driver_probe_device+0x1a0/0x310 [ 48.595909][ T296] driver_probe_device+0x54/0x3d0 [ 48.600775][ T296] __device_attach_driver+0x2e3/0x490 [ 48.605985][ T296] bus_for_each_drv+0x183/0x200 [ 48.610668][ T296] __device_attach+0x312/0x510 [ 48.615260][ T296] device_initial_probe+0x1a/0x20 [ 48.620296][ T296] bus_probe_device+0xbe/0x1e0 [ 48.624899][ T296] device_add+0xb60/0xf10 [ 48.629154][ T296] usb_new_device+0xf2f/0x1820 [ 48.633991][ T296] hub_event+0x2db1/0x4830 [ 48.638234][ T296] process_one_work+0x73d/0xcb0 [ 48.643093][ T296] worker_thread+0xa60/0x1260 [ 48.647694][ T296] kthread+0x26d/0x300 [ 48.651697][ T296] ret_from_fork+0x1f/0x30 [ 48.655937][ T296] [ 48.658109][ T296] The buggy address belongs to the object at ffff888117b5a000 [ 48.658109][ T296] which belongs to the cache kmalloc-4k of size 4096 [ 48.671996][ T296] The buggy address is located 3312 bytes inside of [ 48.671996][ T296] 4096-byte region [ffff888117b5a000, ffff888117b5b000) [ 48.685368][ T296] [ 48.687646][ T296] The buggy address belongs to the physical page: [ 48.693898][ T296] page:ffffea00045ed600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117b58 [ 48.703963][ T296] head:ffffea00045ed600 order:3 compound_mapcount:0 compound_pincount:0 [ 48.712206][ T296] flags: 0x4000000000010200(slab|head|zone=1) [ 48.718120][ T296] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380 [ 48.726535][ T296] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 48.734947][ T296] page dumped because: kasan: bad access detected [ 48.741201][ T296] page_owner tracks the page as allocated [ 48.746755][ T296] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 106, tgid 106 (udevd), ts 4311409807, free_ts 0 [ 48.766465][ T296] post_alloc_hook+0x213/0x220 [ 48.771070][ T296] prep_new_page+0x1b/0x110 [ 48.775507][ T296] get_page_from_freelist+0x2980/0x2a10 [ 48.780870][ T296] __alloc_pages+0x234/0x610 [ 48.785296][ T296] alloc_slab_page+0x6c/0xf0 [ 48.789724][ T296] new_slab+0x90/0x3e0 [ 48.793629][ T296] ___slab_alloc+0x6f9/0xb80 [ 48.798058][ T296] __slab_alloc+0x5d/0xa0 [ 48.802654][ T296] __kmem_cache_alloc_node+0x1af/0x250 [ 48.808035][ T296] kmalloc_trace+0x2a/0xa0 [ 48.812291][ T296] uevent_show+0x158/0x330 [ 48.816552][ T296] dev_attr_show+0x56/0xd0 [ 48.820798][ T296] sysfs_kf_seq_show+0x27c/0x3a0 [ 48.825665][ T296] kernfs_seq_show+0x119/0x160 [ 48.830355][ T296] seq_read_iter+0x430/0xd00 [ 48.834773][ T296] kernfs_fop_read_iter+0x145/0x470 [ 48.839809][ T296] page_owner free stack trace missing [ 48.845101][ T296] [ 48.847273][ T296] Memory state around the buggy address: [ 48.852830][ T296] ffff888117b5ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.860730][ T296] ffff888117b5ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.868688][ T296] >ffff888117b5ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.876522][ T296] ^ [ 48.884078][ T296] ffff888117b5ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.892060][ T296] ffff888117b5ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.899960][ T296] ================================================================== [ 48.907856][ T296] Disabling lock debugging due to kernel taint [ 48.915888][ T1226] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 48.918132][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.934376][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.945516][ T936] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 48.954418][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.963450][ T936] usb 3-1: config 0 descriptor?? [ 48.969023][ T296] usb 5-1: USB disconnect, device number 10 [ 49.408398][ T24] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 49.416182][ T24] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 49.425273][ T24] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 49.458123][ T936] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 49.467140][ T936] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0017/input/input24 [ 49.549863][ T936] keytouch 0003:0926:3333.0017: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 49.664590][ T936] usb 3-1: USB disconnect, device number 10 [ 49.678850][ T6] usb 4-1: USB disconnect, device number 8